Interfaces
WinRoute functions as a router for all WinRoute's network interfaces installed within the system. The interfaces are listed in the Configuration / Interface section of the WinRoute Administration Console.
Interface
The name used for interface identification within WinRoute. It should be unique for easy reference, e.g. Internet for the interface connected to the Internet connection. We recommend you not to use duplicate interface names as they could cause problems during traffic policy definitions or routing table modifications.
The name can be edited later (see below) with no affect on WinRoute's functionality.
The icon to the left of the name represents the interface type (network adapter, dial-up connection, satellite connection, VPN server, VPN tunnel).
Note: Unless the name is edited manually, this item displays the name of the adapter as assigned by the operating system (see the Adapter name entry).
IP Address and Mask
IP address and the mask of this interface's subnet.
Adapter name
The name of the adapter (e.g. LAN connection 2). The name is for reference only.
Adapter info
Adapter identification string returned by the device driver.
ID
A unique identifier of the adapter in the operating system (see also chapter Backup and Import of Configuration).
MAC
Hardware (MAC) address of a corresponding network adapter.
Use the buttons at the bottom of the interface list to remove or edit properties of the chosen interface. If no interface is chosen or the selected interface does not support a certain function, appropriate buttons will be inactive.
Add
Adds a new dial-up interface or a VPN channel (see below).
If a new network adapter is added it must be installed and configured in the operating system first in order to for WinRoute to detect it automatically.
Edit
Displays detailed information and enables editing of the interface's parameters.
Remove
Removes the selected interface from WinRoute. This can be done under the following conditions:
-
the dial-up is hung-up
-
the network adapter is not active or it is not physically present
WinRoute does not allow removing an active network or dial-up adapter.
Notes:
-
Records on adapters that do not exist any longer (those that have been removed) do not affect WinRoute's functionality such adapters are considered as inactive (as in case of a hung-up dial-up).
-
When an adapter is removed, the Nothing value is automatically used for corresponding items of all traffic rules where the interface was used. These rules will be disabled. This ensures that the traffic policy is not endangered (for details, refer to chapter Definition of Custom Traffic Rules).
Dial or Hang Up
You can use WinRoute's Web interface (see chapter Web Interface and User Authentication) to dial or hang up lines. If a network adapter is selected, these buttons are inactive.
Refresh
Use this button to refresh the list of interfaces.
Note: Up to 128 IP addresses can be used for each network interface.
Special interfaces
In addition to network adapters, the following two interfaces are provided in the Interfaces section:
Dial-In
This interface represents the server of the RAS service (dial-up connection to the network) on the WinRoute host. This interface can be used for definition of traffic rules (see chapter Traffic Policy) for RAS clients which are connecting to this server.
The Dial-In interface cannot be configured or removed.
Notes:
-
If both the RAS server and WinRoute are used, the RAS server must be configured so that it assigns clients IP addresses from a subnet which is not used in any segment of the local network, otherwise standard IP routing will not be performed properly.
-
WinRoute DHCP server can be used for assigning IP addresses to RAS clients (see chapter DHCP server).
VPN server
This interface represents a server which provides a connection for the proprietary VPN client of Kerio Technologies. Double-click on this interface or click on Edit to edit settings and parameters of the VPN server. The VPN server interface cannot be removed.
For detailed information on the proprietary VPN solution in WinRoute refer to chapter Kerio VPN.
Adding Interfaces
Click on the Add button to add a new interface, either a dial-up or a VPN tunnel (i.e. server-to-server VPN connection).
The following text describes only new dial-up connections. Description on how to add a VPN tunnel is provided in chapter Interconnection of two private networks via the Internet (VPN tunnel).
Bind this interface...
Select the Windows RAS connection that you use to connect to your ISP.
Notes:
-
WinRoute searches for connections only in the system phonebook. When creating a new connection for WinRoute it is necessary to set that dial-up connections are available to all users, otherwise the operating system saves a corresponding dial-up connection in the profile of the user who created it and WinRoute will not be able to find the connection).
-
We recommend you to test any dial-up connection you create before WinRoute is installed.
Interface name
Unique name that will identify the line within WinRoute.
In the Dialing Settings tab you can specify the details of when and how the line will be dialed. Manual dialing is set as default.
RAS Entry
The Windows Dial-up Connection entry that has been selected in the Interface identification tab. The name RAS item is displayed for informational purposes.
Use login data from the RAS entry
Enable this option to use login data saved in a corresponding RAS Entry configuration for authentication at the remote server.
Use the following login data
Use the Username and Password entries to enter login data which will be used for authentication at the remote server. This option can be useful for example when for any reason it is not desirable to save the login data in the operating system, when the data is supposed to be edited remotely (via the Administration Console) or in case of problem solving.
Connection
Connection type that can be used for dialing:
-
Manual the line can only be dialed manually, either from the Kerio Administration Console or from WinRoute's Web interface (see chapter Web Interface and User Authentication).
-
On Demand the line will be dialed whenever a host on the LAN tries to access the Internet (incoming packet). To see details about the WinRoute and system on-demand dial configuration refer to chapter Demand Dial.
-
Persistent the line will be dialed immediately after the WinRoute Firewall Engine service is started and it will be kept active (and will be reconnected if the line is dropped for some reason).
-
Custom here you can set with great detail and complexity when the line should be dialed persistently or on demand or not dialed at all.
In sections of the dialog window you can select time ranges for each dialing type. Click on the Edit button to open a dialog where time ranges can be created or edited. For more information about time ranges refer to chapter Time Ranges.
This is how the user defined dialing works:
-
The Keep the line disconnected option is processed prior to all other options. The line is kept disconnected during this period (or it is hung-up automatically).
-
The time range for the Keep the line connected option is processed as seconds. During this period the line will be kept connected.
-
The On demand dial enabled option is processed with the lowest priority. If the always option is selected, on-demand dial will be allowed anytime when it is not conflicting with the time range of the never option.
-
Options
Advanced parameters for the Manual, On Demand and Custom dial types. In case of persistent connection these options are irrelevant (WinRoute keeps the line connected).
Hangup if idle
Defines time range during which no data will be allowed to pass through this interface. Outside this period, the line will be disconnected automatically. With each incoming or outgoing packet, the timer of inactivity is set to zero.
There is no such thing as optimum length of the timeout period. If it is too short, the line is dialed too frequently, if too long, the line is kept connected too long. Both increase the Internet connection costs.
Redial when busy
If line is busy when dialed, WinRoute will redial unless either connected successfully or the maximal user defined number of attempts is completed. If the connection attempt fails, the demand on dial will be ignored. According to this fact, connection attempts will not be repeated later automatically.
Reconnect if line is dropped
If line drop-out is detected, WinRoute will try to reconnect automatically.
Advanced dialing settings
WinRoute allows launching an application or a command in the following situations: Before dial, After dial, Before hang-up or/and After hang-up.
Path to the executable file must be complete. If the path includes spaces it must be closed into quotes, otherwise the part after a space will be considered as a parameter(s) of a batch file. If the path to the file is quoted, the text which follows the closing quote mark is also considered as batch file parameter(s).
Warning: If WinRoute is running as a service in the operating system, the application will be executed in the background.
Note: In case of the Before dial and Before hang-up options, the system does not wait for its completion after startup of the program.
Edit Interface parameters
Click Edit to modify parameters of a selected interface. The Interface properties dialog, identical with the dialog for adding of a new RAS dial-up, is opened in case of RAS dial-ups. Only the Interface name entry can be edited in case of network adapters.
For VPN server and VPN tunnels, a dialog for setting of the VPN server (see chapter VPN Server Configuration) or a VPN tunnel (for details, refer to chapter Interconnection of two private networks via the Internet (VPN tunnel)) will be opened.
