Tip

This is the documentation for the 19.12 version. Looking for the documentation of the latest version? Have a look here.

TNSR Documentation

This documentation has all the details needed to fully configure your TNSR platform, from the basics of TNSR all the way to the complexities of implementing different applications. For quotes, updates, and more information about TNSR, please visit tnsr.com or contact TNSR sales.

PDF Version

• Introduction
  • TNSR Secure Networking
  • TNSR Trial
  • TNSR Architecture
  • Technology Stack
  • Basic Assumptions
• Supported Platforms
• Installation
• Default Behavior
  • Default Accounts and Passwords
  • Default TNSR Permissions
  • Default Allowed Traffic
• Zero-to-Ping
  • First Login
  • Interface Configuration
  • TNSR Interfaces
  • NAT
  • DHCP Server
  • DNS Server
  • Ping
  • Save the TNSR Configuration
  • Next Steps
• Command Line Basics
  • Working in the TNSR CLI
  • Finding Help
  • Starting TNSR
  • Entering the TNSR CLI
  • Configuration Database
  • Configuration Mode
  • Configuration Backups
  • Viewing Status Information
  • Service Control
  • Diagnostic Utilities
  • Basic System Information
• Basic Configuration
  • Setup Interfaces
  • Disable Host OS NICs for TNSR
  • Setup NICs in Dataplane
  • Setup QAT Compatible Hardware
  • Remove TNSR NIC for Host Use
• Updates and Packages
  • Generate a Key Pair
  • Generate a Certificate Signing Request
  • Submit the Certificate Signing Request
  • Retrieve the signed certificate
  • Install the certificate
  • Package Management
  • Package Information Commands
  • Package Installation
  • Updating TNSR
• Interfaces
  • Locate Interfaces
  • Configure Interfaces
  • Types of Interfaces
• Static Routing
  • Route Tables
  • Neighbors
  • Viewing Routes
  • Managing Routes
  • Default Route
• Dynamic Routing
  • Dynamic Routing Manager
  • Border Gateway Protocol
  • Open Shortest Path First v2 (OSPF)
  • Open Shortest Path First v3 (OSPF6)
  • Routing Information Protocol (RIP)
  • Dynamic Routing Protocol Lists
• Virtual Router Redundancy Protocol
  • VRRP Compatibility
  • VRRP Example
  • VRRP Configuration
  • VRRP Status
• Access Lists
  • Standard ACLs
  • MACIP ACLs
  • Viewing ACL and MACIP Information
  • ACL and NAT Interaction
  • Host ACLs
• IPsec
  • Required Information
  • IPsec Example
  • IPsec Configuration
  • IPsec Status Information
  • IPsec Cryptographic Acceleration
• Network Address Translation
  • Dataplane NAT Modes
  • NAT Options
  • NAT Pool Addresses
  • Outbound NAT
  • Static NAT
  • NAT Reassembly
  • Dual-Stack Lite
  • Deterministic NAT
  • NAT Status
  • NAT Examples
• MAP (Mapping of Address and Port)
  • MAP Configuration
  • MAP Parameters
  • MAP Example
  • MAP Types
• Dynamic Host Configuration Protocol
  • DHCP Configuration
  • DHCP Service Control and Status
  • DHCP Service Example
• DNS Resolver
  • DNS Resolver Configuration
  • DNS Resolver Service Control and Status
  • DNS Resolver Examples
• Network Time Protocol
  • NTP Configuration
  • NTP Service Control and Status
  • NTP Service Example
  • NTP Best Practices
• Link Layer Discovery Protocol
  • Configuring the LLDP Service
• Public Key Infrastructure
  • Key Management
  • Certificate Signing Request Management
  • Certificate Management
  • Certificate Authority Management
• Bidirectional Forwarding Detection
  • BFD Sessions
  • BFD Session Authentication
  • BFD Example
• User Management
  • User Configuration
  • Authentication Methods
• NETCONF Access Control Model (NACM)
  • NACM Example
  • View NACM Configuration
  • Enable or Disable NACM
  • NACM Default Policy Actions
  • NACM Username Mapping
  • NACM Groups
  • NACM Rule Lists
  • NACM Rules
  • NACM Rule Processing Order
  • Regaining Access if Locked Out by NACM
  • NACM Defaults
• HTTP Server
  • HTTP Server Configuration
  • HTTPS Encryption
  • Authentication
  • RESTCONF Server
• Monitoring
  • Monitoring Interfaces
  • Simple Network Management Protocol
  • Viewing Status Information
• TNSR Configuration Example Recipes
  • RESTCONF Service Setup with Certificate-Based Authentication and NACM
  • TNSR IPsec Hub for pfSense
  • Edge Router Speaking eBGP with Static Redistribution for IPv4 And IPv6
  • Service Provider Route Reflectors and Client for iBGP IPv4
  • LAN + WAN with NAT (Basic SOHO Router Including DHCP and DNS Resolver)
  • Using Access Control Lists (ACLs)
  • Inter-VLAN Routing
  • GRE ERSPAN Example Use Case
  • OSPF Router with Multiple Areas and Summarization
• Advanced Configuration
  • Dataplane Configuration
  • Host Memory Management Configuration
  • IP Reassembly Options
• Troubleshooting
  • Ping and traceroute do not function without host OS default route
  • Unrecognized routes in a routing table
  • Services do not receive traffic on an interface with NAT enabled
  • NAT session limits / “Create NAT session failed” error
  • ACL rules do not match NAT traffic as expected
  • Some Traffic to the host OS management interface is dropped
  • Locked out by NACM Rules
  • How to gain access to the root account
  • Console Messages Obscure Prompts
  • OSPF Neighbors Stuck in ExStart State
  • Diagnosing Service Issues
  • Debugging TNSR
• Commands
  • Mode List
  • Master Mode Commands
  • Config Mode Commands
  • Show Commands in Both Master and Config Modes
  • Access Control List Modes
  • MACIP ACL Mode
  • GRE Mode
  • HTTP mode
  • Interface Mode
  • Loopback Mode
  • Bridge Mode
  • NAT Commands in Configure Mode
  • NAT Reassmbly Mode
  • DS-Lite Commands in Configure Mode
  • Tap Mode
  • BFD Key Mode
  • BFD Mode
  • Host Interface Mode
  • IPsec Tunnel Mode
  • IKE mode
  • IKE Peer Authentication Mode
  • IKE Peer Authentication Round Mode
  • IKE Child SA Mode
  • IKE Child SA Proposal Mode
  • IKE Peer Identity Mode
  • IKE Proposal Mode
  • Map Mode
  • Map Parameters Mode
  • memif Mode
  • Dynamic Routing Access List Mode
  • Dynamic Routing Prefix List Mode
  • Dynamic Routing Route Map Rule Mode
  • Dynamic Routing BGP Mode
  • Dynamic Routing BGP Server Mode
  • Dynamic Routing BGP Neighbor Mode
  • Dynamic Routing BGP Address Family Mode
  • Dynamic Routing BGP Address Family Neighbor Mode
  • Dynamic Routing BGP Community List Mode
  • Dynamic Routing BGP AS Path Mode
  • Dynamic Routing OSPF Mode
  • Dynamic Routing OSPF Server Mode
  • Dynamic Routing OSPF Interface Mode
  • Dynamic Routing OSPF Area Mode
  • Dynamic Routing OSPF6 Mode
  • Dynamic Routing OSPF6 Server Mode
  • Dynamic Routing OSPF6 Interface Mode
  • Dynamic Routing OSPF6 Area Mode
  • Dynamic Routing RIP Mode
  • Dynamic Routing RIP Server Mode
  • Dynamic Routing RIP Interface Mode
  • Dynamic Routing RIP Key Chain Mode
  • Dynamic Routing Manager Mode
  • IPv4 Route Table Mode
  • IPv6 Route Table Mode
  • IPv4 or IPv6 Next Hop Mode
  • SPAN Mode
  • VXLAN Mode
  • User Authentication Configuration Mode
  • NTP Configuration Mode
  • NTP Restrict Mode
  • NTP Upstream Server Mode
  • NACM Group Mode
  • NACM Rule-list Mode
  • NACM Rule Mode
  • DHCP IPv4 Server Config Mode
  • DHCP4 Subnet4 Mode
  • DHCP4 Subnet4 Pool Mode
  • DHCP4 Subnet4 Reservation Mode
  • Kea DHCP4, Subnet4, Pool, or Reservation Option Mode
  • Kea DHCP4 Option Definition Mode
  • DHCP4 Log Mode
  • DHCP4 Log Output Mode
  • Unbound Server Mode
  • Unbound Forward-Zone Mode
  • Subif Mode
  • Bond Mode
  • Host ACL Mode
  • Host ACL Rule Mode
  • VRRP Mode
• API Endpoints
  • YANG Data Models
  • RESTCONF API
• Netgate TNSR Releases
  • TNSR 19.12 Release Notes
  • TNSR 19.08 Release Notes
  • TNSR 19.05 Release Notes
  • TNSR 19.02.1 Release Notes
  • TNSR 19.02 Release Notes
  • TNSR 18.11 Release Notes
  • TNSR 18.08 Release Notes
  • TNSR 18.05 Release Notes
  • TNSR 0.1.0 Release Notes
• Licensing