Tip

This is the documentation for the 20.10 version. Looking for the documentation of the latest version? Have a look here.

TNSR Documentation

This documentation has all the details needed to fully configure TNSR, from the basics all the way to the complexities of implementing different applications. For quotes, updates, and more information about TNSR, please visit tnsr.com or contact TNSR sales.

PDF Version

• Introduction
  • TNSR Secure Networking
  • TNSR Architecture
  • Technology Stack
  • Basic Assumptions
• Supported Platforms
• Installation
  • Hardware Installation
• Default Behavior
  • Default Accounts and Passwords
  • Default TNSR Permissions
  • Default Allowed Traffic
  • Default Namespaces
  • Default Services
  • Default Routing and VRF Behavior
• Zero-to-Ping
  • First Login
  • Interface Configuration
  • TNSR Interfaces
  • NAT
  • DHCP Server
  • DNS Server
  • Ping
  • Save the TNSR Configuration
  • Next Steps
• Command Line Basics
  • Working in the TNSR CLI
  • Finding Help
  • Starting TNSR
  • Entering the TNSR CLI
  • Configuration Database
  • Configuration Mode
  • Configuration Backups
  • Viewing Status Information
  • Networking Namespaces
  • Service Control
  • Diagnostic Utilities
  • Basic System Information
  • Rebooting the Router
• Basic Configuration
  • Setup Interfaces
  • Disable Host OS NICs for TNSR
  • Setup NICs in Dataplane
  • Setup QAT Compatible Hardware
  • Remove TNSR NIC for Host Use
  • Secure Shell (SSH) Server
• Updates and Packages
  • Generate a Key Pair
  • Generate a Certificate Signing Request
  • Submit the Certificate Signing Request
  • Retrieve the signed certificate
  • Install the certificate
  • Package Management
  • Updating TNSR
• Interfaces
  • Locate Interfaces
  • Configure Interfaces
  • Types of Interfaces
• Static Routing
  • Virtual Routing and Forwarding
  • Neighbors
  • Viewing Routes
  • Managing Routes
  • Default Route
• Dynamic Routing
  • Dynamic Routing Manager
  • Border Gateway Protocol
  • Open Shortest Path First v2 (OSPF)
  • Open Shortest Path First v3 (OSPF6)
  • Routing Information Protocol (RIP)
  • Dynamic Routing Protocol Lists
• Virtual Router Redundancy Protocol
  • VRRP Compatibility
  • VRRP Example
  • VRRP Configuration
  • VRRP Status
• Access Lists
  • Standard ACLs
  • MACIP ACLs
  • Viewing ACL and MACIP Information
  • ACL and NAT Interaction
  • Host ACLs
• IPsec
  • Required Information
  • IPsec Example
  • IPsec Configuration
  • IPsec Status Information
  • IPsec Cryptographic Acceleration
• Network Address Translation
  • Dataplane NAT Modes
  • NAT Options
  • NAT Pool Addresses
  • Outbound NAT
  • Static NAT
  • Dual-Stack Lite
  • Deterministic NAT
  • NAT Status
  • NAT Examples
• MAP (Mapping of Address and Port)
  • MAP Configuration
  • MAP Parameters
  • MAP Example
  • MAP Types
• Dynamic Host Configuration Protocol
  • DHCP Configuration
  • DHCP Logging
  • DHCP Service Control and Status
  • DHCP Service Example
• DNS Resolver
  • DNS Resolver Configuration
  • DNS Resolver Service Control and Status
  • DNS Resolver Examples
• Network Time Protocol
  • NTP Configuration
  • NTP Service Control and Status
  • NTP Configuration Examples
  • NTP Best Practices
• Link Layer Discovery Protocol
  • Configuring the LLDP Service
  • LLDP Status
• Public Key Infrastructure
  • Key Management
  • Certificate Signing Request Management
  • Certificate Management
  • Certificate Authority Management
• Bidirectional Forwarding Detection
  • BFD Sessions
  • BFD Session Authentication
  • BFD Example
• User Management
  • User Configuration
  • Authentication Methods
• NETCONF Access Control Model (NACM)
  • NACM Example
  • View NACM Configuration
  • Enable or Disable NACM
  • NACM Default Policy Actions
  • NACM Username Mapping
  • NACM Groups
  • NACM Rule Lists
  • NACM Rules
  • NACM Rule Processing Order
  • Regaining Access if Locked Out by NACM
  • NACM Defaults
• HTTP Server
  • HTTP Server Configuration
  • HTTPS Encryption
  • Authentication
  • RESTCONF Server
• Monitoring
  • Monitoring Interfaces
  • Simple Network Management Protocol
  • Prometheus Exporter
  • IPFIX Exporter
  • Viewing Status Information
• TNSR Configuration Example Recipes
  • RESTCONF Service Setup with Certificate-Based Authentication and NACM
  • TNSR IPsec Hub for pfSense
  • Edge Router Speaking eBGP with Static Redistribution for IPv4 And IPv6
  • Service Provider Route Reflectors and Client for iBGP IPv4
  • LAN + WAN with NAT (Basic SOHO Router Including DHCP and DNS Resolver)
  • Using Access Control Lists (ACLs)
  • Inter-VLAN Routing
  • GRE ERSPAN Example Use Case
  • OSPF Router with Multiple Areas and Summarization
  • TNSR Remote Office With Existing IPsec Hub
  • VRRP with Outside NAT
• Advanced Configuration
  • Dataplane Configuration
  • Host Memory Management Configuration
  • IP Reassembly
• Troubleshooting
  • Services do not receive traffic on an interface with NAT enabled
  • NAT session limits / “Create NAT session failed” error
  • ACL rules do not match NAT traffic as expected
  • Some Traffic to the host OS management interface is dropped
  • Unrecognized routes in a routing table
  • OSPF Neighbors Stuck in ExStart State
  • Large packets fail to pass over IPsec
  • Associating TNSR Interfaces with Shell Interfaces
  • Troubleshooting DHCP Client
  • Locked out by NACM Rules
  • How to gain access to the root account
  • IPsec packets are dropped or fail to pass with QAT enabled
  • Console DMA / PTE Read access Error Messages
  • Console Messages Obscure Prompts
  • Dataplane Packet Tracing
  • Capturing Packets on Dataplane Interfaces
  • RESTCONF API Errors
  • Diagnosing Service Issues
  • Debugging TNSR
  • Diagnostic Information for Support
• Commands
  • Mode List
  • Master Mode Commands
  • Config Mode Commands
  • Show Commands in Both Master and Config Modes
  • Access Control List Modes
  • MACIP ACL Mode
  • GRE Mode
  • HTTP mode
  • Interface Mode
  • Loopback Mode
  • Bridge Mode
  • NAT Commands in Configure Mode
  • DS-Lite Commands in Configure Mode
  • Tap Mode
  • BFD Key Mode
  • BFD Mode
  • Host Interface Mode
  • IPsec Tunnel Mode
  • IKE mode
  • IKE Peer Authentication Mode
  • IKE Peer Authentication Round Mode
  • IKE Child SA Mode
  • IKE Child SA Proposal Mode
  • IKE Peer Identity Mode
  • IKE Proposal Mode
  • Map Mode
  • Map Parameters Mode
  • memif Mode
  • Dynamic Routing Access List Mode
  • Dynamic Routing Prefix List Mode
  • Dynamic Routing Route Map Rule Mode
  • Dynamic Routing BGP Mode
  • Dynamic Routing BGP Server Mode
  • Dynamic Routing BGP Neighbor Mode
  • Dynamic Routing BGP Address Family Mode
  • Dynamic Routing BGP Address Family Neighbor Mode
  • Dynamic Routing BGP Community List Mode
  • Dynamic Routing BGP AS Path Mode
  • Dynamic Routing OSPF Mode
  • Dynamic Routing OSPF Server Mode
  • Dynamic Routing OSPF Interface Mode
  • Dynamic Routing OSPF Area Mode
  • Dynamic Routing OSPF6 Mode
  • Dynamic Routing OSPF6 Server Mode
  • Dynamic Routing OSPF6 Interface Mode
  • Dynamic Routing OSPF6 Area Mode
  • Dynamic Routing RIP Mode
  • Dynamic Routing RIP Server Mode
  • Dynamic Routing RIP Interface Mode
  • Dynamic Routing RIP Key Chain Mode
  • Dynamic Routing Manager Mode
  • Virtual Routing and Forwarding Mode
  • IPv4 Route Table Mode
  • IPv6 Route Table Mode
  • IPv4 or IPv6 Next Hop Mode
  • SPAN Mode
  • VXLAN Mode
  • User Authentication Configuration Mode
  • NTP Configuration Mode
  • NTP Restrict Mode
  • NTP Upstream Server Mode
  • NACM Group Mode
  • NACM Rule-list Mode
  • NACM Rule Mode
  • DHCP IPv4 Server Config Mode
  • DHCP4 Subnet4 Mode
  • DHCP4 Subnet4 Pool Mode
  • DHCP4 Subnet4 Reservation Mode
  • Kea DHCP4, Subnet4, Pool, or Reservation Option Mode
  • Kea DHCP4 Option Definition Mode
  • DHCP4 Log Mode
  • DHCP4 Log Output Mode
  • Unbound Server Mode
  • Unbound Forward-Zone Mode
  • Subif Mode
  • Bond Mode
  • Host ACL Mode
  • Host ACL Rule Mode
  • VRRP Mode
  • DNS Resolver Mode
  • IPFIX Exporter Mode
• API Endpoints
  • YANG Data Models
  • RESTCONF API
• Release Notes
• Licensing
• Glossary of Terms