Kerio Control Box Troubleshooting Guide NG300

Transcription

1 Kerio Control Box Troubleshooting Guide NG300 Guide by Lee McCluskey on behalf of e3 Systems 1 K e r i o G u i d e

2 Quick Reference: 3 About your Kerio 3-6 Troubleshooting loss of Internet Connection. Includes how to change to a different Internet connection Troubleshooting slow speeds 9-10 Blocking users Filtering Content 11 Upgrading your Kerio Control Software 2 K e r i o G u i d e

3 About your Kerio The Kerio Control Box is a simple device with many capabilities when used to its full potential. The box will be delivered pre-configured from the E3 Office to fit in with your existing network. This means that the Kerio should be Plug and Play in most cases. This means that we can concentrate on common issues that occur when using the Kerio Control Box. 1. Troubleshooting Loss of Internet Connection The first and most critical piece of troubleshooting is working out what to do once you lose Internet connectivity. There are many things you can do to check the status of the Internet on the Kerio. The first thing to check is whether you can access the Kerio web interface or not. If you are unable to access it, you will need to try and connect to the Kerio physically with a laptop. You can do this by connecting an Ethernet cable to the 3 rd port of the Kerio (Named LAN 2). You can then access the Kerio via the diagnostic network on Connect Laptop computer to Port 3 (named LAN2) of the Kerio to access administration page when no Internet connections are up. Once on the Kerio homepage, you should navigate to the Interfaces page to check the status of you Internet connections. The Interfaces tab can be found on the left hand side as shown below: 3 K e r i o G u i d e

4 Interfaces Tab The important section to look at first on the Interfaces is the Internet Interfaces section. Here you will see the different Internet connections the boat uses. Firstly check the status of the connection in the second column. The status will say one of three things based on testing by sending regular pings to the IP address (Google DNS) and seeing if a response is received: Up This means that the Kerio believes that this connection is up. Connection Problems This means that the Kerio can see the cable plugged in but it cannot ping the designated IP address, basically it cannot get out to the Internet Cable Disconnected The Kerio cannot see a cable plugged in to that port on the Kerio Down This will appear if the line is totally down. This could be due to the line being offline 4 K e r i o G u i d e

5 What to do if. 1.1 The line is showing as Up If the line in question that you are expecting to be working is showing on the Kerio interfaces as up but you are getting no Internet, it is possible you are trying to use another Interface to connect to the Internet. You can find this out by clicking on the Traffic Rules tab on the left hand side. Traffic Rules tab On the above screen, you can see the traffic rules defined for the various networks on board your boat. You will need to find the network that you are currently connected to and find the Internet Access rule for that one. Let say you are on the Business Network, you will need to find the rule named Business Network Internet Access. See below: This rule defines which Internet connection you are using. You will see the last column on the above shot says NAT (Yachtspot). On this occasion, the Business Network is being broadcast with the Yachtspot connection. To change it to the working connection, you simply have to double click on that column where you will be presented with a drop down box to select your connection. 5 K e r i o G u i d e

6 Select your required interface using the dropdown list pictured above 1.2 The line is showing Connection Problems If the line is showing connection problems, this could be due to a number of issues depending on the type of connection. You should always try re-seating the cables just in case connectivity has been lost between the device router and the Kerio. Otherwise this could be due to an issue with the service provider for that Internet connection. 1.3 The line is showing as Down If the interface has been manually disabled. You can right-click on the interface and then select Enable Interface in order to bring it back up. Failing that, it could be the case that the modem connected is simply switched off or is completely down. Check the device connected in this instance. 6 K e r i o G u i d e

7 2. Troubleshooting Slow Speeds There could be many reasons for slow speeds but the Kerio will give you some visibility to see if this is related to the network. You can look at the graphs showing the traffic usage over the specified period of time, either 1 month, 1 week, 1 day or the last 2 hours. You can access this on the Kerio from the Kerio page as displayed below: Click on the graph icon on the left hand side of the Kerio page and then click on the Traffic Charts link to the right of that to bring up the traffic charts. As you can see on the page above, this allows you to take a look at the various lines that you have and can see the bandwidth usage for specific times. In the below example, you can see the bandwidth for the main line being maxed out for about 5 minutes at the end of the graph. If someone has complained about slow speeds at a certain time, you can use these graphs to check those times to see if the line is being maxed out. 7 K e r i o G u i d e

8 If your Internet is currently slow and you can see a spike on the graph happening currently, the next step would be to identify the user. You can see which users are currently connected and their bandwidth usage by clicking on the Active Hosts tab at the top of the page. You will then be presented with the below screen: As you can see on the above screenshot, I have sorted the list of users by the third column which is Current Rx. This shows you the amount of bandwidth in Kb/s that the users are currently using. You can see that the top host is using a large chunk of the bandwidth. One solution to this is to limit the amount of bandwidth available to certain users. You can do this by going back to the main Kerio page and then clicking on the Bandwidth Management and QOS tab. First, at the bottom of the screen, you can see something that says 'Internet Bandwidth'. Make sure the values for these interfaces are correct for the speeds you expect to be getting or this will not work. Once done, you can click 'Add' to create a new rule. It might be that you want to restrict the crew access in which case you double click on 'Traffic' on the new rule and select the Traffic Rules Option. You can then select crew internet access. On the download and upload, choose the bandwidth that you do not wish for them to exceed and then press apply. This should now limit the crew bandwidth. The above example shows the crew limited to using 100 Kbit/s. 8 K e r i o G u i d e

9 3. Blocking Specific Users On some occasions, you may wish to block certain users from access to sections of the network. The way that the Kerio blocks users is by using the MAC address of a device. MAC addresses are device specific so this will specifically block that particular device from connecting to the Internet. Firstly, you will need to find the MAC address of the device. You can do this by clicking on the Status bar on the Kerio and looking in Active Hosts which will appear when you click on status As you can see in the above example, you can see the hostname or IP address of the device in the first column and then the MAC address in the second column. If you can t see the MAC address, right click on the Hostname column and a drop down menu will appear, click on columns and then tick the option for MAC address. This will then give you the MAC addresses for each device in this table. Once you have the MAC address, click back on the Cofiguration section on the Kerio and then click on the Security Settings Tab. As you can see in the below example, this works by selecting each individual network and blocking the MAC address for each network. First make sure Enable MAC Filter is enabled at the top and then tick the network you wish to block the device. Once on that network, click on Add at the bottom of the page. Once on there, you simply type in the MAC address and a description and click OK and then apply. You will have to do this for each network you wish to block the device on. 9 K e r i o G u i d e

10 4. Filtering Content On occasion you will find that you wish to block access to certain websites or Internet content from your network and this is something that you can do on the Kerio. You will start off with an existing rule on the Kerio blocking certain types of content which you can amend as you wish. You will find this by navigating to the Content Filter tab on the Kerio as shown below. 10 K e r i o G u i d e

11 You will see a rule on there called Kerio Control Web Filter Categories. The second column indicated the type of content you can block. Double click on that and you can select the types of content to block. You can double click on the options on the left to drill in to the categories and select whichever you feel you would like to filter. 5. Update your Kerio Control Software In order to be able to update your Kerio software, you will need to click on the Advanced Options on the Kerio homepage and the click on the Software Update tab. On that page, you can click on the Check Now option to check for a newer version, you will need an active Internet connection coming in to the Kerio for this however. Once a new version has been found, you can click Download to download this newer version. Once this has been downloaded, you will have an option to Upgrade Now. Please note that running the upgrade will force a restart of the Kerio so you will have a momentary loss of Internet connectivity. 11 K e r i o G u i d e

12 12 K e r i o G u i d e