Configure AnywhereUSB services

The AnywhereUSB services include enabling the service, creating an access control list, enabling mDNS discovery, specifying keepalive intervals, and loading an SSL identity certificate.

Note You can also configure the minimum TLS version in the AnywhereUSB Manager. See Configure the minimum TLS version.

To configure the AnywhereUSB services:

 

  1. Log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:
    1. In the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click Services > AnywhereUSB.

  4. Click Enable to enable the service.

  5. In the Port field, enter the port number that is used to access the Hub. The default value is 18574. If you change the port number you must also change the corresponding port number on your computer.

    Note You can also enable the AnywhereUSB service and specify the port on the AnywhereUSB Configuration page. To display this page, click System > Configuration > AnywhereUSB Configuration. See AnywhereUSB Configuration page.

  6. Click Access control list to configure access control:
    • To limit access to specified IPv4 addresses and networks:
      1. Click IPv4 Addresses.
      2. For Add Address, click .
      3. For Address, enter the IPv4 address or network that can access the device's AnywhereUSB. Allowed values are:
        • A single IP address or host name.
        • A network designation in CIDR notation, for example, 192.168.1.0/24.
        • any: No limit to IPv4 addresses that can access the AnywhereUSB.
      4. Click again to list additional IP addresses or networks.
    • To limit access to specified IPv6 addresses and networks:
      1. Click IPv6 Addresses.
      2. For Add Address, click .
      3. For Address, enter the IPv6 address or network that can access the device's AnywhereUSB. Allowed values are:
        • A single IP address or host name.
        • A network designation in CIDR notation, for example, 2001:db8::/48.
        • any: No limit to IPv6 addresses that can access the AnywhereUSB.
      4. Click again to list additional IP addresses or networks.
    • To limit access to hosts connected through a specified interface on the device:
      1. Click Interfaces.
      2. For Add Interface, click .
      3. For Interface, select the appropriate interface from the dropdown.
      4. Click again to allow access through additional interfaces.
    • To limit access based on firewall zones:
      1. Click Zones.
      2. For Add Zone, click .
      3. For Zone, select the appropriate firewall zone from the dropdown.

        See Firewall configuration for information about firewall zones.

      4. Click again to allow access through additional firewall zones.
  7. Enable mDNS to add the AnywhereUSB protocol to the list of services which may be discovered by global mDNS. See Enable service discovery (mDNS).
  8. For Minimum TLS version, select the minimum TLS version that the AnywhereUSB service will accept. The default is TLS version 1.2.
  9. In the Keep-alive interval field, enter how often the AnywhereUSB Manager sends a keepalive request to the Hubs connected to the network. This impacts network utilization because each AnywhereUSB Manager will send one packet at this interval to each Hub to which it is connected. Default is 3 seconds. The minimum value is 1 second.
  10. In the Keep-alive timeout field, enter how long the AnywhereUSB Manager should wait for a keepalive response. When the value of the response time is reached, the Manager decides that a Hub is no longer available, and the computer is disconnected from all groups and devices on that Hub. The default value is 20 seconds. The minimum value is 15 seconds.
    • The keepalive timeout value would need to be longer if the network has more latency (such as a cellular or satellite link), or an internet link with unreliable packet delivery.
    • If the value is too short, devices will be disconnected, which may have an adverse affect on some devices, such as USB memory.
    • If the value is too long, Hubs that are removed from the network will not be noticed as gone for a long time, and devices that are no longer connected will be unresponsive for a long time.
  11. (Optional) For TLS identity certificate, paste an SSL certificate and private key in PEM format. For detailed instructions about loading an SSL certificate for AnywhereUSB, see Load an SSL certificate.

    Note If the TLS identity certificate is empty, the certificate for the web administration service is used.

  12. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the AnywhereUSB Plus local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:
    > config
(config)>
  3. Enable the AnywhereUSB service.
    (config)> service anywhereusb enable true
(config)>
  4. Set the port number that is used to access the Hub:
    (config)> service anywhereusb port int
(config)>

    where int is any integer between 1 and 65535. The default value is 18574. If you change the port number you must also change the corresponding port number on your computer.

  5. Configure access control:
    • To limit access to specified IPv4 addresses and networks:
      (config)> add service anywhereusb  acl address end value
(config)>

      Where value can be:

      • A single IP address or host name.
      • A network designation in CIDR notation, for example, 192.168.1.0/24.
      • any: No limit to IPv4 addresses that can access the AnywhereUSB.

      Repeat this step to list additional IP addresses or networks.

    • To limit access to specified IPv6 addresses and networks:
      (config)> add service anywhereusb  acl address6 end value
(config)>

      Where value can be:

      • A single IP address or host name.
      • A network designation in CIDR notation, for example, 2001:db8::/48.
      • any: No limit to IPv6 addresses that can access the AnywhereUSB.

      Repeat this step to list additional IP addresses or networks.

    • To limit access to hosts connected through a specified interface on the AnywhereUSB Plus device:
      (config)> add service anywhereusb  acl interface end value
(config)>

      Where value is an interface defined on your device.

      Use ... network interface ? to display interface information:

      (config)> ... network interface ?

Interfaces

Additional Configuration
-------------------------------------------
 defaultip              Default IP  
 defaultlinklocal       Default Link-local IP
 eth1                   ETH1
 eth2                   ETH2
 loopback               Loopback 
 modem                  Modem 

(config)>

      Repeat this step to list additional interfaces.

    • To limit access based on firewall zones:
      (config)> add service anywhereusb  acl zone end value
(config)>

      Where value is a firewall zone defined on your device, or the any keyword.

      Type ... firewall zone ? at the config prompt:

      (config)> ... firewall zone ?

Zones: A list of groups of network interfaces that can be referred to by packet
filtering rules and access control lists.

 Additional Configuration
 -------------------------------------------------------------------------------
  any
  dynamic_routes
  edge
  external
  internal
  ipsec
  loopback
  setup

(config)>

      Repeat this step to include additional firewall zones.

  6. Enable mDNS to add AnywhereUSB protocol to the list of services which may be discovered by global mDNS. See Enable service discovery (mDNS).
    (config)> service anywhereusb mdns enable true
(config)>
  7. Select the minimum TLS version that the AnywhereUSB service will accept. 
    (config)> service anywhereusb minimum_tls_version value
(config)>

    where value is one of:

    • TLS-1_2. This is the default.

    • TLS-1_3

  8. Set the keep-alive interval to how often the AnywhereUSB Manager sends a keepalive request to the Hubs connected to the network. This impacts network utilization because each AnywhereUSB Manager will send one packet at this interval to each Hub to which it is connected. Default is 3 seconds. The minimum value is 1 second.
    (config)> service anywhereusb keep_alive_interval value
(config)>

    where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}.

    For example, to set keep_alive_interval to ten minutes, enter either 10m or 600s:

    (config)> service anywhereusb keep_alive_interval 600s
(config)>
  9. Set the keep-alive timeout to how long the AnywhereUSB Manager should wait for a keepalive response. When the value of the response time is reached, the Manager decides that a Hub is no longer available, and the computer is disconnected from all groups and devices on that Hub. The default value is 20 seconds. The minimum value is 15 seconds.
    (config)> service anywhereusb keep_alive_timeout value
(config)>

    where value is any number of weeks, days, hours, minutes, or seconds, and takes the format number{w|d|h|m|s}.

    For example, to set keep_alive_timeout to ten minutes, enter either 10m or 600s:

    (config)> service anywhereusb keep_alive_timeout 600s
(config)>
  10. (Optional) Paste an SSL certificate and private key in PEM format. If empty, the certificate for the web administration service is used. 
    (config)> service anywhereusb identity cert
(config)>
  11. Save the configuration and apply the change
    (config)> save
Configuration saved.
>
  12. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.