Adding Admin accounts and certificates  (DRAFT)

WAConnect uses digital certificates to authenticate access to network devices.  The below steps are how these accounts and certificates are added to the router.  The default admin account is NOT used once this is done!

 # -> Inline comment and should not be added to router

Adding Admin user accounts
/user
add group=full name=nr3o password=UoTTyWSXPIK7DHZd
add group=full name=n7ss password=UoTTyWSXPIK7DHZd
add group=full name=<admin hamcall> password=UoTTyWSXPIK7DHZd
add group=full name=<admin hamcall> password=UoTTyWSXPIK7DHZd
add group=full name=<admin hamcall> password=UoTTyWSXPIK7DHZd
add group=full name=<admin hamcall> password=UoTTyWSXPIK7DHZd
add group=full name=<admin hamcall> password=UoTTyWSXPIK7DHZd
add group=read name=monitoring password=UoTTyWSXPIK7DHZd
/console clear-history
 

Downloading certificates (if connected to Internet)
/tool fetch url=”https://www.hamwan.org/Standards/Network Engineering/Client Node Configuration/key-dsa-monitoring.txt” dst-path=key-dsa-monitoring.txt;
/tool fetch url=”https://www.hamwan.org/Standards/Network Engineering/Client Node Configuration/key-rsa-nr3o.txt” dst-path=key-rsa-nr3o.txt;
/tool fetch url=”https://www.hamwan.org/Standards/Network Engineering/Client Node Configuration/key-rsa-n7ss.txt” dst-path=key-rsa-n7ss.txt;
Installing certificates (if not connected to Internet)
Certificates can be downloaded from the WAConnect website and manually placed on the router via a USB thumbdrive and Winbox.
1) Download certificates listed below
2) Copy certificates to USB thumbdrive
3) Using PC connected to radio, copy the certificates from the thumbdrive using Windows Explorer and “drag and drop” to the FILES window within Winbox
 

Associate the certificates with the corresponding user accounts

/user ssh-keys
import public-key-file=key-dsa-monitoring.txt user=monitoring
import public-key-file=key-rsa-nr3o.txt user=nr3o
import public-key-file=key-rsa-n7ss.txt user=n7ss
import public-key-file=key-rsa-admin1.txt user=admin1
import public-key-file=key-rsa-admin2.txt user=admin2
import public-key-file=key-rsa-admin3.txt user=admin3