Internet Center Keenetic Lite II is used primarily for safe and easy connection of your home to the Internet service provider's network and its services, such as such as IP-TV. It combines home computer equipment in the network and provides the ability to simultaneously surf the Internet from multiple computers or gadgets, play online games, engage in file-sharing networks to connect smartphones, tablets and laptops on Wi-Fi, use TVs with Smart TV function. For guest Wi-Fi-devices can include a separate wireless network with Internet access, but without access to the information in the home network. Built-in firewall Internet center protects all home network devices from attacks from the Internet.

If it is important for you to have fault-tolerant Internet access, you can organize a reservation of the Internet channel by connecting to several providers simultaneously. If a failure occurs in the network of the main provider, the Internet center will quickly switch to work with a backup channel.



Internet access and dedicated line provider services
The Keenetic Lite II Internet Center is designed to access the Internet via a dedicated Ethernet line through providers using any type of connection: VPN (PPTP and L2TP), PPPoE, 802.1X, 802.1Q VLAN, IPv4 / IPv6. ZyXEL Link Duo proprietary technology allows home network computers to simultaneously access both the Internet and local provider services on a single dedicated line.
The MIPSВ® 24KEc 580 MHz MediaTek MT7620N processor with a network hardware accelerator and optimized firmware provide the Internet center with a high load capacity for working in file-sharing networks, such as BitTorrent, allowing you to download files at speeds up to 100 Mbps *.

[/ b] Wireless Wi-Fi 802.11n 300 Mbps ** [b]
Internet Center allows you to organize high-speed wireless network for collaboration on the Internet and home network with laptops, smartphones and any other Wi-Fi IEEE 802.11n standard devices. Two antennas with a gain of 3 dBi provide a wide coverage area of ​​the Wi-Fi network and high quality wireless communications at speeds up to 300 Mbps. For guest devices, you can enable a separate Wi-Fi network designed to access the Internet without accessing information on your home network.
Connecting to a wireless network devices that are compatible with the standard WPS (Wi-Fi Protected Setup), for example, laptops with the Microsoft Windows operating system, can be done at the touch of a button on the Internet center.

Secure Internet with Yandex.DNS
Yandex.DNS is a free service provided by Yandex that blocks dangerous sites and sites for adults. The pre-installed Yandex.DNS Internet Filter application in the Internet Center will protect all your home devices from resources that distribute malicious files. When you try to enter a dangerous site, you will see a message about blocking access.

Built-in managed switch
Internet-center is equipped with the Ethernet-managed switch for direct connection to PCs, IPTV receivers and other network devices. The switch operates at 10 or 100 Mbit / s, automatically determines the parameters of each network connection and uses the highest possible speed. With the installation of Internet Center eliminates the need for separate settings for each network device. Built-in DHCP server will automatically configure a home network by assigning IP-addresses of all connect the computer and other network devices.

Parental control with SkyDNS cloud service
The SkyDNS Internet Filter application, which uses SkyDNS cloud service, will allow you to monitor your children's online activity and protect them from unwanted websites and online services. You choose the categories of sites that are available for visiting, and apply the filtering profile you created to the devices you need on your home network.

Internet with your participation
With internet center Keenetic Lite II you will be able to realize the most ambitious online projects: open to friends access to your home game, file, or Web server, install the network camera for remote monitoring or even open their Internet radio station. For added convenience, an Internet Point is integrated DynDNS client services and NO-IP. It will allow to connect from the Internet to embedded applications, Internet center and outdoor services home network, using your own domain name, for example my.homeip.net.
The possibility of manual or automatic (via UPnP) port forwarding ensures the full participation of your computers in file-sharing networks, and game consoles - in online games.


* 100 Mbps - the maximum practical throughput of the built-in router, measured in the ZyXEL lab using a BitTorrent client running on a PC in a local network. The actual speed of the file-sharing applications depends on their features and settings, the type of service provided by the Internet provider, the current load on the provider’s network, the data transfer route, and the actions and characteristics of third parties and communication objects.

** 300 Mbps - the maximum speed of work at the physical layer according to the IEEE 802.11n standard when connected to adapters that use two spatial streams and a 40 MHz channel for reception and transmission. The actual data transfer rate in a wireless network depends on the features and settings of the client equipment, the number of clients in the network, the obstacles to the signal path, as well as the presence of other wireless networks and radio interference in the same range.

foto by enpa

Main characteristics

• The processor - MediaTek MT7620N 580MHz
  
• RAM - 64 MB DDR1
  
• Flash memory - 8 MB
  
• Wi-Fi 2.4 - Yes
  
• Wi-Fi class - WiSoC 2T2R / 300Mbps
  
• Antennas - 2 x 3 dBi
  
• Ethernet ports - 5 x 100 Mbit / s
  
• Wi-Fi / WPS Button - Yes

Main features

• Link Duo technology for simultaneous work on the Internet via PPTP / L2TP / PPPoE and with resources of the regional network servers
  
• Ability to connect to Internet service providers providing services based on VLAN (IEEE 802.1Q)
  
• The ability to assign multiple additional physical WAN interfaces to the ports of the integrated Ethernet switch (Multiple WAN)
  
• Hardware support for IP TVTVport to watch TV on IPTV receivers and computers, including via Wi-Fi
  
• SPI DDoS Protection Firewall
  
• IEEE 802.11n MIMO 2x2 300 Mbps * Wireless Interface *
  
• Built-in Internet filter Yandex.DNS
  
• Parental control SkyDNS

Supported features and protocols

• IPoE / PPPoE / PPTP / L2TP / 802.1X
  
• Multiple PPP Tunnel Support for Internet Access and Virtual Private Networking (VPN)
  
• PAP / CHAP / MS-CHAP / MS-CHAP v2
  
• MPPE (Auto / 40/56/128)
  
• Full-featured IEEE 802.1Q VLAN implementation
  
• TVport technology
  
• Link Duo Technology
  
• DHCP (client / server)
  
• Work with static IP address
  
• Dual stack IPv4 + IPv6, working without additional settings. 6in4 tunnel for access to IPv6 from IPv4 networks
  
• The mechanism of address translation (Full feature NAT) with the support of several external IP-addresses; ; reassignment of network interface roles.
  
• Route table (DHCP / manual)
  
• Firewall with connection control and flexible filtering rules
  
• Port forwarding with the ability to select a destination port in the local network
  
• Reassigning Network Interface Roles
  
• Automatic Port Forwarding (UPnP)
  
• Blocking Internet access based on MAC address, IP address, TCP / UDP ports
  
• IGMPv1 / IGMPv2 (IGMP proxy, IGMP snooping)
  
• VPN connection transit (PPTP or L2TP)
  
• DynDNS and NO-IP client

Wi-Fi wireless network

• IEEE 802.11 b / g
  
• IEEE 802.11n (auto 20/40 MHz, 2x2 configuration, up to 300 Mbps *)
  
• Frequency range - 2.4 GHz
  
• WEP / WPA-PSK / WPA2-PSK network protection, MAC access control
  
• Organization of up to four independent wireless networks on a Wi-Fi access point (Multiple SSID)
  
• Quick WPS Setup
  
• Wi-Fi Multimedia (WMM)

Physical parameters

• Dimensions - 166 x 116 x 34 mm excluding antennas
  
• Weight - 0.22 kg without power adapter

terms of Use

• Operating temperature range: 0 to +40 В° C
  
• Relative humidity: from 20 to 95% non-condensing
  
• Power supply voltage: AC 100-240 V, 50/60 Hz

Diagnostics and control

• Web configurator in Russian
  
• Professional configuration interface via the command line (Cisco like CLI)
  
• Configuration text file
  
• The ability to control from the external network (web configurator / CLI)
  
• Backup and restore configuration
  
• Software update features
  
• System log

Equipment

• Internet Center Keenetic Lite II
  
• Power adapter
  
• Ethernet cable
  
• Instructions for use
  
• Warranty card

RU C-TW.РђРЇ46. Р’.61300 (until 12/22/2018) .zip(3.56 MB)


RU0000011447 (up to 12/31/2020) .zip(234.65 KB)


UA.TR.008.D.00075-15 (till 10/25/2018) .zip(2.2 MB)

Instructions for use:

Instructions for use LII.pdf(1.31 MB)


CLI Reference:

Reference CLI LII command interface from 210217.pdf(2.87 MB)


Booklet:

Keenetic_Series_Booklet_2016.pdf(909.53 KB)


Keenetic_Series_Booklet_2017.pdf(1.35 MB)

Internet connection setup:

• NetFriend Initial Setup Wizard
  
• Ways to connect to the Internet
  
• Ethernet connection to the Internet
  
• Internet connection via optics (SFP module)
  
• PPPoE Internet connection
  
• Connect to the Internet via PPTP or L2TP
  
• Connecting to the Internet via a 3G / 4G modem
  
• Connect to the Internet via ADSL
  
• Connect to the Internet via VDSL
  
• Configure a VDSL connection between two Internet centers
  
• Connecting to a Wi-Fi network (Wireless ISP)
  
• Other connections
  
• Connection Priorities
  
• Connecting home network devices
  
• Web Configurator (control panel)
  
• Instructions for the initial setup of Internet centers through the Quick Setup Wizard (for NDMS versions 2.11 and earlier)
  
• Self-configuring Keenetic to connect to the Internet via an Ethernet cable (for NDMS versions 2.11 and earlier)
  
• Internet Center and GPON-modem sharing options
  
• MTU value setting
  
• Configuring the network adapter MAC address cloning (for NDMS versions 2.11 and earlier)
  
• WAN MAC address change

Install and configure KeeneticOS:

• System monitor
  
• Host traffic monitor
  
• Network accelerator
  
• Windows network (file and printer access)
  
• Online Center Software Update
  
• Automatic update of the operating system
  
• Beta Software Update
  
• Installing and updating firmware by downloading the system file
  
• Saving startup-config configuration file
  
• Saving self-test system file
  
• Change the mode of operation and assignment of network connectors
  
• Purpose of buttons and indicators of the Internet center
  
• Indicator Management
  
• Users and access (how to change the administrator password)
  
• Description of the components of the Internet Center firmware
  
• Installing and upgrading NDMS versions by downloading a file (for NDMS versions 2.11 and earlier)
  
• Configuration files (system files)
  
• Updating the components of the Internet center through the mobile application My.Keenetic
  
• Installation of NDMS operating system components via a web interface (for NDMS versions 2.11 and earlier)
  
• Setting up Internet center user accounts
  
• Internet center light indicators control (for NDMS versions 2.11 and earlier)
  
• Why is Keenetic Internet Center unavailable at my.keenetic.net web address, but only at IP address?
  
• How to assign functions to the buttons that are located on the Keenetic case (for NDMS versions 2.11 and earlier)
  
• Variants of the DHCP server on the interfaces of the Internet center
  
• Option "Install updates automatically" (for NDMS versions 2.11 and earlier)

Reset:

• Resetting the Internet center and administrator password
  
• Resetting the Internet center and administrator password (using the Reset button)

Diagnostics:

• Diagnostics
  
• Collecting logs from the Keenetic system log when the device is unavailable (hang)
  
• Perform diagnostics (debugging) to resolve configuration issues or troubleshoot (for NDMS versions 2.11 and earlier)
  
• Saving configuration file, system log and diagnostic file (for NDMS versions 2.11 and earlier)
  
• Configure SNMP server
  
• Saving the log of system messages (logs) on the Syslog server
  
• Diagnostics of client and DHCP server operation
  
• Capture network packets using Wireshark
  
• Using the built-in network packet capture module (for NDMS versions 2.11 and earlier)
  
• How to find out port numbers for some services displayed on the Connections tab in the System Monitor?
  
• Setting speed / duplex parameters on the Ethernet port (for NDMS versions 2.11 and earlier)
  
• When do I need to collect network packet dumps from a computer or a router port?
  
• The ability to use one of the LAN ports as a WAN port in Keenetic Giga III / Ultra II

Recovery firmware:

• How to restore the operating system of the Internet center?
  
• KeeneticOS recovery method (for advanced users)

Reservation

• Connect to multiple providers and reserve online channel
  
• Setting up Internet reservations via 3G / 4G-modem
  
• Internet Accessibility Checker - Ping Check (for NDMS versions 2.11 and earlier)
  
• Simultaneous connection to two providers and reservation of the Internet channel (for NDMS versions 2.11 and earlier)

Speed ​​Limit:

• Speed ​​limit for home network devicesGuest Wi-Fi network
  
• Setting a speed limit for a home network device (for NDMS versions 2.11 and earlier)
  
• Connection speed limit for Guest Wireless devices (for NDMS versions 2.11 and earlier)
  
• How is the bandwidth of the Internet channel between the devices in the local Keenetic network?

Remote access:

• Domain Name Service KeenDNS
  
• An example of remote access to home network resources via KeenDNS
  
• Access to the Internet center via KeenDNS over HTTPS
  
• How to provide remote access to Keenetic Internet Center for technical support?
  
• Remote access via SSH to the Keenetic command line
  
• What is the difference between the "white" and "gray" IP-address?Using KeenDNS remote access service (for NDMS versions 2.11 and earlier)
  
• An example of remote access to home network resources via KeenDNS using domain names 4th level (for NDMS versions 2.11 and earlier)
  
• Setting up remote access to the Internet center from the Internet
  
• Remote access from the Internet to a home network computer connected via Keenetic (for NDMS versions 2.11 and earlier)
  
• An example of remote access to home network resources via the KeenDNS service when Keenetic operates in the Amplifier, Adapter or Access Point mode
  
• An example of remote access to home network resources via the KeenDNS service (using classic NAT rules)
  
• Wake device over network (Wake-on-LAN)
  
• Transfer the domain name KeenDNS to another Internet center

VLAN:

• Sharing tagged and untagged traffic on the WAN port of the Internet centerConfiguring simultaneous operation with tagged and untagged traffic
  
• Organization of several local networks with different main gateways
  
• Creation of several independent subnets on the local area network's Internet using VLAN
  
• Internet reservations between two Internet centers

Forwarding and port configuration:

• Port Forwarding
  
• Forwarding all ports to a local network host (organization of a DMZ host)
  
• Using Xbox and PS4 when connected via Keenetic
  
• Syntax and description of the ip static command to configure NAT network address translation
  
• What to do if port forwarding does not work?
  
• What to do if port forwarding does not work? (for NDMS versions 2.11 and earlier)
  
• When should you use port forwarding and firewall rules?
  
• Port forwarding through the VPN server’s Internet channel to a remote local network behind the VPN client
  
• Configuring port forwarding through a backup connection
  
• Configuring port forwarding in the Internet center (for NDMS versions 2.11 and earlier)
  
• Setting port forwarding in Keenetic to work correctly with the ВµTorrent program
  
• Configure forwarding of all ports to one computer in a local network (for NDMS versions 2.11 and earlier)
  
• How to replace the port number of the Internet center?
  
• Change of standard ports of control of the Internet center
  
• UPnP service

Wi-Fi setup:

• Wi-Fi seamless roaming
  
• Captive portal
  
• Connect to a Wi-Fi network
  
• How to change the name and password of the Wi-Fi network?
  
• 2.4 GHz wireless Wi-Fi network
  
• Wi-Fi 5 GHz Wireless Network
  
• General recommendations for the placement in the apartment of an Internet center with Wi-Fi interface for stable and high-quality wireless network
  
• What affects the operation of wireless networks, Wi-Fi? What could be a source of interference and what are their possible causes?
  
• Keenetic Wireless Power Level Indicator Scale
  
• Wireless connection to the Internet center from Windows 10
  
• Mobile device does not see the Wi-Fi network 5 GHz?
  
• Wi-Fi signal attenuation coefficients when passing through various environments
  
• Why is the Wi-Fi connection speed lower than stated?
  
• MAC address of the access point (BSSID) to connect
  
• Print a QR code to connect to a Wi-Fi network
  
• Wi-Fi network management with a button on the case
  
• Same network name (SSID) in the 2.4 / 5 GHz band
  
• The "Hide SSID" option in the access point settings
  
• Do I need to register an Internet center in Roskomnadzor?
  
• Guest Wi-Fi network
  
• Setting up a Wi-Fi guest wireless network (for NDMS versions 2.11 and earlier)
  
• Setting up an Internet center in WISP mode to work with an upstream access point or a Wi-Fi provider (for NDMS versions 2.11 and earlier)
  
• Selecting a wireless channel for the access point to work
  
• Real connection speed used in Wi-Fi technology
  
• How to scan a Wi-Fi network and determine the most free channel?
  
• How to set the direction of antennas on the Internet center of the Keenetic series?
  
• No internet access from the guest Wi-Fi network
  
• Create additional Wi-Fi access points
  
• What affects the change in the signal power parameter in the settings of the access point?
  
• Basic provisions of the IEEE 802.11ac standard
  
• Basic provisions of the IEEE 802.11n standard
  
• Setting the width of the wireless channel 20/40 MHz
  
• Ways to increase connection speed, bandwidth and stability of a wireless Wi-Fi network
  
• Possible malfunctions of the Wi-Fi network after connecting a USB 3.0 device to the Internet center
  
• Band steering
  
• Beamforming technology
  
• How the Band Steering mechanism works and why include it (for NDMS versions 2.11 and earlier)
  
• Differences in the 2.4 GHz and 5 GHz frequency bands

WPS (Wi-Fi Protected Setup):

• Connect to a Wi-Fi network using the WPS standard
  
• Quick WPS configuration (for NDMS versions 2.11 and earlier)
  
• Setting up a connection to the Internet center via Wi-Fi from a mobile device running Android OS using the WPS function

Security and DNS:

• How is the firewall implemented?
  
• Firewall
  
• Configuring Firewall Rules from the Command Interface
  
• Copy, move and delete multiple firewall rules
  
• The brute force protection feature for accessing the Internet Center
  
• Denying access to the web configurator from the guest network
  
• AdGuard DNS Internet Filter
  
• Internet filter Yandex.DNS
  
• Internet filter SkyDNS
  
• Home network protection and content filtering using the Yandex.DNS service (for NDMS versions 2.11 and earlier)
  
• Protect your home network and filter content using SkyDNS (for NDMS versions 2.11 and earlier)
  
• DDNS Domain Name
  
• Setting up and using the dynamic DNS service from No-IP
  
• Dynamic DNS Service Setup - DNS Master
  
• Using a firewall to provide different access rights to the Internet
  
• Examples of using firewall rules
  
• Examples of using firewall rules (for NDMS versions 2.11 and earlier)
  
• Internet access control feature on home network devices page
  
• How in the Internet center to block access to the Internet on port 80 (HTTP) to all users, except one, with the specified IP address?
  
• How to block access to a specific site?
  
• Configuring the Internet Center to block the access of the home network to a specific web resource (for NDMS versions 2.11 and earlier)
  
• How to block access to your own Internet center resources (web, cli, cifs, ftp, transmission) from the Guest Wireless Network?
  
• Configure Internet Center firewall rules that use a range of IP addresses or ports
  
• Examples of Internet center firewall rules that use port ranges
  
• When should you use port forwarding and firewall rules?
  
• Wi-Fi access control
  
• MAC access control for Wi-Fi wireless network (for NDMS versions 2.11 and earlier)
  
• In what order are the firewall rules executed?
  
• Using public DNS servers in the Internet center
  
• Firewall Description (for NDMS 2.11 and earlier)
  
• WPA2 KRACK vulnerability protection

schedule :

• Connection schedule
  
• Schedule home network devices
  
• Setting up schedules in the Internet center (for NDMS versions 2.11 and earlier)
  
• Parental Control: Disconnecting the Internet on a Schedule (for NDMS versions 2.11 and earlier)
  
• Disable all indicators on schedule
  
• Internet center reboot on schedule
  
• Schedule of firewall and port forwarding rules

Tunnels: PPTP, L2TP \ IPSec, IPSec, SSTP, OpenVPN, VPN server:

• All about IPIP, GRE and EoIP tunnels (starting with firmware v2.08)
  
• Tuning IPIP, GRE and EoIP tunnels
  
• Setting up an IPSec VPN tunnel between the Internet hub and a Windows computer
  
• IPSec VPN client / server
  
• IPSec VPN tunnel organization between two Keenetic Internet Centers (for NDMS versions 2.11 and earlier)
  
• An example of creating IPSec connections using Windows operating system
  
• Connect Windows to IPsec Virtual-IP via Shrew VPN Client
  
• Setting up an IPSec VPN (IPSec Virtual IP) tunnel between Keenetic and a mobile device with Android OS
  
• Setting up an IPSec VPN tunnel (IPSec Virtual IP) between Keenetic and a mobile device with iOS
  
• Setting up an IPSec VPN (IPSec Virtual IP) tunnel between Keenetic and a Windows computer
  
• Setting up an IPSec VPN (IPSec Virtual IP) tunnel between Keenetic and a computer with Mac OS
  
• Combining two local area networks with gray IP addresses using Keenetic via vpnki
  
• PPTP VPN server
  
• Setting up a PPTP VPN server in Keenetic (for NDMS versions 2.11 and earlier)
  
• Creating a PPTP Connection in Windows OS to the Internet Center VPN Server
  
• Static IP address for user when connecting to Keenetic PPTP server
  
• Connection to the PPTP server of the Internet center for several users under one account
  
• How can I set up IPTV viewing through a connection to a PPTP server on the Internet center?
  
• Network Routing through VPN
  
• Connect two local networks using Keenetic Internet Centers using PPTP Server (for NDMS versions 2.11 and earlier)
  
• Connect to the VPN server of the Internet center to access a remote local network and to gain access to the Internet
  
• Features of connecting to the PPTP server of the Internet center from Windows
  
• Is it possible to connect more than two home networks with the help of Internet centers using PPTP Server?
  
• Port forwarding through the VPN server’s Internet channel to a remote local network behind the VPN client
  
• OpenVPN Client
  
• OpenVPN server
  
• Local area networking via OpenVPN
  
• An example of setting up access between local networks of Keenetic Internet Centers using the OpenVPN server located in the cloud hosting
  
• Is it possible to create an OpenVPN server like TAP?
  
• Using the OpenVPN client (for NDMS versions 2.11 and earlier)
  
• OpenVPN server on Keenetic (for NDMS versions 2.11 and earlier)
  
• Connecting via SSTP from Windows
  
• SSTP connection from Android
  
• SSTP VPN server
  
• L2TP / IPsec Client (L2TP over IPsec)
  
• Connecting to the integrated L2TP / IPSec VPN server from a device on iOS and Windows
  
• L2TP / IPsec connection example in Windows 7
  
• VPN server L2TP / IPsec
  
• Configuring Windows Firewall for connections from the network behind a Keenetic VPN server

Digital television:

• Setting up an IPTV connection (IPTV)
  
• Setting up Keenetic Internet Center for watching digital television (IPTV) (for NDMS versions 2.11 and earlier)
  
• UDP proxy
  
• Setting up IPTV viewing using the UDP Proxy function (UDP-HTTP proxy) (for NDMS versions 2.11 and earlier)
  
• Setting up access to the Internet and IPTV when the provider provides both services with tagged traffic (VLAN)
  
• How can I set up IPTV viewing through a connection to a PPTP server on the Internet center?
  
• Setting up Keenetic DSL Internet Center for IPTV
  
• The option of using the Internet center to watch IPTV, which comes to the GPON-modem
  
• Setting up an IPTV from Rostelecom when connected to the Internet via Ethernet
  
• Setting up simultaneous access to the Internet and IPTV service through two different providers
  
• Setting up access to the Internet and IPTV when the provider provides both services with tagged traffic (VLAN)

CLI (command line), SSH:

• Internet Center Command Line Interface (CLI)
  
• Terminal program for Windows
  
• Enabling Telnet and TFTP services in Windows
  
• Connect to the command line interface (CLI) of the Internet Center from Mac OS

Modes:

• Additional modes of operation
  
• Access Point Mode
  
• Amplifier Mode
  
• Adapter Mode
  
• Expansion of Wi-Fi network coverage in "Amplifier" mode (for NDMS versions 2.11 and earlier)
  
• How to configure the wireless bridge mode in the Internet center? (for NDMS versions 2.04)
  
• Access to the Keenetic web configurator when it works in one of the additional modes
  
• Ability to access the web configurator when Keenetic Lite III is in Access Point mode (for NDMS versions 2.11 and earlier)
  
• Internet center in the mode of a normal wireless access point (for NDMS version 2.04)
  
• Update NDMS OS when the Internet center is operating in the mode of a normal wireless access point
  
• An example of remote access to home network resources via the KeenDNS service when Keenetic operates in the Amplifier, Adapter or Access Point mode

IntelliQoS:

• IntelliQoS service
  
• Description of the setting and operation of the IntelliQoS function (for NDMS versions 2.11 and earlier)
  
• How is the bandwidth of the Internet channel between the devices in the local Keenetic network?

http://www.speedtest.net/ru/
https://www.nperf.com/ru/
https://2ip.ru/speed/

Attention! Testing servers are provided by external providers and the results of such tests depend on many technical factors.

Test results from these services can only be used for diagnostic purposes.