DSA-3200 Wireless Service Gateway User Manual

5

permissions on the Network. One of the more prevalent Protocols used to authenticate

users is the RADIUS Protocol.

With a built-in RADIUS Client the DSA-3200 can

support both Local and RADIUS authentication mechanisms simultaneously, allowing

one to easily incorporate an existing user password database into the

Airspot™

Hot

Spot System. The DSA-3200 also provides a built-in user database, allowing dynamic

account creation/deletion to coexist with the more static RADIUS database.

1.2

Things to Consider

1.2.1

Audience

This manual is intended for system or network administrators possessing basic

networking knowledge to complete step by step instructions in this manual in order to

use the DSA-3200 to centralize Network access and management. This manual

attempts to explain in detail the wealth of functions the DSA-3200 supports, however

there may be situations and circumstances not considered during the authoring of this

document. Technical Support may only assist with the configuration of the DSA-3200

through the Web-UI or SSH, and may not troubleshoot or repair ill configured external

systems or Networks.

1.2.2

Document Convention

Whenever an important piece of information such as a recommendation or warning

needs to be presented, said information is displayed in a box in italics similar to the

recommendation below. These recommendations will for the most part be used to help

in increasing the security and usability of your Hot Spot.

Warning:

To Increase security, you should immediately change the Administrator’s

password.

DSA-3200 Wireless Service Gateway User Manual

6

2 Product Description

2.1 Package Contents

•

DSA-3200 Wireless G Public/Private Gateway

•

CD-ROM (Administrator’s Manual and Quick Installation Guide)

•

Ethernet cable (CAT-5 UTP Crossover)

•

Ethernet Cable (CAT-5 UTP Straight-through) (2)

•

2 dBi Detachable R-SMA D-Link Antenna (2)

•

5V DC, 3A Power adapter

•

Null modem console cable

•

Wall-mount Kit

•

Rubber Feet (4)

Note: Using a power supply with a different voltage rating than the one included

with the DSA-3200 will cause irreparable electrical damage and void the warranty

for this product

2.2 System Requirements

•

Computer running Microsoft Windows, Macintosh OS, or a UNIX based OS

•

An installed Ethernet adapter configured to communicate using TCP/IP.

•

Internet Explorer 6.0 or Netscape Navigator 7.0 or above, with JavaScript

enabled.

DSA-3200 Wireless Service Gateway User Manual

7

2.3 Panel Function Descriptions

Device LED Indicators

Power LED:

Will illuminate when the Power Supply is connected to the DSA-3200 and an

appropriate AC power outlet (110VAC). If the LED does not illuminate when the device is plugged

in, try a known good power outlet. If the LED still does not light with a known good outlet, please

contact Technical Support for assistance.

Status LED:

A solid light indicates a functional, ready state of operation. This LED will blink

during a device restart or reconfigure, then illuminate solid to indicate proper operation. If this

LED continuously flashes or does not illuminate when the device is powered on, please contact

Technical Support for assistance.

Public WLAN LED:

This indicator will flash to indicate proper RF operation of the internal AP.

The LED will blink rapidly with activity.

WAN LED:

A solid light indicates a valid Ethernet Link to the WAN modem/switch. LEDs will blink

to indicate WAN activity. No light indicates a no-link state (no cable or bad cable).

Private/Public LAN LEDs:

A solid light indicates a valid Ethernet Link to a hub/switch or PC.

LEDs will blink to indicate activity. No light indicates a no-link state (no cable or bad cable).

WAN LED –

A valid Ethernet Link will

produce a solid glow. The

LED will blink with activity.

Power LED –

Solid glow when

the DSA-3200 is

powered on.

Private LAN LEDs –

A valid Ethernet Link

will produce a solid

glow. The LEDs will

blink with activity.

Status LED –

Solid glow when

device is ready. Will

flash during device

restart or reconfigure.

Public LAN LEDs –

A valid Ethernet Link

will produce a solid

glow. The LEDs will

blink with activity.

Public WLAN LED –

Will flash to indicate

proper RF operation

and blink with activity.

DSA-3200 Wireless Service Gateway User Manual

8

Device Physical Connections

Serial COM Port:

This port serves two distinct purposes:

1.

Connect to a DSA-3100P to auto-generate temporary User accounts and print detailed receipts to

be given to customers. Receipts include pricing and Wi-Fi Network information (SSID, WEP, etc.)

2.

Use the included Null modem cable to connect to a PC with a serial COM port in order

troubleshoot, debug, change admin password, or to restore the factory default settings without

using the Web-based UI. Configure Terminal Emulation software (Hyperterminal) as follows: 9600,

8, N, 1, No flow control.

WAN Port:

Connects to a network not managed by the DSA-3200 via an Ethernet port

on most Cable or xDSL modems, or a Switch or Hub in an existing Ethernet Network.

Public LAN Ports (1 and 2):

The Public LAN ports connect to the managed network

that will require user authentication prior to granting Network Access.

This Network

may consist of Hubs and/or Switches (non-L3) as well as 802.11 Access Points.

Private LAN Ports (1 and 2):

The Private LAN port is used to connect to the trusted

Ethernet network that will not require authentication prior to access.

Reset Button:

Push and release to restart, push and hold for 15s to reset defaults.

DC Power Socket:

Connect the power supply to a wall outlet before connecting here.

WAN

Port -

Connect directly to

an Ethernet Cable

or DSL modem or

to an existing LAN

infrastructure.

Reset button –

Restore the factory

default configuration.

Press once to reboot,

press and hold for 15

seconds to reset.

COM Port -

System debugging

menu via Terminal

Emulation Software

(9600,8,n,1,n)

Private LAN Ports –

Connect

to

the

trusted

LAN,

or that network which

will not require a user to

authenticate prior to gaining

Network access.

Receptor for

5V DC Power

Adapter

Public LAN Ports –

Connect to Hub or Switch (non-L3)

and/or 802.11 APs to offer wired or

wireless Network service that will

require a user to authenticate prior

to gaining Network access.

DSA-3200 Wireless Service Gateway User Manual

9

3 Managing the D-Link DSA-3200

3.1 Getting Started

This guide will provide information and instruction for administrators of the DSA-3200

Wireless G Public/Private Gateway. This manual corresponds with the version of

firmware shipped with the DSA-3200 (v 1.00). From time to time D-Link may release

new firmware to add new features or improve on existing ones. These firmware

upgrades can be found on the Technical Support Website

.

The Support Website also has plenty of great documentation in the way of FAQs and

updated manuals, etc. Please take a moment to visit support.dlink.com prior to

contacting Technical Support.

3.2 System Concept

The DSA-3200 has the ability to allow or deny access to Network resources

based

on

various

types

of

credentials

(IP

address,

MAC

address,

or

username/password). From a single Broadband Internet connection, the DSA-3200

creates 3 separate networks using NAT, each with its own DHCP server. The WLAN

RF interface is an 802.11b/g network that can be configured to either authenticate

users or use WPA for enhanced wireless security. The Public LAN interface can be

configured to authenticate users so it may serve as a secondary Public access

network. The third Private LAN interface does not authenticate users and is intended

to service the back office or an existing office network.

Authentication of users is accomplished through any Java enabled Web browser. After

a user connects to one of the Public Access networks and attempts to browse the

Internet, they will be redirected to a customizable login page hosted on the DSA-3200

without or without SSL encryption. A Walled Garden may be defined to allow users that

have not authenticated to access those URLs specified in the Free Surf Zone. Once

users authenticate successfully via the Internal Database or an external RADIUS

server, the Web browser will once again be redirected to a specified URL. At this point