4

1

Using the Configuration Utility (continued)

User Authentication>User Control (continued)

Friendly Logout:

When

a user logs on, a small window will appear, showing the user information and

providing him or her with a

button for logout. If

this option is enabled, it will close the

window and logout the user. If you do not select this option, closing the window will not

log out the user. To logout, browse to https://1.1.1.1/logout.shtml

WAN Fail

Testing URL

:

When the WAN connection fails, the user login screen will be redirected to the

URL.

The DSA-5100 can detect if the WAN connection fails by using an ICMP

echo

mechanism to ping the default gateway and the DNS server periodically.

Pass:

Allows free access without control.

Block:

Displays the error message and blocks all access. (More secure.)

Before a user logs on to the

system with the username and

password, the user may receive

a welcome e-mail. If you want to

set the content of the e-mail,

please fill in the text in the table

shown here.

POP3 Message:

MAC Address Control:

When MAC Address Control is

enabled, only 40 users can

connect to the Authentication Port

and login to the DSA-5100 if they

have previously registered their

MAC Address in MAC Address

Control. Please refer to the

configuration screen shown here.

The format of the MAC address can be

XX:XX:XX:XX:XX:XX or XX-XX-XX-XX-XX-XX.

4

2

Using the Configuration Utility (continued)

User Authentication>Upload File

Private Key/

Certification:

The DSA-5100

allows the user to

upload

certification.

(The

key must be in

key

format and the

certificate must be

in certificate format.)

Enter the filename

of the logon Web

page or click

Browse

to browse

for the file on your

local PC.

File Name:

Use default page:

Click to recover the factory default setting of the logon interface.

Submit:

Click to begin uploading the page.

Preview:

After the upload is completed, click Preview (at the bottom of the page) to preview the

user-defined logon interface.

The user-defined login interface must include the following HTML code to provide a

channel for the user to key in the username and password:

<form action=”userlogin.shtml” method=”post” name=”Enter”>

<input type=”text” name=”myusername”>

<input type=”password” name=”mypassword”>

<input type=”submit” name=”submit” value=”Enter”>

<input type=”reset” name=”clear” value=”Clear”>

</form>

HTML codes:

4

3

<form action=”userlogout.shtml” method=”post” name=”Enter”>

<input type=”text” name=”myusername”>

<input type=”password” name=”mypassword”>

<input type=”submit” name=”submit” value=”Logout”>

<input type=”reset” name=”clear” value=”Clear”>

</form>

Using the Configuration Utility (continued)

User Authentication>Upload Logout Page>HTML codes

Use the following HTML codes for the User Logout Interface:

Upload Error Page

To provide a custom

user login error page,

please specify the file

name to upload to the

DSA-5100. If you want

to get back to the

Error

page, click

Use Default

Page

. If you want to

display the Login Error

Page, click

Preview

.

Upload Login Successful Page

To provide a custom

user login succeed

page, please specify the

file name to upload to

the DSA-5100. If you

want to get back to the

Succeed

page, click

Use Default Page

. If you

want to display the Login Succeed Page, click

Preview

.

Upload Logout Successful Page

To provide a custom

user

Success

page,

please specify the file

name to upload to the

DSA-5100. If you want

to get back to the default

user

Success

page,

click

Use Default Page

.

If you want to display the Logout Succeed Page, click

Preview

.

4

4

Using the Configuration Utility (continued)

Group Profile > Firewall Profile

The DSA-5100 provides three kinds of Profile configurations, including Firewall Profile,

Specific Route Profile, and Login Schedule Profile.

Global

is the default

setting. Use the

Global setting to

apply parameters to

all users. There are 5

individual profiles

available also.

Profile Name:

To give a name to

the Firewall Profile.

Filter Rule Item:

Click the number to

edit the filter rule.

The window below will appear.

Group Profile > Firewall Profile>Edit Filter Rule

Rule Name:

The name of the IP

filter rule.

Enable this Rule:

Check to enable this

rule.

Action:

Specifies the action

to be taken when

packets match the

rule.

Pass:

Packets matching the rule will be passed.

Block:

Packets matching the rule will be dropped.

Provides three kinds of protocols:

TCP

,

UDP

, and

ICMP

. Select

All

to apply all three

protocols.

Protocol:

4

5

Using the Configuration Utility (continued)

Group Profile > Firewall Profile>Edit Filter Rule (continued)

MAC address of the Network component sending the request.

Source MAC:

Source (Destination) IP Address:

Source (Destination) Interface includes 4 interfaces: WAN1, WAN2, Public LAN, and

Private LAN. Select ALL to apply to all four interfaces.

Source (Destination) Interface:

Subnet Mask of the Network component sending (receiving) the request.

Source (Destination) Subnet Mask:

IP address of the Network component sending (receiving) the request.

Source (Destination) Operator:

Provides the comparison rules: =(Equal), != (Not Equal), >(Larger Than), and <(Less

Than).

Source (Destination) Start Port:

Start Port of the Network component sending (receiving) the request.

Source (Destination) End Port:

End Port of the Network component sending (receiving) the request.