Unified Services Router

User Manual

9

Figure 98: Configured client routes only apply in split tunnel mode

........................................................

146

Figure 99: List of configured SSL VPN portals. The configured portal can then be associated with

an authentication domain

..................................................................................................................

147

Figure 100: SSL VPN Portal configuration

.......................................................................................................

149

Figure 101: USB Device Detection

.....................................................................................................................

151

Figure 102: USB SharePort

...................................................................................................................................

152

Figure 103: SMS Service

–

Send SMS

.............................................................................................................

153

Figure 104: SMS Service

–

Receive SMS

.......................................................................................................

154

Figure 105: Certificate summary for IPsec and HTTPS management

...................................................

155

Figure 106: Advanced Switch Settings

..............................................................................................................

156

Figure 107: User Login policy configuration

....................................................................................................

157

Figure 108: Admin Settings

...................................................................................................................................

158

Figure 109: Remote Management from the WAN

.........................................................................................

159

Figure 110: SNMP Users, Traps, and Access Control

................................................................................

160

Figure 111: SNMP system information for this router

..................................................................................

161

Figure 112: Date, Time, and NTP server setup

.............................................................................................

162

Figure 113: Facility settings for Logging

...........................................................................................................

164

Figure 114: Log configuration options for traffic through router

................................................................

166

Figure 115: IPv6 Log configuration options for traffic through router

.....................................................

167

Figure 116: E-mail configuration as a Remote Logging option

.................................................................

168

Figure 117: Syslog server configuration for Remote Logging (continued)

............................................

169

Figure 118: VPN logs displayed in GUI event viewer

..................................................................................

170

Figure 119: Restoring configuration from a saved file will result in the current configuration being

overwritten and a reboot

....................................................................................................................

171

Figure 120: Firmware version information and upgrade option

................................................................

172

Figure 121: Firmware upgrade and configuration restore/backup via USB

..........................................

173

Figure 122: Dynamic DNS configuration

..........................................................................................................

174

Figure 123: Router diagnostics tools available in the GUI

.........................................................................

175

Figure 124: Sample trace route output

..............................................................................................................

176

Figure 125: Localization

.........................................................................................................................................

177

Figure 126: Device Status display

......................................................................................................................

179

Figure 127: Device Status display (continued)

...............................................................................................

180

Figure 128: Resource Utilization statistics

.......................................................................................................

181

Figure 129: Resource Utilization data (continued)

........................................................................................

182

Figure 130: Resource Utilization data (continued)

........................................................................................

183

Figure 131: Physical port statistics

.....................................................................................................................

184

Unified Services Router

User Manual

10

Figure 132: AP specific statistics

.........................................................................................................................

185

Figure 133: List of current Active Firewall Sessions

.....................................................................................

186

Figure 134: List of connected 802.11 clients per AP

....................................................................................

187

Figure 135: List of LAN hosts

...............................................................................................................................

188

Figure 136: List of current Active VPN Sessions

...........................................................................................

189

Unified Services Router

User Manual

11

Chapter

1.

Introduction

D-Link Unified Services Routers offer a secure, high performance networking solution

to address the growing needs of small and medium businesses. Integrated high -speed

IEEE 802.11n and 3G wireless technologies offer comparable performance to

traditional wired networks, but with fewer limitations. Optimal network security is

provided via features such as virtual private network (VPN) tunnels, IP Security

(IPsec), Point-to-Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP),

and Secure Sockets Layer (SSL). Empower your road warriors with clientless remote

access anywhere and anytime using SSL VPN tunnels.

With the D-Link Unified Services Router yo u are able to experience a diverse set of

benefits:



Comprehensive Management Capabilities

The DSR-500, DSR-500N, DSR-1000 and DSR-1000N include dual-WAN

Gigabit Ethernet which provides policy -based service management ensuring

maximum productivity for your business operations. The failover feature

maintains data traffic without disconnecting when a landline connection is lost.

The Outbound Load Balancing feature adjusts outgoing traffic across two WAN

interfaces and optimizes the system performance resulting in high availability.

The second WAN port can be configured as a DMZ port allowing you to isolate

servers from your LAN.



DSR-150/150N/250 /250N have a single WAN interface, and thus it does not

support Auto Failover and Load Balancing scenarios.



Superior Wireless Performance

Designed to deliver superior wireless performance, the DSR-500N and DSR-

1000N include 802.11 a/b/g/n, allowing for operation on either the 2.4 GHz or

5 GHz radio bands. Multiple In Multiple Out (MIMO) technology allows the

DSR-500N and DSR-

1000N to provide high data rates with minimal “dead

spots” throughout the wireless coverage area.



DSR-150N, 250N and DSR-500N supports the 2.4GHz radio band only.



Flexible Deployment Options

The DSR-1000 / 1000N supports Third Generation (3G) Networks via an

extendable USB 3G dongle. This 3G network capability offers an additional

secure data connection for networks that provide critical services. The DSR -

1000N can be configured to automatically switch to a 3G network whenever a

physical link is lost.



Robust VPN features

A fully featured virtual private network (VPN) provides your mobile workers

and branch offices with a secure link to your network.

The DSR-

150/150N/250/250N, DSR-500/500N and DSR-1000 /1000N are capable of

simultaneously managing 5, 5, 10, 20 Secure Sockets Layer (SSL) VPN tunnels

respectively, empowering your mobile users by providing remote access to a

Unified Services Router

User Manual

12

central corporate database. Site-to-site VPN tunnels use IP Security (IPsec)

Protocol, Point-to-Point Tunneling Protocol (PPTP), or Lay er 2 Tunneling

Protocol (L2TP) to facilitate branch office connectivity through encrypted

virtual links.

The DSR-150/150N, DSR-250/250N, DSR-500/500N and DSR-

1000/1000N support 10, 25, 35 and 75 simultaneous IPSec VPN tunnels

respectively

.



Efficient D-Link Green Technology

As a concerned member of the global community, D-Link is devoted to

providing eco-friendly products. D-Link Green WiFi and D-Link Green

Ethernet save power and prevent waste. The D-Link Green WLAN scheduler

reduces wireless power automatically during off-peak hours. Likewise the D-

Link Green Ethernet program adjusts power usage based on the detected cable

length and link status. In addition, compliance with RoHS (Restriction of

Hazardous Substances) and WEEE (Waste Electrical and Electronic Equipment)

directives make D-Link Green certified devices the environmentally responsible

choice.



Support for the 3G wireless WAN USB dongle is only available for DSR-1000 and

DSR-1000N.

1.1

About this User Manual

This document is a high level manual to allow new D-Link Unified Services Router

users to configure connectivity, setup VPN tunnels, establish firewall rules and

perform general administrative tasks. Typical deployment and use case scenarios are

described in each section. For more detailed s etup instructions and explanations of

each configuration parameter, refer to the online help that can be accessed from each

page in the router GUI.

1.2 Typographical Conventions

The following is a list of the various terms, followed by an example of how that term

is represented in this document:



Product Name

–

D-Link Unified Services Router.

o

Model numbers DSR-500/500N/1000/1000N/250/250N/150/150N



GUI Menu Path/GUI Navigation

–

Monitoring > Router Status



Important note

–



Chapter

2.

Configuring Your Network:

LAN Setup

It is assumed that the user has a machine for management connected to the LAN to the

router. The LAN connection may be through the wired Ethernet ports available on the

router, or once the initial setup is complete, the DSR may also be managed through its

wireless interface as it is bridged with the LAN.

Access the router’s

graphical user

interface (GUI) for management by using any web browser, such as Microsoft Internet

Explorer or Mozilla Firefox:



Go to

(default IP address) to display the router’s

management login screen.



Default login credentials for the management GUI:



Username:

admin



Password:

admin



If

the router’s LAN IP address was changed, use that

IP address in the navigation

bar of the browser to access the router

’s management UI

.

2.1 LAN Configuration

Setup > Network Settings > LAN Configuration

By default, the router functions as a Dynamic Host Configuration Protocol (DHCP)

server to the hosts on the WLAN or LAN network. With DHCP, PCs and other LAN

devices can be assigned IP addresses as well as addresses for DNS servers, Windows

Internet Name Service (WINS) servers, and the default gateway. With the DHCP

server enabled

the router’s IP address serves as the gateway address

for LAN and

WLAN clients . The PCs in the LAN are assigned IP addresses from a pool of

addresses specified in this procedure. Each pool address is tested before it is assigned

to avoid duplicate address es on the LAN.

For most applications the default DHCP and TCP/IP settings are satisfactory. If you

want another PC on your network to be the DHCP server or if you are manually

configuring the network settings of all of your PCs,

set the DHCP mode to ‘none’

.

DHCP relay can be used to forward DHCP lease information from another LAN

device that is the network’s DHCP server; this is particularly useful for wireless

clients.

Instead of using a DNS server, you can use a Windows Internet Naming Service

(WINS) server. A WINS server is the equivalent of a DNS server but uses the

NetBIOS protocol to resolve hostnames. The router includes the WINS server IP

address in the DHCP configuration when acknowledging a DHCP request from a

DHCP client.

You can also enable DNS proxy for the LAN. When this is enabled the router then as

a proxy for all DNS requests and communicates with the ISP’s DNS servers. When

disabled all DHCP clients receive the DNS IP addresses of the ISP.