Product Manual
Page 3
System Requirements for Configuration: Computers with Windows, Macintosh, or Linux-based operating systems with manual 3 Quick Installation Guide 4 Three (3) CAT5 UTP/Straight-through (Ethernet) cables 5 One (1) CAT5 UTP/Cross-over cable 6 One (1) Console cable 7 1 PC-Style Power cable to 110 VAC If any of the above 3 Package Contents 1 D-Link DSA-5100 Airspot Enterprise Gateway 2 CD-ROM with an installed Ethernet adapter Internet Explorer Version 6.0 or Netscape Navigator Version 6.0 and above items are missing, please contact your reseller.
System Requirements for Configuration: Computers with Windows, Macintosh, or Linux-based operating systems with manual 3 Quick Installation Guide 4 Three (3) CAT5 UTP/Straight-through (Ethernet) cables 5 One (1) CAT5 UTP/Cross-over cable 6 One (1) Console cable 7 1 PC-Style Power cable to 110 VAC If any of the above 3 Package Contents 1 D-Link DSA-5100 Airspot Enterprise Gateway 2 CD-ROM with an installed Ethernet adapter Internet Explorer Version 6.0 or Netscape Navigator Version 6.0 and above items are missing, please contact your reseller.
Product Manual
Page 4
... browser (i.e., Internet Explorer, or Netscape Navigator) operating on Windows 98SE/Me/2000/XP, Macintosh OS 9, Macintosh OS X (v10.1.5 or later), Linux, or Pocket PC 2000/2002. The DSA-5100 can be configured with a switch or wireless access point respectively. The DSA-5100 allows the operator to offer wired or wireless networking services and access to permit this usage. 4 Introduction The D-Link DSA-5100 Airspot Enterprise Gateway is an advanced network access control system supporting Ethernet, Fast Ethernet or...
... browser (i.e., Internet Explorer, or Netscape Navigator) operating on Windows 98SE/Me/2000/XP, Macintosh OS 9, Macintosh OS X (v10.1.5 or later), Linux, or Pocket PC 2000/2002. The DSA-5100 can be configured with a switch or wireless access point respectively. The DSA-5100 allows the operator to offer wired or wireless networking services and access to permit this usage. 4 Introduction The D-Link DSA-5100 Airspot Enterprise Gateway is an advanced network access control system supporting Ethernet, Fast Ethernet or...
Product Manual
Page 5
... managed by switch or Ethernet without authentication in order to log on to the Intranet environment by the system or WLAN, and requires authentication before logging on the network. Rear Panel Connector for future usage. WAN 2 PortConnect to an ATU-Router of ADSL, a cable modem or a switch for Internet or Intranet access. a solid light indicates a connection to reconfigure system settings. Act LEDs - Power SwitchON/OFF switch. 5 Console Port Connect to return the unit to factory default settings...
... managed by switch or Ethernet without authentication in order to log on to the Intranet environment by the system or WLAN, and requires authentication before logging on the network. Rear Panel Connector for future usage. WAN 2 PortConnect to an ATU-Router of ADSL, a cable modem or a switch for Internet or Intranet access. a solid light indicates a connection to reconfigure system settings. Act LEDs - Power SwitchON/OFF switch. 5 Console Port Connect to return the unit to factory default settings...
Product Manual
Page 6
....3 ad WAN interface supports static IP, DHCP client, and PPPoE client WAN2 interface supports static IP Supports NAT mode, router mode and bridge mode Built-in DHCP server Built-in NTP client Supports redirect of network data Supports IPSec(ESP), PPTP and H.323 pass through (under NAT) Customizable static routing table Supports virtual server Supports DMZ server Supports machine operation status monitoring and reporting system Supports roaming across networks Provides several DoS protection mechanisms Customizable packet filter rules Customizable walled garden (free surfing area) The DSA-5100...
....3 ad WAN interface supports static IP, DHCP client, and PPPoE client WAN2 interface supports static IP Supports NAT mode, router mode and bridge mode Built-in DHCP server Built-in NTP client Supports redirect of network data Supports IPSec(ESP), PPTP and H.323 pass through (under NAT) Customizable static routing table Supports virtual server Supports DMZ server Supports machine operation status monitoring and reporting system Supports roaming across networks Provides several DoS protection mechanisms Customizable packet filter rules Customizable walled garden (free surfing area) The DSA-5100...
Product Manual
Page 9
... ports. After the power is turned off. 2. Standard 10/100Base-T, including four network cables with a valid Ethernet connection. 9 Warning: The Public LAN port cannot connect to install the TCP/IP network protocol. Setting Up the DSA-5100 1. The Public LAN port is used to provide Internet access without authentication for Ethernet (with switch) or WLAN (with AP) clients. Use one of the supplied straight-through cables to connect the DSA-5100 to the network not managed by the DSA-5100 system (such as and ATU router...
... ports. After the power is turned off. 2. Standard 10/100Base-T, including four network cables with a valid Ethernet connection. 9 Warning: The Public LAN port cannot connect to install the TCP/IP network protocol. Setting Up the DSA-5100 1. The Public LAN port is used to provide Internet access without authentication for Ethernet (with switch) or WLAN (with AP) clients. Use one of the supplied straight-through cables to connect the DSA-5100 to the network not managed by the DSA-5100 system (such as and ATU router...
Product Manual
Page 13
.... User Name: manager Password: manager After you log in as admin or as manager. First, disable the Access the Internet using a proxy server function. Make sure that the IP addresses of the DSA-5100 with the supplied crossover Ethernet cable. Log-in Screen admin The administrator of the DSA-5100 (the default IP address is 192.168.0.40, preceded by https://) in the same network. Using the Configuration Utility To configure the DSA-5100, connect a computer to the Private LAN port of the DSA-5100 and your Microsoft Internet Explorer Web...
.... User Name: manager Password: manager After you log in as admin or as manager. First, disable the Access the Internet using a proxy server function. Make sure that the IP addresses of the DSA-5100 with the supplied crossover Ethernet cable. Log-in Screen admin The administrator of the DSA-5100 (the default IP address is 192.168.0.40, preceded by https://) in the same network. Using the Configuration Utility To configure the DSA-5100, connect a computer to the Private LAN port of the DSA-5100 and your Microsoft Internet Explorer Web...
Product Manual
Page 15
..., department, or the service you would like to a specific IP address or IP: network (e.g., 192.168.2.1 might be used for a specifici IP address. 10.2.3.0/24 for a specific IP Network. 24 indicates the number of the host company, e.g: http://www.dlink.com. Access is limited to provide. Using the Configuration Utility (continued) System Configuration > System Information System Name: DSA-5100 is typically defined as the home page of bits for Management management purposes.
..., department, or the service you would like to a specific IP address or IP: network (e.g., 192.168.2.1 might be used for a specifici IP address. 10.2.3.0/24 for a specific IP Network. 24 indicates the number of the host company, e.g: http://www.dlink.com. Access is limited to provide. Using the Configuration Utility (continued) System Configuration > System Information System Name: DSA-5100 is typically defined as the home page of bits for Management management purposes.
Product Manual
Page 16
Please specify the IP address or DNS name of the management information base (MIB) exported from the DSA-5100. User Logon Allows the admin to determine the target of an SNTP server on the system configuration interface. Time Zone: Set up the time zone for correct network time. Time: Enable NTP: The DSA-5100 supports NTP communication protocol for the DSA-5100. The default is GMT+08:00. (Taipei) Set Device Date and Time: Manually specify system time. 16 The Administrator...
Please specify the IP address or DNS name of the management information base (MIB) exported from the DSA-5100. User Logon Allows the admin to determine the target of an SNTP server on the system configuration interface. Time Zone: Set up the time zone for correct network time. Time: Enable NTP: The DSA-5100 supports NTP communication protocol for the DSA-5100. The default is GMT+08:00. (Taipei) Set Device Date and Time: Manually specify system time. 16 The Administrator...
Product Manual
Page 22
...to use their own IP address for external connections. Router Mode: All IP addresses externally connected through the VLAN Port (these IP addresses must match the managed switch.) Specific Route Profile: Select your desired Specific Route Profile rules from the pull-down menu, or choose None. (It will appear after disabling the User Authentication option.) Mode: NAT Mode: All IP addresses externally connected through the VLAN Port use the built-in DHCP Server feature in DHCP server. In this option activates the device's built-in the DSA-5100. Using the Configuration Utility (continued...
...to use their own IP address for external connections. Router Mode: All IP addresses externally connected through the VLAN Port (these IP addresses must match the managed switch.) Specific Route Profile: Select your desired Specific Route Profile rules from the pull-down menu, or choose None. (It will appear after disabling the User Authentication option.) Mode: NAT Mode: All IP addresses externally connected through the VLAN Port use the built-in DHCP Server feature in DHCP server. In this option activates the device's built-in the DSA-5100. Using the Configuration Utility (continued...
Product Manual
Page 30
... text file for the user account. Using the Configuration Utility (continued) Authentication Methods > Local > Local Users List > Add User> Edit Account Edit Account: Edit the account here. To save a new file, click download. Local Users List > Add User> Download User Account Download User Account: Click the Download User Accounts to complete the upload. The format of all the user accounts. Each parameter is separated by a comma, and no space is allowed between MAC,Remark, but a comma is Username, Password, MAC, Remark...
... text file for the user account. Using the Configuration Utility (continued) Authentication Methods > Local > Local Users List > Add User> Edit Account Edit Account: Edit the account here. To save a new file, click download. Local Users List > Add User> Download User Account Download User Account: Click the Download User Accounts to complete the upload. The format of all the user accounts. Each parameter is separated by a comma, and no space is allowed between MAC,Remark, but a comma is Username, Password, MAC, Remark...
Product Manual
Page 37
Set up the parameters in Los Angeles, then the login location is the same as the location of the Airpath and Pronto Service use the DSA-5100. Caution: The login location is Los Angeles. 37 User Authentication>Roaming Configuration The system provides Airpath and Pronto Service for roaming. Click Apply. For example if the account was opened in this page to ten guest accounts can be defined. Up to let the user of the account's origin. Using the Configuration Utility (continued) User Authentication>Guest User List Password: Enter a password to activate a guest account.
Set up the parameters in Los Angeles, then the login location is the same as the location of the Airpath and Pronto Service use the DSA-5100. Caution: The login location is Los Angeles. 37 User Authentication>Roaming Configuration The system provides Airpath and Pronto Service for roaming. Click Apply. For example if the account was opened in this page to ten guest accounts can be defined. Up to let the user of the account's origin. Using the Configuration Utility (continued) User Authentication>Guest User List Password: Enter a password to activate a guest account.
Product Manual
Page 38
... access DSA-5100 instead of its IP address. Accounting Service: Enable or disable RADIUS accounting service. Upload Certificate: The DSA-5100 allows the user to Airpath's login page. Authentication Port: Airpath RADIUS server authentication port. Authentication Method: Select Challenge Handshake Authentication Protocol (CHAP) or Plain Authentication Protocol (PAP). 1. A user on LAN ports. DSA5100's administrator should contact with a link redirected to upload customer certification. (The key must be in key format and the certificate must be specified in . To configure...
... access DSA-5100 instead of its IP address. Accounting Service: Enable or disable RADIUS accounting service. Upload Certificate: The DSA-5100 allows the user to Airpath's login page. Authentication Port: Airpath RADIUS server authentication port. Authentication Method: Select Challenge Handshake Authentication Protocol (CHAP) or Plain Authentication Protocol (PAP). 1. A user on LAN ports. DSA5100's administrator should contact with a link redirected to upload customer certification. (The key must be in key format and the certificate must be specified in . To configure...
Product Manual
Page 41
... with the username and password, the user may receive a welcome e-mail. The DSA-5100 can connect to the Authentication Port and login to the DSA-5100 if they have previously registered their MAC Address in the table shown here. Using the Configuration Utility (continued) User Authentication>User Control (continued) Friendly Logout: When a user logs on to the system with a button for logout. Pass: Allows free access without control. Please refer to ping the default gateway and the DNS server periodically. The...
... with the username and password, the user may receive a welcome e-mail. The DSA-5100 can connect to the Authentication Port and login to the DSA-5100 if they have previously registered their MAC Address in the table shown here. Using the Configuration Utility (continued) User Authentication>User Control (continued) Friendly Logout: When a user logs on to the system with a button for logout. Pass: Allows free access without control. Please refer to ping the default gateway and the DNS server periodically. The...
Product Manual
Page 48
... you only need to key in this interface, the connection packet will be effective immediately after you click Apply. Network Configuration > Privilege List IP Pass Through Configuration To permit a specific device at most 100 IP addresses to have network access without going through authentication, you click Apply. These settings will be converted to the corresponding destination. Warning: Permitting specific IP addresses to have network access without going through authentication. Using the Configuration Utility (continued) Network Configuration > Network Address Translate...
... you only need to key in this interface, the connection packet will be effective immediately after you click Apply. Network Configuration > Privilege List IP Pass Through Configuration To permit a specific device at most 100 IP addresses to have network access without going through authentication, you click Apply. These settings will be converted to the corresponding destination. Warning: Permitting specific IP addresses to have network access without going through authentication. Using the Configuration Utility (continued) Network Configuration > Network Address Translate...
Product Manual
Page 49
... the administrator. You can also bypass authentication based on the MAC address at most on the "Monitor IP List" to have network access rights without going through authentication may cause security problems. Network Configuration > Monitor IP List The system will be effective immediately. Warning: Permitting specific MAC addresses to set. 49 The format of the user on this interface. Please enter the MAC address of the MAC address is XX:XX:XX:XX:XX...
... the administrator. You can also bypass authentication based on the MAC address at most on the "Monitor IP List" to have network access rights without going through authentication may cause security problems. Network Configuration > Monitor IP List The system will be effective immediately. Warning: Permitting specific MAC addresses to set. 49 The format of the user on this interface. Please enter the MAC address of the MAC address is XX:XX:XX:XX:XX...
Product Manual
Page 51
It will appear on the login Web page. External Proxy Server: By default, only port 80 is set your network environment, and the user's browser is allowed. Using the Configuration Utility (continued) Network Configuration > Proxy Server Properties Internal Proxy Server: Enable this section fo the configuration in order to operate in your External Proxy Server IP address and Proxy Port in this function to Proxy, you have built a Proxy Server in the Proxy network environment. 51 If you must set to configure the DSA-5100 as a proxy server.
It will appear on the login Web page. External Proxy Server: By default, only port 80 is set your network environment, and the user's browser is allowed. Using the Configuration Utility (continued) Network Configuration > Proxy Server Properties Internal Proxy Server: Enable this section fo the configuration in order to operate in your External Proxy Server IP address and Proxy Port in this function to Proxy, you have built a Proxy Server in the Proxy network environment. 51 If you must set to configure the DSA-5100 as a proxy server.
Product Manual
Page 56
... system time is not set up to a maxi mum of the external Syslog server. Enable the Guest Account. Using the Configuration Utility (continued) Status> System Status (continued) Item Current Firmware Version System Name Admin Info Succeed Page Description The firmware version currently used by the DSA-5100. System name - Syslog to logout after a user logs on the logon screen when a user has a connection problem. Primary DNS Server IP Address. The online user will not automatically get the username and password...
... system time is not set up to a maxi mum of the external Syslog server. Enable the Guest Account. Using the Configuration Utility (continued) Status> System Status (continued) Item Current Firmware Version System Name Admin Info Succeed Page Description The firmware version currently used by the DSA-5100. System name - Syslog to logout after a user logs on the logon screen when a user has a connection problem. Primary DNS Server IP Address. The online user will not automatically get the username and password...
Product Manual
Page 60
... consists of 9 fields Date, Type, Name, IP, MAC, Packets In, Bytes In, Packets Out, and Bytes Out to handle different problems and situations for the operation. If you properly connect to the serial port of the DSA-5100, the console welcome screen will appear automatically. Using the Configuration Utility (continued) Status > Traffic History (continued) If you have entered the Administrator's E-mail address in the terminal simulation...
... consists of 9 fields Date, Type, Name, IP, MAC, Packets In, Bytes In, Packets Out, and Bytes Out to handle different problems and situations for the operation. If you properly connect to the serial port of the DSA-5100, the console welcome screen will appear automatically. Using the Configuration Utility (continued) Status > Traffic History (continued) If you have entered the Administrator's E-mail address in the terminal simulation...
Product Manual
Page 62
...DSA-5100 also supports the SSH online connection for connection, we recommend that you immediately change the DSA-5100 administrator's password. You will need to enter the administrator's password. Console Interface > Reload Factory Default Resets the system to connect the DSA-5100, the username is admin and the default password is used to factory default settings. Using the Configuration Utility (continued) Console Interface > Change Admin password Besides supporting the use the null modem cable to connect directly to the console management interface of the DSA-5100. When using...
...DSA-5100 also supports the SSH online connection for connection, we recommend that you immediately change the DSA-5100 administrator's password. You will need to enter the administrator's password. Console Interface > Reload Factory Default Resets the system to connect the DSA-5100, the username is admin and the default password is used to factory default settings. Using the Configuration Utility (continued) Console Interface > Change Admin password Besides supporting the use the null modem cable to connect directly to the console management interface of the DSA-5100. When using...
Product Manual
Page 78
... with MAC Address locking to provide stricter access control POP3, RADIUS and LDAP external authentication mechanism support - Can be selected at a time On-line status monitoring and history traffic data review SSL protected access to the administration interface and user authentication interface Customizable user login, logout web interface Customizable target URL for users who successfullly get authorization Built-in DHCP server High-speed policy routing engine Customizable peremptory traffic redirection NTP client Local network port for dual WAN connection, trusted LAN connection and...
... with MAC Address locking to provide stricter access control POP3, RADIUS and LDAP external authentication mechanism support - Can be selected at a time On-line status monitoring and history traffic data review SSL protected access to the administration interface and user authentication interface Customizable user login, logout web interface Customizable target URL for users who successfullly get authorization Built-in DHCP server High-speed policy routing engine Customizable peremptory traffic redirection NTP client Local network port for dual WAN connection, trusted LAN connection and...