DSR-150 User Manual
Page 1
Building Networks for People Unified Services Router User Manual DSR-150 / 150N / 250 / 250N / 500 / 500N / 1000 / 1000N Ver. 1.05 Small Business Gateway Solution
Building Networks for People Unified Services Router User Manual DSR-150 / 150N / 250 / 250N / 500 / 500N / 1000 / 1000N Ver. 1.05 Small Business Gateway Solution
DSR-150 User Manual
Page 3
...an t ab ilit y o r fit n es s fo r an y p art icu lar p u rp o s e. Limitations of Liability UNDER NO CIRCUM STA NCES SHA LL D -LINK OR ITS SUPPLIERS BE LIA BLE FOR DA M A GES OF A NY CHA RA CTER (E.G. Th e man u fact u rer res erv es t h e rig h t t o ...t o t ime in t h is d o cumen t is s ubject t o ch ange wit h o ut n o tice. Unified Services Router User Manual DSR-150 / 150N /250 / 250N / DSR-500 / 500N / 1000 / 1000N Unified Services Router Version 1.05 User Manual Copyright © 2012 Copyright Notice This publication, including all photographs , illus trations and s oftware, is man...
...an t ab ilit y o r fit n es s fo r an y p art icu lar p u rp o s e. Limitations of Liability UNDER NO CIRCUM STA NCES SHA LL D -LINK OR ITS SUPPLIERS BE LIA BLE FOR DA M A GES OF A NY CHA RA CTER (E.G. Th e man u fact u rer res erv es t h e rig h t t o ...t o t ime in t h is d o cumen t is s ubject t o ch ange wit h o ut n o tice. Unified Services Router User Manual DSR-150 / 150N /250 / 250N / DSR-500 / 500N / 1000 / 1000N Unified Services Router Version 1.05 User Manual Copyright © 2012 Copyright Notice This publication, including all photographs , illus trations and s oftware, is man...
DSR-150 User Manual
Page 10
...Address to an IP address served by DSR. If there is an IP/MAC Binding violation, the violating packet will be dropped and logs will be capt ured...107 Figure 69: Intrusion Prevention features on the router 108 Figure 70: Protecting the router and LAN from internet attacks 109 Figure... 71: Example of Gateway-to-Gateway IPsec VPN tunnel using two DSR routers connected to the internal network through the DSR IPsec gateway ...112 Figure 73: VPN Wizard launch screen ...113 Figure 74: IPsec policy configuration ...116 Figure 75: IPsec policy configuration ...
...Address to an IP address served by DSR. If there is an IP/MAC Binding violation, the violating packet will be dropped and logs will be capt ured...107 Figure 69: Intrusion Prevention features on the router 108 Figure 70: Protecting the router and LAN from internet attacks 109 Figure... 71: Example of Gateway-to-Gateway IPsec VPN tunnel using two DSR routers connected to the internal network through the DSR IPsec gateway ...112 Figure 73: VPN Wizard launch screen ...113 Figure 74: IPsec policy configuration ...116 Figure 75: IPsec policy configuration ...
DSR-150 User Manual
Page 13
...red v irt u al p riv at e n et wo rk (VPN) p ro v id es y o u r mo b ile wo rkers and branch offices with a s ecure link to is p ro v id ed v ia feat u res s u ch as ed s erv ice man ag emen t en s u rin g maximu m p ro d u ... t ocol (PPTP), Lay er 2 Tu n n elin g Pro t ocol (L2TP), an d Secu re So cket s Lay er (SSL). The DSR150/150N/250/250N, DSR-500/500N and DSR-1000 /1000N are ab le t o exp erien ce a d iv ers e s et o f benefits : Co mp reh en s iv e...h ern et wh ich p ro v id es p o licy -b as v irt u al p riv at io n s . Unified Services Router User Manual Chapter 1.
...red v irt u al p riv at e n et wo rk (VPN) p ro v id es y o u r mo b ile wo rkers and branch offices with a s ecure link to is p ro v id ed v ia feat u res s u ch as ed s erv ice man ag emen t en s u rin g maximu m p ro d u ... t ocol (PPTP), Lay er 2 Tu n n elin g Pro t ocol (L2TP), an d Secu re So cket s Lay er (SSL). The DSR150/150N/250/250N, DSR-500/500N and DSR-1000 /1000N are ab le t o exp erien ce a d iv ers e s et o f benefits : Co mp reh en s iv e...h ern et wh ich p ro v id es p o licy -b as v irt u al p riv at io n s . Unified Services Router User Manual Chapter 1.
DSR-150 User Manual
Page 14
... Ty p ical d ep lo ymen t an d u se cas e s cen ario s are d es crib ed in g eco -frien d ly p ro d u ct s . The DSR-150/150N, DSR-250/250N, DSR-500/500N and DSR1000/ 1000N s u p p o rt 10, 25, 35 an d 75 s imu lt an eo u s IPSec VPN t u n n els res pectively . ...Efficien t D-Lin k Green Tech n o lo g y A s a co n cern ed memb er o f t h e g lo b al co mmu n it y t h ro u g h en cry p t ed virtual links . Unified Services Router...
... Ty p ical d ep lo ymen t an d u se cas e s cen ario s are d es crib ed in g eco -frien d ly p ro d u ct s . The DSR-150/150N, DSR-250/250N, DSR-500/500N and DSR1000/ 1000N s u p p o rt 10, 25, 35 an d 75 s imu lt an eo u s IPSec VPN t u n n els res pectively . ...Efficien t D-Lin k Green Tech n o lo g y A s a co n cern ed memb er o f t h e g lo b al co mmu n it y t h ro u g h en cry p t ed virtual links . Unified Services Router...
DSR-150 User Manual
Page 23
...u t er Lifet ime : Th is v alu e is p res en t in RA 's an d in d icat es t h e u s efu ln es s of this field and this router as a default router for IPv6 clients . M TU: Th e ro u t er ad v ert is emen t will as s ig n an IP ad d res s an d s u p p o rt... IPv 6 au t o co nfig uratio n o n t h e LA N, s et t h e RA DVD s t at are au t o co n fig ured b y t he Ro u ter A d vertisemen t Daemo n o n t h is ro u ter, t h e DSR will lis t en o n t h e LA N fo r ro u t er s o licit at efu l p ro t o co l fo r n o n -ad d res s au t o co n fig u rat io n . Ro u t er Preferen ce...
...u t er Lifet ime : Th is v alu e is p res en t in RA 's an d in d icat es t h e u s efu ln es s of this field and this router as a default router for IPv6 clients . M TU: Th e ro u t er ad v ert is emen t will as s ig n an IP ad d res s an d s u p p o rt... IPv 6 au t o co nfig uratio n o n t h e LA N, s et t h e RA DVD s t at are au t o co n fig ured b y t he Ro u ter A d vertisemen t Daemo n o n t h is ro u ter, t h e DSR will lis t en o n t h e LA N fo r ro u t er s o licit at efu l p ro t o co l fo r n o n -ad d res s au t o co n fig u rat io n . Ro u t er Preferen ce...
DSR-150 User Manual
Page 30
... / p o rt s t o t h e DM Z fro m b o t h t h e LA N o r W A N. A DM Z is o p en t o t h e public but behind the firewall. Unified Services Router Figure 11 : VLAN Configu rat ion User Manual 2.3 Configurable Port: DMZ Setup DSR-150/150N/250/250N does not have a configurable port - This router s upports one of s ecurity to the DMZ port, other than the fact that it...
... / p o rt s t o t h e DM Z fro m b o t h t h e LA N o r W A N. A DM Z is o p en t o t h e public but behind the firewall. Unified Services Router Figure 11 : VLAN Configu rat ion User Manual 2.3 Configurable Port: DMZ Setup DSR-150/150N/250/250N does not have a configurable port - This router s upports one of s ecurity to the DMZ port, other than the fact that it...
DSR-150 User Manual
Page 32
Unified Services Router User Manual A d v ert is emen t Perio d : Th is is card ed . Po rt (Ext ...t h e n et wo rk. HTTP, FTP, etc.) us ed by UPnP (if any) Ext . Port (Internal Port): The internal ports opened by the DSR Int. A d efau lt o f 4 is exp res s ed in identifying new UPnP devices to the network. A d v ert isemen t Time...ect ed d ev ice: Active: A yes /no indicating whether the port of the UPnP device detected by this router Click Refres h t o refres h t h e p o rt map t ab le an d s earch fo r an y n ew UPn P d ev ices . 30
Unified Services Router User Manual A d v ert is emen t Perio d : Th is is card ed . Po rt (Ext ...t h e n et wo rk. HTTP, FTP, etc.) us ed by UPnP (if any) Ext . Port (Internal Port): The internal ports opened by the DSR Int. A d efau lt o f 4 is exp res s ed in identifying new UPnP devices to the network. A d v ert isemen t Time...ect ed d ev ice: Active: A yes /no indicating whether the port of the UPnP device detected by this router Click Refres h t o refres h t h e p o rt map t ab le an d s earch fo r an y n ew UPn P d ev ices . 30
DSR-150 User Manual
Page 33
... d efin e wh ich u s ers req u ire au t h en t icat io n fo r HTTP acces s , an d wh en a mat ch in g u s er req u est is mad e t h e DSR will in t ercep t t h e req ues t an d p ro mp t fo r a u s ern ame / p as Ru n -Time A u t h en t icat io n , a Cap t iv e Po... io n wit h t h e DSR. A ls o referred t o as s word . LA N u s ers can g ain in t h e b elo w t ab le. A 'Dis connect' button allo ws t h e DSR ad min t o s elect iv ely d ro p an au t h en t icat ed u s er. 31 Unified Services Router 2.5 Captive Portal User Manual DSR-150/150N/250/250N does not have s upport...
... d efin e wh ich u s ers req u ire au t h en t icat io n fo r HTTP acces s , an d wh en a mat ch in g u s er req u est is mad e t h e DSR will in t ercep t t h e req ues t an d p ro mp t fo r a u s ern ame / p as Ru n -Time A u t h en t icat io n , a Cap t iv e Po... io n wit h t h e DSR. A ls o referred t o as s word . LA N u s ers can g ain in t h e b elo w t ab le. A 'Dis connect' button allo ws t h e DSR ad min t o s elect iv ely d ro p an au t h en t icat ed u s er. 31 Unified Services Router 2.5 Captive Portal User Manual DSR-150/150N/250/250N does not have s upport...
DSR-150 User Manual
Page 38
...o n s (i.e. Req u ired field s fo r t h e s elect ed ISP t y p e b eco me h ig h lig h t ed. Th is s u p p o rt ed o n W A N 3. Th is is en abled, DSR wo n 't exp ect a d efau lt ro u t e fro m t h e ISP s erv er. To lo g o u t aft er t h e co nn ectio n is t s wit h t h e p rimary W A N p o ...s t s t o access in t ernet s it y : ISP Co n n ect io n t y p e: Bas ed o n t h e ISP y o u h av e s elect ed fo r t h e p rimary W A N link for this router, choos e Static IP addres s , DHCP client, Point-to-Point Tu n n elin g Pro t ocol (PPTP), Po in fo rmat io n . fo r Jap an ISPs t h at...
...o n s (i.e. Req u ired field s fo r t h e s elect ed ISP t y p e b eco me h ig h lig h t ed. Th is s u p p o rt ed o n W A N 3. Th is is en abled, DSR wo n 't exp ect a d efau lt ro u t e fro m t h e ISP s erv er. To lo g o u t aft er t h e co nn ectio n is t s wit h t h e p rimary W A N p o ...s t s t o access in t ernet s it y : ISP Co n n ect io n t y p e: Bas ed o n t h e ISP y o u h av e s elect ed fo r t h e p rimary W A N link for this router, choos e Static IP addres s , DHCP client, Point-to-Point Tu n n elin g Pro t ocol (PPTP), Po in fo rmat io n . fo r Jap an ISPs t h at...
DSR-150 User Manual
Page 39
... en t er ad d res s es fo r t h e p rimary an d s eco n d ary DNS s erv ers . If it y p ro b lems , en s u re t h at ic (p erman ent). Unified Services Router User Manual M y IP A d d res s : En t er t h e IP ad d res s as s ig n ed t o y o u b y t h e ISP. Serv er IP A d d ...res s : En t er t h e IP ad d res s o f t h e PPTP o r L2TP s erv er. DSR-150/150N/250/250N does n't have a dual W AN s upport. 3.2.1 WAN Port IP address 3.2.2 Yo u r ISP as s ig n s y o u an IP ad d res s t h at is eit h er d y n amic (n ...
... en t er ad d res s es fo r t h e p rimary an d s eco n d ary DNS s erv ers . If it y p ro b lems , en s u re t h at ic (p erman ent). Unified Services Router User Manual M y IP A d d res s : En t er t h e IP ad d res s as s ig n ed t o y o u b y t h e ISP. Serv er IP A d d ...res s : En t er t h e IP ad d res s o f t h e PPTP o r L2TP s erv er. DSR-150/150N/250/250N does n't have a dual W AN s upport. 3.2.1 WAN Port IP address 3.2.2 Yo u r ISP as s ig n s y o u an IP ad d res s t h at is eit h er d y n amic (n ...
DSR-150 User Manual
Page 40
Unified Services Router Figure 18 : M anual WAN configuratio n User Manual 3.2.4 PPPoE Setup > Internet Settings The PPPoE ISP s ettings are two t y p es o f PPPo E ISP's s u p p o rt ed b y t h e DSR: t h e s t an d ard u s ern ame/ p as s wo rd PPPo E an d Jap an M u lt ip le PPPo E. 38 There are defined on the W A N Configuration page.
Unified Services Router Figure 18 : M anual WAN configuratio n User Manual 3.2.4 PPPoE Setup > Internet Settings The PPPoE ISP s ettings are two t y p es o f PPPo E ISP's s u p p o rt ed b y t h e DSR: t h e s t an d ard u s ern ame/ p as s wo rd PPPo E an d Jap an M u lt ip le PPPo E. 38 There are defined on the W A N Configuration page.
DSR-150 User Manual
Page 41
Unified Services Router Figure 19 : PPPoE configuratio n for s tandard ISPs User Manual M o s t PPPo E ISP's u s e a s in o rd er t o es t ab lis h the PPPoE link. Th e Primary co n n ect ion is "PPPo E (Us ern ame/ Pas s wo rd )". Th e GUI will p ro mp t y o u fo r au t h en ticatio n, s erv ice, ... g le co nt rol an d d ata co nnect ion , an d req u ire u s ern ame / pas s word credentials to login and authenticate the DSR with the ISP. control) traffic between the DSR and the ISP. 39 The ISP co n n ect io n t y p e fo r t h is cas e is u s ed fo r t h e b u lk o f d at a and ...
Unified Services Router Figure 19 : PPPoE configuratio n for s tandard ISPs User Manual M o s t PPPo E ISP's u s e a s in o rd er t o es t ab lis h the PPPoE link. Th e Primary co n n ect ion is "PPPo E (Us ern ame/ Pas s wo rd )". Th e GUI will p ro mp t y o u fo r au t h en ticatio n, s erv ice, ... g le co nt rol an d d ata co nnect ion , an d req u ire u s ern ame / pas s word credentials to login and authenticate the DSR with the ISP. control) traffic between the DSR and the ISP. 39 The ISP co n n ect io n t y p e fo r t h is cas e is u s ed fo r t h e b u lk o f d at a and ...
DSR-150 User Manual
Page 42
A ll o t h er HTTP / HTTPS req u es ts g o t h ro u g h t h e p rimary PPPo E co n n ect io n . 40 Unified Services Router User Manual Figure 20 : WAN configurat io n for Japane s e M ultiple PPPoE (part 1) Th ere are a few key elemen t s o f a mu lt ip le PPPo E co n n ect ... s es sio n h as a DNS s erv er s ou rce fo r d o main n ame lo o ku p , t h is can b e assig ned b y t h e ISP o r co n fig u red t h ro u g h t h e GUI Th e DSR act s as a DNS p ro xy fo r LA N u s ers On ly HTTP req u es ts t h at s pecifically id en t ify t h e s econd ary co nnectio n's d o main...
A ll o t h er HTTP / HTTPS req u es ts g o t h ro u g h t h e p rimary PPPo E co n n ect io n . 40 Unified Services Router User Manual Figure 20 : WAN configurat io n for Japane s e M ultiple PPPoE (part 1) Th ere are a few key elemen t s o f a mu lt ip le PPPo E co n n ect ... s es sio n h as a DNS s erv er s ou rce fo r d o main n ame lo o ku p , t h is can b e assig ned b y t h e ISP o r co n fig u red t h ro u g h t h e GUI Th e DSR act s as a DNS p ro xy fo r LA N u s ers On ly HTTP req u es ts t h at s pecifically id en t ify t h e s econd ary co nnectio n's d o main...
DSR-150 User Manual
Page 52
... Failo v er aft er: Th is s et s t h e n u mb er o f ret ries aft er wh ich failo v er is the s econdary link. Fo r examp le, if t h e maximu m b an d wid t h o f p rimary W A N is 1 Kb p s an d t h e ... o lu me b ackg ro u nd t raffic (s u ch as SM TP) g o o v er t h e lo wer s p eed lin k. DSR cu rren t ly s u p p o rt t h ree alg o rit h ms fo r Lo ad Bal an cin g : Round Robi n: Th is ...alg o rit h m is s et t o 70. Unified Services Router User Manual 3.4.2 No t e t h at b o th W AN1, W A N2 an d W A N3 can b e co nfig ured as...
... Failo v er aft er: Th is s et s t h e n u mb er o f ret ries aft er wh ich failo v er is the s econdary link. Fo r examp le, if t h e maximu m b an d wid t h o f p rimary W A N is 1 Kb p s an d t h e ... o lu me b ackg ro u nd t raffic (s u ch as SM TP) g o o v er t h e lo wer s p eed lin k. DSR cu rren t ly s u p p o rt t h ree alg o rit h ms fo r Lo ad Bal an cin g : Round Robi n: Th is ...alg o rit h m is s et t o 70. Unified Services Router User Manual 3.4.2 No t e t h at b o th W AN1, W A N2 an d W A N3 can b e co nfig ured as...
DSR-150 User Manual
Page 56
A ll DSR feat u res (su ch as 3G mo d em s u p p o rt ) are an In t ern et co n n ect io n . Unified Services Router User Manual NA T is req u ired if y o u r ISP h as as s ig n ed o n ly o n e IP ad d res s t o y o u. NA T is a t ech n iq u e wh ich allo ws s ... t raffic an d o t h er man ag emen t t raffic . Bro ad cas t an d mu lt icast p ackets t h at e" IP ad d res s range while the W A N port on the router is red irect ed t h ro u g h t h e firewall t o reach LA N s erv ers b y t h eir ext ern al n ame. 54 Along with a s ingle " public" IP addres s. Th is is...
A ll DSR feat u res (su ch as 3G mo d em s u p p o rt ) are an In t ern et co n n ect io n . Unified Services Router User Manual NA T is req u ired if y o u r ISP h as as s ig n ed o n ly o n e IP ad d res s t o y o u. NA T is a t ech n iq u e wh ich allo ws s ... t raffic an d o t h er man ag emen t t raffic . Bro ad cas t an d mu lt icast p ackets t h at e" IP ad d res s range while the W A N port on the router is red irect ed t h ro u g h t h e firewall t o reach LA N s erv ers b y t h eir ext ern al n ame. 54 Along with a s ingle " public" IP addres s. Th is is...
DSR-150 User Manual
Page 58
... e ro u t in g in fo rmat io n exch an g e is t h e recommen d ed s et t in g in order to fully utilize RIP capabilities . Out Only: The router broadcasts its route table nor does it h RIP t h is u sed in fo rmat io n fro m o t h er ro u t ers, b u t d o es not broadcas t its routing ... n key v alid it s upports s ubnet in fo rmat io n receiv ed fro m o t h er ro u ters. Unified Services Router 3.5.2 Dynamic Routing (RIP) User Manual DSR- 150/150N/250/250N does not s upport RIP. This effectively dis ables RIP. The RIP v ers ion is dependent on the RIP s upport...
... e ro u t in g in fo rmat io n exch an g e is t h e recommen d ed s et t in g in order to fully utilize RIP capabilities . Out Only: The router broadcasts its route table nor does it h RIP t h is u sed in fo rmat io n fro m o t h er ro u t ers, b u t d o es not broadcas t its routing ... n key v alid it s upports s ubnet in fo rmat io n receiv ed fro m o t h er ro u ters. Unified Services Router 3.5.2 Dynamic Routing (RIP) User Manual DSR- 150/150N/250/250N does not s upport RIP. This effectively dis ables RIP. The RIP v ers ion is dependent on the RIP s upport...
DSR-150 User Manual
Page 68
... ical port s ettings for 3G inte rne t User Manual 3G W AN s upport is av ailab le o n W A N 3 v ia a 3G USB mo d em fo r DSR1000 and DSR-1000N. If your ISP account d efin es t h e W A N p o rt sp eed o r is as so ciated wit h a M A C ad d ress, t h is in t ern et acces s is available on...
... ical port s ettings for 3G inte rne t User Manual 3G W AN s upport is av ailab le o n W A N 3 v ia a 3G USB mo d em fo r DSR1000 and DSR-1000N. If your ISP account d efin es t h e W A N p o rt sp eed o r is as so ciated wit h a M A C ad d ress, t h is in t ern et acces s is available on...
DSR-150 User Manual
Page 70
...w s u p p ort ed 802.11 clien t s t o co n nect t o t h e con fig ured Acces s Point. 68 Fi™ mo d es The router's geographical region The s ecurity s ettings to us ers new to create an access point for s election in s t an ces o r SSIDs . 4.1 Wireless Settings Wizard Setup... > Wizard > Wireless Settings The W ireles s Network Setup W izard is applicable to the DSR-500N and DSR-1000N p ro d u ct s . Th e s ecurit y/ en cry ptio n/ au thent icat io n o p t io n s are t o b e u s...
...w s u p p ort ed 802.11 clien t s t o co n nect t o t h e con fig ured Acces s Point. 68 Fi™ mo d es The router's geographical region The s ecurity s ettings to us ers new to create an access point for s election in s t an ces o r SSIDs . 4.1 Wireless Settings Wizard Setup... > Wizard > Wireless Settings The W ireles s Network Setup W izard is applicable to the DSR-500N and DSR-1000N p ro d u ct s . Th e s ecurit y/ en cry ptio n/ au thent icat io n o p t io n s are t o b e u s...
DSR-150 User Manual
Page 83
...met h o d , W DS p as t h e PSK fo r t h e connection . The "Add W DS Peer" s ection allows the us er to b e t h e s ame. Pleas e refer t o t h e GUI in DSR router. In t h e W DS co n fig u rat io n p ag e t h is field is man d at o ry an d h as t o b e s ame o n t h e t wo W DS p eers, wh en... t h e s ecurity is device for the W DS link to A d d / Delet e Peer en t ries . A maximu m o f 4 W DS p eers can b e s p ecified in an y g iv en mo d e. 4.7 Advanced Wireless Settings Advanced > Wireless ...
...met h o d , W DS p as t h e PSK fo r t h e connection . The "Add W DS Peer" s ection allows the us er to b e t h e s ame. Pleas e refer t o t h e GUI in DSR router. In t h e W DS co n fig u rat io n p ag e t h is field is man d at o ry an d h as t o b e s ame o n t h e t wo W DS p eers, wh en... t h e s ecurity is device for the W DS link to A d d / Delet e Peer en t ries . A maximu m o f 4 W DS p eers can b e s p ecified in an y g iv en mo d e. 4.7 Advanced Wireless Settings Advanced > Wireless ...