DSR-150 Datasheet
Page 1
..., EAP-PEAP • WPS, WEP, WPA-PSK, WPA-EAP, WPA2-PSK, WPA2-EAP D-Link Unified Services Routers are secure, high performance networking solutions that provide policy-based service management to 10 (DSR-500/500N) • DES, 3DES, AES Encryption • Main/Aggressive Negotiation Wireless Access and ... • PPTP • L2TP • SSL • VPN Tunnels • Up to 20 (DSR-150/150N) • Up to 50 (DSR-250/250N) • Up to 60 (DSR-500/500N) • SSL VPN tunnels • Up to 1 (DSR-150/150N) • Up to 5 (DSR-250/250N) • Up to ensure maximum productivity for your...
..., EAP-PEAP • WPS, WEP, WPA-PSK, WPA-EAP, WPA2-PSK, WPA2-EAP D-Link Unified Services Routers are secure, high performance networking solutions that provide policy-based service management to 10 (DSR-500/500N) • DES, 3DES, AES Encryption • Main/Aggressive Negotiation Wireless Access and ... • PPTP • L2TP • SSL • VPN Tunnels • Up to 20 (DSR-150/150N) • Up to 50 (DSR-250/250N) • Up to 60 (DSR-500/500N) • SSL VPN tunnels • Up to 1 (DSR-150/150N) • Up to 5 (DSR-250/250N) • Up to ensure maximum productivity for your...
DSR-150 Datasheet
Page 2
... power usage accordingly. D-Link Green Wi-Fi and D-Link Green Ethernet features save energy automatically without sacrificing performance. The DSR-150/150N, DSR-250/250N and DSR-500/500N are capable of simultaneously managing 1, 5 or 10 Secure Sockets Layer (SSL) VPN tunnels respectively, empowering your mobile users by providing remote access to 35 VPN tunnels. DSR-150/150N/250/250N...
... power usage accordingly. D-Link Green Wi-Fi and D-Link Green Ethernet features save energy automatically without sacrificing performance. The DSR-150/150N, DSR-250/250N and DSR-500/500N are capable of simultaneously managing 1, 5 or 10 Secure Sockets Layer (SSL) VPN tunnels respectively, empowering your mobile users by providing remote access to 35 VPN tunnels. DSR-150/150N/250/250N...
DSR-150 Datasheet
Page 3
Secure VPN Network Implementation Dual WAN for Redundant Internet2 1 Technical Specifications DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR-500N Interface Ethernet Wireless • 1 10/100 Mbps WAN Port • 8 10/100 Mbps LAN Ports • 1 10/100/1000 Mbps WAN Port • 8 10/...Directional Antennas • 2 10/100/1000 Mbps WAN Ports • 4 10/100/1000 Mbps LAN Ports 802.11b/g/n (Single Band) 3 Detachable 2dBi Omni-Directional Antennas DSR-150/150N/250/250N/500/500N Unified Services Routers USB 2.0 Extension 3 Supports one USB 2.0 device to extend functionality via...
Secure VPN Network Implementation Dual WAN for Redundant Internet2 1 Technical Specifications DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR-500N Interface Ethernet Wireless • 1 10/100 Mbps WAN Port • 8 10/100 Mbps LAN Ports • 1 10/100/1000 Mbps WAN Port • 8 10/...Directional Antennas • 2 10/100/1000 Mbps WAN Ports • 4 10/100/1000 Mbps LAN Ports 802.11b/g/n (Single Band) 3 Detachable 2dBi Omni-Directional Antennas DSR-150/150N/250/250N/500/500N Unified Services Routers USB 2.0 Extension 3 Supports one USB 2.0 device to extend functionality via...
DSR-150 Datasheet
Page 4
... VLAN (Port-Based) Yes Yes IP Multicast IGMP Proxy IGMP Proxy IPv6 Yes Yes Route Failover - DSR-150/150N/250/250N/500/500N Unified Services Routers DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR-500N USB 2.0 1 1 Console 1 RJ-45 1 RJ-45 System Performance4 Firewall Throughput5 45 Mbps ...70 Mbps 45 Mbps 70 Mbps VPN Throughput6 25 Mbps 35 Mbps 70 Mbps 25 Mbps 35 Mbps ...
... VLAN (Port-Based) Yes Yes IP Multicast IGMP Proxy IGMP Proxy IPv6 Yes Yes Route Failover - DSR-150/150N/250/250N/500/500N Unified Services Routers DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR-500N USB 2.0 1 1 Console 1 RJ-45 1 RJ-45 System Performance4 Firewall Throughput5 45 Mbps ...70 Mbps 45 Mbps 70 Mbps VPN Throughput6 25 Mbps 35 Mbps 70 Mbps 25 Mbps 35 Mbps ...
DSR-150 Datasheet
Page 5
...Services Routers Service Set Identifier (SSID) to VLAN Mapping Standards Wireless Security DSR-150 DSR-250 N/A N/A DSR-500 N/A Virtual Private Network (VPN) IPSec Tunnels 10 25 35 SSL VPN Tunnels 1 5 10 PPTP/L2TP Clients 10 25 25 VPN Tunnels (total) 21 55 70 Encryption Methods DES, 3DES, AES, ... Yes IPSec NAT Traversal Yes Dead Peer Detection Yes IP Encapsulating Security Yes Payload (ESP) IP Authentication Header (AH) Yes VPN Tunnel Keep Alive Yes Hub and Spoke Yes Bandwidth Management Max. Personal (WPA-PSK) Wi-Fi Protected Access - Bandwidth Control...
...Services Routers Service Set Identifier (SSID) to VLAN Mapping Standards Wireless Security DSR-150 DSR-250 N/A N/A DSR-500 N/A Virtual Private Network (VPN) IPSec Tunnels 10 25 35 SSL VPN Tunnels 1 5 10 PPTP/L2TP Clients 10 25 25 VPN Tunnels (total) 21 55 70 Encryption Methods DES, 3DES, AES, ... Yes IPSec NAT Traversal Yes Dead Peer Detection Yes IP Encapsulating Security Yes Payload (ESP) IP Authentication Header (AH) Yes VPN Tunnel Keep Alive Yes Hub and Spoke Yes Bandwidth Management Max. Personal (WPA-PSK) Wi-Fi Protected Access - Bandwidth Control...
DSR-150 Datasheet
Page 6
...DSR-150/150N/250/250N/500/500N Unified Services Routers Max. Power Consumption Dimensions (L x W x H) DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR... www.dlink.com for People D-Link, the D-Link logo, and D-ViewCam are the property of D-Link Corporation or its subsidiaries in (208...DSR-150N/250N/500N Only 2 DSR-500/500N only 3 Printer support list can be referred to at http://www.openprinting.org/printers. 4 Actual performance may vary depending on network conditions and activated services. 5 The maximum Firewall plaintext throughput is based on RFC2544 testing methodologies. 6 VPN...
...DSR-150/150N/250/250N/500/500N Unified Services Routers Max. Power Consumption Dimensions (L x W x H) DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR... www.dlink.com for People D-Link, the D-Link logo, and D-ViewCam are the property of D-Link Corporation or its subsidiaries in (208...DSR-150N/250N/500N Only 2 DSR-500/500N only 3 Printer support list can be referred to at http://www.openprinting.org/printers. 4 Actual performance may vary depending on network conditions and activated services. 5 The maximum Firewall plaintext throughput is based on RFC2544 testing methodologies. 6 VPN...
DSR-150 User Manual
Page 5
... ...113 6.2 Configuring IPsec Policies 115 6.2.1 Extended Aut hentication (XAUTH 119 6.2.2 Internet over IPS ec tunnel 120 6.3 Configuring VPN clients 120 6.4 6.4.1 6.4.2 6.4.3 6.4.4 6.4.5 PPTP / L2TP Tunnels ...120 PPTP Tunnel Support ...120 L2TP Tunnel Support ...122 ... Configuring IP v6 Firewall Rules 92 5.4.1 Firewall Rule Configuration Examples 93 5.5 Security on Custom Servic es 97 5.6 ALG support ...99 5.7 VPN Passthrough for Firewall 100 5.8 Application Rules ...101 5.9 5.9.1 5.9.2 5.9.3 5.9.4 Web Content Filtering...102 Cont ent Filtering ...102 Approved URLs ...103...
... ...113 6.2 Configuring IPsec Policies 115 6.2.1 Extended Aut hentication (XAUTH 119 6.2.2 Internet over IPS ec tunnel 120 6.3 Configuring VPN clients 120 6.4 6.4.1 6.4.2 6.4.3 6.4.4 6.4.5 PPTP / L2TP Tunnels ...120 PPTP Tunnel Support ...120 L2TP Tunnel Support ...122 ... Configuring IP v6 Firewall Rules 92 5.4.1 Firewall Rule Configuration Examples 93 5.5 Security on Custom Servic es 97 5.6 ALG support ...99 5.7 VPN Passthrough for Firewall 100 5.8 Application Rules ...101 5.9 5.9.1 5.9.2 5.9.3 5.9.4 Web Content Filtering...102 Cont ent Filtering ...102 Approved URLs ...103...
DSR-150 User Manual
Page 6
Advanced Configuration Tools 150 8.1 USB Device Setup ...150 8.2 USB share port ...151 8.3 SMS service...153 8.4 Authentication Certificates 154 8.5 Advanced S witch Configuration 156 Chapter 9. Unified Services Router User Manual ... ...176 Rout er Options ...176 9.10 Localization ...177 Chapter 10. SSL VPN ...129 7.1 Groups and Users...131 7.1.1 Users and Passwords ...137 7.2 Using SSL VPN Policies 138 7.2.1 Using Network Res ourc es 141 7.3 Application Port Forwarding 142 7.4 SSL VPN Client Configuration 144 7.5 User Portal ...147 7.5.1 Creating Portal Layouts 147 Chapter ...
Advanced Configuration Tools 150 8.1 USB Device Setup ...150 8.2 USB share port ...151 8.3 SMS service...153 8.4 Authentication Certificates 154 8.5 Advanced S witch Configuration 156 Chapter 9. Unified Services Router User Manual ... ...176 Rout er Options ...176 9.10 Localization ...177 Chapter 10. SSL VPN ...129 7.1 Groups and Users...131 7.1.1 Users and Passwords ...137 7.2 Using SSL VPN Policies 138 7.2.1 Using Network Res ourc es 141 7.3 Application Port Forwarding 142 7.4 SSL VPN Client Configuration 144 7.5 User Portal ...147 7.5.1 Creating Portal Layouts 147 Chapter ...
DSR-150 User Manual
Page 7
Factory Default Settings...199 Appendix C. Product Statement ...256 5 Unified Services Router User Manual 10.3.2 Wireless Clients ...187 10.3.3 LAN Clients ...187 10.3.4 Active VPN Tunnels ...188 Chapter 11. Trouble Shooting ...190 11.1 Internet connection ...190 11.2 Date and time ...192 11.3 Pinging to Test LAN Connectivity 192 11.3.1 Testing ...
Factory Default Settings...199 Appendix C. Product Statement ...256 5 Unified Services Router User Manual 10.3.2 Wireless Clients ...187 10.3.3 LAN Clients ...187 10.3.4 Active VPN Tunnels ...188 Chapter 11. Trouble Shooting ...190 11.1 Internet connection ...190 11.2 Date and time ...192 11.3 Pinging to Test LAN Connectivity 192 11.3.1 Testing ...
DSR-150 User Manual
Page 9
......67 Figure 41: Wireless Network Setup Wizards ...69 Figure 42: List of A vailable Profiles shows the options available to secure the wireless link .......... 71 Figure 43: Profile configuration to set network security 73 Figure 44: RA DIUS server (External Authentication) configuration 75 Figure 45: Virtual......98 Figure 60: Custom Services configuration ...98 Figure 61: A vailable ALG support on the router 100 Figure 62: Passthrough options for VPN tunnels 101 Figure 63: List of A vailable Application Rules showing 4 unique rules 102 Figure 64: Content Filtering used to block access ...
......67 Figure 41: Wireless Network Setup Wizards ...69 Figure 42: List of A vailable Profiles shows the options available to secure the wireless link .......... 71 Figure 43: Profile configuration to set network security 73 Figure 44: RA DIUS server (External Authentication) configuration 75 Figure 45: Virtual......98 Figure 60: Custom Services configuration ...98 Figure 61: A vailable ALG support on the router 100 Figure 62: Passthrough options for VPN tunnels 101 Figure 63: List of A vailable Application Rules showing 4 unique rules 102 Figure 64: Content Filtering used to block access ...
DSR-150 User Manual
Page 10
... LAN from internet attacks 109 Figure 71: Example of Gateway-to-Gateway IPsec VPN tunnel using two DSR routers connected to the Internet...111 Figure 72: Example of three IPsec client connections to SSL VPN policies ........ 142 Figure 96: List of configured resources, which are available to... assign to the internal network through the DSR IPsec gateway ...112 Figure 73: VPN Wizard launch screen ...113 Figure 74: IPsec policy configuration ...116 Figure 75: IPsec policy configuration continued (Auto policy via IKE...
... LAN from internet attacks 109 Figure 71: Example of Gateway-to-Gateway IPsec VPN tunnel using two DSR routers connected to the Internet...111 Figure 72: Example of three IPsec client connections to SSL VPN policies ........ 142 Figure 96: List of configured resources, which are available to... assign to the internal network through the DSR IPsec gateway ...112 Figure 73: VPN Wizard launch screen ...113 Figure 74: IPsec policy configuration ...116 Figure 75: IPsec policy configuration continued (Auto policy via IKE...
DSR-150 User Manual
Page 11
...Figure 116: E-mail configuration as a Remote Logging option 168 Figure 117: Syslog server configuration for Remote Logging (continued 169 Figure 118: VPN logs displayed in GUI event viewer 170 Figure 119: Restoring configuration from a saved file will result in the current configuration being overwritten and...diagnostics tools available in split tunnel mode 146 Figure 99: List of configured SSL VPN portals. The configured portal can then be associated with an aut hentication domain ...147 Figure 100: SSL VPN Portal configuration ...149 Figure 101: USB Device Detection ...151 Figure 102: USB...
...Figure 116: E-mail configuration as a Remote Logging option 168 Figure 117: Syslog server configuration for Remote Logging (continued 169 Figure 118: VPN logs displayed in GUI event viewer 170 Figure 119: Restoring configuration from a saved file will result in the current configuration being overwritten and...diagnostics tools available in split tunnel mode 146 Figure 99: List of configured SSL VPN portals. The configured portal can then be associated with an aut hentication domain ...147 Figure 100: SSL VPN Portal configuration ...149 Figure 101: USB Device Detection ...151 Figure 102: USB...
DSR-150 User Manual
Page 12
Unified Services Router User Manual Figure 132: AP specific statistics...185 Figure 133: List of current Active Firewall Sessions 186 Figure 134: List of connected 802.11 clients per AP 187 Figure 135: List of LAN hosts ...188 Figure 136: List of current Active VPN Sessions 189 10
Unified Services Router User Manual Figure 132: AP specific statistics...185 Figure 133: List of current Active Firewall Sessions 186 Figure 134: List of connected 802.11 clients per AP 187 Figure 135: List of LAN hosts ...188 Figure 136: List of current Active VPN Sessions 189 10
DSR-150 User Manual
Page 13
... ified Serv ices Ro u t er y o u are capable of s imu lt an eo usly man ag in g 5, 5, 10, 20 Secu re So cket s Lay er (SSL) VPN t u n n els res p ectiv ely , emp o werin g y o u r mo b ile u s ers b y p ro v id in g remo t e acces s t o a 11 The s econd W AN port can b e co n fig u red t o ... a s ecure link to is lo s t . M u lt ip le In M u lt ip le Ou t (M IM O) t ech n o lo g y allo ws t h e DSR-500N an d DSR-1000N t o p ro v id e h ig h d at a t raffic wit h o ut d is conn ectin g wh en a lan d lin e co nnect io n is olate s erv ers fro m y o u r LA N. DSR-150/150N/250 /250N...
... ified Serv ices Ro u t er y o u are capable of s imu lt an eo usly man ag in g 5, 5, 10, 20 Secu re So cket s Lay er (SSL) VPN t u n n els res p ectiv ely , emp o werin g y o u r mo b ile u s ers b y p ro v id in g remo t e acces s t o a 11 The s econd W AN port can b e co n fig u red t o ... a s ecure link to is lo s t . M u lt ip le In M u lt ip le Ou t (M IM O) t ech n o lo g y allo ws t h e DSR-500N an d DSR-1000N t o p ro v id e h ig h d at a t raffic wit h o ut d is conn ectin g wh en a lan d lin e co nnect io n is olate s erv ers fro m y o u r LA N. DSR-150/150N/250 /250N...
DSR-150 User Manual
Page 14
... u s . D-Lin k Un ified Serv ices Ro u t er. In ad d it y t h ro u g h en cry p t ed virtual links . The DSR-150/150N, DSR-250/250N, DSR-500/500N and DSR1000/ 1000N s u p p o rt 10, 25, 35 an d 75 s imu lt an eo u s IPSec VPN t u n n els res pectively . Efficien t D-Lin k Green Tech n o lo g y A s a co n cern ed memb er o f t h e g lo...
... u s . D-Lin k Un ified Serv ices Ro u t er. In ad d it y t h ro u g h en cry p t ed virtual links . The DSR-150/150N, DSR-250/250N, DSR-500/500N and DSR1000/ 1000N s u p p o rt 10, 25, 35 an d 75 s imu lt an eo u s IPSec VPN t u n n els res pectively . Efficien t D-Lin k Green Tech n o lo g y A s a co n cern ed memb er o f t h e g lo...
DSR-150 User Manual
Page 29
Ch eck t h e En ab le VLA N b o x t o ad d VLA N fu n ct io n alit y t o t h e LA N. 27 Th e LA N n et wo rk is ro ut er t o p ro vid e seg men t at io n cap ab ilit ies fo r firewall ru les an d VPN p o licies . Virt u al LA Ns can b e creat ed in t h is co n s id ered t h e d efau lt VLA N. Unified Services Router Figure 10: M ultiple VLAN Subne ts User Manual 2.2.3 VLAN configuration Setup > VLAN Settings > VLANconfiguration Th is p ag e allo ws en ab lin g o r d is ab lin g t h e VLA N fu n ct io n o n t h e ro u t er.
Ch eck t h e En ab le VLA N b o x t o ad d VLA N fu n ct io n alit y t o t h e LA N. 27 Th e LA N n et wo rk is ro ut er t o p ro vid e seg men t at io n cap ab ilit ies fo r firewall ru les an d VPN p o licies . Virt u al LA Ns can b e creat ed in t h is co n s id ered t h e d efau lt VLA N. Unified Services Router Figure 10: M ultiple VLAN Subne ts User Manual 2.2.3 VLAN configuration Setup > VLAN Settings > VLANconfiguration Th is p ag e allo ws en ab lin g o r d is ab lin g t h e VLA N fu n ct io n o n t h e ro u t er.
DSR-150 User Manual
Page 38
... er t h e t ime, in min u t es , t o wait b efo re d is co n n ect in g in g VPN t raffic t o b e d irect ed t o a VPN co n fig u red o n t h is W A N p o rt . If s p lit t u n n el is en abled, DSR wo n 't exp ect a d efau lt ro u t e fro m t h e ISP s erv er. Th is id le fo r...o s t s t o access in t ernet s it y : ISP Co n n ect io n t y p e: Bas ed o n t h e ISP y o u h av e s elect ed fo r t h e p rimary W A N link for this router, choos e Static IP addres s , DHCP client, Point-to-Point Tu n n elin g Pro t ocol (PPTP), Po in fo rmat io n . Unified Services Router...
... er t h e t ime, in min u t es , t o wait b efo re d is co n n ect in g in g VPN t raffic t o b e d irect ed t o a VPN co n fig u red o n t h is W A N p o rt . If s p lit t u n n el is en abled, DSR wo n 't exp ect a d efau lt ro u t e fro m t h e ISP s erv er. Th is id le fo r...o s t s t o access in t ernet s it y : ISP Co n n ect io n t y p e: Bas ed o n t h e ISP y o u h av e s elect ed fo r t h e p rimary W A N link for this router, choos e Static IP addres s , DHCP client, Point-to-Point Tu n n elin g Pro t ocol (PPTP), Po in fo rmat io n . Unified Services Router...
DSR-150 User Manual
Page 56
...ed in t ran s p aren t mo d e as s igned IP addres s es from a private s ubnet . Tran s p aren t ro u t in t ern al s erv ers (eg . A ll DSR feat u res (su ch as 3G mo d em s u p p o rt ) are co n fig u red t o b e in t h e s ame b ro ad cas t d o main . NA...ev eral co mp u t ers o n a LA N t o s h are s wit ch ed t o t h e W A N an d v ice v ers a, if t h ey d o n o t g et filt ered b y firewall o r VPN p o licies . NA T is red irect ed t h ro u g h t h e firewall t o reach LA N s erv ers b y t h eir ext ern al n ame. 54 Unified Services Router User Manual NA...
...ed in t ran s p aren t mo d e as s igned IP addres s es from a private s ubnet . Tran s p aren t ro u t in t ern al s erv ers (eg . A ll DSR feat u res (su ch as 3G mo d em s u p p o rt ) are co n fig u red t o b e in t h e s ame b ro ad cas t d o main . NA...ev eral co mp u t ers o n a LA N t o s h are s wit ch ed t o t h e W A N an d v ice v ers a, if t h ey d o n o t g et filt ered b y firewall o r VPN p o licies . NA T is red irect ed t h ro u g h t h e firewall t o reach LA N s erv ers b y t h eir ext ern al n ame. 54 Unified Services Router User Manual NA...
DSR-150 User Manual
Page 102
... s et t in g s can b e co n fig u red t o allo w en cry p t ed VPN t raffic fo r IPs ec , PPTP, an d L2TP VPN t u n n el co n n ect io n s b et ween t h e LA N an d in t h e VPN Pas s t h ro u g h p ag e mu s t b e e n a b le d . 100 User Manual 5.7 VPN Passthrough for Firewall Advanced > Firewall Settings > VPN Passthrough Th is not appropriate to introduce this pas s through...
... s et t in g s can b e co n fig u red t o allo w en cry p t ed VPN t raffic fo r IPs ec , PPTP, an d L2TP VPN t u n n el co n n ect io n s b et ween t h e LA N an d in t h e VPN Pas s t h ro u g h p ag e mu s t b e e n a b le d . 100 User Manual 5.7 VPN Passthrough for Firewall Advanced > Firewall Settings > VPN Passthrough Th is not appropriate to introduce this pas s through...
DSR-150 User Manual
Page 103
... n s and g ames wit h co rresp ond ing o ut bou n d an d in g p o rt s t o o p en when enabled. 101 Unified Services Router Figure 62 : Pas s through options for VPN tunne ls User Manual 5.8 Application Rules Advanced > Application Rules > Application Rules Application rules are opened. This feature allows devices o n t h e LA N o r DM Z t o req u es t o n e o r mo re...
... n s and g ames wit h co rresp ond ing o ut bou n d an d in g p o rt s t o o p en when enabled. 101 Unified Services Router Figure 62 : Pas s through options for VPN tunne ls User Manual 5.8 Application Rules Advanced > Application Rules > Application Rules Application rules are opened. This feature allows devices o n t h e LA N o r DM Z t o req u es t o n e o r mo re...