DSR-150 Datasheet
Page 4
.../250N/500/500N Unified Services Routers DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR-500N USB 2.0 1 1 Console 1 RJ-45 1 RJ-45 System Performance4 Firewall Throughput5 45 Mbps 70 Mbps 45 Mbps 70 Mbps VPN Throughput6 25 Mbps 35 Mbps ... VLAN (Port-Based) Yes Yes IP Multicast IGMP Proxy IGMP Proxy IPv6 Yes Yes Route Failover - Yes - Yes 3G Redundancy Yes Yes Wireless Multiple Service Set Identifier (Multi SSID) N/A Yes
.../250N/500/500N Unified Services Routers DSR-150 DSR-250 DSR-500 DSR-150N DSR-250N DSR-500N USB 2.0 1 1 Console 1 RJ-45 1 RJ-45 System Performance4 Firewall Throughput5 45 Mbps 70 Mbps 45 Mbps 70 Mbps VPN Throughput6 25 Mbps 35 Mbps ... VLAN (Port-Based) Yes Yes IP Multicast IGMP Proxy IGMP Proxy IPv6 Yes Yes Route Failover - Yes - Yes 3G Redundancy Yes Yes Wireless Multiple Service Set Identifier (Multi SSID) N/A Yes
DSR-150 Datasheet
Page 5
Personal (WPA-PSK) Wi-Fi Protected Access - DSR-150/150N/250/250N/500/500N Unified Services Routers Service Set Identifier (SSID) to VLAN Mapping Standards Wireless Security DSR-150 DSR-250 N/A N/A DSR-500 N/A Virtual Private Network (VPN) IPSec Tunnels 10 25 35 SSL VPN Tunnels 1 5 10 PPTP/L2TP Clients 10 25 25 VPN Tunnels (... Unit Input: 100-240 VAC, 50/60Hz Output: DC 12V, 1.5A Internal Power Supply Unit Input: 100-240 VAC, 50/60Hz DSR-150N DSR-250N DSR-500N Yes B/G/N (dual stream) Wired Equivalent Privacy (WEP) Wi-Fi Protect Setup (WPS) Wi-Fi Protected Access -
Personal (WPA-PSK) Wi-Fi Protected Access - DSR-150/150N/250/250N/500/500N Unified Services Routers Service Set Identifier (SSID) to VLAN Mapping Standards Wireless Security DSR-150 DSR-250 N/A N/A DSR-500 N/A Virtual Private Network (VPN) IPSec Tunnels 10 25 35 SSL VPN Tunnels 1 5 10 PPTP/L2TP Clients 10 25 25 VPN Tunnels (... Unit Input: 100-240 VAC, 50/60Hz Output: DC 12V, 1.5A Internal Power Supply Unit Input: 100-240 VAC, 50/60Hz DSR-150N DSR-250N DSR-500N Yes B/G/N (dual stream) Wired Equivalent Privacy (WEP) Wi-Fi Protect Setup (WPS) Wi-Fi Protected Access -
DSR-150 User Manual
Page 4
... DHCP Leas ed Clients 17 LAN Configuration in an IP v6 Network 43 Checking WAN Status...45 3.3 Bandwidth Cont rols ...47 3.4 3.4.1 3.4.2 3.4.3 Features with Multiple WAN Links 49 Auto Failover ...49 Load Balancing ...50 Protocol Bindings ...52 3.5 3.5.1 3.5.2 3.5.3 3.5.4 3.5.5 3.5.6 3.5.7 Routing Configuration...53 Routing Mode ...53 Dynamic Routing (RIP) ...OSPFv3 ...60 6to4 Tunneling ...62 ISA TAP Tunnels ...63 3.6 Configurable Port - WAN Option 64 3.7 WAN 3 (3G) Configuration 64 3.8 WAN Port Settings...66 2 Unified Services Router User Manual Table of Contents Chapter 1.
... DHCP Leas ed Clients 17 LAN Configuration in an IP v6 Network 43 Checking WAN Status...45 3.3 Bandwidth Cont rols ...47 3.4 3.4.1 3.4.2 3.4.3 Features with Multiple WAN Links 49 Auto Failover ...49 Load Balancing ...50 Protocol Bindings ...52 3.5 3.5.1 3.5.2 3.5.3 3.5.4 3.5.5 3.5.6 3.5.7 Routing Configuration...53 Routing Mode ...53 Dynamic Routing (RIP) ...OSPFv3 ...60 6to4 Tunneling ...62 ISA TAP Tunnels ...63 3.6 Configurable Port - WAN Option 64 3.7 WAN 3 (3G) Configuration 64 3.8 WAN Port Settings...66 2 Unified Services Router User Manual Table of Contents Chapter 1.
DSR-150 User Manual
Page 5
... PSK 73 RADIUS Authentication ...73 4.3 Creating and Using Access Points 75 4.3.1 Primary benefits of Virtual APs 77 4.4 Tuning Radio Specific Settings 78 4.5 WMM...79 4.6 Wireless distribution system (WDS 80 4.7 Advanced Wireless Settings 81 4.8 Wi-Fi Protected Setup (WPS 82 Chapter 5. Securing the Private Network ...85 5.1 Firewall Rules ...85 5.2 Defining Rule Schedules ... ...104 Export Web Filter ...105 5.10 IP/MAC Binding ...106 5.11 Intrusion Prevention (IPS 107 5.12 Protecting from Internet Attacks 108 Chapter 6. Unified Services Router User Manual Chapter 4.
... PSK 73 RADIUS Authentication ...73 4.3 Creating and Using Access Points 75 4.3.1 Primary benefits of Virtual APs 77 4.4 Tuning Radio Specific Settings 78 4.5 WMM...79 4.6 Wireless distribution system (WDS 80 4.7 Advanced Wireless Settings 81 4.8 Wi-Fi Protected Setup (WPS 82 Chapter 5. Securing the Private Network ...85 5.1 Firewall Rules ...85 5.2 Defining Rule Schedules ... ...104 Export Web Filter ...105 5.10 IP/MAC Binding ...106 5.11 Intrusion Prevention (IPS 107 5.12 Protecting from Internet Attacks 108 Chapter 6. Unified Services Router User Manual Chapter 4.
DSR-150 User Manual
Page 6
... vent Log Viewer in GUI 169 9.5 Backing up and Restoring Configuration Settings 170 9.6 Upgrading Router Firmware 171 9.7 Upgrading Router Firmware via USB 172 9.8 Dynamic DNS Setup ...173 9.9 9.9.1 9.9.2 ...Router User Manual Chapter 7. SSL VPN ...129 7.1 Groups and Users...131 7.1.1 Users and Passwords ...137 7.2 Using SSL VPN Policies 138 7.2.1 Using Network Res ourc es 141 7.3 Application Port Forwarding 142 7.4 SSL VPN Client Configuration 144 7.5 User Portal ...147 7.5.1 Creating Portal Layouts 147 Chapter 8. Advanced Configuration Tools 150 8.1 USB Device Setup ...150...
... vent Log Viewer in GUI 169 9.5 Backing up and Restoring Configuration Settings 170 9.6 Upgrading Router Firmware 171 9.7 Upgrading Router Firmware via USB 172 9.8 Dynamic DNS Setup ...173 9.9 9.9.1 9.9.2 ...Router User Manual Chapter 7. SSL VPN ...129 7.1 Groups and Users...131 7.1.1 Users and Passwords ...137 7.2 Using SSL VPN Policies 138 7.2.1 Using Network Res ourc es 141 7.3 Application Port Forwarding 142 7.4 SSL VPN Client Configuration 144 7.5 User Portal ...147 7.5.1 Creating Portal Layouts 147 Chapter 8. Advanced Configuration Tools 150 8.1 USB Device Setup ...150...
DSR-150 User Manual
Page 7
Factory Default Settings...199 Appendix C. Product Statement ...256 5 Credits ...195 Appendix A. Log Output Reference ...201 Appendix E. Unified Services Router User Manual 10.3.2 Wireless Clients ...187 10.3.3 LAN Clients ...187 10.3.4 Active VPN Tunnels ...188 Chapter 11. Standard ... to Test LAN Connectivity 192 11.3.1 Testing the LA N path from your P C to your router 192 11.3.2 Testing the LA N path from your P C to a remote device 193 11.4 Restoring factory-default configuration settings 194 Chapter 12. RJ-45 Pin-outs...255 Appendix F. Glossary ...196 Appendix B.
Factory Default Settings...199 Appendix C. Product Statement ...256 5 Credits ...195 Appendix A. Log Output Reference ...201 Appendix E. Unified Services Router User Manual 10.3.2 Wireless Clients ...187 10.3.3 LAN Clients ...187 10.3.4 Active VPN Tunnels ...188 Chapter 11. Standard ... to Test LAN Connectivity 192 11.3.1 Testing the LA N path from your P C to your router 192 11.3.2 Testing the LA N path from your P C to a remote device 193 11.4 Restoring factory-default configuration settings 194 Chapter 12. RJ-45 Pin-outs...255 Appendix F. Glossary ...196 Appendix B.
DSR-150 User Manual
Page 8
... Reserved IPs ...17 Figure 3: LAN DHCP Leased Clients ...18 Figure 4: IP v6 LA N and DHCP v6 configuration 19 Figure 5: Configuring the Router Advertisement Daemon 22 Figure 6: IP v6 Advertisement Prefix settings ...23 Figure 7: Adding VLAN memberships to the LAN 24 Figure 8: Port VLAN list ...25 Figure 9: Configuring VLAN membership for a port 26...
... Reserved IPs ...17 Figure 3: LAN DHCP Leased Clients ...18 Figure 4: IP v6 LA N and DHCP v6 configuration 19 Figure 5: Configuring the Router Advertisement Daemon 22 Figure 6: IP v6 Advertisement Prefix settings ...23 Figure 7: Adding VLAN memberships to the LAN 24 Figure 8: Port VLAN list ...25 Figure 9: Configuring VLAN membership for a port 26...
DSR-150 User Manual
Page 9
...Wireless Network Setup Wizards ...69 Figure 42: List of A vailable Profiles shows the options available to secure the wireless link .......... 71 Figure 43: Profile configuration to set network security 73 Figure 44: RA DIUS server (External Authentication) configuration 75 Figure 45: Virtual AP configuration ...76 ... 59: List of us er defined services...98 Figure 60: Custom Services configuration ...98 Figure 61: A vailable ALG support on the router 100 Figure 62: Passthrough options for VPN tunnels 101 Figure 63: List of A vailable Application Rules showing 4 unique rules 102 Figure ...
...Wireless Network Setup Wizards ...69 Figure 42: List of A vailable Profiles shows the options available to secure the wireless link .......... 71 Figure 43: Profile configuration to set network security 73 Figure 44: RA DIUS server (External Authentication) configuration 75 Figure 45: Virtual AP configuration ...76 ... 59: List of us er defined services...98 Figure 60: Custom Services configuration ...98 Figure 61: A vailable ALG support on the router 100 Figure 62: Passthrough options for VPN tunnels 101 Figure 63: List of A vailable Application Rules showing 4 unique rules 102 Figure ...
DSR-150 User Manual
Page 10
...clientless SSL VPN connections to the DS R 130 Figure 85: List of groups ...131 Figure 86: User group configuration ...132 Figure 87: SSLVPN Settings...133 Figure 88: Group login policies options ...134 Figure 89: Browser policies options ...135 Figure 90: IP policies options...136 Figure 91: A ... LAN from internet attacks 109 Figure 71: Example of Gateway-to-Gateway IPsec VPN tunnel using two DSR routers connected to the internal network through the DSR IPsec gateway ...112 Figure 73: VPN Wizard launch screen ...113 Figure 74: IPsec policy configuration ...116 Figure 75: IPsec policy ...
...clientless SSL VPN connections to the DS R 130 Figure 85: List of groups ...131 Figure 86: User group configuration ...132 Figure 87: SSLVPN Settings...133 Figure 88: Group login policies options ...134 Figure 89: Browser policies options ...135 Figure 90: IP policies options...136 Figure 91: A ... LAN from internet attacks 109 Figure 71: Example of Gateway-to-Gateway IPsec VPN tunnel using two DSR routers connected to the internal network through the DSR IPsec gateway ...112 Figure 73: VPN Wizard launch screen ...113 Figure 74: IPsec policy configuration ...116 Figure 75: IPsec policy ...
DSR-150 User Manual
Page 11
... Control 160 Figure 111: SNMP system information for this router 161 Figure 112: Date, Time, and NTP server setup 162 Figure 113: Facility settings for Logging ...164 Figure 114: Log configuration options for traffic through router 166 Figure 115: IP v6 Log configuration options for traffic... through router 167 Figure 116: E-mail configuration as a Remote Logging option 168 ...
... Control 160 Figure 111: SNMP system information for this router 161 Figure 112: Date, Time, and NTP server setup 162 Figure 113: Facility settings for Logging ...164 Figure 114: Log configuration options for traffic through router 166 Figure 115: IP v6 Log configuration options for traffic... through router 167 Figure 116: E-mail configuration as a Remote Logging option 168 ...
DSR-150 User Manual
Page 16
...art o f t h e s u b n et ran g e fo r d ev ices wit h s t at ic IP ad d res s in t h e ro u t er's LA N s u b n et ) b efo re acces s ing the router via changed IP addres s . Su b n et mas k (fact o ry d e fau lt : 255.255.255.0). 2. In the LAN Setup page, enter the following information for... your router: IP addres s (factory default: 192.168.10.1). If y o u ch an g e t h e IP ad d res s an d click Sav e Set t in g s , t h e GUI will b e p as s ig n ed IP ad d res s es in t h...
...art o f t h e s u b n et ran g e fo r d ev ices wit h s t at ic IP ad d res s in t h e ro u t er's LA N s u b n et ) b efo re acces s ing the router via changed IP addres s . Su b n et mas k (fact o ry d e fau lt : 255.255.255.0). 2. In the LAN Setup page, enter the following information for... your router: IP addres s (factory default: 192.168.10.1). If y o u ch an g e t h e IP ad d res s an d click Sav e Set t in g s , t h e GUI will b e p as s ig n ed IP ad d res s es in t h...
DSR-150 User Manual
Page 17
...Mapping section: Ho s t Name: Pro v id e a v alid h o s t n ame IP ad d res s : Pro v id e t h e IP ad d res s o f t h e h o s t n ame, 4. Click Save Settings to apply all DNS req u es ts an d co mmu n icat e wit h t h e ISP's DNS s erv ers , click t h e ch eckb o x. 5. Figure 1 : Se tup page for LAN... In the LAN proxy section: En ab le DNS Pro xy : To en ab le t h e ro u t er t o act as it s DHCP mo d e 3. Unified Services Router User Manual Leas e Time: En t er t h e t ime, in t h is s ect io n wh en DHCP Relay is t h e o n ly co n fig u rat io...
...Mapping section: Ho s t Name: Pro v id e a v alid h o s t n ame IP ad d res s : Pro v id e t h e IP ad d res s o f t h e h o s t n ame, 4. Click Save Settings to apply all DNS req u es ts an d co mmu n icat e wit h t h e ISP's DNS s erv ers , click t h e ch eckb o x. 5. Figure 1 : Se tup page for LAN... In the LAN proxy section: En ab le DNS Pro xy : To en ab le t h e ro u t er t o act as it s DHCP mo d e 3. Unified Services Router User Manual Leas e Time: En t er t h e t ime, in t h is s ect io n wh en DHCP Relay is t h e o n ly co n fig u rat io...
DSR-150 User Manual
Page 18
... d in g ru le . 16 MAC Addres s es : Th e M A C ad d res s t h at is res erv ed b y t h e DHCP s erv er. Unified Services Router 2.1.1 LAN DHCP Reserv ed IPs User Manual Setup > Network Settings > LAN DHCP Reserved IPs Th is ro u t er DHCP s erv er can as sig n TCP/ IP co n fig urat io n s t o co...
... d in g ru le . 16 MAC Addres s es : Th e M A C ad d res s t h at is res erv ed b y t h e DHCP s erv er. Unified Services Router 2.1.1 LAN DHCP Reserv ed IPs User Manual Setup > Network Settings > LAN DHCP Reserved IPs Th is ro u t er DHCP s erv er can as sig n TCP/ IP co n fig urat io n s t o co...
DSR-150 User Manual
Page 19
Unified Services Router Figure 2: LAN DHCP Re s e rve d IPs User Manual 2.1.2 LAN DHCP Leased Clients Setup > Network Settings > LAN DHCP Leased Clients Th is p ag e p ro v id es t h e lis t o f clien t s co n n ect t o LA N DHCP s erv er. 17
Unified Services Router Figure 2: LAN DHCP Re s e rve d IPs User Manual 2.1.2 LAN DHCP Leased Clients Setup > Network Settings > LAN DHCP Leased Clients Th is p ag e p ro v id es t h e lis t o f clien t s co n n ect t o LA N DHCP s erv er. 17
DSR-150 User Manual
Page 20
...e t h is id en t ified b y t h e in g s fo r t h e ro u t er is s et b y t h e p refix length field. 18 Unified Services Router Figure 3: LAN DHCP Le as a co n figu red IP ad d res s res ervation. 2.1.3 LAN Configuration in t h e n et wo rk's ad d res s es is t h e p ... t h e res erv ed IP lis t . t h e n u mb er o f co mmo n in it ial b it s fo r t h eir IPv 6 ad d res s ; By d efau lt t h is is fec0 ::1 . LAN Settings Th e d efau lt IPv 6 LA N ad d ress fo r t h e ro u ter is 6 4 b it s o f t h e ad d res s called t h e p refix. MAC Addres s es : Th e M A C ad d ress o ...
...e t h is id en t ified b y t h e in g s fo r t h e ro u t er is s et b y t h e p refix length field. 18 Unified Services Router Figure 3: LAN DHCP Le as a co n figu red IP ad d res s res ervation. 2.1.3 LAN Configuration in t h e n et wo rk's ad d res s es is t h e p ... t h e res erv ed IP lis t . t h e n u mb er o f co mmo n in it ial b it s fo r t h eir IPv 6 ad d res s ; By d efau lt t h is is fec0 ::1 . LAN Settings Th e d efau lt IPv 6 LA N ad d ress fo r t h e ro u ter is 6 4 b it s o f t h e ad d res s called t h e p refix. MAC Addres s es : Th e M A C ad d ress o ...
DSR-150 User Manual
Page 21
Op en a n ew co n n ect io n t o t h e n ew IP ad d res s an d lo g in t h e ro u t er's LA N s u b n et ) b efo re acces s ing the router via changed IP addres s . 19 Be s u re t h e LA N h o s t (t h e mach in e u sed t o man ag e t h e ro u t er) h as o b t ain ed IP ad d res s fro m n ewly as s ig n ed p o o l (o r h as a s t at ic IP ad d res s in ag ain . Unified Services Router Figure 4 : IPv6 LAN and DHCPv6 configurat io n User Manual If y o u ch an g e t h e IP ad d res s an d click Sav e Set t in g s , t h e GUI will n o t res p o n d .
Op en a n ew co n n ect io n t o t h e n ew IP ad d res s an d lo g in t h e ro u t er's LA N s u b n et ) b efo re acces s ing the router via changed IP addres s . 19 Be s u re t h e LA N h o s t (t h e mach in e u sed t o man ag e t h e ro u t er) h as o b t ain ed IP ad d res s fro m n ewly as s ig n ed p o o l (o r h as a s t at ic IP ad d res s in ag ain . Unified Services Router Figure 4 : IPv6 LAN and DHCPv6 configurat io n User Manual If y o u ch an g e t h e IP ad d res s an d click Sav e Set t in g s , t h e GUI will n o t res p o n d .
DSR-150 User Manual
Page 25
Unified Services Router User Manual IPv 6 Prefix: W h en u s ing Glo b al/ Lo cal/ISA TAP p refixes , t h is field is u s ed to define the IPv6 n etwork advertis ed ... t h e VLA N Co n fig u rat io n p ag e, en ab le VLA N s u p po rt o n t h e ro u ter a n d t h en p ro ceed t o t he n ext s ectio n t o d efin e t h e virtual network. Typically this router. IPv 6 Prefix Len g t h : Th is v alu e in an IPv 4 n et wo rk. LA N d ev ices can b e is o lat ed fro m t h e g en eral LA N. Setup...
Unified Services Router User Manual IPv 6 Prefix: W h en u s ing Glo b al/ Lo cal/ISA TAP p refixes , t h is field is u s ed to define the IPv6 n etwork advertis ed ... t h e VLA N Co n fig u rat io n p ag e, en ab le VLA N s u p po rt o n t h e ro u ter a n d t h en p ro ceed t o t he n ext s ectio n t o d efin e t h e virtual network. Typically this router. IPv 6 Prefix Len g t h : Th is v alu e in an IPv 4 n et wo rk. LA N d ev ices can b e is o lat ed fro m t h e g en eral LA N. Setup...
DSR-150 User Manual
Page 26
... s ed b y s elect in g o n e o f t h e fo u r p h y s ical p o rt s o r a co n fig u r ed acces s p o in t erface. Unified Services Router User Manual n u mb er fro m 2 t o 4091. Setup > VLAN Settings > Port VLAN VLA N memb ers h ip p ro p ert ies fo r t h e LA N an d wireles s LA N are lis t ed o n t h is VLA N can as... e t h e p o rt is u n tagged, it . Figure 7: Adding VLAN me mbe rs hips to the LAN 2.2.1 Associating VLANs to the s witch port on the router will be tagged. If t h e d at p o rt an d VLA N memb ers h ip in t o t h e p ort is a memb er o f a u s er s ...
... s ed b y s elect in g o n e o f t h e fo u r p h y s ical p o rt s o r a co n fig u r ed acces s p o in t erface. Unified Services Router User Manual n u mb er fro m 2 t o 4091. Setup > VLAN Settings > Port VLAN VLA N memb ers h ip p ro p ert ies fo r t h e LA N an d wireles s LA N are lis t ed o n t h is VLA N can as... e t h e p o rt is u n tagged, it . Figure 7: Adding VLAN me mbe rs hips to the LAN 2.2.1 Associating VLANs to the s witch port on the router will be tagged. If t h e d at p o rt an d VLA N memb ers h ip in t o t h e p ort is a memb er o f a u s er s ...
DSR-150 User Manual
Page 28
... ices o n t h is p ag e s ho ws a lis t o f av ailab le mu lt i-VLA N s u b n ets. Unified Services Router Figure 9 : Configu ri ng VLAN me mbe rs hip for a port User Manual 2.2.2 Multiple VLAN Subnets Setup > VLAN Settings > Multi VLAN Settings Th is VLA N. VLAN ID: Th e PVID o f t h e VLA N t h at will h av e all memb er d ev...
... ices o n t h is p ag e s ho ws a lis t o f av ailab le mu lt i-VLA N s u b n ets. Unified Services Router Figure 9 : Configu ri ng VLAN me mbe rs hip for a port User Manual 2.2.2 Multiple VLAN Subnets Setup > VLAN Settings > Multi VLAN Settings Th is VLA N. VLAN ID: Th e PVID o f t h e VLA N t h at will h av e all memb er d ev...
DSR-150 User Manual
Page 29
Virt u al LA Ns can b e creat ed in t h is co n s id ered t h e d efau lt VLA N. Th e LA N n et wo rk is ro ut er t o p ro vid e seg men t at io n cap ab ilit ies fo r firewall ru les an d VPN p o licies . Ch eck t h e En ab le VLA N b o x t o ad d VLA N fu n ct io n alit y t o t h e LA N. 27 Unified Services Router Figure 10: M ultiple VLAN Subne ts User Manual 2.2.3 VLAN configuration Setup > VLAN Settings > VLANconfiguration Th is p ag e allo ws en ab lin g o r d is ab lin g t h e VLA N fu n ct io n o n t h e ro u t er.
Virt u al LA Ns can b e creat ed in t h is co n s id ered t h e d efau lt VLA N. Th e LA N n et wo rk is ro ut er t o p ro vid e seg men t at io n cap ab ilit ies fo r firewall ru les an d VPN p o licies . Ch eck t h e En ab le VLA N b o x t o ad d VLA N fu n ct io n alit y t o t h e LA N. 27 Unified Services Router Figure 10: M ultiple VLAN Subne ts User Manual 2.2.3 VLAN configuration Setup > VLAN Settings > VLANconfiguration Th is p ag e allo ws en ab lin g o r d is ab lin g t h e VLA N fu n ct io n o n t h e ro u t er.