Product Manual
Page 1
Building Networks for People Unified Services Router User Manual DSR-250 / 250N / 500 / 500N / 1000 / 1000N Ver. 1.04 Small Business Gateway Solution http://security.dlink.com
Building Networks for People Unified Services Router User Manual DSR-250 / 250N / 500 / 500N / 1000 / 1000N Ver. 1.04 Small Business Gateway Solution http://security.dlink.com
Product Manual
Page 2
User Manual Unified Services Router D-Link Corporation Copyright © 2011. http://www.dlink.com
User Manual Unified Services Router D-Link Corporation Copyright © 2011. http://www.dlink.com
Product Manual
Page 3
... of merchantability or fitness for any implied warranties of such revision or changes. FURTHERMORE, D LINK WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST CUSTOMER FOR LOSSES OR DAMAGES. Unified Services Router User Manual User Manual DSR-250 / 250N / DSR-500 / 500N / 1000 / 1000N Unified Services Router Version 1.04 Copyright © 2011 Copyright Notice This publication, including all rights reserved...
... of merchantability or fitness for any implied warranties of such revision or changes. FURTHERMORE, D LINK WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST CUSTOMER FOR LOSSES OR DAMAGES. Unified Services Router User Manual User Manual DSR-250 / 250N / DSR-500 / 500N / 1000 / 1000N Unified Services Router Version 1.04 Copyright © 2011 Copyright Notice This publication, including all rights reserved...
Product Manual
Page 4
... to ports 22 2.3 Configurable Port: DMZ Setup 24 2.4 Universal Plug and Play (UPnP 25 2.5 Captive Portal ...27 Chapter 3. Unified Services Router User Manual Table of Contents Chapter 1. Configuring Your Network: LAN Setup 13 2.1 LAN Configuration 13 2.1.1 LAN Configuration in an IPv6 ... WPS 54 Manual Wireless Network Setup 55 4.2 4.2.1 4.2.2 4.2.3 Wireless Profiles ...55 WEP Security ...56 WPA or WPA2 with Multiple WAN Links 41 Auto Failover...41 Load Balancing...42 Protocol Bindings ...43 3.5 3.5.1 3.5.2 3.5.3 Routing Configuration 44 Routing Mode ...44 Dynamic Routing (RIP...
... to ports 22 2.3 Configurable Port: DMZ Setup 24 2.4 Universal Plug and Play (UPnP 25 2.5 Captive Portal ...27 Chapter 3. Unified Services Router User Manual Table of Contents Chapter 1. Configuring Your Network: LAN Setup 13 2.1 LAN Configuration 13 2.1.1 LAN Configuration in an IPv6 ... WPS 54 Manual Wireless Network Setup 55 4.2 4.2.1 4.2.2 4.2.3 Wireless Profiles ...55 WEP Security ...56 WPA or WPA2 with Multiple WAN Links 41 Auto Failover...41 Load Balancing...42 Protocol Bindings ...43 3.5 3.5.1 3.5.2 3.5.3 Routing Configuration 44 Routing Mode ...44 Dynamic Routing (RIP...
Product Manual
Page 5
... Rules ...65 5.2 Defining Rule Schedules 66 5.3 Configuring Firewall Rules 67 5.3.1 Firewall Rule Configuration Examples 72 5.4 Security on Custom Services 76 5.5 ALG support...77 5.6 VPN Passthrough for Firewall 78 5.7 Application Rules ...79 5.8 5.8.1 5.8.2 5.8.3 5.8.4 Web Content ...Port Forwarding 114 7.4 SSL VPN Client Configuration 116 7.5 User Portal ...118 7.5.1 Creating Portal Layouts 119 Chapter 8. Unified Services Router User Manual 4.3.1 4.4 4.5 4.6 Primary benefits of Virtual APs 61 Tuning Radio Specific Settings 62 Advanced Wireless Settings 63 Wi...
... Rules ...65 5.2 Defining Rule Schedules 66 5.3 Configuring Firewall Rules 67 5.3.1 Firewall Rule Configuration Examples 72 5.4 Security on Custom Services 76 5.5 ALG support...77 5.6 VPN Passthrough for Firewall 78 5.7 Application Rules ...79 5.8 5.8.1 5.8.2 5.8.3 5.8.4 Web Content ...Port Forwarding 114 7.4 SSL VPN Client Configuration 116 7.5 User Portal ...118 7.5.1 Creating Portal Layouts 119 Chapter 8. Unified Services Router User Manual 4.3.1 4.4 4.5 4.6 Primary benefits of Virtual APs 61 Tuning Radio Specific Settings 62 Advanced Wireless Settings 63 Wi...
Product Manual
Page 6
...Using Diagnostic Tools 141 Ping ...142 Trace Route ...142 DNS Lookup ...143 Router Options ...143 Chapter 10. Glossary ...162 Appendix B. Standard Services Available for Port Forwarding & Firewall Configuration 166 4 Unified Services Router User Manual 8.3 Authentication Certificates 124 8.4 Advanced Switch Configuration 126 Chapter 9. ...to Log 131 Sending Logs to a remote device 159 11.4 Restoring factory-default configuration settings 160 Chapter 12. Router Status and Statistics 144 10.1 System Overview 144 10.1.1 Device Status ...144 10.1.2 Resource Utilization 146 10.2...
...Using Diagnostic Tools 141 Ping ...142 Trace Route ...142 DNS Lookup ...143 Router Options ...143 Chapter 10. Glossary ...162 Appendix B. Standard Services Available for Port Forwarding & Firewall Configuration 166 4 Unified Services Router User Manual 8.3 Authentication Certificates 124 8.4 Advanced Switch Configuration 126 Chapter 9. ...to Log 131 Sending Logs to a remote device 159 11.4 Restoring factory-default configuration settings 160 Chapter 12. Router Status and Statistics 144 10.1 System Overview 144 10.1.1 Device Status ...144 10.1.2 Resource Utilization 146 10.2...
Product Manual
Page 7
Log Output Reference...167 Appendix E. Product Statement ...222 5 Unified Services Router User Manual Appendix D. RJ-45 Pin-outs...221 Appendix F.
Log Output Reference...167 Appendix E. Product Statement ...222 5 Unified Services Router User Manual Appendix D. RJ-45 Pin-outs...221 Appendix F.
Product Manual
Page 8
Unified Services Router User Manual List of Figures Figure 1: Setup page for LAN TCP/IP settings 15 Figure 2: IPv6 LAN and DHCPv6 configuration 17 Figure 3: Configuring the Router Advertisement Daemon 20 Figure 4: IPv6 Advertisement Prefix settings 21 Figure 5: Adding VLAN memberships to the LAN 22 Figure...28: Wireless Network Setup Wizards 54 Figure 29: List of Available Profiles shows the options available to secure the wireless link .........56 Figure 30: Profile configuration to set network security 57 Figure 31: RADIUS server (External Authentication) configuration 59 Figure 32:...
Unified Services Router User Manual List of Figures Figure 1: Setup page for LAN TCP/IP settings 15 Figure 2: IPv6 LAN and DHCPv6 configuration 17 Figure 3: Configuring the Router Advertisement Daemon 20 Figure 4: IPv6 Advertisement Prefix settings 21 Figure 5: Adding VLAN memberships to the LAN 22 Figure...28: Wireless Network Setup Wizards 54 Figure 29: List of Available Profiles shows the options available to secure the wireless link .........56 Figure 30: Profile configuration to set network security 57 Figure 31: RADIUS server (External Authentication) configuration 59 Figure 32:...
Product Manual
Page 9
L2TP Server 99 Figure 63: OpenVPN configuration ...100 7 Unified Services Router User Manual Figure 33: List of configured access points (Virtual APs) shows one enabled access point on the radio, broadcasting its SSID 61 Figure 34: ... list 83 Figure 49: Export Approved URL list ...84 Figure 50: The following example binds a LAN host's MAC Address to an IP address served by DSR. If there is an IP/MAC Binding violation, the violating packet will be dropped and logs will be captured ...85 Figure 51: Intrusion Prevention features...
L2TP Server 99 Figure 63: OpenVPN configuration ...100 7 Unified Services Router User Manual Figure 33: List of configured access points (Virtual APs) shows one enabled access point on the radio, broadcasting its SSID 61 Figure 34: ... list 83 Figure 49: Export Approved URL list ...84 Figure 50: The following example binds a LAN host's MAC Address to an IP address served by DSR. If there is an IP/MAC Binding violation, the violating packet will be dropped and logs will be captured ...85 Figure 51: Intrusion Prevention features...
Product Manual
Page 10
Send SMS 123 Figure 83: SMS Service - Unified Services Router User Manual Figure 64: Example of clientless SSL VPN connections to SSL VPN... WAN 128 Figure 88: SNMP Users, Traps, and Access Control 129 Figure 89: SNMP system information for this router 130 Figure 90: Date, Time, and NTP server setup 131 Figure 91: Facility settings for Logging 133 Figure ... 74: SSL VPN policy configuration 112 Figure 75: List of configured resources, which are available to assign to the DSR 102 Figure 65: List of groups ...103 Figure 66: User group configuration ...104 Figure 67: SSLVPN Settings...105...
Send SMS 123 Figure 83: SMS Service - Unified Services Router User Manual Figure 64: Example of clientless SSL VPN connections to SSL VPN... WAN 128 Figure 88: SNMP Users, Traps, and Access Control 129 Figure 89: SNMP system information for this router 130 Figure 90: Date, Time, and NTP server setup 131 Figure 91: Facility settings for Logging 133 Figure ... 74: SSL VPN policy configuration 112 Figure 75: List of configured resources, which are available to assign to the DSR 102 Figure 65: List of groups ...103 Figure 66: User group configuration ...104 Figure 67: SSLVPN Settings...105...
Product Manual
Page 11
Unified Services Router User Manual Figure 98: Dynamic DNS configuration 141 Figure 99: Router diagnostics tools available in the GUI 142 Figure 100: Sample trace route output 143 Figure 101: Device Status display...145 Figure 102: Device Status display (...
Unified Services Router User Manual Figure 98: Dynamic DNS configuration 141 Figure 99: Router diagnostics tools available in the GUI 142 Figure 100: Sample trace route output 143 Figure 101: Device Status display...145 Figure 102: Device Status display (...
Product Manual
Page 12
...Security (IPsec), Point-to a central corporate database. 10 The DSR-250/250N, DSR-500/500N and DSR-1000 /1000N are able to deliver superior wireless performance, the DSR-500N and DSR1000N include 802.11 a/b/g/n, allowing for operation on ...Unified Services Router User Manual Chapter 1. Multiple In Multiple Out (MIMO) technology allows the DSR-500N and DSR-1000N to provide high data rates with clientless remote access anywhere and anytime using SSL VPN tunnels. The DSR 1000N can be configured to automatically switch to your network. Introduction D-Link Unified Services Routers...
...Security (IPsec), Point-to a central corporate database. 10 The DSR-250/250N, DSR-500/500N and DSR-1000 /1000N are able to deliver superior wireless performance, the DSR-500N and DSR1000N include 802.11 a/b/g/n, allowing for operation on ...Unified Services Router User Manual Chapter 1. Multiple In Multiple Out (MIMO) technology allows the DSR-500N and DSR-1000N to provide high data rates with clientless remote access anywhere and anytime using SSL VPN tunnels. The DSR 1000N can be configured to automatically switch to your network. Introduction D-Link Unified Services Routers...
Product Manual
Page 13
... facilitate branch office connectivity through encrypted virtual links. D-Link Unified Services Router. The DSR-250/250N, DSR-500/500N and DSR-1000/1000N support 25, 35 and 75 simultaneous IPSec VPN tunnels respectively. Efficient D-Link Green Technology As a concerned member of the global community, D-Link is devoted to providing eco-friendly products. Unified Services Router User Manual Site-to-site VPN tunnels use...
... facilitate branch office connectivity through encrypted virtual links. D-Link Unified Services Router. The DSR-250/250N, DSR-500/500N and DSR-1000/1000N support 25, 35 and 75 simultaneous IPSec VPN tunnels respectively. Efficient D-Link Green Technology As a concerned member of the global community, D-Link is devoted to providing eco-friendly products. Unified Services Router User Manual Site-to-site VPN tunnels use...
Product Manual
Page 16
...Setup page, enter the following DHCP server parameters: Starting and Ending IP Addresses: Enter the first and last continuous addresses in your router: IP address (factory default: 192.168.10.1). If you change the IP address and click Save Settings, the GUI will...LAN device that requests DHCP served addresses. DHCP Relay: With this range. The default starting address is 192.168.10.100. Unified Services Router User Manual To configure LAN Connectivity, please follow the steps below: 1. Any new DHCP client joining the LAN is being enabled, enter the...
...Setup page, enter the following DHCP server parameters: Starting and Ending IP Addresses: Enter the first and last continuous addresses in your router: IP address (factory default: 192.168.10.1). If you change the IP address and click Save Settings, the GUI will...LAN device that requests DHCP served addresses. DHCP Relay: With this range. The default starting address is 192.168.10.100. Unified Services Router User Manual To configure LAN Connectivity, please follow the steps below: 1. Any new DHCP client joining the LAN is being enabled, enter the...
Product Manual
Page 17
..., for LAN TCP/IP settings 15 In the LAN proxy section: Enable DNS Proxy: To enable the router to apply all DNS requests and communicate with the ISP's DNS servers, click the checkbox. 5. Unified Services Router User Manual Lease Time: Enter the time, in this section when DHCP Relay is selected as...
..., for LAN TCP/IP settings 15 In the LAN proxy section: Enable DNS Proxy: To enable the router to apply all DNS requests and communicate with the ISP's DNS servers, click the checkbox. 5. Unified Services Router User Manual Lease Time: Enter the time, in this section when DHCP Relay is selected as...
Product Manual
Page 18
Unified Services Router User Manual 2.1.1 LAN Configuration in the Advanced > IPv6 > IP mode to IPv4 mode). The DHCPv6 server will serve IPv6 addresses from configured address pools with ... the network have common initial bits for their IPv6 address; LAN Settings The default IPv6 LAN address for the router is fec0::1. The other field that defines the LAN settings for the router is the prefix length. All hosts in the network's addresses is identified by the prefix length field. 16 By...
Unified Services Router User Manual 2.1.1 LAN Configuration in the Advanced > IPv6 > IP mode to IPv4 mode). The DHCPv6 server will serve IPv6 addresses from configured address pools with ... the network have common initial bits for their IPv6 address; LAN Settings The default IPv6 LAN address for the router is fec0::1. The other field that defines the LAN settings for the router is the prefix length. All hosts in the network's addresses is identified by the prefix length field. 16 By...
Product Manual
Page 19
Open a new connection to manage the router) has obtained IP address from newly assigned pool (or has a static IP address in again. Be sure the LAN host (the machine used to the new IP address and log in the router's LAN subnet) before accessing the router via changed IP address. 17 Unified Services Router Figure 2: IPv6 LAN and DHCPv6 configuration User Manual If you change the IP address and click Save Settings, the GUI will not respond.
Open a new connection to manage the router) has obtained IP address from newly assigned pool (or has a static IP address in again. Be sure the LAN host (the machine used to the new IP address and log in the router's LAN subnet) before accessing the router via changed IP address. 17 Unified Services Router Figure 2: IPv6 LAN and DHCPv6 configuration User Manual If you change the IP address and click Save Settings, the GUI will not respond.
Product Manual
Page 20
...DHCP Mode: The IPv6 DHCP server is used by the gateway's DHCPv6 server. In this router. Using a delegation prefix you to define the IPv6 delegation prefix for auto-configuration. Unified Services Router User Manual As with the highest server preference value to a LAN host are preferred over ...is 255. The DNS server details can be manually entered here (primary/secondary options. By selecting Use DNS proxy, this router to indicate the preference level of DHCP information specific for all DNS requests and communicates with the ISP's DNS servers (a WAN configuration ...
...DHCP Mode: The IPv6 DHCP server is used by the gateway's DHCPv6 server. In this router. Using a delegation prefix you to define the IPv6 delegation prefix for auto-configuration. Unified Services Router User Manual As with the highest server preference value to a LAN host are preferred over ...is 255. The DNS server details can be manually entered here (primary/secondary options. By selecting Use DNS proxy, this router to indicate the preference level of DHCP information specific for all DNS requests and communicates with the ISP's DNS servers (a WAN configuration ...
Product Manual
Page 21
...Router Advertisement Daemon on this router, the DSR will listen on the LAN, set this low/medium/high parameter determines the preference associated with router advisements. The default is selected the host uses administered/stateful protocol for non-address auto configuration. Router...in that are autoconfigured by the router. Unified Services Router User Manual Prefix Address: IPv6 prefix address in the DHCPv6 server prefix pool Prefix Length: Length prefix address 2.1.2 Configuring IPv6 Router Advertisements Router Advertisements are analogous to IPv4 ...
...Router Advertisement Daemon on this router, the DSR will listen on the LAN, set this low/medium/high parameter determines the preference associated with router advisements. The default is selected the host uses administered/stateful protocol for non-address auto configuration. Router...in that are autoconfigured by the router. Unified Services Router User Manual Prefix Address: IPv6 prefix address in the DHCPv6 server prefix pool Prefix Length: Length prefix address 2.1.2 Configuring IPv6 Router Advertisements Router Advertisements are analogous to IPv4 ...
Product Manual
Page 22
Unified Services Router User Manual seconds. Selecting Global/Local/ISATAP will allow the nodes to determine neighbors and whether the host is available when 6to4 Prefixes are available for router advertisements. 20 Figure 3: Configuring the Router Advertisement Daemon Advertisement Prefixes Advanced > IPv6 > IPv6 LAN > Advertisement Prefixes The router advertisements configured with advertisement prefixes allow the router...the same link as the router. Router advertisements contain a list of this value, a new RADVD exchange must take place between the host and this router to ...
Unified Services Router User Manual seconds. Selecting Global/Local/ISATAP will allow the nodes to determine neighbors and whether the host is available when 6to4 Prefixes are available for router advertisements. 20 Figure 3: Configuring the Router Advertisement Daemon Advertisement Prefixes Advanced > IPv6 > IPv6 LAN > Advertisement Prefixes The router advertisements configured with advertisement prefixes allow the router...the same link as the router. Router advertisements contain a list of this value, a new RADVD exchange must take place between the host and this router to ...