Product Manual
Page 4
...Wireless Profiles ...53 WEP Security ...54 WPA or WPA2 with Multiple WAN Links 39 Auto Failover...39 Load Balancing...40 Protocol Bindings ...41 3.5 3.5.1 3.5.2 3.5.3 Routing Configuration 42 Routing Mode ...42 Dynamic Routing (RIP 44 Static Routing ...45 3.6 Configurable Port - Unified Services Router User Manual Table of Virtual APs 59... WAN Port IP address 28 WAN DNS Servers 28 DHCP WAN ...28 PPPoE ...29 Russia L2TP and PPTP WAN 32 WAN Configuration in an IPv6 Network 33 Checking WAN Status 35 3.3 Bandwidth Controls 37 3.4 3.4.1 3.4.2 3.4.3 Features with PSK 55 RADIUS ...
...Wireless Profiles ...53 WEP Security ...54 WPA or WPA2 with Multiple WAN Links 39 Auto Failover...39 Load Balancing...40 Protocol Bindings ...41 3.5 3.5.1 3.5.2 3.5.3 Routing Configuration 42 Routing Mode ...42 Dynamic Routing (RIP 44 Static Routing ...45 3.6 Configurable Port - Unified Services Router User Manual Table of Virtual APs 59... WAN Port IP address 28 WAN DNS Servers 28 DHCP WAN ...28 PPPoE ...29 Russia L2TP and PPTP WAN 32 WAN Configuration in an IPv6 Network 33 Checking WAN Status 35 3.3 Bandwidth Controls 37 3.4 3.4.1 3.4.2 3.4.3 Features with PSK 55 RADIUS ...
Product Manual
Page 5
...98 7.2 Using SSL VPN Policies 100 7.2.1 Using Network Resources 103 7.3 Application Port Forwarding 104 7.4 SSL VPN Client Configuration 106 7.5 User Portal ...108 7.5.1 Creating Portal Layouts 109 Chapter 8. Unified Services Router User Manual 4.4 Tuning Radio ...Administration & Management 116 3 Securing the Private Network 63 5.1 Firewall Rules ...63 5.2 Defining Rule Schedules 64 5.3 Configuring Firewall Rules 65 5.3.1 Firewall Rule Configuration Examples 70 5.4 Security on Custom Services 74 5.5 ALG support...75 5.6 VPN Passthrough for Firewall 76 5.7 Application ...
...98 7.2 Using SSL VPN Policies 100 7.2.1 Using Network Resources 103 7.3 Application Port Forwarding 104 7.4 SSL VPN Client Configuration 106 7.5 User Portal ...108 7.5.1 Creating Portal Layouts 109 Chapter 8. Unified Services Router User Manual 4.4 Tuning Radio ...Administration & Management 116 3 Securing the Private Network 63 5.1 Firewall Rules ...63 5.2 Defining Rule Schedules 64 5.3 Configuring Firewall Rules 65 5.3.1 Firewall Rule Configuration Examples 70 5.4 Security on Custom Services 74 5.5 ALG support...75 5.6 VPN Passthrough for Firewall 76 5.7 Application ...
Product Manual
Page 6
...Active VPN Tunnels 143 Chapter 11. Credits ...151 Appendix A. Log Output Reference...157 Appendix E. Standard Services Available for Port Forwarding & Firewall Configuration 156 Appendix D. Glossary ...152 Appendix B. Factory Default Settings 155 Appendix C. Trouble Shooting...145 11.1 Internet connection 145 11.2 Date and time... LAN path from your PC to E-mail or Syslog 124 Event Log Viewer in GUI 126 Backing up and Restoring Configuration Settings 127 Upgrading Router Firmware 128 Dynamic DNS Setup 129 Using Diagnostic Tools 130 Ping ...131 Trace Route ...131 DNS...
...Active VPN Tunnels 143 Chapter 11. Credits ...151 Appendix A. Log Output Reference...157 Appendix E. Standard Services Available for Port Forwarding & Firewall Configuration 156 Appendix D. Glossary ...152 Appendix B. Factory Default Settings 155 Appendix C. Trouble Shooting...145 11.1 Internet connection 145 11.2 Date and time... LAN path from your PC to E-mail or Syslog 124 Event Log Viewer in GUI 126 Backing up and Restoring Configuration Settings 127 Upgrading Router Firmware 128 Dynamic DNS Setup 129 Using Diagnostic Tools 130 Ping ...131 Trace Route ...131 DNS...
Product Manual
Page 7
...19 Figure 5: Adding VLAN memberships to the LAN 20 Figure 6: Port VLAN list ...21 Figure 7: Configuring VLAN membership for a port 22 Figure 8: DMZ configuration ...23 Figure 9: UPnP Configuration...24 Figure 10: Active Runtime sessions ...25 Figure 11: Internet Connection Setup Wizard 26 Figure 12: ... 27: WAN2 configuration for 3G internet (part 2 49 Figure 28: Physical WAN port settings ...50 Figure 29: Wireless Network Setup Wizards 52 Figure 30: List of Available Profiles shows the options available to secure the wireless link .........54 Figure 31: Profile configuration to set network...
...19 Figure 5: Adding VLAN memberships to the LAN 20 Figure 6: Port VLAN list ...21 Figure 7: Configuring VLAN membership for a port 22 Figure 8: DMZ configuration ...23 Figure 9: UPnP Configuration...24 Figure 10: Active Runtime sessions ...25 Figure 11: Internet Connection Setup Wizard 26 Figure 12: ... 27: WAN2 configuration for 3G internet (part 2 49 Figure 28: Physical WAN port settings ...50 Figure 29: Wireless Network Setup Wizards 52 Figure 30: List of Available Profiles shows the options available to secure the wireless link .........54 Figure 31: Profile configuration to set network...
Product Manual
Page 8
...: Example of clientless SSL VPN connections to the internal network through the DSR IPsec gateway ...86 Figure 55: VPN Wizard launch screen ...87 Figure 56: IPsec policy configuration...90 Figure 57: IPsec policy configuration continued (Auto policy via IKE 91 Figure 58: IPsec policy configuration continued (Auto / Manual Phase 2 92 Figure 59: PPTP tunnel...
...: Example of clientless SSL VPN connections to the internal network through the DSR IPsec gateway ...86 Figure 55: VPN Wizard launch screen ...87 Figure 56: IPsec policy configuration...90 Figure 57: IPsec policy configuration continued (Auto policy via IKE 91 Figure 58: IPsec policy configuration continued (Auto / Manual Phase 2 92 Figure 59: PPTP tunnel...
Product Manual
Page 9
Unified Services Router User Manual Figure 64: List of SSL VPN polices (Global filter 101 Figure 65: SSL VPN policy configuration 102 Figure 66: List of configured resources, which are available to assign to SSL VPN policies .......104 Figure 67: List of Available Applications for Remote Logging ... ...112 Figure 73: Certificate summary for IPsec and HTTPS management 114 Figure 74: Advanced Switch Settings ...115 Figure 75: User Login policy configuration 116 Figure 76: Remote Management from the WAN 117 Figure 77: SNMP Users, Traps, and Access Control 118 Figure 78: SNMP system ...
Unified Services Router User Manual Figure 64: List of SSL VPN polices (Global filter 101 Figure 65: SSL VPN policy configuration 102 Figure 66: List of configured resources, which are available to assign to SSL VPN policies .......104 Figure 67: List of Available Applications for Remote Logging ... ...112 Figure 73: Certificate summary for IPsec and HTTPS management 114 Figure 74: Advanced Switch Settings ...115 Figure 75: User Login policy configuration 116 Figure 76: Remote Management from the WAN 117 Figure 77: SNMP Users, Traps, and Access Control 118 Figure 78: SNMP system ...
Product Manual
Page 11
...Networks via features such as a DMZ port allowing you are capable of benefits: Comprehensive Management Capabilities The DSR-500N and DSR-1000N include dual-WAN Gigabit Ethernet which provides policy-based service management ensuring maximum productivity for networks that provide critical ...Layer 2 Tunneling Protocol (L2TP), and Secure Sockets Layer (SSL). The DSR 1000N can be configured to automatically switch to a 3G network whenever a physical link is lost . Empower your network. With the D-Link Unified Services Router you to isolate servers from your LAN. ...
...Networks via features such as a DMZ port allowing you are capable of benefits: Comprehensive Management Capabilities The DSR-500N and DSR-1000N include dual-WAN Gigabit Ethernet which provides policy-based service management ensuring maximum productivity for networks that provide critical ...Layer 2 Tunneling Protocol (L2TP), and Secure Sockets Layer (SSL). The DSR 1000N can be configured to automatically switch to a 3G network whenever a physical link is lost . Empower your network. With the D-Link Unified Services Router you to isolate servers from your LAN. ...
Product Manual
Page 12
...Model numbers DSR-500/500N/1000/1000N GUI Menu Path/GUI Navigation - Monitoring > Router Status Important note - 10 In addition, compliance with RoHS (Restriction of Hazardous Substances) and WEEE (Waste Electrical and Electronic Equipment) directives make D-Link Green certified ... WAN USB dongle is only available for DSR-1000 and DSR-1000N. 1.1 About this document: Product Name - Unified Services Router User Manual As a concerned member of the global community, D-Link is devoted to configure connectivity, setup VPN tunnels, establish firewall rules...
...Model numbers DSR-500/500N/1000/1000N GUI Menu Path/GUI Navigation - Monitoring > Router Status Important note - 10 In addition, compliance with RoHS (Restriction of Hazardous Substances) and WEEE (Waste Electrical and Electronic Equipment) directives make D-Link Green certified ... WAN USB dongle is only available for DSR-1000 and DSR-1000N. 1.1 About this document: Product Name - Unified Services Router User Manual As a concerned member of the global community, D-Link is devoted to configure connectivity, setup VPN tunnels, establish firewall rules...
Product Manual
Page 13
... TCP/IP settings are assigned IP addresses from a pool of the browser to access the router's management UI. 2.1 LAN Configuration Setup > Network Settings > LAN Configuration By default, the router functions as it is the network's DHCP server; Access the router's graphical user interface (GUI) ...all DNS requests and communicates with the LAN. Each pool address is tested before it is complete, the DSR may be through its wireless interface as a Dynamic Host Configuration Protocol (DHCP) server to avoid duplicate addresses on the WLAN or LAN network. Chapter 2. The LAN ...
... TCP/IP settings are assigned IP addresses from a pool of the browser to access the router's management UI. 2.1 LAN Configuration Setup > Network Settings > LAN Configuration By default, the router functions as it is the network's DHCP server; Access the router's graphical user interface (GUI) ...all DNS requests and communicates with the LAN. Each pool address is tested before it is complete, the DSR may be through its wireless interface as a Dynamic Host Configuration Protocol (DHCP) server to avoid duplicate addresses on the WLAN or LAN network. Chapter 2. The LAN ...
Product Manual
Page 14
...leases and corresponding information from newly assigned pool (or has a static IP address in the LAN. Primary and Secondary DNS servers: If configured domain name system (DNS) servers are available on a different subnet. The default ending address is 192.168.10.2. These addresses should be passed... enabled, enter the following information for the WINS server or, if present in the IP address pool. Unified Services Router User Manual To configure LAN Connectivity, please follow the steps below: 1. The default starting address is 192.168.10.100. Be sure the LAN host (the...
...leases and corresponding information from newly assigned pool (or has a static IP address in the LAN. Primary and Secondary DNS servers: If configured domain name system (DNS) servers are available on a different subnet. The default ending address is 192.168.10.2. These addresses should be passed... enabled, enter the following information for the WINS server or, if present in the IP address pool. Unified Services Router User Manual To configure LAN Connectivity, please follow the steps below: 1. The default starting address is 192.168.10.100. Be sure the LAN host (the...
Product Manual
Page 16
...change this is identified by the initial bits of common initial bits in the network's addresses is enabled by default (similar to enable IPv6 configuration options. the number of the address called the prefix. All hosts in the network have common initial bits for the router is fec0::1.... Unified Services Router User Manual 2.1.1 LAN Configuration in an IPv6 Network Advanced > IPv6 > IPv6 LAN > IPv6 LAN Config In IPv6 mode, the LAN DHCP server is set by the prefix...
...change this is identified by the initial bits of common initial bits in the network's addresses is enabled by default (similar to enable IPv6 configuration options. the number of the address called the prefix. All hosts in the network have common initial bits for the router is fec0::1.... Unified Services Router User Manual 2.1.1 LAN Configuration in an IPv6 Network Advanced > IPv6 > IPv6 LAN > IPv6 LAN Config In IPv6 mode, the LAN DHCP server is set by the prefix...
Product Manual
Page 17
...to the new IP address and log in the router's LAN subnet) before accessing the router via changed IP address. Open a new connection to configure the DHCPv6 server: 15 The following settings are used to any LAN PC that requests DHCP served addresses. Unified Services Router Figure 2: IPv6 LAN... and DHCPv6 configuration User Manual If you change the IP address and click Save Settings, the GUI will not respond. As with an IPv4 LAN network,...
...to the new IP address and log in the router's LAN subnet) before accessing the router via changed IP address. Open a new connection to configure the DHCPv6 server: 15 The following settings are used to any LAN PC that requests DHCP served addresses. Unified Services Router Figure 2: IPv6 LAN... and DHCPv6 configuration User Manual If you change the IP address and click Save Settings, the GUI will not respond. As with an IPv4 LAN network,...
Product Manual
Page 18
... in that the router will rely on this router to provide required configuration settings The domain name of the DHCPv6 lease from the ISP directly. By configuring the Router Advertisement Daemon on this router, the DSR will listen on the LAN enter the IP addresses here. ...DHCP server is 255. The DNS server details can automate the process of informing other DHCP server advertise messages. There are auto-configured by the gateway's DHCPv6 server. An alternative is not required as a proxy for router solicitations and respond to accept such details. If ...
... in that the router will rely on this router to provide required configuration settings The domain name of the DHCPv6 lease from the ISP directly. By configuring the Router Advertisement Daemon on this router, the DSR will listen on the LAN enter the IP addresses here. ...DHCP server is 255. The DNS server details can automate the process of informing other DHCP server advertise messages. There are auto-configured by the gateway's DHCPv6 server. An alternative is not required as a proxy for router solicitations and respond to accept such details. If ...
Product Manual
Page 19
...; Advertise Mode: Select Unsolicited Multicast to send router advertisements (RA's) to use the administered /stateful protocol for non-address auto configuration. Router Preference: this low/medium/high parameter determines the preference associated with one third of these flags. Chose Managed to... one or both of this field and this router. 17 The default is selected the host uses administered/stateful protocol for address auto configuration. The default is 1500. Router Lifetime: This value is useful if there are autoconfigured by the router. Upon expiration of...
...; Advertise Mode: Select Unsolicited Multicast to send router advertisements (RA's) to use the administered /stateful protocol for non-address auto configuration. Router Preference: this low/medium/high parameter determines the preference associated with one third of these flags. Chose Managed to... one or both of this field and this router. 17 The default is selected the host uses administered/stateful protocol for address auto configuration. The default is 1500. Router Lifetime: This value is useful if there are autoconfigured by the router. Upon expiration of...
Product Manual
Page 20
...tunnel select the 6to4 prefix type. Selecting Global/Local/ISATAP will allow this field is on the same link as the router. Unified Services Router Figure 3: Configuring the Router Advertisement Daemon User Manual Advertisement Prefixes Advanced > IPv6 > IPv6 LAN > Advertisement Prefixes The router.... IPv6 Prefix: When using Global/Local/ISATAP prefixes, this router to inform hosts how to perform stateless address auto configuration. Router advertisements contain a list of the router's LAN interface used to define the IPv6 network advertised by this router. 18 ...
...tunnel select the 6to4 prefix type. Selecting Global/Local/ISATAP will allow this field is on the same link as the router. Unified Services Router Figure 3: Configuring the Router Advertisement Daemon User Manual Advertisement Prefixes Advanced > IPv6 > IPv6 LAN > Advertisement Prefixes The router.... IPv6 Prefix: When using Global/Local/ISATAP prefixes, this router to inform hosts how to perform stateless address auto configuration. Router advertisements contain a list of the router's LAN interface used to define the IPv6 network advertised by this router. 18 ...
Product Manual
Page 21
...seconds) that define up the network portion of the address. Setup > VLAN Settings > Available VLAN The Available VLAN page shows a list of configured VLANs by default in an IPv4 network. VLAN ID 1 is reserved for the default VLAN, which is assigned to the VLAN membership. In ...is analogous to DHCP lease time in the router. By enabling Inter VLAN Routing, you 19 Figure 4: IPv6 Advertisement Prefix settings 2.2 VLAN Configuration The router supports virtual network isolation on the LAN with the use the advertised prefix. Unified Services Router User Manual IPv6 Prefix ...
...seconds) that define up the network portion of the address. Setup > VLAN Settings > Available VLAN The Available VLAN page shows a list of configured VLANs by default in an IPv4 network. VLAN ID 1 is reserved for the default VLAN, which is assigned to the VLAN membership. In ...is analogous to DHCP lease time in the router. By enabling Inter VLAN Routing, you 19 Figure 4: IPv6 Advertisement Prefix settings 2.2 VLAN Configuration The router supports virtual network isolation on the LAN with the use the advertised prefix. Unified Services Router User Manual IPv6 Prefix ...
Product Manual
Page 22
... mode is accessed by selecting one of this VLAN can associate a VLAN to the switch port on this VLAN ID to pass through to other configured VLAN IDs that port and VLAN membership information. Data passing through the phone from Figure 4, Port 3 is a member of a user selectable set of the ... with PVID 3, so untagged data into the port is untagged, it is tagged or untagged with IP Phones that is assigned the defined PVID. The configuration page is typically used with a VLAN ID. The default is access. In General mode the port is a General port with the same PVID ...
... mode is accessed by selecting one of this VLAN can associate a VLAN to the switch port on this VLAN ID to pass through to other configured VLAN IDs that port and VLAN membership information. Data passing through the phone from Figure 4, Port 3 is a member of a user selectable set of the ... with PVID 3, so untagged data into the port is untagged, it is tagged or untagged with IP Phones that is assigned the defined PVID. The configuration page is typically used with a VLAN ID. The default is access. In General mode the port is a General port with the same PVID ...
Product Manual
Page 23
... is a member of a single VLAN (and only one more VLAN membership options for a General or Trunk port, traffic can be displayed on the VLAN Membership Configuration for the port. All data going into and out of VLANs. Trunk ports multiplex traffic for multiple VLANs over the same physical...
... is a member of a single VLAN (and only one more VLAN membership options for a General or Trunk port, traffic can be displayed on the VLAN Membership Configuration for the port. All data going into and out of VLANs. Trunk ports multiplex traffic for multiple VLANs over the same physical...
Product Manual
Page 24
...to any of the DMZ nodes, the LAN is open to the public but behind the firewall. Setup > DMZ Setup > DMZ Setup Configuration DMZ configuration is a subnetwork that must be exposed to the internet (such as specific services/ports that it cannot be allowed to permit access specific services...is recommended that hosts that is not necessarily vulnerable as a secondary WAN Ethernet port or a dedicated DMZ port. Unified Services Router Figure 7: Configuring VLAN membership for a port User Manual 2.3 Configurable Port: DMZ Setup This router supports one of the physical ports to be...
...to any of the DMZ nodes, the LAN is open to the public but behind the firewall. Setup > DMZ Setup > DMZ Setup Configuration DMZ configuration is a subnetwork that must be exposed to the internet (such as specific services/ports that it cannot be allowed to permit access specific services...is recommended that hosts that is not necessarily vulnerable as a secondary WAN Ethernet port or a dedicated DMZ port. Unified Services Router Figure 7: Configuring VLAN membership for a port User Manual 2.3 Configurable Port: DMZ Setup This router supports one of the physical ports to be...
Product Manual
Page 25
... or external ports for the traffic protocol required by UPnP, the router can communicate with the router and allow for auto configuration. If a network device is detected by that allows the router to detect UPnP-supporting devices on the LAN (or... a configured VLAN). If disabled, the router will not allow for automatic device configuration. 23 Unified Services Router Figure 8: DMZ configuration User Manual In order to configure a DMZ port, the router's configurable port must be set to DMZ in the Setup > Internet...
... or external ports for the traffic protocol required by UPnP, the router can communicate with the router and allow for auto configuration. If a network device is detected by that allows the router to detect UPnP-supporting devices on the LAN (or... a configured VLAN). If disabled, the router will not allow for automatic device configuration. 23 Unified Services Router Figure 8: DMZ configuration User Manual In order to configure a DMZ port, the router's configurable port must be set to DMZ in the Setup > Internet...