D-LINK DSR1000AC User guide

Wireless AC Services Router
User Manual
DSR-150/150N/250/250N/500/1000/500AC/1000AC
Version 3.13 | November 20, 2018
Preface
Preface
The information in this document is subject to change without notice. The manufacturer makes no representations or warranties with respect to the contents hereof and specically disclaim any implied warranties of merchantability or tness for any particular purpose. The manufacturer reserves the right to revise this publication and to make changes from time to time in the content hereof without obligation of the manufacturer to notify any person of such revision or changes.
Manual Revisions
Revision Date Description
2.00 July 31, 2014 • DSR Products with rmware version 2.00
2.01 November 17, 2014 • add License Update section
2.02 January 28, 2015 • DSR Products with rmware version 2.02
3.02 May 06, 2015 • applies to new DSR series models, DSR-500AC & DSR-1000AC
3.03 January 27, 2016 • Add new feature sections e.g. IGMP Snooping and OpenVPN etc.
• Updated the following sections: Radio Settings, System Check, IP Mode, Pro­les, PPPoE (IPv6 WAN1 Settings), DHCP Leased Clients
3.04 March 31, 2017
3.11 May 08, 2017
3.12 January 31, 2018
• Added the following new features: Service Route Management, Radius Ac­counting, SIM Card Authentication, URL Filtering ACL, OmniSSL Conguration, OpenVPN Certicate, PPTP/L2TP Auto-connect
• DSR product with rmware v3.11
• Please refer to rmware release note for details.
• Under Trac Management, added sections: Bandwidth Management and Session Limiting
• Updated Static and Dynamic Filtering
• Changed the path of Jumbo Frame and moved this section under section “Connect to Internet”
• Under OpenVPN Authentication: Added Server/Client Certicate, TLS key, and CRL Certicate
• Added “Universal FW Naming Convention” under the section “ Firmware Up­grade”
• Removed “Pre-shared secret key” support from the section “Settings” under OpenVPN
• Updated Wi-Fi channels for Australia, Taiwan, Russia, and Singapore in the “Appendix F - New Wi Fi Frequency Table”
D-Link DSR-Series User Manual i
3.13 November 20, 2018
• Under Traffic Management, added sections: Bridge Bandwidth Profile and
Bridge Traffic Selectors
Added “Teredo Tunnel” section under “IPv6 WAN Settings”
Added “One to One Mapping” section under VPN
Under OpenVPN section, following changes are made:
- Updated “OpenVPN Certificates”
- Removed “Authentication” section
- Added “OmniSSL Client Configuration” &
Added “DUA External CP Web” section under Security
Updated “IPv4 & IPV6 Firewall Rules” and added “Bridge Firewall Rules” sections
under Firewall Rules
Added “Blocked Clients” section
Added “App Control Policy” section under Security
Added “DDP Client” under Management
“Configuration Settings” name changed to “Backup Settings”
Updated the Log Settings section as per the latest firmware FW3.13
Under System Information, updated “All Logs” section and removed Firewall
Logs, IPSec VPN Logs, SSL VPN Logs
Added “Captive Portal Session” and “Session Limiting” sections under Network
Information
Updated “Radio settings” section
Added a range of tunnels for PPTP and L2TP servers under L2TP Active Users
section
Updated “Note” under DMZ and Load Balancing sections
Updated “Syslog” section under Remote Logging
“OmniSSL Portal Layouts”
Trademarks/Copyright Notice
D-Link and the D-Link logo are trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States or other countries. All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies.
© 2018 D-Link Corporation, All Rights Reserved
This publication, including all photographs, illustrations and software, is protected under international copyright laws, with all rights reserved. Neither this manual, nor any of the material contained herein, may be reproduced without written consent of the author.
Limitations of Liability
UNDER NO CIRCUMSTANCES SHALL D-LINK OR ITS SUPPLIERS BE LIABLE FOR DAMAGES OF ANY CHARACTER (E.G. DAMAGES FOR LOSS OF PROFIT, SOFTWARE RESTORATION, WORK STOPPAGE, LOSS OF SAVED DATA OR ANY OTHER COMMERCIAL DAMAGES OR LOSSES) RESULTING FROM THE APPLICATION OR IMPROPER USE OF THE D-LINK PRODUCT OR FAILURE OF THE PRODUCT, EVEN IF D-LINK IS INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. FURTHERMORE, DLINK WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST CUSTOMER FOR LOSSES OR DAMAGES. D-LINK WILL IN NO EVENT BE LIABLE FOR ANY DAMAGES IN EXCESS OF THE AMOUNT D-LINK RECEIVED FROM THE END-USER FOR THE PRODUCT.
D-Link DSR-Series User Manual ii
Preface
Safety Instructions
Use the following safety guidelines to ensure your own personal safety and to help protect your system from potential damage.
Safety Cautions
To reduce the risk of bodily injury, electrical shock, re, and damage to the equipment, observe the following precautions:
• Observe and follow service markings.
• Do not service any product except as explained in your system documentation.
• Opening or removing covers that are marked with the triangular symbol with a lightning bolt may expose you to electrical shock.
• Only a trained service technician should service components inside these compartments.
• If any of the following conditions occur, unplug the product from the electrical outlet and replace the part or contact your trained service provider:
• The power cable, extension cable, or plug is damaged.
• An object has fallen into the product.
• The product has been exposed to water.
• The product has been dropped or damaged.
• The product does not operate correctly when you follow the operating instructions.
• Keep your system away from radiators and heat sources. Also, do not block cooling vents.
• Do not spill food or liquids on your system components, and never operate the product in a wet environment. If the system gets wet, see the appropriate section in your troubleshooting guide or contact your trained service provider.
• Do not push any objects into the openings of your system. Doing so can cause re or electric shock by shorting out interior components.
• Use the product only with approved equipment.
• Allow the product to cool before removing covers or touching internal components.
• Operate the product only from the type of external power source indicated on the electrical ratings label. If you are not sure of the type of power source required, consult your service provider or local power company.
• Also, be sure that attached devices are electrically rated to operate with the power available in your location.
• Use only approved power cable(s). If you have not been provided with a power cable for your system or for any AC powered option intended for your system, purchase a power cable that is approved for use in your country. The power cable must be rated for the product and for the voltage and current marked on the product’s electrical ratings label. The voltage and current rating of the cable should be greater than the ratings marked on the product.
• To help prevent electric shock, plug the system and peripheral power cables into properly grounded electrical outlets.
• These cables are equipped with three-prong plugs to help ensure proper grounding. Do not use adapter plugs or remove the grounding prong from a cable. If you must use an extension cable, use a 3-wire cable with properly grounded plugs.
D-Link DSR-Series User Manual iii
• Observe extension cable and power strip ratings. Make sure that the total ampere rating of all products plugged into the extension cable or power strip does not exceed 80 percent of the ampere ratings limit for the extension cable or power strip.
• To help protect your system from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or uninterruptible power supply (UPS).
• Position system cables and power cables carefully; route cables so that they cannot be stepped on or tripped over. Be sure that nothing rests on any cables.
• Do not modify power cables or plugs. Consult a licensed electrician or your power company for site modications.
• Always follow your local/national wiring rules.
• When connecting or disconnecting power to hot-pluggable power supplies, if oered with your system, observe the following guidelines:
• Install the power supply before connecting the power cable to the power supply.
• Unplug the power cable before removing the power supply.
• If the system has multiple sources of power, disconnect power from the system by unplugging all power cables from the power supplies.
• Move products with care; ensure that all casters and/or stabilizers are rmly connected to the system. Avoid sudden stops and uneven surfaces.
D-Link DSR-Series User Manual iv
Preface
Protecting Against Electrostatic Discharge
Static electricity can harm delicate components inside your system. To prevent static damage, discharge static electricity from your body before you touch any of the electronic components, such as the microprocessor. You can do so by periodically touching an unpainted metal surface on the chassis.
You can also take the following steps to prevent damage from electrostatic discharge (ESD):
1. When unpacking a static-sensitive component from its shipping carton, do not remove the component from the anti-static packing material until you are ready to install the component in your system. Just before unwrapping the anti-static packaging, be sure to discharge static electricity from your body.
2. When transporting a sensitive component, rst place it in an anti-static container or package.
3. Handle all sensitive components in a static-safe area. If possible, use anti-static oor pads, workbench pads and an anti-static grounding strap.
D-Link DSR-Series User Manual v
Power Usage
This device is an Energy Related Product (ErP) with High Network Availability (HiNA), and automatically switches to a power-saving Network Standby mode within 1 minute of no packets being transmitted. It can also be turned o through a power switch to save energy when it is not needed.
DSR-250N Network Standby:6.2458 watts Switched O: 0.1266 watts
DSR-250 Network Standby: 7.8588 watts Switched O: 0.1290 watts
DSR-150N Network Standby: 7.8575 watts Switched O: 0.1283 watts
DSR-150 Network Standby: 6.9133 watts Switched O: 0.12661 watts
DSR-1000 Network Standby: 7.1232 watts Switched O: 0.0743 watts
DSR-500 Network Standby: 6.9334 watts Switched O: 0.079 watts
DSR-1000AC Network Standby: 7.9626 watts Switched O: 0.0672 watts
DSR-500AC Network Standby: 6.6813watts Switched O: 0.0652 watts
Table of Contents
Table of Contents
Preface ........................................................................................................................................................... i
Manual Revisions ........................................................................................................................................................................i
Trademarks/Copyright Notice ..............................................................................................................................................ii
Limitations of Liability .............................................................................................................................................................ii
Safety Instructions ...................................................................................................................................................................iii
Safety Cautions ................................................................................................................................................................iii
Protecting Against Electrostatic Discharge ............................................................................................................v
Power Usage ............................................................................................................................................................................. vi
Introduction ................................................................................................................................................. 1
Installation ................................................................................................................................................... 3
Before you Begin ...................................................................................................................................................................... 3
Connect to your Network ...................................................................................................................................................... 3
Basic Conguration ..................................................................................................................................... 4
#1 Log in to the Web UI .......................................................................................................................................................... 5
#2 Change LAN IP Address .................................................................................................................................................... 6
#3 Congure DHCP Server .................................................................................................................................................... 7
#4 Set Time and Date .............................................................................................................................................................. 8
#5 Internet Connection Setup ............................................................................................................................................. 9
#6 Wireless Network Setup ................................................................................................................................................. 12
#7 Create Users........................................................................................................................................................................13
#8 Security/VPN Wizard .......................................................................................................................................................14
#9 Dynamic DNS Wizard ......................................................................................................................................................16
LAN Conguration ..................................................................................................................................... 17
LAN Settings.............................................................................................................................................................................18
DHCP Server ....................................................................................................................................................................19
DHCP Relay ...................................................................................................................................................................... 20
LAN DHCP Reserved IPs .............................................................................................................................................. 21
IP/MAC Binding ....................................................................................................................................................................... 22
IGMP Setup ............................................................................................................................................................................... 24
UPnP............................................................................................................................................................................................25
VLAN ...........................................................................................................................................................................................26
VLAN Settings .................................................................................................................................................................26
Captive Portal ..........................................................................................................................................................29
Port/Wireless VLAN ....................................................................................................................................................... 30
Connect to the Internet ............................................................................................................................. 32
Dynamic IP (DHCP) ....................................................................................................................................................... 32
D-Link DSR-Series User Manual vii
Table of Contents
Static IP .............................................................................................................................................................................33
PPPoE ................................................................................................................................................................................. 34
PPTP ................................................................................................................................................................................... 35
L2TP ....................................................................................................................................................................................36
Japanese PPPoE ............................................................................................................................................................. 37
Russian PPPoE ................................................................................................................................................................38
Russian PPTP ................................................................................................................................................................... 39
Russian L2TP ...................................................................................................................................................................40
WAN2/ DMZ Settings ............................................................................................................................................................ 41
WAN ................................................................................................................................................................................... 41
DMZ....................................................................................................................................................................................42
WAN3 (3G Internet) ...............................................................................................................................................................43
WAN Mode ................................................................................................................................................................................44
Single WAN Port .............................................................................................................................................................44
Auto-Rollover using WAN IP ......................................................................................................................................45
Load Balancing ...............................................................................................................................................................46
Round Robin ............................................................................................................................................................ 47
Spillover ..................................................................................................................................................................... 48
SIM Card Authentication ............................................................................................................................................49
Routing Mode.................................................................................................................................................................50
NAT or Classical ....................................................................................................................................................... 50
Transparent ..............................................................................................................................................................51
Bridge ......................................................................................................................................................................... 52
IP Aliasing .........................................................................................................................................................................53
DMZ Settings .................................................................................................................................................................. 54
DMZ DHCP Reserved IPs ...................................................................................................................................... 55
Dynamic DNS Settings ................................................................................................................................................ 56
Trac Management .....................................................................................................................................................58
Bandwidth Proles ................................................................................................................................................. 58
Trac Shaping .........................................................................................................................................................60
Bridge Bandwidth Proles ..................................................................................................................................62
Bridge Trac Selectors ......................................................................................................................................... 64
Session Limiting ......................................................................................................................................................66
Jumbo Frames ......................................................................................................................................................................... 68
Routing ......................................................................................................................................................................................69
Static Routes ...................................................................................................................................................................69
RIP ....................................................................................................................................................................................... 71
OSPF ...................................................................................................................................................................................72
Protocol Binding ............................................................................................................................................................74
IPv6 .............................................................................................................................................................................................. 75
IP Mode ............................................................................................................................................................................. 75
IPv6 WAN Settings ........................................................................................................................................................76
Dynamic IP ................................................................................................................................................................ 76
D-Link DSR-Series User Manual viii
Table of Contents
Static IP.......................................................................................................................................................................77
PPPoE .......................................................................................................................................................................... 78
Static Routing ................................................................................................................................................................. 79
OSPFv3 .............................................................................................................................................................................. 81
6 to 4 Tunneling ............................................................................................................................................................. 83
ISATAP Tunnels ...............................................................................................................................................................84
Teredo Tunnel .................................................................................................................................................................85
IPv6 LAN Settings .......................................................................................................................................................... 86
DHCPv6 Server ........................................................................................................................................................ 86
IPv6 Address Pools .................................................................................................................................................88
Prexes for Prex Delegation ............................................................................................................................. 89
Router Advertisement .......................................................................................................................................... 90
Advertisement Prexes ........................................................................................................................................91
IPv6 Tunnels Status ................................................................................................................................................ 92
Wireless Settings ....................................................................................................................................... 93
Access Points ............................................................................................................................................................................93
Proles ........................................................................................................................................................................................ 96
Radio Settings .........................................................................................................................................................................98
802.11AC Conguration ....................................................................................................................................100
WMM Settings .......................................................................................................................................................................101
WDS ...........................................................................................................................................................................................102
Advanced Settings ...............................................................................................................................................................103
WPS ...........................................................................................................................................................................................105
VPN ........................................................................................................................................................... 107
IPSec VPN ................................................................................................................................................................................108
Policies ............................................................................................................................................................................108
Tunnel Mode .................................................................................................................................................................112
Split DNS Names ..........................................................................................................................................................113
DHCP Range ..................................................................................................................................................................114
Certicates .....................................................................................................................................................................115
Trusted Certicates ..............................................................................................................................................115
Active Self Certicates ........................................................................................................................................116
Self Certicate Requests ....................................................................................................................................117
Easy VPN Setup ............................................................................................................................................................118
One To One Mapping .................................................................................................................................................119
PPTP VPN .................................................................................................................................................................................121
PPTP Server ...................................................................................................................................................................121
PPTP Client ....................................................................................................................................................................122
PPTP Active Users .................................................................................................................................................123
L2TP VPN .................................................................................................................................................................................124
L2TP Server ....................................................................................................................................................................124
L2TP Client .....................................................................................................................................................................125
D-Link DSR-Series User Manual ix
Table of Contents
L2TP Active Users ........................................................................................................................................................126
SSL VPN ....................................................................................................................................................................................127
Server Policies ..............................................................................................................................................................127
Portal Layouts ...............................................................................................................................................................129
Resources .......................................................................................................................................................................131
Add New Resource...............................................................................................................................................131
Port Forwarding ....................................................................................................................................................133
SSL VPN Client ..............................................................................................................................................................134
Client Routes .................................................................................................................................................................135
Open VPN ................................................................................................................................................................................136
OpenVPN Settings ......................................................................................................................................................136
Server ........................................................................................................................................................................136
Client .........................................................................................................................................................................138
Access Server Client ............................................................................................................................................140
OpenVPN Certicates ................................................................................................................................................141
OpenVPN Certicates .........................................................................................................................................141
TLS Key .....................................................................................................................................................................144
CRL Certicate .......................................................................................................................................................145
OpenVPN Server Policy .............................................................................................................................................146
Local Networks .............................................................................................................................................................147
Remote Networks .......................................................................................................................................................148
OmniSSL Client Conguration ...............................................................................................................................149
OmniSSL Portal Layouts............................................................................................................................................150
GRE ............................................................................................................................................................................................152
Security .................................................................................................................................................... 154
Groups ......................................................................................................................................................................................154
Login Policies ................................................................................................................................................................155
Browser Policies ...........................................................................................................................................................156
IP Policies........................................................................................................................................................................157
Users .........................................................................................................................................................................................158
User Management ......................................................................................................................................................158
Import User Database ...............................................................................................................................................159
Create a User Database (CSV File) .........................................................................................................................160
External Authentication Servers .....................................................................................................................................161
RADIUS Server ..............................................................................................................................................................161
POP3 Server...................................................................................................................................................................162
POP3 Trusted Server ...................................................................................................................................................163
LDAP Server ..................................................................................................................................................................164
AD Server .......................................................................................................................................................................165
NT Domain Server .......................................................................................................................................................167
Radius Accounting ...............................................................................................................................................................168
Radius Accounting ......................................................................................................................................................168
Radius Accounting Server ........................................................................................................................................169
D-Link DSR-Series User Manual x
Table of Contents
Login Proles .........................................................................................................................................................................170
Services Route Management ...........................................................................................................................................173
DUA External CP Web .........................................................................................................................................................174
Web Content Filtering ........................................................................................................................................................175
Static Filtering ..............................................................................................................................................................175
Approved URL ..............................................................................................................................................................176
Blocked URL ..................................................................................................................................................................177
Dynamic Filtering ........................................................................................................................................................178
URL Filtering ACL .........................................................................................................................................................180
Firewall .....................................................................................................................................................................................182
Firewall Rules ................................................................................................................................................................182
IPv4 & IPv6 Firewall Rules ..................................................................................................................................182
Bridge Firewall Rules ...........................................................................................................................................185
Schedules .......................................................................................................................................................................187
Blocked Clients .............................................................................................................................................................188
Custom Services ..........................................................................................................................................................189
ALGs .................................................................................................................................................................................191
SMTP ALGs ..............................................................................................................................................................192
Approved Mail IDs ................................................................................................................................................193
Blocked Mail IDs ....................................................................................................................................................194
Mail Filtering ..........................................................................................................................................................195
VPN Passthrough .........................................................................................................................................................196
Dynamic Port Forwarding ........................................................................................................................................197
Application Rules .................................................................................................................................................197
Attack Checks ...............................................................................................................................................................199
Intel® AMT ......................................................................................................................................................................201
IPS .....................................................................................................................................................................................202
App Control Policy ...............................................................................................................................................................203
Application Control ....................................................................................................................................................203
Policies .....................................................................................................................................................................203
Network Proles ...................................................................................................................................................206
Auto Upgrade ........................................................................................................................................................207
Maintenance ............................................................................................................................................208
System Settings ....................................................................................................................................................................208
Date and Time .......................................................................................................................................................................209
Session Settings ....................................................................................................................................................................210
License Update......................................................................................................................................................................211
USB Share Ports .....................................................................................................................................................................212
SMS Service ............................................................................................................................................................................213
Inbox ................................................................................................................................................................................213
Create SMS .....................................................................................................................................................................214
Package Manager .................................................................................................................................................................215
D-Link DSR-Series User Manual xi
Set Language .........................................................................................................................................................................217
Web GUI Management .......................................................................................................................................................218
Remote Management .........................................................................................................................................................219
SNMP ........................................................................................................................................................................................220
SNMP User List .............................................................................................................................................................220
SNMP Trap List ..............................................................................................................................................................221
Access Control ..............................................................................................................................................................222
SNMP System Info .......................................................................................................................................................223
Diagnostics .............................................................................................................................................................................224
Ping an IP Address/Domain Name ........................................................................................................................224
Using Traceroute .........................................................................................................................................................225
Performing DNS Lookup...........................................................................................................................................226
Capture Packets ...........................................................................................................................................................227
System Check ...............................................................................................................................................................228
Power Saving ................................................................................................................................................................229
DDP Client .....................................................................................................................................................................230
Firmware Upgrade ...............................................................................................................................................................231
Check Update ...............................................................................................................................................................231
Using System (PC) .......................................................................................................................................................232
Using USB .......................................................................................................................................................................233
Conguration Files......................................................................................................................................................234
Backup ......................................................................................................................................................................234
Restore .....................................................................................................................................................................235
Backup Settings ....................................................................................................................................................236
Soft Reboot ...................................................................................................................................................................237
Reset to Factory Default Settings ..........................................................................................................................238
Log Settings ...........................................................................................................................................................................239
Dening What to Log .................................................................................................................................................239
Routing Logs .................................................................................................................................................................241
IPv6 Logs ........................................................................................................................................................................242
System Logs ..................................................................................................................................................................243
Remote Logging ..........................................................................................................................................................244
Email .........................................................................................................................................................................244
Syslog .......................................................................................................................................................................246
SMS Logging .................................................................................................................................................................247
Status and Statistics ................................................................................................................................ 248
Dashboard ..............................................................................................................................................................................248
Manage Dashboard ....................................................................................................................................................249
System ......................................................................................................................................................................................250
LAN Info ...................................................................................................................................................................................251
WAN1 ........................................................................................................................................................................................252
WAN2 ........................................................................................................................................................................................253
D-Link DSR-Series User Manual xii
WAN3 ........................................................................................................................................................................................254
Wireless ....................................................................................................................................................................................255
All Logs .....................................................................................................................................................................................256
Current Logs ..................................................................................................................................................................256
USB Status ...............................................................................................................................................................................257
Network Information ..........................................................................................................................................................258
DHCP Leased Clients ..................................................................................................................................................258
Captive Portal Sessions .............................................................................................................................................259
Active Sessions .............................................................................................................................................................260
Active VPNs....................................................................................................................................................................261
Interface Statistics .......................................................................................................................................................262
Wireless Clients ............................................................................................................................................................263
Wireless Statistics ........................................................................................................................................................264
Device Statistics ...........................................................................................................................................................265
LAN Clients ....................................................................................................................................................................266
Session Limiting Status .............................................................................................................................................267
Troubleshooting ...................................................................................................................................... 268
Internet Connection ............................................................................................................................................................268
Date and time ........................................................................................................................................................................270
Pinging to Test LAN Connectivity ...................................................................................................................................271
Testing the LAN path from your PC to your router ........................................................................................271
Testing the LAN path from your PC to a remote device ................................................................................272
Restoring factory-default conguration settings .....................................................................................................273
Appendix A - Glossary ............................................................................................................................. 274
Appendix B - Factory Default Settings ................................................................................................... 276
Appendix C - Standard Services for Port Forwarding & Firewall Conguration ................................ 277
Appendix D - Log Output Reference ......................................................................................................278
Appendix E - RJ-45 Pin-outs ................................................................................................................... 341
Appendix F - New Wi Fi Frequency table ( New appendix section ) .................................................... 342
Appendix G - Product Statement ...........................................................................................................345
D-Link DSR-Series User Manual xiii
Section 1 - Introduction
Introduction
D-Link Services Routers oer a secure, high performance networking solution to address the growing needs of small and medium businesses. Integrated high-speed IEEE 802.11n/ac and 3G wireless technologies oer comparable performance to traditional wired networks, but with fewer limitations. Optimal network security is provided via features such as virtual private network (VPN) tunnels, IP Security (IPsec), Point-to-Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), and Secure Sockets Layer (SSL). Empower your road warriors with clientless remote access anywhere and anytime using SSL VPN tunnels.
With the D-Link Services Router you are able to experience a diverse set of benets:
• Comprehensive Management Capabilities
The DSR-500, DSR-1000, DSR-500AC, and DSR-1000AC include dual-WAN Gigabit Ethernet
which provides policy-based service management ensuring maximum productivity for your business operations. The failover feature maintains data trac without disconnecting when a landline connection is lost. The Outbound Load Balancing feature adjusts outgoing trac across two WAN interfaces and optimizes the system performance resulting in high availability. The solution supports conguring a port as a dedicated DMZ port allowing you to isolate servers from your LAN.
Note: DSR-150/150N/250/250N product have a single WAN interface, and thus it does not support
Auto Failover and Load Balancing scenarios.
• Superior Wireless Performance
Designed to deliver superior wireless performance, the DSR-150N and DSR-250N include
802.11 a/b/g/n support, allowing for operation on the 2.4 GHz radio band. Multiple In Multiple Out (MIMO) technology allows the DSR-150N and DSR-250N to provide high data rates with minimal “dead spots” throughout the wireless coverage area.
Next generation wireless performance is available on the DSR-500AC and DSR-1000AC, which
introduce 802.11AC support to the family. Available on the 5 GHz band, the combination of wider RF bandwidths and up to 8 MIMO streams take data rates available to supporting AC clients to the next level.
Note: DSR-150N and DSR-250N support 2.4GHz radio band only.
• Flexible Deployment Options
The DSR series supports Third Generation (3G) Networks via an extendable USB 3G dongle. This
3G network capability oers an additional secure data connection for networks that provide critical services. The product can be congured to automatically switch to a 3G network whenever a physical link is lost.
• Robust VPN features
A fully featured virtual private network (VPN) provides your mobile workers and branch
oces with a secure link to your network. The DSR products are capable of simultaneously managing 5, 5, 10, 20 Secure Sockets Layer (SSL) VPN tunnels respectively, empowering your mobile users by providing remote access to a central corporate database. Site-to-site VPN tunnels use IP Security (IPsec) Protocol, Point-to-Point Tunneling Protocol (PPTP), or Layer 2
D-Link DSR-Series User Manual 1
Section 1 - Introduction
Tunneling Protocol (L2TP) to facilitate branch oce connectivity through encrypted virtual links. The DSR-150/150N, DSR-250/250N, DSR-500 and DSR-1000 support 10, 25, 35 and 100 simultaneous IPsec VPN tunnels respectively. The DSR-500AC and DSR-1000AC support 35 and 100 simultaneous IPsec VPN tunnels respectively.
• Ecient D-Link Green Technology
As a concerned member of the global community, D-Link is devoted to providing eco-friendly
products. D-Link Green Wi-Fi and D-Link Green Ethernet save power and prevent waste. The D-Link Green WLAN scheduler reduces wireless power automatically during o-peak hours. Likewise the D-Link Green Ethernet program adjusts power usage based on the detected cable length and link status. In addition, compliance with RoHS (Restriction of Hazardous Substances) and WEEE (Waste Electrical and Electronic Equipment) directives make D-Link Green certied devices the environmentally responsible choice.
D-Link DSR-Series User Manual 2
Section 2 - Installation
Installation
This section provides information and steps on how to connect your DSR router to your network.
Before you Begin
Observe the following precautions to help prevent shutdowns, equipment failures, and injuries:
• Ensure that the room in which you operate the device has adequate air circulation and that the room temperature does NOT exceed 40˚C (104˚F).
• Allow 1 meter (3 feet) of clear space to the front and back of the device.
• Do NOT place the device in an equipment rack frame that blocks the air vents on the sides of the chassis. Ensure that enclosed racks have fans and louvered sides.
• Before installation, please correct these hazardous conditions: moist or wet oors, leaks, ungrounded or frayed power cables, or missing safety grounds.
Connect to your Network
This section provides basic information about physically connecting the DSR-250 to a network.
1. Connect an Ethernet cable from the port labeled WAN to the external router or modem. The
port WAN is pre-allocated to the WAN network segment.
2. Connect an Ethernet cable from one of the LAN ports to a switch or a computer in the LAN
network segment.
3. Connect an RJ45-to-DB9 cable from the console port for CLI (Command Line Interface)
management access (optional).
Note: Refer to the Quick Installation Guide included with your router for more information on
network connectivity, port, and LED information.
D-Link DSR-Series User Manual 3
Section 3 - Basic Conguration
Basic Conguration
After you install the router, perform the basic conguration instructions described in this section which includes:
• “#1 Log in to the Web UI” on page 5
• “#2 Change LAN IP Address” on page 6
• “#3 Congure DHCP Server” on page 7
• “#4 Set Time and Date” on page 8
• “#5 Internet Connection Setup” on page 9
• “#6 Wireless Network Setup” on page 12
• “#7 Create Users” on page 13
• “#8 Security/VPN Wizard” on page 14
• “#9 Dynamic DNS Wizard” on page 16
D-Link DSR-Series User Manual 4
Section 3 - Basic Conguration
#1 Log in to the Web UI
The LAN connection may be through the wired Ethernet ports available on the router, or once the initial setup is complete, the DSR may also be managed through its wireless interface. Access the router’s Web user interface (Web UI) for management by using any web browser, such as Internet Explorer, Firefox, Chrome, or Safari.
Note: The workstation from which you manage the router must be in the same subnet as the router (192.169.10.0/24).
To access the device with the Web UI:
1. Connect your workstation to an available LAN port on the router.
2. Ensure your workstation has DHCP enabled or is assigned a static IP address within the
192.168.10.0/24 subnet.
Note: Disable pop-up blocking software or add the management IP address http://192.168.10.1 to
your pop-up blocker’s allow list.
3. Launch a browser, enter the IP address for the LAN interface (default = http://192.168.10.1), and
then press Enter.
4. Enter your username (default = admin) and your password (default = admin), then click Login.
5. The web management interface opens with the Status > Dashboard page. This page displays
general, LAN, and WLAN status information. You can return to this page at any time by clicking Status > Dashboard.
D-Link DSR-Series User Manual 5
Section 3 - Basic Conguration
#2 Change LAN IP Address
To change the LAN IP address of the router, follow the steps below:
1. Log in to the router.
2. Click Network > LAN > LAN Settings. The LAN Settings page will appear.
3. Under IP Address Setup, enter a new IP address for the router.
4. Enter a new subnet mask if needed.
5. Click Save at the bottom of the page.
Note: If you change the IP address and click Save, the Web UI will not respond. Open a new connection to the new IP address and log in again. Be sure the LAN host (the machine used to manage the router) has obtained an IP address from newly assigned pool (or has a static IP address in the router’s LAN subnet) before accessing the router via changed IP address.
D-Link DSR-Series User Manual 6
Section 3 - Basic Conguration
#3 Congure DHCP Server
To change the DHCP settings of the router, follow the steps below:
1. Log in to the router.
2. Click Network > LAN > LAN Settings. The LAN Settings page will appear.
3. From the DHCP Mode drop-down menu under DHCP Setup, select None (disable), DHCP Server
(enable), or DHCP Relay.
Note: DHCP Relay will allow DHCP clients on the LAN to receive IP address leases and corresponding
information from a DHCP server on a dierent subnet. When LAN clients make a DHCP request it will be passed along to the server accessible via the Relay Gateway IP address you enter.
4. If enabled, ll in the following elds:
Field Description
Enter the starting IP address in the DHCP address pool. Any new DHCP client joining the LAN is
Starting IP Address
Ending IP Address Enter the ending IP address in the DHCP address pool.
Default Gateway
Domain Name Enter a domain name.
Lease Time Enter the time, in hours, for which IP addresses are leased to clients.
Congure DNS/WINS
assigned an IP address within the starting and ending IP address range. Starting and ending IP addresses should be in the same IP address subnet as the wireless controller’s LAN IP address.
By default this setting is router’s LAN IP address. It can be customized to any valid IP within the LAN subnet, in the event that the network’s gateway is not this router. The DHCP server will give the congured IP address as the Default Gateway to its DHCP clients.
Toggle to On and enter DNS and/or WINS server IP address(es).
5. Click Save at the bottom of the page.
D-Link DSR-Series User Manual 7
Section 3 - Basic Conguration
1. Log in to the router.
2. Click Wizard in the upper-right side of the page. If you want to manually congure your date/time
settings, refer to “Date and Time” on page 209.
3. Click Run in the Date and Time Wizard box.
4. Click the continent from the map and then next to City, select your time zone from the drop-down
menu. Toggle Daylight Saving to ON if it applies to you and then click Next.
#4 Set Time and Date
5. Toggle NTP server to ON to use a time server or toggle to OFF to manually enter the time and date.
6. If you selected ON, select either Default or Custom from the drop-down menu. If you selected Custom,
enter a primary and secondary NTP server address.
7. Enter the time to synchronize with the NTP server and click Save.
8. A summary page will appear. Verify your settings and then click Finish.
D-Link DSR-Series User Manual 8
Section 3 - Basic Conguration
#5 Internet Connection Setup
This router has two WAN ports that can be used to establish a connection to the internet. It is assumed that you have arranged for internet service with your Internet Service Provider (ISP). Please contact your ISP or network administrator for the conguration information that will be required to setup the router. Supported Internet connection types include Dynamic, Static, PPPoE, PPTP, L2TP, Japanese PPPoE, and Russian PPPoE/PPTP/L2TP.
To congure your router to connect to the Internet, follow the steps below:
1. Log in to the router.
2. Click Wizard in the upper-right side of the page. If you want to manually congure your Internet
settings, refer to “Connect to the Internet” on page 32.
3. Click Run in the Internet Connection Wizard box.
4. Toggle On next to either DHCP or Static IP Address and click Next. If your connection type is not listed,
refer to “Connect to the Internet” on page 32.
D-Link DSR-Series User Manual 9
Section 3 - Basic Conguration
a. If you selected DHCP, complete the elds below:
Field Description
This MAC address will be recognized by your ISP. Select from the following three options:
Use Default Address - Uses the default MAC address of the router.
MAC Address Source
Clone your PC’s MAC Address - Select to use the MAC address of the computer you are currently
connecting with.
Use this MAC Address - Select to manually enter a MAC address and enter the address in the box.
Host Name Enter a host name if required by your ISP.
Select from the following two options:
DNS Server Source
Get Dynamically from ISP - Select to use the DNS servers assigned by your ISP.
Use these DNS Servers - Select to manually enter a primary and secondary DNS server address(es).
Skip to Step 5 on the bottom of the next page.
D-Link DSR-Series User Manual 10
Section 3 - Basic Conguration
b. If you selected Static, complete the elds below:
Field Description
This MAC address will be recognized by your ISP. Select from the following three options:
Use Default Address - Uses the default MAC address of the router.
MAC Address Source
Clone your PC’s MAC Address - Select to use the MAC address of the computer you are currently
connecting with.
Use this MAC Address - Select this option to manually enter a MAC address and enter the address in
the box.
IP Address
Gateway IP Address
IP Subnet Mask Enter the subnet mask assigned by your ISP.
Primary DNS Server Enter the primary DNS server IP address assigned by your ISP.
Secondary DNS Server Enter the secondary DNS server IP address assigned by your ISP.
Enter the IP address assigned by your ISP. Enter the gateway IP address assigned by your ISP.
5. Click Save. The router will reboot and attempt to connect to your ISP. Please allow one to two minutes
to connect.
D-Link DSR-Series User Manual 11
Section 3 - Basic Conguration
#6 Wireless Network Setup
This wizard provides a step-by-step guide to create and secure a new access point on the router. The network name (SSID) is the AP identier that will be detected by supported clients. The Wizard uses a TKIP+AES cipher for WPA / WPA2 security; depending on support on the client side, devices associate with this AP using either WPA or WPA2 security with the same pre -shared key.
The wizard has the option to automatically generate a network key for the AP. This key is the pre-shared key for WPA or WPA2 type security. Supported clients that have been given this PSK can associate with this AP. The default (auto-assigned) PSK is “passphrase”.
1. Log in to the router.
2. Click Wizard in the upper-right side of the page.
3. Click Run in the Wireless Wizard box.
4. The wizard screen will appear.
5. Select a Prole Name from the drop down menu and enter the Network Name (SSID), which is the name
of your wireless network.
6. Next to Network Key Type, select Manual.
7. Enter a password for the wireless network. Wireless devices connecting to this network must enter this
password to connect. The password is case-sensitive.
8. Click Save.
9. A window will appear with a summary of your settings. Click Finish.
D-Link DSR-Series User Manual 12
Section 3 - Basic Conguration
#7 Create Users
The Users Wizard allows you to create user account that you can assign to groups. Refer to “Users” on page 158 for more information. You may want to create Groups before users so you may assign them to groups as you create them. To create groups, refer to “Groups” on page 154.
To create new users, follow the steps below:
1. Log in to the router.
2. Click Wizard in the upper-right side of the page.
3. Click Run in the Users Wizard box.
4. The wizard screen will appear.
5. Enter a unique user name.
6. Select the group type from the drop-down menu. For more information on groups, refer to “Groups”
on page 154.
7. Enter a password for the user.
8. Enter the password again for conrmation.
9. Click Save.
D-Link DSR-Series User Manual 13
Section 3 - Basic Conguration
#8 Security/VPN Wizard
The Security Wizard allows you to enable VPN passthrough and create a VPN.
Follow the steps below:
1. Log in to the router.
2. Click Wizard in the upper-right side of the page.
3. Click Run in the Security Wizard box.
4. The wizard screen will appear.
5. Select the default outbound policy from the drop-down menu.
6. Toggle which type(s) of VPN you want allowed to pass through the router to ON and click Next.
D-Link DSR-Series User Manual 14
Section 3 - Basic Conguration
7. You can quickly create both IKE and VPN policies. Once the IKE or VPN policy is created, you can modify
it as required.
8. From the Select VPN Type drop-down menu, select either Site to Site or Remote Access.
9. Next to Connection Name, enter a name for this VPN connection.
10. Next to IP Protocol Version, select either IPv4 or IPv6.
Note: The IP Protocol Version drop-down list depends up on the IP Mode selected on the Network > IPv6 > IP
Mode page.
11. Next to IKE Version, select the version of IKE.
12. Next to Pre-Shared Key, enter the pre-shared key used.
13. Next to Local Gateway, select which WAN port used for the local gateway.
14. Next to Remote Gateway Type and Local Gateway Type, select either IP Address or FQDN.
15. Enter the Remote and Local WAN IP Address or FQDN and click Next.
16. Enter the remote network IP address and subnet mask.
17. Enter the local network IP address and subnet mask.
18. Click Save.
Note: The IP address range used on the remote LAN must be dierent from the IP address range used on the local LAN.
D-Link DSR-Series User Manual 15
Section 3 - Basic Conguration
#9 Dynamic DNS Wizard
Dynamic DNS (DDNS) is an Internet service that allows routers with varying public IP addresses to be located using Internet domain names. To use DDNS, you must setup an account with a DDNS provider such as DynDNS. org, D-Link DDNS, or Oray.net. Refer to “Dynamic DNS Settings” on page 56 for more information.
Follow the steps below:
1. Log in to the router.
2. Click Wizard in the upper-right side of the page.
3. Click Run in the Dynamic DNS Wizard box.
4. The wizard screen will appear.
5. Next to Dynamic DNS, select WAN1, WAN2, or WAN3.
Note: WAN3 is available only in DSR-1000AC model.
6. Select the Dynamic DNS Server Type from the drop-down menu.
7. Depending on your service, enter your DDNS User Name, Password, and Host Name.
8. Toggle Wildcards to ON if required by your DDNS service.
9. Enter the Force Update Interval.
10. Click Save.
D-Link DSR-Series User Manual 16
Loading...
+ 348 hidden pages