D-Link DSA 5100 - Airspot - Gateway, Installation Manual

Page 1: ...cable Qty 1 Power Cord System Requirements Computer with an Ethernet adapter and a Windows Mac or Unix based operating system Internet Explorer or Netscape Navigator version 6 0 or above with JavaScript enabled 2006 D Link Systems Inc All rights reserved Trademarks or registered trademarks are the property of their respective holders Software and specifications subject to change without notice DSA...

Page 2: ...ects to your Internet connection or Intranet WAN2 Connects to your Internet connection or Intranet LED Function Link Solid green indicates a good connection on the associated port Act The Act LED flashes during data transmission on the associated port Power A solid light indicates a proper connection to the power supply Status The status LED has three states Unlit when the system s BIOS is loading...

Page 3: ...ur broadband connection The Public LAN LED should illuminate to indicate a proper connection 4 Connect an Ethernet cable to the port labeled Private LAN on the DSA 5100 Connect the other end of the Ethernet cable to a switch The Private LAN LED should illuminate to indicate a proper connection 5 Connect an Ethernet cable to the port labeled WAN1 on the DSA 5100 Connect the other end of the Etherne...

Page 4: ...he DSA 5100 s default IP address you would enter https 192 168 0 40 Note Include the s at the end of https to ensure a secure connection Once you ve connected to the DSA 5100 the Login screen appears By default admin is the User Name and Password Type admin in the User Name and Password fields and click Enter After successfully logging in the Home screen will appear Click on the System Configurati...

Page 5: ...ide Step 1 Change Admin s Password Enter a new password for the admin account and retype it in the verify password field Click Next to continue Click on the Run Wizard button to begin the Setup Wizard The Setup Wizard appears click Next to begin ...

Page 6: ...the URL of external time server for the gateway to synchronize the time from WAN Port DNS Server Enter a DNS Server provided by your Internet Service Provider Contact your ISP if you are unsure of the IP Address to enter here Step 4 Select the Connection Type for WAN1 Port Select the type of Internet connection that you have If you are unsure of which to select please contact you Internet Service ...

Page 7: ... IP address information provided by your Internet Service Provider You must complete all of the fields Click Next and continue to Step 5 on page 8 Step 4 Set PPPoE Client s Information If you selected PPPoE enter the Username and Password provided by your Internet Service Provider Click Next and continue to Step 5 on page 8 ...

Page 8: ...c LAN s DHCP Server Start IP Address End IP Address These fields define the IP address range that will be assigned to the Public LAN clients configured for DHCP Be sure the IP range does not conflict with any manually configured network devices or the IP address of the DSA 5100 Domain Name Enter a domain name provided by your ISP Primary DNS Server Secondary DNS Server The DNS Server settings are ...

Page 9: ...ntered has the ability to manage the DSA 5100 via the WAN1 interface This allows the system at the specified IP address to manage the DSA 5100 over the Internet Access History IP The IP address of your billing system should be entered here to allow the billing system to access the DSA 5100 s billing history information SNMP The DSA 5100 supports SNMP v2 read only data access The administrator can ...

Page 10: ...urations The VLAN Configuration is the only configuration that provides the VLAN Tag option The Private LAN Port doesn t have the option for User Authentication VLAN Enable or disable the VLAN option only applicable in the Public LAN and VLAN Interface Configuration Enable User Authentication Controls user authentication per selected interface when enabled The default is disabled Operation Mode NA...

Page 11: ...t All addresses between the Start IPAddress and End IP Address are available for assignment to clients Primary DNS Server Enter the IP address of the primary DNS server Secondary DNS Server A secondary DNS server s IP address can be entered here but is not required Domain Name Enter the domain name WINS Server IP Enter the IP address of the WINS server Lease Time Select the amount of time for the ...

Page 12: ...nt setup Each management setup can use up to twenty management rules in addition to the group configuration This allows more diversified and flexible management options for general users Item The item number Policy Name The policy name is displayed here Status Displays whether the policy is enabled or disabled Default Lists the policy that is the default Only one policy may be selected as the defa...

Page 13: ...ing to the following postfix when the user logs on the system example user1 postfix1 Policy Status The policy is enabled or disabled here Black List Profile Select one of the five profiles from the Black List configuration or None if you don t wish to use one Authentication Server The are five authentication options listed here Local POP3 RADIUS LDAP and NT Domain and an additional option on the E...

Page 14: ... click on the Local Users List hyperlink from the Authentication Policies Configuration page when Local is selected as the Authentication Server To Add Users click the Add User button and enter the following information Username Usernames can be up to 32 characters maximum No spaces can be used Password Enter a password consisting of up to 20 characters No spaces can be used MAC This field is opti...

Page 15: ...er account information to the DSA 5100 from a text file You can either upload a previously saved file or create a text file using the proper format In the text file each user must have their own line and there are no spaces Use the colon between the octets of the MAC address Spaces can only be used in the remarks section There must not be any spaces between the fields and the commas The MAC field ...

Page 16: ...en Scroll to the bottom of the page Right click on the Download hyperlink and select Save Target As Choose a file name and location Click the Close button when finished POP3 When selecting POP3 as the authentication method you must enter the IP address or domain name of the POP3 server You must also enter the port number The standard port number is 110 A secondary POP3 server can be entered but is...

Page 17: ... for authentication When disabled only the ID will be transferred to the RADIUS server for authentication Class Configuration Configuration reads parameters from a configuration file and returns their values on demand Set the Max Bandwidth and Request Bandwidth and assign a group for every class Server IP Enter the IP address or domain name of the RADIUS server Authentication Port The authenticati...

Page 18: ...Enter the port number in this field The standard port number is 389 Base DN Base DN data of LDAP Server Account Attribute Type Select the account attribute type There are types UID CN and sAMAccountName Anonymous Bind If you want to access the data from some LDAP servers which need to be authenticated you have to enter the username and password in the Bind RDN and Bind Password fields or check Ano...

Page 19: ...r Transparent Login When enabled the user logs into the DSA 5100 after logging into the Windows Domain Note Currently only Windows 2000 domain controllers can be used External Authentication The DSA 5100 also allows external authentication allowing you to put the login page on an external web server The login page can be changed at any time Protocol Select HTTP or HTTPS Server IP The External Web ...

Page 20: ...fic Route Profile and Login Schedule Profile Firewall Profile The system has a default global firewall profile and five additional firewall profiles You can use the global firewall profile to define the firewall rules for all users and create indepent profiles using the other five settings Profile Name Enter a name for the profile here ...

Page 21: ...hing packets immediately Protocol Select from TCP UDP and ICMP protocols or select ALL for all three Source MAC Source MAC address Be sure to include the colon between each octet xx xx xx xx xx xx Source Interface Select a specific interface or ALL Source IP Address Enter the IP address of the source Source Subnet Mask Enter the Subnet Mask of the source Source Operator Select the comparison rules...

Page 22: ...ecific Route Profiles Profile Name The name for the Specific Route Profile Destination IP Address Specifies the target network or host IP Subnet Mask Specifies the target subnet mask Gateway IP Address Specifies the IP address of the next hop router ...

Page 23: ...23 Group Profile DSA 5100 Installation Guide Login Schedule Profiles This allows you to set the hours that users are allowed to login ...

Page 24: ... IP Addresses to Internal IP Addresses Virtual IP Addresses The WAN port of the system will automatically set the public address defined here Up to forty virtual IP addresses can be defined These settings are effective as soon as you click the Apply button Virtual Server The Virtual Server permits you to define up to forty virtual servers This allows the computers that are not on the managed netwo...

Page 25: ...e settings are effective as soon as you click the Apply button Privilege List IP Pass Through Configuration This feature allows designated IP addresses to bypass authentication Up to one hundred IP addresses can be added to be given network access rights without authentication These settings are effective as soon as you click the Apply button Note Permitting specific IP addresses network rights wi...

Page 26: ... Up to one hundred MAC addresses can be added to be given network access rights without authentication Be sure to include the colon between each octet xx xx xx xx xx xx These settings are effective as soon as you click the Apply button Note Permitting specific MAC addresses network rights without authentication can present a security risk on the network ...

Page 27: ...27 Notes DSA 5100 Installation Guide This page left blank intentionally ...

Page 28: ... support through our website or by phone Tech Support for customers within the United States D Link Technical Support over the Telephone 877 453 5465 Twenty four hours a day seven days a week D Link Technical Support over the Internet http support dlink com email support dlink com Tech Support for customers within Canada D Link Technical Support over the Telephone 800 361 5265 Monday through Frida...