D-Link Airspot DSA-3100, Manual

Page 1: ...Manual Building Networks for People Public Private Gateway D Link Airspot DSA 3100 March 2006 Rev B ...

Page 2: ... Sample Scenarios 8 Installation 10 Setting Up the DSA 3100 11 Configure PCs on your LAN 12 TCP IP Network Setting 12 Internet Access Configuration 13 Using the Configuration Utility 15 Networking Basics 56 Technical Specifications 71 Technical Support 73 Warranty and Registration 74 ...

Page 3: ...ed Ethernet adapter System Requirements for Configuration Contents of Package D Link DSA 3100 Airspot Gateway CD ROM containing Manual and Warranty Quick Installation Guide Two 2 CAT5 UTP Straight through Ethernet cables One 1 CAT5 UTP Cross over cable One 1 Console cable 5V DC 3A Power Adapter If any of the above items are missing please contact your reseller 1 2 3 4 5 6 7 ...

Page 4: ...ernet Explorer Netscape Navigator operating on Windows 98SE Me 2000 XP Macintosh OS 9 Mac OS X v10 1 5 or later Linux or Pocket PC 2000 2002 The DSA 3100 allows the operator to offer wired or wireless networking services and access to the Internet when used with a switch or wireless access point respectively The device features many management settings allowing for private and public access to the...

Page 5: ...D indicates the DSA 3100 is working properly This LED will flash during reboot Power LED A solid light indicates a proper connection to the power supply WAN LED Link A solid light indicates a connection on the WAN port Act This LED blinks during data transmission Private Network A solid light indicates a connection on the Private Network This LED blinks during data transmission ...

Page 6: ...he Internet Console Port For resetting to factory defaults or reconfiguring the device For Advanced users only WAN Port The port that connects to your WAN connection providing Internet access to the Local and Managed Networks Authentication Port Public LAN or WLAN with Access Point Connects to a switch or AP Receptor for Power Adapter ...

Page 7: ...fic data SSL protected access to the administration interface and user authentication interface Customizable user log in and log out Web interface Customizable user log out timer Customizable target URL for users who successfully authenticate Console mode administration interface via serial console port Supports display of text messages on the log in page An administrator could use the administrat...

Page 8: ...8 Sample Scenarios ...

Page 9: ...9 Sample Scenarios continued 3 ...

Page 10: ...10 Installation Standard 10 100Base T network UTP Cat5 Ethernet cable with RJ45 connectors TCP IP network protocol must be installed on all networked computers and related devices Requirements T1 ...

Page 11: ...rossover cable for connections Public LAN port connection Use to connect to a switch or an access point for Hotspot access All ports are auto mdix which means that you can use a straight through or a crossover cable for connections Power ON Connect the supplied power adapter to the DSA 3100 and insert the plug on the other end into an electric outlet Check the LEDs The power LED and WAN LED should...

Page 12: ...r reboots or when the network settings refresh For all non Server versions of Windows the default TCP IP setting is to act as a DHCP client In Windows the setting for this is Obtain an IP address automatically If you are using a fixed IP address on your LAN or if you want to check your TCP IP setting refer to the Networking Basics section in this manual Configure PCs on your LAN After installing t...

Page 13: ...iguration To configure your PCs to use the DSA 3100 for Internet access follow this procedure For Windows 98SE 2000 Select the Connection tab and click the Setup button Please select Start Menu Control Panel Internet Options ...

Page 14: ... Please select Star Menu Control Panel Network and Internet Connection Select the Connection tab and click the Setup button Click Next on the New Connection Wizard screen Select Connect to the Internet and click Next Select Set up my connection manually and click Next Check Connect using a broadband connection this always on and click Next Click Finish to close the New Connection Wizard Setup is n...

Page 15: ...nable box Start your Microsoft Internet Explorer Web browser program Type https 192 168 0 40 which is the default IP address of the DSA 3100 in the address field and press Enter Make sure that the IP addresses of the DSA 3100 and your computer are in the same subnet https 192 168 0 40 manager access to the manager user account only User Name manager Password manager After you log in click Enter Us...

Page 16: ...anager Home Wizard The Home Wizard screen will appear if you logged in as an admin For more information on the Setup Wizard please see the Quick Installation Guide included with your pur chase You can access the configuration features from this window On the bottom of each configuration screen you will find the buttons shown below Restart the DSA 3100 after completing any changes to its configurat...

Page 17: ... s information will be shown on the user login page Succeed Page Enter a URL for all users to be directed to after successful login This is typically defined as the home page of the host company e g http www dlink com No matter to which URL a user originally attempts to connect he she will be directed to the URL defined here first DNS Specify DNS servers for the DSA 3100 for the Preferred DNS pref...

Page 18: ...your ISP All devices on the network must have the same netmask Subnet mask Enter the IP address of the gateway provided to you by your ISP Default Gateway Static IP Address Dynamic IP Address PPPoE Client Make this selection if there is a DHCP server in the network See the following pages Make this selection if you connect to the Internet using DSL See the following pages ...

Page 19: ...his option to obtain an IP address automatically from your ISP Enter the user name and password that is assigned by your ISP User Name Password Home WAN PPPoE This field is optional Dial on demand Renew Click Renew to renew the IP configuration Most DSL users will select this option ...

Page 20: ... interface the Public Network IP Address Disable DHCP Server Enter the subnet mask for the Authentication interface Subnet Mask This mode protects the identity of the devices within the LAN from those devices outside the network NAT In this mode the DSA 3100 will not protect the identity of the connected devices by translating their IP addresses and shielding them from detection outside the LAN Ro...

Page 21: ...fy another DHCP server s IP address Enable DHCP Relay Enter the WINS server s IP address if one is present on the network WINS Server Selecting this option activates the device s built in DHCP server Configure the DHCP server with the following properties Enable DHCP Server Enter the starting IP address from which the DHCP server will assign to the DHCP enabled devices clients on the network DHCP ...

Page 22: ...screen please see the previous screen Home Public Network Nat mode All outbound IP addresses on the local network port will be translated to the IP address of the WAN port to proceed Router mode All outbound IP addresses on the local network port will retain their IP addresses Using the Configuration Utility continued ...

Page 23: ...minutes of time is the default value Idle Timer Limit the outbound traffic bandwidth for each session established by a Guest Account Bandwidth Limitation Limit the duration of each session established by the general account from 5 minutes to an unlimited period Session Length General Account Check this function to allow a single user account to log into the system multiple times Enable Multiple Lo...

Page 24: ...24 Using the Configuration Utility continued Home User Manager General Account Define the login time and duration here ...

Page 25: ...estAccount Guest Account List Up to 10 guest accounts can be defined To activate a particular Guest Account simply enter the corresponding password in the Password column and click Apply Guest Account ACL Define network areas where the Guest Account function is disal lowed access for instance 10 2 3 0 24 ...

Page 26: ...3100 unless they have registered their MAC Address at MAC Address Control In other words only 40 users will be allowed to login when this function is enabled Please refer to the configuration screen as follows MAC Address Control Note MAC address format is XX XX XX XX XX XX or XX XX XX XX XX XX A newly created user account will be valid instantly Restarting the DSA 3100 is not necessary ...

Page 27: ...en activating https encryption or http non encryption for the login page User Logon SSL Enter a URL if you enable this function The DSA 3100 detects the WAN port connection by linking the URL defined here It will pop up the alarm page when the WAN port fails to connect WAN Fail Function Supports multiple user Public LAN methods including Local POP3 server RADIUS Server LDAP Server and External Web...

Page 28: ...user account management You can add edit and delete users A sample list is shown here Delete User Click the box next to the user name and click Delete Add Users Click Add User to create new accounts The screen below will appear Edit Account Make changes to the account by clicking on the User Name as indicated above The screen below will appear Edit the account information here ...

Page 29: ...counts Besides adding user accounts one by one through the Web interface you can prepare a text file which contains user account information store it on your hard drive and then upload it to the DSA 3100 Each line of the text file can be in one of the following two formats After you have created the text file for the user account as described above click Upload User Accounts as shown in the illust...

Page 30: ...emand user will be created in the database a receipt will then be printed which will contain the on demand user s information Using the Configuration Utility continued Home User Manager Authentication Server Local On demand User Configuration Shown above is an example of a an on demand receipt Welcome Username D Link1 Password q6m34m3b Price US 2 Usage 60 minute s ESSID dlink Shared WEP Keys HEX 4...

Page 31: ...er in this field You can configure the receipt s footer in this field You can specify the baud rate to support a specific printer The default setting is 9600 You can specify the days before expiration in this field After the expiration date the user account will no longer be available A new session will be required You can specify how many minutes this account will be available after successful lo...

Page 32: ...en below will appear showing a list of the on demand users You can delete users in this window On demand Users List Local Local User Group Configuration The DSA 3100 provides 5 local user groups each group can designate a different outbound traffic bandwidth The Logout Timer will logout a user that has not accessed the Internet for a certain time period A sample list is shown below ...

Page 33: ...r Manager Authentication Server RADIUS To use RADIUS as the authentication method input the RADIUS server IP address or domain name public LAN port accounting Port secret key and select the accounting service and public LAN method function The settings will take effect immediately after you click the Apply button It is recommended that you restart the DSA 3100 after these changes if there are any ...

Page 34: ...nthe DSA 3100 Configuration To utilize 802 1x all the devices on the network must be 802 1x and EAP enabled The APs and the RADIUS server must share the same secret word and the DSA 3100 and the RADIUS server must share the same secret word Home User Manager Authentication Server RADIUS 802 1x To use 802 1x please configure the RADIUS server the access points and the DSA 3100 as follows RADIUS ser...

Page 35: ...he 802 1x supplicant provided by Microsoft the idle time out will be longer than the settings in RADIUS AP and DSA 3100 Except for the idle timer there is no way for the user to logoff from 802 1x Access Point in the current 802 1x implementation by Microsoft Input the IP addresses and secret keys for the devices on the network ...

Page 36: ...ded that you restart the DSA 3100 after these changes if there are any online users Home User Manager Authentication Server External Web Server Protocol Choose from http or https Server IP External Web servr IP Server Port External Web server Port number Login Page Login page location Logout Page Logout page location The DSA 3100 can support an external web server which enables the user to put the...

Page 37: ...ded by the appropriate Wireless Access Provider to complete the DSA 3100 configuration Airpath Roaming Airpath Wireless will provide all required information The DSA 3100 Administrator must have a roaming user agreement with Airpath Wireless in order to use this feature Users who registered Airpath Wireless s service may login to the local public network via roaming Within the system de fault logi...

Page 38: ...l provide all required information The DSA 3100 Administrator must have a roaming user agreement with Pronto Wireless in order to use this feature Users who registered Pronto Wireless s service may login to the local public network via roaming You can configure related function here including server IP default group login URL and etc ...

Page 39: ...lients who try to access a specific destination that matches one of the defined destinations will be forced to a matching redirection target These settings will take effect immediately after you click the Apply button Using the Configuration Utility continued Advanced Port and IP Redirect ...

Page 40: ...curity of your network Advanced Virtual Server This feature allows you to define up to 10 virtual servers to enable access to servers connected to the authentication and local network port from outside of the managed network Depending on the service provided the service might run on TCP ports UDP ports or both Click Enable to activate the rule Changes to the settings of virtual servers will take e...

Page 41: ...ew websites before they log in enter the IP addresses of those sites in the Free Surfing Area list Up to 20 sites can be defined For example a website that provides introduction and guidance for local facilities and routes or sites with content suitable or appropriate for public viewing could be listed in the Free Surfing Area Guest users of the network cannot access other parts of the network but...

Page 42: ...ettings must be stored by using the Save Setting function and restarting the DSA 3100 In this example if you want the 192 168 202 0 24 and 192 168 100 0 24 network to have access to each other you should add a static route in the DSA 3100 and also in the 192 168 200 253 IP router These settings show the DSA 3100 s static route configurations e Specifies the target network or host IP In this exampl...

Page 43: ... tween the source and destination or whether it will be dropped To display the detail click the index number in the screen above Please see the next page for an explanation of the fields in the configuration screen shown above TCP Click the Filter Rule number to enter the firewall page for each filter The chart on the following page explains each configurable item in detail ...

Page 44: ...otocol Specifies the protocol s this filter rule will apply to Source MAC Source MAC address optional Source Destination Interface IF You can select WAN port or LAN port or Authentication port or ALL ports Source Destination IP Address Source Destination IP Address Source Destina tion Subnet Mask Source Destination Subnet Mask Source Destination Operator Select equal not equal greater than smaller...

Page 45: ...m is fixed The DSA 3100 provides 2 built in user accounts Admin This user is the administrator of the DSA 3100 Manager This user has the right to manage a user account the admin functions are denied The Admin and the Manager can change their passwords specify the current password first The new password must be entered twice Note If you lose the administrator s password you can change the administr...

Page 46: ...lick Apply to upload it onto the DSA 3100 Upload Certificate To provide a private key page in order to support a specific certificate please click Browse to search for the file name for the customer certificate Click Apply to upload it onto the DSA 3100 If you want to get back to the default certificate page simply click the Use Default Certificate button Upload Private Key continued on the next p...

Page 47: ...fault Page button If you want to display the Login page simply click the Preview button The uploaded custom login page must contain the following HTML codes to provide users a place to input the user name and password form action userlogin shtml method post name Enter input type text name myusername input type password name mypassword input type submit name submit value Enter input type reset name...

Page 48: ...y click the Use Default Page button If you want to display the Logout page simply click the Preview button The uploaded custom logout page must contain the following HTML codes to provide users a place to input the user name and password form action userlogout shtml method post name Enter input type text name myusername input type password name mypassword input type submit name submit value Logout...

Page 49: ...pecify the file name to upload it onto the DSA 3100 If you want to get back to the default user login page simply click the Use Default Page button If you want to display the Login Succeed Page simply click the Preview button Tools Upload Login Succeed Page Tools Upload Logout Succeed Page Upload Logout Succeed Page To provide a custom user logout page please specify the file name to upload it ont...

Page 50: ...it onto the DSA 3100 If you want to get back to the default user login page simply click the Use Default Page button If you want to display the Login Succeed Page simply click the Preview button Tools Upload Image If the user defined logon interface includes a graphic file the HTML code of the graphic file path must be the upload graphic file Enter the path and file name of the graphic file or bro...

Page 51: ...creen shown here to check for firmware upgrades on the D Link website After you download the new firmware file to your hard drive click Browse and then click Apply to upgrade the firmware Please restart the DSA 3100 using the administration interface Do not directly power it off and on Restarting the DSA 3100 in this way after a firmware upgrade might result in corruption of the DSA 3100 firmware ...

Page 52: ...ds for SNMP messages DSA 3100 allows Read only RO access If you select Enable SNMP enter the IP address community string to the field Proxy Server Based on DSA 3100 security management only port 80 is allowed it will appear on logon webpage If you have built a Proxy Server in your network environment and the user s browser is set to Proxy you must set your External Proxy Server IPAddress and Proxy...

Page 53: ...If you have to turn off the power of the DSA 3100 for some time please reboot it and after you hear a beep remove the power adapter Note On line user sessions will be terminated when the system restarts Status Device Info This feature displays a system configuration summary For a chart defining each term please see the following page ...

Page 54: ...nage SSH The IP address that connects to the WAN port for configuring the DSA 3100 History Retain Days The system will keep user login information for 3 days E mail to E mails the traffic history file to this address Time External Time Server Used for clock synchronization Date Time Displays Greenwich time User Idle Logout Timer 10 Min s Multiple Login When disabled it disallows a single user from...

Page 55: ... Configuration Utility continued With this feature you can get Interface management information about the WAN port Authentication port and Local Network port For more detail see the following page Status Interface ...

Page 56: ...53 Using the Configuration Utility continued Status Interface continued ...

Page 57: ... The DSA 3100 keeps traffic history in its volatile memory To have the traffic history sent to you automatically enter the related information in these fields your E mail address in the History E mail field the period of time between two history files and SMTP Server The system provides four authentication methods Plain Login CRAM MD5 and NTLMv1 or None to use none of the above Depending on which ...

Page 58: ...55 Using the Configuration Utility continued Help This feature provides online instructions for operating the DSA 3100 you can click the hyperlink for a more detailed description ...

Page 59: ...osoft Windows XP Note Please refer to websites such as http www homenethelp com and http www microsoft com windows2000 for information about networking computers using Windows 2000 ME or 98 Go to Start Control Panel Network Connections Select Set up a home or small office network Networking Basics When this screen appears Click Next ...

Page 60: ...ns in this window Networking Basics continued Click Next In the following window select the best description of your computer If your computer connects to the internet through a gateway router select the second option as shown Click Next ...

Page 61: ...58 Enter a Computer description and a Computer name optional Networking Basics continued Click Next Enter a Workgroup name All computers on your network should have the same Workgroup name Click Next ...

Page 62: ... while the Network Setup Wizard applies the changes Networking Basics continued When the changes are complete Click Next Please wait while the Network Setup Wizard configures the computer This may take a few minutes ...

Page 63: ...w select the option that fits your needs In this example Create a Network Setup Disk has been selected You will run this disk on each of the computers on your network Click Next Insert a disk into the Floppy Disk Drive in this case drive A Click Next ...

Page 64: ...lease read the information under Here s how in the screen below After you com plete the Network Setup Wizard you will use the Network Setup Disk to run the Network Setup Wizard once on each of the computers on your network Click Next ...

Page 65: ...w settings will take effect when you restart the computer Click Yes to restart the computer You have completed configuring this computer Next you will need to run the Net work Setup Disk on all the other computers on your network After running the Net work Setup Disk on all your computers your new wireless network will be ready to use ...

Page 66: ...corner of the screen Right click on My Computer Select Properties Select the Computer Name Tab in the System Properties window You may enter a Com puter Description if you wish this field is optional To rename the computer and join a domain click Change Networking Basics continued Naming your Computer ...

Page 67: ...rk must have the same Workgroup name Click OK Checking the IP Address in Windows XP The adapter equipped computers in your network must be in the same IP Address range see Getting Started in this manual for a definition of IP Address Range To check on the IP Address of the adapter please do the following Right click on the Local Area Connection icon in the task bar Click on Status ...

Page 68: ...eways Broadband Routers will automatically assign IPAddresses to the computers on the network using DHCP Dynamic Host Configuration Protocol technology If you are using a DHCP capable Gateway Router you will not need to assign Static IP Addresses If you are not using a DHCP capable Gateway Router or you need to assign a Static IP Address please follow these instructions Go to Start Click on Contro...

Page 69: ...66 Networking Basics continued Assigning a Static IP Address in Windows XP 2000 continued Double click on Network Connections Click on Properties Right click on Local Area Connections ...

Page 70: ...92 168 0 3 and 192 168 0 4 The subnet mask must be the same for all the computers on the network Networking Basics continued Assigning a Static IP Address in Windows XP 2000 Input your DNS server addresses Note If you are entering a DNS server you must enter the IP Address of the Default Gateway The DNS server information will be supplied by your ISP Internet Service Provider Click OK Click on Int...

Page 71: ... Go to the Apple Menu and se lect System Preferences cClick on Network Select Built in Ethernet in the Show pull down menu Select Manually in the Configure pull down menu Input the Static IPAddress the Subnet Mask and the Router IP Address in the appropriate fields Click Apply Now ...

Page 72: ...sh OSX Go to the Apple Menu and select System Preferences Click on Network Select Built in Ethernet in the Show pull down menu Select Using DHCP in the Configure pull down menu Click Apply Now The IP Address Subnet mask and the Router s IP Address will appear in a few seconds ...

Page 73: ...ss Point A good wireless connection will show four replies from the Wireless Router or Acess Point as shown Go to Start Run type command A window similar to this will appear Type ping xxx xxx xxx xxx where xxx is the IP Address of the Wireless Router or Access Point A good wireless connection will show four replies from the wireless router or access point as shown Note The following illustrations ...

Page 74: ...hese can be selected at a time On line status monitoring and history traffic data review SSL protected access to the administration interface and user authentication inter face Customizable user login logout web interface Customizable target URL for users who successfullly get authorization Built in DHCP server High speed policy routing engine Customizable peremptory traffic redirection NTP client...

Page 75: ...ts to workstations serv ers that do not need authentication Public LAN port 10 100Mbps Fast Ethernet connects to workstations de vices that need authentication Console port RS 232 default set to 115200 n 8 1 no flow control Power Supply External Power Adapter Power Input DC 5V 3A Dimensions 45 mm H x 163 mm D x 215 mm W Operating Temperature 0 50 C Storage Temperature 25 55 C EMI Certification FCC...

Page 76: ...ustomers within the United States D Link Technical Support over the Telephone 877 453 5465 6 00AM to 6 00PM PST Monday through Friday D Link Technical Support over the Internet http support dlink com email support dlink com Tech Support for customers within Canada D Link Technical Support over the Telephone 800 361 5265 Monday to Friday 7 30am to 12 00am EST D Link Technical Support over the Inter...

Page 77: ...e portion of the product Software will substantially conform to D Link s then current functional specifications for the Software as set forth in the applicable documentation from the date of original retail purchase of the Software for a period of ninety 90 days Warranty Period provided that the Software is properly installed on approved hardware and operated as contemplated in its documentation D...

Page 78: ...as been altered tampered with defaced or removed Initial installation installation and removal of the product for repair and shipping costs Operational adjustments covered in the operating manual for the product and normal maintenance Damage that occurs in shipment due to act of God failures due to power surge and cosmetic damage Any hardware software firmware or other products or services provide...

Page 79: ...reserved CE Mark Warning This is a Class B product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures FCC Statement This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against ha...