D-Link DSA-3100 manual

Manual Building Networks for People Hot spot Gateway D-Link DSA-3100 Express EtherNetwork TM January 2004 Fourth Edition[...]

2 Content s Package Contents ................................................................................ 3 Introduction ........................................................................................... 4 Front Panel ........................................................................................... 5 Rear Panel ..............[...]

3 Package Content s Internet Explorer V ersion 6.0 or Netscape Navigator V ersion 6.0 and Above Computers with Windows, Macintosh, or Linux-based operating systems with an installed Ethernet adapter System Requirement s for Configuration:   Content s of Package: D-Link DSA-3100 Hotspot Gateway CD-ROM (containing Manual and W arranty) Quick In[...]

4 Introduction The D-Link DSA-3100 Hotspot Gateway is a simple-to-use network access control system supporting Ethernet, Fast Ethernet or an IEEE 802.1 1 wireless LAN (WLAN) separately and simult aneously . The DSA-3100 can be configured with a standard HTML browser (i.e., Internet Explorer , Netscape Navigator) operating on Windows 98SE/Me/2000/XP[...]

5 The Power Indicator remains illuminated when the DSA-3100 is on. The indicators for W AN, Local Network, Authentication each have two LED indicators. When CA T5 (Ethernet) cables are plugged into the corresponding port, the upper LED will illuminate to indicate that a connection has been established. The lower LED will blink whenever data is tran[...]

6 Rear Panel Authentication Port (Public LAN or WLAN with Access Point) - Connects to a switch or AP . Local Area Network Port (Private LAN)- Connects to a switch for a private network. Does not require authentication to access the Internet. Console Port - For resetting to factory defaults, or reconfiguring the device. For Advanced users only! W AN[...]

7 Features  Creates two separate and discreet networks allowing the owner/ administrator to create a wired or wireless hotspot and provide Internet access to visitors, guests, or customers to your comp any or organization.  Manages up to 250 user accounts with internal database.  Supports at least 50 users accessing the Internet at any giv[...]

8 Sample Scenarios[...]

9 Sample Scenarios (continued) 3[...]

10 Inst allation  St andard 10/100Base-T network (UTP/Cat5 Ethernet) cable with RJ45 connectors.  TCP/IP network protocol must be inst alled on all networked computers and related devices. Requirement s[...]

11 Setting up the DSA-3100  Make sure the DSA-3100 unit is not connected to the power adapter and is powered OFF .  W AN port connection Use 10/100BaseT connections to connect the unmanaged network. The unmanaged network’s interface may be the ADSL router’s LAN port, cable modem’s LAN port or Intranet switch port.  Private LAN port c[...]

12  I f your PC uses the default Windows XP/2000/Me/98SE setting, no changes need to be made. Just start/rest art your PC.  If you are running Mac OS 9 or OS X, set your network settings to DHCP and select Apply .  DSA-3100 will act as a DHCP Server , automatically providing a suitable IP address (and related information) to each computer [...]

13 Internet Access Configuration T o configure your PCs to use the DSA-3100 for Internet access, follow this procedure. For Windows 9x/2000 Please select St art Menu - Control Panel - Internet Options . Select the Connection tab, and click the Setup button. Select “ I want to set up my Internet connection manually , or I want to connect through a[...]

14 Internet Access Configuration (continued) Select “I connect through a local area network (LAN) ” and click Next . Ensure all of the boxes on the local area network Internet configuration screen are unchecked . Check No , when promoted “ Do you want to set up an Internet mail account now? ” Click Finish to close the Internet Connection Wi[...]

15 Using the Configuration Utility T o configure the DSA-3100, use a computer which is connected to the local network port of the DSA-3100 with an Ethernet cable.    First, disable the Access the Internet using a proxy server function. T o disable this function, go to Control Panel > Internet Options > Connections > LAN Settings a[...]

16 The Home>User Manager screen will appear if you logged in as a manager . Please refer to the Quick Installation Guide for more informa- tion regarding the Setup Wizard. This screen will be explained in more detail in the following pages. Using the Configuration Utility (continued) Home > User Manager Home > Wizard The Home>Wizard scr[...]

17 Using the Configuration Utility (continued) Home > System DSA-3100 is the default system name. Y ou may wish to rename it to indicate your company , department, or the service you would like to provide. System Name: Admin Det ail: Y ou can edit the System Administrator ’s information here (e.g., name, phone number , and e-mail). If a user e[...]

18 Y ou may use NTP (Network T ime Protocol) or you may input the time yourself. T o use NTP please specify a timeserver’s domain name and select the time zone.The time zone of the DSA-3100’s internal clock is UTC ( C oordinated U niversal T ime, formerly known as GMT , Greenwich Mean T ime). T ime: Using the Configuration Utility (continued) H[...]

19 Using the Configuration Utility (continued) Home > W AN > St atic IP Address Enter the IP address provided to you by your ISP . IP address: Enter the subnetmask provided to you by your ISP . All devices on the network must share the same netmask. Subnet mask: Enter the IP address of the gateway , provided to you by your ISP . Default Gatew[...]

20 Using the Configuration Utility (continued) Home > W AN > Dynamic IP Address Select this option to obtain an IP address automatically from your ISP . Enter the user name and password that is assigned by your ISP . User Name & Password: Home > W AN > PPPoE These fields are optional. Maximum Idle Time & Dial on demand:[...]

21 Make this selection if you do not wish to use the built-in DHCP feature in the DSA-3100 The DSA-3100 allows the gateway to be set to one of three Authentication modes. Using the Configuration Utility (continued) Home > Authentication Select NA T ; N A T_IP_PNP or Router Mode: continued - Enter the IP address for the Authentication interface ([...]

22 Using the Configuration Utility (continued) Home > Authentication (continued) Enter the domain name. Domain Name: Select the length of time during which the DHCP assigned address will be in effect. Lease T ime: Enter the IP address of the alternate DNS server . Alternate DNS Server: Enter the IP address of the preferred DNS server . Preferred[...]

23 Home > Local Network NA T and Router are the two local network port modes. For an explanation of each field on this screen, please see the previous screen: Home > Athentication Nat mode: All outbound IP addresses on the local network port will be translated to the IP address of the W AN port to proceed. Router mode: All outbound IP address[...]

24 Using the Configuration Utility (continued) Home > User Manager Select Enable to define Logout TImer and Multiple Login : User Control: When enabled, on-line users who become inactive on the network af ter a specified period of time will be logged out automatically . The period can range from 1~1440. 10 minutes of time is the default value. L[...]

25 Using the Configuration Utility (continued) Home > User Manager > Guest Account s (continued) Guest Account List: Up to 10 guest accounts can be defined. T o activate a par- ticular Guest Account , simply enter the corresponding pass- word in the Password column and click Apply . Define network areas where Guest Account is disallowed acces[...]

26 Using the Configuration Utility (continued) Home > User Manager > MAC ACL Control When MAC address control is enabled, users connected to the Au- thentication Port can not login to the DSA-3100 unless they have reg- istered their MAC Address at MAC Address Control. In other words, only 40 users will be allowed to login when this function i[...]

27 Using the Configuration Utility (continued) Home > User Manager (continued) Friendly logout: If you enable Friendly logout, a pop-up window asking “Do you want to logout?” will appear after closing the login window . If you disable this function, no pop-up window will appear . Supports multiple user authentication methods including Local [...]

28 Using the Configuration Utility (continued) Home > User Manager > Management T ype > Local > Local Users List Add Users: Create new accounts, including Username (mandatory), Password (mandatory), and MAC (optional), and assign to a user group as shown above. Edit Account: Make changes to the account by clicking on the User Name as in[...]

29 Please note that there must be no space or other characters between the user ID, password and the MAC address. The MAC address could be omitted, but the trailing comma must be retained. A user ID should be between 1 to 32 characters and the password should be between 0 to 20 characters. S pecial characters are not allowed for user name and passw[...]

30 On-demand User: When you connect the DSA-3100P (the plug and play receipt printer) to the DSA-3100’s console port, you can create a dat abase of up to 2000 on-demand users. By default, the on-demand user database is empty . While you press the DSA-3100P’s button, the on-demand user will be created in the dat abase, a receipt will then be pri[...]

31 Using the Configuration Utility (continued) Home >User Manager >Management T ype >Local >On- demand User Configuration (continued) Field Description Store Name Account Range Receipt Header Receipt Footer Printer baud rate Account expires after __ days Session expire after __ minutes Logout timer WLAN ESSID WEP Key Price Y ou can spec[...]

32 Using the Configuration Utility (continued) Home > User Manager > Management T ype > Local > On- demand User Configuration (continued) Click User List in the previous screen and the screen above will appear showing a list of the on-demand users. Y ou can delete users in this window . User List Local > Local User Group Configuratio[...]

33 T o use POP3 as the authentication method, input the POP3 server IP address or domain name and its POP3 server port. The settings will t ake ef fect immediately af ter you click the Apply button. It is recommended that you restart the DSA-3100 after these changes if there are any online users. Home > User Manager > Management T ype > RA[...]

34 Using the Configuration Utility (continued) Select Enable to use the 802.1x feature. The DSA-3100 supports integrated single sign-on when using with 802.1x enabled access points. By using the integrated RA- DIUS proxy function in the DSA-3100, users can use the EAP methods such as EAP- MD5 or EAP-TLS to login and get the service depending on the[...]

35 Using the Configuration Utility (continued) Home > User Manager > Management T ype > RADIUS > 802.1x (continued) If you are using the 802.1x supplicant provided by Microsoft, the idle time out will be longer than the settings in RADIUS/AP and DSA- 3100. Except for the idle timer , there is no way for the user to logof f from 802.1x A[...]

36 Using the Configuration Utility (continued) Home > User Manager > Management T ype > LDAP LDAP: T o use LDAP as the authentication method, input the LDAP server IP address or domain name and its LDAP server port. The settings will t ake ef fect immediately after you click the Apply button. It is recommended that you restart the DSA-3100[...]

37 Up to 10 se t s of tra f fic redirection criteria could be defined through this interface. Clien t s who try to access a specific destination that matches one of the defined destinations will be forced to a matching redirection t arget. These settings will t ake e f fect immediately a f ter you click the Apply button. Using the Configuration Uti[...]

38 Using the Configuration Utility (continued) T o maint ain an adequate level of security , each client on the network can be managed. T o allow some devices to be unmanaged, input their IP addresses or MAC addresses in this interface. Up to 20 IP ad- dresses and 10 MAC ad- dresses can be assigned unmanaged access. MAC address format is XX:XX:XX:X[...]

39 Using the Configuration Utility (continued) Advanced > DMZ If you have multiple IP addresses available to assign to the DSA-3100’s W AN interface, you could define up to 10 pairs of Ethernet side (Private IP) and W AN side (Public IP) addresses. The W AN interface will bind the extra public IP addresses automatically . Advanced > Free Su[...]

40 Using the Configuration Utility (continued) Destination Network ID: Advanced > St atic Route Destination Subnet Mask: Gateway IP Address: Click Apply: Always click Apply to save the changes/additions. Note: For the static route to work, the next hop route must also have added a static route to forward all 192.168.100.0/24 IP packets to the DS[...]

41 Using the Configuration Utility (continued) Advanced > Firewall . Click the Filter Rule number to enter the firewall page for each filter . The chart on the following page explains each configurable item in detail. Edit the filter rule Filter rule is a set of fil- ters that determine whether traf fic will be allowed to pass be- tween the sour[...]

42 Using the Configuration Utility (continued) Advanced > Firewall (continued) Filter Description Name T o give a name to an IP Filter rule Check to en- able this rule Enable this rule if it is marked Action S pecifies the action to be t aken when packets match the rule Block: Packets matching the rule will be dropped immediately Pass: Packets m[...]

43 Using the Configuration Utility (continued) T ools > Monitor IP List T ools > Change Password DSA-3100 can monitor the IP address from anywhere; up to 20 IP addresses can be monitored. The system periodically sends out packets to check the status of the selected network nodes by pinging every 30 minutes. If the node cannot be reached, the [...]

44 Using the Configuration Utility (continued) T ools > Upload customer Key T o provide a custom key page in order to support a specific certificate, please click Browse to search for the file name for the customer key . Click Apply to upload it onto the DSA-3100. If you want to get back to the default customer Key page, simply click the Use Def[...]

45 Using the Configuration Utility (continued) T ools > Upload Login Page T o provide a custom user login page, please specify the file name to upload onto the DSA-3100. If you want to get back to the default user login page, simply click the Use Default Page button. If you want to display the Login page, simply click the Preview button The uplo[...]

46 Using the Configuration Utility (continued) T ools > Upload Logout Page T o provide a custom user logout page, please click Browse to specify the file name and upload it onto the DSA-3100 by clicking Apply . If you want to get back to the default user logout page, simply click the Use Default Page button. If you want to display the Logout pag[...]

47 Using the Configuration Utility (continued) T ools > Upload Login error Page Upload Login error Page: T o provide a custom user login error page, please specify the file name to upload it onto the DSA-3100. If you want to get back to the default user login page, simply click the Use Default Page button. If you want to display the Login error [...]

48 Using the Configuration Utility (continued) T ools > System Allows you to make a backup and restore the backup copy to the DSA- 3100. This function also enables you to restore the DSA-3100 back to the factory default settings. Create Backup Image: Make a backup Image file. Restore Setting From File: Browse the hard drive to restore the backup[...]

49 Using the Configuration Utility (continued) T ools > Restart Reboots the DSA-3100. It takes about 1 minute for the DSA-3100 to reboot. If you have to turn of f the power of the DSA-3100 for some time, please reboot it and remove the power after you hear a beep from it. Note: . On-line user sessions will be terminated when the system restart s[...]

50 Using the Configuration Utility (continued) St atus > Device Info (continued)[...]

51 Using the Configuration Utility (continued) St atus > Interface With this feature, you can get Interface management information about the W AN port , Authentication port , and Local Network port . For more detail see the following page:[...]

52 Using the Configuration Utility (continued) St atus > Interface (continued) Below is an example of the Interface described on the previous p age:[...]

53 Using the Configuration Utility (continued) St atus > T raffic History This feature gives you access to network access history collected by the DSA- 3100. T raf fic histories are organized by day . The DSA-3100 will store up to 3 days of history data in its volatile memory . If you have an e-mail address entered in the system configuration in[...]

54 Using the Configuration Utility (continued) This feature provides online instructions for operating the DSA-3100, you can click the hyperlink for a more detailed description. Help[...]

55 Using the Network Setup Wizard in Windows XP In this section you will learn how to establish a network at home or work, using Microsof t Windows XP . Note: Please refer to websites such as http://www .homenethelp.com and http://www .microsof t.com/windows2000 for information about networking computers using Windows 2000, ME or 98. Go to St art&g[...]

56 Please follow all the instructions in this window: Networking Basics (continued) Click Next In the following window , select the best description of your computer . If your computer connects to the internet through a gateway/router , select the second option as shown. Click Next[...]

57 Enter a Computer description and a Computer name (optional.) Networking Basics (continued) Click Next Enter a Workgroup name. All computers on your network should have the same Workgroup name. Click Next[...]

58 Please wait while the Network Setup Wizard applies the changes. Networking Basics (continued) When the changes are complete, Click Next . Please wait while the Network Setup Wizard configures the computer . This may take a few minutes.[...]

59 Networking Basics (continued) In the window below , select the option that fit s your needs. In this example, Create a Network Setup Disk has been selected. Y ou will run this disk on each of the computers on your network. Click Next . Insert a disk into the Floppy Disk Drive, in this case drive A. Click Next[...]

60 Networking Basics (continued) Please read the information under Here’ s how in the screen below . After you com- plete the Network Setup Wizard you will use the Network Setup Disk to run the Network Setup Wizard once on each of the computers on your network. Click Next.[...]

61 Networking Basics (continued) Please read the information on this screen, then click Finish to complete the Network Setup Wizard . The new settings will take ef fect when you restart the computer . Click Ye s to restart the computer . Y ou have completed configuring this computer . Next, you will need to run the Net- work Setup Disk on all the o[...]

62 T o name your computer In Windows XP , please follow these directions: Click St art (in the lower left corner of the screen) Right-click on My Computer Select Properties       Select the Computer Name T ab in the System Properties window . Y ou may enter a Com- puter Description if you wish; this field is optional. T o rename t[...]

63 Networking Basics (continued) Naming your Computer (continued)  In this window , enter the Computer name . Select Workgroup and enter the name of the Workgroup . All computers on your network must have the same Workgroup name. Click OK    Checking the IP Address in W indows XP The adapter-equipped computers in your network must be in[...]

64 Networking Basics (continued) Checking the IP Address in W indows XP (continued) This window will appear . Click the Support t ab Click Close   Assigning a S tatic IP Address in W indows XP/2000 Note: Residential Gateways/Broadband Routers will automatically assign IP Addresses to the computers on the network, using DHCP (Dynamic Host Conf[...]

65 Networking Basics (continued) Assigning a Static IP Address in W indows XP/2000 (continued)  Double-click on Network Connections   Double-click on Properties Right-click on Local Area Connections[...]

66 Input your IP Address and subnet mask. (The IP Addresses on your network must be within the same range. For example, if one computer has an IP Address of 192.168.0.2, the other computers should have IP Addresses that are sequential, like 192.168.0.3 and 192.168.0.4. The subnet mask must be the same for all the computers on the network.) Networki[...]

67 Networking Basics (continued) Checking the Wireless Connection by Pinging in W indows XP/2000 Checking the Wireless Connection by Pinging in W indows Me/98 Go to St art > Run > type cmd . A window similar to this one will appear . T ype ping xxx.xxx.xxx.xxx , where xxx is the IP Address of the Wireless Router or Access Point. A good wirele[...]

68 T echnical S pecifications 3 10/100Mbps Fast Ethernet port s for W AN connection, trusted LAN connection and untrusted LAN connection Manages up to 250 user account data with internal user account database Supports up to 50 on-line users ID/Password based authentication and authorization- Can be combined with MAC Address locking to provide stric[...]

69 T echnical S pecifications (continued) CPU NS GX-1 300MHz Memory SDRAM 32 MB Device Port s W AN port: 10/100Mbp s Fast Ethernet LAN port: 10/100Mbps Fast Ethernet connect s to workstations & servers that do not need authentication LAN port: 10/100Mbps Fast Ethernet connect s to workstations & devices that need authentication Console port[...]

Technical Support You can find software updates and user documentation on the D-Link Websites D-Link Provides technical support for customers within the UK. If yo u are out side o f the U K , pleas e conta ct your lo cal D- Li nk Of f ice for techni cal support Technical Support within UK D-Link Technical support over Telephone DI-ALL & DSL-ALL[...]