Инструкции для D-Link DSR-1000

Справочник Пользователя

Содержание

Chapter 1. Introduction
10
About this User Manual
11
Typographical Conventions
11
Chapter 2. Configuring Your Network: LAN Setup
13
LAN Configuration
13
2.1.1 LAN Configuration in an IPv6 Network
16
2.1.2 Configuring IPv6 Router Advertisements
19
VLAN Configuration
21
2.2.1 Associating VLANs to ports
22
Configurable Port: DMZ Setup
24
Universal Plug and Play (UPnP)
25
Captive Portal
27
Chapter 3. Connecting to the Internet: WAN Setup
28
Internet Setup Wizard
28
WAN Configuration
29
3.2.1 WAN Port IP address
30
3.2.2 WAN DNS Servers
30
3.2.3 DHCP WAN
30
3.2.4 PPPoE
31
3.2.5 Russia L2TP and PPTP WAN
34
3.2.6 WAN Configuration in an IPv6 Network
35
3.2.7 Checking WAN Status
37
Bandwidth Controls
38
Features with Multiple WAN Links
41
3.4.1 Auto Failover
41
3.4.2 Load Balancing
42
3.4.3 Protocol Bindings
43
Routing Configuration
44
3.5.1 Routing Mode
44
3.5.2 Dynamic Routing (RIP)
47
3.5.3 Static Routing
48
Configurable Port - WAN Option
49
WAN 3 (3G) Configuration
49
WAN Port Settings
51
Chapter 4. Wireless Access Point Setup
53
Wireless Settings Wizard
53
4.1.1 Wireless Network Setup Wizard
54
4.1.2 Add Wireless Device with WPS
54
4.1.3 Manual Wireless Network Setup
55
Wireless Profiles
55
4.2.1 WEP Security
56
4.2.2 WPA or WPA2 with PSK
57
4.2.3 RADIUS Authentication
58
Creating and Using Access Points
59
Primary benefits of Virtual APs:
61
Tuning Radio Specific Settings
62
Advanced Wireless Settings
63
Wi-Fi Protected Setup (WPS)
63
Chapter 5. Securing the Private Network
65
Firewall Rules
65
Defining Rule Schedules
66
Configuring Firewall Rules
67
5.3.1 Firewall Rule Configuration Examples
72
Security on Custom Services
76
ALG support
77
VPN Passthrough for Firewall
78
Application Rules
79
Web Content Filtering
80
5.8.1 Content Filtering
80
5.8.2 Approved URLs
81
5.8.3 Blocked Keywords
82
5.8.4 Export Web Filter
83
IP/MAC Binding
84
5.10 Intrusion Prevention (IPS)
85
5.11 Protecting from Internet Attacks
86
Chapter 6. IPsec / PPTP / L2TP VPN
88
VPN Wizard
90
Configuring IPsec Policies
92
6.2.1 Extended Authentication (XAUTH)
95
6.2.2 Internet over IPSec tunnel
95
Configuring VPN clients
96
PPTP / L2TP Tunnels
96
6.4.1 PPTP Tunnel Support
96
6.4.2 L2TP Tunnel Support
98
6.4.3 OpenVPN Support
99
Chapter 7. SSL VPN
101
Groups and Users
103
7.1.1 Users and Passwords
109
Using SSL VPN Policies
110
7.2.1 Using Network Resources
113
Application Port Forwarding
114
SSL VPN Client Configuration
116
User Portal
118
7.5.1 Creating Portal Layouts
119
Chapter 8. Advanced Configuration Tools
121
USB Device Setup
121
SMS service
122
Authentication Certificates
124
Advanced Switch Configuration
126
Chapter 9. Administration & Management
127
Configuration Access Control
127
9.1.1 Remote Management
127
9.1.2 CLI Access
128
SNMP Configuration
128
Configuring Time Zone and NTP
130
Log Configuration
131
9.4.1 Defining What to Log
131
9.4.2 Sending Logs to E-mail or Syslog
135
9.4.3 Event Log Viewer in GUI
137
Backing up and Restoring Configuration Settings
138
Upgrading Router Firmware
139
Dynamic DNS Setup
140
Using Diagnostic Tools
141
9.8.1 Ping
142
9.8.2 Trace Route
142
9.8.3 DNS Lookup
143
9.8.4 Router Options
143
Chapter 10. Router Status and Statistics
144
10.1 System Overview
144
10.1.1 Device Status
144
10.1.2 Resource Utilization
146
10.2 Traffic Statistics
149
10.2.1 Wired Port Statistics
149
10.2.2 Wireless Statistics
150
10.3 Active Connections
151
10.3.1 Sessions through the Router
151
10.3.2 Wireless Clients
153
10.3.3 LAN Clients
153
10.3.4 Active VPN Tunnels
154
Chapter 11. Trouble Shooting
156
11.1 Internet connection
156
11.2 Date and time
158
11.3 Pinging to Test LAN Connectivity
158
11.3.1 Testing the LAN path from your PC to your router
158
11.3.2 Testing the LAN path from your PC to a remote device
159
11.4 Restoring factory-default configuration settings
160
Chapter 12. Credits
161
Appendix A. Glossary
162
Appendix B. Factory Default Settings
165
Appendix C. Standard Services Available for Port Forwarding & Firewall Configuration
166
Appendix D. Log Output Reference
167
Appendix E. RJ-45 Pin-outs
221
Appendix F. Product Statement
222
Figure 1: Setup page for LAN TCP/IP settings
15
Figure 2: IPv6 LAN and DHCPv6 configuration
17
Figure 3: Configuring the Router Advertisement Daemon
20
Figure 4: IPv6 Advertisement Prefix settings
21
Figure 5: Adding VLAN memberships to the LAN
22
Figure 6: Port VLAN list
23
Figure 7: Configuring VLAN membership for a port
24
Figure 8: DMZ configuration
25
Figure 9: UPnP Configuration
26
Figure 10: Active Runtime sessions
27
Figure 11: Internet Connection Setup Wizard
28
Figure 12: Manual WAN configuration
31
Figure 13: PPPoE configuration for standard ISPs
32
Figure 14: WAN configuration for Japanese Multiple PPPoE (part 1)
33
Figure 15: WAN configuration for Multiple PPPoE (part 2)
34
Figure 16: Russia L2TP ISP configuration
35
Figure 17: IPv6 WAN Setup page
36
Figure 18: Connection Status information for both WAN ports
38
Figure 19: List of Configured Bandwidth Profiles
39
Figure 20: Bandwidth Profile Configuration page
40
Figure 21: Traffic Selector Configuration
41
Bindings have been defined
43
destination network
44
Dynamic routing (RIP)
46
Figure 25: Static route configuration fields
49
Figure 26: WAN3 configuration for 3G internet
51
Figure 27: Physical WAN port settings
52
Figure 28: Wireless Network Setup Wizards
54
Figure 29: List of Available Profiles shows the options available to secure the wireless link
56
Figure 30: Profile configuration to set network security
57
Figure 31: RADIUS server (External Authentication) configuration
59
Figure 32: Virtual AP configuration
60
radio, broadcasting its SSID
61
Figure 34: Radio card configuration options
62
Figure 35: Advanced Wireless communication settings
63
Figure 36: WPS configuration for an AP with WPA/WPA2 profile
64
Figure 37: List of Available Firewall Rules
66
Figure 38: List of Available Schedules to bind to a firewall rule
67
(209.156.200.225) to a private DMZ IP address (10.30.30.30)
70
action, schedules, and specify source/destination IP addresses as needed.
71
Figure 41: Schedule configuration for the above example.
75
Figure 42: List of user defined services.
77
Figure 43: Available ALG support on the router
78
Figure 44: Passthrough options for VPN tunnels
79
Figure 45: List of Available Application Rules showing 4 unique rules
80
from being downloaded
81
Figure 47: Two trusted domains added to the Approved URLs List
82
Figure 48: One keyword added to the block list
83
Figure 49: Export Approved URL list
84
logs will be captured
85
Figure 51: Intrusion Prevention features on the router
86
Figure 52: Protecting the router and LAN from internet attacks
87
to the Internet
88
IPsec gateway
89
Figure 55: VPN Wizard launch screen
90
Figure 56: IPsec policy configuration
93
Figure 57: IPsec policy configuration continued (Auto policy via IKE)
94
Figure 58: IPsec policy configuration continued (Auto / Manual Phase 2)
95
Figure 59: PPTP tunnel configuration – PPTP Client
97
Figure 60: PPTP VPN connection status
97
Figure 61: PPTP tunnel configuration – PPTP Server
98
Figure 62: L2TP tunnel configuration – L2TP Server
99
Figure 63: OpenVPN configuration
100
Figure 64: Example of clientless SSL VPN connections to the DSR
102
Figure 65: List of groups
103
Figure 66: User group configuration
104
Figure 67: SSLVPN Settings
105
Figure 68: Group login policies options
106
Figure 69: Browser policies options
107
Figure 70: IP policies options
108
Figure 71: Available Users with login status and associated Group
109
Figure 72: User configuration options
110
Figure 73: List of SSL VPN polices (Global filter)
111
Figure 74: SSL VPN policy configuration
112
Figure 75: List of configured resources, which are available to assign to SSL VPN policies
114
Figure 76: List of Available Applications for SSL Port Forwarding
116
Figure 77: SSL VPN client adapter and access configuration
117
Figure 78: Configured client routes only apply in split tunnel mode
118
an authentication domain
119
Figure 80: SSL VPN Portal configuration
120
Figure 81: USB Device Detection
122
Figure 82: SMS Service – Send SMS
123
Figure 83: SMS Service – Receive SMS
124
Figure 84: Certificate summary for IPsec and HTTPS management
125
Figure 85: Advanced Switch Settings
126
Figure 86: User Login policy configuration
127
Figure 87: Remote Management from the WAN
128
Figure 88: SNMP Users, Traps, and Access Control
129
Figure 89: SNMP system information for this router
130
Figure 90: Date, Time, and NTP server setup
131
Figure 91: Facility settings for Logging
133
Figure 92: Log configuration options for traffic through router
135
Figure 93: E-mail configuration as a Remote Logging option
136
Figure 94: Syslog server configuration for Remote Logging (continued)
137
Figure 95: VPN logs displayed in GUI event viewer
138
overwritten and a reboot
139
Figure 97: Firmware version information and upgrade option
140
Figure 98: Dynamic DNS configuration
141
Figure 99: Router diagnostics tools available in the GUI
142
Figure 100: Sample trace route output
143
Figure 101: Device Status display
145
Figure 102: Device Status display (continued)
146
Figure 103: Resource Utilization statistics
147
Figure 104: Resource Utilization data (continued)
148
Figure 105: Resource Utilization data (continued)
149
Figure 106: Physical port statistics
150
Figure 107: AP specific statistics
151
Figure 108: List of current Active Firewall Sessions
152
Figure 109: List of connected 802.11 clients per AP
153
Figure 110: List of LAN hosts
154
Figure 111: List of current Active VPN Sessions
155

Размер:

4,0 МБ
Страницы:

233
Язык:

English

Просмотреть