Home

D-Link AirSpot DSA-3200 (F56772) Firewall

1. Subnet mask Defaulk gateway Alternate ONS server Advanced conce 99 DSA 3200 Wireless Service Gateway User Manual 6 3 Configure TCP IP in Windows XP 1 Select Start Console Network Connection Control Panel File Edit Q to Help K L Search T Folders ER view Favorites Tools Address Control Panel amp S Accessibility Add Hardware Options KR Ly Display Folder Options Vg Control Panel x Switch to Category View See Also Windows Update O Help and Support e Keyboard Mouse b e Printers and Regional and Faxes Language Sy Y Speech System Scanners and Na Go A x Date and Time E Internet Options Power Options O Sounds and Audio Devices Taskbar and User Accounts YMware Tools Administrative Tools Game Controllers Network Connections Scheduled Cameras Tasks 2 Click the right button of the mouse on the Local Area Connection icon to select Properties Network Connections File Edit View Favorites Tools Advanced Help Qt d KU pO search Folders HDL Address a Network Connections LAN or High Speed Internet Network Tasks ocal rea Connection Create a new connection nabled Set up a home or small office network wt Disable this network device a Repair this connection S Rename this connection View status of this connection Change set
2. 4 3 11 Restart This function allows you to safely restart the DSA 3200 The restart procedure takes approximately three minutes If you need to remove power from the DSA 3200 it is recommended to restart the DSA 3200 through this interface and remove power after the status light is solidly lit Do you want to restart DSA 32007 Caution All online users connected to the system will be disconnected during the system restart 4 4 Status The Status Section provides system information concerning device configuration and user activity usage statistics The following configuration pages are explained in detail in the following sections Device Info Interface Current Users Traffic History and Notify 72 DSA 3200 Wireless Service Gateway User Manual 4 4 1 Device Info This section provides information regarding the current running version of code in addition to management and essential systems configurations System Status Current Firmware version 0 0261 System Mame dsa 3200 com sorry The service is temporarily Admin Info l unavailable succeed Page http ian dlink cam External Syslog Server MJA N A Proxy Server Disabled Internet Connection Status Disabled Remote Manage IP 0 0 0 00 0 0 0 Manage SNMP Disabled Retain Days 3 Days History Email To NIZ External Time Server tock usna nawy mil Time Date TimeftshiT 0 00 Wed 01 Dec 2004 09 30 41 0800 User ldle Logout Timer 10 Minis Primary
3. Source Destination End Port End Port of Source Destination R Login Schedule Profiles Edit User login schedules may be configured to allow disallow access during the specified periods of time Times corresponding to checkboxes will be enabled unchecked boxes indicate a disable or blocked status Login Schedule Profile Select Profile 1 Schedule 1 Profile Name Schedule 1 Enable Disable HOWR SUM MON TUE WED THU FRI SAT 0 Iw I ra z I Iv lv 1 Iw Z e Iw Iw Iv Iv 2 I 4 Z w 4 w w 3 Iw Iw M Iw Iw Iv Iv 4 I 4 Z w I Iv Iv 5 Iw Iw M Iw 4 Iv Iv 4 2 3 Black List Configuration The DSA 3200 provides a black list function to block specified users from accessing Network resources Administrator can add to delete from or edit a specific black list Each blacklist may have at most 40 users Users in the blacklist will be denied access upon authentication attempt 47 DSA 3200 Wireless Service Gateway User Manual Black List Configuration Select Black List 1 Blacklist 1 Name Blacklist 1 User Remark Delete Add User to List Click Add User to List to access the Add Users to Blacklist Menu Add Users to Blacklist VO sername Remark 10 PO PO Enter the username you wish to block and a remark click Apply To return to the Black List Configuration click Prev 48 DSA 3200 Wireless Service Gateway User Manual Black List Configuration select Blac
4. 0 x Edit View Favorites Tools Help Back mp ty ZA Search La Folders A History I UZ a eD Ee Ea DateTime Display Folder Options a Panel Ps S i Game Internet Keyboard Network and Dial up Controllers Options Connections Connects to other computers cae 1 E networks and the Internet e eN Windows Update EE Phone and Power Options windows 2000 Support _ Dial up Connections En Regional Scanners and Scheduled Sounds and Options Cameras Tasks Multimedia System Users and VMware Tools Connects to other computers networks and the Internet My Computer 2 Click the right button of the mouse on Local Area Connection icon to select Kk H Properties Ax l x File Edit View Favorites Tools Advanced Help Back E Search Gyrolders Ghistory Ws GE X A Ed Address Network and Dial up Connections bd Go Make New Local Ares Network and Dial Connection Emune up Connections Disable Status Local Area Connection ata Shar Type LAN Connection Delete Rename Status Enabled AMD PCNET Family PCI Ethernet Adapter g Displays the properties of the selected connection 96 DSA 3200 Wireless Service Gateway User Manual 3 Select Internet Protocol TCP IP and then click Properties Local Area Connection Properties i _ xj General Connect using BA AMD PCNET Family PCI Ethernet Adapter Components
5. 29 DSA 3200 Wireless Service Gateway User Manual Related Setup for DHCP Server of Private LAN The DHCP Server is optional and may be disabled or enabled at any time Disable DHCP Server The DSA 3200 will not dynamically configure DHCP clients on the Public Wireless LAN Disable DHCP Serer DHCP Server Enable DHCP Server Configuration R Enable DHCP Server The DSA 3200 will dynamically configure DHCP clients on the Private LAN The appropriate information is needed for the DHCP server to function properly To configure enter DHCP Scope Start IP Address End IP Address Primary DNS Server Secondary DNS Server Domain Name WINS Server Lease Time and Reserved IP Address List CO Disable DHCP Server Enable DHCP Server DHCP Scope Start IP Address f92 168 1 100 End IP Address 192 168 1 199 PR SEREI Primary DNS Server 192 152 61 1 Configuration Secondary ONS Server Domain Mame dlink com WINS Server Lease Time E Day Reserved IP Address List 30 DSA 3200 Wireless Service Gateway User Manual As an option the DSA 3200 provides a Reserved IP Address List for DHCP clients This allows the reservation of specified DHCP Scope IP addresses for specified MAC addresses Click the Reserved IP Address List hyperlink to configure Reserved IP Address List Private LAN ltern Reserved IP Address WAC Description Total 40 First Previous Mext Last The Reserved IP Address List provides 40 entri
6. Accounting Server IP Enter the appropriate IP Address or Fully Qualified Domain Name of the Authentication server to be used to authenticate potential users Accounting Port The TCP Port that will be used to communicate accounting information to the Accounting server Secret Key Accounting Server This shared secret should be configured on both the Accounting server and Accounting client DSA 3200 Assign to Group Users that are authenticated through 802 1x will be assigned the permissions of the selected group Caution Layer 2 authentication mechanisms override any Layer 3 local user or RADIUS mechanisms already configured making them null and void W WPA w 802 1x Also known as WPA EAP this is a wireless extension of 802 1x Port Based Authentication Policies Configuration O Disable 8021x WPA w80218 WPA PSK Authentication Server 0 1 1 1 li IF hera Default 1812 Authentication Port Secret Key Accounting Service Layer 2 once Accounting Server IP Accounting Port Secret Key Assign to Group Group Re key Time 42 Enabled ite s13 Default 1813 2 Group 2 100 sec 0 6000 Group Re key Time Time interval for re keying broadcast multicast keys in seconds DSA 3200 Wireless Service Gateway User Manual B WPA PSK Supports WPA Personal only requiring users to provide a PSK Policies Configuration O Disable 80214x WPAwS02 1
7. phone number for your ISH For a broadband account you won t need a phone number O Use the CD got from an ISP 94 D 6 SA 3200 Wireless Service Gateway User Manual Choose Connect using a broadband connection that is always on and then click Next New Connection Wizard Internet Connection How do you want to connect to the Internet O Connect using a dial up modem This type of connection uses a modem and a regular or ISON phone line O Connect using a broadband connection that requires a user name and password This i a high speed connection using aie a DSL or cable modem Your ISP may refer to this tupe nas Is ee Salas E He require you bo sign in p Cancel Click Finish to exit the Connection Wizard Now you have completed the setup New Connection Wizard Completing the New Connection Wizard our broadband connection should already be configured and ready to use IF your connection i not working properly click the following link Learn more about broadband connections To close this wizard click Finish 95 DSA 3200 Wireless Service Gateway User Manual If the version of Windows operating system is not for servers the default TCP IP settings will treat the PC as the DHCP client You can check the TCP IP setup according to the following procedure 6 2 Configure TCP IP in Windows 2000 1 Select Start Console Network and Dial up Connections
8. Address List hyperlink to configure Reserved IP Address List Wireless tem Reserved IP Address WAC Description 1 ha2 168 2 101 00 0d 61 49 04 54 2 192 168 2106 00 00 88 57 63 1f DWL G520 The Reserved IP Address List provides 40 entries Enter the desired Reserved IP Address client MAC address and a short description optional for each reservation After the information is completely entered click Apply to complete the setup 28 DSA 3200 Wireless Service Gateway User Manual 4 1 6 Private LAN Configuration The DSA 3200 provides a private trusted network that is tied to the Private LAN ports on the rear of the device The Private LAN does not require user authentication prior to access The Private LAN may be configured to serve DHCP to DHCP enabled clients Private LAN Configuration IP Address 192 168 0 40 Private LAN Subnet Mask 255 255 255 0 Disable DHCP Server Enable DHCP Server DHCP Scope Start IP Address fi 92 166 0 100 End IF Address 192 168 0199 DHCP Serer Primary ONS Server fi92 152 81 1 Configuration secondary ONS Server Domain Mame dink corr WINS IP Address Lease Time f Day Reserved IP Address List IP Address Enter the desired IP address for the Private LAN Interface This will be the default gateway for the Private Network Subnet Mask Enter your desired Subnet Mask to determine the size of the Network the Interface may communicate with
9. ISP most Cable Internet connections are dynamic WAN Port Configuration Static IP Address WAT Fort Dynamic IP Address Renew PPPoE Client Renew Click to refresh the IP address setting in order to obtain a different IP address PPPoE Use this configuration in situations where WAN connectivity is enabled through a PPPoE connection Account Username and Password are required to successfully connect Please verify user credentials for correctness if you are having difficulty connecting to your ISP WAN Port Configuration Static IP Address O Dynamic IP Address S PPPoE Client WAN Port Lisername Password Dial on demand Enable Disable Wasimurm Idle Time o Minutes Dial on Demand When the Dial on Demand function is enabled under PPPoE the system will automatically disconnect the session after an idle time has been reached equal to the value specified here This feature is intended for subscription plans that charge per unit time as opposed to charging for upstream and downstream connection speeds 18 DSA 3200 Wireless Service Gateway User Manual 4 1 4 Public LAN Configuration The DSA 3200 provides a public access network that is tied to the Public LAN ports on the rear of the device The Public LAN can be configured to authenticate users as well as serve DHCP to DHCP enabled clients Public Port Configuration IP PNP Enable Disable User Authentication S Enab
10. LAN Interface You may exit the wizard at any time without altering your previous configuration To enable the configurations made in the wizard follow the wizard step by step to the end and restart the DSA 3200 Keep in mind that after the Wizard is completed User Authentication and other Advanced features will need to be configured manually inthe appropriate section of this Web UI 14 DSA 3200 Wireless Service Gateway User Manual 4 1 2 System The System Information page allows configuration of items related to system management maintenance Any changes on this page will also require an entry for System Name as well as Succeed Page before they can be applied System Information System Mame dsa 3200 com a ime The service is temporarily unavailable Admin Detail ES t I appear when Internet connection fail Succeed Page http fan dlink cor u Remote Manage IP ex 192 168 3 1 or 192 166 3 0 24 SNMP CO Enable Disable DoS protection for user Liser Logon SSL Enable Disbale Device Time 2004 71 29 17 23 42 Enable NTF MTP ftock usno navy mil Tex tock usno n awe mil l Server System Time Time fone GMT 08 00 Pacific Time US Canada Tijuana Set Device Date and Time System Name The Host Name of the DSA 3200 the default value is DSA 3200 This field will be used to identify the device through SNMP Admin Detail The text in this box will be displayed when the WAN connectio
11. Point automatically select the fastest possible data rate with an Auto Fallback feature Auto Fallback will negotiate the best possible connection speed between the Access Point and a wireless client CTS Protection Mode The default setting is Disabled When set to Auto a protection mechanism will ensure that your Wireless B devices will connect to the Access Point when Wireless G devices are present Keep in mind that the performance of your Wireless G Network may decrease as a whole to accommodate the slower legacy client Basic Rates The default value is Default Depending on the wireless mode you have selected a basic set of supported data rates will be selected The default setting will ensure maximum compatibility with all devices You may also choose to enable all data rates by selecting ALL For compatibility with former Wireless B devices select 1 2Mbps Beacon Interval This value indicates the frequency interval of the 802 11 Beacon Frame The default value is 100 milliseconds You may enter a value between 20 and 1000 milliseconds A beacon is a packet broadcast by the Access Point to synchronize the wireless network 25 DSA 3200 Wireless Service Gateway User Manual RTS Threshold This value should remain at its default setting of 2346 Should you encounter inconsistent data flow only minor reductions are recommended Fragmentation Threshold This value specifies the maximum size for a packet before data is fragmen
12. Prev Next Last Note To allow PCs the ability to access WAN resources through the Public Interface without authenticating when User Authentication is enabled specify the IP address for Statically configured PCs or the MAC address for DHCP clients IP and MAC authentication are separate only one or the other is required to authenticate 63 DSA 3200 Wireless Service Gateway User Manual 4 3 4 Monitor IP List The system will use ICMP messages on a customized interval 1 2 4 6 12 hours and 1 day to monitor and control the status of IP addresses on the list If the monitored IP address does not exist or does not respond the system will send out an e mail to the Administrator once every 30 minutes such as 1 00 1 30 2 00 2 30 and 3 00 until the problem is fixed Admin Email send Frorn send To Interval SMTP Server Auth Method Account Mame Password Send From The email address of the party responsible for monitoring IP addresses Send To The email address of the intended recipient of the Admin messages Interval The time interval time for dispatching of warning or instruction messages SMTP Server The IP address domain name of your ISP s SMTP server Auto Method 5 authentication methods are provided None PLAIN LOGIN CRAM MD5 and NTLMv1 Contact your ISP for further information Account Name Account name registered with the SMTP server Password Account password 64 DSA 3200 Wir
13. This user may now browse any webpage on the Internet 3 Login Success Microsoft Internet Explorer Hello Davidi Policy 1 Login Success Please close this window or click this button to thank you Logintime 2004 11 29 15 44 24 The following screen is the login successful page for an on demand user In this case there is an extra function Redeem that can be used to add credit from the current account to a new account if the remaining usage is considered to be insufficient 23 Login Success Microsoft Internet Explorer Hello MATT DSA 3200 Login Success Please close thus window or click thus button to thank you Login time 2004 11 29 15 47 57 Remaining Usage 3 Hour 59 Min 43 Sec 82 DSA 3200 Wireless Service Gateway User Manual Attention The maximum session time data transfer 1s 24305 days 2003Mbyte If the redeem amount exceeds this number the system will automatically reject the After a user has paid the redeem cost at the counter he she should get another username and password Key in this information in the appropriate window the system will merge the two accounts and put together the available usage Usemame O This window will show the remaining hours or data size for user s online access Day How Min Sec Mbps 83 DSA 3200 Wireless Service Gateway User Manual 5 Console Interface The DB 9 interface o
14. administrator for more information on their Authentication Methods Account Name Account name registered with the SMTP server Password Account password Interval The Interval column specifies the interval for sending history e mails If you choose one day then the history mail will be sent to you once a day SYSLog To Specify the IP address and Port default is 514 of the SYSLog server 19 DSA 3200 Wireless Service Gateway User Manual 4 5 Help The Help section provides on line instructions for operating the DSA 3200 Home Advanced Tools Welcome to administration system The administration systern allows you to set various networking parameters enable and customize network services manage user accounts and monitor user status Administration functions are separated into six categories Home Advanced Tools and Status Each of them is described briefly below Home This section relates to system configuration include Wizard system WAN Public Network Wireless and Private Network Advnaced This section contains user management options includes Authentication methods Group policy Black list On demand users profile Roaming and Additional setting for user login control Tools This section includes most of System Configuration Port and IP Redirect virtual Server Pass Through Monitor IP Free suding Area Proxy DONS Change Password system Firmware and Restart Status This part provides adm
15. and only enter the Destination port In this case all queries on the specified port will be redirected to the defined Translate IP Destination These settings will be effective immediately after you click Apply Port and IP Redirect Destination Translated to Destination tem Type IP Address Part IPF Address Port O TCP Wo Po C UDP O TCP 2f NEP Pp e e UDP O TCP 9 L a UDP C TCP U MOE PI UDP O TCP sO Pp E NP a UDP O TCP gp OOo E e a UDP TCP rE OO O yO e UDP O TCP sf O A Ie UDP C TCP gp EP NY UDP C of qf We ye ee UDP Total 40 First Prev Next Last 60 DSA 3200 Wireless Service Gateway User Manual 4 3 2 Virtual Server The Administrator may define at most 40 virtual server entries to allow computers on the WAN Network or beyond to access the specified LAN resources According to the different services provided the network service can be provided on a TCP or UDP port or both Applications that require both Protocols on the same port will require 2 entries These settings will be effective immediately after you click Apply Virtual Server External Service Local Server IP ltern Port mace Local Server Port Type Enable E ere e ere gt ere e gt ene STS ee ere e ere e ere e E ere e ere 1777111117 61 DSA 3200 Wireless Service Gateway User Manual 4 3 3 Pass Through R Pass Through IP Address List There may be situations whe
16. checked are used by this connection m Client for Microsoft N etaaork gt File and Printer Sharing for Microsoft Networks Install Uninstall Description Transmission Control Protocollnternet Protocol The default wide area network protocol that provides communication across diverse interconnected networks T Show icon in taskbar when connected OF Cancel Using DHCP If you want to use DHCP please select Obtain an IP Address Automatically which is also the default setting of Windows Reboot the PC to make sure an IP address is obtained from the DSA 3200 PE General You can get F settings assigned automatically if your network supports this capability Othenwise you need to ask pour network administrator for the appropriate IP settings IP address Subnet mask Default gateway Obtain OMS server address automatically C Use the following DNS server addresses Pretered DHS server Advanced a Alternate DAS server 97 DSA 3200 Wireless Service Gateway User Manual Using Static IP Address If you have completed the setup for your PC please inform the network administrator before modifying the following setup 1 Click Advanced in the window of Internet Protocol TCP IP General You can get IF settings assigned automatically if your network supports this capability Otherwise you need to ask pour network admi
17. filename and path or Browse to the appropriate location on the local HDD Reset to Factory Default Restore to the factory default settings of the DSA 3200 70 DSA 3200 Wireless Service Gateway User Manual 4 3 10 Firmware Upgrade One may upgrade the DSA 3200 firmware with any later version code obtained from D Link Systems Inc Support Site DSA 3200 Support Page Firmware Upgrade Current version 0 0261 File Marne Browse Warning Firmware upgrade may cause user data loss Please refer to the version description or release notes to see if there is any limitation before upgrading your firmware Click Browse to browse the local HDD for the appropriate firmware file Upon locating the appropriate firmware image file click Submit and the browser will upload the firmware file to the DSA 3200 Once the upload procedure has begun do not disconnect power or attempt to access the DSA 3200 through another interface Doing so might interrupt the upgrade process rendering the flash image useless You must restart the system before the upgrade firmware is effective If you have modified any device settings remember to save the setting before restarting the system Warning Please restart the system through the management interface Do not turn off the system directly and then turn on the power again Doing so may damage the upgraded firmware 71 DSA 3200 Wireless Service Gateway User Manual
18. for user authentication authorization and management The user account information is stored in the local database or a specified external databases server The user authentication is processed via the SSL encrypted web interface This interface is compatible to most desktop devices and the palm computers 3 3 Begin Installation Please follow the Quick Installation Guide included with the DSA 3200 to physically connect the device to the appropriate networks The QIG also provides instructions to configure the Network interfaces of the DSA 3200 using the Setup 10 DSA 3200 Wireless Service Gateway User Manual Wizard Following completion of the Setup Wizard configurations pertaining to User Authentication mechanisms access privileges and system management will need to be made for a fully operational Hot Spot Once the Setup Wizard is complete the DSA 3200 will restart Depending on what configurations were made it may be necessary to login to the Web Ul again From a PC connected to the Private LAN interface open a Web browser and enter https 192 168 0 40 the default Private LAN IP into the address bar and hit enter The Administrator login page should load Enter the appropriate credentials default username is admin password is admin and click Enter D Link a DSA 3200 aAirspot Wireless G Public Private Gateway Administrator User Name Password Enter Clear DSA 3200 Wireless Service G
19. purchase price is refunded shall become the property of D Link upon replacement or refund 104 DSA 3200 Wireless Service Gateway User Manual Limited Software Warranty D Link warrants that the software portion of the product Software will substantially conform to D Link s then current functional specifications for the Software as set forth in the applicable documentation from the date of original retail purchase of the Software for a period of ninety 90 days Warranty Period provided that the Software is properly installed on approved hardware and operated as contemplated in its documentation D Link further warrants that during the Warranty Period the magnetic media on which D Link delivers the Software will be free of physical defects D Link s sole obligation shall be to replace the non conforming Software or defective media with software that substantially conforms to D Link s functional specifications for the Software or to refund at D Link s sole discretion Except as otherwise agreed by D Link in writing the replacement Software is provided only to the original licensee and is subject to the terms and conditions of the license granted by D Link for the Software Software will be warranted for the remainder of the original Warranty Period from the date or original retail purchase Ifa material non conformance is incapable of correction or if D Link determines in its sole discretion that it is not practical
20. your product online at _ http support dlink com register Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights D Link Building Networks for People 112
21. 3200 Wireless Service Gateway User Manual m POP3 Message The DSA 3200 provides a mechanism to alert users that have not signed in and are trying to access Mail resources The DSA 3200 will deliver an e mail to the user s inbox Customize the message to your liking Edit Mail Message lt IDOCTYPE HTML PUBLIC AWW3C DTD HTML 4 0 Transitional EN gt lt HTML lt HEAD gt lt META HTTP EQUIV Content Type CONTENT texthtmi charset us asci gt lt HEAD gt lt BODY gt DIV gt lt DIV gt lt FONT face Times New Roman size 6 gt lt 5 TRONG Welcome lt S TRONG gt lt FONT gt Text FONT size 4 gt lt 5TRONG gt lt STRONG gt FONT gt lt DIV gt DNS lt FONT size 4 gt lt STRONG To access the network please open up your browser and 4 3 Tools Menu Several functions are provided to control individual aspects of network transmissions including Port and IP Redirect Virtual Server Pass Through Monitor IP List Free Surfing Area Proxy DDNS Change Password System Firmware and Restart 59 DSA 3200 Wireless Service Gateway User Manual 4 3 1 Port and IP Redirect When a user attempts to connect to a destination defined in the Port and IP Redirect section the connection packet will be converted to the corresponding defined destination You may define at most 40 entries to achieve the redirect feature To convert queries on a specific port leave the Destination IP blank
22. 7 23 42 Enable NTP SUG ee Toc USA AS Fn x i erer VN Cex tock usno naww mil Time fone GMT 08 00Facific Times Canada Tijuana Me system Time Set Device Date and Time DSA 3200 Wireless Service Gateway User Manual Enable NTP Specify the IP address or domain name of an NTP server here Time Zone Select the appropriate Time Zone of your current location from the drop down selection box Universal Time is Greenwich Mean Time GMT Device Time 2004 11 29 17 23 42 Enable NTF System Time f Set Device Date and Time Year 2005 Month lor Day o Hour fog Minute 00 7 Second fog Set Device Date and Time Manually configure the DSA 3200 system time 4 1 3 WAN Configuration The DSA 3200 supports 3 WAN types Static IP Address Dynamic IP Address and PPPoE NW Static IP Address Manually specify the IP address of the WAN Port This information will come from your ISP IP address Subnet Mask Default Gateway and Primary DNS Server fields must be completed to apply the settings WAN Port Configuration Static IP Address IP address 67 130 140 148 subnet mask 255 255 2550 WAN Port Default gateway 671301401 f gt Primary ONS server 192152811 f secondary ONS server Dynamic IF Address PPPoE Client DSA 3200 Wireless Service Gateway User Manual Dynamic IP Address Use this configuration in situations in which a dynamic IP address is provided by the
23. DSA 3200 Wireless Service Gateway User Manual Airspot DSA 3200 Wireless G Public Private Gateway User Manual D Link Building Networks for People 2 18 2005 2005 D Link Systems Co Ltd DSA 3200 Wireless Service Gateway User Manual Table of Contents A A 4 1 1 Brief Introduction to the DSA 3200 sse eee 4 1 2 LST AO GOMSIG Surtido int oi E ed cateo cio 5 2d Audien E eiae O is 5 ze DOCUMENT CONVENTION TT 5 2 PKOGUCT DESCIDUON sss 6 2 1 PACKAGE CONS seminales iia 6 2 2 System Requirements a A 6 2 3 Panel Function Descriptions rai t 7 3 Managing the D Link DSA 2200 sss ssssssssssssseseseese nesne eee 9 3 1 E Tl Te Rn a a a A Na 9 3 2 SA A a 9 3 3 BSOINM MIST AM AMON ai id 10 4 Web Management Interface ccoonnccnncicnncccnnccocnccnnacnnnannonannonannnnas 12 4 1 POME oo O A asia 13 A o TET 14 Bie OV SLOW ls oe PEO a terete Ol nee TTE 15 Adiga WAN Configura A a 17 41 4 Public LAN COMU lOs riot 19 4 1 5 Public WLAN Configuration sss ss sse eee eee eee 22 4 1 6 Private LAN Configuration sese eee eee 29 4 2 Advanced Mens arabes ele eee 32 42 1 Authentication s e e 1 aida 32 42 2 Group COMMGUPATION at tena a eaaa ane ATA 44 423 Blacklist GOMIGUIANOMNs T 47 4 2 4 On demand User ConfiguratiON ooocccccccccccoconncnnnnccnononanncnnnononenanennnns 49 2005 D Link Systems Co Ltd DSA 3200 Wireless Service Gateway User Manual 4 20 Roaming GOMMOULALIOM DT 53 4 2 6 Add
24. Edit User Username Angela Password passwd MAC Group Groupi y Remark Edit Account Click the desired username that you want to modify from the User List to enter the User Account Interface and then key in your desired information such as username and password compulsory MAC and Remark optional Then click Apply to complete the modification Note The format of each line ts ID Password MAC Group Remark without the quotes There must be no space between the fields and commas The MAC field could be omitted but the trailing comma must be retained When adding user accounts by Uploading a file existing accounts inthe embedded database that are also defined in the data file will be replaced by the new ones Upload User Account Upload User Click Upload User to enter the Upload User Accounts interface Click the browser button to select the text file for the user account Then click Submit to complete the upload The format of the uploading file is text file and Each line represents a User Account Format gt Username Password MAC Group Remark each parameter is separated by a comma and no space is allowed between MAC Group and Remark but the comma is still needed The Group parameter should be 0 1 or 2 0 means None 1 means Group1 and 2 means Group2 Group 1 and Group 2 is user defined in Advanced gt Group gt Group name When you uploading make sure that there
25. ONS Server 192 152 51 1 DNS secondary DNS Server AZ Login Disabled Friendly Logout Disabled 73 DSA 3200 Wireless Service Gateway User Manual o l ase Current Firmware Version The firmware version currently used by DSA 3200 System Name System name and the default is DSA 3200 Administrator s related information will be shown on the login screen when a user has a connection problem Succeed Page The starting web page after a user logs on successfully External SYSLog Server P address and port number of external SYSLog Server Proxy Server enabled or disabled l When the WAN connection is abnormal Internet Internet Connection Connection Detection all on line users that open a Status new browser will see Internet Connection Failure Info Remote bang May be a specific IP address or IP Network enabled to ae manage the DSA 3200 through the WAN port SNMP Enable or disable SNMP management function Retain Days Max Number of days the user History will be stored History EmailTo To EmailTo Send the history to this email address External Time The DSA 3200 uses NTP to obtain the latest and most Time Server accurate time reading available DateTime Time DateTime The system time is local time User Idle Logout Timer Max number of minutes a user can be idle before logout EE Primary DNS Primary DNS Server IP Address Secondary DNS DNS Secondary DNS Server IP Address User must click Login t
26. Service Disabled Authentication Method LHSP Assign to Group 1 Group1 802 1X Authentication Select to enable 802 1x as needed The Switch or AP TT connected to the DSA 3200 must also support 802 1x protocol for this feature to work properly 39 DSA 3200 Wireless Service Gateway User Manual Trans Full Name Select whether or not the DSA 3200 will transfer the entire username or a partial username to the RADIUS server for authentication Enable ID and postfix will transfer to RADIUS server for authentication Disable Only ID will transfer to RADIUS server for authentication Server IP Enter the appropriate IP Address or Fully Qualified Domain Name of the RADIUS server to be used to authenticate user accounts Authentication Port The TCP Port that will be used to authenticate users through the RADIUS server Accounting Port The TCP Port that will be used to communicate accounting information to the RADIUS server Secret Key This shared secret should be configured on both the RADIUS server and RADIUS client DSA 3200 The shared secret assures only the RADIUS server and client can decipher each message Accounting Service Enabling this feature tells the DSA 3200 to report account usage statistics to the RADIUS server for each authenticated user that is connected to the DSA 3200 Authentication Method Choose between CHAP or PAP as the authentication protocol between the RADIUS Server and Client In g
27. UCT RELATING TO WARRANTY SERVICE OR ARISING OUT OF ANY BREACH OF THIS LIMITED WARRANTY EVEN IF D LINK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES THE SOLE REMEDY FORA BREACH OF THE FOREGOING LIMITED WARRANTY IS REPAIR REPLACEMENT OR REFUND OF THE DEFECTIVE OR NON CONFORMING PRODUCT THE MAXIMUM LIABILITY OF D LINK UNDER THIS WARRANTY IS LIMITED TO THE PURCHASE PRICE OF THE PRODUCT COVERED BY THE WARRANTY THE FOREGOING EXPRESS WRITTEN WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ANY OTHER WARRANTIES OR REMEDIES EXPRESS IMPLIED OR STATUTORY Governing Law This Limited Warranty shall be governed by the laws of the State of California Some states do not allow exclusion or limitation of incidental or consequential damages or limitations on how long an implied warranty lasts so the foregoing limitations and exclusions may not apply This limited warranty provides specific legal rights and the product owner may also have other rights which vary from state to state Trademarks D Link is a registered trademark of D Link Systems Inc Other trademarks or registered trademarks are the property of their respective manufacturers or owners Copyright Statement No part of this publication or documentation accompanying this Product may be reproduced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permission from D Link Corporation D Link Systems Inc as stipula
28. WAN LED Private LAN LEDs Solid glow when A valid Ethernet Link will A valid Ethernet Link the DSA 3200 is produce a solid glow The will produce a solid powered on LED will blink with activity glow The LEDs will blink with activity Status LED Public WLAN LED Public LAN LEDs Solid glow when Will flash to indicate A valid Ethernet Link device is ready Will proper RF operation will produce a solid flash during device and blink with activity glow The LEDs will restart or reconfigure blink with activity Power LED Will illuminate when the Power Supply is connected to the DSA 3200 and an appropriate AC power outlet 110VAC If the LED does not illuminate when the device is plugged in try a known good power outlet If the LED still does not light with a known good outlet please contact Technical Support for assistance Status LED A solid light indicates a functional ready state of operation This LED will blink during a device restart or reconfigure then illuminate solid to indicate proper operation If this LED continuously flashes or does not illuminate when the device is powered on please contact Technical Support for assistance Public WLAN LED This indicator will flash to indicate proper RF operation of the internal AP The LED will blink rapidly with activity WAN LED A solid light indicates a valid Ethernet Link to the WAN modem switch LEDs will blink to indicate WAN activity No light indicates a no link s
29. WPA PSK Group Re key Time 100 sec 0 6000 Layer 2 Authentication O Passphrase PSK Assign to Group 2 Group 2 PSK Pre Shared Key This key should be a random sequence of Hexadecimal characters upper or lowercase letters and numbers 64 Characters in length Pass phrase Alternatively the Administrator may choose a pass phrase that will be used to generate the Pre Shared Key making user configurations much more manageable Enter anywhere from 8 to 63 Alphanumeric characters including symbols and white space to be used by clients to join the network 43 DSA 3200 Wireless Service Gateway User Manual 4 2 2 Group Configuration The DSA 3200 provides the ability to configure 2 separate user groups enabling separate permissions to be assigned to the same user pool Each user group may be assigned a specific Firewall profile time schedule profile and or bandwidth maximum These permissions will apply to all users assigned to the corresponding group number Group Configuration Select Group 1 Groupt Group Name Group Select Group Profile Firewall Profile E Firewall 1 Edit Schedule Profile 1 coachedule 1 Edit Bandwidth Unlimited Group Name Friendly name to help identify the privileges of the associated user Firewall Profile A specific firewall profile may be assigned to a user group to allow differentiated access privileges between groups Click the Edit Hyperlink to manage the Firewal
30. Wireless interface will consist of IP and DHCP selections as well as SSID Channel Transmission Mode SSID Broadcast and Layer 2 Client Isolation Wireless Port Configuration SSI Airspot V Syne to Ticket Auto Channel Selection Enable Disable Wireless Channel E Configuration Transmission Mode Mixed SSID Broadcast Enable Disable Layer Client Isolation Enable Disable security Advance IP PNP Enable Disable User Authentication Enable Disable Wireless Port IP Address fi g2 168 2 40 Subnet Wask 255 255 255 0 Disable DHCP Server Enable DHCP Server DHCP Scope Start IP Address i92 168 2 100 End IP Address i92 168 2 199 e Primary DNS Sewer 192 152 81 1 Configuration Secondary ONS Server Domain Marne dlink com WINS Server Lease Time 1 Day Reserved IP Address List 22 DSA 3200 Wireless Service Gateway User Manual SSID The SSID is the unique name shared among all devices in a wireless network The SSID must be the same for all devices in the wireless network It is case sensitive and must not exceed 32 characters any keyboard character is allowed Sync to Ticket Checking this box will enter the SSID of the internal AP in the On Demand User receipt SSID field Auto Channel Selection The system will automatically select the appropriate channel based on relative noise and interference on available channels when enabled Channel Select the appropr
31. X or 13 ASCII WEP key Mode Choose the key format of preference either HEX 0 9 a f or ASCII any ASCII character The Advanced menu allows fine tuning of the RF characteristics for the internal AP In most cases the default settings offer the best performance Advance Authentication Type AUTO TIC Default Auto Transmission Rates Auto 7 Default Auto CTS Protection Mode Disable Default Disable Basic Rates Default Default Default Beacon Interval 100 Default 100 Milliseconds Range 20 1000 RTS Threshold 2346 Default 2346 Range 256 2346 Fragmentation 2346 noe Default 2346 Range 256 2346 DTIM Interval E Default 3 Range 1 255 24 DSA 3200 Wireless Service Gateway User Manual Authentication Type The default value of Auto allows the AP to auto detect for Shared Key or Open System Authentication types Shared Key requires both the AP and Client to share a common WEP key usually Key 1 before the Client can join the Network Open Key allows any Client to associate with the AP however if WEP is enabled the client will not be able to communicate unless the correct WEP Key is supplied Transmission Rates The default value of Auto allows data rates to range from 1 to 54Mbps The rate of data transmission should be set depending on the speed of your wireless network You can select from a range of transmission speeds or you can keep the default setting of Auto to have the Access
32. age the first time they try to surf the web after connecting to the Public LAN or WLAN Interface of the DSA 3200 Integrate an Existing User Password Database Often time organizations or businesses will already own and operate a specific credential database system to centralize and manage their user passwords and user DSA 3200 Wireless Service Gateway User Manual permissions on the Network One of the more prevalent Protocols used to authenticate users is the RADIUS Protocol With a built in RADIUS Client the DSA 3200 can support both Local and RADIUS authentication mechanisms simultaneously allowing one to easily incorporate an existing user password database into the Airspot Hot Spot System The DSA 3200 also provides a built in user database allowing dynamic account creation deletion to coexist with the more static RADIUS database 1 2 Things to Consider 1 2 1 Audience This manual is intended for system or network administrators possessing basic networking knowledge to complete step by step instructions in this manual in order to use the DSA 3200 to centralize Network access and management This manual attempts to explain in detail the wealth of functions the DSA 3200 supports however there may be situations and circumstances not considered during the authoring of this document Technical Support may only assist with the configuration of the DSA 3200 through the Web Ul or SSH and may not troubleshoot or repair ill configured exte
33. and password from a previous login The login page will be dismissed and the user will no longer need to enter a username and password to login The username and password for login will be saved for 12 hours Logout Following a successful login a small window will appear that shows the user s information and provides them with a logout button for ease of logout With friendly logout enabled a warning message will appear when the user attempts to close this window When disabled the window will close and users must manually logout by browsing to 1 1 1 1 Internet connection detection DSA 3200 detects if the Internet connection is 55 DSA 3200 Wireless Service Gateway User Manual functioning properly by accessing a predetermined URL or IP address URL or IP address this predetermined URL will be used as a target address for the DSA 3200 to check the Internet connection Upload File The internal Login and Logout pages as well as the SSL certificate may be replaced with user files R Upload Login page The Login page may be customized to suit any particular application The coding for this page should be HTML and include the code in the box below To upload enter the filename and path of the customized Login page in the appropriate field or browse and select the file To recover the factory default login interface click the Use Default Page button After the upload is complete click the Preview button at the bottom o
34. ateway User Manual 4 Web Management Interface This section gives a complete description of the Web Management Interface of the DSA 3200 on a page by page basis The following table shows all configuration pages where each column represents each of the Navigation Tabs and the configuration pages available in each section Authentication Port and IP Wizard Device Info Policies Redirect On demand a Public LAN Monitor IP List Traffic History User Web UI Free Surfing Wireless LAN Roaming Notify Configuration Area Page Private LAN Additional DDNS m System ee ee DSA 3200 Wireless Service Gateway User Manual 4 1 Home The Home Tab consists of System and Network Specific configurations All Interface information such as IP configuration DHCP Server configuration and per port Authentication features can be accessed through the Home Tab The Home section provides the following interface configuration pages to further set up your Airspot system Wizard System WAN Public Network Wireless and Private Network Please refer to each section for more information D Link Building Networks for People p DSA 3200 Airspot Wireless G Public Private Gateway Advanced __ Tools Hel Setup Wizard The D Link DSA 3200 Airspot Wireless G Public Private Gateway is an Ethernet Broadband Router with access control features ideal for Wi Fi hotspots as well as small to medium System business appl
35. ble in the form of 802 1x or WPA 32 DSA 3200 Wireless Service Gateway User Manual Default Policy Policy Marne Policy 1 Policies Configuration select Policy M1 Policy_1 Set as default M Policy_1 User authenticates as usermamecipolcynamej Policy Mame Policy Status Enable Disable Black List T Blacklist y Profile 1 Blacklist 1 f Local RADIUS Local Users List Assign ta Group 1 Group1 Layer 2 G Disable 8024x C WPAwB8021x WPA PSK Authentication Authentication Semer Default Policy This Authentication method will be used to authenticate all users that do not specify an authentication policy during login user policy1 Policy Name Friendly name used to identify the policy based on the Administrator s preference Policies Configuration Authentication Policy parameter configuration Select Policy The DSA 3200 provides 2 separate Authentication policies for flexibility Select the Authentication policy to be configured from the pull down menu Set as Default Check the Checkbox to assign the default Authentication policy accordingly This Authentication method will be used to authenticate all users that do not specify an authentication policy during login user policy1 33 DSA 3200 Wireless Service Gateway User Manual Policy Name Friendly name for the Authentication policy will also be used during user login aS a username postfix to differentiate the authenticati
36. by anyone other than D Link or an Authorized D Link Service Office will void this Warranty Disclaimer of Other Warranties EXCEPT FOR THE LIMITED WARRANTY SPECIFIED HEREIN THE PRODUCT IS PROVIDED AS IS WITHOUT ANY WARRANTY OF ANY KIND WHATSOEVER INCLUDING WITHOUT LIMITATION ANY WARRANTY OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT IF ANY IMPLIED WARRANTY CANNOT BE DISCLAIMED IN ANY TERRITORY WHERE A PRODUCT IS SOLD THE DURATION OF SUCH IMPLIED WARRANTY SHALL BE LIMITED TO NINETY 90 DAYS EXCEPT AS EXPRESSLY COVERED UNDER THE LIMITED WARRANTY PROVIDED HEREIN THE ENTIRE RISK AS TO THE QUALITY SELECTION AND PERFORMANCE OF THE PRODUCT IS WITH THE PURCHASER OF THE PRODUCT Limitation of Liability TO THE MAXIMUM EXTENT PERMITTED BY LAW D LINK IS NOT LIABLE UNDER ANY CONTRACT NEGLIGENCE STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT INCONVENIENCE OR DAMAGES OF ANY CHARACTER WHETHER DIRECT SPECIAL INCIDENTAL OR CONSEQUENTIAL INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOSS OF GOODWILL LOSS OF REVENUE OR PROFIT WORK STOPPAGE COMPUTER FAILURE OR MALFUNCTION FAILURE OF OTHER EQUIPMENT OR COMPUTER PROGRAMS TO WHICH D LINK S PRODUCT IS CONNECTED WITH LOSS OF INFORMATION OR DATA CONTAINED IN STORED ON OR INTEGRATED WITH ANY PRODUCT RETURNED TO D LINK FOR WARRANTY SERVICE RESULTING FROM THE USE 107 DSA 3200 Wireless Service Gateway User Manual OF THE PROD
37. dd ser Upload ser Download User Refresh search Group Username Password mac Del All Remark Group Dha AMOI O1 25 45 6 7 89 48 Delete Total diFirst Previous Mext Las User List The user list provides a complete view of existing user accounts as shown above The information displayed includes Username Password MAC not necessary Group ID and Administrative Remarks An Administrator may delete or search user information via this management interface One may also use the Delete All function to delete all local user accounts To edit the content of an individual user account click the Username hyperlink of the desired user account to enter the Edit User Interface Clicking the Refresh button will show the most updated data 35 DSA 3200 Wireless Service Gateway User Manual MAL tem Username Password EEEE TETA Group Remark EL E None mf d 0 None HN c FP Nome mf Po Pf Nome HAT PE None HI Ef Noe Af PE fe HU Po Pf Noe HAT of Pf Nome HT LO Of A oo Ee Add User Click Add Users on the User List to enter the Add User interface and key in the appropriate information such as username password required MAC and Remark not required Click on the Apply button to complete the addition Dser Todd has been added User Matt has been added User David has been added User Emily has been added 36 DSA 3200 Wireless Service Gateway User Manual
38. determine the permission of a transmission from the source address to the target address or examine whether there is a data loss Click the Index Number for rule specific configurations Edit Filter Rule Rule tem 1 Rule Name Enable this Rule Action Block Protocol ALL source MAC Address For Specific MAC Address Filter Interface IF Subnet hlask Stat Fot End Fort Source ALL 255 255 255 255 TETA Destination WAN 255 255 255 255 TATA Rule Name Friendly name given to identify the rule and its intended action Enable this Rule Such rule will be effective when selected Action The basic behavior of the rule If the rule parameters match this action will be taken Pass The packet passes successfully Block The packet is blocked and dropped Protocol Provides three common protocols TCP UDP and ICMP The All option will not discriminate based on packet protocol protocols other than 1 6 or 17 Source MAC MAC Address of the Transmission Source Leave blank to specify any Source Destination Interface Source Destination Interface includes 5 choices WAN Wireless LAN Public LAN Private LAN or ALL 46 DSA 3200 Wireless Service Gateway User Manual Source Destination IP Address IP address of Transmission Source Destination Source Destination Subnet Mask Subnet Mask of Source Destination Source Destination Start Port Start Port of Source Destination
39. eb proxy server if you active this function end users may specify the DSA 3200 as a proxy server no need to enter the IP address and Port External Proxy Server As a basis of the security management features of the DSA 3200 only ports 80 and 443 are allowed for redirection to login page In the case that a Proxy Server already exists in your network environment the Proxy Server IP address and Port of communication must be configured in the DSA 3200 for proper operation These settings will be effective immediately after you click Apply Internal Proxy Server Built in Proxy Server Enable Disable External Proxy Server ltem server IP Port ES 7 10 IS DSA 3200 Wireless Service Gateway User Manual 4 3 7 DDNS The DSA 3200 provides the ability to use a Dynamic DNS provider service to assign a host name to the WAN interface even in the event of a Dynamic WAN connection The DSA 3200 provides support for most popular Dynamic DNS Provider Systems allowing seamless translation of a dynamic WAN IP address to a domain name Dynamic DNS DONS Enable Disable Provider Dyn orgiDynamic oe DynDNS orgiDynamici E Host name DynDNs org Custom DynDNs org static Username E mail dhs oro myip us no ip cam J3 2 argiDynamic J3 2 arg static Foneeditcom Password Key DDNS Enable activates the Dynamic DNS Update service on the DSA 3200 DNS provider Select the appropriate p
40. eck service status The current execution status of each service on the DSA 3200 is checked 8 Set device into safe mode If administrator is unable to use Web Management Interface on the browser when the DSA 3200 unexpectedly fails Administrator can choose this utility and set DSA 3200 into safe mode to be able to manage this device with a web browser again using the WAN port 9 Synchronize clock with NTP server Immediately check and correct the clock through the NTP protocol by querying an NTP server Since the DSA 3200 does not support manual configuration for its internal clock the internal clock must be reset and maintained using NTP 10 Print the kernel ring buffer Display detailed information to be given to technical support during any unexpected unexplained occurrence Capture the output in a file or screen shot for ease of delivery to Technical Support 11 Main menu Return to main menu 86 DSA 3200 Wireless Service Gateway User Manual 5 3 Change admin password of Console In addition to supporting the console management interface through the COM interface using a null modem cable the DSA 3200 also supports remote access via SSH When using a null modem cable to connect to the DSA 3200 console one does not need to enter the administrator s password to enter the console management interface In the case where SSH is used to connect the DSA 3200 the default username is admin and the default password is als
41. ection remains idle longer than allowed Limits may be imposed on how long an account may be or the length of time a connection remains idle before it is terminated or even the maximum bandwidth available to the authenticated user The DSA 3200 manages all network data that passes through it Users under the managed network must authenticate in order to access any network resources User authentication is processed via the DSA 3200 Web server with or without SSL encrypted links When a user is prompted to login the DSA 3200 will check the user database to confirm the user s access rights In addition to the internal User database for local and On demand users the DSA 3200 may query any external RADIUS Server to authenticate and authorize user credentials If the user fails to successfully authenticate the DSA 3200 will refuse access and continue to prompt for user log in If the Administrator so chooses a list of URLs may be provided for free access to users that have not yet authenticated Once the user authenticates successfully the DSA 3200 will grant limited access based on the group membership of the user and redirect the web browser to the administrator defined URL The DSA 3200 can be configured to terminate user access if a user requests to log out or remains idle longer than the configured idle time Limits can be placed on user session length as well as maximum bandwidth available to specific user groups The system is responsible
42. eless Service Gateway User Manual Monitor IP list The list of IP addresses to be monitored IP Address tem IP Address Zo tem El fs ty i i i Click Monitor to view all monitored IP A maximum of 40 IP address for monitoring is allowed Monitor Show monitor IP status 65 DSA 3200 Wireless Service Gateway User Manual 4 3 5 Free Surfing Area This system allows users to login to certain websites before passing through the Public LAN You only need to enter the IP address or Domain Name of these websites into the Walled Garden List You can enter up to 20 addresses into this list This function lets you provide some free service to users For example you can provide a brief introduction of the local site and facilities and path guide on a website by listing the address of the website in the Walled Garden Even users having no network access rights can link to any website in the Walled Garden to browse the pages located in the specified domain This function can be used to provide users a free chance to experience the network service The customer may experience the actual network service without any preparation in advance These settings will be effective immediately after you click Apply Free Surting Area litem Address ltern Address vih JpaL_ sr Jps phk_ 66 DSA 3200 Wireless Service Gateway User Manual 4 3 6 Proxy Internal Proxy Server The DSA 3200 has a built in w
43. eneral CHAP is more secure Layer 2 Authentications B Disable All authentications will be performed at Layer 3 after the client has already joined the network Layer 2 Disable 8021x C WPAwB021x WPAPSK Authentication 40 DSA 3200 Wireless Service Gateway User Manual 802 1x Clients will be unable to join the network until they have been granted access via successful completion of the 802 1x authentication and accounting mechanism Policies Configuration Disable 902 1 Authentication Server IP Authentication Port secret Key Layer 2 Accounting Service Authentication Accounting Server IP Accounting Port secret Key Assign to Group O WPA witt 1x O WPA PSK 01 11 id fisi2 Default 1812 1234 gt Enabled 011 2 hera Detault 1913 1234 2 Group Z Authentication Server IP IP address or FQDN of the server performing User Authentication Services can consist of username password TLS etc Authentication Port The TCP Port that will be used to authenticate users through the Authentication server Secret Key Authentication Server This shared secret should be configured on both the Authentication server and Authenticator client DSA 3200 The shared secret assures only the Authentication server and client can decipher each message Accounting Service Click to enable the accounting service 41 DSA 3200 Wireless Service Gateway User Manual
44. ernet immediately select thie bos and then click Finish To close the wizard click Finish Black me JO Cancel Windows XP 1 Choose Start Control Panel Internet Option E Control Panel File Edit View Favorites Tools Help nf Back gt wa ya Search Wea Folders 53 gt Address va Control Panel A Accessibility Odd Hardware Administrative Date and Time Er switch to Category view Options e Tools AL iann K See Also 1 a a E Internet Display Folder Options to Windows Update Controllers Options Help and Support ey amp Keyboard Mouse Network Phone and Power Options Connections Modem gt el H Printers and Regional and Scanners and Scheduled Sounds and Faxes Language Cameras Tasks Audio Devices S pol System Taskbar and User Accounts Mware Tools pia 92 DSA 3200 Wireless Service Gateway User Manual 2 Choose the Connections icon and then click Setup Internet Properties General Security Privacy Content Connections Programe Advanced To set up an Internet connection click Setup Dial up and Virtual Private Network settings Add Remove Choose Settings if you need to configure a proxy S Sethings server for a connection Never dial a connection Dial whenever a network connection is not present Always dial my default connection Current Hone Set Default Local 4rea Network LAN sett
45. es Enter the desired Reserved IP Address client MAC address and a short description optional for each reservation After the information is completely entered click Apply to complete the setup 31 DSA 3200 Wireless Service Gateway User Manual 4 2 Advanced Menu The configuration pages presented in the Advanced Menu are intended to assist with setup of User Authentication and more specific Hot Spot features Options may be configured in any of the following Interface Pages Authentication Policies Group Black List On demand User Roaming and Additional Refer to each section below for more detailed information regarding functions and configurations 4 2 1 Authentication Policies The DSA 3200 provides a familiar D Link interface designed to enable easy and quick setup to get your Wi Fi Hot Spot up and operational The DSA 3200 provides 2 simultaneous user authentication policies to allow Hot Spot users to be authenticated through the Internal User Database or through an External RADIUS server at the same time An Administrator may adopt different Authentication methods according to each management setup Each management setup has at most 20 management rules to go with the group configuration so that the management on general users is diversified and flexible An Administrator may select the desired management set up via the pull down menu As an alternative to User based authentication Layer 2 Authentication is also possi
46. eway User Manual 3 Ifthe DNS Server field is blank please click Using the following DNS Server Addresses in the Internet Protocol TCP IP Window and key in the DNS address or DNS address provided by ISP After this procedure is completed click OK Internet Protocol TCP IP Properties General Altemate Configuration TOU can get IF settings assigned automatically if your network supports this capability Othermize you need to ask your network administrator hor the appropriate IP settings Obtain an IP address automatically O Use the following IP address Obtain ONS server address automatically fe Use the following ONS server addresses Preferred ONS server a Alternate DNS server aaa 103 DSA 3200 Wireless Service Gateway User Manual 7 Warranty Subject to the terms and conditions set forth herein D Link Systems Inc D Link provides this Limited warranty for its product only to the person or entity that originally purchased the product from D Link or its authorized reseller or distributor and Products purchased and delivered within the fifty states of the United States the District of Columbia U S Possessions or Protectorates U S Military Installations addresses with an APO or FPO Limited Warranty D Link warrants that the hardware portion of the D Link products described below will be free from material defects in workmanship and materials from the date of original retail purchase of
47. f this page to preview your user defined login page Upload Login Page File Name Browse submit se Detault Page The following HTML code must be included to provide a channel for the user to key in a username and a password lt form action userlogin shtml method post name Enter gt lt input type text name myusername gt lt input type password name mypassword gt lt input type submit name submit value Enter gt lt input type reset name clear value Clear gt lt form gt 96 DSA 3200 Wireless Service Gateway User Manual m Upload Logout Page The Login page may be customized to suit any particular application The coding for this page should be HTML and include the code in the box below To upload enter the filename and path of the customized Login page in the appropriate field or browse and select the file To recover the factory default login interface click the Use Default Page button After the upload is complete click the Preview button at the bottom of this page to preview your user defined login page Upload Logout Page File Name Browse submit Use Detault Page The following HTML code must be included to provide a channel for the user to key in a username and a password lt form action userlogout shtml method post name Enter gt lt input type text name myusername gt lt input type password name mypassword gt lt input t
48. f DSA 3200 provides two functions 1 The DSA 3200 provides a COM interface for the administrator to handle different problems and situations that may occur during operation To connect to the COM interface of the DSA 3200 use the included null modem cable The terminal simulation program that you use i e Hyperterminal should be configured as 9600 baud 8 data bits Parity None Stop Bits 1 Flow Control None The main console menu is a basic interface using interactive dialog boxes Please use the arrow keys on the keyboard to browse the menu and press the Enter key to select specific menus and confirm entered values 2 The DSA 3200 s COM port can alternatively be used as a printer interface to connect a thermal line ticket printer like the DSA 3100P Warning These two functions cannot be used at the same time 5 1 Main Menu of Console interface Once you properly connect to the serial port of the DSA 3200 the console welcome screen should appear automatically If the welcome screen fails to appear in the terminal simulation program automatically please try to press the Down arrow or Enter key to display the welcome screen If you are still unable to see the welcome screen or the main menu of the console please check the connection of the Null modem cable verify COM port settings and setup of the terminal simulation program D Link DS4 3200 Basic Configuration Please select functions Utilities for network debu
49. face This will be the default gateway for the Wireless Network 26 DSA 3200 Wireless Service Gateway User Manual Subnet Mask Enter your desired Subnet Mask to determine the size of the Network the Interface may communicate with Related Setup for DHCP Server of Public Wireless LAN The DHCP Server is optional and may be disabled or enabled at any time m Disable DHCP Server The DSA 3200 will not dynamically configure DHCP clients on the Public Wireless LAN Disable DHCP Server DHCP Server CO Enable DHCP Server Configuration E Enable DHCP Server The DSA 3200 will dynamically configure DHCP clients on the Public Wireless LAN The appropriate information is needed for the DHCP server to function properly To configure enter DHCP Scope Start IP Address End IP Address Primary DNS Server Secondary DNS Server Domain Name WINS Server Lease Time and Reserved IP Address List Disable DHCP Server Enable DHCP Server DHCP Scope Start IF Address 192 168 2100 End IP Address 192 168 2199 mee Sele Primary DNS Server 192 152 81 1 Configuration secondary DNS Server Domain Mame dink carr WINS Serer Lease Time E Day Reserved IP Address List 2 DSA 3200 Wireless Service Gateway User Manual As an option the DSA 3200 provides a Reserved IP Address List for DHCP clients This allows the reservation of specified DHCP Scope IP addresses for specified MAC addresses Click the Reserved IP
50. figure DHCP clients on the Public LAN The appropriate information is needed for the DHCP server to function properly To configure enter DHCP Scope Start IP Address End IP Address Primary DNS Server Secondary DNS Server Domain Name WINS Server Lease Time and Reserved IP Address List O Disable DHCP Server Y Enable DHCP Server DHCP Scope Start IP Address i92 168 1 100 End IP Address 192 168 1 199 e Penes Primary DNS Server 92 152 811 Configuration secondary ONS Server Domain Mame dlink com WINS server Lease Time 1 Day Reserved IP Address List 20 DSA 3200 Wireless Service Gateway User Manual As an option the DSA 3200 provides a Reserved IP Address List for DHCP clients This allows the reservation of specified DHCP Scope IP addresses for specified MAC addresses Click the Reserved IP Address List hyperlink to configure Reserved IP Address List Public tem Reserved IP Address MAC Description a a pr pa Fotal 40 First Previous Next Last The Reserved IP Address List provides 40 entries Enter the desired Reserved IP Address client MAC address and a short description optional for each reservation After the information is completely entered click Apply to complete the setup 21 DSA 3200 Wireless Service Gateway User Manual 4 1 5 Public WLAN Configuration The internal 802 11g Access Point serves as a secondary Public Access network The configurations for the
51. gging massuord Change admin password Reload factory default Restart D Link DS4 3200 84 DSA 3200 Wireless Service Gateway User Manual 5 2 Console Utilities for Network Debugging D Link DPSa 3200 Configuration Utility ieee Select vie q Le 5 Ping host IF Trace routing path Display interface settings Display routing table Display ARP table Display system up time Check service status TEL ali ae iman SEEE ale aynchronize clock with NTP server Print the kernel ring butter Main menu The DSA 3200 console interface provides several utilities to assist the Administrator in controlling the system conditions and to assist with debugging The utilities are described as follows 1 Ping host IP By sending ICMP echo request the on line condition to a specific target can be tested 2 Trace routing path Trace and inquire the routing path to a specific target 3 Display interface settings Displays information of each network interface including the MAC address IP address and Netmask 4 Display the routing table The internal routing table of the DSA 3200 is displayed to assist the confirmation of successful setup of Static Routes on the DSA 3200 5 Display ARP table The internal ARP table of the DSA 3200 is displayed 6 Display system up time The system live time time since last system start of the DSA 3200 is displayed 85 DSA 3200 Wireless Service Gateway User Manual 7 Ch
52. gure Terminal Emulation software Hyperterminal as follows 9600 8 N 1 No flow control WAN Port Connects to a network not managed by the DSA 3200 via an Ethernet port on most Cable or xDSL modems or a Switch or Hub in an existing Ethernet Network Public LAN Ports 1 and 2 The Public LAN ports connect to the managed network that will require user authentication prior to granting Network Access This Network may consist of Hubs and or Switches non L3 as well as 802 11 Access Points Private LAN Ports 1 and 2 The Private LAN port is used to connect to the trusted Ethernet network that will not require authentication prior to access Reset Button Push and release to restart push and hold for 15s to reset defaults DC Power Socket Connect the power supply to a wall outlet before connecting here DSA 3200 Wireless Service Gateway User Manual 3 Managing the D Link DSA 3200 3 1 Getting Started This guide will provide information and instruction for administrators of the DSA 3200 Wireless G Public Private Gateway This manual corresponds with the version of firmware shipped with the DSA 3200 v 1 00 From time to time D Link may release new firmware to add new features or improve on existing ones These firmware upgrades can be found on the Technical Support Website htip support dlink com The Support Website also has plenty of great documentation in the way of FAQs and updated manuals etc Please take a moment to visit support dli
53. h the product Any changes or modifications including the antennas made to this device that are not expressly approved by the manufacturer may void the user s authority to operate the equipment The manufacturer is not responsible for any radio or television interference caused by unauthorized modification of this device or the substitution of the connecting cables and equipment other than manufacturer specified It is the responsibility of the user to correct any interference caused by such unauthorized modification substitution or attachment Manufacturer and its authorized resellers or distributors will assume no liability for any damage or violation of government regulations arising from failing to comply with these guidelines The device contains a low power transmitter which will send out Radio Frequency RF signal when transmitting For detailed warranty information for outside the United States please contact the corresponding local D Link office 109 DSA 3200 Wireless Service Gateway User Manual CE Statement European standards dictate maximum radiated transmit power of 100mW EIRP and frequency range 2 400 2 4835 GHz In France the equipment must be restricted to the 2 4465 2 4835 GHz frequency range and must be restricted to indoor use For the following equipment Wireless AP Router 09840 Is here with confirmed to comply with the requirements set out in the Council Directive on the Approximation of the La
54. i Configures your Internet display and connections settings My Computer 2 Choose the Connections Icon and then click Setup Internet Properties x General Security Content Connections Programs Advanced a Use the Internet Connection Wizard Eo setup D connect your computer to the Internet Add Remove Sethinngs Weyer dial a connection C Dial whenever a network connection is mot present Dial up settings 2 always dial my default connection Current Mone Seb Default Local Area Network LAN settings LAM Settings 89 DSA 3200 Wireless Service Gateway User Manual 3 Choose I want to set up my Internet connection manually or want to connect through a local Area network LAN and then click Next Internet Connection Wizard l x Welcome to the Internet Connection Wizard The Internet Connection wizard helps you connect your computer to the Internet You can use this wizard to set up a new or existing Internet account C l want to sign up for a new Internet account My telephone line is connected to my modem C l want to transher my existing Internet account to this computer My telephone line is connected to my modern To leave pour Internet settings unchanged click Cancel To learn more about the Internet click Tutorial Totana Back Le Cancel 4 Choose I connect through a local area
55. iate channel from the list to correspond with your network settings between 1 and 11 North America Channels 1 6 and 11 tend to have the least amount of overlap in the spectrum Transmission Mode There are 3 Wireless modes available 802 11b 2 4GHz 11Mbps 802 11g 2 4GHz 54Mbps and Mix mode b and g SSID Broadcast If enabled the SSID will be broadcast in most every 802 11 frame Disabling this feature removes the SSID from most but not all 802 11 frames to add privacy to your wireless network When disabled clients trying to join the Network must supply the SSID as it most likely will not show up in normal Site Survey scans Layer 2 Client Isolation Enabling this feature prevents wireless clients connected to the Internal AP from communicating with one another This is to ensure the privacy and safety of all guests who use the wireless public access network Security The Security screen is where Wired Equivalent Privacy can be enabled and configured if so desired Click the Security Hyperlink 23 DSA 3200 Wireless Service Gateway User Manual WEF Key 4 Enable Disable WEP Key Encryption 64bits 128bits Mode ASCII WEP Key Choose to enable or disable WEP on the internal AP If enabled any user attempting to communicate on the wireless network must have the corresponding WEP key configured on their WLAN adapter WEP Key Encryption Choose between a 64 bit 10 HEX or 5 ASCII or 128 bit 26 HE
56. ications The Setup Wizard will guide you through essential configurations to enable WAN connectivity and Network settings pertaining to the Public LAN Interface as well as the Wireless LAN Interface You may exit the wizard at any time without altering your previous configuration To enable the configurations made in the wizard follow the wizard step by step to the end and restart the DSA 3200 Keep in mind that after the Wizard is completed User Authentication and other Advanced features will need RR to be configured manually inthe appropriate section of this Web Ul Wireless Private O Network Help 13 DSA 3200 Wireless Service Gateway User Manual 4 1 1 Wizard The Wizard will guide through the Interface setup of the DSA 3200 All that is needed is to follow the procedures and instructions as presented by the Wizard step by step filling in all required values Upon completion restart the DSA 3200 to activate any new settings Please refer to the Quick Installation Guide for detailed information about running the Setup Wizard Setup Wizard The D Link 054 3200 Airspot Wireless G Public Private Gateway is an Ethernet Broadband Router with access control features ideal for Wi Fi hotspots as well as small to medium business applications The Setup Wizard will guide you through essential configurations to enable WAN connectivity and Network settings pertaining to the Public LAN Interface as well as the Wireless
57. ief Introduction to the DSA 3200 The D Link DSA 3200 Airspot Wireless G Public Private Gateway is an all in one product specially designed to manage and control a Hot Spot environment The DSA 3200 integrates access control features and wireless network access into a single system to fulfill the basic needs of most Hot Spot venues The DSA 3200 supports 802 11b and 802 11g wireless transmission modes simultaneously offering convenience efficiency and a friendly end user experience from your Hot Spot Quick Installation On line Immediately Installation and setup of the DSA 3200 can easily be accomplished without changing the existing network architecture Within a short time of making all of the necessary physical connections setup of access security mechanisms can be completed through the Web based Interface With the DSA 3200 at the head of a network Public LAN and WLAN users must authenticate prior to being granted access to the Internet These users can be assigned a specific bandwidth priority and or Firewall profile to preserve access rights and privileges between pre defined user groups Friendly Management and Application Interfaces The DSA 3200 is not only easy to install but also has a friendly management web interface The full web based management interface allows one to operate and maintain the system using a Java enabled web browser Users that connect to your Hot Spot Network will automatically be redirected to the login p
58. ings LAN Settings do not apply to dial up connections LAN Settings Choose Settings above For dial up settings 3 Press Next when the new connection wizard appears on the screen New Connection Wizard Welcome to the New Connection Wizard This wizard helps your Connect to the Internet Connect to 4 private network such as your workplace network Setup a home or small office network To continue click Nest Cancel 93 DSA 3200 Wireless Service Gateway User Manual 4 Choose Connect to the Internet and then click Next New Connection Wizard Network Connection Type What do you want to do L 7 Connect to the network at my workplace Connect to a business network using dial up or YPN 20 you can work from home a held office or another location L 7 Set up a home or small office network Connect to an existing home or small office network or set up a new one L 7 Set up an advanced connection Connect directly to another computer using your serial parallel or infrared port or set up this computer so that other computers can connect to it 5 Choose Set up my connection manually and then click Next New Connection Wizard Getting Ready The wizard i preparing to set up pour Internet connection How do vou want to connect to the Internet of Internet service providers ISPs For a dial up connection you will need your account name password and a
59. inistrator with Device Information Interface Status and Current Users Status It also allowed administrator monitor Traffic History With Notify history data can be assigned mail tofftrorn specific recelver sender by configurable interval 80 DSA 3200 Wireless Service Gateway User Manual 4 6 Confirm Functionality of User Authentication If all the previous steps were properly completed we should be able to connect to a public LAN port to experience the managed network access environment First connect an Ethernet enabled PC configured to support TCP IP to the network via a Public LAN port After a dynamic IP address is obtained on the PC open an Internet browser and surf to any website The default login webpage will appear in the Internet browser D Link DSA 3200 Airspot Wireless G Public Private Gateway User Login User Name Password Enter in a previously created username password in the appropriate fields Click the Enter button The Remaining button will display the remaining account balance for On Demand users only If a user that is not an on demand user clicks this button the following error window will appear 81 DSA 3200 Wireless Service Gateway User Manual 3 Remainder Microsoft Internet Explorer sorry this feature is available for on demand user only If the user logs in successfully the DSA 3200 is properly configured to service Hot Spot guests
60. is no duplicate account in the text file and in the embedded database Otherwise no account will be generated 37 DSA 3200 Wireless Service Gateway User Manual Username Password WAC Group Remark test test 1 Download Download User Click Download User in the User List to enter the Download User Accounts interface and the system will directly list all created user accounts and show a hyperlink for the download at the bottom of the screen Move the cursor of the mouse to such hyperlink and press the right button of the mouse to save as new file Then you can list the user accounts and load them into your computer 38 DSA 3200 Wireless Service Gateway User Manual 2 RADIUS The RADIUS client in the DSA 3200 allows user accounts to be authenticated using an external RADIUS server as an alternative to storing the user accounts locally on the DSA 3200 Configure both the Primary and Secondary server information as necessary to ensure all RADIUS authentication requests are properly handled C Local RADIUS Primary RADIUS Server 802 1 Authentication Enable Disable Trans Full Name C Enable Y Disable server IP a l Authentication Port Default 1814 Accounting Port Detault 1813 1 4 secret key i Accounting Service Disabled Authentication Authentication Method PAP 4 Server Secondary RADIUS Server server IP Authentication Port Accounting Port secret Key Accounting
61. itional Configuration sss esse esec eee 55 4 3 Tools MEN aia 59 AO Sc and IP eae OTT 60 432 A e daca tinh nein deccs Sete aati 61 AS A a aa 62 Ardo MONON TP E 64 439 Free SUMMING Aledo r ac tee tc dend cud ed cence eet aan 66 A30 se ATT 67 Es DDNS suits 68 4 38 Change Password nc 69 ASO OVSE OEN S anei E A TNE 70 4 3 10 Firmware Upgrade ssce 4 hater il 71 4 3 11 ere a satis T E E 72 4 4 TIE H OO ee eee ee eee 72 AAA A a a 73 442 NNMCMACC T 75 AAS Guren A A a a 77 AAA MANIC TAISIONY iei a a a e aaie 77 AAS JINOUMCANONS TTT 78 4 5 A O TA O 80 4 6 Confirm Functionality of User Authentication sese ee eee ee eee 81 5 Console T LT y ACC nin a aa 84 5 1 Main Menu of Console Interface eee eee eee 84 5 2 Console Utilities for Network Debugging s sss eee ee eee ee 85 5 3 Change admin password Of Console sese 87 5 4 Reload factory default of Console interface sss eee eee 87 5 5 Restart RA ZOO PTT 87 6 Appendix Windows TCP IP Setup csxe sss ssss sss sssss sss esss esse enes 88 6 1 Setting up a PC to connect to the DSA 2200 sese 88 611 GPP NetWork SQUID T 88 DSA 3200 Wireless Service Gateway User Manual 6 1 2 Internet Connection Te 89 6 2 Configure TCP IP in Windows 2000 oooooccccnccccccccoonccnnnononononanccnnnnnnnnnnznnnons 96 6 3 Configure TCP IP in Windows XD sss see 100 TT WA as 104 9 Technical SUP DOR O 111 Y ROSITA MON in 112 DSA 3200 Wireless Service Gateway User Manual 1 Preface 1 1 Br
62. k List 1 Blacklist1 Mame Blacklist ser Remark M Blacklist test Total 1 First Prey Mext Last Add User to List To delete a user from the black list select the appropriate delete check box and click the Delete button Caution After you delete a user no message or request of confirmation will appear 4 2 4 On demand User Configuration On demand user When a DSA 3100P is connected to the DSA 3200 s console port 2000 On demand user accounts are made available By default the On demand user database is empty Each time one presses the Printer s Print button an On demand user will be created and stored in the DSA 3200 while at the same time a receipt is printed out with the user credentials and Wireless Network Information SSID WEP On demand User Configuration store Mame Ds4 3200 e g DS4 3200 Max 8 char Receipt Header welcome e g Welcome Receipt Footer Thank voul e g Thank Youl Printer Baud Rate 9600 y Assign To Group 2 Group2 WLAN ESSID Airspot e g Airspot WEP Key jwepkeytest On demand Users List Billing Configuration Upload On demand User 49 DSA 3200 Wireless Service Gateway User Manual You can specify the prefix for each automatically generated user Store Name name up to a maximum of 8 characters for example D Link Receipt Header You can configure the receipt s header in this filed Printer Baud You may specify the COM port baud rate to support other prin
63. k Setup Internet Connection Setup 6 1 1 TCP IP Network Setup If the operating system of your PC is Windows 2000 XP then you just need to keep the default setting without any change to directly start restart the system During the process of starting the system the DSA 3200 with DHCP function will automatically assign an appropriate IP address and related information for each PC For the Windows based systems other than those for servers the default setting of the TCP IP will be a DHCP client and the setting is obtain an IP address automatically If you want to use the static IP in the Public LAN or Private LAN section or to check the TCP IP setup please refer to section 6 2 for more information 88 DSA 3200 Wireless Service Gateway User Manual 6 1 2 Internet Connection Setup Windows 2000 1 Choose Start Control Panel Internet Options E Control Panel File Edit View Favorites Tools Help e Back E Gsearch Folders El AddjRemove a Administrative Ph Control Panel Options Hardware Programs Internet Options wy Lar Configures your Internet display and connections settings Display Folder Options Fonts Windows Update Windows 2000 Support KC Keyboard Mouse Network and Phone and Power Options Dial up Co Modem 3 Y A QE Printers Regional Scanners and Scheduled Sounds and Options Cameras Tasks Multimedia System Users and VMware Tools Paccminrde z
64. l Profiles after all other changes have been applied Schedule Profile A specific Schedule profile may be assigned to a user group to allow differentiated timed access privileges between groups Click the Edit Hyperlink to manage the Schedule Profiles after all other changes have been applied Bandwidth Select the maximum Bandwidth that the corresponding user group will be able to utilize Keep in mind that this configures the Ceiling Bandwidth R Firewall Profiles Edit The DSA 3200 provides a single Global and 2 custom firewall profiles The Global policy will affect all users whereas the other policies will only affect those user groups to which they are assigned 44 DSA 3200 Wireless Service Gateway User Manual Firewall Profiles Select Profile Global Global Profile Mame Global Filter Source Rule Active Action Name Protocol MAC Item Destination Il AMY 1 lf Pass TEH TCP http ANY aa E e a ajoo id TCP Ii Bp Ep 1 Z Li IW 255 255 255 255 32 T ANY ST T Be lee ICMP p ANY Il ANY 4 E DT TCP ssh ANY low 192 168 1 171 32 2 aili foes TCR elnet ANY allow ANY S Z Pass Pub Pr ALL ANY allow ANY H IZ Pass Pri Pu ALE h AMY ANY S O Pass P ALL VLAN ANY block ea a y ALL UU U4 23 28 Ep b 2 ILO x Block TPC 299 255 255 255 52 block AMY colle a ALL 45 DSA 3200 Wireless Service Gateway User Manual Filter Rule Item The filter rules obey Top Down evaluation to
65. le Disable Public Port IP Address 192 166 1 40 Subnet Mask 55 255 255 U Disable DHCP Server Enable DHCP Server DHCP Scope Start IF Address 192 166 1 1 UU End IF Address 192 166 1 199 R E EARE Primary DNS Server 192 152 8411 Configuration secondary OMS Server Lease Time Reserved IP Address List IP PNP This feature enables those clients that already have Static IP information configured IP address Subnet Mask Default Gateway and DNS address to join the Public Access Network without having to reconfigure their TCP IP information In order for this feature to function the user must have a default gateway and DNS address configured User Authentication Enable or Disable user authentication to suit your Hot Spot Needs Enabled will redirect all Public LAN users to a login page on their first web browsing attempt Disabled will not require authentication prior to access 19 DSA 3200 Wireless Service Gateway User Manual IP Address Enter the desired IP address for the Public LAN interface Subnet Mask Enter the appropriate Subnet Mask for this network Related Setup for DHCP Server of Public LAN The DHCP Server is optional and may be disabled or enabled at any time Disable DHCP Server The DSA 3200 will not dynamically configure DHCP clients on the Public LAN Disable DHCP Server DHCP Server CO Enable DHCP Server Configuration Enable DHCP Server The DSA 3200 will dynamically con
66. n is lost and unauthenticated users attempt to browse the Internet Contact information for help desk technical representatives should be entered here so customers may inform the appropriate personnel in the event of failed WAN connectivity 15 DSA 3200 Wireless Service Gateway User Manual Succeed Page Any URL may be entered in this field Once a user logs in successfully he or she will be linked to this Succeed page URL automatically The succeed page is typically set to the URL of a company website such as http www dlink com Remote Manage IP The DSA 3200 is able to be configured remotely through the WAN interface via HTTP HTTPS or SSH protocols Access may be granted to a single IP address a single IP Network or any IP 0 0 0 0 32 SNMP The DSA 3200 supports SNMP v2 read only data access A Trap Host IP address and an SNMP community name must be specified for the DSA 3200 to be successfully managed through SNMP Dos Protection for User The DSA 3200 protects users when enabled against various types of Denial of Service attacks including e NMAP FIN URG PSH e Ping of Death e Xmas Tree e Null Scan SYN RST e SYN FIN User Logon SSL When enabled users will be redirected to an HTTPS SSL encrypted log in page otherwise a standard HTTP login page will be used System Time The DSA 3200 has an NTP client to automatically synchronize the system time over the Internet from an NTP Server Device Time 20041129 1
67. nce with the foregoing requirements or for which an RMA number is not visible from the outside of the package The product owner agrees to pay D Link s reasonable handling and return shipping charges for any product that is not packaged and shipped in accordance with the foregoing requirements or that is determined by D Link not to be defective or non conforming What Is Not Covered This limited warranty provided by D Link does not cover Products if in D Link s judgment have been subjected to abuse accident alteration modification tampering negligence misuse faulty installation lack of reasonable care repair or service in any way that is not contemplated in the documentation for the 106 DSA 3200 Wireless Service Gateway User Manual product or if the model or serial number has been altered tampered with defaced or removed Initial installation installation and removal of the product for repair and shipping costs Operational adjustments covered in the operating manual for the product and normal maintenance Damage that occurs in shipment due to act of God failures due to power surge and cosmetic damage Any hardware software firmware or other products or services provided by anyone other than D Link Products that have been purchased from inventory clearance or liquidation sales or other sales in which D Link the sellers or the liquidators expressly disclaim their warranty obligation pertaining to the product Repair
68. network LAN and click Next Internet Connection Wizard i x Setting up pour Internet connection IF you have an Internet service provider account you can use your phone line and a modem to connect to it If your computer it connected to a local area network LAN upu can gain access to the Internet over the LAN How do you connect to the Internet C connect through a phone line and a modem fs connect through a local area network LAN Cancel 90 DSA 3200 Wireless Service Gateway User Manual 5 Do not choose any option in the following LAN window for Internet configuration and just click Next Internet Connection Wizard Local area network Internet configuration 6 When the system asks Do you want to set up an Internet mail account now choose No and click Next Internet Connection Wizard Set Up Your Internet Mail Account 91 DSA 3200 Wireless Service Gateway User Manual 7 Click Finish to exit the Internet Connection Wizard Now you have completed the setup Internet Connection Wizard l xj Completing the Internet Connection Wizard You have successfully completed the Internet Connection wizard Your computer is now configured to connect to pour Internet account After you close this wizard you can connect to the Internet at any time by double clicking the Internet Explorer icon on pour desktop E To connect to the Int
69. nfiguration then the system will automatically send out the history of the previous day to the specified e mail address 11 DSA 3200 Wireless Service Gateway User Manual The first line of the history file is the title the actual history starts from the second line Each line includes a record and each record consists of 10 fields Date Type Name IP MAC Packets In Bytes In Packets Out and Bytes Out to show the history of each user Traffic History 2004 11 30 Date Type Mare IP MAC HS In Bytes In Pkts Out Bytes Out 4 4 5 Notifications The DSA 3200 will save the billing history in the internal DRAM for up to 3 days If you wish to automatically send the history to your email address please enter your e mail address in the receiver field Notify Configuration sender E mail Recelver E mail History Ermal SMTP Server Auth Method NONE Interval 1 Hour syslog To Sender E mail The email address of the administrator responsible for maintaining the DSA 3200 in some cases this must be a valid e mail address as supplied by ISP Receiver E mail The email address of the intended History recipient SMTP Server The IP address or Fully Qualified domain name of ISP SMTP Server 78 DSA 3200 Wireless Service Gateway User Manual Auth Method Choose one of 5 types of SMTP extended authentication methods None PLAIN LOGIN CRAM MD5 and NTLMv1 Please contact your ISP or SMTP server
70. nistrator for the appropriate F settings f Obtain an IP address automatically C Use the following IP address IP address Subnet mask Default gateway Obtain ONS server address automatically f Use the following ONS server addresses Prefered ONS server l l Alternate ONS server cance 2 Click the IP Settings icon and then Add in the Default Gateways column to enter the IP address of the DSA 3200 After this procedure is completed click Add You can ask the network administrator to give you the IP address specified for the DSA 3200 98 DSA 3200 Wireless Service Gateway User Manual Advanced TCP IP Settings IP Settings DNS WINS Options IP addresses IP address DHCP Enabled Add Edit Remove Default gateways Interface metric Sonea 3 If the DNS Server column is blank please click Using the following DNS Server Address in the window of Internet Protocol TCP IP and then enter the DNS address or the DNS address provided by ISP After this procedure is completed click OK Internet Protocol TCP IP Properties 71 x General fou can get F settings assigned automatically if uour network supporta this capability Othermise pou need to ask uour network administrator hor the appropriate IP settings f Obtain an IP address automatically f Use the following IP address IP address
71. nk com prior to contacting Technical Support 3 2 System Concept The DSA 3200 has the ability to allow or deny access to Network resources based on various types of credentials IP address MAC address or username password From a single Broadband Internet connection the DSA 3200 creates 3 separate networks using NAT each with its own DHCP server The WLAN RF interface is an 802 11b g network that can be configured to either authenticate users or use WPA for enhanced wireless security The Public LAN interface can be configured to authenticate users so it may serve as a secondary Public access network The third Private LAN interface does not authenticate users and is intended to service the back office or an existing office network Authentication of users is accomplished through any Java enabled Web browser After a user connects to one of the Public Access networks and attempts to browse the Internet they will be redirected to a customizable login page hosted on the DSA 3200 without or without SSL encryption A Walled Garden may be defined to allow users that have not authenticated to access those URLs specified in the Free Surf Zone Once users authenticate successfully via the Internal Database or an external RADIUS server the Web browser will once again be redirected to a specified URL At this point 9 DSA 3200 Wireless Service Gateway User Manual the user may freely browse the Internet until the account expires or their conn
72. number of days after generation during which the account will be valid After the specified number of days any inactivated account will be automatically expired Validity Duration In the case where a user has activated his or her account the account will be valid for the number of days specified here Price Administrator assigned Price for online access m Upload On demand User Note 1 The format of each line is ID Password type Session length Activation deadline Validity duration without the quotes There must be no space between the fields and commas When adding user accounts by uploading a file any existing account in the embedded database that has the same user name as the one defined in the uploaded file will not be replaced by the new one Note2 The value of type for sessional user is 0 The unit of session length is second ID and Password must be in upper case Upload On demand User Account File Marne Browse Subrmit File Name Key in the path or browse to the file that contains the on demand user information format as described in Note 1 The unit of Activation deadline and Validity duration entries are measured in days 92 DSA 3200 Wireless Service Gateway User Manual 4 2 5 Roaming Configuration The DSA 3200 has the capability to allow GRIC and Airpath Wireless Users access to the Hot Spot by using their existing user credentials Service from either GRIC or Airpath Wireless is req
73. o admin These credentials are the same as those for the Web management interface When connected through the COM port locally one is able to change the DSA 3200 administrator s password without having to remember the original password This function is also available through the Web interface and the remote SSH interface Caution Although it does not require a password for connection via the serial port the same management interface can be accessed via SSH For heightened security we recommend an immediate change of the DSA 3200 Admin password after login to the system for the first time 5 4 Reload factory default of Console interface This function will reset the system configuration to factory defaults 5 5 Restart DSA 3200 This function will reboot the DSA 3200 Please allow 1 5 to 2 minutes for a complete restart 87 DSA 3200 Wireless Service Gateway User Manual 6 Appendix Windows TCP IP Setup lf you have not changed the factory default settings of the DSA 3200 or Windows 2000 XP TCP IP Configuration it is not necessary to make any modification here With the factory default settings the DSA 3200 will automatically assign an appropriate IP address and related information to each PC after the PC has been booted 6 1 Setting up a PC to connect to the DSA 3200 After the DSA 3200 is installed the following must be set up for the PC within the Public LAN and Private LAN sections TCP IP Networ
74. o execute the login procedure Login Enabled Indicates that after the first login users will not need to supply username and password again Upon user login a small window will show the user s information and provide a logout button Disable indicates that closing the small window will not prompt the user for logout verification 74 DSA 3200 Wireless Service Gateway User Manual 4 4 2 Interface This section provides Interface status for the following interfaces WAN port Wireless port Public and Private LAN Port Interface Status MAC Address OO OF 30 64 Bs BC MM N IP Address 6 130 140 152 Subnet mask 255 255 255 0 Mlode PAT ALC Address OO 0D 668 EB E 7 45 IP Address 192 168 2 40 wireless Subnet das 255 255 255 0 ESSID Ars pot Channel BA Encryption Function Disabled Wireless DHCP Status Disabled Server Mlode MAT MAC Address 00 0F 30 84 65 66 Public IP Address 192 168 1 40 Subnet Mlask 255 255 255 0 Status Enabled NMS IP Address BIA AUDIE OPLE Start IP Address 192 166 1 100 Server End IP Address 1927 166 1 199 Lease Time 1440 Mints Mode VAT VIA Address O0 OF 30 64 63 64 Private IP Address 192 168 0 40 Subnet hask 255 255 255 0 Status Enabled WINS IP Address BA SES Start IP Address 192 168 0 100 Serer End IP Address 192 168 0 199 Lease Time 1440 Mints 19 DSA 3200 Wireless Service Gateway User Manual Description wan subnet mask ne Subnet Mask ofthe WAN port M
75. ode aana NAT mode mmg epep reen at Wireless Enable disable DHCP server DHCP Server mose PubiC LAN mode NAT mode Subnet mask ne Subnet Mask ofthe Pubic LAN Status Enable DHCP server on Pu LAN ode private LAN pon mode NAT mode subnet Mask ne Subnet Mask of tne Private LAN port sme epe DHCP serer Pri wae Start IP Address Starting IP Address in DHCP IP range DHCP Server End IP address End IP Address in DHCP IP range LeaseTime Te lease time of the IP address 76 DSA 3200 Wireless Service Gateway User Manual 4 4 3 Current Users In this function you can obtain particular information pertaining to each online user including Username IP Address MAC Address Packets In Bytes In Packets Out Bytes Out Idle Time and Logout To force a user logout simply click the Logout hyperlink next to the online user s name Username Pkts In Bytes In tem Idle Logout IF MAC Pkts Out Bytes Out 4 4 4 Traffic History One may browse the billing history of stored by the DSA 3200 through this section The history of each day will be saved independently This system will save the history in the DRAM for no more than 3 days Traffic History Date size Byte 2004 09 02 D 2004 09 03 D Caution Since the history is saved in DRAM if you need to restart the DSA 3200 and want to keep the history manually duplicate the history by saving to HDD If you have entered the Administrator s e mail address in the Notification co
76. on method used to authenticate the user Policy Status The Administrator has the option of disabling or enabling each authentication policy independently allowing a single policy to serve all public access networks Disabled authentication policies will not be used to authenticate users Warning The Policy Name cannot use the following system defined words GRIC MAC or IP It is recommended that a useful name be assigned to each policy Black List Profile c Local RADIUS Local Users List Authentication Server Assign ta Group 1 Groupi Layer 2 Disable 8021x C WPAwB021x C WPA PSK Authentication Black List Profile Select from a previously defined user blacklist profile to block the specified users from being able to authenticate using this authentication policy Authentication Server Select the server that will perform user authentication functionalities for the selected Authentication Method Local User Database or external RADIUS Server Assign to Group Assign all users that authenticate using this Authentication Method to the specified User group selected from the pull down menu 34 DSA 3200 Wireless Service Gateway User Manual Two Authentication Mechanisms 1 Local The user s account information is stored in DSA 3200 If you need to manage any user accounts click the Local Users List hyperlink on the Authentication Server interface to enter the Account Management Interface A
77. re computers on the Public Access Network need Internet Access but cannot provide username and password for authentication For example if a server has been put on the managed network and said server requires Internet access configure the IP address in the following section The DSA 3200 allows at most 100 Privileged IP addresses These settings will take effect immediately after you click Apply Warning Permitting certain IP addresses to have network access rights without going through the standard authentication process may pose a security risk Pass Through IP Address List tem IP Address Remark 1 2 Total 100 First Prev Next Last 62 DSA 3200 Wireless Service Gateway User Manual Pass Through MAC Address List In addition to permitting specific IP addresses to have free network access rights without authenticating the DSA 3200 also provides the ability to do so according to a MAC address This system permits at most 100 Privileged MAC addresses to have network access rights without going through user authentication The format of the MAC address is XX XX XX XX XX XX These settings will be effective immediately after you click Apply Warning Permitting certain MAC addresses to have network access rights without going through the standard authentication process may pose a security risk Pass Through MAC Address List ltern MAC Address Rernark E Doo O 2 A Doo O Total 100 First
78. rnal systems or Networks 1 2 2 Document Convention Whenever an important piece of information such as a recommendation or warning needs to be presented said information is displayed in a box in italics similar to the recommendation below These recommendations will for the most part be used to help in increasing the security and usability of your Hot Spot Warning To Increase security you should immediately change the Administrator s password DSA 3200 Wireless Service Gateway User Manual 2 Product Description 2 1 Package Contents e DSA 3200 Wireless G Public Private Gateway e CD ROM Administrator s Manual and Quick Installation Guide e Ethernet cable CAT 5 UTP Crossover e Ethernet Cable CAT 5 UTP Straight through 2 e 2 dBi Detachable R SMA D Link Antenna 2 e 5V DC 3A Power adapter e Null modem console cable e Wall mount Kit e Rubber Feet 4 Note Using a power supply with a different voltage rating than the one included with the DSA 3200 will cause irreparable electrical damage and void the warranty for this product 2 2 System Requirements e Computer running Microsoft Windows Macintosh OS or a UNIX based OS e An installed Ethernet adapter configured to communicate using TCP IP e Internet Explorer 6 0 or Netscape Navigator 7 0 or above with JavaScript enabled DSA 3200 Wireless Service Gateway User Manual 2 3 Panel Function Descriptions Device LED Indicators Power LED
79. rovider from the predefined list Most of these services are offered free of charge Host name Enter the hostname that was registered with the selected provider Username E mail Enter the username or e mail address that was registered with the selected provider Password Key Enter the password or shared key that was registered with the selected provider 68 DSA 3200 Wireless Service Gateway User Manual 4 3 8 Change Password To change the Administrator s password please key in the existing admin Password in the appropriate field followed by the new password entered twice for verification New Password confirm Po Caution If you lost or forgot the Administrator s Password you can still change the Administrator s password through the text mode management interface on the serial COM port 69 DSA 3200 Wireless Service Gateway User Manual 4 3 9 System Settings The Systems Settings Page provides the ability to back up the current configuration to the local HDD restore the configuration from the local HDD and or reset the device to factory default settings System Settings Create Backup Image Lreate Restore Settings From File Browse Restore Reset to Factory Default Reset Create Backup Image Generate the backup image file Click on the Hyperlink to download to the local HDD Restore Settings From File Load a configuration file from the HDD by entering the
80. t owner must obtain a Return Material Authorization RMA number from the Authorized D Link Service Office and if requested provide written proof of purchase of the product such as a copy of the dated purchase invoice for the product before the warranty service is provided After an RMA number is issued the defective product must be packaged securely in the original or other suitable shipping package to ensure that it will not be damaged in transit and the RMA number must be prominently marked on the outside of the package Do not include any manuals or accessories in the shipping package D Link will only replace the defective portion of the Product and will not ship back any accessories The customer is responsible for all in bound shipping charges to D Link No Cash on Delivery COD is allowed Products sent COD will either be rejected by D Link or become the property of D Link Products shall be fully insured by the customer and shipped to D Link Systems Inc 17595 Mt Herrmann Fountain Valley CA 92708 D Link will not be held responsible for any packages that are lost in transit to D Link The repaired or replaced packages will be shipped to the customer via UPS Ground or any common carrier selected by D Link with shipping charges prepaid Expedited shipping is available if shipping charges are prepaid by the customer and upon request D Link may reject or return any product that is not packaged and shipped in strict complia
81. tate no cable or bad cable Private Public LAN LEDs A solid light indicates a valid Ethernet Link to a hub switch or PC LEDs will blink to indicate activity No light indicates a no link state no cable or bad cable DSA 3200 Wireless Service Gateway User Manual Device Physical Connections COM Port Private LAN Ports Reset button System debugging Connect to the trusted Restore the factory menu via Terminal LAN or that network which default configuration Emulation Software will not require a user to Press once to reboot 9600 8 n 1 n authenticate prior to gaining press and hold for 15 Network access seconds to reset Public LAN Ports WAN Port Receptor for Connect to Hub or Switch non L3 Connect directly to 5V DC Power and or 802 11 APs to offer wired or an Ethernet Cable Adapter wireless Network service that will or DSL modem or require a user to authenticate prior to an existing LAN to gaining Network access infrastructure Serial COM Port This port serves two distinct purposes 1 Connect to a DSA 3100P to auto generate temporary User accounts and print detailed receipts to be given to customers Receipts include pricing and Wi Fi Network information SSID WEP etc 2 Use the included Null modem cable to connect to a PC with a serial COM port in order troubleshoot debug change admin password or to restore the factory default settings without using the Web based UI Confi
82. ted by the United States Copyright Act of 1976 Contents are subject to change without prior notice Copyright 2005 by D Link Corporation D Link Systems Inc All rights reserved 108 DSA 3200 Wireless Service Gateway User Manual FCC Statement This equipment has been tested and proven to comply with the limits for a class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equioment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures e Reorient or relocate the receiving antenna e Increase the separation between the equipment and receiver e Connect the equipment into an outlet on a circuit different from that to which the receiver is connected e Consult the dealer or an experienced radio TV technician for help Installation and use of this Wireless AP Router must be in strict accordance with the instructions included in the user documentation provided wit
83. ted into multiple packets It should remain at its default setting of 2346 A smaller setting means smaller packets which will create more packets for each transmission Only minor reductions of this value are recommended DTIM Interval The default value is 3 This value between 1 and 255 milliseconds indicates the interval of the Delivery Traffic Indication Message DTIM A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages When the Access Point has buffered broadcast or multicast messages for associated clients it sends the next DTIM with a DTIM Interval value Access Point Clients hear the beacons to be informed they will receive broadcast and multicast messages IP PNF Enable Disable User Authentication Enable Disable Wireless Pon IP Address i92 168 2 40 Subnet Mask 255 255 255 0 IP PNP Enable this feature to allow Clients configured with Static IP Addresses to be Dynamically routed to the Internet Client reconfiguration is not necessary with this feature enabled as long as the Client has Static values for IP Address Subnet Mask Default Gateway and DNS Server Address they will be able to login to the Network and Browse the Internet without changing their IP information User Authentication You can choose to Enable or Disable user authentication for the Wireless Interface IP Address Enter the desired IP address for the Wireless Inter
84. ternally hosted login page by specifying username GRIC on ID field and the appropriate password Airpath Roaming Airpath Wireless will provide all required information The DSA 3200 Administrator must have a roaming user agreement with Airpath Wireless in order to use this feature Users who registered Airpath Wireless s service may login to the local public network via roaming Within the system default login page users are provided with a link redirected to Airpath s login page The URL of the login page or more generally all of Airpath Wireless IP space must be configured in the Free Surfing Area for this function to work 54 DSA 3200 Wireless Service Gateway User Manual 4 2 6 Additional Configuration Additional Configuration User Control Logout Timer ho Minis 1 1440 in 12 Hours E Friendly L eon G l Logout Internet Connection nnn Detection Upload File Upload Login Page Upload Logout Page Upload Certificate POP3 Message Edit Mail Message User Control This applies to all users Logout Timer If a user has idled and not used the network for the specified amount of time the DSA 3200 will automatically log out the user The logout time is specified in minutes having values ranging from 1 1440 Default is 10 minutes Friendly The DSA 3200 provides features to increase the user friendliness of the experience Login After you select this function the login page will automatically obtain the username
85. ters Rate The Default value is 9600 Assign to Group You can assign on demand users to a pre determined group WLAN ESSID You can specify the AP s ESSID in this filed WEP Key You can specify the AP s WEP key in WEP Key filed E On demand User List A list of all On demand user accounts configured in the DSA 3200 Receipt Footer You can configure the receipt s footer in this filed l Search On demand Users List Lisername Password Remain Time Quota Status Expire Time Delete All Total OiFirst Previous Mext Last To delete specific users accounts click on the checkbox next to those user accounts and click the Delete button To delete all user accounts click Delete All 50 DSA 3200 Wireless Service Gateway User Manual R Billing Configuration The DSA 3200 provides 10 separate On Demand User billing profiles The default profile will be used when the DSA 3100P is connected to the DSA 3200 Billing Configuration Button Status Time Quota arn M Price Date a heen aes E lao EO 2 ES mef mins days days a Feet Era ane oes eos 7 a TSR fins has eer S Bis hrs mins U das days s nato rs rs Tee Maa Cens eer SI mef mins days days a TSK fs es Tee p TSR Joie has eer Status Enable Disable this billing rule When using the DSA 3100P enable only one Billing Configuration Profile 51 DSA 3200 Wireless Service Gateway User Manual Account Expire Day The
86. the product for the period set forth below applicable to the product type Warranty Period except as otherwise stated herein 1 Year Limited Warranty for the Product s is defined as follows Hardware excluding power supplies and fans One 1 Year Power Supplies and Fans One 1 Year Spare parts and spare kits Ninety 90 days D Link s sole obligation shall be to repair or replace the defective Hardware during the Warranty Period at no charge to the original owner or to refund at D Link s sole discretion Such repair or replacement will be rendered by D Link at an Authorized D Link Service Office The replacement Hardware need not be new or have an identical make model or part D Link may in its sole discretion replace the defective Hardware or any part thereof with any reconditioned product that D Link reasonably determines is substantially equivalent or superior in all material respects to the defective Hardware Repaired or replacement Hardware will be warranted for the remainder of the original Warranty Period from the date of original retail purchase If a material defect is incapable of correction or if D Link determines in its sole discretion that it is not practical to repair or replace the defective Hardware the price paid by the original purchaser for the defective Hardware will be refunded by D Link upon return to D Link of the defective Hardware All Hardware or part thereof that is replaced by D Link or for which the
87. tings of this connection Other Places g Control Panel ul My Network Places C3 My Documents 100 AMO PENET Family PCI Ethern Disable Status Repair Bridge Connections Create Shortcut Delete Rename Properties DSA 3200 Wireless Service Gateway User Manual 3 Click the General icon and then select Internet Protocol TCP IP Click Properties Local Area Connection Properties General Authentication Advanced Connect using BS HD PCNET Family PCI Ethernet Adapter Configure Thi connection uses the following items le Client for Microsoft Wetworks Jl File and Printer Sharing for Microsoft Networks m QoS Packet Scheduler Internet Protocol TCP IP Description Transmission Control Protocol nteret Protocol The default Wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected Using DHCP If you want to use DHCP please select Obtain an IP Address Automatically which is also the default setting of Windows Reboot the PC to make sure an IP address is obtained from the DSA 3200 Internet Protocol TCP IP Properties General Alternate Configuration You can get F settings assigned automatically if pour network supports this capability Otherwise pou need to ask your network administrator hor the appropriate IP settings fe Obtain an IF address au
88. to replace the non conforming Software the price paid by the original licensee for the non conforming Software will be refunded by D Link provided that the non conforming Software and all copies thereof is first returned to D Link The license granted respecting any Software for which a refund is given automatically terminates Non Applicability of Warranty The Limited Warranty provided hereunder for hardware and software of D Link s products will not be applied to and does not cover any refurbished product and any product purchased through the inventory clearance or liquidation sale or other sales in which D Link the sellers or the liquidators expressly disclaim their warranty obligation pertaining to the product and in that case the product is being sold As Is without any warranty whatsoever including without limitation the Limited Warranty as described herein notwithstanding anything stated herein to the contrary Submitting A Claim The customer shall return the product to the original purchase point based on its return policy In case the return policy period has expired and the product is within warranty the customer shall submit a claim to D Link as outlined below 105 DSA 3200 Wireless Service Gateway User Manual The customer must submit with the product as part of the claim a written description of the Hardware defect or Software nonconformance in sufficient detail to allow D Link to confirm the same The original produc
89. tomatically Use the follo TF address Obtain DNS server address automatically C 7 Use the following DNS server addresses EA INP azas 101 DSA 3200 Wireless Service Gateway User Manual Using Static IP Address If the setup for your PC is completed please notice the network administration staff before changing the following settings 1 Click Advanced in the Internet Protocol TCP IP window Internet Protocol TCP IP Properties General Alternate Configuration L TOU can get F settings assigned automatically if your network supports this capability Othenvise you need to ask pour network administrator har the appropriate IF settings 6 Obtain an IP address automatically C Use the following IF address C Obtain ONS server address automatically Use the following DNS server addresses Preferred ONS server MAA Alternate DANS server AN 2 Click the IP Settings tab and then click Add Enter the IP address of the DSA 3200 in the Default Gateways column After this procedure is completed click OK You can ask the network administrator to give you the IP address specified for the DSA 3200 Advanced TCP IP Settings IP Settings DNS WINS l Options IF addresses IPF address Subnet mask DHCP Enabled Default gateways Gateway Automatic metric 102 DSA 3200 Wireless Service Gat
90. uired before the DSA 3200 can authenticate such users Once the appropriate service is obtained gather the information provided by the appropriate Wireless Access Provider to complete the DSA 3200 configuration Roaming Configuration Enable Disable server IP SY Authentication Port o hb GRIC Accounting Port ss secret Key E Accounting Service Disabled y Authentication Method PAP Default Group Group y Enable Disable Airpath Server Free Suring Area Device name ldsa3200 server IP ea 166407 Authentication Port fei ti Sipan Accounting Port ETE secret Key dlinktest gt Accounting Service Enabled y Authentication Method CHAP Default Group Group y Upload Certificate GoRemote users will be authenticated via a secure web page hosted on the DSA 3200 while Airpath Wireless users have the option of redirection to AirpathWireless s secure login page via the internally hosted login page 99 DSA 3200 Wireless Service Gateway User Manual GRIC Roaming GoRemote will provide all required information Below is a GRIC example DSA 3200 Authentication Port IP address 192 168 1 254 Username xyz and his IP address 192 168 1 100 Password xyz MAC address 01 23 45 67 89 ab The gric shtml example should look like this https 192 168 1 254 loginpages gric shtml uname xyz amp uip 192 168 1 100 amp up wd xyz amp umac 01 23 45 67 89 ab As an alternative a user may also use the in
91. ws of the Member States relating to Electromagnetic Compatibility 89 336 EEC Low voltage Directive 73 23 EEC and the Amendment Directive 93 68 EEC the procedures given in European Council Directive 99 5 EC and 89 3360EEC The equipment was passed The test was performed according to the following European standards e EN EN 300 328 2 V1 2 1 2001 08 e EN 301 489 17 V 1 2 1 2002 04 e EN 50371 2002 e EN 60950 2000 110 DSA 3200 Wireless Service Gateway User Manual 8 Technical Support Technical Support You can find software updates and user documentation on the D Link website D Link provides free technical support for customers within the United States and within Canada for the duration of the warranty period on this product U S and Canadian customers can contact D Link technical support through our website or by phone Tech Support for customers within the United States D Link Technical Support over the Telephone 877 453 5465 Monday through Friday 6 00am to 6 00pm PST D Link Technical Support over the Internet http support dlink com e mail supportOdlink com Tech Support for customers within the Canada D Link Technical Support over the Telephone 800 361 5265 Monday through Friday 7 30am to 12 00am EST D Link Technical Support over the Internet http support dlink ca e mail support dlink ca 111 DSA 3200 Wireless Service Gateway User Manual 9 Registration Register
92. ype submit name submit value Logout gt lt input type reset name clear value Clear gt lt form gt R Upload Image If either custom login or logout page includes a graphic file the HTML code of the graphic file path must be included in said page In the Upload Image section navigate to the Upload Image File box and key in the path and file name of such graphic file or browse to select the file The maximum total size of all graphic files is 512K lt img src images xx jpg gt 9 DSA 3200 Wireless Service Gateway User Manual After a graphic file is uploaded the second section called Existing Image Files will list the graphic files stored on the DSA 3200 You can select or delete any graphic file and the system will show the used space of the graphic file in the third section Existing Image Files After the web page and graphic files are uploaded you can click Preview at the bottom of this page to preview your custom login logout interface Total Capacity 512 K Mow Used U Upload Image Files Preview R Upload Certificate The DSA 3200 provides administrators the ability to upload their own SSL Certificate to increase compatibility with Wireless Provider Systems or to integrate seamlessly with a company s own Certificate Authority Upload Private Key File Marne Browse Upload Customer Certification File Mame Browse submit Use Default CA 58 DSA

D-Link AirSpot DSA-3200 (F56772) Firewall

Contents

Download Pdf Manuals

Related Search

Related Contents