Manuel d'utilisation / d'entretien du produit DRO-210i du fabricant D-Link
Aller à la page of 78
DRO-210 i Broadband Busin ess Gateway User Guide (Updated for Firmware Revision 2.1.2) D-Link India Ltd., Software and R&D Center, Bangalore. Phone: 91-80-26 788345/46/5 0/51 www.
Table Of Content s ABOUT THIS MANUAL ......... ......... ........ ......... ......... ......... ........ ......... ........ 4 1 PRODUCT O VERVIEW ......... ......... ........ ......... ......... ......... ........ ......... ...... 5 1.1 H ARDWARE D ETAILS .
7.1.1 Interface Configurati on.............................................................................................................. 36 7.1.2 Policy Rules ........................................................................................
About This Manual This document provides information related to t he installation and configuration of DRO- 210i along with a descri ption of all its features. This document is intended for se rvice providers and network administrators who guide the network infrastructure deployment in enterprises.
Product Overview Dlink DRO-210i User Guide 5 1 Pr oduct Overview DRO-210i is a part of D-Link's DRO-2XX Business Gateway series, esp ecially designed as an all-in-one network solut ion for small and medium businesses.
Product Overview Dlink DRO-210i User Guide 6 1.1 Hardware Deta ils DRO-210i Packag e Contents The DRO-210i package contains the following items: DRO-210 i Broadband Busines s Gateway 2 Straight Ethern.
Product Overview Dlink DRO-210i User Guide 7 Front Panel The front panel provides the LEDs to indicate the status of the router. Module Status Description Power On ON OFF WAN1 LED Ready ON: Link and P.
Product Overview Dlink DRO-210i User Guide 8 Rear Panel The rear panel provides the router’s ports and reset button. Interface Descript i on RESET Restore the Factory Default Settings in the router .
Product Overview Dlink DRO-210i User Guide 9 1.2 Software Fea tures The r outer has rich features like routing, lo ad-balancing, auto backup, firewall access control, secure VPN co nnectivity, network address translation, quality of service and remote management satisfying most of the needs of the SMB market.
Product Overview Dlink DRO-210i User Guide 10 Network Address Translation (NAT) NAT enables the router to act as an address translation agent between the Internet (public network) and the local (or private) network.
Product Overview Dlink DRO-210i User Guide 11 Tools The router supports various tools to manage and monitor the device. Syslog - The Router can send the Syslog messa ges to the configured server to aid in network administration. NTP - The administrator can configure the system date and time manually.
Interfaces Dlink DRO-210i User Guide 12 2 Interfaces The router provides the following interface ports: LAN Ports - The router has two dedicated 10/100 Ethernet LAN ports. DMZ Port - The router has one 10/100 Ethernet DMZ port. A DM Z po rt is used to connect to the compan y servers (e.
Interfaces Dlink DRO-210i User Guide 13 Port 4 is reconfigured as LAN, the entries configured on WAN2/DMZ earlier will be displayed in dark grey color in the corresponding feature tables to indicate that these entries are currently invalid.
Interfaces Dlink DRO-210i User Guide 14 Select Interface → → → → DMZ to configure DMZ Settings as explained below. DMZ Settings IP Address Enter the IP addr ess of the DMZ inter face Subnet Ma.
Interfaces Dlink DRO-210i User Guide 15 2.4.1 Static Mode In this mode, the ISP allocates and provides a static Global IP Add ress for W AN connectivity. Th e ISP wil l also provide information re gardin g the Default Ga t eway I P Address to be used for this connection.
Interfaces Dlink DRO-210i User Guide 16 After entering all the information press the Appl y button. The DHCP Client S tatus table will now show the DHCP client status at the bottom of the page. Click on Detect Link Status to configure the Ethernet WAN Link Detection Feature.
Interfaces Dlink DRO-210i User Guide 17 PPPoE Settings for WAN1 Interface Unnumbe r Interface Select the option t o enable unnumber ed mode. When this optio n is not selected the route r obtains a n IP address fr om the ISP for the PPP oE connection. Ens ure that both ends of t he PPPoE li nk are configured as unnumbered.
DHCP, DNS and Time Dlink DRO-210i User Guide 18 3 DHCP , DNS and T ime 3.1 DHCP DHCP (D y namic Host Configuration Protocol) is a method of automatically a ssigning IP address, subn et mask, default gateway and DNS server IP address to hosts on the LAN.
DHCP, DNS and Time Dlink DRO-210i User Guide 19 Default Ga teway Enter the defa ult gateway IP a ddress that the route r will assign t o the hosts on the netw ork. Lease Time (sec) Enter the length of time any host o n the network ca n keep its DHC P settings assigned by t he router.
DHCP, DNS and Time Dlink DRO-210i User Guide 20 IP Address Enter the IP addr ess to be assig ned to the system w ith the above M AC Address. After entering all the information press the Ap ply button. The entries will now be displayed under the DHCP Static Mapping Client Table .
DHCP, DNS and Time Dlink DRO-210i User Guide 21 Note: In Relay mode, the DHCP ser ver may unicast the DHCP ACK message to t he DHCP Cli ent. So proper rout es should be configured at the server to enable i t to reach the DHCP Cl ient subnet. 3.2 DNS Proxy DNS (Domain Name S ystem) is the protocol used to translate Domain Names to I P Addresses.
DHCP, DNS and Time Dlink DRO-210i User Guide 22 3.3 Time The s ystem date and tim e of the router can be configured via this opt ion. The s ystem date and time can be configured m anually, or it can be obtained automatically from a global time server using NTP.
Routing Dlink DRO-210i User Guide 23 4 Routing Routing determines how to transport packets from the initiating host to the receiving host. The packet needs to determine a path through which it can travel from the sender to the receiver. The Routing Table in a router provid es such a map to all packets.
Routing Dlink DRO-210i User Guide 24 4.1 Static Rout ing When Static Routing is selected as the routing al gorithm, the network administrator needs to manually configure all routes on the router. A ny chan ge in the networ k config u ration would require the administrator to update the infor mation in all affected routers.
Routing Dlink DRO-210i User Guide 25 other network configuration problems like routing loop. In the Internet, there are two types of dynamic routing algorithms used – Distance vector and Link State algorithm.
Routing Dlink DRO-210i User Guide 26 4.3 Routing Table The router maintains all the active route entries, and dis plays them in the Routing table. The static routes configured manuall y by th e admini strator are displayed in grey color. And the dynamic routes learnt via RIP are displayed in yellow color.
Routing Dlink DRO-210i User Guide 27 Outbound Int erface The network tra ffic which matches with all t he below policy pa rameters will be sent out of this interfa ce. Policy Para meters Inbound Inte rface Select the interfa ce through whic h the incoming tra ffic will come i n.
High Availability Dlink DRO-210i User Guide 28 5 High A vailability The High Availability support in the router is an ideal solution for businesses requiring uninterrupted, low cost internet connectivit y . Th e router supports Dual Ethernet WAN Ports for xDSL connectivity .
High Availability Dlink DRO-210i User Guide 29 5.2 Load Balancing With mult iple Internet connections, Load Balancing effectively uses the combined bandwidth of all the inte rnet links resulting in a s ignificant increase in the t otal available bandwidth.
High Availability Dlink DRO-210i User Guide 30 Select In terface → → → → WAN1 and choose IP Setting Mode as Static or Dynamic . Click on Detect Link Status to configure the Ethernet WAN Link Detection as explained below. Ethernet WAN Link Detection Interface The WAN interf ace on whic h link detection is t o be perf ormed.
Network Address Translation Dlink DRO-210i User Guide 31 6 Network Addr ess T ran slation When a computer w ants to connect to the Internet, it needs a legal and unique Global I P address t o traverse the internet. With the ex plosion of Internet, the unique IP address space available is insuffi cient.
Network Address Translation Dlink DRO-210i User Guide 32 6.1.2 NAT Configura t ion This router supports the following types of NAT: Many-To-One - I n thi s case, multiple private IP addresses are mapped to one Global IP address by using different ports.
Network Address Translation Dlink DRO-210i User Guide 33 Consider a scenario where W AN1 is used for internet connectivity. NAT must be enabled at WAN1 to enable LAN systems to access the internet. The compan y ’s servers (Web/FTP S erver) ma y be installed at the DMZ interface using public IP Address for direct a ccess from th e internet.
Network Address Translation Dlink DRO-210i User Guide 34 Protocol Select the appr opriate applic ation from the list. Thi s selection is equivalent to ente ring a correct transport type (TC P or UDP) a nd port number for an applica tion. For exa mple, when SMTP is chosen transp ort type TCP and port number 25 is automatically entere d.
Network Address Translation Dlink DRO-210i User Guide 35 6.4 NAT Table The router maintains a t able of sessions for which IP Address and Port Translations have been performed. This translation table can be viewed from the NAT Table Page. Select Status → → → → NAT Table to view the NAT Session Table explained below.
Firewall Dlink DRO-210i User Guide 36 7 Fir ewall Firewall is a set of securit y rules that prevents intruders from gaining access to confidential and sensitive information. I ts task is to ensure that only approved communication happens and unauthorized communication is blocked and logged.
Firewall Dlink DRO-210i User Guide 37 Note: If more t han one interface is of same security type, then Policy database for them is same i.e if WA N1 and WAN2 are configured as UnTrusted then both of them will share a common Inbound Policies databa se.
Firewall Dlink DRO-210i User Guide 38 Note: W hen an active policy is disa bl ed or del e ted, anot her enabled polic y wil l become active. In this case, currently ongoing sessions will no longer function i f they are not permitted by t he new ac tive policy.
Firewall Dlink DRO-210i User Guide 39 Protocol Select from this d rop-down menu t he application. This is the equivalent of enteri ng the correct Tr ansport Type a nd the port number correspo nding to a given application. Port Range Enter the range of p ort numbers for w hich the curren t policy rules will be app lied.
Firewall Dlink DRO-210i User Guide 40 Select Firewall → → → → Policy to get to the Policy Table and click Out button to configure Outbound Policies . Outbound Policies Port Filter Enable d Select Enable to a ctivate Outbou nd Port Filter. Por t Filter is used to deny netw ork packets com ing from the tr usted domain.
Firewall Dlink DRO-210i User Guide 41 Blocked Services Click on the link “Blocked Services” to get to Blocked Services configuration page. This page allows administrator to specify the application to be blocked from Trusted network to the UnTrusted network.
Firewall Dlink DRO-210i User Guide 42 After entering all the inf ormation press the Apply but ton and the Blocked IP Table will now be displayed at the bottom of the page. Pres s View button for viewing and Delete button for deleting the corresponding entry.
Firewall Dlink DRO-210i User Guide 43 After enterin g all the inf ormation press the App ly button and th e status ta ble will now b e displayed at the bottom of the page. Press View button for viewing and Delete button for deleting the corresponding entry.
Firewall Dlink DRO-210i User Guide 44 Keyword Filter HTTP Packets with specific keywords (like jobs) in the URL can be blocked using the Keyword Filter. In Outbound Policies select Keyword List (under Web Filter) to go to the Keyword Filter configuration page.
Firewall Dlink DRO-210i User Guide 45 After enterin g all the inf ormation press the App ly button and th e status ta ble will now b e displayed at the bottom of the page. Press Delet e button for deleting th e corresponding entry. 7.1.7 MAC Filter MAC Filter fe ature can be used to block all traffic from a sp ecific user’s system.
Firewall Dlink DRO-210i User Guide 46 7.2 Intrusion Det ection An Intrusion is a deliberate, unauthoriz ed attempt to access or manipulate information or system and to rend er them unreliable or unus able. The securit y architecture that detects and prevents these types of intrusion is called Intrusion Detection and Prevention System.
Firewall Dlink DRO-210i User Guide 47 Select Firewall → → → → IDS Configuration to configure the IDS Configuration as explained below. IDS Configuration Enable IDS Select Enable to a ctivate the I DS. Flood Atta ck Select Enable to a ctivate all types of f lood attacks av ailable on this r outer i.
Firewall Dlink DRO-210i User Guide 48 7.2.2 Intrusion Log When traffic matches an Intrusion signature a nd is blocked by the IDS engine, the blocking event is recorded in the Intrusion Detection Log . Select Status → → → → Log Tables → → → → Intrusion Log to view the Intrusion Log Table as explained below.
Virtual Private Network Dlink DRO-210i User Guide 49 8 V irtual Private Netw o rk VPN or virtual private networks allow multipl e sites from an or ganization (and its clients, suppliers, etc.) to communicate securely over an insecure internet by encrypting all communication between the sites.
Virtual Private Network Dlink DRO-210i User Guide 50 8.1 IPSec Tunnel or Passthroug h The IPSec VPN Feature can operate in 2 modes: IPSec Passthrough: In this mode, the router will allow IPSec-V PN tunnels t o be established between multiple LAN side IPSec clients and multiple remote I PSec servers.
Virtual Private Network Dlink DRO-210i User Guide 51 Add/Modify Tunn el Tunnel ID Enter the alphanumer ic string that id entifies the r emote tunnel. Tunnel Sou rce Interface Select the WAN interf ace, which serve s as the tun nel's source endpoi nt.
Virtual Private Network Dlink DRO-210i User Guide 52 that of DES key and hence it is more secure. U ser must select exa ctly the same IKE Encryp tion algori thm on both ends of a VPN tunnel. Phase 2 Proposa l PFS Mode Select the mode t hat will be used for IPSec Perfect Forwar d Secrecy ( PFS).
Virtual Private Network Dlink DRO-210i User Guide 53 as 192.168.20.0 with subnet mask 255.255.255.0 and outgoing device same as t hat of the source interface w hich was spe cified in the corres pondi ng tunnel en tr y. 8.3 IPSec Server IPSec server allows tel e-workers to conn ect to their corporate o ffice securel y from anywhere i n the world.
Virtual Private Network Dlink DRO-210i User Guide 54 maximum life dura tion is 86 400 seconds. IKE Hash Select the Hash alg orithm that will be u sed to ensure that the mes sages exchanged betwee n the two IPS ec VPN tunnel e ndpoints has bee n received exa ctly as it was se nt.
Virtual Private Network Dlink DRO-210i User Guide 55 ESP authentication a lgorithm on b oth ends of a V PN tunnel. AH Transform Select the AH a uthentication algorit hm ( MD5, SHA ) to be used whe n AH is selected for the I PSec Ope ration. The user nee ds to use the same A H authentication met hod on both end s of a VPN tu nnel.
Virtual Private Network Dlink DRO-210i User Guide 56 Tunnel Nam e This is the name of the tunnel if it is a peer-to-peer configurati on or it is the name of the IPS ec serve r if it’s an IPSec ser ver configuratio n. Termination IP/Domain Na me If this is a peer-to-p eer tunnel, then it indicates remo te peer IP a ddress or its domain name.
Virtual Private Network Dlink DRO-210i User Guide 57 8.6 IPSec Log The router maintains a log of the IPSec prot ocol activities i.e Tunnel Negotiation, Establishment and Renegotiation. Select Status → → → → Log Tables → → → → IPSec Log to view the IP Sec Log Table as explained below.
Quality of Service Dlink DRO-210i User Guide 58 9 Quality of Service Traffic control in a network can b e achieved by Qu ality of Service (QoS) algorithms, which involves g uiding the packets ba sed on some pre defined rules. Traffic c ontrol classifies packets and places t hem in individual flows or classes.
Quality of Service Dlink DRO-210i User Guide 59 Interface Bandwidth Enter the upstrea m bandwidth of the i nterface. Default Cl ass ID Enter the defa ult Class ID for the r oot class. Corre sponding class needs to be added in the class configur ation The unclassified traffic will be sent t o the class with this de fault class ID.
Quality of Service Dlink DRO-210i User Guide 60 9.1.2 Filter Configura t ion Filters in QoS help i n classif ication of traffic, and assigning t he traffic to a specific HTB class. These filters use IP parameters like S ource IP, Destination I P, Protocol, S ource Port and Destination Port.
Quality of Service Dlink DRO-210i User Guide 61 After entering all the in formation press the Appl y button and the QoS Filter Entries table will now be di splayed at the bottom of the page. Press View button for editing and Delete button for deleting the corresponding entry.
Quality of Service Dlink DRO-210i User Guide 62 of zero indicates "A ny" Sour ce Port. This field i s effective when TCP/UDP is selected as the Protocol. TOS/DiffServ Enter the TOS value ( 8 bit binar y number) to be set i n the IP hea der of the filtered packet.
Administration Dlink DRO-210i User Guide 63 10 Administration The router provides several administrative fea t ures/tools to maintain and monitor the router. This section discusses these features and their configuration in detail. 10.1 Device Infor mation The current status of the router can be obtained through this page.
Administration Dlink DRO-210i User Guide 64 Connection Type Displays the WAN r outing protoc ol selected (Static, Dynamic or PPP oE). IP Address Displays the curre nt WAN IP a ddress. Subnet Mask Displays the subnet mask for the WAN IP addre ss. Default Ga teway Displays the ga teway IP ad dress for this interfa ce.
Administration Dlink DRO-210i User Guide 65 Select Status → → → → Log Tables → → → → Session Log to view Session Log as explained below. Session Log Start Time Displays the sta rting date and time. End Time D isplays the end ing date a nd time.
Administration Dlink DRO-210i User Guide 66 Select Tools → → → → Password to config ur e Change Password as ex plained below. Change Password Username The username f or the account should b e admin . Old Password Enter the old passw ord for the account.
Administration Dlink DRO-210i User Guide 67 Restart t he Device the saved setti ngs. Restore to Fa ctory Default S ettings Press this button to restore the fa ctory default setti ngs of the router. O n reboot, the router c an be accessed using LAN IP Ad dress 192.
Administration Dlink DRO-210i User Guide 68 10.8 Ping T est The Ping Test feature allows the user to ping to any network device from the router. This helps in checking network connectivity from the router. Select Tools → → → → Ping Test to conf igure Ping Test as explained below.
Administration Dlink DRO-210i User Guide 69 Note: If NAT is enabled on the remote s ide then the Global IP address should be entered as the remote I P address because the r outer will get the request from that address.
Frequently Asked Questions Dlink DRO-210i User Guide 70 11 Fr equently Asked Questions 11.1 General Q1. I h ave forgotten the router’s LAN IP A ddress. Now how can I access the router t o configure it? Ans: Press the Factory Default switch (RESET switch on the Front Panel) and the router settings wil l be restored to default settings.
Frequently Asked Questions Dlink DRO-210i User Guide 71 Go to Status → Device Inf o, and check the Physical Link Status and Protocol Status of the W AN Interface. If the Ph y sical Link Status is DOWN, ch eck the cable conn ectivity. If the Protocol Status is DOWN, then go to I nter faces → WAN and connect the interface.
Frequently Asked Questions Dlink DRO-210i User Guide 72 11.3 Routing Q8. How can I verify that the dynamic routes got exchanged using the RIP feature? Ans: Go to Status → Route Table . Here the list of active route entries i s displayed. The routes in “Grey” color are static route entries.
Frequently Asked Questions Dlink DRO-210i User Guide 73 11.5 Firewall Q11. I want to block access to download of songs, movies etc. How can I do that? Ans: Use the router’s File Extension Filter feature to bl ock HTTP access to extensions like .avi, .
Frequently Asked Questions Dlink DRO-210i User Guide 74 Q14. One of the LAN Systems i s affected by Virus and is generating hu ge traffic; which is consuming the entire internet bandwidth. What can I do? Ans: Use the MAC Filter f eature to temporarily block all tra ffic fro m the infected system.
Frequently Asked Questions Dlink DRO-210i User Guide 75 Ans: The router can onl y block messen gers based on Domain names, UR L Keywords, IP Addresses or P ort numbers used for communi cation. Blocking of mess engers (like sk ype) which cannot be identified by any of these methods is not supported by the router.
Frequently Asked Questions Dlink DRO-210i User Guide 76 Q21. What are the call features supported by SIP-ALG? Ans: The call features supported by SIP-ALG are as below: a. Registration b. Call Establishment c. Attended Call transfer d. Unattended Call transfer e.
Frequently Asked Questions Dlink DRO-210i User Guide 77 Ans: No. VPN provides security b y encrypting and decrypting data that passes through a VPN connection; it does not offer protection from viruses.
Frequently Asked Questions Dlink DRO-210i User Guide 78 Q32. My com pany uses a Fin ancial A pplication across the internet, and I want to ensure that this traffic is prioritized over all other traffic. Ans: Configure HT B QoS on the WAN interface as ex plained in Q31.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté D-Link DRO-210i c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du D-Link DRO-210i - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation D-Link DRO-210i, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le D-Link DRO-210i va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le D-Link DRO-210i, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du D-Link DRO-210i.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le D-Link DRO-210i. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei D-Link DRO-210i ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
