D-Link DWC-1000 User manual

User Manual
Wireless Controller
D-Link Corporation
Copyright © 2014
http://www.dlink.com

Wireless Controller User Manual
1
User Manual
DWC-1000
Wireless Controller
Version 3.01
Copyright © 2014
Copyright Notice
This publication, including all photographs, illustrations and software, is protected under
international copyright laws, with all rights reserved. Neither this manual, nor any of the material
contained herein, may be reproduced without written consent of the author.
Disclaimer
The information in this document is subject to change without notice. The manufacturer makes
no representations or warranties with respect to the contents hereof and specifically disclaim any
implied warranties of merchantability or fitness for any particular purpose. The manufacturer
reserves the right to revise this publication and to make changes from time to time in the content
hereof without obligation of the manufacturer to notify any person of such revision or changes.
Limitations of Liability
UNDER NO CIRCUMSTANCES SHALL D-LINK OR ITS SUPPLIERS BE LIABLE FOR
DAMAGES OF ANY CHARACTER (E.G. DAMAGES FOR LOSS OF PROFIT, SOFTWARE
RESTORATION, WORK STOPPAGE, LOSS OF SAVED DATA OR ANY OTHER
COMMERCIAL DAMAGES OR LOSSES) RESULTING FROM THE APPLICATION OR
IMPROPER USE OF THE D-LINK PRODUCT OR FAILURE OF THE PRODUCT, EVEN IF D-
LINK IS INFORMED OF THE POSSIBILITY OF SUCH DAMAGES. FURTHERMORE, D-
LINK WILL NOT BE LIABLE FOR THIRD-PARTY CLAIMS AGAINST CUSTOMER FOR
LOSSES OR DAMAGES. D-LINK WILL IN NO EVENT BE LIABLE FOR ANY DAMAGES IN
EXCESS OF THE AMOUNT D-LINK RECEIVED FROM THE END-USER FOR THE
PRODUCT.

Wireless Controller User Manual
2
Table of Contents
Chapter 1. Introduction...........................................................................................................................13
1.1 About this User Manual..........................................................................................14
1.2 Typographical Conventions...................................................................................14
Chapter 2. Configuring Your Network ..................................................................................................15
2.1 LAN Configuration...................................................................................................15
2.1.1 LAN DHCP Reserved IPs......................................................................................20
2.1.2 LAN DHCP Leased Clients....................................................................................21
2.1.3 LAN DHCP Pools....................................................................................................22
2.1.4 LAN Configuration in an IPv6 Network................................................................23
2.1.5 DHCPv6 Leased Clients........................................................................................26
2.1.6 Configuring IPv6 Router Advertisements............................................................27
2.2 QoS...........................................................................................................................30
2.2.1 LAN QoS Configuration .........................................................................................30
2.2.2 801.P Priority (CoS to Port Mapping)...................................................................30
2.2.3 DSCP Configuration...............................................................................................31
2.2.4 Port Queue Scheduling..........................................................................................32
2.2.5 Port Queue Status ..................................................................................................33
2.2.6 Option QoS Configuration......................................................................................34
2.2.7 Traffic Selector Configuration................................................................................36
2.2.8 Remark CoS to DSCP............................................................................................38
2.3 VLAN Configuration................................................................................................38
2.3.1 VLAN Configuration Options.................................................................................40
2.3.2 Associating VLANs to ports...................................................................................42
2.3.3 Multiple VLAN Subnets..........................................................................................45
2.4 Configurable Port: DMZ Setup..............................................................................46
2.5 Universal Plug and Play (UPnP)...........................................................................47
2.6 Captive Portal..........................................................................................................50
2.6.1 Captive Portal Setup...............................................................................................50
2.6.2 Captive Portal SSID Setup....................................................................................53
2.6.3 Captive Portal Session...........................................................................................54
2.6.4 Service Level Agreement (SLA) ...........................................................................55
2.6.5 Billing Profiles..........................................................................................................56
2.6.6 Block MAC ...............................................................................................................60
2.6.7 Hotspot.....................................................................................................................60
2.6.8 Captive Portal Front Desk......................................................................................61
2.7 WLAN global configuration....................................................................................63
2.8 Wireless Discovery configuration .........................................................................66
2.8.1 Wireless Discovery Status.....................................................................................68
2.8.2 AP Profile Global Configuration............................................................................69
Chapter 3. Configuring Wireless LAN ..................................................................................................90
3.1 WLAN Setup Wizard...............................................................................................90
3.2 WLAN Visualization support..................................................................................93
3.2.1 Download Image.....................................................................................................93
3.2.2 Visualization Launch...............................................................................................94
Chapter 4. Monitoring Status and Statistics........................................................................................96

Wireless Controller User Manual
3
4.1 System Overview....................................................................................................96
4.1.1 Dashboard................................................................................................................96
4.1.2 Device Status ..........................................................................................................97
4.1.3 Wireless LAN AP information................................................................................99
4.1.4 Cluster information................................................................................................101
4.1.5 Resource Utilization..............................................................................................103
4.2 Traffic Statistics.....................................................................................................105
4.2.1 Wired Port Statistics.............................................................................................106
4.3 Associated Client Status/Statistics.....................................................................107
4.3.1 Managed AP Statistics.........................................................................................107
4.3.2 LAN Associated Clients .......................................................................................108
4.3.3 WLAN Associated Clients....................................................................................109
4.4 Active Connections...............................................................................................110
4.4.1 Sessions through the Controller .........................................................................110
4.5 LAN Client Info ......................................................................................................111
4.5.1 Associated Clients ................................................................................................111
4.5.2 LAN Clients............................................................................................................113
4.5.3 Detected Clients....................................................................................................114
4.5.4 Active VPN Tunnels..............................................................................................116
4.6 Access Point..........................................................................................................118
4.6.1 Access Point Status..............................................................................................118
4.6.2 AP Summary..........................................................................................................120
4.6.3 Managed AP Status..............................................................................................122
4.6.4 Authentication Failure Status..............................................................................123
4.6.5 AP RF Scan Status...............................................................................................125
4.7 Global Info..............................................................................................................127
4.7.1 Global status..........................................................................................................127
4.7.2 Peer Controller Status..........................................................................................132
4.7.3 Peer Controller Configuration Status.................................................................134
4.7.4 Peer Controller Managed AP Status..................................................................135
4.7.5 IP Discovery...........................................................................................................136
4.7.6 Configuration Receive Status..............................................................................137
4.7.7 AP Hardware Capability.......................................................................................139
4.8 Wireless Client Status..........................................................................................141
4.8.1 Client Status ..........................................................................................................141
4.8.2 Associated Client Status......................................................................................143
4.8.3 Associated Client SSID Status............................................................................144
4.8.4 Associated Client VAP Status.............................................................................145
4.8.5 Controller Associated Client Status....................................................................146
4.8.6 Detected Client Status .........................................................................................147
4.8.7 Pre-Authorization History.....................................................................................149
4.8.8 Detected Client Roam History.............................................................................150
Chapter 5. AP Management................................................................................................................152
5.1 Valid Access Point Configuration .......................................................................152
5.2 RF Management ...................................................................................................156
5.2.1 RF Configuration...................................................................................................156
5.2.2 Channel Plan History............................................................................................159
5.2.3 Manual Channel Plan...........................................................................................160
5.2.4 Manual Power Adjustment Plan..........................................................................163
5.3 Access Point Software Download.......................................................................164

Wireless Controller User Manual
4
5.4 Local OUI Database Summary...........................................................................166
5.5 AP Provisioning Summary...................................................................................167
5.6 Manual Management............................................................................................169
Chapter 6. Connecting to the Internet: Option Setup.......................................................................172
6.1 Internet Connection Setup Wizard .....................................................................172
6.2 Option Configuration.............................................................................................173
6.2.1 Option Port IP address.........................................................................................174
6.2.2 Option DNS Servers.............................................................................................175
6.2.3 DHCP Option.........................................................................................................175
6.2.4 PPPoE....................................................................................................................176
6.2.5 Russia L2TP and PPTP Option..........................................................................179
6.2.6 Option Configuration in an IPv6 Network..........................................................181
6.2.7 Checking Option Status.......................................................................................184
6.3 Features with Multiple Option Links...................................................................187
6.3.1 Auto Failover..........................................................................................................187
6.3.2 Load Balancing......................................................................................................188
6.3.3 Protocol Bindings..................................................................................................190
6.4 Routing Configuration...........................................................................................192
6.4.1 Routing Mode........................................................................................................192
6.4.2 Dynamic Routing (RIP) ........................................................................................195
6.4.3 Static Routing........................................................................................................196
6.5 OSPF......................................................................................................................197
6.6 6to4 Tunneling.......................................................................................................200
6.7 IPv6 Tunnels Status .............................................................................................201
6.8 ISATAP Tunnels....................................................................................................202
6.9 IGMP Setup ...........................................................................................................203
6.10 Option Port Settings .............................................................................................205
6.11 IP Aliases ...............................................................................................................207
Chapter 7. Securing the Private Network ..........................................................................................208
7.1 Firewall Rules........................................................................................................209
7.2 Defining Rule Schedules .....................................................................................210
7.3 Configuring Firewall Rules...................................................................................211
7.3.1 Firewall Rule Configuration Examples...............................................................216
7.4 Security on Custom Services..............................................................................220
7.5 ALG support...........................................................................................................221
7.6 VPN Passthrough for Firewall.............................................................................222
7.7 Client.......................................................................................................................223
7.8 Application Rules ..................................................................................................224
7.9 Application Rules Status......................................................................................226
7.10 Web Content Filtering...........................................................................................226
7.10.1 Content Filtering....................................................................................................227
7.10.2 Approved URLs.....................................................................................................228
7.10.3 Blocked Keywords ................................................................................................229
7.10.4 Export Web Filter..................................................................................................230
7.11 Content Keeper Support (Web Content Filtering)............................................231
7.12 Dynamic WCF .......................................................................................................231

Wireless Controller User Manual
5
7.13 IP/MAC Binding.....................................................................................................233
7.14 Switch Settings......................................................................................................234
7.15 Protecting from Internet Attacks .........................................................................236
Chapter 8. IPsec / PPTP / L2TP VPN................................................................................................238
8.1 VPN Wizard ...........................................................................................................241
8.2 Configuring IPsec Policies...................................................................................244
8.2.1 Extended Authentication (XAUTH).....................................................................247
8.2.2 Internet over IPSec tunnel...................................................................................248
8.3 Configuring VPN clients.......................................................................................248
8.4 PPTP / L2TP Tunnels...........................................................................................248
8.4.1 PPTP Tunnel Support ..........................................................................................249
8.4.2 L2TP Tunnel Support...........................................................................................251
8.4.3 OpenVPN Support................................................................................................252
Chapter 9. SSL VPN.............................................................................................................................255
9.1 Groups and Users.................................................................................................257
9.1.1 Users and Passwords ..........................................................................................265
9.1.2 User Database ......................................................................................................266
9.2 Using SSL VPN Policies......................................................................................269
9.2.1 Using Network Resources...................................................................................272
9.3 Application Port Forwarding................................................................................273
9.4 SSL VPN Client Configuration............................................................................276
9.4.1 Creating Portal Layouts .......................................................................................279
Chapter 10. Advanced System Functionalities ...................................................................................282
10.1 USB Device Setup................................................................................................282
10.2 USB Share Port.....................................................................................................283
10.3 Authentication Certificates...................................................................................284
10.4 Intel ®AMT..............................................................................................................286
Chapter 11. Advanced Wireless Controller Features.........................................................................289
11.1 General...................................................................................................................289
11.2 SNMP Trap............................................................................................................291
11.3 Distributed Tunneling ...........................................................................................293
11.3.1 Distributed Tunneling Status...............................................................................294
11.4 Peer Controller Configuration..............................................................................295
11.4.1 Peer Controller Configuration Request Status .................................................295
11.4.2 Peer Controller Configuration..............................................................................297
11.5 WIDS Configuration..............................................................................................298
11.5.1 WIDS AP configuration ........................................................................................298
11.5.2 WIDS Client Configuration...................................................................................302
11.6 WDS Settings........................................................................................................305
11.6.1 Group Configuration.............................................................................................307
11.6.2 AP Configuration...................................................................................................307
11.6.3 Link Configuration.................................................................................................308
11.7 External Authentications......................................................................................310
11.7.1 RADIUS Settings...................................................................................................311

Wireless Controller User Manual
6
11.7.2 NT Domain Settings .............................................................................................312
11.7.3 LDAP Settings.......................................................................................................314
11.7.4 Active Directory Settings......................................................................................316
11.7.5 POP3 Settings.......................................................................................................318
Chapter 12. Administration & Management.........................................................................................321
12.1 Remote Management...........................................................................................321
12.2 CLI Access.............................................................................................................321
12.3 SNMP Configuration.............................................................................................322
12.4 SNMP Traps..........................................................................................................324
12.5 Configuring Time Zone and NTP........................................................................327
12.6 Log Configuration..................................................................................................328
12.6.1 Defining What to Log............................................................................................329
12.6.2 Sending Logs to E-mail or Syslog ......................................................................332
12.6.3 Event Log Viewer in GUI .....................................................................................335
12.7 Backing up and Restoring Configuration Settings ...........................................337
12.8 Upgrading Wirelesss Controller Firmware ........................................................339
12.9 Dynamic DNS Setup.............................................................................................341
12.9.1 Using Diagnostic Tools ........................................................................................342
12.9.2 Ping.........................................................................................................................343
12.9.3 Trace Route...........................................................................................................343
12.9.4 DNS Lookup ..........................................................................................................344
12.9.5 Router Options ......................................................................................................344
Chapter 13. License Activation..............................................................................................................345
Appendix A. Glossary..............................................................................................................................347
Appendix B. Factory Default Settings ...................................................................................................350
Appendix C. Recovery from Upgrade Failure ......................................................................................352
Appendix D. Product Statement.............................................................................................................354

Wireless Controller User Manual
7
List of Figures
Figure 1: Setup page for LAN TCP/IP settings (DHCP server) ...........................................................18
Figure 2: Setup page for LAN TCP/IP settings (DHCP Relay)............................................................19
Figure 3: Setup page for LAN TCP/IP settings (continued) .................................................................20
Figure 4: LAN DHCP Reserved IPs.........................................................................................................21
Figure 5: LAN DHCP Leased Clients ......................................................................................................22
Figure 6: LAN DHCP Pool configuration.................................................................................................23
Figure 7: IPv6 LAN and DHCPv6 configuration.....................................................................................24
Figure 8: DHCPv6 Leased Clients...........................................................................................................26
Figure 9: Configuring the Router Advertisement Daemon ...................................................................28
Figure 10: IPv6 Advertisement Prefix settings .......................................................................................29
Figure 11: LAN QoS Configuration ..........................................................................................................30
Figure 12: 801.P Configuration.................................................................................................................31
Figure 13: Port DSCP Mapping................................................................................................................32
Figure 14: Port Queue Scheduler ............................................................................................................33
Figure 15: Port Queue Status...................................................................................................................34
Figure 16: Option QoS Configuration ......................................................................................................35
Figure 17: Bandwidth Profile Configuration............................................................................................36
Figure 18: Traffic Selector Configuration ................................................................................................37
Figure 19: Remark CoS to DSCP ............................................................................................................38
Figure 20: Adding VLAN memberships to the LAN...............................................................................40
Figure 21: VLAN Configuration Options..................................................................................................41
Figure 22: Port VLAN list...........................................................................................................................44
Figure 23: Configuring VLAN membership for a port............................................................................45
Figure 24: Multiple VLAN Subnets...........................................................................................................46
Figure 25: DMZ configuration ...................................................................................................................47
Figure 26: UPnP Configuration.................................................................................................................49
Figure 27: Captive Portal Setup ...............................................................................................................51
Figure 28: Adding or Editing a Custom Captive Portal .........................................................................52
Figure 29: List of SSID’s associated with Captive Portals....................................................................53
Figure 30: Associating a Captive Portal to a specific SSID..................................................................54
Figure 31: Active Runtime sessions ........................................................................................................55
Figure 32: Defining the Terms of Service for a Portal...........................................................................56
Figure 33: List of Configured Billing Profiles...........................................................................................57

Wireless Controller User Manual
8
Figure 34: Billing Profiles Configuration Settings...................................................................................58
Figure 35: List of MAC addresses not allowed to authenticate via the Captive Portal.....................60
Figure 36: Login prompt for Front Desk users .......................................................................................62
Figure 37: WLAN global configuration.....................................................................................................64
Figure 38: Configuring the Wireless Discovery......................................................................................67
Figure 39: Wireless Discovery status ......................................................................................................69
Figure 40: AP Profile Global Configuration.............................................................................................70
Figure 41: AP Profile List...........................................................................................................................71
Figure 42: AP Profile - Radio configuration (Part-1)..............................................................................78
Figure 43: AP Profile - Radio configuration (Part-2)..............................................................................80
Figure 44: AP Profile - SSID configuration .............................................................................................82
Figure 45: AP Profile - QoS configuration (Part-1)................................................................................84
Figure 46: AP Profile - QoS configuration (Part-2)................................................................................89
Figure 47: The Wireless LAN setup Wizard launch...............................................................................90
Figure 48: WLAN Visualization Image import.........................................................................................94
Figure 49: The launched visualization page...........................................................................................95
Figure 50: Dashboard ................................................................................................................................96
Figure 51: Device Status display..............................................................................................................98
Figure 52: Device Status display (continued).........................................................................................99
Figure 53: Wireless LAN AP information...............................................................................................100
Figure 54: Cluster information ................................................................................................................102
Figure 55: Resource Utilization statistics..............................................................................................104
Figure 56: Resource Utilization data (continued).................................................................................104
Figure 57: Physical port statistics...........................................................................................................106
Figure 58: Managed AP Statistics..........................................................................................................108
Figure 59: LAN Associated Clients ........................................................................................................109
Figure 60: WLAN Associated Clients ....................................................................................................110
Figure 61: List of current Active Firewall Sessions..............................................................................111
Figure 62: Associated Clients.................................................................................................................112
Figure 63: List of LAN hosts....................................................................................................................114
Figure 64: Detected Clients.....................................................................................................................115
Figure 65: List of current Active VPN Sessions ...................................................................................117
Figure 66: AP Statistics ...........................................................................................................................118
Figure 67: AP status.................................................................................................................................120
Figure 68: Managed AP status...............................................................................................................122
Figure 69: Authentication Failure Status...............................................................................................124

Wireless Controller User Manual
9
Figure 70: AP RF Scan Status................................................................................................................127
Figure 71: Global Status (Part 1)............................................................................................................128
Figure 72: Global Status (Part 2)............................................................................................................129
Figure 73: Peer Controller Status...........................................................................................................134
Figure 74: Peer Controller Configuration Status..................................................................................135
Figure 75: Peer Controller Managed AP Status...................................................................................136
Figure 76: IP Discovery ...........................................................................................................................137
Figure 77: Configuration Receive Status ..............................................................................................139
Figure 78: AP Hardware Capability........................................................................................................140
Figure 79: Client Statistics.......................................................................................................................141
Figure 80: Associated Client Status.......................................................................................................143
Figure 81: Associated Client SSID Status ............................................................................................144
Figure 82: Associated Client VAP Status..............................................................................................146
Figure 83: Controller Associated Client Status ....................................................................................147
Figure 84: Detected Client Status..........................................................................................................148
Figure 85: Pre-Auth History.....................................................................................................................150
Figure 86: Detected Client Roam History .............................................................................................151
Figure 87: Valid Access Point Configuration........................................................................................153
Figure 88: Add a Valid Access Point .....................................................................................................154
Figure 89: RF configuration.....................................................................................................................158
Figure 90: Channel Plan History ............................................................................................................160
Figure 91: Manual Channel Plan............................................................................................................162
Figure 92: Manual Power Adjustment Plan ..........................................................................................164
Figure 93: Access Point Software Download .......................................................................................166
Figure 94: Local OUI Database..............................................................................................................167
Figure 95: AP Provisioning Summary Status.......................................................................................169
Figure 96: Manual Management ............................................................................................................170
Figure 97: Internet Connection Setup Wizard......................................................................................173
Figure 98: Manual Option1 configuration..............................................................................................176
Figure 99: PPPoE configuration for standard ISPs .............................................................................177
Figure 100: Option1 configuration for Japanese Multiple PPPoE (part 1) .......................................178
Figure 101: Option1 configuration for Multiple PPPoE (part 2) .........................................................179
Figure 102: Russia L2TP ISP configuration .........................................................................................181
Figure 103: IPv6 Option1 Setup page...................................................................................................183
Figure 104: Connection Status information of Option1.......................................................................186

Wireless Controller User Manual
10
Figure 105: Load Balancing is available when multiple Option ports are configured and Protocol
Bindings have been defined.................................................................................................190
Figure 106: Protocol binding setup to associate a service and/or LAN source to an Option and/or
destination network................................................................................................................191
Figure 107: Routing Mode is used to configure traffic routing between Option and LAN, as well as
Dynamic routing (RIP)...........................................................................................................194
Figure 108: Static route configuration fields .........................................................................................197
Figure 109: OSPFv2 status –IPv4 ........................................................................................................198
Figure 110: OSPFv3 status –IPv6 ........................................................................................................198
Figure 111: OSPFv2 Configuration........................................................................................................199
Figure 112: 6to4 Tunneling .....................................................................................................................201
Figure 113: IPv6 Tunnel Status display.................................................................................................201
Figure 114: ISATAP Tunnel Configuration ...........................................................................................203
Figure 115: IGMP Setup..........................................................................................................................204
Figure 116: Physical Option port settings.............................................................................................206
Figure 117: IP Aliases..............................................................................................................................207
Figure 118: List of Available Firewall Rules..........................................................................................210
Figure 119: List of Available Schedules to bind to a firewall rule......................................................211
Figure 120: Example where an outbound SNAT rule is used to map an external IP address
(209.156.200.225) to a private DMZ IP address (10.30.30.30) ......................................214
Figure 121: The firewall rule configuration page allows you to define the To/From zone, service,
action, schedules, and specify source/destination IP addresses as needed................215
Figure 122: Schedule configuration for the above example...............................................................219
Figure 123: List of user defined services. .............................................................................................221
Figure 124: Available ALG support on the controller. .........................................................................222
Figure 125: Passthrough options for VPN tunnels ..............................................................................223
Figure 126: List of Known Clients ..........................................................................................................224
Figure 127: List of Available Application Rules showing 4 unique rules ..........................................225
Figure 128: List of Available Application Rules and corresponding status ......................................226
Figure 129: Content Filtering used to block access to proxy servers and prevent ActiveX controls
from being downloaded.........................................................................................................228
Figure 130: Two trusted domains added to the Approved URLs List...............................................229
Figure 131: One keyword added to the block list.................................................................................230
Figure 132: Export Approved URL list...................................................................................................231
Figure 133: Category Filtering options ..................................................................................................233
Figure 134: Example binding a LAN host’s MAC Address to a served IP address ........................234
Figure 135: Switch settings.....................................................................................................................235
Figure 136: Protecting the controller and LAN from internet attacks................................................237

Wireless Controller User Manual
11
Figure 137: Example of Gateway-to-Gateway IPsec VPN tunnel using two DWC controllers
connected to the Internet......................................................................................................239
Figure 138: Example of three IPsec client connections to the internal network through the DWC
IPsec gateway ........................................................................................................................240
Figure 139: VPN Wizard launch screen................................................................................................241
Figure 140: IPsec policy configuration ..................................................................................................245
Figure 141: IPsec policy configuration continued (Auto policy via IKE) ...........................................246
Figure 142: IPsec policy configuration continued (Auto/Manual Phase 2) ......................................247
Figure 143: PPTP tunnel configuration –PPTP Client .......................................................................250
Figure 144: PPTP VPN connection status............................................................................................250
Figure 145: PPTP tunnel configuration –PPTP Server......................................................................251
Figure 146: L2TP tunnel configuration –L2TP Server........................................................................252
Figure 147: OpenVPN configuration......................................................................................................254
Figure 148: Example of clientless SSL VPN connections to the DWC-1000 ..................................256
Figure 149: List of Groups.......................................................................................................................257
Figure 150: User Group Configuration ..................................................................................................259
Figure 151: SSLVPN Settings ................................................................................................................260
Figure 152: Group login policies options...............................................................................................261
Figure 153: Browser policies options.....................................................................................................263
Figure 154: IP policies options................................................................................................................264
Figure 155: Available Users with login status and associated Group...............................................265
Figure 156: User Configuration options.................................................................................................266
Figure 157: User Database export.........................................................................................................267
Figure 158: List of SSL VPN polices (Global filter)..............................................................................270
Figure 159: SSL VPN policy configuration............................................................................................271
Figure 160: List of configured resources, which are available to assign to SSL VPN policies .....273
Figure 161: List of Available Applications for SSL Port Forwarding..................................................276
Figure 162: SSL VPN client adapter and access configuration.........................................................277
Figure 163: Configured client routes only apply in split tunnel mode ...............................................279
Figure 164: SSL VPN Portal configuration ...........................................................................................281
Figure 165: USB Device Detection ........................................................................................................283
Figure 166: USB Share Port...................................................................................................................284
Figure 167: Certificate summary for IPsec and HTTPS management .............................................286
Figure 168: Intel ®AMT.............................................................................................................................287
Figure 169: Wireless Configuration........................................................................................................289
Figure 170: SNMP Trap settings............................................................................................................292

Wireless Controller User Manual
12
Figure 171: Distributed Tunneling..........................................................................................................293
Figure 172: Distributed Tunneling Clients.............................................................................................294
Figure 173: Peer Controller Configuration Request Status................................................................296
Figure 174: Peer Controller Configuration............................................................................................297
Figure 175: WIDS AP Configuration......................................................................................................302
Figure 176: WIDS Client Configuration.................................................................................................305
Figure 177: WDS Group Configuration .................................................................................................307
Figure 178: WIDS Managed AP Configuration ....................................................................................308
Figure 179: WDS AP Link Configuration...............................................................................................309
Figure 180: RADIUS Server Configuration...........................................................................................311
Figure 181: NT Domain Configuration...................................................................................................312
Figure 182: LDAP Authentication Configuration..................................................................................315
Figure 183: Active Directory Configuration...........................................................................................317
Figure 184: POP3 Server Configuration ...............................................................................................319
Figure 185: POP3 CA File List ...............................................................................................................320
Figure 186: Remote Management .........................................................................................................321
Figure 187: SNMP Users, Traps, and Access Control........................................................................323
Figure 188: SNMP system information for this controller...................................................................324
Figure 189: SNMP Traps.........................................................................................................................325
Figure 190: Date, Time, and NTP server setup ...................................................................................328
Figure 191: Facility settings for Logging ...............................................................................................330
Figure 192: Log configuration options for traffic through controller...................................................332
Figure 193: E-mail configuration as a Remote Logging option..........................................................334
Figure 194: Syslog server configuration for Remote Logging (continued).......................................335
Figure 195: VPN logs displayed in GUI event viewer .........................................................................336
Figure 196: SSL VPN logs displayed in GUI event viewer.................................................................337
Figure 197: Restoring configuration from a saved file will result in the current configuration being
overwritten...............................................................................................................................339
Figure 198: Firmware version information and upgrade option.........................................................340
Figure 199: Dynamic DNS configuration...............................................................................................342
Figure 200: Controller diagnostics tools available in the GUI............................................................343
Figure 201: Installing a License..............................................................................................................346
Figure 202: Available Licenses Display after installing a License.....................................................346

Wireless Controller User Manual
13
Chapter 1. Introduction
D-Link Wireless Controller (DWC), DWC-1000, is a full-featured wireless LAN
controller designing for small network environment. The centralized control function
contains various access point management functions, such as fast-roaming, inter-subnet
roaming, automatic channel and power adjustment, self-healing etc. The advanced
wireless security function, including rouge AP detection, captive portal, wireless
intrusion detection system (WIDS), offers a strong wireless network protection avoiding
attacks from hackers. After license upgrade optimal network security is provided via
features such as virtual private network (VPN) tunnels, IP Security (IPsec), Point-to-
Point Tunneling Protocol (PPTP), Layer 2 Tunneling Protocol (L2TP), and Secure
Sockets Layer (SSL). Empower your road warriors with clientless remote access
anywhere and anytime using SSL VPN tunnels.
There are three types of licenses available to activate increased functionality for the
DWC. These licenses are not activated by default.
1. VPN license upgrade enables the following features: ISP Connection types
(PPPoE, PPTP, L2TP, NAT/Transparent mode), Option2/DMZ port, IP
Aliasing, Dynamic Routing (RIP), VPN (PPTP client/server, L2TP client
/server , SSLVPN, OpenVPN) , Intel AMT, Dynamic DNS, Website Filter,
Application Rules, Firewall Rules, UPNP, IGMP proxy, and ALG/SMTP-
ALG
2. AP license upgrades the number of APs controller can manage. You can
upgrade up to 3 AP licenses. By default DWC-1000 can manage up to 6 AP's.
You increase the number by 6 upon each AP license.
3. WCF License is a powerful dynamic web filtering function that can be used
in many places. It is ideal for companies that want to ensure that employees
aren’t wasting time online, schools that want to prevent their students from
viewing questionable online material, or libraries and small businesses like
coffee stores that want to limit customers from accessing certain sites on
their network. You can filter up to 32 categories of websites in total, such as
pornography, gambling, online shopping, and many others. You can easily
block or unblock these categories in just a few clicks. The dynamic WCF
also has a logging feature. Whenever a user tries to access a website that is

Wireless Controller User Manual
14
blocked, or the time stamp of login/logout, the corresponding event will be
logged.
1.1 About this User Manual
This document is a high level manual to allow new D-Link Wireless Controller users
to configure connectivity, WLAN configuration, setup VPN tunnels, establish firewall
rules and AP management and perform general administrative tasks. Typical
deployment and use case scenarios are described in each section. For more detailed
setup instructions and explanations of each configuration parameter, refer to the online
help that can be accessed from each page in the controller GUI.
For this user manual all screenshots are taken with an activated VPN license
which enables VPN / Firewall features.
1.2 Typographical Conventions
The following is a list of the various terms, followed by an example of how that term
is represented in this document:
Product Name: D-Link Wireless Controller
oModel number: DWC-1000
GUI Menu Path/GUI Navigation –Monitoring > Controller Status
Important note –

Wireless Controller User Manual
15
Chapter 2. Configuring Your Network
To enable management access for the browser based web GUI access or SNMP manager,
you must connect the controller to the network. The default IP address/subnet mask of
the controller management interface is 192.168.10.1 / 255.255.255.0 and DHCP server
on the LAN is disabled by default on the controller. You must connect the controller to
a 192.168.10.0 network.
After you configure network information, such as the IP address and subnet mask, and
the controller is physically and logically connected to the network, you can manage and
monitor the controller remotely through Web browser, or an SNMP-based network
management system. Once the initial setup is complete, the DWC-1000 can be managed
through wired interface connected to controller.
Access the controller’s GUI for management by using any web browser, such
as Microsoft Internet Explorer or Mozilla Firefox.
Go to http://192.168.10.1 (default IP address) to display the controller’s
management login screen.
Default login credentials for the management GUI:
Username: admin
Password: admin
If the controller’s LAN IP address was changed, use that IP address in the
navigation bar of the browser to access the controller’s management UI.
2.1 LAN Configuration
Setup > Network Settings > LAN Setup Configuration
By default, in the controller the Dynamic Host Configuration Protocol (DHCP) mode
is set to “None”. The DHCP mode can be set as a DHCP server or DHCP relay. When
DHCP mode is DHCP server, the controller functions as a DHCP server to assign IP
address leases to hosts on the WLAN or LAN. With DHCP, PCs and other LAN devices

Wireless Controller User Manual
16
can be assigned IP addresses, the default gateway, as well as addresses for DNS servers,
Windows Internet Name Service (WINS) servers. The PCs in the LAN are assigned IP
addresses from a pool of addresses specified in this procedure. Each pool address is
tested before it is assigned to avoid duplicate addresses on the LAN.
For most applications the default DHCP and TCP/IP settings are satisfactory. If you
want another PC on your network to be the DHCP server or if you are manually
configuring the network settings of all of your PCs, set the DHCP mode to ‘none’.
DHCP relay can be used to forward DHCP lease information from another LAN device
that is the network’s DHCP server; this is particularly useful for wireless clien ts.
Instead of using a DNS server, you can use a Windows Internet Naming Service (WINS)
server. A WINS server is the equivalent of a DNS server but uses the NetBIOS protocol
to resolve hostnames. The controller includes the WINS server IP address in the DHCP
configuration when acknowledging a DHCP request from a DHCP client.
You can also enable DNS proxy for the LAN. When this is enabled the controller then
as a proxy for all DNS requests and communicates with the ISP’s DNS servers. When
disabled all DHCP clients receive the DNS IP addresses of the ISP.
To configure LAN Connectivity, please follow the steps below:
1. In the LAN Setup page, enter the following information for your controller:
IP address: (factory default: 192.168.10.1).
If you change the IP address and click Save Settings, the GUI will not
respond. Open a new connection to the new IP address and log in again. Be
sure the LAN host (the machine used to manage the controller) has obtained
IP address from newly assigned pool (or has a static IP address in the
controller’s LAN subnet) before accessing the controller via changed IP
address.
Subnet mask: (factory default: 255.255.255.0).
2. In the DHCP section, select the DHCP mode:
None: the controller’s DHCP server is disabled for the LAN
DHCP Server. With this option the controller assigns an IP address within the
specified range plus additional specified information to any LAN device that requests
DHCP served addresses.
If DHCP is being enabled, enter the following DHCP server parameters:

Wireless Controller User Manual
17
DHCP Relay: With this option enabled, DHCP clients on the LAN can receive IP
address leases and corresponding information from a DHCP server on a different
subnet. Specify the Relay Gateway, and when LAN clients make a DHCP request it
will be passed along to the server accessible via the Relay Gateway IP address.
Starting and Ending IP Addresses: Enter the first and last continuous addresses in
the IP address pool. Any new DHCP client joining the LAN is assigned an IP address
in this range. The default starting address is 192.168.10.100. The default ending
address is 192.168.10.254. These addresses should be in the same IP address subnet
as the controller’s LAN IP address. You may wish to save part of the subnet range
for devices with statically assigned IP addresses in the LAN.
Default Gateway (Optional): Enter the IP address of the controller which you want
to make it as a default other than DWC-1000
Primary and Secondary DNS servers: If configured domain name system (DNS)
servers are available on the LAN enter their IP addresses here.
Domain Name: Enter domain name
WINS Server (optional): Enter the IP address for the WINS server or, if present in
your network, the Windows NetBios server.
Lease Time: Enter the time, in hours, for which IP addresses are leased to clients.
Enable DNS Proxy: To enable the controller to act as a proxy for all DNS requests
and communicate with the ISP’s DNS servers, click the checkbox.
Relay Gateway: Enter the gateway address. This is the only configuration parameter
required in this section when DHCP Relay is selected as its DHCP mode
3. Click Save Settings to apply all changes.

Wireless Controller User Manual
18
Figure 1: Setup page for LAN TCP/IP settings (DHCP server)

Wireless Controller User Manual
19
Figure 2: Setup page for LAN TCP/IP settings (DHCP Relay)
When DHCP relay is enabled, DHCP clients on the LAN can receive IP address leases
and corresponding information from a DHCP server on a different subnet. Specify the
Relay Gateway, and when LAN clients make a DHCP request it will be passed along to
the server accessible via the Relay Gateway IP address.