D-Link Airspot DSA-3100 User manual

DSA-3100
Airspot Public/Private Gateway
User Manual
Third Edition (April 2004)
Printed In Taiwan
RECYCLABLE

DSA-3100 Airspot Public/Private Gateway User Manual
Table of Contents
1、Introduction............................................................................................................1
a. Product Overview ............................................................................................1
b. Unpacking.........................................................................................................1
c. Identifying External Components ..................................................................2
1. Front Panel.......................................................................................................2
2. Rear Panel.........................................................................................................3
d. Specification .....................................................................................................4
e. Key Features.....................................................................................................5
2、Installation..............................................................................................................6
a. Requirements....................................................................................................6
b. Procedure..........................................................................................................6
1. Ensure the DSA-3100 is power off..................................................................7
2. WAN port connection.......................................................................................7
3. Private LAN port connection..........................................................................7
4. Public LAN port connection ...........................................................................7
5. Power up ...........................................................................................................7
6. Check the LED.................................................................................................7
c. Configure PCs on Your LAN...........................................................................8
1. TCP/IP network setting ...................................................................................8
2. InternetAccess Configuration........................................................................8
3、Quick Configure...................................................................................................11
4、System Configuration..........................................................................................13
a. Instruction ......................................................................................................13
1. General Features............................................................................................14
b. Home...............................................................................................................15
1. Wizard.............................................................................................................15
2. System .............................................................................................................24
3. WAN ................................................................................................................25
4 Public LAN......................................................................................................27
5. Private LAN....................................................................................................28
6. User Manager.................................................................................................31
c. Advanced.........................................................................................................45
1. Port and IP Redirect......................................................................................45
2. Pass Through..................................................................................................46

DSA-3100 Airspot Public/Private Gateway User Manual
3. Virtual Server.................................................................................................47
4. DMZ................................................................................................................47
5. Free SurfingArea...........................................................................................48
6. Static Route.....................................................................................................49
7. Firewall ...........................................................................................................51
d. Tools ................................................................................................................53
1. Monitor IP List...............................................................................................53
2. Change Password...........................................................................................54
3. Upload.............................................................................................................55
4. System .............................................................................................................59
5. Firmware.........................................................................................................60
6. Misc. ................................................................................................................60
7. Restart.............................................................................................................61
e. Status ...............................................................................................................62
1. Device Info......................................................................................................62
2. Interface..........................................................................................................64
3. Current Users.................................................................................................66
4. Traffic History................................................................................................67
f. Help..................................................................................................................68
Appendix 1..........................................................................................................73
Windows TCP/IP Setup.....................................................................................73
Appendix 2..........................................................................................................75
Source Code........................................................................................................75

DSA-3100 Airspot Public/Private Gateway User Manual
Table of Figures
1、Introduction............................................................................................................1
Figure 1-1 Front Panel.........................................................................................2
Figure 1-2 Rear Panel..........................................................................................3
Figure 1-3 DSA-3100 Network View Page.........................................................5
2、Installation..............................................................................................................7
Figure 2-1 Connecting the DSA-3100.................................................................7
Figure 2-2 Control Panel ...................................................................................10
Figure 2-3 Internet Connection Wizard...........................................................11
3、Quick Configuration............................................................................................12
Figure 3-1 Home-Wizard Page .........................................................................13
Figure 3-2 User Manager Page .........................................................................13
4、Working with Manager.......................................................................................14
Figure 4-1 Home-Wizard Page .........................................................................14
Figure 4-2 Home-Wizard Page..........................................................................16
Figure 4-3 Setup Wizard Page..........................................................................16
Figure 4-4 ChangeAdmin's Password.............................................................17
Figure 4-5 Choose System’s Time Zone...........................................................17
Figure 4-6 Set System Information...................................................................18
Figure 4-7 Select the Connection Type for WAN Port....................................18
Figure 4-8 Static IPAddress configuration......................................................19
Figure 4-9 Dynamic IPAddress configuration................................................19
Figure 4-10 PPPoE Client configuration..........................................................19
Figure 4-11 Set PPPoE Client’s Information...................................................20
Figure 4-12 Configure Public LAN Port..........................................................20
Figure 4-13 Set DHCPserver information.......................................................21
Figure 4-14 Select Public LAN Method ...........................................................21
Figure 4-15 Local User configuration ..............................................................22
Figure 4-16 POP3 User configuration..............................................................22
Figure 4-17 RADIUS User configuration.........................................................22
Figure 4-18 LDAPUser configuration.............................................................23
Figure 4-19 Setup Completed............................................................................23
Figure 4-20 System Configuration Page..........................................................25
Figure 4-21 Static IPAddress Configuration...................................................26

DSA-3100 Airspot Public/Private Gateway User Manual
Figure 4-22 Dynamic IPAddress Configuration.............................................26
Figure 4-23 PPPoE Configuration....................................................................26
Figure 4-24 NAT Mode ....................................................................................27
Figure 4-25 NAT_IP_PNPMode ....................................................................27
Figure 4-26 Router Mode ................................................................................27
Figure 4-27 DHCPServer Disable....................................................................28
Figure 4-28 DHCPServer Enable.....................................................................28
Figure 4-29 DHCPRelay...................................................................................29
Figure 4-30 NAT Mode......................................................................................29
Figure 4-31 Router Mode ..................................................................................30
Figure 4-32 DHCPDisable ..............................................................................30
Figure 4-33 DHCPServer..................................................................................31
Figure 4-34 DHCPRelay...................................................................................31
Figure 4-35 User Manager Page.............................................................................32
Figure 4-36 User Control...................................................................................33
Figure 4-37 GuestAccount................................................................................33
Figure 4-38 GuestAccount List ......................................................................34
Figure 4-39 Guest Account ACL.......................................................................34
Figure 4-40 MACAddress Control ..................................................................35
Figure 4-41a MACACL Control......................................................................35
Figure 4-41b MACACL Control......................................................................35
Figure 4-42 Default Group................................................................................36
Figure 4-43 Local Configuration......................................................................36
Figure 4-44 Local Users List ...........................................................................37
Figure 4-45Add Users .......................................................................................38
Figure 4-46 EditAccount.......................................................................................38
Figure 4-47 Upload UserAccount.....................................................................39
Figure 4-48 Receipt Information ..........................................................................40
Figure 4-49 On-Demand User Configuration..................................................41
Figure 4-50 On-Demand User List ...................................................................42
Figure 4-51 Local User Group Configuration.................................................42
Figure 4-52 POP3 Configuration......................................................................43
Figure 4-53 RADIUS Configuration ..............................................................43
Figure 4-54 802.1x Enable.................................................................................45
Figure 4-55 802.1x Device Configuration ........................................................46
Figure 4-56 LDAPConfiguration.....................................................................47
Figure 4-57 Login Schedule Configuration .....................................................47
Figure 4-58 Edit Login Schedule......................................................................48

DSA-3100 Airspot Public/Private Gateway User Manual
Figure 4-59 Port and Destination IPRedirection......................................................49
Figure 4-60 Pass-Through host definition................................................................50
Figure 4-61 Defining Vrtual Servers .......................................................................51
Figure 4-62 Defining DMZ mappings .....................................................................52
Figure 4-63 Defining Free Surfing Area Hosts .........................................................53
Figure 4-64 Sample Static Route ............................................................................54
Figure 4-65 Defining Filter Rule.............................................................................55
Figure 4-66 Edit Filter Rule...................................................................................55
Figure 4-67 Monitor IPList...................................................................................57
Figure 4-68 Change Password................................................................................58
Figure 4-69 Upload Login Page..............................................................................59
Figure 4-70 Login page required HTML code snippet...............................................59
Figure 4-71 Upload Logout Page............................................................................59
Figure 4-72 Logout page required HTML code snippet.............................................60
Figure 4-73 Upload Login error Page .....................................................................60
Figure 4-74 Upload Login Succeed Page .................................................................60
Figure 4-75 Upload Logout Succeed Page................................................................61
Figure 4-76 System Settings...................................................................................61
Figure 4-77 Firmware Upgrade From File...............................................................62
Figure 4-78 System Status .....................................................................................63
Figure 4-79 Interface Status ..................................................................................66
Figure 4-80 Current Users.................................................................................67
Figure 4-81 Traffic History ...............................................................................67
Figure 4-81 Help.................................................................................................68

DSA-3100 Airspot Public/Private Gateway User Manual
FCC Warning
This equipment has been tested and found to comply with the limits for a ClassAdigital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy and, if
not installed and used in accordance with this user’s guide, may cause harmful interference to
radio communications. Operation of this equipment in a residential area is likely to cause
harmful interference in which case the user will be required to correct the interference at his
own expense.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two
conditions: (1) This device may not cause harmful interference, and (2) this device must
accept any interference received, including interference that may cause undesired operation.
CE Mark Warning:
This is a ClassAproduct. In a domestic environment this product may cause radio interference
in which case the user may be required to take adequate measures.
Warnung!
Dies ist ein Produkt der Klasse A. Im Wohnbereich kann dieses Produkt Funkstoerungen
verursachen. In diesem Fall kann vom Benutzer verlangt werden, angemessene Massnahmen
zu ergreifen.
Precaución!
Este es un producto de Clase A. En un entorno doméstico, puede causar interferencias de
radio, en cuyo case, puede requerirse al usuario para que adopte las medidas adecuadas.
Attention!
Ceci est un produit de classe A. Dans un environnement domestique, ce produit pourrait
causer des interférences radio, auquel cas l`utilisateur devrait prendre les mesures adéquates.
Attenzione!
Il presente prodotto appartiene alla classe A. Se utilizzato in ambiente domestico il prodotto
può causare interferenze radio, nel cui caso è possibile che l`utente debba assumere

1
1 、 INTRODUCTION
a. Product Overview
The D-Link Airspot Public/Private Gateway DSA-3100 is a simple to use network access
control system. It controls access to the network at your network edge no matter it is a
traditional wired Ethernet or an IEEE 802.11 wireless LAN. Even a mixed environment where
wired Ethernet and WLAN co-exist could be managed.
The DSA-3100 is compatible with almost every client operating system as long as the system
supports TCP/IP and a capable HTML browser such as Internet Explorer. To name a few,
Windows 9x/Me/NT/2000/XP, Linux, Mac OS and Pocket PC 2000/2002 are compatible with
the DSA-3100. With the single device solution provided by the DSA-3100, your network will be
well guarded right at its edge.
b. Unpacking
Open the shipping carton of DSA-3100, and this carton should contain the following items:
• Airspot Public/Private Gateway DSA-3100
• CD-ROM (Containing Manual and Warranty)
• DSA-3100 Quick Installation Guide
• DSA-3100 User Manual
• Ethernet (CAT5 UTP/Straight-Through) cable x 2
• Ethernet (CAT5 UTP/Cross over) cable x 1
• Console Cable x 15V DC, 3A Power Adapter

DSA-3100 Airspot Public/Private Gateway User Manual
2
c. Identifying External Components
1. Front Panel
Figure 1-1 Front Panel
• Power Indicator
• Status Indicator
• WAN port Indicator
• Private LAN port Indicator
• Public LAN port Indicator
Power Indicator:
The power indicator is kept bright while DSA-3100 is power on.
Status Indicator:
The Status indicator is kept bright while system ready, and it’s sparking while system rebooting
or firmware upgrading.
WAN port Indicator:
The WAN indicator is kept bright while you plug the cable end into a WAN port.
Private LAN port Indicator:
The Private LAN Indicator is kept bright while you plug the cable end into a Private LAN port.
Public LAN port Indicator:
The Public LAN indicator is kept bright while you plug the cable end into an Public LAN port.
The indicator ordered from left to right be for WAN, Private LAN, Public LAN and every
indicator has two LED lights. When you plug the cable end into a connector port, the upper

DSA-3100 Airspot Public/Private Gateway User Manual
3
light will light up to notify you that a link is detected on the internal interface. The lower light will
be sparkling while data transmission. (Table 1-1)
Table 1-1 Monitoring Port Status
Item Status Description
Power light Green System ready
Green System ready
Status light Sparkling System rebooting or Firmware Upgrading
WAN Green
On line
Private LAN Green On line
Link light
Public LAN Green On line
WAN Sparkling Data transmission
Private LAN Sparkling Data transmission
Activity light
Public LAN Sparkling Data transmission
2. Rear Panel
Figure 1-2 Rear Panel
• WAN Port
• Public LAN Port
• Private LAN Port
• DC Power Outlet
• Console Port
WAN Port:
Connect to the Unmanaged Network here. The Unmanaged Network’s interface maybe is
ADSL Router’s LAN port, Cable Modem’s LAN port or Intranet Switch.

DSA-3100 Airspot Public/Private Gateway User Manual
4
Public LAN Port:
Connect to the Managed Network here. The Managed Network’s interface maybe is a
traditional wired Ethernet or an IEEE 802.11 wireless LAN. All of the users under the Public
LAN Port must to login before. If they want to access any network resource.
Private LAN Port:
Connect to the PC, hub or switch to this port. Private LAN port for connecting a Trusted
Network onto the DSA-3100, which permits access to WAN, and LAN from Private LAN
without Public LAN, but must under the Firewall rules. You can put the Web server, Mail server
or FTP server under the Private LAN Port.
DC Power Outlet:
Connect the supplied power adapter here.
Console Port:
If you need to configure the admin password, please connect one PC to this port and change
above items with the terminal linking applications on the PC, e.g. HyperTerminal. (96000,
8-N-1)
d. Specification
• CPU: Intel Xscale IXP420@266MHz
• System Memory:
-32MB DRAM
- 16 MB Flash
• Ethernet MAC: D-Link DL10030B Ethernet 10/100Base-TX MAC+PHY
• Switch IC: ICPlus 175A
• Power: 3A/5V

DSA-3100 Airspot Public/Private Gateway User Manual
5
e. Key Features
Figure 1-3 DSA-3100 Network View Page
• Manages up to 250 users account data with internal user account database.
• Manages up to 2000 on-demand users account data with internal on-demand user database
• Provide 5 local user groups to define different bandwidth for each local user group.
• Supports at least 50 on-line users.
• ID/Password based Public LAN and Authorization, which could be combined with MAC
address locking to provide stricter access control.
• Supports POP3, RADIUS and LDAP external Public LAN mechanism. Only one of them
could be chosen at once.
• Provides on-line status monitoring and history traffic data review.
• SSL protected access to the administration interface and user Public LAN interface.
• Customizable user login, logout, login success, login error, logout success web page.
• Customizable user logout timer.
• Customizable target URL for users who successfully get authorization.
• Console mode administration interface via serial console port.
• Supports NAT for managed clients.
• Supports static IP address, DHCP client and PPPoE client on WAN port interface.
• DHCP server built-in to service managed clients.
• High speed policy routing engine built-in.
• Customizable peremptory traffic redirection. (IP and Port Redirect)
• NTP client built-in.
• Provides a Private LAN port for connecting a Trusted Network onto the DSA-3100, which
permits access to WAN without Public LAN.
• Supports external DSA-3100P printer to print On-demand user’s ID and password. (Optional)

DSA-3100 Airspot Public/Private Gateway User Manual
6
2 、 INSTALLATION
a. Requirements
• Three of standard 10/100Base T network cables with RJ45 connectors.
• TCP/IP network protocol must be installed on all PCs.
b. Procedure
Figure 2-1 Connecting the DSA-3100
You can follow those steps below to install the DSA-3100
1. Ensure the DSA-3100 is power off
2. WAN port connection
3. Private LAN port connection
4. Public LAN port connection
5. Power up
6. Check the LED

DSA-3100 Airspot Public/Private Gateway User Manual
7
1. Ensure the DSA-3100 is power off.
Please check the DSA-3100 front panel power indicator is off.
2. WAN port connection
Use 10/100BaseT network cable to connect the Unmanaged Network. The Unmanaged
Network’s interface maybeADSL Router’s LAN port, Cable Modem’s LAN port or Intranet
Switch port.
3. Private LAN port connection
Private LAN port is connected to a Trusted Network without Public LAN. Use 10/100BaseT
network cable to connect your Admin PC, or Web Server, Mail Server with internal Switch or
Hub that connected to the Private LAN Port on DSA-3100. If you want to directly connect the
DSA-3100 to this PC or the Server or the wireless AP, you have to use a Cross Over Line.
4. Public LAN port connection
Public LAN port is connected to a Managed Network with Public LAN. Use 10/100BaseT
network cable to connect your Client PC with the internal Switch or Hub that connected to the
Public LAN Port on DSA-3100. If you want to directly connect the DSA-3100 to this PC or the
wireless AP, you have to use a Cross Over Line.
5. Power up
Connect the supplied power adapter to the DSA-3100 and power up.
6. Check the LED
The Power Indicator and WAN Indicator should be ON, if the corresponding WAN Port was
connected to an Unmanaged Network.

DSA-3100 Airspot Public/Private Gateway User Manual
8
The corresponding Private LAN or Public LAN Indicator should be ON while a network device
connected to the Private LAN Port or the Public LAN Internal Port.
c. Configure PCs on Your LAN
After DSA-3100 installation, for each PC, the following procedure may need to be configured:
• TCP/IP network setting
• Internet Access configuration
1. TCP/IP network setting
If Your PC is Windows 95/98/ME/2000/XP, uses the default TCP/IP network setting, no
changes need to be made. Just restart your PC.
DSA-3100 will act as a DHCP Server, automatically providing a suitable IP Address (and
related information) to each PC when the PC starts.
For all non-Server versions of Windows, the default TCP/IP network setting is to act as a
DHCP client. In Windows, it called Obtain an IP address automatically.
If using fixed IP Address on your LAN, or you wants to check your TCP/IP setting, refer to
Appendix 1 - Windows TCP/IP Setup.
2. Internet Access Configuration
To configure your PCs to use the DSA-3100 for Internet access, follow this procedure.
For Windows 9x/2000
1、Please select Star Menu - Control Panel - Internet Options.

DSA-3100 Airspot Public/Private Gateway User Manual
9
Figure 2-2 Control Panel
2、Select the Connection tab, and click the Setup button.
3、Select "I want to set up my Internet connection manually, or I want to connect through
a local Area network (LAN)" and click next.
Figure 2-3 Internet Connection Wizard
4、Select "I connect through a local area network (LAN)" and click Next.
5、Ensure all of the boxes on the following Local area network Internet Configuration screen
are unchecked.
6、Check the No, when promoted "Do you want to set up an Internet mail account now?"
7、Click Finish to close the Internet Connection Wizard. Setup is now completed.

DSA-3100 Airspot Public/Private Gateway User Manual
10
For Windows XP
1、Please select Star Menu - Control Panel - Network and Internet Connection.
2、Select the Connection tab, and click the Setup button.
3、Click Next on the New Connection Wizard screen.
4、Select Connect to the Internet and click Next.
5、Select Set up my connection manually and click Next.
6、Check Connect using a broadband connection this always on and click Next.
7、Click Finish to close the New Connection Wizard. Setup is now completed.

DSA-3100 Airspot Public/Private Gateway User Manual
11
3 、 QUICK CONFIGURE
You can set up related configurations by following steps to quick configure the DSA-3100.
DSA-3100 provides 2 built-in user accounts: “admin” and “manager”
• admin: This user is the administrator in the DSA-3100.
• manager: This user has right to manager user account, the rest of function is denied.
(For admin quick configure)
Step1. Please ensure that system admin connects his PC to Private LAN Port of the
DSA-3100, by default DSA-3100 is configurable only by PCs that are connected to
Private LAN Port.
Step2. Open admin PC's browser. (Ex: Microsoft Internet Explore)
Step3. Enter https://192.168.0.40 in the Address or Location box to connect to the Web
Management Interface.
Step4. Please enter the default username: admin in the Username field and password: admin
in the Password field.
Step5. Select Home - Wizard. You should see a screen like the following (Figure 3-1):
Step6. Click Run Wizard to through the process of creating a baseline Strategy. For more
information, see the “Wizard” section on page 16
(For manager quick configure)
Step1. Please ensure that manager connects his PC to Private LAN Port of the DSA-3100, by
default DSA-3100 is configurable only by PCs that are connected to Private LAN Port.
Step2. Open manager PC's browser. (Ex: Microsoft Internet Explore)
Step3. Enter https://192.168.0.40 in the Address or Location box to connect to the Web
Management Interface.
Step4. Please enter the default username: manager in the Username field and password:
manager in the Password field.
Step5. You should see this page User Manager (Figure 3-2). For more information, see the
“User Manager” section on page 39

DSA-3100 Airspot Public/Private Gateway User Manual
12
Figure 3-1 Home - Wizard Page
Figure 3-2 User Manager Page

DSA-3100 Airspot Public/Private Gateway User Manual
13
4 、 SYSTEM CONFIGURATION
For using further features of DSA-3100, You have to set up related configurations by the Web
Management Interface of DSA-3100.
a. Instruction
When you enter the Web Management Interface of DSA-3100, you'll find the following main
features on top of the screen (Figure 4-1), such as Home, Advanced, Tools, Status, Help.
Figure 4-1 Home – Wizard Page