D-Link DSA 5100 - Airspot - Gateway User manual

Manual
Building Networks for People
Enterprise Gateway
D-Link Airspot
DSA-5100
April 2006
v. 1.03

2
Contents
Package Contents ................................................................................3
Introduction...........................................................................................4
Front Panel...........................................................................................5
Rear Panel ...........................................................................................5
Features ...............................................................................................6
Sample Network Setup.........................................................................8
Installation ............................................................................................9
Setting Up the DSA-3100 .....................................................................9
TCP/IP Network Setting .....................................................................10
Internet Access Configuration ............................................................11
Using the Configuration Utility ............................................................13
Networking Basics..............................................................................63
Technical Specifications .....................................................................77
Technical Support...............................................................................78
Warranty.............................................................................................81
Appendix: Windows TCP/IP Setup .....................................................84

3
Package Contents
Internet Explorer Version 6.0 or Netscape Navigator
Version 6.0 and above
Computers with Windows, Macintosh, or Linux-based
operating systems with an installed Ethernet adapter
System Requirements for Configuration:


D-Link DSA-5100 Airspot Enterprise Gateway
CD-ROM with manual
Quick Installation Guide
Three (3) CAT5 UTP/Straight-through (Ethernet) cables
One (1) CAT5 UTP/Cross-over cable
One (1) Console cable
1 PC-Style Power cable to 110 VAC
If any of the above items are missing, please contact your reseller.
1
2
3
4
5
6
7

4
Introduction
The D-Link DSA-5100 Airspot Enterprise Gateway is an advanced network access
control system supporting Ethernet, Fast Ethernet or an IEEE 802.11 wireless LAN
(WLAN) separately and simultaneously.
TheDSA-5100canbeconfigured withastandardHTMLbrowser(i.e.,Internet Explorer,
or Netscape Navigator) operating on Windows 98SE/Me/2000/XP, Macintosh OS 9,
Macintosh OS X (v10.1.5 or later), Linux, or Pocket PC 2000/2002. The DSA-5100
allows the operator to offer wired or wireless networking services and access to the
Internet when used with a switch or wireless access point respectively. The device
features many management settings allowing for private and public access to the
Internet and the necessary privilege mechanisms to permit this usage.

5
Front Panel
Link LEDs - a solid light
indicates a connection
to the network.
Power LED -
A solid light indicates that the
system is ready.
Status LED -
Upon starting up the
DSA-5100, this LED
will blink momentarily.
A solid light indicates
that the system is
ready.
Aux Port -
Reservedforfutureusage.
WAN 2 Port-
Connect to a switch
or cable modem for
Internet or Intranet
access.
Console Port -
Connect to
return the unit to
factory default
settings, or to
reconfigure
system settings. Public LAN Port-
Can be connected to the
open network environment
managed by the system or
WLAN, and requires
authentication before logging
on the Internet.
Private LAN Port-
Can be connected to the
Intranet environment by
switch or Ethernet without
authentication in order to
log on to the Internet.
WAN 1 Port-
Connect to an
ATU-Router of
ADSL, a cable
modem or a
switch for
Internet or
Intranet
access.
Act LEDs - a
blinking light
indicates a activity
on the network.
Power Switch-
ON/OFF switch.
Connector for Power Cord.
Rear Panel

6
Features
Supports IEEE 802.1x
Supports IEEE 802.1q VLAN
Supports IEEE 802.3 ad
WAN interface supports static IP, DHCP client, and PPPoE client
WAN2 interface supports static IP
Supports NAT mode, router mode and bridge mode
Built-in DHCP server
Built-in NTP client
Supports redirect of network data
Supports IPSec(ESP), PPTP and H.323 pass through (under NAT)
Customizable static routing table
Supports virtual server
Supports DMZ server
Supports machine operation status monitoring and reporting system
Supports roaming across networks
Provides several DoS protection mechanisms
Customizable packet filter rules
Customizable walled garden (free surfing area)
The DSA-5100 supports at least 400 on-line users concurrently
Supports POP3, RADIUS, and LDAP authentication mechanisms
Supports two or more authentication mechanisms simultaneously
Can set the time for the user to logon to the system
Can set the user’s idle time
Can specify the connection to MAC address without authentication
Can specify the connection to IP address without authentication

7
Permits or refuses all connections when the WAN interface fails
Supports Web-based logon
Provides several friendly logout methods
Supports RADIUS account roaming
Provides online status monitoring and history traffic
Supports SSL encrypted web administration interface and user logon interface
Customizable user login & logout web interface
Customizableredirectafterusers aresuccessfullyauthenticated duringlogin&logout
Supports Console management interface
Supports SSH remote administration interface
Supports Web-based administration interface
Supports SNMP v2
Supports user’s bandwidth restriction
Supports remote firmware upgrade
Supports built-in user database and RADIUS accounting
Features (continued)

8
A Sample Network Setup

9
Installation Requirements
1. Standard 10/100Base-T, including four network cables with RJ-45
connectors.
2. All PCs need to install the TCP/IP network protocol.
1. Make sure the power of the DSA-5100 is turned off.
2. Connecting the WAN1 and WAN2 ports.
Useoneof thesuppliedstraight-through cablestoconnect theDSA-5100tothenetwork
notmanagedbythe DSA-5100system(suchas andATU router forADSL, theEthernet
port of a cable modem, or a switch or hub on a LAN).
3. Connecting the Public LAN port.
ThePublicLANportis usedtoprovideauthenticationbased Internetaccessfor Ethernet
(with switch) or WLAN (with AP) clients. Use one of the supplied straight-through
Ethernet cables if connecting to a hub or switch. Use the supplied crossover cable if
connecting directly to an AP or PC.
Warning: The Public LAN port cannot connect to a Layer 3 device.
4. Connecting the Private LAN port.
The Private LAN port is used to provide Internet access without authentication for
yourexistingPrivateNetwork. Useoneofthe suppliedstraight-throughEthernetcables
ifconnectingtoahub or switch. Use thesuppliedcrossovercableifconnecting directly
to an AP or PC.
Setting Up the DSA-5100
5. Turn on the power.
Plug the bundled power cord connector into the socket and then turn on the power.
6. Check the LED indicating light.
After the power is ON, the power LED should be lit. The WAN1, WAN2, Public LAN,
and Private LAN LEDs will light up with a valid Ethernet connection.

10
Setting Up the DSA-5100 (continued)
TCP/IP Network Setup
For Windows 98SE/ME/2000/XP, you need to keep the default TCP/IP settings
(“obtainIP andDNSaddressautomatically”) to communicate with theDSA-5100.
The DSA-5100 leases DHCP addresses from the Public and Private LAN ports
for ease of configuration.
For Non-Server Windows operating systems, the default setting for TCP/IP is
“DHCP client,” which will obtain an IP address automatically.
If you wish to use a static IP on the public or private LAN section, or you wish to
check the TCP/IPsetup, please refer to theAppendix – WindowsTCP / IPSetup.

11
Internet Access Configuration
To configure your PCs to use the DSA-5100 for Internet access, follow this
procedure.
For Windows 98SE/2000
Select the Connection
tab, and click the Setup
button.

Please select Start
Menu - Control Panel -
Internet Options.

12
Internet Access Configuration (continued)
Select “I connect through a local area network (LAN)” and click Next.
Ensure all of the boxes on the local area network Internet configuration
screen are unchecked.
Check No, when prompted “Do you want to set up an Internet mail
account now?” Click Next.
Click Finish to close the Internet Connection Wizard. The Internet
Connection Setup is now complete.
Select Start Menu - Control Panel - Network and Internet Connection.
Select the Connection tab, and click the Setup button.
Click Next on the New Connection Wizard screen.
Select Connect to the Internet and click Next.
Select Set up my connection manually and click Next.
Check Connect using a broadband connection that is always on and click
Next.
Click Finish to close the New Connection Wizard. Internet Connection Setup
is now complete.
For Windows XP










Select “I want to set
up my Internet
connection manually,
or I want to connect
through a local Area
network (LAN)” and
click Next.



13
Using the Configuration Utility
To configure the DSA-5100, connect a computer to the Private LAN port of the
DSA-5100 with the supplied crossover Ethernet cable.



First, disable the Access the Internet using a proxy server function. To
disable this function, go to Control Panel > Internet Options > Connections
> LAN Settings and uncheck the enable box.
Start your Microsoft Internet Explorer Web browser program.
Type the IP address of the
DSA-5100 (the default IP
address is 192.168.0.40,
preceded by https://) in the
address field and press Enter.
MakesurethattheIP addresses
of the DSA-5100 and your
computer are in the same
network.
User Name: admin
admin -
The administrator of
the DSA-5100.
Password: admin
Youcanloginasadmin
or as manager.
manager -
Access to the manager
user account only.
User Name: manager
Password: manager
After you log in, click Enter.
Log-in Screen

14
Using the Configuration Utility (continued)
System Configuration > Configuration Wizard
The System Configuration>Configuration Wizard screen will appear if you logged
in as admin. For more information on the Setup Wizard, please see the Installation
Guide, included with your purchase. You can access the configuration features
from this window.
User Authentication > Authentication policies
The User Authentication>Authentication policies screen will appear if you logged
in as a manager. For moreinformationon the Setup Wizard, please see the Installation
Guide. You can access the configuration features from this window.

15
Using the Configuration Utility (continued)
System Configuration > System Information
DSA-5100 is the default system name. You may wish to rename it to
indicate your company, department, or the service you would like to
provide.
System
Name:
Administrator
Info: You can edit the SystemAdministrator’s information here (e.g., name,
phone number, and e-mail).
Succeed
Page: Enter a URL which all users will be re-directed to after a successful
login. This is typically defined as the home page of the host company,
e.g: http://www.dlink.com. No matter which URL a user originally
attempts to connect to, he/she will be directed to the URL defined
here first.
Access
History IP : Specify an IP address to be used by the billing system to connect to
the DSA-5100 to get billing history information.
Remote
Management
IP:
You can allow SSH or HTTPS connections from the WAN for
management purposes. Access is limited to a specific IP address or
network (e.g., 192.168.2.1 might be used for a specifici IP address.
10.2.3.0/24 for a specific IP Network. 24 indicates the number of bits
for the subnet mask).

16
Using the Configuration Utility (continued)
System Configuration > System Information (continued)
SNMP: The DSA-5100 supports SNMP v2 read only data access. The
Administrator can specify the IP address and the SNMP community
name to determine the target of the management information base
(MIB) exported from the DSA-5100.
Time: Enable NTP: The DSA-5100 supports NTP communication protocol
for correct network time. Please specify the IP address or DNS
name of an SNTP server on the system configuration interface.
Time Zone: Set up the time zone for the DSA-5100. The
default is GMT+08:00. (Taipei)
Set Device Date and Time: Manually specify system time.
User Logon
SSL: Allows the admin to choose either https (encrypted username/
password), or http (non-encrypted username/password) as the login
page.

17
Using the Configuration Utility (continued)
System Configuration > WAN1 Configuration > Static IP Mode
Enterthe IP address provided to you by your ISP (Required).
IP address:
Enter the subnet mask provided to you by your ISP. All
devices on the network must share the same subnet
mask (Required).
Subnet
mask:
Enter the gateway IP address provided to you by your
ISP (Required).
Default
Gateway:
Static IP
Address:
Enter the IP address of the primary DNS server
(Required).
Primary
DNS
Server:
Enter the IP address of the secondary DNS server
(Optional).
Secondary
DNS
Server:
This device can be configured in Bridge mode. All
interfaces bind to the same IP. Only one set of IP
addressescanbe usedformanagement.Theadvantage
is that there is no need to readjust any network
infrastructure,justplug anduse.Whenyou clickEnable,
the VLAN function of the Public LAN is disabled.
Bridge
Mode:
Note: WAN1 must have a static IP address in order to utilize the 802.3ad WAN link
aggregation feature. If you cancel the static IP address, then the option of choice for
802.3ad is also canceled. (Please see the WAN2 configuration that follows for
information on configuring 802.3ad.)

18
Using the Configuration Utility (continued)
System Configuration > WAN1 > Dynamic IP Address
Enter the user name and password that is assigned by your ISP.
User Name & Password:
System Configuration > WAN1 > PPPoE
Most DSL users will select this option.
Select this option if there is a DHCP server on the network or to obtain an IP
address automatically from your ISP.
These fields are optional.
Maximum Idle Time & Dial on demand:

19
Using the Configuration Utility (continued)
System Configuration > WAN2 > Static IP Address
Dynamic IP
Address: Choose this option if there is a DHCP server on the unmanaged
network.
Enter the IP address provided to you by your ISP.
IP address:
Enter the subnet mask provided to you by your ISP.All
devicesonthenetwork must share thesamenetmask.
Subnet
mask:
Enter the IP address of the gateway provided to you
by your ISP.
Default
Gateway:
Static IP
Address:
802.3ad: Set WAN2 to 802.3ad mode only if WAN1 is configured for a static IP.
When 802.3ad is enabled, the sum of the bandwidths of WAN1 and
WAN2 is used for the total bandwidth (provided that WAN1 and WAN2
are connected to the same switch(es) that also supports 802.3ad.

20
System Configuration > Public LAN > Global Public LAN Configuration
Using the Configuration Utility (continued)
You can set the system to start or stop IP PNP or Mobile IP on the Public LAN and
Private LAN simultaneously.
1. IP PNP: At the user end, you can use any IP address (with gateway and
DNS address) to connect to the Internet; no matter what the IP address at
the user end is, you can access the network resources properly and
authenticate through the DSA-5100.
2. Mobile IP: If you construct a network environment using several
DSA-5100s, a user can use the same group of IP configurations. When you
roam at different locations, or download data, the connection will not be
disconnected.
Note: This function can only be activated under NAT.
System Configuration > Public LAN > Public LAN Configuration
If you want to configure multiple Authentication networks on the Public LAN, please
select the Enable VLAN option on the public LAN interface.
After the Enable VLAN option is selected, the following screen will appear. Choose
the desired Item and click Edit to enter the VLAN interface configuration screen.