D-Link DRO-210i User manual

DRO - 210i User Manual
DRO - 210i
LOAD BALANCING ROUTER
Users Guide
Rev 1.0 (July 2006)

DRO - 210i User Manual
TABLE OF CONTENTS
1........................................................................................................................................................ 1 - 1
I NTRODUCTION TO DRO - 210i ................................................................................................ 1 - 1
1.1 Overview......................................................................................................................... 1 - 1
1.2 Product Features.......................................................................................................... 1 - 2
1.2.1 Hardware Features .................................................................................................... 1 - 2
1.2.2 Soft ware Features ...................................................................................................... 1 - 3
2........................................................................................................................................................ 2 - 1
INSTALLING DRO - 210i .............................................................................................................. 2 - 1
2.1 About the ro uter ........................................................................................................... 2 - 1
2.1.1 Front Panel............................................................................................................... 2 - 2
2.1.2 REAR PANEL.......................................................................................................... 2 - 3
2.2 Unpacki ng the DRO - 210i............................................................................................ 2 - 4
2.2.1 Mounting the DRO - 210i ........................................................................................... 2 - 4
2.2.2 Power requirements................................................................................................... 2 - 5
2.3 Connecting the DRO - 210i to your network........................................................... 2 - 5
2.4 Configuration via Web Browser............................................................................... 2 - 7
3........................................................................................................................................................ 3 - 1
DRO - 210i WEB CONFIGURATION.......................................................................................... 3 - 1
3.1 Interface .......................................................................................................................... 3 - 1
3.1.1 Interface - Port Config .............................................................................................. 3 - 1
3.1.2 Interface - LAN ......................................................................................................... 3 - 2
3.1.3 Interface - WAN1 ...................................................................................................... 3 - 4
3.1.4 Inter face - WAN2 ...................................................................................................... 3 - 8
3.1.5 Interface - AutoBackup ............................................................................................. 3 - 9
3.1.6 Interface - LoadBalancing ....................................................................................... 3 - 11
3.2 Routing.......................................................................................................................... 3 - 12
3.2.1 Routing – Static ....................................................................................................... 3 - 12
3.2.2 Routing - Dynamic .................................................................................................. 3 - 13
3.2.3 Routing – Policy - Based .......................................................................................... 3 - 15
3.3 Firewall .......................................................................................................................... 3 - 17
3.3.1 Firewall – Interface Configuration.......................................................................... 3 - 17
3.3.2 Firewall - Policy ...................................................................................................... 3 - 18
3.4 NAT ................................................................................................................................ 3 - 28
3.4.1 NAT – Interfac e Configuration ............................................................................... 3 - 28
3.4.2 NAT - NAT Configuration ..................................................................................... 3 - 29
3.4.3 NAT - NAT Exception............................................................................................ 3 - 31
3.4.4 NAT - Virtual Server/NAPT................................................................................... 3 - 32
3.4.5 NAT - SIP - ALG ...................................................................................................... 3 - 34
3.5 VPN ................................................................................................................................ 3 - 35
3.5.1 VPN - IPSec............................................................................................................ 3 - 35
3.5.2 VPN - Peer to Peer.................................................................................................. 3 - 37
3.5.3 VPN - IPSec Server ................................................................................................. 3 - 41
3.5.3.1 VPN - IPSec Server - Server ...................................................................... 3 - 41
3.5.3.2 VPN - IPSec Server – RemoteId ............................................................... 3 - 45
3.5.4 VPN - Tunnel Table................................................................................................ 3 - 46
3.6 QOS ................................................................................................................................ 3 - 47
3.6.1 QOS - Q - Discipline ................................................................................................. 3 - 47
3.6.2 QOS - Filter Configuration..................................................................................... 3 - 52

DRO - 210i User Manual
3.6.3 QOS - TOS/DiffServ............................................................................................... 3 - 54
3.7 Misc ................................................................................................................................ 3 - 56
3.7.1 Misc - DHCP ........................................................................................................... 3 - 56
3.7.1.1 Misc - DHCP - DHCP Server ...................................................................... 3 - 56
3.7.1.2 Misc - DHCP - Static M apping ................................................................... 3 - 59
3.7.1.3 Misc – DHCP - DHCP Relay...................................................................... 3 - 60
3.7.2 Misc - DNS Proxy ................................................................................................... 3 - 61
3.7.3 Misc - Time ............................................................................................................. 3 - 62
3.7.4 Misc - Sys Log ........................................................................................................ 3 - 63
3.8 Tools .............................................................................................................................. 3 - 64
3.8.1 Tools - Password ..................................................................................................... 3 - 64
3.8.2 Tools - System ........................................................................................................ 3 - 65
3.8.3 Tools - Upload ........................................................................................................ 3 - 66
3.8.4 Tools – Ping Test .................................................................................................... 3 - 67
3.8.5 Tools – Remote Access ........................................................................................... 3 - 68
3.9 Status............................................................................................................................ 3 - 69
3.9.1 Status – Device Info................................................................................................ 3 - 69
3.9.2 Status – Traffic ........................................................................................................ 3 - 71
3.9.3 Status – Route Tab le ............................................................................................... 3 - 72
3.9.4 Status – NAT Table................................................................................................. 3 - 73
3.9.5 Status – IPSec Status ............................................................................................... 3 - 74
3.9.6 Status – Log Tables ................................................................................................. 3 - 74
3.9.6.1 Status – Log Tables – Session Log........................................................... 3 - 75
3.9.6.2 Status – Log Tables – Blocking Log.......................................................... 3 - 76
3.9.6.3 Status – Log Tables – Intrusion Log......................................................... 3 - 78
3.9.6.4 Status – Log Tables – Black List............................................................... 3 - 79
3.9.6.5 Status – Log Tables – Black List............................................................... 3 - 81
3.9.6.6 Status – Log Tables – IPSec Log.............................................................. 3 - 82
3 .10 Help ................................................................................................................................ 3 - 83
APPENDIX ................................................................................................................................... 3 - 84
Password recovery:...................................................................................................................... 3 - 84

Introduction to DRO - 210i
DRO - 210i User Manual Page 1 - 1
1
INTRODUCTION TO DRO - 210i
1.1 Overvie w
Nowadays LAN, WAN and Internet connectivity are becoming the
common currency for business. Intranets and the Internet are carrying a
growing percentage of business transactions for data & voice
communication. For SOHO businesses and enterprise branch of fices
interconnecting the company, Intranet and the Internet is becoming a
competitive necessity. Such enterprise businesses also require solutions
that provide reliable, secure and high - performance access to their private
WANs and the Internet with flexib ility to upgrade to new services easily
in the near future. Service providers are interested in meeting this demand
for new network services to capitalize on opportunities with the growing
SOHO & enterprise market.
Dlink DRO - 210i is a broadband router targeted at SOHO and SMB users.
Th e router uses XScale architecture (ARM core with NPEs) from INTEL
(IXP425). The router supports load - balancing, along with firewall access
control, secure VPN connectivity, and quality of service and remote
management features in a single, easy - to use box.
The Load - Balancing feature is an ideal solution for businesses requiring
uninterrupted internet connectivity. With dual Internet connections, the
total available bandwidth doubles in capacity. Also if one Internet
connection goe s down, the other Internet connection automatically takes
control to ensure continuous internet connectivity.

Introduction to DRO - 210i
DRO - 210i User Manual Page 1 - 2
1.2 Product Features
1.2.1 Hardware Features
2 LAN Port s
The product is equipped with 2 dedicated 10/100 Ethernet LAN Ports to
connect user computers to the network .
1 DMZ Port
The product is equipped with one 10/100 Ethernet DMZ Port to connect
the company servers (eg. Web server, FTP Server). This Port can be
optionally reconfigured as a LAN Port.
Dual WAN Ports
The product is equiped with two 10/100 Ethernet WAN Ports. When only
WAN link is required, the other WAN Port can be optionally reconfigured
to operate as a LAN Port.
Ethernet WAN Interfaces
The Ethernet WAN interface can be used to connect to the internet using
any broadband modem. It can be configured in Static, D ynamic or PPPoE
mode; thus enabling inter - operability with any ISP.
1. Static: Statically define the Interface address and connect to the
WAN world.
2. Dynamic: Using the DHCP client, it will get dynamically obtain
an IP Address from the ISP to get connected to the broadband
network.
3. PPPoE: Point to Point link over Ethernet. It is the widely used
mode to connect broadband network.

Introduction to DRO - 210i
DRO - 210i User Manual Page 1 - 3
1.2.2 Software Features
Routing
DRO - 210 i supports static, dynamic and policy - based routing .
Static Routing
St atic routes are special routes that the network administrator
manually enters into the router configuration. You could build an
entire network based on static routes.
RIP
The Routing Information Protocol, or RIP, as it is more commonly
called, is one of the most enduring of all routing protocols. DRO -
210i supports both the versions of V1 and V2.
Policy - Based
Policy - based routing helps to define custom policies for routing
traffic. For example, policy routes can be defined to route all HTTP
traffic th rough WAN1 and E - mail traffic through WAN2).
Load balancing
User can connect to multiple WAN networks and the load can be
distributed be tween these multiple WAN interfaces to get good bandwidth.
If any interface goes down the traffic will be diverted ba ck to the
connected interfaces.
Firewall
The DRO - 210i also includes a firewall which has the following features:
· Access Policies
· Network Address Translation (NAT/NAPT) with Popular ALG
Support.
· Inbound and Outbound policies for all the interfaces.
· Intru sion detection system (IDS)
· Denial of Service (DoS) and Distributed Denial of Service (DDoS)

Introduction to DRO - 210i
DRO - 210i User Manual Page 1 - 4
· Filter like IP address, port, domain name, Mac address, URL Keyword
& File Extension etc.,
NAT /VirtualServer
When a TCP or UDP p acket is received by the Router the IP address in
this packet will be translated between the WAN and LAN side of the
Router if this option is enabled. DRO - 210i supports all the combinations
of NAT models like Many to Many, Many to One and One to One .
It also supports Virtual Server (or PortForwarding) enablingremote
access to the Company Servers (HTTP/FTP etc) from WAN.
SIP - ALG
VoIP enables voice communication to use the same infrastructure as data
in your network; thus resulting in significant cost reductions. Session
Initiation Protocol (SIP) is widely used for VoIP calls, and does not work
behind NAT. The SIP - ALG in the router will ensure that SIP calls can be
successfully established, even when NAT is performed at the router.
VPN
Using the DRO - 210i integrated VPN, you can provide a secure connection
between widely separated office networks or securely link telecommuters
or travellers to the office network. An encrypted traffic tunnel is created
between DRO - 210i protected networks or between a DRO - 210i and third
party VPN products that support IPSec.
Quality of Service
QoS helps in effectively using your available bandwidth by providing
support to:
· Rate Limit the bandwidth used by a specific traffic
· Prioritize critical applications such a VoIP traffic

Introduction to DRO - 210i
DRO - 210i User Manual Page 1 - 5
Tools
DRO - 210 i supports va rious tools to manage and monitor the device.
Syslog
The Router can send the Syslog messages to the configured server to
aid in network administration.
NTP
Router allows the user to configure the system date and time. User
can select to use either man ual or SNTP settings to set the time.
Configurationupload/download
This tool allows the user to sav e t he configurations onto the product
as well as it can be downloaded to the local hard disk. The same
configuration can be uploaded to the device.
Web B ased Configuration and Management
The product provides SSL based secure, user friendly Web Pages to
configure and manage the device and the network .
Internet Access
The produ ct supports the TCP/IP protocol which is the protocol language
for the Interne t. DRO - 210i Router allows everyone connected to the LAN
to access the Internet.
NAT feature is required at WAN Interface to access Internet through any
WANconnection.
Chapter 2 and 3 will give the detail info on how to install/configure the
DRO - 210 i r outer.

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 1
2
INSTALLING DRO - 210i
2.1 About the router
This section will introduce hardware of the router.
Front View
Rear View

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 2
2.1.1 Front Panel
Module
Status
Description
Power
On
ON
OFF
WAN1 LED
Ready
ON: Link and Protocol is UP
OFF: Link or Protocol is DOWN
WAN2 LED
Ready
ON: Link and Protocol is UP
OFF: Link or Protocol is DOWN
WAN1 LED
Power
LED
WAN2 LED

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 3
2.1.2 REAR PANEL
Interface Description
RESET
Restore the Factory Default Setting s in the
router
LAN
10/100 Mbps Ethernet LAN Port s (RJ - 45)
LAN/DMZ
10/100 Mbps Ethernet Port (RJ - 45) -
configurableas LAN or DMZ Port
LAN/WAN2
10/100Mbps Ethernet Port (RJ - 45) -
configurable as LAN or WAN2 Port
WAN1
10/100Mbps Ethernet WAN2 Port (RJ - 45)
CONSOLE
DB - 9 Console Port
5V/3A DC INPUT
Input Voltage 5V, 3A DC
Input AC 230v
OFF
ON
RESET
5V/3A DC
INPUT
LAN
LAN/DMZ
LAN/WAN2
WAN1
CONSOLE

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 4
2.2 Unpacking the DRO - 210i
DRO - 210i Package Contents
The DRO - 210i package contains the following items:
· The DRO - 210i router
· 1 Blue cross - over Ethernet Cables
· 2 Grey Straight Ethernet Cables
· 1 power cord
· AC - DC Adapter
· User Manual and QIG (CD)
· 4 Stack Rubber Feet
2.2.1 Mounting the DRO - 210i
The DRO - 210i is a Desktop mount type router which can be installed as a
standalone unit on any stable surface. For standalone, make sure the unit
has at least 1.5 in. (3.75 cm) of clearance on each side to allow for
adequate airflow and cooling.
Dimensions
235(L) x 165(B) x 33 (H) mm
Weight
0.45 Kg.

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 5
2.2.2 Powerrequirements
· Power consumption: 6W
· AC input voltage: 100 to 2 40 VAC
· AC input current: 0 .6 A
· Freq uency: 50 ~60 Hz
Environmental specifications
v Operating Temperature: 32 to 104
0
F (0 to 55
0
C)
v Storage Temperature: - 13 to 158
0
F ( - 25 to 70
0
C)
v Humidity: 5 to 95% non - condensing
2.3 Connecting the DRO - 210i to your network
Once the initial configuration of the DRO - 210i is completed, you can
connect the DRO - 210i between your internal network and the internet .
Make the necessary power connections. The power LED will turn ON to
indicate proper operation.
· Connect the LAN interface to the hub or switch co nnected to your
internal network using cross cable.
· Computers that act as servers (Mail Server, FTP Servers etc) to provide
Internet services should be connected to DMZ Port using an Ethernet
Cable.
· Connect the WAN1/WAN2 interfaces to the ISP for Internet
Connectivity.
An example deployment scenario of DRO - 210i is depicted in the diagram
below:

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 6
1.1.1.1.1 I
NTE
RNE
T
WAN
DOT
FIBER
DOT
OPTIMUX
DIC - 2000FE2VL
2 Mbps Lea sed Line
D - Link Interface
Converter
D - Link ADSL Modem
DSL - 502T
DRO - 210i
WAN1
WAN2
LAN
DMZ
D - LINK
SWITCH
DES - 3208i+
DE S - 3208i+
Internet

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 7
2.4 Conf iguration via Web Browser
With some advance preparation, it’s easy to install DRO - 210i and begin
using it. The following topics have been organized as a set of guidelines to
ensure that your computer and your network are ready for it.
1. This Router is a r eady to use flash programmed board. (The Image is
loaded on to the flash).
2. Router supports WEB based management feature to configure the
board. Internet Explorer (Version 5.5 and above) is the preferred browser.
Connect the PC to the LAN port of Route r and open internet explorer
browser with the following
“https://<IP address > of Router’s LAN interface ” i.e.
https://<192.168.100.254 > connection on Internet Explorer. This will
bring the login page of Router on the browser.
Default LAN IP is 192.168 .100.254 (User can change this IP address
using Web).

Installing DRO - 210i
DRO - 210i User Manual Page 2 - 8
3. It will ask for username and password.
User name: “admin”
Password: “admin”
D - Link Welcome Page will appear and you can browse through the web
page .

DRO - 210i Web Configuration
DRO - 210i User Manual Page 3 - 1
3
DRO - 210i WEB CONFIGURATION
The Web configuration is simple and easy to use. It will help in quick
setting of the Router to connect to ISP (Internet Service Provider) with
few steps required. It will guide user step by step to configure the
passwor d and WAN settings of DRO - 210i.
3.1 Interface
3.1.1 Interface - Port Config
This Web Page is used to configure the optional ports of router. Port 1 and
Port 2 are always configured as LAN and user cannot configure these
ports. Port 3 can be configured as LAN or D MZ by selecting them in the
drop down menu. Port 4 can be configured as LAN or WAN2 by
selecting them in the drop down menu. By Default the Port1, Port2 &
Port3 will be LAN and Port4 will be WAN2.

DRO - 210i Web Configuration
DRO - 210i User Manual Page 3 - 2
Click on Interface > Port Config to get the web p age as shown below:
3.1.2 Interface - LAN
The LANSettings allows you to configure the current IP address and
subnet mask assigned to the Router.
As an example, if your LAN network is to be a 192.168.100.x network
with a subnet mask of 255.2 55.255.0, you might assign the Router an IP
address of 192.168.100.254 and configure the Router' s DHCP server to
assign addresses in the range between 192.168.100.2 to 192.168.100.100.
The default gateway setting for computers on the LAN side will be the
Router' s IP address - in this case, 192.168.100.254.
When you enable DHCP and renew the IP address at computers connected
to the LAN side of the Router, they will automatically be assigned IP
addresses from the range 192.168.100.2 to 192.168.100.100.

DRO - 210i Web Configuration
DRO - 210i User Manual Page 3 - 3
Sa ving all of this information to the DRO - 210i's flash and restarting it will
make this IP addressing scheme current. In Windows, when the user
enables DHCP on the NIC he/she will obtain an IP address automatically,
upon restarting the computer(s) connected on the LAN side of the Router.
User’s computer(s) will automatically be assigned an IP address (es) from
the range 192.168.100.2 to 192.168.100.100. As an alternative, user could
disable the DHCP server and manually update the IP address, subnet mask
and d efault gateway information for each computer on the LAN side.
It is recommended that if user needs to change the IP addressing scheme
for the Router, he/she can configure its DHCP server with the appropriate
IP address range and subnet mask, and then assi gn an IP address from the
same range. This way, a computer on the LAN side of network can always
get the proper network addressing information by DHCP from the Router
simply by being restarted.
Click on Interface > LAN to get the web page as shown below:

DRO - 210i Web Configuration
DRO - 210i User Manual Page 3 - 4
3.1.3 Interface - WAN1
For WAN1 settings Click on Interfaces > WAN1 and the web page opens
as shown below:
This page allows you to configure the WAN interface. The WAN interface
can operate in 3 modes: Static, Dynamic and PPPoE.
WAN Settings - Static
Select this option to set static IP information. You will need to enter the IP
address, subnet mask and gateway address provided to you by your ISP.
The default gateway field specified here will be used by Load
balancing feature to rout e packets through this interface.