D-Link DRO-250i User manual

DRO-250i Router
Users Guide
Rev 1.0(MAY 2006)

Introduction to DRO-250i
DRO-250i User Manual
1
Table of contents
INTRODUCTION TO DRO-250i ......................................................4
1.1 Overview....................................................................................4
1.2 Product Features........................................................................5
1.2.1 Hardware Features...............................................................5
1.2.2 Software Features................................................................7
INSTALLING DRO-250i ...............................................................12
2.1 About the router .......................................................................12
2.1.1 Front Panel ...................................................................13
2.1.2 Rear Panel.....................................................................15
2.2 Unpacking the DRO-250i.........................................................15
2.1.3 Mounting the DRO-250i.................................................16
2.3 Connecting the DRO-250i to your network ..............................17
2.4 Configuration via Web Browser................................................18
CONFIGURATION THROUGH WEB............................................20
3.2 Interfaces..........................................................................20
3.2.1 Interfaces -LAN..............................................................20
3.2.2 Interfaces - WAN 1.........................................................22
3.2.3 Interfaces – WAN2.........................................................23
3.2.3.1 Mode Settings...........................................................23
3.2.3.2 WAN2-Dial Up..........................................................24
3.2.3.2.1Dial Up-Connection Settings.................................24
3.2.3.2.2Dial Up-Dial out.....................................................27
3.2.3.2.3Dial Up-Dial In.......................................................30
3.2.3.3 WAN2-Dial................................................................33
3.2.4 Interfaces –WAN3..........................................................35
3.2.5 Interfaces – WAN 4........................................................39
3.2.5.1 WAN 4 - Dial Out......................................................39
3.2.5.2 WAN 4 - Dial In Configuration ..................................41
3.2.5.3 WAN 4 - Dial In User Account..................................42
3.2.5.4 WAN 4 - Modem Configuration.................................43

Introduction to DRO-250i
DRO-250i User Manual
2
3.2.5.5 WAN 4 - Serial Port Settings....................................45
3.2.6 Interfaces -BACKUP CONFIG .......................................46
3.2.7 Interfaces -DMZ/WAN3..................................................48
3.3 Routing .............................................................................49
3.4 Advanced..........................................................................55
3.4.1 Advanced - DHCP..........................................................55
3.4.1.1 DHCP - DHCP Servers.............................................55
3.4.1.2 DHCP -DHCP Reservation.......................................58
3.4.2 Advanced -DNS Proxy...................................................59
3.4.3 Advanced -NAT..............................................................60
3.4.3.1 NAT - Interface Configuration...................................60
3.4.3.2 NAT - NAT Configuration..........................................61
3.4.4 NAT - Advanced NAT ....................................................63
3.4.5 Advanced - Virtual Server..............................................64
3.4.6 Advanced –FIREWALL..................................................66
3.4.6.1 Firewall-Interface Configuration...............................66
3.4.6.2 Firewall- POLICY......................................................68
3.4.6.3 Firewall – IDS Configuration.....................................71
3.4.7 Advanced -VPN .............................................................74
3.4.7.1 VPN – VPN-IPSEC...................................................74
3.4.7.2 VPN - Tunnel............................................................76
3.4.7.3 VPN -Tunnel Table...................................................80
3.4.8 Advanced - Load Balancing...........................................81
3.4.8.1 Load Balancing-Policy Based...................................81
3.4.8.2 Load Balancing-Weight Based.................................83
3.4.9 Advanced – Link Detection............................................84
3.4.10Advanced – SNMP.........................................................86
3.4.10.1SNMP-SNMP Configuration.....................................86
3.4.10.2SNMP-TRAP Configuration......................................89
3.5 Multicast............................................................................91
3.5.1 Multicast – Multicast.......................................................91
3.5.2 Multicast - Multicast Routing.........................................92
3.6 QoS...................................................................................94
3.6.1 QoS –Q-Discipline .........................................................94
3.6.2 QOS - Filter Configuration .............................................99
3.7 Tool.................................................................................101
3.7.1 Tools - Admin...............................................................101

Introduction to DRO-250i
DRO-250i User Manual
3
3.7.2 Tools - System.............................................................102
3.7.3 Tools - Upload..............................................................103
3.7.4 Tools - Ping Test..........................................................104
3.7.5 Tools - Time.................................................................105
3.7.6 Tools - System Log......................................................107
3.7.7 Tools - Remote Access................................................108
3.8 Status..............................................................................110
3.8.1 Status - Device Info......................................................110
3.8.2 Status - Route Table....................................................112
3.8.3 Status – Multicast.........................................................113
3.8.4 Status - NAT Info .........................................................115
3.8.5 Status - IPsec Status ...................................................116
3.8.6 Status - Log..................................................................118
3.8.6.1 Status - Log - Intrusion Log....................................118
3.8.6.2 Status –Log- Blocking Log......................................120
3.8.6.3 Status- Log- Session Log.......................................121
3.8.6.4 Status- Log - IPSec Log .........................................122
3.8.6.5 Status - Log - Black list...........................................123
3.8.7 Status – Traffic.............................................................124
3.8.8 Status – ISDN..............................................................125
3.8.9 Status - WAN4 Dial......................................................126
3.9 HELP ..............................................................................128
APPENDIX...................................................................................129
Password Recovery:....................................................................129
Warranty Policy…………………………………………………………………………130

Introduction to DRO-250i
DRO-250i User Manual
4
INTRODUCTION TO DRO-250i
1.1 Overview
Nowadays LAN, WAN and Internet connectivity are becoming the
common currency for business. Intranets and Internet are carrying a
growing percentage of business transactions for data & voice
communication. For SOHO businesses and enterprise branch offices
interconnecting the company, Intranet and Internet is becoming a
competitive necessity. Such enterprise businesses also require solutions
that provide reliable, secure and high-performance access to their private
WANs and the Internet with flexibility to upgrade to new services easily
in the near future. Service providers are interested in meeting this demand
for new network services to capitalize on opportunities with the growing
SOHO & enterprise market.
D-Link’s DRO-250i Router is designed for small and medium enterprises.
It has 1 LAN port and 4 WAN ports.
The supported WAN Ports are:
- 2 Mbps V.35 interface.
- 64/128kbps ISDN Leased/Dialup interface.
- Ethernet/PPPoE WAN (re-configurable as DMZ) interface.
- Aux port
It supports Manual and Automatic Back-Up feature. When a primary
interface goes down all the traffic can be redirected through the configured
backup interface.
DRO-250i Router is targeted for low cost market in SOHO segment. This
router uses XScale architecture (ARM core with NPEs) from INTEL
(IXP425). The hardware is designed with 5 Interfaces (V.35, LAN, ISDN,
& WAN3/DMZ, Aux Port). Any interface can be made as primary WAN
interface. Similarly any interface can be made as backup WAN interface.
For example V.35 is used as Primary interface for WAN connectivity
CHAPTER1

Introduction to DRO-250i
DRO-250i User Manual
5
which ideally gives bandwidth up to 2Mbps. ISDN WAN interface can be
a backup interface which gives 128kbps bandwidth
1.2 Product Features
1.2.1 Hardware Features
LAN Port
The Product is equipped with an auto-negotiated 10/100 (Ethernet) RJ-45
interface for connecting the router to the LAN.
Multiple WAN Ports
The Product has 4 WAN ports.
V.35 WAN Interface
V.35 can be connected to 2 Mbps Leased Modem.
ISDN WAN Interface
ISDN S/T Port is connected to either a dial up line or a dedicated leased
line. It also supports bandwidth on Demand (BOD). Following protocols
are only supported within ISDN sub system:
Layer 2 protocol: HDLC
Layer 3 protocol: Trans
Dial on Demand
The dial on demand feature allows the product to automatically place
a call to a remote node via ISDN WAN port whenever there is traffic
coming from any workstation on the LAN to that remote site.

Introduction to DRO-250i
DRO-250i User Manual
6
Auto Hang-up
The product can be configured for Auto Hang-up with idle times
which can hang-up the ISDN WAN connection when the line stays
idle for predetermined time duration. To disable this feature set idle-
timeout to 0 in ISDN Configuration page.
Bandwidth on Demand
This product supports the Bandwidth on Demand feature.
PPP/MLPPP
ISDN WAN port uses Sync-PPP for PPP negotiation with the ISP.
64 Kbps line uses only Sync-PPP. MLPPP is used in conjunction
with 128 Kbps line.
Ethernet WAN Interface
This Ethernet interface can be used to connect the WAN interface by using
any broadband modem. It can be connected in the following 3 modes.
1. Dynamic connection: Using the DHCP client, it will get connect
to the broadband.
2. PPPoE: Point to Point link over Ethernet. It is the widely used
mode to connect broadband network.
3. Static: Statically define the Interface address and connect to the
WAN world.
Auxiliary WAN Interface
This is one of the legacy interfaces to connect the WAN. This interface
can be used as backup interface to any primary interfaces (Ethernet WAN,
V.35).

Introduction to DRO-250i
DRO-250i User Manual
7
Bandwidth available with WAN
V.35 2Mbps
ISDN 64Kbps, 128Kbps & Bandwidth on Demand
Ethernet Wan 100Mbps
Aux Port 56Kbps
1.2.2 Software Features
Routing
DRO-250i supports both the dynamic and static routing. As part of
dynamic routing it supports RIP and OSPF routing protocols.
RIP
The Routing Information Protocol, or RIP, as it is more commonly
called, is one of the most enduring of all routing protocols.DRO-250i
supports both the versions of V1 and V2.
OSPF
Short for Open Shortest Path First, an interior gateway routing
protocol developed for IP networks based on the shortest path first or
link-state algorithm. DRO-250 supports both the version of OSPF.
Static Routing
Static routes are special routes that the network administrator
manually enters into the router configuration. You could build an
entire network based on static routes.

Introduction to DRO-250i
DRO-250i User Manual
8
Load balancing
User can connect to multiple WAN networks and the load can be
distributed to between these multiple WAN interfaces to get good
bandwidth. If any interface goes down the traffic will be diverted back to
the connected interfaces.
Firewall
The DRO-250i also includes a firewall which has the following features:
•Access Policies
•Network Address Translation (NAT/NAPT) with Popular ALG
Support.
•Inbound and Outbound policies for all the interfaces.
•Intrusion detection system (IDS)
•Denial of Service (DoS) and Distributed Denial of Service (DDoS)
•Filter like IP address, port, domain name, Mac address, URL etc.,
•Virtual servers
•Port forwarding
VPN
Using the DRO-250i integrated VPN, you can provide a secure connection
between widely separated office networks or securely link telecommuters
or travellers to the office network. An encrypted traffic tunnel is created
between DRO-250i protected networks or between a DRO-250i and third
party VPN products that support IPSec.
NAT
When a TCP or UDP packet is received by the Router the IP address in
this packet will be translated between the WAN and LAN side of the
Router if this option is enabled. DRO-250i supports all the combinations
of NAT models like Many to Many, Many to One, One to Many, One to
One

Introduction to DRO-250i
DRO-250i User Manual
9
Quality of Service
Router provides QoS mechanisms pertaining to differentiated services. In
an IP network QoS defines the ability to compensate for traffic
characteristics without compromising average throughput.
QoS enables you to provide better service to certain flows. This is done by
either raising the priority of a flow or limiting the priority of another flow
SNMP
DRO-250i supports SNMPV1, V2 &V3 to allow user to monitor the
device through any SNMP manager. This feature allows network
administrators to manage network performance, find and solve network
problems, and plan for network growth.
Multicasting
Internet Protocol (IP) multicast is a bandwidth-conserving technology that
reduces traffic by simultaneously delivering a single stream of information
to thousands of corporate recipients and homes. Applications that take
advantage of multicast include videoconferencing, corporate
communications, distance learning, and distribution of software, stock
quotes, and news. DRO-250i routers are enabled with Protocol
Independent Multicast (PIM) and other supporting multicast protocols like
IGMP
Tools
DRO-250i supports various tools to manage and monitor the device.

Introduction to DRO-250i
DRO-250i User Manual
10
Syslog
The Router can send the Syslog messages to the configured server to
aid in network administration.
NTP
Router allows the user to configure the system date and time. User
can select to use either manual or SNTP settings to set the time.
Configuration upload/download
This tool allows the user to save the configurations onto the product
as well as it can be downloaded to the local hard disk. The same
configuration can be uploaded to the device.
Web Based Configuration and Management
The product provides SSL based secure, user friendly Web Pages to
configure and manage the device and the network.
Internet Access
The product supports the TCP/IP protocol which is the protocol language
for the Internet. DRO-250i Router allows everyone connected to the LAN
to access the Internet.
NAT feature is required at LAN side to access ISP through any WAN
connection.

Introduction to DRO-250i
DRO-250i User Manual
11
Chapter 2 and 3 will give the detail info on how to install/configure the
DRO-250i router.

Installing DRO-250i
DRO-250i User Manual
12
INSTALLING DRO-250i
2.1 About the router
This section will introduce hardware of the router.
Front View
Rear View
CHAPTER2

Introduction to DRO-250i
DRO-250i User Manual
13
3.1.1 Front Panel
710
24 811
13 5 6 9 12
F R
13 14
PWR WAN1 WAN2 LAN WAN3 SWT
Number Module Status Description/Designation
1 Power On ON
OFF
2 WAN1 (V.35) Ready ON: Interface is up
OFF: Interface is down
3 WAN1 (V.35) Link
/ACT ON: There is activity on this interface
OFF: There is no activity
on this interface
Blinking: There is activity
through v.35
interface
4 WAN2
(ISDN) Link ON : Physical link is up OFF : Physical link is
down
5 WAN2
(ISDN) B1 ON: B1 Connected OFF: B1 Disconnected

Installing DRO-250i
DRO-250i User Manual
14
6 WAN2
(ISDN) B2 ON: B2 Connected. OFF: B2 Disconnected
7
LAN Link ON : Physical link is up
OFF: Physical link is
down
8 LAN Tx ON : Transmission Activity
on
OFF: Transmission Activity
off
9 LAN Rx ON: Receive Activity on
OFF: Receive Activity off
10 WAN3/DMZ Link ON : Physical link is up
OFF : Physical link is
down
11 WAN3/DMZ Tx ON : Transmission Activity
on
OFF: Transmission Activity
off
12 WAN3/DMZ Rx ON: Receive Activity on
OFF: Receive Activity off
13 SWT F Restores the factory
settings
14 SWT R Hard reset for board
Interfaces Description
V.35 DTE WAN1 WAN Port
LAN Ethernet 10BaseT for LAN Port (RJ-45)
WAN3/DMZ WAN3 Port/ De Militarized Zone Port
ISDN ISDN Port
AUX Aux Port

Introduction to DRO-250i
DRO-250i User Manual
15
3.1.2 Rear Panel
Interface Description
INPUT 85-265 VAC Input Voltage 230 VAC
2.2 Unpacking the DRO-250i
DRO-250i Package Contents
The DRO-250i package contains the following items:
•The DRO-250i router
•1 Blue cross-over Ethernet Cables
•3 Grey Straight Ethernet Cables
•1 V.35 Cables
•1 power cord
•User Manual (CD)
•Quick Install Guide
2.1.2

Installing DRO-250i
DRO-250i User Manual
16
3.1.3 Mounting the DRO-250i
The DRO-250i can be mounted on any stable surface. It requires 1 U of
vertical space in the rack. The DRO-250i Router can be installed as a
standalone unit on any stable surface. For standalone, make sure the unit
has at least 1.5 in. (3.75 cm) of clearance on each side to allow for
adequate airflow and cooling.
Dimensions
440.96 x 194.81 x 44 mm
(Rack mount, 1U standard)
Weight 2.5 Kg.
Power requirements
•Power consumption: 6.6W
•AC input voltage: 85 to 265 VAC
•AC input current: 1.6 A
•Frequency: 50 Hz
Environmental specifications
•Operating Temperature: 32 to 104 0 F (0 to 55 0C)
•Storage Temperature: -13 to 158 0F (-25 to 70 0 C)
•Humidity: 5 to 95% non-condensing
2.2.1

Introduction to DRO-250i
DRO-250i User Manual
17
2.3 Connecting the DRO-250i to your network
Once the initial configuration of the DRO-250i is completed, you can
connect the DRO-250i between your internal network and the internet.
•Make the necessary power connections. The power LED will turn ON
to indicate proper operation.
•Connect the LAN interface to the hub or switch connected to your
internal network using cross cable.
•Connect the V.35 DTE WAN Port to a 2 Mbps Leased-Line modem.
•Computers that act as servers (Mail Server, FTP Servers etc) to provide
Internet services should be connected to DMZ Port using an Ethernet
Cable.
•Connect the WAN2 interface to the ISDN NT1.
•Connect an analog modem to the Aux Port.
Power-OFF before inserting the V.35 cable
Internet
Internal Network
Hub or switch
DRO-250i
DNT-NT1
DLM-G2100V
WAN 3
ISDN WAN 2
V.35
GLB-502T
LAN

Installing DRO-250i
DRO-250i User Manual
18
2.4 Configuration via Web Browser
With some advance preparation, it’s easy to install DRO-250i and begin
using it. The following topics have been organized as a set of guidelines to
ensure that your computer and your network are ready for it.
1. This Router is a ready to use flash programmed board. (The Image is
loaded on to the flash).
2. Router supports WEB based management feature to configure the
board. Internet Explorer (Version 5.5 and above) is the preferred browser.
Connect the PC to the LAN port of Router and open internet explorer
browser with the following
“https://<IP address > of Router’s LAN interface ” i.e.
https://<192.168.100.254 > connection on Internet Explorer. This will
bring the login page of Router on the browser.
Default LAN IP is 192.168.100.254 (User can change this IP address
using Web).
3. It will ask for username and password.
User name: “admin”
Password: “admin”

Introduction to DRO-250i
DRO-250i User Manual
19
D-Link Welcome Page will appear and you can browse through the web
page.