1. DL manuals
  2. D-Link
  3. Other
  4. Airspot DSA-3100
  5. User Manual

D-Link Airspot DSA-3100 User Manual - 1. Front Panel

Manual is about: User Manual

Summary of Airspot DSA-3100

  • Page 1

    Dsa-3100 airspot public/private gateway user manual third edition (april 2004) printed in taiwan recyclable.

  • Page 2: Table of Contents

    Dsa-3100 airspot public/private gateway user manual table of contents 1、introduction............................................................................................................1 a. Product overview .........................................................................................

  • Page 3

    Dsa-3100 airspot public/private gateway user manual 3. Virtual server .................................................................................................47 4. Dmz ................................................................................................................47 5. Free ...

  • Page 4: Table of Figures

    Dsa-3100 airspot public/private gateway user manual table of figures 1、introduction............................................................................................................1 figure 1-1 front panel........................................................................................

  • Page 5

    Dsa-3100 airspot public/private gateway user manual figure 4-22 dynamic ip address configuration .............................................26 figure 4-23 pppoe configuration....................................................................26 figure 4-24 nat mode ...................................

  • Page 6

    Dsa-3100 airspot public/private gateway user manual figure 4-59 port and destination ip redirection ......................................................49 figure 4-60 pass-through host definition ................................................................50 figure 4-61 defining vrtual servers...

  • Page 7

    Dsa-3100 airspot public/private gateway user manual fcc warning this equipment has been tested and found to comply with the limits for a class a digital device, pursuant to part 15 of the fcc rules. These limits are designed to provide reasonable protection against harmful interference when the equi...

  • Page 8: Ntroduction

    1 1 、 i ntroduction a. Product overview the d-link airspot public/private gateway dsa-3100 is a simple to use network access control system. It controls access to the network at your network edge no matter it is a traditional wired ethernet or an ieee 802.11 wireless lan. Even a mixed environment wh...

  • Page 9: 1. Front Panel

    Dsa-3100 airspot public/private gateway user manual 2 c. Identifying external components 1. Front panel figure 1-1 front panel • power indicator • status indicator • wan port indicator • private lan port indicator • public lan port indicator power indicator: the power indicator is kept bright while ...

  • Page 10: 2. Rear Panel

    Dsa-3100 airspot public/private gateway user manual 3 light will light up to notify you that a link is detected on the internal interface. The lower light will be sparkling while data transmission. (table 1-1) table 1-1 monitoring port status item status description power light green system ready gr...

  • Page 11: D. Specification

    Dsa-3100 airspot public/private gateway user manual 4 public lan port: connect to the managed network here. The managed network’s interface maybe is a traditional wired ethernet or an ieee 802.11 wireless lan. All of the users under the public lan port must to login before. If they want to access an...

  • Page 12: E. Key Features

    Dsa-3100 airspot public/private gateway user manual 5 e. Key features figure 1-3 dsa-3100 network view page • manages up to 250 users account data with internal user account database. • manages up to 2000 on-demand users account data with internal on-demand user database • provide 5 local user group...

  • Page 13: Nstallation

    Dsa-3100 airspot public/private gateway user manual 6 2 、 i nstallation a. Requirements • three of standard 10/100base t network cables with rj45 connectors. • tcp/ip network protocol must be installed on all pcs. B. Procedure figure 2-1 connecting the dsa-3100 you can follow those steps below to in...

  • Page 14: 2. Wan Port Connection

    Dsa-3100 airspot public/private gateway user manual 7 1. Ensure the dsa-3100 is power off. Please check the dsa-3100 front panel power indicator is off. 2. Wan port connection use 10/100baset network cable to connect the unmanaged network. The unmanaged network’s interface maybe adsl router’s lan po...

  • Page 15: 1. Tcp/ip Network Setting

    Dsa-3100 airspot public/private gateway user manual 8 the corresponding private lan or public lan indicator should be on while a network device connected to the private lan port or the public lan internal port. C. Configure pcs on your lan after dsa-3100 installation, for each pc, the following proc...

  • Page 16

    Dsa-3100 airspot public/private gateway user manual 9 figure 2-2 control panel 2、select the connection tab, and click the setup button. 3、select "i want to set up my internet connection manually, or i want to connect through a local area network (lan)" and click next. Figure 2-3 internet connection ...

  • Page 17

    Dsa-3100 airspot public/private gateway user manual 10 for windows xp 1、please select star menu - control panel - network and internet connection. 2、select the connection tab, and click the setup button. 3、click next on the new connection wizard screen. 4、select connect to the internet and click nex...

  • Page 18: Uick

    Dsa-3100 airspot public/private gateway user manual 11 3 、 q uick c onfigure you can set up related configurations by following steps to quick configure the dsa-3100. Dsa-3100 provides 2 built-in user accounts: “admin” and “manager” • admin: this user is the administrator in the dsa-3100. • manager:...

  • Page 19

    Dsa-3100 airspot public/private gateway user manual 12 figure 3-1 home - wizard page figure 3-2 user manager page.

  • Page 20: Ystem

    Dsa-3100 airspot public/private gateway user manual 13 4 、 s ystem c onfiguration for using further features of dsa-3100, you have to set up related configurations by the web management interface of dsa-3100. A. Instruction when you enter the web management interface of dsa-3100, you'll find the fol...

  • Page 21: 1. General Features

    Dsa-3100 airspot public/private gateway user manual 14 1. General features the dsa-3100 includes these features and functions. (see table 4-1) table 4-1 dsa-3100 general features and functions features home advanced tools status help wizard port and ip redirect monitor ip list device info system pas...

  • Page 22: B. Home

    Dsa-3100 airspot public/private gateway user manual 15 b. Home this feature provides basic settings of the d-link dsa-3100, including wizard, system, wan, public lan, private lan and user manager. 1. Wizard the wizard guides you through the process of creating a baseline strategy. You can follow the...

  • Page 23

    Dsa-3100 airspot public/private gateway user manual 16 • the setup wizard will help you to finish these seven steps, please click next to continue. Figure 4-3 setup wizard page • step1. Change admin’s password please enter admin’s password and verify password, then click next. Figure 4-4 change admi...

  • Page 24

    Dsa-3100 airspot public/private gateway user manual 17 figure 4-5 choose system’s time zone • step3. Set system information please enter your system information, such as succeed page, external time server, dns server ip on this page, then click next. Succeed page: home page which will appear when us...

  • Page 25

    Dsa-3100 airspot public/private gateway user manual 18 • step4. Select the connection type for wan port it’ depends on your network environment type to select the connection type. Figure 4-7 select the connection type for wan port • if you want to use static ip address, please select static ip addre...

  • Page 26

    Dsa-3100 airspot public/private gateway user manual 19 • when you select dynamic ip address, please click next. Figure 4-9 dynamic ip address configuration • when you select pppoe client, please click next. Figure 4-10 pppoe client configuration • please enter the pppoe client’s user name and passwo...

  • Page 27

    Dsa-3100 airspot public/private gateway user manual 20 figure 4-11 set pppoe client’s information • step5. Configure public lan port please enter the public lan port’s information, such as ip address, subnet mask and enable/disable dhcp server on this network segment, then click next. Figure 4-12 co...

  • Page 28

    Dsa-3100 airspot public/private gateway user manual 21 figure 4-13 set dhcp server information • step6. Select authentication methods dsa-3100 provides four types of authentication methods. Figure 4-14 select authentication methods • local user: user accounts are stored in the embedded database on d...

  • Page 29

    Dsa-3100 airspot public/private gateway user manual 22 please select one, then click next • when you select local user, please enter user name, password, mac (option) and choose group then click add to create one new user account. If you are finish, please click next . Figure 4-15 local user configu...

  • Page 30

    Dsa-3100 airspot public/private gateway user manual 23 • when you select radius, please enter radius server’s ip address/domain name, public lan port number, accounting port number, secret key, accounting service, public lan method, then click next. Figure 4-17 radius user configuration • when you s...

  • Page 31: 2. System

    Dsa-3100 airspot public/private gateway user manual 24 • step7. Setup completed. Please click restart to reboot your dsa-3100. Figure 4-19 setup completed 2. System table 4-2 lists the system configure page field and description that helps you can easy setup system configure (figure 4-20), and don’t...

  • Page 32: 3. Wan

    Dsa-3100 airspot public/private gateway user manual 25 time the dsa-3100 supports the ntp protocol. You must specify a time server’s for dsa-3100. The time zone of the dsa-3100 internal clock is utc (coordinated universal time, formerly know as gmt, greenwich mean time) dns server specify dns server...

  • Page 33

    Dsa-3100 airspot public/private gateway user manual 26 figure 4-21 static ip address configuration dynamic ip address: suitable when wan port can automatically obtain an ip address; for instance when a dhcp server is in the network connected to wan port. You can click the renew button to renew the i...

  • Page 34: 4 Public Lan

    Dsa-3100 airspot public/private gateway user manual 27 4 public lan public lan：select one of the public lan modes and specify ip address, subnet mask then depend on your request, enable or disable dhcp configuration. • mode: the dsa-3100 comes with three public lan modes, namely nat, nat_ip_pnp and ...

  • Page 35: 5. Private Lan

    Dsa-3100 airspot public/private gateway user manual 28 • dhcp configuration: configure dhcp server on public lanport.Thedsa-3100 comes with three dhcp server options (as shown below): disable dhcp server: inactivate dhcp server. Enable dhcp server: activate dhcp server. Dhcp server needs to be confi...

  • Page 36

    Dsa-3100 airspot public/private gateway user manual 29 • mode: the dsa-3100 comes with two private lan port modes, namely nat and router. Nat mode: all outbound ip addresses (the ip addresses must belong to the network connected to private lan port) on private lan port will be translated to the ip a...

  • Page 37

    Dsa-3100 airspot public/private gateway user manual 30 configured properly for successful activation. Related configuration items includes: dhcp pool start ip address, dhcp pool end ip address, lease time, domain name, wins ip address, preferred dns server ip address, alternate dns server ip address...

  • Page 38: 6. User Manager

    Dsa-3100 airspot public/private gateway user manual 31 6. User manager user manager: it’s provides user control, group account, mac address control, default group, management type and login schedule figure 4-31 user manager page.

  • Page 39

    Dsa-3100 airspot public/private gateway user manual 32 • user control：when user control is disabled, only activate mac address control function. . • general account: define session length, idle timer, bandwidth limitation, multiple login and general login schedule. 1.) session length: limit the dura...

  • Page 40

    Dsa-3100 airspot public/private gateway user manual 33 figure 4-32 edit login schedule.

  • Page 41

    Dsa-3100 airspot public/private gateway user manual 34 • guest account: select enable to activate guest account for visitors. Guest accounts list: up to 10 guest accounts could be defined. To activate a particular guest account, simply enter the corresponding password in the “password” column and cl...

  • Page 42

    Dsa-3100 airspot public/private gateway user manual 35 figure 4-33b mac acl control note: to let the functions take effect, you need to click apply, and then save all after enable is selected. • friendly logout: it relates to the pop up windows that will appear when user login success. If you enable...

  • Page 43

    Dsa-3100 airspot public/private gateway user manual 36 (1) local user list: a list of all local user accounts that stored in the embedded database for user account management. You can add, edit, and delete users. A sample list is shown below. Figure 4-35 local users list to delete specific users acc...

  • Page 44

    Dsa-3100 airspot public/private gateway user manual 37 edit account: the figure below display user name, password, mac, group that you can modify while you click the user account on the user name field. Figure 4-37 edit account upload user accounts: besides adding user accounts one by one through th...

  • Page 45

    Dsa-3100 airspot public/private gateway user manual 38 refresh: to display the latest user list, just click refresh to get that information. On-demand user: when you connectthe dsa3100p to the dsa-3100’s console port, there is 2000 on-demand users could be used. By default, the on-demand user databa...

  • Page 46

    Dsa-3100 airspot public/private gateway user manual 39 (2) on-demand users list:a list about on-demand user. A sample list is shown below. Figure 4-40 on-demand user list to delete specific users accounts, click on the checkboxes besides those user accounts then click the delete button. To delete al...

  • Page 47

    Dsa-3100 airspot public/private gateway user manual 40 account expires after __ days you can specify the expires day in this filed, if this user account is not login (first time), and time is expired, this user account will not be use anymore. Session expire after __ minutes you can specify how long...

  • Page 48

    Dsa-3100 airspot public/private gateway user manual 41 figure 4-43 pop3 configuration 3.) radius: to use radius as the public lan method, input the radius server ip address or domain name, public lan port, accounting port, secret key and select the “accounting service” and “public lan method” functi...

  • Page 49

    Dsa-3100 airspot public/private gateway user manual 42 802.1x: dsa-3100 support integrated single sign-on when using combine with the 802.1x enabled aps. By using the integrated radius proxy function in dsa-3100, users can use the eap methods such as eap-md5 or eap-tls to login and get the service d...

  • Page 50

    Dsa-3100 airspot public/private gateway user manual 43 figure 4-45 802.1x device configuration note: if you are using the 802.1x supplicant provided by microsoft, the idle time out will be the longer one of the settings in radius/ap and dsa-3100. Except the idle timer, there is no way for user to lo...

  • Page 51

    Dsa-3100 airspot public/private gateway user manual 44 figure 4-47 external web server protocol: choose from http or https. Server ip: external web server ip. Server port: external web server port number. Login page: login page location. Logout page: logout page location..

  • Page 52: C. Advanced

    Dsa-3100 airspot public/private gateway user manual 45 c. Advanced this feature provides several functions for various network traffic manipulation tasks, including port and ip redirect, pass through, virtual server, dmz, free surfing area, static route and firewall. 1. Port and ip redirect up to 10...

  • Page 53: 2. Pass Through

    Dsa-3100 airspot public/private gateway user manual 46 2. Pass through while each client should be managed, it is sometimes desired to have some exception. For example, servers in the managed network might be given access to the network without user intervention. To allow some clients unmanaged acce...

  • Page 54: 3. Virtual Server

    Dsa-3100 airspot public/private gateway user manual 47 3. Virtual server this feature allows you to define up to 10 virtual servers to enable access to servers connected to public lan and private lan port from outside of the managed network. Depending on the service provided, the service might run o...

  • Page 55: 5. Free Surfing Area

    Dsa-3100 airspot public/private gateway user manual 48 figure 4-51 defining dmz mappings 5. Free surfing area to allow users access to a few sites before they log in, enter the ip addresses or domain name of those sites in the free surfing area list. Up to 20 sites could be defined. The free surfing...

  • Page 56: 6. Static Route

    Dsa-3100 airspot public/private gateway user manual 49 figure 4-52 defining free surfing area hosts 6. Static route in the above example, if you want the 192.168.202.0/24 and 192.168.100.0/24 network to have access to each other, you should add a static route in the dsa-3100 and also in the 192.168....

  • Page 57

    Dsa-3100 airspot public/private gateway user manual 50 figure 4-53 sample static route note ： for the static route to work, the next hop route must also have added a static route to forward all 192.168.0.0/24 ip packets to the dsa-3100, after clicking the apply button, you will see the added route i...

  • Page 58: 7. Firewall

    Dsa-3100 airspot public/private gateway user manual 51 7. Firewall click the filter rule index button to enter the firewall page for each filter. The following explains each configurable item in detail. Figure 4-54 defining filter rule rule: filter rule is a set of filter that determines whether tra...

  • Page 59

    Dsa-3100 airspot public/private gateway user manual 52 caution: if choosing “all”, user won’t be able to select start/end port of source/destination field. Table 4-4 ip filter/firewall page filter and description filter description name to give a name to ip filter rule。 check to enable this rule ena...

  • Page 60: D. Tools

    Dsa-3100 airspot public/private gateway user manual 53 d. Tools this feature provides various tools for system customization and maintenance, including monitor ip list, change password, upload, system, firmware, misc. And restart. 1. Monitor ip list the system will send out the packet regularly to m...

  • Page 61: 2. Change Password

    Dsa-3100 airspot public/private gateway user manual 54 figure 4-56 monitor ip list 2. Change password dsa-3100 provides 2 built-in user accounts: “admin” and “manager” • admin: this user is the administrator in the dsa-3100. • manager: this user has right to manager user account, the rest of functio...

  • Page 62: 3. Upload

    Dsa-3100 airspot public/private gateway user manual 55 figure 4-57 change password note: if unfortunately you lost the administrator’s password, you could still change the administrator’s password from the console interface. 3. Upload dsa-3100 provides upload function that you can customize your web...

  • Page 63

    Dsa-3100 airspot public/private gateway user manual 56 figure 4-58 upload primary key 2) upload login page: to provide a custom user login page, please specify the file name to upload it onto the dsa-3100. If you want to get back to the default user login page, simply click the use default page butt...

  • Page 64

    Dsa-3100 airspot public/private gateway user manual 57 figure 4-61 upload logout page the uploaded custom logout page must contain the following html codes to provide users a place to input user name and password. Figure 4-62 logout page required html code snippet 4) upload error page: to provide a ...

  • Page 65

    Dsa-3100 airspot public/private gateway user manual 58 6) upload logout succeed page: to provide a custom user logout page, please specify the file name to upload it onto the dsa-3100. If you want to get back to the default user logout page, simply click the use default page button. If you want to d...

  • Page 66: 4. System

    Dsa-3100 airspot public/private gateway user manual 59 4. System allow you to make a backup and restore the backup copy to the d-link dsa-3100. This function also enables you to restore the d-link dsa-3100 back to the factory default. Create backup image ： make a backup image file. Restore setting f...

  • Page 67: 5. Firmware

    Dsa-3100 airspot public/private gateway user manual 60 5. Firmware available firmware upgrade of the dsa-3100 could be obtained from d-link support web site. Figure 4-69 firmware upgrade from file caution: firmware upgrades might result in configuration data loss. Some other restrictions might also ...

  • Page 68: 7. Restart

    Dsa-3100 airspot public/private gateway user manual 61 • community: community strings serve as passwords for snmp messages, dsa-3100 allows read-only (ro) as password. If you select enable snmp, enter ip address, community string to the field. Proxy server base on dsa-3100 security management, only ...

  • Page 69: E. Status

    Dsa-3100 airspot public/private gateway user manual 62 e. Status this feature provides system status information and on-line user status, including device info, interface, current users and traffic history. 1. Device info with this feature, you could get all system configurations about dsa-3100 incl...

  • Page 70

    Dsa-3100 airspot public/private gateway user manual 63 note: the date time show on this page is greenwich time (gmt+0:00) table 4-5 system status item and description item description current firmware version the dsa-3100’s current firmware version. System name name of this facility, dsa-3100 is the...

  • Page 71: 2. Interface

    Dsa-3100 airspot public/private gateway user manual 64 manage ssh ip address that connects to wan port to be allowed for configuring dsa-3100 retain days system will keep login user information for 3 days. History email to email the traffic history file to this mail address. External time server the...

  • Page 72

    Dsa-3100 airspot public/private gateway user manual 65 table 4-6 interface status item and description item description mac address wan port’s mac address ip address wan port’s ip address wan subnet mask wan port’s subnet mask.

  • Page 73: 3. Current Users

    Dsa-3100 airspot public/private gateway user manual 66 dns address wan port’s dns ip address mode public lan port modes: nat mode mac address public lan port’s mac address ip address public lan port’s ip address subnet mask public lan port‘s subnet mask public lan dns public lan port’s dns ip addres...

  • Page 74: 4. Traffic History

    Dsa-3100 airspot public/private gateway user manual 67 figure 4-73 current users 4. Traffic history table 4-7 interface history email item and description history email the dsa-3100 keeps traffic history in its volatile memory. To have the traffic history sent to you automatically, enter your e-mail...

  • Page 75: F. Help

    Dsa-3100 airspot public/private gateway user manual 68 if you need to reboot the dsa-3100 and want to keep the log data. If you have an e-mail address entered in the system configuration interface, you will have the log sent to that e-mail everyday. The traffic history is a pure text log. The first ...

  • Page 76

    Dsa-3100 airspot public/private gateway user manual 69 figure 4-76 help page.

  • Page 77

    Dsa-3100 airspot public/private gateway user manual 70

  • Page 78

    Dsa-3100 airspot public/private gateway user manual 71.

  • Page 79

    Dsa-3100 airspot public/private gateway user manual 72.

  • Page 80: Appendix 1

    Dsa-3100 airspot public/private gateway user manual 73 appendix 1 windows tcp/ip setup if using the default dsa-3100 settings, and the default windows 95/98/me/2000 tcp/ip settings, no changes need to be made. By default, the dsa-3100 will act as a dhcp server, automatically providing a suitable ip ...

  • Page 81

    Dsa-3100 airspot public/private gateway user manual 74 check tcp/ip setting - windows 2000 1、select control panel - network and dial-up connection. 2、right click the local area connection icon and select properties. 3、select the tcp/ip protocol for your network card. 4、click on the properties button...

  • Page 82: Appendix 2

    Dsa-3100 airspot public/private gateway user manual 75 if your pc is already configured, check with your network administrator before making the following changes. 1、enter the dsa-3100's ip address in the default gateway field and click ok. (your lan administrator can advise you of the ip address th...

  • Page 83

    Dsa-3100 airspot public/private gateway user manual 76 bgcolor="#e4e4e4"> echo $msg; ?> : ( echo $uname; ?>) style="font-family: arial; font-size: 10pt">.

  • Page 84

    Dsa-3100 airspot public/private gateway user manual 77 login ok page include "../include/init.Inc"; include "../include/function.Inc" ; $flogout_mode = getvalue($db_path . "/flogout"); ?> function popone(url) { window.Open(url,'','directories=0,height=200,width=440,resizable=0,scorllbar=0,status=0,m...

  • Page 85

    Dsa-3100 airspot public/private gateway user manual 78 } return; } if ($flogout_mode=="enabled") {?> } else {?> } ?> hello,[ echo $uid; ?>] my login success please close this window or click this button to if ($flogout_mode=="enabled") {?> } else { ?> }?> , thank you! Login time: dateobj=new date();...

  • Page 86

    Dsa-3100 airspot public/private gateway user manual 79 logut ok page include "../include/init.Inc" ; include "../include/function.Inc" ; ?> onload=settimeout("window.Close()",5000);>.

  • Page 87

    Dsa-3100 airspot public/private gateway user manual 80 echo getvalue("$db_path/system_name") ?> logout success..