1. DL manuals
  2. D-Link
  3. Network Router
  4. DRO-210i
  5. User Manual

D-Link DRO-210i User Manual

Other manuals for DRO-210i: User Manual
Manual is about: LOAD BALANCING ROUTER

Summary of DRO-210i

  • Page 1

    Dro-210i user manual dro-210i load balancing router users guide rev 1.0 (july 2006).

  • Page 2

    Dro-210i user manual table of contents 1........................................................................................................................................................ 1-1 introduction to dro-210i .................................................................................

  • Page 3

    Dro-210i user manual 3.6.3 qos - tos/diffserv...............................................................................................3-54 3.7 misc................................................................................................................................3-56 3.7.1 misc - d...

  • Page 4: Introduction to Dro-210I

    Introduction to dro-210i dro-210i user manual page 1-1 1 introduction to dro-210i 1.1 overview nowadays lan, wan and internet connectivity are becoming the common currency for business. Intranets and the internet are carrying a growing percentage of business transactions for data & voice communicati...

  • Page 5: 1.2 Product Features

    Introduction to dro-210i dro-210i user manual page 1-2 1.2 product features 1.2.1 hardware features 2 lan ports the product is equipped with 2 dedicated 10/100 ethernet lan ports to connect user computers to the network. 1 dmz port the product is equipped with one 10/100 ethernet dmz port to connect...

  • Page 6: 1.2.2

    Introduction to dro-210i dro-210i user manual page 1-3 1.2.2 software features routing dro-210i supports static, dynamic and policy-based routing. Static routing static routes are special routes that the network administrator manually enters into the router configuration. You could build an entire n...

  • Page 7: Nat/virtual Server

    Introduction to dro-210i dro-210i user manual page 1-4 · filter like ip address, port, domain name, mac address, url keyword & file extension etc., nat/virtual server when a tcp or udp packet is received by the router the ip address in this packet will be translated between the wan and lan side of t...

  • Page 8: Tools

    Introduction to dro-210i dro-210i user manual page 1-5 tools dro-210i supports various tools to manage and monitor the device. Syslog the router can send the syslog messages to the configured server to aid in network administration. Ntp router allows the user to configure the system date and time. U...

  • Page 9: Installing Dro-210I

    Installing dro-210i dro-210i user manual page 2-1 2 installing dro-210i 2.1 about the router this section will introduce hardware of the router. Front view rear view.

  • Page 10: 2.1.1

    Installing dro-210i dro-210i user manual page 2-2 2.1.1 front panel module status description power on on off wan1 led ready on: link and protocol is up off: link or protocol is down wan2 led ready on: link and protocol is up off: link or protocol is down wan1 led power led wan2 led.

  • Page 11: 2.1.2

    Installing dro-210i dro-210i user manual page 2-3 2.1.2 rear panel interface description reset restore the factory default settings in the router lan 10/100mbps ethernet lan ports (rj-45) lan/dmz 10/100mbps ethernet port (rj-45) - configurable as lan or dmz port lan/wan2 10/100mbps ethernet port (rj...

  • Page 12: Dro-210I Package Contents

    Installing dro-210i dro-210i user manual page 2-4 2.2 unpacking the dro-210i dro-210i package contents the dro-210i package contains the following items: · the dro-210i router · 1 blue cross-over ethernet cables · 2 grey straight ethernet cables · 1 power cord · ac-dc adapter · user manual and qig (...

  • Page 13: 2.2.2

    Installing dro-210i dro-210i user manual page 2-5 2.2.2 power requirements · power consumption: 6w · ac input voltage: 100 to 240 vac · ac input current: 0.6 a · frequency: 50~60 hz environmental specifications v operating temperature: 32 to 104 0 f (0 to 55 0 c) v storage temperature: -13 to 158 0 ...

  • Page 14: 1.1.1.1.1

    Installing dro-210i dro-210i user manual page 2-6 1.1.1.1.1 i nte rne t wan dot fiber dot optimux dic-2000fe2vl 2 mbps leased line d-link interface converter d-link adsl modem dsl-502t dro-210i wan1 wan2 lan dmz d-link switch des-3208i+ des-3208i+ internet.

  • Page 15

    Installing dro-210i dro-210i user manual page 2-7 2.4 configuration via web browser with some advance preparation, it’s easy to install dro-210i and begin using it. The following topics have been organized as a set of guidelines to ensure that your computer and your network are ready for it. 1. This...

  • Page 16

    Installing dro-210i dro-210i user manual page 2-8 3. It will ask for username and password. User name: “admin” password: “admin” d-link welcome page will appear and you can browse through the web page ..

  • Page 17: Dro-210I Web Configuration

    Dro-210i web configuration dro-210i user manual page 3-1 3 dro-210i web configuration the web configuration is simple and easy to use. It will help in quick setting of the router to connect to isp (internet service provider) with few steps required. It will guide user step by step to configure the p...

  • Page 18: 3.1.2

    Dro-210i web configuration dro-210i user manual page 3-2 click on interface > port config to get the web page as shown below: 3.1.2 interface - lan the lan settings allows you to configure the current ip address and subnet mask assigned to the router. As an example, if your lan network is to be a 19...

  • Page 19

    Dro-210i web configuration dro-210i user manual page 3-3 saving all of this information to the dro-210i's flash and restarting it will make this ip addressing scheme current. In windows, when the user enables dhcp on the nic he/she will obtain an ip address automatically, upon restarting the compute...

  • Page 20: 3.1.3

    Dro-210i web configuration dro-210i user manual page 3-4 3.1.3 interface - wan1 for wan1 settings click on interfaces > wan1 and the web page opens as shown below: this page allows you to configure the wan interface. The wan interface can operate in 3 modes: static, dynamic and pppoe. Wan settings -...

  • Page 21: Wan Settings - Dynamic

    Dro-210i web configuration dro-210i user manual page 3-5 wan settings - dynamic select this option if your isp provides you an ip address automatically. Dynamic ip address allows the dro-210i to get its ip address information from your isp using the dynamic host configuration protocol (dhcp). Use th...

  • Page 22: Wan Settings – Pppoe

    Dro-210i web configuration dro-210i user manual page 3-6 wan settings – pppoe pppoe stands for point-to-point protocol over ethernet. Select this option if your isp requires you to use a pppoe connection. Unnumber interface - this interface can be configured as an unnumbered interface. For more info...

  • Page 23: Ethernet Wan Link Detection

    Dro-210i web configuration dro-210i user manual page 3-7 service name - enter the service name provided by your isp (optional). Ethernet wan link detection this feature is used to detect the link status of a particular ethernet wan interface. Interface: allows choosing an ethernet wan interface on w...

  • Page 24: Unnumbered-Interfaces

    Dro-210i web configuration dro-210i user manual page 3-8 unnumbered-interfaces only point-to-point interfaces can be configured as an unnumbered interface. An unnumbered interface, borrows the lan ip address by default. The user can edit this and configure a custom ip address on the unnumbered inter...

  • Page 25: 3.1.5

    Dro-210i web configuration dro-210i user manual page 3-9 wan2 configuration is same as that of wan1. Refer wan1 setting for configuration of wan2. 3.1.5 interface - autobackup for wan1 settings click on interfaces > autobackup and the web page opens as shown below: this web page is used to configure...

  • Page 26

    Dro-210i web configuration dro-210i user manual page 3-10 backup interface: this interface will be configured as backup interface for the primary. Following rules apply for backup configuration: 1. If an interface is configured as a backup interface it cannot be made a primary interface. 2. When aut...

  • Page 27: 3.1.6

    Dro-210i web configuration dro-210i user manual page 3-11 3.1.6 interface - loadbalancing click on interface > loadbalancing to get the web page as shown below: load-balancing enables a user to distribute internet traffic among multiple wan interfaces. User can configure the percentage of traffic to...

  • Page 28: 3.2 Routing

    Dro-210i web configuration dro-210i user manual page 3-12 3.2 routing 3.2.1 routing – static click on routing > static to get the web page as shown below: static route web page allows the user to add and delete static routes. View active routes: this link is used to see all the active routes. Interf...

  • Page 29: Gateway Ip Address:

    Dro-210i web configuration dro-210i user manual page 3-13 gateway ip address: the gateway ip address for the route. This is an optional field. Route entries: this table displays the configured routes of all the interfaces. Click on the delete icon to delete a specific route entry. The colour scheme ...

  • Page 30: Rip Version:

    Dro-210i web configuration dro-210i user manual page 3-14 rip page allows user to configure the rip routing protocol. In the web page, user can also customize rip settings for every interface. Rip version: rip version can be either 1 or 2. Redistribute: static and connected routes can be redistribut...

  • Page 31: 3.2.3

    Dro-210i web configuration dro-210i user manual page 3-15 3.2.3 routing – policy-based click on routing > policy-based to get the web page as shown below: policy-based routing enables a user to define policies to achieve efficient traffic distribution or load balancing. A set of parameters such as s...

  • Page 32

    Dro-210i web configuration dro-210i user manual page 3-16 inbound interface: this field sets the policy for the network traffic which comes into the router through this interface. Source: the network traffic's source ip. 1. Any - if any is set on this field the policy will be applied on the network ...

  • Page 33: 3.3 Firewall

    Dro-210i web configuration dro-210i user manual page 3-17 3.3 firewall 3.3.1 firewall – interface configuration click on firewall > interface configuration to get the web page as shown below: firewall enabled: firewall will be active only when this flag is selected; when this flag is not selected fi...

  • Page 34: 3.3.2

    Dro-210i web configuration dro-210i user manual page 3-18 if more than one interface is of same security type then policy database for them is same i.E if wan1 and wan2 are configured as un-trusted then both of them will share a common inbound policies database . If user configures lan as un-trusted...

  • Page 35: Inbound  Policies

    Dro-210i web configuration dro-210i user manual page 3-19 policies will be applied on that interface, if the security type is set to un- trusted t h e n inbound policies will be applied on that interface. Note: if more than one interface is of same security type then policy database for them is same...

  • Page 36

    Dro-210i web configuration dro-210i user manual page 3-20 end time – configure this to the time until which the policy remains active starting from the start time. The format of time is month: day: hr: min. This field is applicable for one time policy only status - allows user to make particular pol...

  • Page 37

    Dro-210i web configuration dro-210i user manual page 3-21 · deny all wan domain to be accessed except “trusted domain”. All the packets from all the domains are dropped except the domain names in the trusted domain. Web filter – the different types of web filters in the firewall are 1. Java filter 2...

  • Page 38: Keyword-Filter

    Dro-210i web configuration dro-210i user manual page 3-22 · com controls (file types .Dll and .Ocx) · win32 executable files (file type .Exe) · inf set-up files, used to specify locations and versions for a collection of other files (file type .Inf) · "cabinet" files that are referred to by an objec...

  • Page 39: File Extension Filter

    Dro-210i web configuration dro-210i user manual page 3-23 http header. The administrator can configure the keyword he needs to block for the other users. The blocked keyword is checked in the url and if found, the site is blocked. For example: if you want to block any web page that has "jobs" in the...

  • Page 40: Port Filter:

    Dro-210i web configuration dro-210i user manual page 3-24 inbound policy (firewall) rules: the traffic flowing from untrusted to trusted network is the inbound traffic. Port filter - port filter policy is used to allow or deny network packets both coming from and going to the wan. That is from untru...

  • Page 41: Ip Range Filter:

    Dro-210i web configuration dro-210i user manual page 3-25 port range - you can enter a range of port numbers for which the current policy rules will be applied. If you have only one port number to enter, enter it in both fields. Direction - this allows you to specify the source of network traffic fo...

  • Page 42

    Dro-210i web configuration dro-210i user manual page 3-26 slow email/ftp access: some old email and ftp servers use ident protocol to automatically identify the users connecting to them. By default, the firewall in the router will block the incoming ident protocol at an untrusted port. This will cau...

  • Page 43

    Dro-210i web configuration dro-210i user manual page 3-27 ping of death - a form of dos (denial of service) attack consisting of a flood of ping requests designed to disrupt the normal activity of a system. Boink attack - it involves the perpetrator sending corrupt udp packets to host. Smurf attack ...

  • Page 44: 3.4 Nat

    Dro-210i web configuration dro-210i user manual page 3-28 3.4 nat 3.4.1 nat – interface configuration click on nat > interface configuration to get the web page as shown below: nat can be enabled/disabled on the specific interface in this page. Select the interface on which the nat is to be applied ...

  • Page 45: 3.4.2

    Dro-210i web configuration dro-210i user manual page 3-29 3.4.2 nat - nat configuration click on nat > nat configuration to get the web page as shown below: nat - enable or disable the nat configuration for the wan interface selected. This field only enable/disable the particular nat configuration e...

  • Page 46

    Dro-210i web configuration dro-210i user manual page 3-30 private ip addresses. The global start address and global end ip address need to be same. · many-to-many: any ip from the private network passing through the nat enabled interface are mapped to the range of global ip addresses specified. Note...

  • Page 47: 3.4.3

    Dro-210i web configuration dro-210i user manual page 3-31 3.4.3 nat - nat exception click on nat > nat exception to get the web page as shownbelow: nat can be disabled between any two interfaces. If nat is disabled between two interfaces then sessions between these two interfaces are not nated. Nat ...

  • Page 48: 3.4.4

    Dro-210i web configuration dro-210i user manual page 3-32 3.4.4 nat - virtual server/napt click on nat > virtual server/napt to get the web page as shown below: virtual servers allow remote users to access services on lan such as ftp for file transfers or stmp and pop3 for e-mail. The user configure...

  • Page 49: Private Settings:

    Dro-210i web configuration dro-210i user manual page 3-33 transport type (tcp or udp) and the correct port number corresponding to a given protocol. The difference here is that the protocol is identified by name. For example, the simple mail transfer protocol (smtp in the drop-down menu) is used to ...

  • Page 50: 3.4.5

    Dro-210i web configuration dro-210i user manual page 3-34 3.4.5 nat - sip-alg click on nat > sip-alg to get the web page as shownbelow: sip alg enables sip phones on the lan side to make calls across the internet. User needs to configure the port number for the sip (session initiation protocol) in t...

  • Page 51: 3.5 Vpn

    Dro-210i web configuration dro-210i user manual page 3-35 3.5 vpn 3.5.1 vpn - ipsec click on vpn > vpn-ipsec to get the web page as shownbelow: ipsec (internet protocol security) is a group of protocols designed to allow flexible, secure and interoperable communication over the internet. Ipsec is us...

  • Page 52

    Dro-210i web configuration dro-210i user manual page 3-36 confidentiality is desired, the ah is replaced with an esp header for the encryption feature and the authentication and data integrity components that the ah offer as well. This page allows an user to control the mode of ipsec vpn. It can be ...

  • Page 53: 3.5.2

    Dro-210i web configuration dro-210i user manual page 3-37 3.5.2 vpn - peer to peer click on vpn > peer to peer to get the web page as shownbelow the ipsec tunnel mode page allows you to setup a secure tunnel between your router and a remote gateway. Add/new tunnel tunnel id - an alphanumeric string ...

  • Page 54: Phase 1 Proposal

    Dro-210i web configuration dro-210i user manual page 3-38 shared key - the secret key that should be entered exactly the same way on both endpoints in order to establish phase i negotiation. The purpose of this key is for the ipsec peers to authenticate each other. Tunnel type - this drop-down menu ...

  • Page 55: Phase 2 Proposal

    Dro-210i web configuration dro-210i user manual page 3-39 ike encryption - this drop-down menu allows user to select the encryption algorithm that will be used to encrypt the messages passed between the vpn tunnel endpoints during the phase 1 negotiation. User can choose between des and 3des encrypt...

  • Page 56: Target Host Range

    Dro-210i web configuration dro-210i user manual page 3-40 esp auth - this drop-down menu allows user to select the authentication algorithm to be used when esp is selected in the ipsec operation drop- down menu above. User can choose between null - no authentication, md5 - using md5 message digest a...

  • Page 57

    Dro-210i web configuration dro-210i user manual page 3-41 3.5.3 vpn - ipsec server 3.5.3.1 vpn - ipsec server - server click on vpn > ipsec server > server to get the web page as shown below this page allows a user to configure ipsec server. With the help of an ipsec server, multiple ipsec clients c...

  • Page 58: Phase 1 Proposal

    Dro-210i web configuration dro-210i user manual page 3-42 tunnel source interface - the wan interface which serves as the tunnel's source endpoint. Shared key - the secret key that should be entered exactly the same way on both endpoints in order to establish phase i negotiation. The purpose of this...

  • Page 59: Phase 2 Proposal:

    Dro-210i web configuration dro-210i user manual page 3-43 - a 128-bit message digest, and sha - which generates a 160-bit message digest. You must have exactly the same ike hash algorithm on both ends of a vpn tunnel. Ike encryption - this drop-down menu allows user to select the encryption algorith...

  • Page 60

    Dro-210i web configuration dro-210i user manual page 3-44 operation drop-down menu above. User can choose between null - n o encryption, des - using des encryption, 3des - using triple des encryption and aes - using aes encryption. User must select the same esp transform (encryption algorithm) on bo...

  • Page 61

    Dro-210i web configuration dro-210i user manual page 3-45 3.5.3.2 vpn - ipsec server – remoteid click on vpn > ipsec server > remoteid to get the web page as shown below: this page allows user to configure a set of remote ids corresponding to a server. Each client that wants to connect to the router...

  • Page 62: 3.5.4

    Dro-210i web configuration dro-210i user manual page 3-46 3.5.4 vpn - tunnel table click on vpn > tunnel table to get the web page as shownbelow: the tunnel table displays the current tunnel setup. The following is a brief description of the tunnel table fields: tunnel name: this is the name of the ...

  • Page 63: 3.6 Qos

    Dro-210i web configuration dro-210i user manual page 3-47 delete: click on delete icon to remove the peer-to-peer tunnel or ipsec server. When ipsec server is deleted all its corresponding remote ids also get deleted. The total no of ipsec configuration entries includes the number of peer-to- peer t...

  • Page 64: Qos Settings:

    Dro-210i web configuration dro-210i user manual page 3-48 qos settings: the basic building block of the traffic control system is qdiscs(queueing disciplines) . If qdiscs are configured with some parameters,then packets will be enqueued and dequeued from them. Each interface has 1 root qdisc. Q-disc...

  • Page 65: Handle:

    Dro-210i web configuration dro-210i user manual page 3-49 handle: queues are identified by a handle , where the minor number is zero for queues. Handles are used to associate classes or sub-queues to queuing disciplines. Parent: parent does not apply for root qdisc. Major number represents the paren...

  • Page 66: Latency:

    Dro-210i web configuration dro-210i user manual page 3-50 larger buffer. For 10mpbs on intel, you need at least 10kbytes buffer if you want to reach your configured rate. If your buffer is too small, packets may be dropped because more tokens arrive per timer tick than fit in your bucket. Latency: l...

  • Page 67: Rate:

    Dro-210i web configuration dro-210i user manual page 3-51 rate: minimum bandwidth ,which a class and all its children are guaranteed. Rate should be between 1 and 100,000 kbps. Ceil: maximum bandwidth ,which a class and all its children are guaranteed. Ceil should be between 1 and 100,000 kbps. Burs...

  • Page 68: 3.6.2

    Dro-210i web configuration dro-210i user manual page 3-52 3.6.2 qos - filter configuration click on qos > filter configuration to get the web page as shown below: filters are attached to the root qdisc or a class (parent parameter) to filter the packets that belongs to that qdisc/class. If the packe...

  • Page 69: Destination:

    Dro-210i web configuration dro-210i user manual page 3-53 2. Subnet - setting this will allow user to configure specific source ip address with subnet for which the filter will be applied on the network traffic. Destination: the network traffic's destination ip. 1. Any - i f any is set on this field...

  • Page 70: 3.6.3

    Dro-210i web configuration dro-210i user manual page 3-54 3.6.3 qos - tos/diffserv click on qos > tos/diffserv to get the web page as shownbelow: this page is used to set the tos octet in ip header. Source: the network traffic's source ip. 1. Any - if any is set on this field the policy will be appl...

  • Page 71

    Dro-210i web configuration dro-210i user manual page 3-55 protocol: the network traffic whose protocol matches with this field will follow this policy. Source port number: network traffic whose source port matches with this field will follow this policy. This field is applicable only if protocol is ...

  • Page 72: 3.7 Misc

    Dro-210i web configuration dro-210i user manual page 3-56 3.7 misc 3.7.1 misc - dhcp 3.7.1.1 misc - dhcp - dhcp server click on misc > dhcp > dhcp server to get the web page as shown below: dhcp (dynamic host configuration protocol) is a method of automatically assigning ip addresses, subnet masks, ...

  • Page 73

    Dro-210i web configuration dro-210i user manual page 3-57 starting ip address - this is the first ip address in a range that the router will assign to a computer on your network. Ending ip address - this is the last ip address in a range that the router will assign to a computer on user's network. D...

  • Page 74

    Dro-210i web configuration dro-210i user manual page 3-58 primary dns server - this is the ip address of a server on the internet that provides the service of changing text urls into ip address for sites on the internet. Secondary dns server - this is the ip address of a secondary dns server, to be ...

  • Page 75

    Dro-210i web configuration dro-210i user manual page 3-59 3.7.1.2 misc - dhcp - static mapping click on misc > dhcp > static mapping to get the web page as shown below: dhcp static mapping (or dhcp reservation) is a method of assigning the static ip address to a defined mac address. System administr...

  • Page 76

    Dro-210i web configuration dro-210i user manual page 3-60 3.7.1.3 misc – dhcp - dhcp relay click on misc > dhcp > dhcp relay to get the web page as shown below: dhcp relay enables lan clients to get ip address from the dhcp server which is in the different subnet. Relay-status: enable or disable the...

  • Page 77: 3.7.2

    Dro-210i web configuration dro-210i user manual page 3-61 3.7.2 misc - dns proxy click on misc > dns proxy to get the web page as shownbelow: dns server ip: this is the ip address of the dns server provided by the isp. Interface: this is the interface name corresponding to the dns server ip entered....

  • Page 78: 3.7.3

    Dro-210i web configuration dro-210i user manual page 3-62 3.7.3 misc - time click on misc > time to get the web page as shownbelow: this page allows the user to configure the system date and time. System date time - it displays the system date and time. Time zone - there are various time zones which...

  • Page 79: 3.7.4

    Dro-210i web configuration dro-210i user manual page 3-63 domain name - alternatively user can also use domain name for setting up the time. The domain name field allows the user to enter the complete domain name. Manual settings - user needs to enter values here if manual type is chosen. Yyyy-mm-dd...

  • Page 80: 3.8 Tools

    Dro-210i web configuration dro-210i user manual page 3-64 sys-log status: user can enable/disable system logging. Remote server: user needs to enter the ip address of the remote server where he/she wants to keep the system log files. Sys log level: there are various system log levels e.G. Alert, eme...

  • Page 81: 3.8.2

    Dro-210i web configuration dro-210i user manual page 3-65 username - the username for the account is admin. Old password - enter the old password for the account. New password - enter the new password for the account. Confirm new password - enter the new password again to verify that the password ha...

  • Page 82: 3.8.3

    Dro-210i web configuration dro-210i user manual page 3-66 restore to factory default settings: click this button to restore the factory default settings at the router. Restart the device: click this button to restart the router without saving current changes in the settings. 3.8.3 tools - upload cli...

  • Page 83: 3.8.4

    Dro-210i web configuration dro-210i user manual page 3-67 will be made available by technical support whenever any module or any feature is changed. Dro210.Cfg is the file, which contains the entire configuration of the dro-210i. User can configure the device, save the configuration and download the...

  • Page 84: 3.8.5

    Dro-210i web configuration dro-210i user manual page 3-68 ip address: user needs to enter the ip address in this field if set type chosen is ip address. Domain name: user needs to enter the domain name in this field if set type chosen is domain name. Count number: user needs to enter the number of p...

  • Page 85: 3.9 Status

    Dro-210i web configuration dro-210i user manual page 3-69 remote access status enable/disable: it allows the user to enable or disable the entire feature. If user disables remote access, then it is not possible to configure the web remotely. Remote ip - this is the ip address of the machine or devic...

  • Page 86: Lan Status:

    Dro-210i web configuration dro-210i user manual page 3-70 this page displays the current information of the router. It displays the lan ip address, subnet mask, dhcp server status, wan connection type, ip address, subnet mask and default gateway. "system up since" tell you how long the system has be...

  • Page 87: Dmz Status:

    Dro-210i web configuration dro-210i user manual page 3-71 dmz status: dmz physical link status - displays the dmz cable plug-in(up) or plug-out(down) status. Ip address - this is the router's current dmz ip address. Subnet mask - this is the subnet mask corresponding to the dmz ip address above. 3.9...

  • Page 88: 3.9.3

    Dro-210i web configuration dro-210i user manual page 3-72 3.9.3 status – route table click on status > route table to get the web page as shownbelow: this page shows all the active route entries - both static and dynamic. The colour scheme indicates to the user whether an entry is static or dynamic....

  • Page 89: 3.9.4

    Dro-210i web configuration dro-210i user manual page 3-73 3.9.4 status – nat table click on status > nat table to get the web page as shownbelow: the router maintains a table of statistics concerning the network address translation (nat) applied between the wan and the lan. These statistics can be v...

  • Page 90: 3.9.5

    Dro-210i web configuration dro-210i user manual page 3-74 3.9.5 status – ipsec status click on status > ipsec status to get the web page as shownbelow: ipsec status page displays the current ipsec status table. It shows the state of the tunnel with number of packets transmitted and received through ...

  • Page 91

    Dro-210i web configuration dro-210i user manual page 3-75 blocking log: this shows what traffic and the reasons why they are blocked by the firewall. Intrusion log: the intrusion detection system of the router detects suspicious attacks and logs all the information about the intrusion attempts here....

  • Page 92: Session Log Table.

    Dro-210i web configuration dro-210i user manual page 3-76 session events (when a computer on your lan accesses an application of service on the wan) are logged by the router and are displayed on the session log table. Source: port - the ip address and tcp/udp port number of the computer or device th...

  • Page 93: Log.

    Dro-210i web configuration dro-210i user manual page 3-77 certain sessions between computers on your lan and the wan have the potential to cause a disruption in the function of your computers and are blocked by the router's firewall. Some of these session types are defined by you in the port filter ...

  • Page 94: Detection Log.

    Dro-210i web configuration dro-210i user manual page 3-78 3.9.6.3 status – log tables – intrusion log click on status > log tables > intrusion log to get the web page as shownbelow: certain sessions between computers on your lan and the wan have the potential to cause a disruption in the function of...

  • Page 95

    Dro-210i web configuration dro-210i user manual page 3-79 (zero-sized dns zone payload), backoffice, netbus, smurf, tear drop, icmp flooding. Source: port - displays the source ip address and the tcp/udp port that the intrusion was attempted from. Destination: port - displays the source ip address a...

  • Page 96

    Dro-210i web configuration dro-210i user manual page 3-80 connections. When a serious intrusion attempt is detected (that is, when a large number of packets consistent with a commonly used intrusion method are detected by the router) the ip address, the protocol used, and the corresponding port numb...

  • Page 97

    Dro-210i web configuration dro-210i user manual page 3-81 3.9.6.5 status – log tables – black list click on status > log tables > black list to get the web page as shown below: the router firewall is pre-programmed to recognize and block many commonly used intrusion methods from computers on the wan...

  • Page 98

    Dro-210i web configuration dro-210i user manual page 3-82 source ip - the ip address of a computer or device that will not be allowed to make a connection from the wan to the router is displayed here. Destination ip - the ip address of the computer or device that the intruder has tried to connect to...

  • Page 99: 3.10

    Dro-210i web configuration dro-210i user manual page 3-83 index - this is the sequence of the ipsec log. Description - a brief description of the log entry will be displayed here. User can use it to check tunnel behaviour. 3.10 help click on help to get the web page as shownbelow:.

  • Page 100: Appendix

    Dro-210i web configuration dro-210i user manual page 3-84 appendix password recovery: if user forgets his/her password he/she has to call technical support and tell his/her mac addresses which is there on the product sticker of the router. Once user informs tech. Support his mac address, tech. Suppo...