Dro-210i user manual dro-210i load balancing router users guide rev 1.0 (july 2006).
Dro-210i user manual table of contents 1........................................................................................................................................................ 1-1 introduction to dro-210i .................................................................................
Dro-210i user manual 3.6.3 qos - tos/diffserv...............................................................................................3-54 3.7 misc................................................................................................................................3-56 3.7.1 misc - d...
Introduction to dro-210i dro-210i user manual page 1-1 1 introduction to dro-210i 1.1 overview nowadays lan, wan and internet connectivity are becoming the common currency for business. Intranets and the internet are carrying a growing percentage of business transactions for data & voice communicati...
Introduction to dro-210i dro-210i user manual page 1-2 1.2 product features 1.2.1 hardware features 2 lan ports the product is equipped with 2 dedicated 10/100 ethernet lan ports to connect user computers to the network. 1 dmz port the product is equipped with one 10/100 ethernet dmz port to connect...
Introduction to dro-210i dro-210i user manual page 1-3 1.2.2 software features routing dro-210i supports static, dynamic and policy-based routing. Static routing static routes are special routes that the network administrator manually enters into the router configuration. You could build an entire n...
Introduction to dro-210i dro-210i user manual page 1-4 · filter like ip address, port, domain name, mac address, url keyword & file extension etc., nat/virtual server when a tcp or udp packet is received by the router the ip address in this packet will be translated between the wan and lan side of t...
Introduction to dro-210i dro-210i user manual page 1-5 tools dro-210i supports various tools to manage and monitor the device. Syslog the router can send the syslog messages to the configured server to aid in network administration. Ntp router allows the user to configure the system date and time. U...
Installing dro-210i dro-210i user manual page 2-1 2 installing dro-210i 2.1 about the router this section will introduce hardware of the router. Front view rear view.
Installing dro-210i dro-210i user manual page 2-2 2.1.1 front panel module status description power on on off wan1 led ready on: link and protocol is up off: link or protocol is down wan2 led ready on: link and protocol is up off: link or protocol is down wan1 led power led wan2 led.
Installing dro-210i dro-210i user manual page 2-3 2.1.2 rear panel interface description reset restore the factory default settings in the router lan 10/100mbps ethernet lan ports (rj-45) lan/dmz 10/100mbps ethernet port (rj-45) - configurable as lan or dmz port lan/wan2 10/100mbps ethernet port (rj...
Installing dro-210i dro-210i user manual page 2-4 2.2 unpacking the dro-210i dro-210i package contents the dro-210i package contains the following items: · the dro-210i router · 1 blue cross-over ethernet cables · 2 grey straight ethernet cables · 1 power cord · ac-dc adapter · user manual and qig (...
Installing dro-210i dro-210i user manual page 2-5 2.2.2 power requirements · power consumption: 6w · ac input voltage: 100 to 240 vac · ac input current: 0.6 a · frequency: 50~60 hz environmental specifications v operating temperature: 32 to 104 0 f (0 to 55 0 c) v storage temperature: -13 to 158 0 ...
Installing dro-210i dro-210i user manual page 2-6 1.1.1.1.1 i nte rne t wan dot fiber dot optimux dic-2000fe2vl 2 mbps leased line d-link interface converter d-link adsl modem dsl-502t dro-210i wan1 wan2 lan dmz d-link switch des-3208i+ des-3208i+ internet.
Installing dro-210i dro-210i user manual page 2-7 2.4 configuration via web browser with some advance preparation, it’s easy to install dro-210i and begin using it. The following topics have been organized as a set of guidelines to ensure that your computer and your network are ready for it. 1. This...
Installing dro-210i dro-210i user manual page 2-8 3. It will ask for username and password. User name: “admin” password: “admin” d-link welcome page will appear and you can browse through the web page ..
Dro-210i web configuration dro-210i user manual page 3-1 3 dro-210i web configuration the web configuration is simple and easy to use. It will help in quick setting of the router to connect to isp (internet service provider) with few steps required. It will guide user step by step to configure the p...
Dro-210i web configuration dro-210i user manual page 3-2 click on interface > port config to get the web page as shown below: 3.1.2 interface - lan the lan settings allows you to configure the current ip address and subnet mask assigned to the router. As an example, if your lan network is to be a 19...
Dro-210i web configuration dro-210i user manual page 3-3 saving all of this information to the dro-210i's flash and restarting it will make this ip addressing scheme current. In windows, when the user enables dhcp on the nic he/she will obtain an ip address automatically, upon restarting the compute...
Dro-210i web configuration dro-210i user manual page 3-4 3.1.3 interface - wan1 for wan1 settings click on interfaces > wan1 and the web page opens as shown below: this page allows you to configure the wan interface. The wan interface can operate in 3 modes: static, dynamic and pppoe. Wan settings -...
Dro-210i web configuration dro-210i user manual page 3-5 wan settings - dynamic select this option if your isp provides you an ip address automatically. Dynamic ip address allows the dro-210i to get its ip address information from your isp using the dynamic host configuration protocol (dhcp). Use th...
Dro-210i web configuration dro-210i user manual page 3-6 wan settings – pppoe pppoe stands for point-to-point protocol over ethernet. Select this option if your isp requires you to use a pppoe connection. Unnumber interface - this interface can be configured as an unnumbered interface. For more info...
Dro-210i web configuration dro-210i user manual page 3-7 service name - enter the service name provided by your isp (optional). Ethernet wan link detection this feature is used to detect the link status of a particular ethernet wan interface. Interface: allows choosing an ethernet wan interface on w...
Dro-210i web configuration dro-210i user manual page 3-8 unnumbered-interfaces only point-to-point interfaces can be configured as an unnumbered interface. An unnumbered interface, borrows the lan ip address by default. The user can edit this and configure a custom ip address on the unnumbered inter...
Dro-210i web configuration dro-210i user manual page 3-9 wan2 configuration is same as that of wan1. Refer wan1 setting for configuration of wan2. 3.1.5 interface - autobackup for wan1 settings click on interfaces > autobackup and the web page opens as shown below: this web page is used to configure...
Dro-210i web configuration dro-210i user manual page 3-10 backup interface: this interface will be configured as backup interface for the primary. Following rules apply for backup configuration: 1. If an interface is configured as a backup interface it cannot be made a primary interface. 2. When aut...
Dro-210i web configuration dro-210i user manual page 3-11 3.1.6 interface - loadbalancing click on interface > loadbalancing to get the web page as shown below: load-balancing enables a user to distribute internet traffic among multiple wan interfaces. User can configure the percentage of traffic to...
Dro-210i web configuration dro-210i user manual page 3-12 3.2 routing 3.2.1 routing – static click on routing > static to get the web page as shown below: static route web page allows the user to add and delete static routes. View active routes: this link is used to see all the active routes. Interf...
Dro-210i web configuration dro-210i user manual page 3-13 gateway ip address: the gateway ip address for the route. This is an optional field. Route entries: this table displays the configured routes of all the interfaces. Click on the delete icon to delete a specific route entry. The colour scheme ...
Dro-210i web configuration dro-210i user manual page 3-14 rip page allows user to configure the rip routing protocol. In the web page, user can also customize rip settings for every interface. Rip version: rip version can be either 1 or 2. Redistribute: static and connected routes can be redistribut...
Dro-210i web configuration dro-210i user manual page 3-15 3.2.3 routing – policy-based click on routing > policy-based to get the web page as shown below: policy-based routing enables a user to define policies to achieve efficient traffic distribution or load balancing. A set of parameters such as s...
Dro-210i web configuration dro-210i user manual page 3-16 inbound interface: this field sets the policy for the network traffic which comes into the router through this interface. Source: the network traffic's source ip. 1. Any - if any is set on this field the policy will be applied on the network ...
Dro-210i web configuration dro-210i user manual page 3-17 3.3 firewall 3.3.1 firewall – interface configuration click on firewall > interface configuration to get the web page as shown below: firewall enabled: firewall will be active only when this flag is selected; when this flag is not selected fi...
Dro-210i web configuration dro-210i user manual page 3-18 if more than one interface is of same security type then policy database for them is same i.E if wan1 and wan2 are configured as un-trusted then both of them will share a common inbound policies database . If user configures lan as un-trusted...
Dro-210i web configuration dro-210i user manual page 3-19 policies will be applied on that interface, if the security type is set to un- trusted t h e n inbound policies will be applied on that interface. Note: if more than one interface is of same security type then policy database for them is same...
Dro-210i web configuration dro-210i user manual page 3-20 end time – configure this to the time until which the policy remains active starting from the start time. The format of time is month: day: hr: min. This field is applicable for one time policy only status - allows user to make particular pol...
Dro-210i web configuration dro-210i user manual page 3-21 · deny all wan domain to be accessed except “trusted domain”. All the packets from all the domains are dropped except the domain names in the trusted domain. Web filter – the different types of web filters in the firewall are 1. Java filter 2...
Dro-210i web configuration dro-210i user manual page 3-22 · com controls (file types .Dll and .Ocx) · win32 executable files (file type .Exe) · inf set-up files, used to specify locations and versions for a collection of other files (file type .Inf) · "cabinet" files that are referred to by an objec...
Dro-210i web configuration dro-210i user manual page 3-23 http header. The administrator can configure the keyword he needs to block for the other users. The blocked keyword is checked in the url and if found, the site is blocked. For example: if you want to block any web page that has "jobs" in the...
Dro-210i web configuration dro-210i user manual page 3-24 inbound policy (firewall) rules: the traffic flowing from untrusted to trusted network is the inbound traffic. Port filter - port filter policy is used to allow or deny network packets both coming from and going to the wan. That is from untru...
Dro-210i web configuration dro-210i user manual page 3-25 port range - you can enter a range of port numbers for which the current policy rules will be applied. If you have only one port number to enter, enter it in both fields. Direction - this allows you to specify the source of network traffic fo...
Dro-210i web configuration dro-210i user manual page 3-26 slow email/ftp access: some old email and ftp servers use ident protocol to automatically identify the users connecting to them. By default, the firewall in the router will block the incoming ident protocol at an untrusted port. This will cau...
Dro-210i web configuration dro-210i user manual page 3-27 ping of death - a form of dos (denial of service) attack consisting of a flood of ping requests designed to disrupt the normal activity of a system. Boink attack - it involves the perpetrator sending corrupt udp packets to host. Smurf attack ...
Dro-210i web configuration dro-210i user manual page 3-28 3.4 nat 3.4.1 nat – interface configuration click on nat > interface configuration to get the web page as shown below: nat can be enabled/disabled on the specific interface in this page. Select the interface on which the nat is to be applied ...
Dro-210i web configuration dro-210i user manual page 3-29 3.4.2 nat - nat configuration click on nat > nat configuration to get the web page as shown below: nat - enable or disable the nat configuration for the wan interface selected. This field only enable/disable the particular nat configuration e...
Dro-210i web configuration dro-210i user manual page 3-30 private ip addresses. The global start address and global end ip address need to be same. · many-to-many: any ip from the private network passing through the nat enabled interface are mapped to the range of global ip addresses specified. Note...
Dro-210i web configuration dro-210i user manual page 3-31 3.4.3 nat - nat exception click on nat > nat exception to get the web page as shownbelow: nat can be disabled between any two interfaces. If nat is disabled between two interfaces then sessions between these two interfaces are not nated. Nat ...
Dro-210i web configuration dro-210i user manual page 3-32 3.4.4 nat - virtual server/napt click on nat > virtual server/napt to get the web page as shown below: virtual servers allow remote users to access services on lan such as ftp for file transfers or stmp and pop3 for e-mail. The user configure...
Dro-210i web configuration dro-210i user manual page 3-33 transport type (tcp or udp) and the correct port number corresponding to a given protocol. The difference here is that the protocol is identified by name. For example, the simple mail transfer protocol (smtp in the drop-down menu) is used to ...
Dro-210i web configuration dro-210i user manual page 3-34 3.4.5 nat - sip-alg click on nat > sip-alg to get the web page as shownbelow: sip alg enables sip phones on the lan side to make calls across the internet. User needs to configure the port number for the sip (session initiation protocol) in t...
Dro-210i web configuration dro-210i user manual page 3-35 3.5 vpn 3.5.1 vpn - ipsec click on vpn > vpn-ipsec to get the web page as shownbelow: ipsec (internet protocol security) is a group of protocols designed to allow flexible, secure and interoperable communication over the internet. Ipsec is us...
Dro-210i web configuration dro-210i user manual page 3-36 confidentiality is desired, the ah is replaced with an esp header for the encryption feature and the authentication and data integrity components that the ah offer as well. This page allows an user to control the mode of ipsec vpn. It can be ...
Dro-210i web configuration dro-210i user manual page 3-37 3.5.2 vpn - peer to peer click on vpn > peer to peer to get the web page as shownbelow the ipsec tunnel mode page allows you to setup a secure tunnel between your router and a remote gateway. Add/new tunnel tunnel id - an alphanumeric string ...
Dro-210i web configuration dro-210i user manual page 3-38 shared key - the secret key that should be entered exactly the same way on both endpoints in order to establish phase i negotiation. The purpose of this key is for the ipsec peers to authenticate each other. Tunnel type - this drop-down menu ...
Dro-210i web configuration dro-210i user manual page 3-39 ike encryption - this drop-down menu allows user to select the encryption algorithm that will be used to encrypt the messages passed between the vpn tunnel endpoints during the phase 1 negotiation. User can choose between des and 3des encrypt...
Dro-210i web configuration dro-210i user manual page 3-40 esp auth - this drop-down menu allows user to select the authentication algorithm to be used when esp is selected in the ipsec operation drop- down menu above. User can choose between null - no authentication, md5 - using md5 message digest a...
Dro-210i web configuration dro-210i user manual page 3-41 3.5.3 vpn - ipsec server 3.5.3.1 vpn - ipsec server - server click on vpn > ipsec server > server to get the web page as shown below this page allows a user to configure ipsec server. With the help of an ipsec server, multiple ipsec clients c...
Dro-210i web configuration dro-210i user manual page 3-42 tunnel source interface - the wan interface which serves as the tunnel's source endpoint. Shared key - the secret key that should be entered exactly the same way on both endpoints in order to establish phase i negotiation. The purpose of this...
Dro-210i web configuration dro-210i user manual page 3-43 - a 128-bit message digest, and sha - which generates a 160-bit message digest. You must have exactly the same ike hash algorithm on both ends of a vpn tunnel. Ike encryption - this drop-down menu allows user to select the encryption algorith...
Dro-210i web configuration dro-210i user manual page 3-44 operation drop-down menu above. User can choose between null - n o encryption, des - using des encryption, 3des - using triple des encryption and aes - using aes encryption. User must select the same esp transform (encryption algorithm) on bo...
Dro-210i web configuration dro-210i user manual page 3-45 3.5.3.2 vpn - ipsec server – remoteid click on vpn > ipsec server > remoteid to get the web page as shown below: this page allows user to configure a set of remote ids corresponding to a server. Each client that wants to connect to the router...
Dro-210i web configuration dro-210i user manual page 3-46 3.5.4 vpn - tunnel table click on vpn > tunnel table to get the web page as shownbelow: the tunnel table displays the current tunnel setup. The following is a brief description of the tunnel table fields: tunnel name: this is the name of the ...
Dro-210i web configuration dro-210i user manual page 3-47 delete: click on delete icon to remove the peer-to-peer tunnel or ipsec server. When ipsec server is deleted all its corresponding remote ids also get deleted. The total no of ipsec configuration entries includes the number of peer-to- peer t...
Dro-210i web configuration dro-210i user manual page 3-48 qos settings: the basic building block of the traffic control system is qdiscs(queueing disciplines) . If qdiscs are configured with some parameters,then packets will be enqueued and dequeued from them. Each interface has 1 root qdisc. Q-disc...
Dro-210i web configuration dro-210i user manual page 3-49 handle: queues are identified by a handle , where the minor number is zero for queues. Handles are used to associate classes or sub-queues to queuing disciplines. Parent: parent does not apply for root qdisc. Major number represents the paren...
Dro-210i web configuration dro-210i user manual page 3-50 larger buffer. For 10mpbs on intel, you need at least 10kbytes buffer if you want to reach your configured rate. If your buffer is too small, packets may be dropped because more tokens arrive per timer tick than fit in your bucket. Latency: l...
Dro-210i web configuration dro-210i user manual page 3-51 rate: minimum bandwidth ,which a class and all its children are guaranteed. Rate should be between 1 and 100,000 kbps. Ceil: maximum bandwidth ,which a class and all its children are guaranteed. Ceil should be between 1 and 100,000 kbps. Burs...
Dro-210i web configuration dro-210i user manual page 3-52 3.6.2 qos - filter configuration click on qos > filter configuration to get the web page as shown below: filters are attached to the root qdisc or a class (parent parameter) to filter the packets that belongs to that qdisc/class. If the packe...
Dro-210i web configuration dro-210i user manual page 3-53 2. Subnet - setting this will allow user to configure specific source ip address with subnet for which the filter will be applied on the network traffic. Destination: the network traffic's destination ip. 1. Any - i f any is set on this field...
Dro-210i web configuration dro-210i user manual page 3-54 3.6.3 qos - tos/diffserv click on qos > tos/diffserv to get the web page as shownbelow: this page is used to set the tos octet in ip header. Source: the network traffic's source ip. 1. Any - if any is set on this field the policy will be appl...
Dro-210i web configuration dro-210i user manual page 3-55 protocol: the network traffic whose protocol matches with this field will follow this policy. Source port number: network traffic whose source port matches with this field will follow this policy. This field is applicable only if protocol is ...
Dro-210i web configuration dro-210i user manual page 3-56 3.7 misc 3.7.1 misc - dhcp 3.7.1.1 misc - dhcp - dhcp server click on misc > dhcp > dhcp server to get the web page as shown below: dhcp (dynamic host configuration protocol) is a method of automatically assigning ip addresses, subnet masks, ...
Dro-210i web configuration dro-210i user manual page 3-57 starting ip address - this is the first ip address in a range that the router will assign to a computer on your network. Ending ip address - this is the last ip address in a range that the router will assign to a computer on user's network. D...
Dro-210i web configuration dro-210i user manual page 3-58 primary dns server - this is the ip address of a server on the internet that provides the service of changing text urls into ip address for sites on the internet. Secondary dns server - this is the ip address of a secondary dns server, to be ...
Dro-210i web configuration dro-210i user manual page 3-59 3.7.1.2 misc - dhcp - static mapping click on misc > dhcp > static mapping to get the web page as shown below: dhcp static mapping (or dhcp reservation) is a method of assigning the static ip address to a defined mac address. System administr...
Dro-210i web configuration dro-210i user manual page 3-60 3.7.1.3 misc – dhcp - dhcp relay click on misc > dhcp > dhcp relay to get the web page as shown below: dhcp relay enables lan clients to get ip address from the dhcp server which is in the different subnet. Relay-status: enable or disable the...
Dro-210i web configuration dro-210i user manual page 3-61 3.7.2 misc - dns proxy click on misc > dns proxy to get the web page as shownbelow: dns server ip: this is the ip address of the dns server provided by the isp. Interface: this is the interface name corresponding to the dns server ip entered....
Dro-210i web configuration dro-210i user manual page 3-62 3.7.3 misc - time click on misc > time to get the web page as shownbelow: this page allows the user to configure the system date and time. System date time - it displays the system date and time. Time zone - there are various time zones which...
Dro-210i web configuration dro-210i user manual page 3-63 domain name - alternatively user can also use domain name for setting up the time. The domain name field allows the user to enter the complete domain name. Manual settings - user needs to enter values here if manual type is chosen. Yyyy-mm-dd...
Dro-210i web configuration dro-210i user manual page 3-64 sys-log status: user can enable/disable system logging. Remote server: user needs to enter the ip address of the remote server where he/she wants to keep the system log files. Sys log level: there are various system log levels e.G. Alert, eme...
Dro-210i web configuration dro-210i user manual page 3-65 username - the username for the account is admin. Old password - enter the old password for the account. New password - enter the new password for the account. Confirm new password - enter the new password again to verify that the password ha...
Dro-210i web configuration dro-210i user manual page 3-66 restore to factory default settings: click this button to restore the factory default settings at the router. Restart the device: click this button to restart the router without saving current changes in the settings. 3.8.3 tools - upload cli...
Dro-210i web configuration dro-210i user manual page 3-67 will be made available by technical support whenever any module or any feature is changed. Dro210.Cfg is the file, which contains the entire configuration of the dro-210i. User can configure the device, save the configuration and download the...
Dro-210i web configuration dro-210i user manual page 3-68 ip address: user needs to enter the ip address in this field if set type chosen is ip address. Domain name: user needs to enter the domain name in this field if set type chosen is domain name. Count number: user needs to enter the number of p...
Dro-210i web configuration dro-210i user manual page 3-69 remote access status enable/disable: it allows the user to enable or disable the entire feature. If user disables remote access, then it is not possible to configure the web remotely. Remote ip - this is the ip address of the machine or devic...
Dro-210i web configuration dro-210i user manual page 3-70 this page displays the current information of the router. It displays the lan ip address, subnet mask, dhcp server status, wan connection type, ip address, subnet mask and default gateway. "system up since" tell you how long the system has be...
Dro-210i web configuration dro-210i user manual page 3-71 dmz status: dmz physical link status - displays the dmz cable plug-in(up) or plug-out(down) status. Ip address - this is the router's current dmz ip address. Subnet mask - this is the subnet mask corresponding to the dmz ip address above. 3.9...
Dro-210i web configuration dro-210i user manual page 3-72 3.9.3 status – route table click on status > route table to get the web page as shownbelow: this page shows all the active route entries - both static and dynamic. The colour scheme indicates to the user whether an entry is static or dynamic....
Dro-210i web configuration dro-210i user manual page 3-73 3.9.4 status – nat table click on status > nat table to get the web page as shownbelow: the router maintains a table of statistics concerning the network address translation (nat) applied between the wan and the lan. These statistics can be v...
Dro-210i web configuration dro-210i user manual page 3-74 3.9.5 status – ipsec status click on status > ipsec status to get the web page as shownbelow: ipsec status page displays the current ipsec status table. It shows the state of the tunnel with number of packets transmitted and received through ...
Dro-210i web configuration dro-210i user manual page 3-75 blocking log: this shows what traffic and the reasons why they are blocked by the firewall. Intrusion log: the intrusion detection system of the router detects suspicious attacks and logs all the information about the intrusion attempts here....
Dro-210i web configuration dro-210i user manual page 3-76 session events (when a computer on your lan accesses an application of service on the wan) are logged by the router and are displayed on the session log table. Source: port - the ip address and tcp/udp port number of the computer or device th...
Dro-210i web configuration dro-210i user manual page 3-77 certain sessions between computers on your lan and the wan have the potential to cause a disruption in the function of your computers and are blocked by the router's firewall. Some of these session types are defined by you in the port filter ...
Dro-210i web configuration dro-210i user manual page 3-78 3.9.6.3 status – log tables – intrusion log click on status > log tables > intrusion log to get the web page as shownbelow: certain sessions between computers on your lan and the wan have the potential to cause a disruption in the function of...
Dro-210i web configuration dro-210i user manual page 3-79 (zero-sized dns zone payload), backoffice, netbus, smurf, tear drop, icmp flooding. Source: port - displays the source ip address and the tcp/udp port that the intrusion was attempted from. Destination: port - displays the source ip address a...
Dro-210i web configuration dro-210i user manual page 3-80 connections. When a serious intrusion attempt is detected (that is, when a large number of packets consistent with a commonly used intrusion method are detected by the router) the ip address, the protocol used, and the corresponding port numb...
Dro-210i web configuration dro-210i user manual page 3-81 3.9.6.5 status – log tables – black list click on status > log tables > black list to get the web page as shown below: the router firewall is pre-programmed to recognize and block many commonly used intrusion methods from computers on the wan...
Dro-210i web configuration dro-210i user manual page 3-82 source ip - the ip address of a computer or device that will not be allowed to make a connection from the wan to the router is displayed here. Destination ip - the ip address of the computer or device that the intruder has tried to connect to...
Dro-210i web configuration dro-210i user manual page 3-83 index - this is the sequence of the ipsec log. Description - a brief description of the log entry will be displayed here. User can use it to check tunnel behaviour. 3.10 help click on help to get the web page as shownbelow:.
Dro-210i web configuration dro-210i user manual page 3-84 appendix password recovery: if user forgets his/her password he/she has to call technical support and tell his/her mac addresses which is there on the product sticker of the router. Once user informs tech. Support his mac address, tech. Suppo...