D-Link DSR-1000 User Manual

Manual is about: Wireless N Services Router

Summary of DSR-1000

  • Page 1

    User manual d-link services router d-link corporation copyright © 2013 http://www.Dlink.Com.

  • Page 2

    Unified services router user manual 1 user manual dsr-150 / 150n /250 / 250n / dsr-500 / 500n / 1000 / 1000n d-link services router version 1.08 copyright © 2013 copyright notice this publication, including all photographs, illustrations and software, is protected under international copyright laws,...

  • Page 3: Table of Contents

    Unified services router user manual 2 table of contents chapter 1. Introduction ........................................................................................................................... 11 1.1 about this user manual .....................................................................

  • Page 4

    Unified services router user manual 3 3.8 wan port settings .................................................................................................. 65 chapter 4. Wireless access point setup ............................................................................................. 67 4....

  • Page 5

    Unified services router user manual 4 6.5 gre tunnel support ............................................................................................ 123 6.6 openvpn support ................................................................................................ 124 6.6.1 openvpn remote ...

  • Page 6

    Unified services router user manual 5 9.9.4 router options ...................................................................................................... 185 9.10 localization ............................................................................................................ 186 cha...

  • Page 7: List of Figures

    Unified services router user manual 6 list of figures figure 1: setup page for lan tcp/ip settings ...................................................................................... 15 figure 2: lan dhcp reserved ips ..................................................................................

  • Page 8

    Unified services router user manual 7 figure 34: ip alias configuration ................................................................................................ 52 figure 35: routing mode to determine traffic routing between wan and lan .... 54 figure 36: static route configuration fields .....

  • Page 9

    Unified services router user manual 8 figure 67: content filtering used to block access to proxy servers and prevent activex controls from being downloaded ......................................................................................................... 101 figure 68: two trusted domains add...

  • Page 10

    Unified services router user manual 9 figure 99: list of ssl vpn polices (global filter) ................................................................................ 139 figure 100: ssl vpn policy configuration ........................................................................................

  • Page 11

    Unified services router user manual 10 figure 134: restoring configuration from a saved file will result in the current configuration being overwritten and a reboot ....................................................................................................... 180 figure 135: firmware versio...

  • Page 12: Chapter  1.

    Unified services router user manual 11 chapter 1. Introduction d-link services routers offer a secure, high performance networking solution to address the growing needs of small and medium businesses. Integrated high-speed ieee 802.11n and 3g wireless technologies offer comparable performance to tra...

  • Page 13

    Unified services router user manual 12 protocol (l2tp) to facilitate branch office connectivity through encrypted virtual links. The dsr-150/150n, dsr-250/250n, dsr-500/500n and dsr- 1000/1000n support 10, 25, 35 and 75 simultaneous ipsec vpn tunnels respectively .  efficient d-link green technolog...

  • Page 14: Chapter  2.

    Chapter 2. Configuring your network: lan setup it is assumed that the user has a machine for management connected to the lan to the router. The lan connection may be through the wired ethernet ports available on the router, or once the initial setup is complete, the dsr may also be managed through i...

  • Page 15

    Unified services router user manual 14 if you change the ip address and click save settings, the gui will not respond. Open a new connection to the new ip address and log in again. Be sure the lan host (the machine used to manage the router) has obtained ip address from newly assigned pool (or has a...

  • Page 16: 2.1.1  L

    F 2 unified serv 5 figu re 1: 2.1.1 l se th add dh tha alr oth co vices router  enab comm 5. Click save setup pag lan dh tup > netw e router’s d ding client's hcp server's at client is c eady assigne herwise an omputer nam r ble dns pro municate wit e settings to ap ge for la hcp res ork setting dh...

  • Page 17

    F unified serv ip ma la as ma th sel ed de ad figu re 2: not vices router addresses: ac address an. Sociate with ac addresses e actions tha lect: selects dit: opens th lete: deletes dd: opens the lan dhc te the follow o dsr- o dsr- o dsr- o dsr- r the lan ip ses: the ma h ip/mac b s are associa at c...

  • Page 18: 2.1.2  L

    2 f 2 unified serv 2.1.2 l se t figu re 3: ip m 2.1.3 la a ( ipv4 opti l t b vices router lan dh tup > netw this page pro lan dhc p address mac addres an con advanced > (1) in ipv6 dhcpv6 length a 4 / ipv6 mod ions. Lan setting the default i ased on you r hcp lea ork setting ovides the lis cp leased...

  • Page 19

    F unified serv th p ip le figu re 4: if y to th has subn vices router he prefix len refix. By de pv6 address ength field. Ipv6 lan ou change th he new ip ad obtained ip net) before a r ngth. The ipv efault this is ; the numbe n and d h he ip address ddress and lo p address fro accessing the v6 netwo...

  • Page 20

    Unified services router user manual 19 as with an ipv4 lan network, the router has a dhcpv6 server. If enabled, the router assigns an ip address within the specified range plus additional specified information to any lan pc that requests dhcp served addresses. The following settings are used to conf...

  • Page 21

    Unified services router user manual 20 accept such details. Router advertisement is required in an ipv6 network is required for stateless auto configuration of the ipv6 lan. By configuring the router advertisement daemon on this router, the dsr will listen on the lan for router solicitations and res...

  • Page 22

    F unified serv figu re 5: a a t h p ro t vices router conf igu r advertiseme advanced > the router ad how to perfor refixes that outer. The following  ipv6 selec option  sla select adver  ipv6 netwo  ipv6 ipv6 r ing the r ent prefixes ipv6 > ipv dvertisement rm stateless allow the rou g prefix o...

  • Page 23

    F 2 unified serv figu re 6: 2.2 vl th con uni vl vl sup se th me a ass id by to p vices router  prefix use th ipv6 adv lan con e router supp nfigured to c ique vlan i lan filtering lan support pport on the tup > vlan e available embership ca vlan mem signed to the 1 is reserve y enabling in pass th...

  • Page 24: 2.2.1  A

    F 2 unified serv figu re 7: 2.2.1 a in to s v p in c t vices router ad ding v associa n order to ta o a physical setup > vla vlan memb port table di nformation. Onfigured ac the edit page  mod  in g and untag gene data used port will r vlan me m ating vl ag all traffic port. An settings bership pr...

  • Page 25

    F unified serv figu re 8: vices router po rt vla  in a and ethe  in tr and the d mult  selec  conf for th traff r an list access mode out of the po rnet frame. Runk mode th out of the p default vla tiple vlans ct pvid for figured vla he port. By s fic can be rou the port is a ort is untagg he po...

  • Page 26: 2.2.2  M

    F 2 unified serv figu re 9: 2.2.2 m s t d v v ra ip s vices router conf igu r multiple setup > vla this page sh directly to a vlan specif vlan id: t ange. P address: t subnet mask r ing vlan e vlan an settings hows a list subnet with fic dhcp ser he pvid of the ip addre k: subnet ma n member subne s...

  • Page 27: 2.2.3  V

    F 2 unified serv figu re 10 2.2.3 v s t c l fu vices router : mult ip le vlan c setup > vla this page all reated in thi lan network unctionality r e vlan s onfigur an settings lows enablin is router to p k is consid to the lan. Sub nets ration s > vlan c ng or disabl provide segm ered the de 26 conf...

  • Page 28

    F 2 unified serv figu re 11 2.3 co dsr th ded dm the mu fir or we se dm or giv vices router : vlan c onfigura r-150/150n/ is router sup dicated dmz mz adds an e internet on ust be expos rewall rules c wan. In the ll. Tup > dmz mz configura subnet assig ven to the la r conf igura able por /250/250n d...

  • Page 29

    F 2 unified serv figu re 12 in o inte 2.4 un ad un tha by net on (or co vices router : dm z c o order to conf ernet settin niversal dvanced > a niversal plug at can commu upnp, the twork device nce upnp is r a configure nfigure the f r onfigu ratio figure a dm ngs > config plug an advanced n and pla...

  • Page 30

    F unified serv a n d a s b figu re 13 up th th a c p i e i c vices router advertiseme network. A devices to th advertiseme steps a pack broadcast ran : upnp c pnp port map e upnp port e following active: a ye currently act protocol: th int. Port (int ext. Port (ex ip address: t click refresh r nt pe...

  • Page 31: 2.5.1  C

    2 f 2 unified serv 2.5 ca l r h f w / d dsr cap s t t a a b figu re 14 2.5.1 c s c t vices router aptive p lan users ca run-time au http connec firewall poli when a match password. Database prio r-150/150n/ ptive portal i setup > cap the active ru these users a pproved for uthenticated locked list, ...

  • Page 32

    F unified serv figu re 15 l w c in a s t g h vices router : capt ive list of avail while enablin click “add” nformation ( advertisemen setup > cap to create a n governs the e header can be r portal pr lable profile ng captive po in the captiv (page backg nt details, fo ptive portal new captive entry...

  • Page 33

    F unified serv figu re 16 s a a c vices router : cus tomi setup > cap access for sp llows one t captive porta r ize d capt ptive portal pecific clien o define a m als. Ive portal > block cl ts can be re mac addres 32 l setup lients gulated by t ss that will the captive always be u portal as we denie...

  • Page 34: 2.5.2  C

    F 2 f unified serv figu re 17 2.5.2 c s c a b c se figu re 18 vices router : b lock in captive setup > vla captive porta uthenticate v randing as hoosing the elected capt : vlan b r g specific e portal an settings als can be en via the capti compared to authenticatio tive portal w bas ed conf client...

  • Page 35: Chapte

    3 f unified serv chapte this isp it is plea to se 3.1 in se th few you figu re 19 yo aut typ ma the wh con 3g assi vices router er 3. Router has t connection t assumed th se contact yo etup the route ternet s tup > wizar e internet c w straightfor ur wan con : intern e t ou can start u thenticated s...

  • Page 36

    Unified services router user manual 35 3.2 wan configuration setup > internet settings > wan1 setup you must either allow the router to detect wan connection type automatically or configure manually the following basic settings to enable internet connectivity:  isp connection type: based on the isp...

  • Page 37: 3.2.2  W

    3 3 f 3 unified serv st ip p in 3.2.2 w t th m to la e 3.2.3 d f in l figu re 20 3.2.4 p s vices router tatically pro p address, i rovide a st nformation d wan dn the ip addre he isp but in map internet o get dns s atter, enter a nsure that yo dhcp w for dhcp cli n some cases lan host. : manual pppo...

  • Page 38

    F unified serv t is figu re 21 m c “ c f e p c vices router the pppoe is sp’s support : p ppoe c most pppoe redentials to pppoe (use onnection se for some isp stablish conc primary conn onnection ca r sp settings a ted by the ds configura isp’s use o login and a ername/pass ettings in ord p’s, most ...

  • Page 39

    F t unified serv figu re 22 there are a f  prim  each conf  the  only *.Fle term vices router : wan co few key elem mary and seco h session ha figured throu dsr acts as y http requ ets) will use minal. All oth r onf igurat i ments of a mu ondary conne s a dns ser ugh the gui a dns prox uests tha...

  • Page 40: 3.2.5  R

    W o s f 3 unified serv when japane on that inter services. The figu re 23 3.2.5 r f a c y vices router ese multiple rface. These ese routes ca : wan co russia for russia l2 ddress from onnections, you may need r pppoe is co e routes are an even be co onf igurat i l2tp a 2tp wan co m the isp or you c...

  • Page 41: 3.2.6  R

    F 3 unified serv figu re 24 3.2.6 r f g vices router : russia l russia for russia du get an ip addr r l2tp isp dual a ual access p ress from the configu ra ccess p ppoe conne e isp or conf 40 at io n pppoe ctions, you figure a stati can choose t ic ip address u the address s provided by user manual ...

  • Page 42: 3.2.7  W

    F 3 unified serv figu re 25 3.2.7 w a f in a ip d th re le w th st le vices router : russia d wan co advanced > for ipv6 wa nformation w ddress to acc pv6 address default ipv6 he internet. Esolving inte ength from th when the isp he dhcpv6 tateful. If a eased addres r dua l acces onfigur ipv6 > ipv ...

  • Page 43

    F unified serv ic a a figu re 26 p d th d w vices router cmpv6 disco a third option s well. : ipv6 wa prefix deleg dhcpv6 serv he lan side dhcpv6 clie when ipv6 is  usern r over messag n to specify an s etu p ation: selec vers availabl e. This optio ent. S pppoe type name: enter es will origi the i...

  • Page 44: 3.2.8  Checking Wan Status

    Unified services router user manual 43  password: enter the password required to login to the isp.  authentication type: the type of authentication in use by the profile: auto- negotiate/pap/chap/ms-chap/ms-chapv2.  dhcpv6 options: the mode of dhcpv6 client that will start in this mode: disable d...

  • Page 45

    F 3 unified serv figu re 27 t d 3.3 ba ad ba use ava vices router : connect the wan sta dynamically r andwidt dvanced > a ndwidth pro eful to ensur ailable wan r t ion statu atus page allo received from h contro advanced n files allow y re that low p n’s bandwidt us informa ows you to e m the isp, y...

  • Page 46

    F unified serv ba add tra sel reg figu re 28 to con vices router ndwidth pro ding a profi ffic selector lectors are e gulation. : l is t of c create a ne nfiguration p profile nam you can ch  if u pro sel pac  for ma choose the r files configu le which de r, so that b elements lik configure ew ban...

  • Page 47

    F unified serv figu re 29 ad on to bin vices router : bandw id dvanced > a nce a profile create a tra nds a bandwi  availabl  service: from the through apply to  traffic s bandwid address, be selec addresse ip addre r dth profil advanced n has been cr affic selector idth profile t e profiles: a y...

  • Page 48: 3.4.1  A

    F 3 3 unified serv figu re 30 3.4 fe th bal wa se to inv req the 3.4.1 a in t b b d th f th n vices router : t raff ic eatures is router sup lancing featu an connectiv tup > inter use auto f volves acces quired, you c e threshold o auto fa n this case o the secondar both wan p efore enabli detected ...

  • Page 49: 3.4.2 Load

    Unified services router user manual 48  secondary wan: selected wan is the secondary link. Failover detection settings: to check connectivity of the primary internet link, one of the following failure detection methods can be selected:  dns lookup using wan dns servers: dns lookup of the dns serve...

  • Page 50

    Unified services router user manual 49 protocol bindings: refer section 3.4.3 for details load balancing is particularly useful when the connection speed of one wan port greatly differs from another. In this case you can define protocol bindings to route low-latency services (such as voip) over the ...

  • Page 51: 3.4.3  P

    F 3 unified serv figu re 31 3.4.3 p a p c o b o a b vices router : load b a proto co protoco advanced > protocol bind onfigured se nly one of t e specified a f lan ip a ddresses can alancing mo r alanc ing i l bind ing ol bindi routing > dings are req ervices or any he available as well as th addres...

  • Page 52: 3.4.4 I

    F 3 unified serv figu re 32 3.4.4 i s a s th vices router : protoco and/or d p alias setup>inter single wan is is done by r l b ind ing d est inat io sing rnet setting ethernet por y configuring setup to a n n etwork s>ip aliasi rt can be acc g an ip alias 51 associat e k ing cessed via m s address....

  • Page 53

    F f unified serv figu re 33 int ip sub cli cli figu re 34 lis th int ip sub ed ad vices router : conf ig u terface: sets address: set bnet mask: s ick save sett ick don't sav : i p a lia s st of ip alias e list of ip a terface name address: th bnet mask: t it: opens the dd: opens the r uring the i t...

  • Page 54: 3.5.1 Routing

    Unified services router user manual 53 delete: deletes the selected ip aliases. 3.5 routing configuration routing between the lan and wan will impact the way this router handles traffic that is received on any of its physical interfaces. The routing mode of the gateway is core to the behavior of the...

  • Page 55

    F unified serv brid figu re 35 vices router device fo l2 and l receives the lan dge mode op : rout in g r or these othe l3 broadcast tagged traff n port 1 inter ption is availa g mode to er ports. With t traffic as w fic the tag in face. Able on dsr de termin 54 h bridge mo well as arp nformation w ...

  • Page 56

    Unified services router user manual 55 3.5.2 dynamic routing (rip) dsr- 150/150n/250/250n does not support rip. Setup > internet settings > routing mode dynamic routing using the routing information protocol (rip) is an interior gateway protocol (igp) that is common in lans. With rip this router can...

  • Page 57: 3.5.3 Static

    Unified services router user manual 56 3.5.3 static routing advanced > routing > static routing advanced > ipv6 > ipv6 static routing manually adding static routes to this device allows you to define the path selection of traffic from one interface to another. There is no communication between this ...

  • Page 58: 3.5.4  O

    F 3 unified serv figu re 36 3.5.4 o a os rou of os (in ent dsr vices router : stat ic r o ospfv2 advanced > spf is an int uting domain the network. Spf version nterior gatew terprise netw r-150, dsr- r ou te conf i 2 routing > erior gatewa n. It gathers l . 2 is a routin way protoco works. -150n, ds...

  • Page 59

    F unified serv figu re 37 int sta are int sub pri pri ine he wil rou de nei com os are co au au is s the vices router : ospfv2 terface: the p atus: this co ea: the are erfaces have bnet and hav iority: helps ority will be eligible to be llointerval: ll be sent ev uters attached adinterval: t ighbors...

  • Page 60: 3.5.5  O

    F 3 unified serv figu re 38 3.5.5 o a op you the dsr vices router : ospfv2 ospfv3 advanced > pen shortest u need to en e ospfv3 pro r-150, dsr- r 2 configu r 3 ipv6 > osp path first ve nable the osp ocess on rela -150n, dsr- at ion pf ersion 3 (os pfv3 proces ated interface -250 and dsr 59 pfv3) sup...

  • Page 61

    F unified serv figu re 39 int sta pri pri ine he wil rou de nei com os are co vices router : ospfv3 terface: the p atus: this co iority: helps ority will be eligible to be llointerval: t ll be sent ev uters attached adinterval: t ighbors decl mmon netwo spf requires e different, th st: the cost r 3 ...

  • Page 62: 3.5.6  6

    F 3 f unified serv figu re 40 3.5.6 6 figu re 41 vices router : ospfv3 6to4 tu adva 6t all en ip : 6 to 4 tu r 3 configu r nneling anced > ipv o4 is an inte lows ipv6 p nable autom pv4 option to unneling at ion g v6 > 6to4 tu ernet transiti packets to be matic tunne o reach a rem 61 unneling ion mec...

  • Page 63: 3.5.7 I

    3 f 3 unified serv 3.5.7 i figu re 42 3.6 co th ded rel vices router satap adva is me ne fo sp : i s a t a p is is or en th sp ip onfigura is router sup dicated dmz ating to wa r p tunne anced > ipv atap (intr echanism me etwork. Isat r site borde pecific link la t u n n e l s c atap subn atap subne...

  • Page 64

    Unified services router user manual 63 3.7 wan 3 (3g) configuration this router supports one of the physical ports wan3 to be configured for 3g internet access. Setup > internet settings > wan3 setup wan3 configuration for the 3g usb modem is available only on wan3 interface. There are a few key ele...

  • Page 65

    F unified serv figu re 43 ce 100 to con int the vices router o dm co click save click don't : wan3 c llular 3g in 00n. The ce establish a c nnection typ ternet setti e 3g usb mo r mz: if this o nfiguration m settings to s t save settin con f igurat nternet acces llular isp th connection. Pe settings...

  • Page 66

    Unified services router user manual 65 3.8 wan port settings advanced > advanced network > wan port setup the physical port settings for each wan link can be defined here. If your isp account defines the wan port speed or is associated with a mac address, this information is required by the router t...

  • Page 67

    F unified serv figu re 44 the ded vices router : p hysical e 3g usb m icated wan r l wan po modem can b n3 for dsr-1 o rt set ting be configure 000 and dsr 66 gs d as dedicat r-1000n. Ted wan2 fo u or dsr-500 user manual and dsr-50 00n as well as.

  • Page 68: Chapter  4.

    Unified services router user manual 67 chapter 4. Wireless access point setup this router has an integrated 802.11n radio that allows you to create an access point for wireless lan clients. The security/encryption/authentication options are grouped in a wireless profile, and each configured profile ...

  • Page 69: 4.1.1  W

    F 4 4 unified serv figu re 45 4.1.1 w t n u d t sh a t th 4.1.2 a w th p vices router : wireless wireles this wizard p network nam uses a tkip+ devices assoc the wizard h hared key fo ssociate with the last step his ap to bro add wir with wps en he network v resented wit r s netwo rk s netw provides...

  • Page 70

    Unified services router user manual 69  personal identification number (pin): the wireless device that supports wps may have an alphanumeric pin, and if entered in this field the ap will establish a link to the client. Click connect to complete setup and connect to the client.  push button configu...

  • Page 71: 4.2.1  W

    F 4 unified serv w a “w secu olde figu re 46 4.2.1 w if w re vices router wpa + wpa and wpa2 c wpa+wpa2” urity that it er wireless p : l is t of a w ireles s wep se f wep is the wish to acce emember pas  authe  encry keys p  wep wep to be conne r a2: this uses lients will us ” is a securi support...

  • Page 72: 4.2.2  W

    F 4 4 unified serv figu re 47 4.2.2 w a a 4.3 cr se on ap est vices router : profile c wpa or a pre-shared uthenticate t reating a tup > wirel nce a profile p ssid can b tablish a wl r con f igura r wpa2 key (psk) i the wireless and usin less setting (a group of be configure an network tion to se wi...

  • Page 73

    F unified serv the dete figu re 48 a v the you aut on se acc che vices router the ap profiles. Virtual a valuable throughp button on the profi e ap name i ected by clie : v irtual valuable pow e radio powe u know ther tomatically. Nce the ap se ttings > ac cept wireless eck mark ind r configuratio t...

  • Page 74: 4.3.1  P

    F 4 unified serv figu re 49 th av sum and par rec 4.3.1 p vices router : l is t of c po int on e clients con vailable acc mmary stats d indicate th rticular ap. Ceive traffic primary  optim lan group anoth param this w of mo  optim secur vaps client ssid few le r con figured n th e radio nnected t...

  • Page 75

    4 f 4 unified serv 4.4 tu se th ena fre fre con figu re 50 th mo set imp th set you of 4.5 w se wi wm bac vices router uning ra tup > wirel e radio set abled on the quency of o quency, the nnections (or : radio ca e ratified 80 ode, and then ttings are app prove bandw e available tting of the r u ha...

  • Page 76

    F 4 unified serv figu re 51 pro th en th de th bac 4.6 w se wi net vices router : wi- fi m ofile name: is field allow nable wmm is field allow fault class is field allo ckground). Wireless d tup > wirel ireless distri twork. This f r mult imed ia ws you to sel : ws you to ena of service: ows you to ...

  • Page 77

    F unified serv figu re 52 this chip inte chip wh th per (sim (co con in def ae for th by wd vices router : wireless s feature is pset/driver). Eroperate be pset/driver. Hen the user e wds link rformed. Inst milar to the onfigurable nfigurable). Effect the w fault ap. In es encryption a wds link e wd...

  • Page 78

    Unified services router user manual 77 wds encryption - displays the type of encryption used. It could be one of open/64 bit wep/128 bit wep/tkip/aes (use the term being used throughout the box i.E. Either ccmp or aes). Wds passphrase - this is required if the encryption selected is tkip/ccmp. We wo...

  • Page 79

    F 4 unified serv figu re 53 4.8 w ad wp for dro th sel p a c i p t d mor give vices router : advance wi-fi prot dvanced > w ps is a simpl r aps that e opdown list o e wps curr ected ap. Th personal id alphanumeric clicking the indication th push button this button a device and e re than one a en tim...

  • Page 80

    F unified serv figu re 54 vices router : wps con r nfig uratio on fo r an 79 ap wit h w wpa/w pa u a2 profile user manual e.

  • Page 82: Chapter  5.

    Chapter 5. Securing the private network you can secure your network by creating and applying rules that your router uses to selectively block and allow inbound and outbound internet traffic. You then specify how and to whom the rules apply. To do so, you must define the following: services or traffi...

  • Page 83

    U f 5 unified serv ou sel def pub acc fir pol ser f igu re 55 5.2 de to fir con the sel all sect info vices router utbound (lan ectively allo fault outboun blic dmz or cess from d rewall setti licy is allow rvices by cre : l ist of a efining r ols > sched rewall rules nfigured sch e week and ected i...

  • Page 84

    U f 5 unified serv f igu re 56 5.3 co ad all thi sum to 1 2 t c t c 3 4 5 vices router : l ist of a onfiguri dvanced > f l configured is list also mmary of the create a new . View the e 2. To edit or to edit a rul configuration to add a new created, the n 3. Chose the dmz, or in 4. Choose the is the...

  • Page 85

    Unified services router user manual 84  action & schedule: select one of the 4 actions that this rule defines: block always, allow always, block by schedule otherwise allow, or allow by schedule otherwise block. A schedule must be preconfigured in order for it to be available in the dropdown list t...

  • Page 86

    Unified services router user manual 85 this router supports multi-nat and so the external ip address does not necessarily have to be the wan address. On a single wan interface, multiple public ip addresses are supported. If your isp assigns you more than one public ip address, one of these can be us...

  • Page 87

    U f unified serv f igu re 57 vices router : examp le ex terna l address r e wh ere a l ip addre (10.30.30 86 n outboun ess (209.15 0.30) 6 nd snat r 56.200.225 ru le is use 5) to a pr u ed to ma p ivate dm z user manual p an z ip.

  • Page 88

    U f unified serv f igu re 58 vices router : the f ire to/from source/d r ewall rule m zone, s e destinatio 87 con f igura rv ice, act n ip addr 7 ation page ion , s ched resses as n e a llows y dules, and ne eded . U ou to defi d sp ecify user manual ine th e.

  • Page 89

    U 5 unified serv 5.4 co ad all list sum vices router onfiguri dvanced > f l configured t. This list a mmary of the r ng ipv6 firewall set ipv6 firewa also indicate e from/to zo 88 firewal ttings > ipv all rules on s whether th one as well a 8 l rules v6 firewall the router ar he rule is en as the se...

  • Page 90

    U f unified serv f igu re 59 vices router : the i pv the to/f source/d r 6 firewall from zone destinatio 89 l ru le conf e, serv ice, n ip addr 9 f igurat ion actio n, s resses as n n page allo ch edu les, ne eded . U ows you t and s pe ci user manual o define ify.

  • Page 91: 5.4.1  Fi

    U f 5 unified serv f igu re 60 5.4.1 fi e s al w s par from to z serv acti sen des log e vices router : l ist of a rewall r example 1: a ituation: yo llow inbound web server at olution: cre rameter m zone zone vice ion nd to local serv stination users g example 2: a r available rule co allow inboun ...

  • Page 92

    Unified services router user manual 91 situation: you want to allow incoming videoconferencing to be initiated from a restricted range of outside ip addresses (132.177.88.2 - 132.177.88.254), from a branch office. Solution: create an inbound rule as follows. In the example, cuseeme (the video confer...

  • Page 93

    Unified services router user manual 92 e x a m p l e 4: bloc example 4: block traffic by schedule if generated from specific range of machines use case: block all http traffic on the weekends if the request originates from a specific group of machines in the lan having a known range of ip addresses,...

  • Page 94

    U f unified serv f igu re 61 vices router : sch edul r e con figur 93 ratio n for 3 r the abov ve examp le u e. User manual.

  • Page 95

    U 5 unified serv 2 3 4 5 6 7 8 5.5 se ad cu rul vices router 2. Since we a (wan1/w 3. Select the a schedule an other times 4. As we defi menu 5. We want to 192.168.10 and add thi 6. We want to destination 7. We don’t n will add th 8. The last ste list to mak ecurity o dvanced > f stom service e conf...

  • Page 96

    Unified services router user manual 95 traffic, many custom or uncommon applications exist in the lan or wan. In the custom service configuration menu you can define a range of ports and identify the traffic type (tcp/udp/icmp) for this service. Once defined, the new service will appear in the servi...

  • Page 97

    U f f unified serv f igu re 62 f igu re 63 cre na vices router : l ist of u : custom eated service me: name of r user defin service s es are availab f the service 96 ed s erv ice conf igura ble as option for identific 6 es. At io n ns for firewal cation and m ll rule config management p u guration. ...

  • Page 98

    Unified services router user manual 97 type: the layer 3 protocol that the service uses. (tcp, udp, both, icmp or icmpv6) port type: this fields allows to select port range or multiple ports icmp type: this field is enabled when the layer 3 protocol (in the type field) is selected as icmp or icmpv6....

  • Page 99

    U f 5 unified serv f igu re 64 5.7 vp ad thi ips spe sup ena vices router : availabl pn pass dvanced > f is router’s f sec, pptp, a ecific firewa pport; instea abled. R le alg su sthrough firewall set firewall settin and l2tp v all rule or s d the approp 98 upport on h for fire ttings > vpn ngs can ...

  • Page 100

    U f 5 unified serv f igu re 65 5.8 ap ad ap on trig out can tran por an rul left doe port on t som dat sen the vices router : pass th ro pplicatio dvanced > a plication rul the lan o ggering wait tgoing ports, n be though nsmitting da rt triggering available op e does not h ft open when es not offer...

  • Page 101: 5.9.1  C

    U f 5 5 unified serv and typ wh f igu re 66 the bei 5.9 w the cre cre we 5.9.1 c ad co tru use blo fro bei vices router d inbound po pe of traffic hen enabled. : l ist of a e application ing triggered web cont e gateway o eate internet eating policie b based cont content dvanced > w ntent filterin u...

  • Page 102: 5.9.2  A

    U f 5 unified serv con net f igu re 67 5.9.2 a ad the to this ww ap vices router ntain session twork. : content preven t approve dvanced > w e approved this list are s list then ww.Yahoo.C proved url r n informatio filtering act ivex c ed url website filt urls is an allowed in a all of the com , yah...

  • Page 103: 5.9.3  B

    U f 5 unified serv f igu re 68 5.9.3 b ad ke the lis the tex vices router : two tru blocked dvanced > w yword block e keywords i st; i.E. If the e approved u xt or csv file r sted doma d keyw website filt king allows y in the config blocked key url list, the e for keywor 102 ains adde ords ter > blo...

  • Page 104: 5.9.4  E

    U f 5 unified serv f igu re 69 5.9.4 e ad exp a .C the exp blo clic vices router : one key export w dvanced > w port approv csv (comma- e user has to port blocked ocked to a cs ck the export r yword add web fi website filt ed urls: fe -separated va o click the ex d keywords: sv file which t button t...

  • Page 105

    U f 5 unified serv f igu re 70 5.10 ip ad an wa thi ip adm vio add dia vices router : export a p/mac b dvanced > ip nother availab an) when th is is ip/mac address wi ministrator c olation (i.E. T dress having agnosis. R ap pro v ed inding p/mac bin ble security m he lan node c binding, an ith the u...

  • Page 106

    U f 5 unified serv f igu re 71 5.11 in ad the inte ds bet adm det d vices router : the fo ll ip addre violation captured trusion dvanced > a e gateway’s ernet from a sr allow com tween the w ministrator to tected and pr dsr-150/150 r owing exa ess s erved n, the vio l d prevent advanced n intrusion ...

  • Page 107

    U f 5 unified serv f igu re 72 5.12 pr a a re th fl a if n fl fr vices router : in trusio rotecting advanced > attacks can ender the ro hreats such a lood attack c additionally f uninhibited etwork serv looding, and rom the offen r on preven t g from in advanced n be maliciou outer unusab as continu...

  • Page 108

    U f unified serv f igu re 73 w e sc b p l b si u co ic b id (i b th vices router : prot ecti wan securit enable stealth cans from th block tcp f ackets and b lan security block udp f imultaneous, udp connec onnections to csa setting block icmp dentified as icmp) flood block fragm hrough or to r ing ...

  • Page 109

    Unified services router user manual 108 block multicast packets: selecting this option drops multicast packets, which could indicate a spoof attack, through or to the gateway. Dos attacks: syn flood detect rate (max/sec): the rate at which the syn flood can be detected. Echo storm (ping pkts/sec): t...

  • Page 110

    U f unified serv f igu re 74 e th vices router : enablin enable igmp hrough the n r g igmp p p proxy: sele etwork, and 109 proxy for ecting this a manage mul 9 the lan allows the ro ticast stream outer to liste ms bound for u en in on ig the lan user manual mp traffic.

  • Page 111: Chapte

    U c f unified serv chapte a v route g r r t g r b t g p l f igu re 75 vices router er 6. Vpn provide ers or a remo gateway-to-g remote sites. Remote clie tunnel as the gateway in th remote clien behind a na tunnel as the gateway wa pptp server l2tp server : examp le dsr rou r ipse s a secure ote pc ...

  • Page 112

    U f unified serv f igu re 76 vices router : examp le network r e of th ree k through 11 ipsec clie the d sr i 1 e nt conn e ipsec gate ctions to t eway u the intern user manual na l.

  • Page 113

    U 6 f unified serv 6.1 vp set yo ike f igu re 77 to 1 t t s m t d c 2 vices router pn wiza tup > wizar u can use th e or vpn po : vpn wi easily estab . Select the v the tunnel c to a host on t set the con management to establish t determine th configured th 2. Configure r ard rd > vpn w he vpn wiza ...

  • Page 114

    Unified services router user manual 113 remote gateway type: identify the remote endpoint of the tunnel by fqdn or static ip address remote wan ip address / fqdn: this field is enabled only if the peer you are trying to connect to is a gateway. For vpn clients, this ip address or internet name is de...

  • Page 115

    Unified services router user manual 114 the vpn wizard is the recommended method to set up an auto ipsec policy. Once the wizard creates the matching ike and vpn policies required by the auto policy, one can modify the required fields through the edit link. Refer to the online help for details. Easy...

  • Page 116

    U f unified serv f igu re 78 on pha set exc pha the enc vices router : ips ec po nce the tunne ase 1 / phase ting, as the change (ike ase 1 ike p e phase 2 a cryption/auth r o licy con fi el type and e e 2 negotiatio policy can e) protocol d arameters ar auto policy hentication d 115 igu ration endp...

  • Page 117

    U f unified serv the ips end tun f igu re 79 a m aut sec vices router e vpn polic sec vpn tun dpoints are c nnel : ips ec po manual polic thentication curity parame r y is one half nnel. The ip configured he o licy con fi cy does not parameters b eter index (s 116 f of the ike/ p addresses o ere, al...

  • Page 118

    Unified services router user manual 117 as well the encryption and integrity algorithms and keys must match on the remote ipsec host exactly in order for the tunnel to establish successfully. Note that using auto policies with ike are preferred as in some ipsec implementations the spi (security para...

  • Page 119: 6.2.1  E

    U f 6 unified serv f igu re 80 6.2.1 e y u au au cr vices router : ips ec po extende you can also nique vpn uthenticate uthentication reated in the r o licy con fi ed auth configure e policy for e users from n server such e router are u 118 igu ration henticat xtended auth each user, y a stored h as...

  • Page 120: 6.4.1 Pptp

    Unified services router user manual 119 with a configured radius server, the router connects to a radius server and passes to it the credentials that it receives from the vpn client. You can secure the connection between the router and the radius server with the authentication protocol supported by ...

  • Page 121

    U f f unified serv f igu re 81 f igu re 82 s a av p ad b m vices router : pptp t u : pptp v setup > vpn a pptp vpn vailable on ptp server ddresses of a y the pptp managed by th r unne l conf pn conn e n settings > n can be estab the router fo is enabled, allowed clien server (the t he router. 120 f ...

  • Page 122: 6.4.2  L

    U f 6 unified serv f igu re 83 6.4.2 l s a av l ad vices router : pptp t u l2tp tu setup > vpn a l2tp vpn vailable on l2tp server ddresses of a r unne l conf unnel s n settings > n can be estab the router fo is enabled, allowed clien 12 f igurat ion support > l2tp > l blished throu or lan and l2tp c...

  • Page 123

    U f unified serv b m f igu re 84 s a ac vices router y the l2tp managed by th : l2tp tu setup > vpn a l2tp vpn ccess remote r server (the t he router. Unn el conf n settings > client can b e network wh 122 tunnel endpo f igurat ion > l2tp > l be configured hich are loca 2 oint), l2tp n – l2tp s 2tp ...

  • Page 124

    U f 6 unified serv th cl a av l ne se ha f igu re 85 6.5 gr s g th l ho not vices router he user can a licking conn a l2tp vpn vailable on t 2tp server i etwork serve erver. Once a ave access to : l2tp tu re tunn setup > vpn gre tunnels a he internet an ink discover ost is to be r e the followi o ds...

  • Page 125

    U f 6 unified serv t 1. 2. F igu re 86 w id ro co o in st g l fl 6.6 op s o ce it si ro vices router here are two . Create a gr . Setup a stat : gre tu when creating dentifies that oute as the g onfiguration once the tunn nterface set t tatic route is gre tunnel ip an subnet). Low between penvpn set...

  • Page 126

    Unified services router user manual 125  mode: openvpn daemon mode. It can run in server mode, client mode or access server client mode. In access server client mode, the user has to download the auto login profile from the openvpn access server and upload the same to connect.  server ip: openvpn ...

  • Page 127: 6.6.1  O

    U f 6 unified serv f igu re 87 6.6.1 o s s this other vices router : openvp openvp setup > vpn site) page allows r openvpn r pn con fig u pn rem n settings > s the user to clients to rea 126 u ration mote ne > openvpn o add/edit a r ach this netw 6 etwork n > openvp remote netw work. Pn remote n wor...

  • Page 128: 6.6.2  O

    U f 6 unified serv f igu re 88 com rem subn 6.6.2 o s this vices router : openvp mmon name: mote network net mask: n openvp setup > vpn page allows r pn remote : common n k: network a netmask of th pn auth n settings > s the user to u 127 e ne two rk name of the o address of th he remote res hentica...

  • Page 129

    U f unified serv f igu re 89 trus certi serv certi serv dh k tls key. Vices router : openvp sted certifi ificate. Ver/client c ificate. Ver/client k key: browse authentica . R pn authen icate (ca c certificate: key: browse a e and upload ation key: b 128 nt ica t ion certificate): browse an and uplo...

  • Page 130: Chapter  7.

    Chapter 7. Ssl vpn the router provides an intrinsic ssl vpn feature as an alternate to the standard ipsec vpn. Ssl vpn differs from ipsec vpn mainly by removing the requirement of a pre- installed vpn client on the remote host. Instead, users can securely login through the ssl user portal using a st...

  • Page 131

    U f unified serv f igu re 90 vices router : examp le r e of client 130 t less ssl 0 vpn conn nectio ns to u o the d sr user manual r.

  • Page 132

    U 7 f unified serv 7.1 gr ad the ass of f igu re 91 gro use vices router roups an dvanced > u e group pa sociated to se group” page  click a  click e  click d : l ist of g oup configur er types are a  pptp u with th  l2tp u with th  xauth configu databas  sslvp by the domain this use  admin:...

  • Page 133

    U f unified serv idl f igu re 92 wh fol typ vices router  guest u observe access.  captive from th e timeout: t : us er gro hen sslvpn lowing para pe ssl vpn  authen local u radius-  authen authent on the r  workgr multipl  ldap server. Details  active authent configu r user (read-o e and rev...

  • Page 134

    U f unified serv f igu re 93 lo to pol vices router portal multipl authent  timeou  retries after w : sslvpn gin policies set login p licies”. The f  group edited  disable devices r with their le active di tication dom ut: the timeo : the numbe hich the dsr n settings policies for following pa n...

  • Page 135

    U f unified serv f igu re 94 pol to bro vices router  deny l from lo login th : group l licy by brow set browser owsers”. The  group edited  deny l be used all non  allow l be used all non  defined to the defined browse  delete: you can ad drop down of defined  click s r login from w ogging i...

  • Page 136

    U f unified serv f igu re 95 pol to ip” vices router : b rowser licy by ip set policies ”. The follow  group edited  deny l be used all non  allow l be used all non  defined defined  check b  delete: you can ad drop down of defined  click s r r po licies bye ip for t wing paramet name: this l...

  • Page 137

    U f unified serv f igu re 96 . Log ad the use the vices router : ip po lic gin policies, dvanced > u e users page er is associat e “list of use  click a  click e  click d r ies option policy by br users > use e allows the ted to config ers” page wi add to create edit to update delete to clea 136 ...

  • Page 138: 7.1.1  U

    U f 7 unified serv f igu re 97 7.1.1 u ad t co it an t vices router : availabl users a dvanced > u the user conf ontain the fo  user n  first n  last na  select g  passwo  confirm against  idle tim t is recomme nd is a mixt the password r le users w and pas users > use figurations a ollowing ...

  • Page 139

    U f 7 unified serv f igu re 98 7.2 us set ssl pol pre res sup wh a m to t prec refe vices router : us er con sing ssl tup > vpn l vpn poli licies take p ecedence ove ource, ip a pported by t hether it appl more specific the same use cedence over erenced. R nfig urat io l vpn p settings > s icies can...

  • Page 140

    U f unified serv f igu re 99 to (i.E con sim ava the this the rou con def the the to t one on it (de vices router : l ist of s add a ssl v e. Applicable nfigured gro milarly, for ailable list of e next step i s rule. The p e subsequent uter. Based nfiguration f fined resourc e port range/p e final s...

  • Page 141

    U f unified serv f igu re 10 to c infor vices router 0: ssl vp configure a rmation:  policy users (m groups, drop do  apply p the pol network  policy require of addr  mask l of addr r pn policy policy for for: the pol making it a g , the user ca own. Policy to: th icy can prov k, etc. Name: this...

  • Page 142

    Unified services router user manual 141  icmp: select this option to include icmp traffic  port range: if the policy governs a type of traffic, this field is used for defining tcp or udp port number(s) corresponding to the governed traffic. Leaving the starting and ending port range blank correspo...

  • Page 143

    U f 7 unified serv f igu re 10 7.3 ap set por ser tra con int to r add som tcp ftp ftp ssh teln smt htt pop ntp citr term vnc vices router 1: list of ssl vp n pplicatio tup > vpn rt forwarding rvices after t affic from t nfigured port ernal host se remote users dress and tc me common p application p...

  • Page 144

    Unified services router user manual 143 as a convenience for remote users, the hostname (fqdn) of the network server can be configured to allow for ip address resolution. This host name resolution provides users with easy-to-remember fqdn’s to access tcp applications instead of error- prone ip addre...

  • Page 145

    U f 7 unified serv f igu re 10 7.4 ss set an sid a " set the vp it i clie the ove the iden acce vices router 2: list of sl vpn tup > vpn n ssl vpn tu de machine an "network ada tings is auto e private net pn client mac is important ent does not e ssl vpn v erlapping ran ip addresse ntical to the ess...

  • Page 146

    U f unified serv f igu re 10 the traf sen rou con cli vices router 3: ssl vp e router allo ffic from th nds traffic to utes give the ntrol over sp ient level con  enable referen tunnel tunnel vpn tu  dns su this co  primary created  second network  client served beginni client address r pn clie...

  • Page 147

    U f unified serv set if cor thr (typ the con f igu re 10 step 1.Op 2. A bott ma whi acco vices router tup > vpn the ssl vp rporate netw ough the v pically this r e remote ssl nfigure route  destina informa perspec  subnet 4: conf ig ps to install pen terminal add "userna tom of the su ac account b...

  • Page 148: 7.5.1  C

    U 7 f 7 unified serv 7.5 us set wh usi thi and acc me f igu re 10 7.5.1 c set t p cu co d la the bin is cl the in all the vices router ser port tup > vpn hen remote u ng the port is portal pro d privileges count is stor thod and por 5: list of can then creating tup > vpn the router al resented up us...

  • Page 149

    Unified services router user manual 148 authentication domain) can be presented with one or more of the router’s supported ssl services such as the vpn tunnel page or port forwarding page. To configure a portal layout and theme, following information is needed:  portal layout name: a descriptive na...

  • Page 150

    U f unified serv f igu re 10 vices router 6: ssl vp r pn po rta l 149 conf igur 9 ation u user manual.

  • Page 151: Chapter  8.

    Unified services router user manual 150 chapter 8. Advanced configuration tools 8.1 usb device setup setup > usb settings > usb status the d-link services router has a usb interface for printer access, file sharing and on the dsr-1000 / dsr-1000n models, 3g modem support. There is no configuration o...

  • Page 152

    U f 8 unified serv f igu re 10 8.2 us set thi vices router 7: usb d sb shar tup > usb is page allow r evice dete e port settings > ws configure 15 ect ion usb sharep the sharepo 1 port ort feature av vailable in th u his router. User manual.

  • Page 153

    U f unified serv f igu re 10 us ena rou the ins pri http us ena rou us ena rou the ins pri http us vices router 8: usb sh sb-1: able usb p uter to be sha e usb print talled) conn nters window p:// sb settings p able sharing uter to be sha sb-2: able usb p uter to be sha e usb print talled) conn nter...

  • Page 154

    U 8 f unified serv ena rou sha the sel ena ena 8.3 sm set the sen inb mo con f igu re 10 the the vices router able sharing uter to be sha aring enabl e lan inter ected to begi able printer: able storage ms serv tup > usb e d-link se nd and receiv box and allow ode, load bal ntrols on this 9: sms s e...

  • Page 155: 8.4.1  P

    U f 8 8 unified serv f igu re 11 the cli cli 8.4 ex th ma mo ips sec con in con 8.4.1 p set po con 99 vices router 0: sms s e e following d receiver: e text messa ick send mes ick don't sav xternal a he local user anagement ac ore secure, an sec endpoint ction describ nfiguration r all cases, th nfi...

  • Page 156

    U f unified serv ver wi th ext se sup f igu re 11 th ser aut use vices router rified by a u ll be used fo he dsr route ternal pop3 rver and cap pported only 1: pop3 a he “server ch rver(s). A ca thentication ed for authen r ser-uploaded or the pop3 a er acts only a server. This ptive portal u y with...

  • Page 157: 8.4.2  N

    U f 8 f unified serv f igu re 11 8.4.2 n set th con ma f igu re 11 vices router 2: pop3 c nt dom tup > exter he nt domai nfigured wo anage the dom 3: nt dom r ca file up main se rnal authen in server allo orkgroup fiel main of auth ma in auth 156 pload rver ntication > n ows users an d. Typically he...

  • Page 158: 8.4.3  R

    U 8 f unified serv 8.4.3 r set en sec aut ra f igu re 11 vices router radius tup > exter nterprise mod curity. A ra thenticate wi adius authe the authen radius se be reached authenticat secret: ent radius se the timeo the primary if communi 4: radiu r s serve rnal authen de for wirele adius server i...

  • Page 159: 8.4.4  A

    U 8 f 8 unified serv 8.4.4 a set ac th or mo tho th val th ips f igu re 11 8.4.5 l set th bet of dif hie lin di vices router active d tup > exter ctive directo he kerberos p rganizational ore than a mi ousands. He configured lidate the us his authentica sec / pptp / 5: active ldap s tup > exter he l...

  • Page 160

    U f 8 unified serv th its adm aut f igu re 11 8.5 au ad thi val cer gen the sig stro net vices router he details con hosts. The l ministrator a thenticate th 6: ldap uthentic dvanced > c is gateway u lidation (for rtificate from nerate and si e gateway c ned by a c ong assuranc twork vpn s r nfigure...

  • Page 161

    Unified services router user manual 160 the certificates menu allows you to view a list of certificates (both from a ca and self-signed) currently loaded on the gateway. The following certificate data is displayed in the list of trusted (ca) certificates: ca identity (subject name): the certificate ...

  • Page 162

    U f unified serv f igu re 11 vices router 7: certif i r cate summ 16 mary for i 1 ips ec and https m u manageme user manual ent.

  • Page 163

    U 8 f 8 unified serv 8.6 ad ad the act sav sta fun por de wh jum fra ena f igu re 11 8.7 pa ad a p thi lan mu of the vices router dvanced dvanced > s e dsr allow tual usage. Ving by lin atus” option nction of on rt is connec tection state hen a smaller mbo frames mes are ethe abled, the la 8: advanc...

  • Page 164

    U f unified serv dsr feat thi rou ins only proc f igu re 11 de dri lis vices router r-1000, dsr ture. Is feature su uter (i.E. Thes tallations su 1. Manual downlo router g y drivers pr cess will be p 2. Auto in the pac languag the opt interne server w 9: dev ice vice drivers vers. St of device r r-1...

  • Page 165

    U f unified serv ma bro cha f igu re 12 up dis dri de ins dis the dri ac ma vices router anual install: owse: the u anges. 0: installa on clicking played. Iver: descrip scription: th stalled: all t played in the em have been iver for thre tion: it consi  install remov anual install: r user can up s...

  • Page 166

    U f unified serv ins pre ins f igu re 12 on “se use set vices router stall history: eviously alo talled/uninst 1: select i nce the langu et language er must selec tings so that r : this displa ong with th talled. On of inst uage has bee ” option und ct the langua this configu 165 ays the histo e res...

  • Page 167: Chapte

    U c 9 f 9 unified serv chapte 9.1 co the gu ht ove ad inte gu (w f igu re 12 9.1.1 a to thi vices router er 9. Onfigura e primary m ui can be ac ttp, or from er ssl). Dministrator erface. The u uest user can wan) by enab 2: us er l admin s ols > admi is page allow r adm ation ac means to conf ccesse...

  • Page 168: 9.1.2  R

    U f 9 unified serv f igu re 12 9.1.2 r to b ro ad tr al vices router 3: admin remote ols > admi both https outer admin ddresses tha raffic can be llowed remo r s ett ing s e manag n > remote and telnet istrator can t are allowed e changed fr te manageme 167 gement e managem access can b define a k d...

  • Page 169: 9.1.3  C

    U f 9 9 unified serv f igu re 12 9.1.3 c in m w co 9.2 sn to sn net ma ma par con ac onl not als vices router 4: remote cli acc n addition management with the gui onsole prom nmp co ols > admi nmp is an a twork are be anager is pro anager can up rameters. Th nfiguration v cess control ly or read-w t...

  • Page 170

    U f unified serv f igu re 12 to the ide log vices router 5: snmp ols > admi e router is entifier settin gging. R users , t r n > snmp identified b ngs the sysn 169 ra ps , a nd system inf by an snmp name set her 9 access co fo p manager re is also use ontro l via the sys ed to identify u stem inform...

  • Page 171

    U f 9 unified serv f igu re 12 9.3 co to yo and yo the acc acc savi ple 1 2 3 vices router 6: snmp onfiguri ols > date u can config d with which u can choos e router’s rea curate mecha curate date a ing support t ease follow th . Select the r 2. If supporte 3. Determine custom, en r system in ng tim...

  • Page 172: 9.4.1  D

    U f 9 9 unified serv f igu re 12 9.4 lo thi and goe are set 9.4.1 d t t fr f vices router 7: date, t og confi is router allo d over the w es through th e detected b tings and the defining tools > log the logs fac rom the rou acilities: r time, and iguration ows you to c ireless ap. A he router an y ...

  • Page 173

    Unified services router user manual 172  kernel: this refers to the linux kernel. Log messages that correspond to this facility would correspond to traffic through the firewall or network stack.  system: this refers to application and management level features available on this router, including s...

  • Page 174

    U f unified serv f igu re 12 t th p su se t t lo at ev t w a co u m vices router 8: fa cility the display f he event lo age) or a r ubsequent se erver. Tools > log this page all ogged for dis ttacks, gene vents can be traffic throug whether the p accepted pa orresponding seful when t monitor traffi ...

  • Page 175

    Unified services router user manual 174 tries to make an ssh connection, those packets will be accepted and a message will be logged. (assuming the log option is set to allow for the ssh firewall rule.) dropped packets are packets that were intentionally blocked from being transferred through the co...

  • Page 176

    U f unified serv f igu re 12 t t vices router 9: log co tools > log this page allo r nfiguratio settings > ows you to c 175 on options ipv6 loggin onfigure the 5 s fo r t raff ng ipv6 loggin f ic throug ng u h router user manual.

  • Page 177: 9.4.2  S

    U f 9 unified serv f igu re 13 9.4.2 s t o ca co th ad d o ad se ad e- m in th en se th th o ro b w se vices router 0: ipv6 l sending tools > log once you hav an be sent to onfiguration he configure ddresses tha evice’s logs. Once you en ddress or fq ending e-ma ddresses are -mail that is mail addre...

  • Page 178

    U f unified serv f igu re 13 a lo th n n t re se f vices router 1: e-mail an external s ogs from the he local eve umber of log etwork issue this router su eceive differ elect the che qdn to the r conf igura syslog server e router. This ent viewer o gs over a su es or to moni upports up t rent log fa...

  • Page 179: 9.4.3  E

    U f 9 unified serv se p f igu re 13 9.4.3 e s t w t c w it is in o s t se tr vices router ent to the co age’s setting 2: syslog event l status > log the router g whenever tra tools > lo configuratio window with s very impor rder to unde status > log this page di ettings for f raffic and tun r onfigu...

  • Page 180

    U f 9 unified serv f igu re 13 9.5 ba to yo dif set fro or imp rout com few for fol 1 vices router 3: vpn lo acking u ols > system u can back fferent devic tings are sav m this file a execute a so portant! Ter, shut dow mplete. This w more second r backing up low the step . To save a c settings op s...

  • Page 181

    U f 9 unified serv 2 3 f igu re 13 9.6 up to yo the sel ima reb de imp shut this upg flas the vices router 2. To restore host. After settings. A 3. To erase y button. Th reboot auto 4: restori curr ent pgrading ols > firmw u can upgra e firmware u ect the firmw age is valida booted with evice info >...

  • Page 182

    U f 9 unified serv f igu re 13 thi ver not ver im the upg the whe keep dow 9.7 up to thi us vices router 5: firmwa is router also rsion is ava tification sec rsion for this mportant! New user d rade dsr’s old database en users dow p in mind: wngrade firm pgrading ols > firmw is page allow sb storage...

  • Page 183

    U f 9 unified serv f igu re 13 9.8 dy to dy ip set ora eac con tha dir the by vices router 6: firmwa ynamic ols > dyna ynamic dns addresses to up an accou ay.Net. Ch configur nfigured, the at features th ected to the e host and do the account r are upgra dns set mic dns (ddns) is o be located unt wi...

  • Page 184

    U f 9 unified serv f igu re 13 9.9 us to the sta vices router 7: dynam sing dia ols > system e router has tus and over r mic dn s co agnostic m check built in tool all network h 183 onf igu rat i tools ls to allow a health. 3 ion an administraator to evalu u ate the comm user manual munication.

  • Page 185: 9.9.1  P

    U f 9 9 unified serv f igu re 13 9.9.1 p t o co 9.9.2 t t an d vices router 8: rout er ping this utility c n the netwo ommand out trace r this utility w nd this route estination w r r d ia gnost an be used t rk connected put will appe route will display er. Up to 30 ill be display 184 ics tools a to...

  • Page 186: 9.9.3  D

    U f 9 9 unified serv f igu re 13 9.9.3 d t ty ex h this 9.9.4 r t d al an tr vices router 9: sample dns lo to retrieve th ype the inter xists, you w host” indicate s feature assu router the static an display for th llow the rou nd wan in raffic and rou r e t race rou okup he ip address rnet name in ...

  • Page 187

    U 9 f unified serv 9.10 lo to the has sho firs f igu re 14 vices router ocalizati ols > set la e router gui s to be enabl own. The use st, in order to 0: localiz r ion anguage i displays co ed so that th er must confi o install a la zation 186 ontent in en he appropriat igure the pac nguage pack 6 g...

  • Page 188: 10.1.1 Device Status

    Unified services router user manual 187 chapter 10. Router status and statistics 10.1 system overview the status page allows you to get a detailed overview of the system configuration. The settings for the wired and wireless interfaces are displayed in the dsr status page, and then the resulting har...

  • Page 189

    U f unified serv f igu re 14 vices router 1: dev ice r s tatus d i 188 splay 8 u user manual.

  • Page 190: 10.1.2  R

    U f unified serv f igu re 14 10.1.2 r s t u tr w d st vices router 2: dev ice resourc status > dev the dashboar tilization is raffic throug wan1, wan ropped by th tatistics. R s tatus d i ce utili vice info > rd page pres a function gh the route n2/dmz, vl he interface. 189 splay (con zation dashboa...

  • Page 191

    U f unified serv f igu re 14 vices router 3: resour r rce u t iliza 190 atio n stati 0 istics u user manual.

  • Page 192

    U f unified serv f igu re 14 vices router 4: resour r rce u t iliza 19 atio n data 1 a (con tinueed) u user manual.

  • Page 193: 10.2.1  W

    U f 1 unified serv f igu re 14 10.2 tr 10.2.1 w s d e le an in p t p se vices router 5: resour raffic sta wired p status > tra detailed tran each interfac evel informa nd the cumu nterface alon orts, this tab the statistics ort level da econds. R rce u t iliza atistics port sta affic monito smit and...

  • Page 194: 10.2.2  W

    U f unified serv f igu re 14 10.2.2 w s t en tr th th t o ar th m vices router 6: physica wireles status > tra the wireless nabled acces ransmitted ov he details on he vap. The clients co n the list of re shown for his statistics modified to v r al port sta s statis affic monito s statistics ss poin...

  • Page 195: 10.3.1  S

    U f 1 unified serv f igu re 14 10.3 ac 10.3.1 s s t se vices router 7: ap spe ctive co session status > act this table li ession’s prot r cific stat i onnectio ns throu tive session ists the acti tocol, state, l 194 ist ics ns ugh the ns ive internet local and rem 4 e route sessions th mote ip addr ...

  • Page 196

    U f unified serv f igu re 14 vices router 8: list of r cu rren t a 195 active fir 5 rewall ses sions u user manual.

  • Page 197: 10.3.2  W

    U f unified serv 10.3.2 w s t cl th t p se f igu re 14 10.3.3 l s t sw d vices router wireles status > wir the clients c lients are so he wireless l the statistics ort level da econds. 9: list of lan cli status > lan the lan cli witch. The iscovered la r s clien reless clien connected to rted by the...

  • Page 198: 10.3.4  A

    U f unified serv f igu re 15 10.3.4 a s y as th tr if th a fie poli end tx ( tx ( stat vices router 0: list of active v status > act you can view ssociations. He traffic d ransmitted/re f a vpn pol he connect b list of active ld icy name dpoint (kb) (packets) te r lan host vpn tu tive vpns w and cha...

  • Page 199

    U f unified serv f igu re 15 a d fie use ip a loc pee con vices router 1: list of all active ssl isplayed on t ld er name address cal ppp interface er ppp interface nnect status r cu rren t a l vpn conn this page as descr the ss router. Ip addr e the inte e ip the ass status connec 198 active v p ec...

  • Page 200

    Unified services router user manual 199 chapter 11. Trouble shooting 11.1 internet connection symptom: you cannot access the router’s web-configuration interface from a pc on your lan. Recommended action: 1. Check the ethernet connection between the pc and the router. 2. Ensure that your pc’s ip add...

  • Page 201

    Unified services router user manual 200 symptom: router cannot access the internet. Possible cause: if you use dynamic ip addresses, your router may not have requested an ip address from the isp. Recommended action: 1. Launch your browser and go to an external site such as www.Google.Com . 2. Access...

  • Page 202: Router

    Unified services router user manual 201 symptom: router can obtain an ip address, but pc is unable to load internet pages. Recommended action: 1. Ask your isp for the addresses of its designated domain name system (dns) servers. Configure your pc to recognize those addresses. For details, see your o...

  • Page 203: Device

    Unified services router user manual 202 4. Observe the display:  if the path is working, you see this message sequence: pinging with 32 bytes of data reply from : bytes=32 time=nn ms ttl=xxx  if the path is not working, you see this message sequence: pinging with 32 bytes of data request timed out...

  • Page 204

    Unified services router user manual 203  verify that the network (subnet) address of your pc is different from the network address of the remote device.  verify that the cable or dsl modem is connected and functioning.  ask your isp if it assigned a hostname to your pc. If yes, select network con...

  • Page 206: Chapter  12.  Credits

    Chapter 12. Credits microsoft, windows are registered trademarks of microsoft corp. Linux is a registered trademark of linus torvalds. Unix is a registered trademark of the open group..

  • Page 207: Appendix A.  Glossary

    Unified services router user manual 206 appendix a. Glossary arp address resolution protocol. Broadcast protocol for mapping ip addresses to mac addresses. Chap challenge-handshake authentication protocol. Protocol for authenticating users to an isp. Ddns dynamic dns. System for updating domain name...

  • Page 208

    Unified services router user manual 207 pppoe point-to-point protocol over ethernet. Protocol for connecting a network of hosts to an isp without the isp having to manage the allocation of ip addresses. Pptp point-to-point tunneling protocol. Protocol for creation of vpns for the secure transfer of ...

  • Page 210

    Appendix b. Factory default settings feature description default setting device login user login url http://192.168.10.1 user name (case sensitive) admin login password (case sensitive) admin internet connection wan mac address use default address wan mtu size 1500 port speed autosense local area ne...

  • Page 211: Port Forwarding & Firewall

    Unified services router user manual 210 appendix c. Standard services available for port forwarding & firewall configuration any aim bgp bootp_client bootp_server cu-seeme:udp cu-seeme:tcp dns:udp dns:tcp finger ftp http https icmp-type-3 icmp-type-4 icmp-type-5 icmp-type-6 icmp-type-7 icmp-type-8 i...

  • Page 212

    Unified services router user manual 211 appendix d. Log output reference facility: system (networking) log message severity log message severity dbupdate event: table: %s opcode:%d rowid:%d debug bridgeconfig: too few arguments to command %s error networkintable.Txt not found debug bridgeconfig: too...

  • Page 213

    Unified services router user manual 212 nimfadvoptsetwrap: user has changed mtu option debug ddns: sql error: %s error nimfadvoptsetwrap: mtu: %d debug sqlite3queryresget failed.Query:%s error nimfadvoptsetwrap: old mtu size: %d debug sqlite3queryresget failed.Query:%s error nimfadvoptsetwrap: old p...

  • Page 214

    Unified services router user manual 213 %s:dbupdate event: table: %s opcode:%d rowid:%d debug failed to commit error %s:%d sip enable: %s debug ifstatusdbupdate: failed to begin " error siptblhandler:failed to update ifstatic debug %s: sql error: %s error siptblhandler:failed to update configport de...

  • Page 215

    Unified services router user manual 214 pprivsep: %s debug nimfgetupdatemacflag: unable to get flag from mactable error %s:dbupdate event: table: %s opcode:%d rowid:%d debug nimfmacget: updating mac address failed error re-starting sshd daemon.... Debug sqlite3queryresget failed.Query:%s error sshd ...

  • Page 216

    Unified services router user manual 215 getdnsfromisp: %s debug subnetaddress should be provided with accessoption 2 error idletimeoutflag: %s debug failed to restart sshd error idletimeoutvalue: %d debug unable to open the " error authmetho: %d debug sqlite3queryresget failed.Query:%s error executi...

  • Page 217

    Unified services router user manual 216 %s: buffer overflow debug failed to clear vlan for %d error %s: value of %s in %s table is: %s debug failed to set vlan entry for vlan %d error %s: returning with status: %s debug failed to set vlan entries, while enabling \ error dnsresolverconfigure: address...

  • Page 218

    Unified services router user manual 217 pppoemgmttblhandler: netmask: %s debug xl2tpdstop failed error pppoemgmttblhandler: authopt: %d debug writing xl2tpd.Conf failed error pppoemgmttblhandler: satus: %d debug writing options.Xl2tpd failed error pppoeenable: ppp dial string: %s debug xl2tpdstop fa...

  • Page 219

    Unified services router user manual 218 l2tpmgmttblhandler: username: %s debug pppoemgmttblhandler: unable to get current mtu option error l2tpmgmttblhandler: password: %s debug pppoemgmttblhandler: unable to get the mtu error l2tpmgmttblhandler: accountname: %s debug pppoemgmttblhandler: pppoe enab...

  • Page 220

    Unified services router user manual 219 the enable command is %s error dhcpcmgmttblhandler: dhclient enable failed error l2tpenable:executing the command failed error dhcpcmgmttblhandler: dhcpc release failed error l2tpdisable: command string: %s error dhcpcmgmttblhandler: dhcpc disable failed error...

  • Page 221

    Unified services router user manual 220 created eap/peap context: ok debug setting message in fragment buffer: error error deleted eap/peap context: ok debug allocating tls read buffer is null: error error upper eap sent us: decision = %d method state = %d debug setting last fragment: error error p2...

  • Page 222

    Unified services router user manual 221 error rcvd. Opcode %d. Debug plugin context is null error pctx null. Debug deriving implicit challenge: error error tls message len changed in the fragment, ignoring. Debug generating nt response: error error no data to send while fragment ack received. Debug ...

  • Page 223

    Unified services router user manual 222 pfb->msgbuff is null. Debug setting profile to glue layer: error. Error error calculating binary. Debug _eapctxcreate failed. Error error calculating binary. Debug %d authentication not enabled in the system. Error adpdigestinit for sha1 failed. Debug initiali...

  • Page 224

    Unified services router user manual 223 password change is not allowed for this user debug eap-peap not enabled in system configuration. Error completed writing the policy debug eap-wsc not enabled in system configuration. Error completed writing the sa debug pap not enabled in system configuration....

  • Page 225

    Unified services router user manual 224 peapctx == null or ppdu == null. Error could not initialize des-ecb error received eap pdu bigger than eap_mtu_size. Error error cleaning cipher context. Error received eap pdu bigger than eap_mtu_size. Error error cleaning cipher context. Error state machine ...

  • Page 226

    Unified services router user manual 225 could not open database: %s debug sqlite3queryresget failed error cpu log file not found debug radsendtoserver: socket: %s error mem log file not found debug radsendtoserver: bind() failed: %s: %s error cpumemusagedbupdatehandler: update query: %s debug radrec...

  • Page 227

    Unified services router user manual 226 adding dictionary attribute '%s' debug failed to set default retries value error adding dictionary value %s debug error: incomplete db update information. Error receiving attribute: %s debug old values result does not contain 2 rows error processing attribute:...

  • Page 228

    Unified services router user manual 227 next synchronization after" debug unable to set debug for radauth. Error next synchronization after %d \ debug unable to set debug level for radauth. Error primary is not available, " debug error: option value not specified error secondary is not available, " ...

  • Page 229

    Unified services router user manual 228 timeout after semtake debug mempartalloc for %d size failed error srcid=%d(%s) cmd=%d debug mempartalloc for %d size failed error un-registerting component with id %d debug no handler registered for this umi context error failed to send ioctl request: dst(%d) ...

  • Page 230

    Unified services router user manual 229 cpumemusagedbupdatehandler: sql error: %s error invalid privacy algorithm error unable to open the db file %s error failed to get host address error umiinit failed error invalid version error unable to register to umi error snmp v3 trap configuration failed er...

  • Page 231

    Unified services router user manual 230 wan traffic counters are restared debug deleting schedule based firewall rules. Debug traffic limit has been reached debug deleting schedule based firewall rules from db. Debug traffic meter monthly limit has been changed to %d. Debug update schedule based fir...

  • Page 232

    Unified services router user manual 231 enabling attack check for l2tp. Debug updating blocksites keyword from \ debug enabling attack check for udp flood. Debug inserting blocksites keyword \ debug enabling attack check for ipsec. Debug deleting trusted domain \ debug enabling attack check for pptp...

  • Page 233

    Unified services router user manual 232 internet on port %d %d:%d:%d:%d:%d enabling remote access management for ip address range" debug disabling port trigger rule for %d:%d:%d:%d:%d debug enabling remote access management to only this pc. Debug adding port trigger rule for %d:%d:%d:%d:%d debug dis...

  • Page 234

    Unified services router user manual 233 update firewallrules6 where schedulename = '%s' to new " debug fwlbspilloverconfigure: could not set postrouting rules error dns proxy restart failed debug fwlbspilloverconfigure: something going wrong here error deleting interface to ifgroup failed debug fwl2...

  • Page 235

    Unified services router user manual 234 facility: local0 (wireless) log message severity log message severity (node=%s) setting %s to val = %d debug sqlite3queryresget failed error custom wireless event: '%s' debug sqlite3queryresget failed error wireless event: cmd=0x%x len=%d debug vap(%s) set bea...

  • Page 236

    Unified services router user manual 235 got pnac_event_preauth_success event for : %s debug udp failed, received length is %d error event for non-existent node %s debug umiioctl(umi_comp_kdot11, error pnac_event_eapol_start event received debug umiioctl(umi_comp_udot11,%d,%d ) \ error pnac_event_eap...

  • Page 237

    Unified services router user manual 236 sending eapol pdu to pnac... Debug dot11_rx_eapol_keymsg: unknown ifname %s error creating pnac authenticator with values %d %d - %s debug cmd %d not supported.Sender=%d error profile %s does not exist debug inteface name passed is null error iapp initialized....

  • Page 238

    Unified services router user manual 237 pnacrecvrtn: no corresponding pnac port pae found debug umiioctl(umi_comp_iapp,%d) failed error sending unicast key debug invalid ie. Error sending broadcast key debug umiioctl(umi_comp_kdot11_vap, %d ) failed error from pnacauthpaedisconnected: calling pnactx...

  • Page 239

    Unified services router user manual 238 from pnacrecvmapi: pkt body len = %d, pkttype = %d debug eapolrecvkeymsg: invalid descriptor version error from pnacpduprocess: received pnac_eap_packet debug eapolrecvkeymsg: incorrect descriptor version error from pnacpduprocess: currentid = %d debug eapolre...

  • Page 240

    Unified services router user manual 239 from pnacbackauthfail: calling pnactxcannedfail debug rc4 framework initialization failed error %s returned error debug pnac framework initialization failed error pnacumiioctlhandler: cmd: %s(%d) debug error: option value not specified error %s not configured ...

  • Page 241

    Unified services router user manual 240 phyport:%s pnacradxlateradpktintegritychk: no corresponding " pnacportpaedeconfig:kpnacportpaedec onfig failed warn error from pnacradxlateradpktintegritychk: no message " error pnacportpaedeconfig:kpnacportpaedec onfig failed warn error from pnacradxlateradpk...

  • Page 242

    Unified services router user manual 241 failed to initiate pbc based enrolle association error pnackeyinfoget:failed to allocate buffer error invalid association mode. (allowed modes : pin/pbc) error pnac user comp id not set. Dropping eapol key pkt error wpsenable: running wsccmd failed error pnacu...

  • Page 243

    Unified services router user manual 242 invalid cipher type %d error error from pnacauthinit: pnacauthkeytxinit failed error profile supports wep stas,group cipher must be wep error error from pnacauthinit: pnacreauthtimerinit failed error profile %s does not exist error error from pnacauthinit: pna...

  • Page 244

    Unified services router user manual 243 error in executing db update handler error pnaceapradauthsend: invalid arguments error sqlite3queryresget failed error pnaceapradauthsend: failed to allocate inbuffer error error: incomplete db update information. Error pnacxmit : umiioctl failed[%d] error old...

  • Page 245

    Unified services router user manual 244 invalid config data error facility: kernel log message severity log message severity dnat: multiple ranges no longer supported debug %s: %s%s:%d -> %s:%d %s, debug dnat: target size %u wrong for %u ranges, debug %s: %s%s:%d %s, debug dnat: wrong table %s, tabl...

  • Page 246

    Unified services router user manual 245 %s%d: bad sequence number: %d, expected: %d, debug ifmedia_ioctl: no media found for 0x%x, debug pppiocdetach file->f_count=%d, debug ifmedia_ioctl: switching %s to , dev- >name debug ppp: outbound frame not passed debug ifmedia_match: multiple match for debug...

  • Page 247

    Unified services router user manual 246 %s: mac_del %02x:%02x:%02x:%02x:%02x:%02x, dev->name, addr[0], addr[1], addr[2], addr[3], addr[4], addr[5] debug %02x, ((u_int8_t *)p)[i] debug %s: mac_kick %02x:%02x:%02x:%02x:%02x:%02x, dev->name, addr[0], addr[1], addr[2], addr[3], addr[4], addr[5] debug fi...

  • Page 248

    Unified services router user manual 247 %s: flow dst=%s, __function__, xfrmstraddr(fl->fl6_dst, family) debug encrypt data length mismatch debug %s: flow src=%s, __function__, xfrmstraddr(fl->fl6_src, family) debug encrypt data does not compare debug a guy asks for address mask. Who is it? Debug tki...

  • Page 249

    Unified services router user manual 248 ip_rt_bug: %u.%u.%u.%u -> %u.%u.%u.%u, %s, debug txmic debug udp: short packet: from %u.%u.%u.%u:%u %d/%d to %u.%u.%u.%u:%u, debug %02x, hk->kv_txmic[i] debug udp: bad checksum. From %d.%d.%d.%d:%d to %d.%d.%d.%d:%d ulen %d, debug %s: unable to update h/w beac...

  • Page 250

    Unified services router user manual 249 ipt_time loading debug %s: failed to register sysctls!, sc- >sc_dev->name debug ipt_time unloaded debug %s: mac %d.%d phy %d.%d, dev- >name, debug ip_conntrack_irc: max_dcc_channels must be a positive integer debug 5 ghz radio %d.%d 2 ghz radio %d.%d, debug ip...

  • Page 251

    Unified services router user manual 250 window=%u , ntohs(th->window) debug ipsec_err [%s:%d]: max (%d) no of sa limit reached, debug res=0x%02x , (u8)(ntohl(tcp_flag_word(th) & tcp_reserved_bits) >> 22) debug ipsec_err [%s:%d]: max (%d) no of sa limit reached, debug urgp=%u , ntohs(th->urg_ptr) deb...

  • Page 252

    Unified services router user manual 251 physout=%s , physoutdev->name debug %s: error. Dst refcount value less than 1 (%d), debug mac= debug for %s device refcnt: %d ,pdst- >dev->name, debug %02x%c, *p, debug %s: got null m:%p *m:%p sa:%p *sa:%p,__func__,ppbufmgr, debug nat: no longer support implic...

  • Page 253

    Unified services router user manual 252 >msg_iov[i].Iov_base)[j] %02x, skb->data[i] debug de initializing by \ info _lvl pppol2tp: _fmt, ##args debug kernel umi module loaded info %02x, ptr[length] debug kernel umi module unloaded info %02x, ((unsigned char *) m- >msg_iov[i].Iov_base)[j] debug loadi...

  • Page 254

    Unified services router user manual 253 test key, key debug %s: %s (, dev_info, ath_hal_version info pre-hashed key, key debug %s: driver unloaded, dev_info info const char *descr, krb5_keyblock *k) { debug %s: driver unloaded, dev_info info aes 128-bit key, &key debug %s: version 2.0.0 info const c...

  • Page 255

    Unified services router user manual 254 failed to set aes encrypt key debug icmp: %u.%u.%u.%u: info aes %s decrypt test duration: %d:%d, hard ? Hard : soft, debug icmp: %u.%u.%u.%u: source info failed to set aes encrypt key debug wrong address mask %u.%u.%u.%u from info failed to set aes encrypt key...

  • Page 256

    Unified services router user manual 255 md5 software test %s, md5softtest(0) ? Failed : passed debug %s: options rejected: o[0]=%02x, o[1]=%02x, warnin g md5 hardware test: debug %s: don't know what to do: o[5]=%02x, warnin g md5 hardware test %s, md5hardtest(0) ? Failed : passed debug *** new port ...

  • Page 257

    Unified services router user manual 256 value = %x ::: at page = %x : addr = %x debug cix %u (%u) bad ratekbps %u mode %u, warnin g reg size == 32 bit debug %s: no rates for %s?, warnin g value = %x ::: at page = %x : addr = %x debug no rates yet! Mode %u, sc- >sc_curmode warnin g reg size == 64 bit...

  • Page 258

    Unified services router user manual 257 from g %s(): addba mode is auto, __func__ debug martian source %u.%u.%u.%u from warnin g %s(): invalid tid value, __func__ debug ll header: warnin g error in add- no node available debug unable to create ip_set_list error %s(): channel capabilities do not matc...

  • Page 259

    Unified services router user manual 258 [%d]\tmacaddr\t%s, j, debug ppp: no memory (vj comp pkt) error [%d]\tdescp\t\t%s, j, ni- >node_trace[i].Descp debug ppp: no memory (comp pkt) error [%d]\tvalue\t\t%llu(0x%llx), j, ni- >node_trace[i].Value, debug ppp: compressor dropped pkt error ifmedia_add: n...

  • Page 260

    Unified services router user manual 259 __function__ %s: failed to register sysctls!, proc_name debug ppp: vj uncompressed error error pktlog_tag %s: proc_mkdir failed, __function__ debug ppp_decompress_frame: no memory error pktlog_tag %s: pktlog_attach failed for %s, debug ppp_mp_reconstruct bad s...

  • Page 261

    Unified services router user manual 260 %s: cancel dfs wait period on channel %d, __func__, sc- >sc_curchan.Channel debug %s: %s:%d: bad tunnel magic error non-dfs channel, cancelling previous dfs wait timer channel %d, sc- >sc_curchan.Channel debug %s: %s:%d: bad tunnel magic error %s: unable to re...

  • Page 262

    Unified services router user manual 261 failed ,__func__ int)len %s: unable to start recv logic, debug %03d:, i error %s: invalid interface id = %u, __func__, if_id debug %02x, ((unsigned char *)p)[i] error %s: unable to allocate channel table, __func__ debug mic check failed error %s: tx antenna sw...

  • Page 263

    Unified services router user manual 262 >ifname wakingup due to wow signal debug unable to register kifdev to umi error %s, wowstatus = 0x%x, __func__, wowstatus debug error: %s: timeout at page %#0x addr %#0x error pattern added already debug error: %s: timeout at page %#0x addr %#0x error error : ...

  • Page 264

    Unified services router user manual 263 0x%08x 0x%08x, 0x%08x 0x%08x 0x%08x 0x%08x, debug ath_pci: 32-bit dma not available error sc_txq[%d] : , i debug ath_pci: cannot reserve pci memory region error tid %p pause %d : , tid, tid->paused debug ath_pci: cannot remap pci memory region) ; error %d: %p ...

  • Page 265

    Unified services router user manual 264 index:%d, value:%d, code:%x, rate:%d, flag:%x, i, (int)validrateindex[i], debug dev is null %p %p ,dev,dst critical ratetable:%d, maxvalidrate:%d, ratemax:%d, prc->ratetablesize,k,prc- >ratemaxphy debug packet is fragmented %d,pbufmgr- >len critical can't allo...

  • Page 266

    Unified services router user manual 265 appendix e. Rj-45 pin-outs signal rj-45 cable adapter signal rj-45 pin db-9 pin cts nc nc nc dtr nc nc nc txd 6 3 rxd gnd 5 5 gnd gnd 4 5 gnd rxd 3 2 txd dsr nc nc nc rts nc nc nc.

  • Page 267

    Unified services router user manual 266 appendix f. Product statement 1. Dsr-1000n federal communications commission (fcc) compliance notice: radio frequency notice this equipment has been tested and found to comply with the limits for a class b digital device, pursuant to part 15 of the fcc rules. ...

  • Page 268

    U i t u c d t e t t o - s - e t h - b e - e s s t s - a t - p i t s - - 5 u o unified serv important this equipme users must fo compliance w documented in this transmitte europe – eu this device co test methods h of the r&tte - en 60950-1: safety of infor - en 300 328 v electromagnet transmission e ...

  • Page 269

    U unified serv Česky [czech] dansk [danish] deutsch [german] eesti [estonian] english español [spanish] Ελληνική [greek] français [french] italiano [italian] latviski [latvian] lietuvių [lithuanian] nederlands [dutch] malti [maltese] magyar [hungarian] polski [polish] vices router y [d-link co požad...

  • Page 270

    U unified serv português [portuguese] slovensko [slovenian] slovensky [slovak] suomi [finnish] svenska [swedish] vices router [d-link co essenciais [d-link co ostalimi rel [d-link co všetky prís [d-link co 1999/5/ey härmed in med de vä direktiv 199 r orporation] de e outras dispo orporation] izja le...

  • Page 271

    Unified services router user manual 270 2.Dsr-500n federal communications commission (fcc) compliance notice: radio frequency notice this equipment has been tested and found to comply with the limits for a class b digital device, pursuant to part 15 of the fcc rules. These limits are designed to pro...

  • Page 272

    U e t t o - - - t s - - unified serv europe – eu this device co test methods h of the r&tte - en 60950-1: safety of info - en 300 328 v electromagn transmission harmonized - en 301 489- electromagne standard for systems and this device is states and eft - in italy the en to use the de network serv -...

  • Page 273

    U unified serv Česky [czech] dansk [danish] deutsch [german] eesti [estonian] english español [spanish] Ελληνική [greek] français [french] italiano [italian] latviski [latvian] lietuvių [lithuanian] nederlands [dutch] malti [maltese] magyar [hungarian] polski [polish] vices router [d-link cor požada...

  • Page 274

    U unified serv português [portuguese slovensko [slovenian] slovensky [slovak] suomi [finnish] svenska [swedish] vices router ] [d-link co essenciais [d-link co ostalimi re [d-link co všetky prís [d-link co 1999/5/ey härmed in med de vä direktiv 19 r orporation] dec s e outras disp orporation] izja e...

  • Page 275

    U 3 f t p i e r i d o f a u t t i r u t i t [ w r t t c l l b b i o d t e e e e unified serv 3.Dsr-250 federal comm this equipmen part 15 of the interference in energy and, if radio commun installation. If determined by one of the follo  reor  incre  conn conn  cons fcc caution : any changes o u...

  • Page 276

    Unified services router user manual 275 regulatory statement (r&tte) european standards dictate maximum radiated transmit power of 100mw eirp and frequency range 2.400- 2.4835ghz; in france, the equipment must be restricted to the 2.4465-2.4835ghz frequency range and must be restricted to indoor use...

  • Page 277

    Unified services router user manual 276 4. Dsr-150n federal communication commission interference statement this equipment has been tested and found to comply with the limits for a class b digital device, pursuant to part 15 of the fcc rules. These limits are designed to provide reasonable protectio...

  • Page 278

    U e s e e s t s i a t t p i unified serv electromagnet standard for ra en 301 489-1 electromagnet standard for ra this device is states and eft in italy the end authorization t telecommunic this device m power may be information the Česky [czech] dansk [danish] deutsch [german] eesti [estonian] engl...

  • Page 279

    U i t c ( ( o c d d s r t e d c n s w t b o 1 2 3 4 5 w unified serv [hungarian] polski [polish] português [portuguese] slovensko [slovenian] slovensky [slovak] suomi [finnish] svenska [swedish] industry cana this device co conditions: (1) this device (2) this devic operation. Ce dispositif e de lic...