D-Link DSA-3100 Owner's Manual

D-link systems owner's manual hotspot gateway dsa-3100
Hide thumbs Also See for DSA-3100:

Quick Links

D-Link
TM
Express EtherNetwork
DSA-3100
Hotspot Gateway
Manual
January 2004
Fourth Edition
Building Networks for People
Table of Contents
loading

Summary of Contents for D-Link DSA-3100

  • Page 1 D-Link Express EtherNetwork DSA-3100 Hotspot Gateway Manual January 2004 Fourth Edition Building Networks for People...
  • Page 2: Table Of Contents

    Rear Panel ... 6 Features ... 7 Sample Scenarios ... 8 Installation ... 10 Setting Up the DSA-3100 ... 11 Configure PCs on your LAN ... 12 TCP/IP Network Setting ... 12 Internet Access Configuration ... 13 Using the Configuration Utility ... 15 Networking Basics ...
  • Page 3: Package Contents

    Package Contents D-Link DSA-3100 Hotspot Gateway CD-ROM (containing Manual and Warranty) Quick Installation Guide Two (2) CAT5 UTP/Straight-through (Ethernet) cables One (1) CAT5 UTP/Cross-over cable One (1) Console cable 5V DC, 3A Power Adapter If any of the above items are missing, please contact your reseller.
  • Page 4: Introduction

    The DSA-3100 can be configured with a standard HTML browser (i.e., Internet Explorer, Netscape Navigator) operating on Windows 98SE/Me/2000/XP, Macintosh OS 9, Mac OS X (v10.1.5 or later), Linux, or Pocket PC 2000/2002. The DSA-3100 allows the operator to offer wired or wireless networking services and access to the Internet when used with a switch or wireless access point respectively.
  • Page 5: Front Panel

    Ethernet network. The Power Indicator remains illuminated when the DSA-3100 is on. The indicators for WAN, Local Network, Authentication each have two LED indicators. When CAT5 (Ethernet) cables are plugged into the corresponding port, the upper LED will illuminate to indicate that a connection has been established.
  • Page 6: Rear Panel

    Rear Panel Console Port - For resetting to factory defaults, or reconfiguring the device. For Advanced users only! Local Area Network Port (Private LAN)- Connects to a switch for a private network. Does not require authentication to access the Internet. Authentication Port (Public LAN or WLAN with Access Point) -...
  • Page 7: Features

    Features Creates two separate and discreet networks allowing the owner/ administrator to create a wired or wireless hotspot and provide Internet access to visitors, guests, or customers to your company or organization. Manages up to 250 user accounts with internal database. Supports at least 50 users accessing the Internet at any given time.
  • Page 8: Sample Scenarios

    Sample Scenarios...
  • Page 9 Sample Scenarios (continued)
  • Page 10: Installation

    Installation Requirements Standard 10/100Base-T network (UTP/Cat5 Ethernet) cable with RJ45 connectors. TCP/IP network protocol must be installed on all networked computers and related devices.
  • Page 11: Setting Up The Dsa-3100

    Use a straight-through cable to connect your client PC with the internal switch or hub that is connected to the authentication port on DSA-3100. If you want to directly connect the DSA-3100 to this PC or the wireless AP, use a crossover cable.
  • Page 12: Configure Pcs On Your Lan

    Configure PCs on your LAN After installing the DSA-3100, each computer’s TCP/IP network setting and Internet access configuration may need to be re-configured: TCP/IP network setting f your PC uses the default Windows XP/2000/Me/98SE setting, no changes need to be made. Just start/restart your PC.
  • Page 13: Internet Access Configuration

    Internet Access Configuration To configure your PCs to use the DSA-3100 for Internet access, follow this procedure. For Windows 9x/2000 Please select Start Menu - Control Panel - Internet Options. Select the Connection tab, and click the Setup button. Select “I want to set up my Internet connection manually, or I want to...
  • Page 14 Internet Access Configuration (continued) Select “I connect through a local area network (LAN)” and click Next. Ensure all of the boxes on the local area network Internet configuration screen are unchecked. Check No, when promoted “Do you want to set up an Internet mail account now?”...
  • Page 15: Using The Configuration Utility

    Using the Configuration Utility To configure the DSA-3100, use a computer which is connected to the local network port of the DSA-3100 with an Ethernet cable. First, disable the Access the Internet using a proxy server function. To disable this function, go to Control Panel > Internet Options > Connections >...
  • Page 16 Using the Configuration Utility (continued) Log-in Screen You can log in as manager. admin - the administrator of the DSA-3100. User Name: admin Password: admin manager - access to the man- ager user account only User Name: manager Password: manager After you log in, click Enter.
  • Page 17 DSA-3100. For instance, if 10.2.3.1 is specified, then the user will be allowed to connect to the WAN Port and configure the DSA-3100 only from the specified address. Access History IP: Specify an IP address to be used by the billing system to connect to the DSA-3100 to get billing history information. SNMP: Simple Network Management Protocol is a system for managing complex networks.
  • Page 18 You may use NTP (Network Time Protocol) or you may input the time yourself. To use NTP please specify a timeserver’s domain name and select the time zone.The time zone of the DSA-3100’s internal clock is UTC (Coordinated Universal Time, formerly known as GMT, Greenwich Mean Time).
  • Page 19 Using the Configuration Utility (continued) Home > WAN > Static IP Address Static IP Address: IP address: Subnet mask: Default Gateway: Dynamic IP Make this selection if there is a DHCP server in the network. (See the following pages.) Address: PPPoE Make this selection if you connect to the Internet using DSL.
  • Page 20 Using the Configuration Utility (continued) User Name & Password: Maximum Idle Time & Dial on demand: Home > WAN > Dynamic IP Address Select this option to obtain an IP address automatically from your ISP. Home > WAN > PPPoE Enter the user name and password that is assigned by your ISP.
  • Page 21 Using the Configuration Utility (continued) Home > Authentication The DSA-3100 allows the gateway to be set to one of three Authentication modes. Mode: Select NAT; NAT_IP_PNP or Router NAT: NAT_IP_PNP: Router: IP Address: Enter the IP address for the Authentication interface (e.g., the RADIUS server in the network).
  • Page 22 Using the Configuration Utility (continued) Home > Authentication (continued) Enable DHCP Selecting this option activates the device’s built-in DHCP server. Server: Configure the DHCP server with the following properties: DHCP Pool Start IP Address: DHCP Pool End IP Address: Lease Time: Domain Name: WINS IP...
  • Page 23 Using the Configuration Utility (continued) Home > Local Network Router are the two local network port modes. Nat mode: All outbound IP addresses on the local network port will be translated to the IP address of the WAN port to proceed. Router mode: retain their IP addresses.
  • Page 24 Using the Configuration Utility (continued) Home > User Manager User Control: Select Enable to define Logout TImer and Multiple Login: Session Length: Logout Timer: Multiple Login: Guest Account: Select Enable to activate the Guest Account feature for visitors Limit the duration of each session established by the general account from 5 minutes to an unlimited period.
  • Page 25 Using the Configuration Utility (continued) Home > User Manager > Guest Accounts (continued) Up to 10 guest accounts can be defined. To activate a par- ticular Guest Account, simply enter the corresponding pass- word in the Password column and click Apply. Define network areas where Guest Account is disallowed access, for instance 10.2.3.0/24.
  • Page 26 40 users will be allowed to login when this function is enabled. Please refer to the configuration screen as follows. Note: MAC address format is XX:XX:XX:XX:XX:XX or XX-XX-XX-XX-XX-XX. A newly created user account will be valid instantly. Restarting the DSA-3100 is not necessary.
  • Page 27 Supports multiple user authentication methods including Local, POP3 Server, RADIUS Server, and LDAP Server. Type: Local: User accounts are stored in the embedded database on the DSA-3100. Local Users List: list of all local user accounts stored in the embedded...
  • Page 28 Using the Configuration Utility (continued) Home > User Manager > Management Type > Local > Local Users List Add Users: Create new accounts, including Username (mandatory), Password (mandatory), and MAC (optional), and assign to a user group as shown above. Edit Account: Make changes to the account by clicking on the User Name as indicated above.
  • Page 29 DSA-3100. Each line of the text file can be in one of the following two formats: Please note that there must be no space or other characters between the user ID, password and the MAC address.
  • Page 30 On-demand User: When you connect the DSA-3100P (the plug and play receipt printer) to the DSA-3100’s console port, you can create a database of up to 2000 on-demand users. By default, the on-demand user database is empty. While you press the DSA-3100P’s button, the on-demand user will be created in the database, a receipt will then be printed which will contain the on-demand user’s information.
  • Page 31 WEP Key Price Description You can specify the prefix of the user name. The maximum is 8 characters (e.g., D-Link). You can specify the maximum user amount which cannot exceed 2000. You can configure the receipt’s header in this field.
  • Page 32 You can delete users in this window. Local > Local User Group Configuration The DSA-3100 provides 5 local user groups; each group can designate a different outbound traffic bandwidth. The Logout Timer will logout a user that has not accessed the Internet for a certain...
  • Page 33 To use POP3 as the authentication method, input the POP3 server IP address or domain name and its POP3 server port. The settings will take effect immediately after you click the Apply button. It is recommended that you restart the DSA-3100 after these changes if there are any online users.
  • Page 34 802.1x enabled access points. By using the integrated RA- DIUS proxy function in the DSA-3100, users can use the EAP methods such as EAP- MD5 or EAP-TLS to login and get the service depending on the authenticatio methods which the backend RADIUS server and APs support.
  • Page 35 Using the Configuration Utility (continued) Home > User Manager > Management Type > RADIUS > 802.1x (continued) Input the IP addresses and secret keys for the devices on the network. If you are using the 802.1x supplicant provided by Microsoft, the idle time out will be longer than the settings in RADIUS/AP and DSA- 3100.
  • Page 36 To use LDAP as the authentication method, input the LDAP server IP address or domain name and its LDAP server port. The settings will take effect immediately after you click the Apply button. It is recommended that you restart the DSA-3100 after these changes if there are any online users.
  • Page 37 Using the Configuration Utility (continued) Advanced > Port and IP Redirect Up to 10 sets of traffic redirection criteria could be defined through this interface. Clients who try to access a specific destination that matches one of the defined destinations will be forced to a matching redirection target. These settings will take effect immediately after you click the Apply button.
  • Page 38 Using the Configuration Utility (continued) To maintain an adequate level of security, each client on the network can be managed. To allow some devices to be unmanaged, input their IP addresses or MAC addresses in this interface. Up to 20 IP ad- dresses and 10 MAC ad- dresses can be assigned unmanaged access.
  • Page 39 Using the Configuration Utility (continued) If you have multiple IP addresses available to assign to the DSA-3100’s WAN interface, you could define up to 10 pairs of Ethernet side (Private IP) and WAN side (Public IP) addresses. The WAN interface will bind the extra public IP addresses automatically.
  • Page 40 Note: For the static route to work, the next hop route must also have added a static route to forward all 192.168.100.0/24 IP packets to the DSA-3100. After clicking the Apply button, you will see the added route is shown in the current running routing table.
  • Page 41 Using the Configuration Utility (continued) Advanced > Firewall Click the Filter Rule number to enter the firewall page for each filter. The chart on the following page explains each configurable item in detail. Filter rule is a set of fil- ters that determine whether traffic will be allowed to pass be-...
  • Page 42 Using the Configuration Utility (continued) Advanced > Firewall (continued) Filter To give a name to an IP Filter rule Name Check to en- Enable this rule if it is marked able this rule Specifies the action to be taken when packets match the rule Block: Packets matching the rule will be dropped immediately Action Pass: Packets matching the rule will be passed immediately...
  • Page 43 30 minutes. If the node cannot be reached, the DSA-3100 will send an E- mail to the admin. every 30 minutes. For example: if you specify a node which can’t be reached, the DSA-3100 will send an E-mail to the admin.
  • Page 44 To provide a custom key page in order to support a specific certificate, please click Browse to search for the file name for the customer key. Click Apply to upload it onto the DSA-3100. If you want to get back to the default customer Key page, simply click the Use Default KEY button.
  • Page 45 Tools > Upload Login Page To provide a custom user login page, please specify the file name to upload onto the DSA-3100. If you want to get back to the default user login page, simply click the Use Default Page button.
  • Page 46 To provide a custom user logout page, please click Browse to specify the file name and upload it onto the DSA-3100 by clicking Apply. If you want to get back to the default user logout page, simply click the Use Default Page button.
  • Page 47 Upload Login error Page: To provide a custom user login error page, please specify the file name to upload it onto the DSA-3100. If you want to get back to the default user login page, simply click the Use Default Page button. If you want to display the Login error Page, simply click the Preview button.
  • Page 48 Tools > System Make Click Reset to restore the DSA-3100 back to the factory Tools > Firmware Please restart the DSA-3100 using the admin- istration interface. Do not directly power it off and on. Restarting the DSA-3100 in this way after a firmware upgrade might result in corruption of the DSA-3100 firmware.
  • Page 49 Using the Configuration Utility (continued) Reboots the DSA-3100. It takes about 1 minute for the DSA-3100 to reboot. If you have to turn off the power of the DSA-3100 for some time, please reboot it and remove the power after you hear a beep from it.
  • Page 50 Using the Configuration Utility (continued) Status > Device Info (continued)
  • Page 51 Using the Configuration Utility (continued) With this feature, you can get Interface management information about the WAN port, Authentication port, and Local Network port. For more detail see the following page: Status > Interface...
  • Page 52 Using the Configuration Utility (continued) Status > Interface (continued) Below is an example of the Interface described on the previous page:...
  • Page 53 DSA-3100 and want to keep the log data. If you have an e-mail address entered in the system configuration interface, you will have the log sent to that e-mail everyday.
  • Page 54 Using the Configuration Utility (continued) Help This feature provides online instructions for operating the DSA-3100, you can click the hyperlink for a more detailed description.
  • Page 55: Networking Basics

    Networking Basics Using the Network Setup Wizard in Windows XP In this section you will learn how to establish a network at home or work, using Microsoft Windows XP. Note: Please refer to websites such as http://www.homenethelp.com http://www.microsoft.com/windows2000 for information about networking computers using Windows 2000, ME or 98.
  • Page 56 Networking Basics (continued) Please follow all the instructions in this window: Click Next In the following window, select the best description of your computer. If your computer connects to the internet through a gateway/router, select the second option as shown. Click Next...
  • Page 57 Networking Basics (continued) Enter a Computer description and a Computer name (optional.) Click Next Enter a Workgroup name. All computers on your network should have the same Workgroup name. Click Next...
  • Page 58 Networking Basics (continued) Please wait while the Network Setup Wizard applies the changes. When the changes are complete, Click Next. Please wait while the Network Setup Wizard configures the computer. This may take a few minutes.
  • Page 59 Networking Basics (continued) In the window below, select the option that fits your needs. In this example, Create a Network Setup Disk has been selected. You will run this disk on each of the computers on your network. Click Next. Insert a disk into the Floppy Disk Drive, in this case drive A.
  • Page 60 Networking Basics (continued) Please read the information under Here’s how in the screen below. After you com- plete the Network Setup Wizard you will use the Network Setup Disk to run the Network Setup Wizard once on each of the computers on your network. Click Next.
  • Page 61 Networking Basics (continued) Please read the information on this screen, then click Finish to complete the Network Setup Wizard. The new settings will take effect when you restart the computer. Click Yes to restart the computer. You have completed configuring this computer. Next, you will need to run the Net- work Setup Disk on all the other computers on your network.
  • Page 62 Networking Basics (continued) Naming your Computer To name your computer In Windows XP, please follow these directions: Click Start (in the lower left corner of the screen) Right-click on My Computer Select Properties Select the Computer Name Tab in the System Properties window.
  • Page 63 Networking Basics (continued) Naming your Computer (continued) In this window, enter the Computer name. Select Workgroup and enter the name of the Workgroup. All computers on your network must have the same Workgroup name. Click OK Checking the IP Address in Windows XP The adapter-equipped computers in your network must be in the same IP Address range (see Getting Started in this manual for a definition of IP Address Range.) To check on the IP Address of the adapter, please do the following:...
  • Page 64 Networking Basics (continued) Checking the IP Address in Windows XP (continued) This window will appear. Click the Support tab Click Close Assigning a Static IP Address in Windows XP/2000 Note: Residential Gateways/Broadband Routers will automatically assign IP Addresses to the computers on the network, using DHCP (Dynamic Host Configuration Protocol) technology.
  • Page 65 Networking Basics (continued) Assigning a Static IP Address in Windows XP/2000 (continued) Double-click on Network Connections Right-click on Local Area Connections Double-click on Properties...
  • Page 66 Input your DNS server addresses. (Note: If you are entering a DNS server, you must enter the IP Address of the Default Gateway.) The DNS server information will be supplied by your ISP (Internet Service Provider.) Click OK D-Link DWL-A650...
  • Page 67 Networking Basics (continued) Checking the Wireless Connection by Pinging in Windows XP/2000 Note: The following illustrations are examples only. The IP Address that you are pinging may be different from those in the following examples. Go to Start > Run > type cmd.
  • Page 68: Technical Specifications

    Technical Specifications Functions Provided 3 10/100Mbps Fast Ethernet ports for WAN connection, trusted LAN connection and untrusted LAN connection Manages up to 250 user account data with internal user account database Supports up to 50 on-line users ID/Password based authentication and authorization- Can be combined with MAC Address locking to provide stricter access control POP3, RADIUS and LDAP external authentication mechanism support - Only one of these can be selected at a time...
  • Page 69 Technical Specifications (continued) NS GX-1 300MHz Memory SDRAM 32 MB Device Ports WAN port: 10/100Mbps Fast Ethernet LAN port: 10/100Mbps Fast Ethernet connects to workstations & servers that do not need authentication LAN port: 10/100Mbps Fast Ethernet connects to workstations & devices that need authentication Console port: RS-232 (default set to 115200, n, 8, 1, no flow control) Power Supply...
  • Page 70: Technical Support

    You can find software updates and user documentation on the D-Link Websites D-Link Provides technical support for customers within the UK. If you are outside of the UK, please contact your local D-Link Office for technical support Technical Support within UK D-Link Technical support over Telephone DI-ALL &...

This manual is also suitable for:

Express ethernetwork dsa-3100

Table of Contents