D-Link DI-1162 User Manual
  1. Manuals
  2. Brands
  3. D-Link Manuals
  4. Network Router
  5. DI-1162
  6. User manual
D-Link DI-1162 User Manual

D-Link DI-1162 User Manual

D-link remote access router user's guide
Hide thumbs Also See for DI-1162:
Table of Contents

Advertisement

Quick Links

Download this manual
DI-1162
Remote Access Router
User' s Guide
Rev. 03 (Oct, 1999)
6DI1162...03
Printed In Taiwan
RECYCLABLE

Advertisement

Table of Contents
loading

Related Manuals for D-Link DI-1162

Summary of Contents for D-Link DI-1162

  • Page 1 DI-1162 Remote Access Router User’ s Guide Rev. 03 (Oct, 1999) 6DI1162…03 Printed In Taiwan RECYCLABLE...

  • Page 3: Copyright Statement

    No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the United States Copyright Act of 1976. Trademarks D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc.

  • Page 5: Limited Warranty

    A list of D-Link offices is provided at the back of this manual, together with a copy of the Registration Card. If a Registration Card for the product in question has not been returned to a D-Link office, then a proof of purchase...
  • Page 6 D-Link with such software product, for a period of ninety (90) days from the date of purchase from D-Link or its Authorized Reseller. D-Link warrants the magnetic media, on which D-Link provides its software product, against failure during the same warranty period.

  • Page 7: Table Of Contents

    DI-1162 Remote Access Router Table of Contents INTRODUCTION ...1 Ease of Installation ...1 Networking Compatibility ...2 ...2 RODUCT EATURES LAN Port ...2 Multiple WAN Ports ...2 Expansion Slot/Modules...2 Dial on Demand ...3 Full Network Management...3 Security...3 RIP-1/ RIP-2 Routing Protocols ...3 DHCP Support ...3...
  • Page 8 Leased Lines...19 Step 4 - Connecting the Router to a LAN ...24 Step 5 - Connecting the Router to WAN Devices ...24 Step 6 – Plugging in All Devices...25 Step 7 - Powering Up the DI-1162...25 CONFIGURATION AND MANAGEMENT...27 ONSOLE ROGRAM ...28...
  • Page 9 DI-1162 Remote Access Router PPP Configuration...95 DMIN ISTRATION ONFIGURATION ...100 YSTEM AINTENANCE System Status...103 Statistics ...103 Log and Trace ...109 Diagnostic ...112 Software Update...117 System Restart ...117 Factory Reset ...118 System Settings Backup/Restore...118 PROM SYSTEM CONFIGURATION ...121 System Configuration ...122 TCP/IP Parameters Configuration ...123...
  • Page 10 DI-1162 Remote Access Router APPENDIX B – SPECIFICATIONS ...139 APPENDIX C - IP CONCEPTS...141 IP A ...141 DDRESSES IP Network Classes ...142 ...143 UBNET APPENDIX D – IP PROTOCOL AND PORT NUMBERS...145 IP P ...145 ROTOCOL UMBERS IP P ...145 UMBERS APPENDIX E –...

  • Page 11: Introduction

    LAN to multiple WAN communications. Ease of Installation The DI-1162 is a self-contained unit that is quick and easy to install. It is designed to be a standalone unit or it may be mounted on a standard 19-inch networking equipment rack. It uses standard Ethernet wiring to connect (route) a local area network (LAN) to up to 4 separate wide area networks (WANs) through dial-up or dedicated, leased lines.

  • Page 12: Networking Compatibility

    Service Unit) respectively. We recommend connecting only one WAN port to the Internet. Expansion Slot/Modules The DI-1162 contains an expansion slot able to house any one of the following slide-in expansion modules: An RJ-45 NWay 10/100 Ethernet port, giving the router another LAN connection.

  • Page 13: Dial On Demand

    DI-1162 Remote Access Router These modules allow you to expand the functionality of the DI-1162 to fulfill all your internetworking needs. Dial on Demand The Dial-On-Demand feature allows the DI-1162 to automatically place a call to a remote node, via a WAN, whenever there is traffic coming from any workstation on the LAN to that remote site.

  • Page 14: Data Compression

    LAN to access the internet. Internet Security The DI-1162 can act as a firewall between your office network and the internet, and can hide the size of your office network and the host addresses of your office computers from prying internet users. It can also filter traffic to and from the internet allowing only certain types of communications to or from certain locations to pass through.

  • Page 15: Link Branch Offices

    The DI-1162 can route traffic between up to eight local IP networks. Telecommuting The DI-1162 allows remote users to dial in and obtain remote access to the LAN. This feature enables users that have workstations with remote access capability, e.g. Windows 95, to dial in using a modem and access the network resources without physically being in the office.
  • Page 16 DI-1162 Remote Access Router At least one modem or CSU/DSU for connecting the WAN port(s) to a telephone line. At least one Internet IP Address per port on the router. An Internet Service Provider (ISP).

  • Page 17: Installation

    This chapter details installation procedures for the DI-1162 router. Overview The DI-1162 can be configured in two ways; through a direct serial connection (a console), or remotely, through the included Router Configuration Utility, Telnet, etc. Please note that if you wish to remotely configure the router, you must still use a console to initially configure the LAN or WAN port for a remote connection.

  • Page 18: Other Resources

    Packing List Before you proceed further, please check all items you received with your DI-1162 Router with this list to make sure the package is complete. The complete package should include: One DI-1162 Router. One 100~240V AC/DC power cord.

  • Page 19: Identifying External Components

    DI-1162 Remote Access Router Identifying External Components The following section illustrates the different components on the router’s front and rear panels. Before using the router it is highly recommended to familiarize yourself with these components to ensure effective use of the device.
  • Page 20 DI-1162 Remote Access Router STATUS/ FUNCTION Power Lights whenever the router is plugged in, turned on, and thus receiving power. Diag Lights during the startup POST test. Boot Lights briefly during startup after the PROM program has executed. Indicates a successful boot up.
  • Page 21 DI-1162 Remote Access Router Diagnostics RS-232 Serial Port A DB-9 female connector used to connect a console to the router for initial setup and out-of-band management. Wan Ports (1 and 2) Two DB-25 male connectors each of which can be connected to a...

  • Page 22: Site Installation

    A rocker switch that turns the router off and on. Site Installation The site where you install the DI-1162 Router may greatly affect its performance. Please follow these guidelines for setting up the router. Install the router on a sturdy, level surface that can support at least 2 kg of weight.

  • Page 23: Rack Mounting

    Rack Mounting The DI-1162 may stand alone or be mounted on a standard 19-inch equipment rack. Rack mounting produces an orderly installation when you have a number of related network devices. Use the six supplied screws to fasten the supplied mounting brackets to either end of the router, then fasten the router into the rack.

  • Page 24: Step 1 - Setting Up The Console

    DI-1162 Remote Access Router Before connecting or disconnecting an RS-232 cable between the DI-1162 and the console and modems, please make sure all devices are off to avoid any chance of damage. Step 1 - Setting up the Console The initial setup of the DI-1162, requires connecting a console to the 9-pin RS-232 Diagnostic port on the router’s front panel.

  • Page 25: Step 3 - Initial Configuration Of The Router

    DI-1162 Remote Access Router Using the Console The Console Program is the interface that you will be using to configure your DI-1162. Several operations that you should be familiar with before you attempt to modify the configuration of your router are listed below: Moving Forward to Another Menu.
  • Page 26 DI-1162 Remote Access Router To log on to the router, use the factory set username and password ‘Admin’ (without the quotes). Please note that the user name and password are case-sensitive. Upon entering the username and password (using the <tab> key to jump to the next field), position the cursor on OK and press <Enter>.

  • Page 27: Step 3A - Configuring The Lan Port

    DI-1162 Remote Access Router Step 3a - Configuring the LAN Port Preparing the router for connection to a LAN only requires enabling the LAN port, enabling IP networking and assigning the LAN port an IP address. After the LAN port is configured, all other features on the router can be configured remotely through the LAN by using the included Windows-based Router Configuration Utility or Telnet.
  • Page 28 <Enter> to save the new setting. Choose Exit in the sub-menus to return to the Main Menu The router can now be accessed via the LAN by Telnet, the Windows- based DI-1162 Router Configuration Utility (included with the router) and other SNMP management applications. Installation...

  • Page 29: Step 3B - Configuring The Wan Ports For Dial-In, Dial-Out And Leased Lines

    DI-1162 Remote Access Router If you have any questions regarding the settings you made or other settings in the submenus, please refer to the next chapter Configuration and Management. At this point, please proceed to the next initial configuration step.
  • Page 30 DI-1162 Remote Access Router SLIP – asynchronous mode used for modems. Async PPP - asynchronous mode used for modems. HDLC – synchronous mode used for CSU/DSU’s or synchronous modems using a leased line. Sync PPP - synchronous mode used for CSU/DSU’s or synchronous modems...
  • Page 31 DI-1162 Remote Access Router Assign an IP address to the WAN port in the Network Configuration sub-menu of the Main Menu. Still in Network Configuration, IP Configuration submenu from Step 2 above, choose IP Stack Configuration, WAN 1. Enter a valid IP address for the WAN in the first item. You may also enter a Netmask if you wish.
  • Page 32 DI-1162 Remote Access Router Choose WAN1 Please refer to the Configuration and Management section of this manual for more detailed information regarding the items in this screen. Position the cursor on the Save option at the bottom of the screen and press <Enter> to save the new setting.
  • Page 33 DI-1162 Remote Access Router From the Main Menu choose Advanced Functions, Remote Access Configuration, Remote Network Profile and press <Enter> in the first empty field. Set the Direction to IN, OUT or BOTH. Enter a Name and Password used to establish Incoming and/or Outgoing connections (if the remote site uses PAP or CHAP).

  • Page 34: Step 4 - Connecting The Router To A Lan

    Step 4 - Connecting the Router to a LAN Your DI-1162 has a single LAN port for connecting to an Ethernet or Fast Ethernet switch or hub. The jack for the router’s Ethernet port is of the type known as EIA RJ-45.

  • Page 35: Step 6 - Plugging In All Devices

    Do not power on the router yet. Step 7 - Powering Up the DI-1162 After all the devices are powered up, the DI-1162 can be turned ON. The router will perform a POST (Power On Self Test). It is during this POST procedure that the PROM Configuration Menu can be accessed.

  • Page 37: Configuration And Management

    DI-1162 Remote Access Router Configuration and Management After the initial startup (POST) test, the router will prompt you for login and password. This is the opening page of the router’s configuration program, called the Console program. The Console program is stored in the Flash memory chips in the router and the settings are written in EEPROM chips in the router.

  • Page 38: Console Program Main Menu

    DI-1162 Remote Access Router be used to initially configure the relevant port on the router. Please see Step 3 - Initial Configuration of the Router on page 15 of this manual for more detailed information. Console Program Main Menu The Main Menu is shown below.
  • Page 39 DI-1162 Remote Access Router The above parameters are described as follows: System Description – this is a non-changeable, short description of the product. System Object ID – this is the enterprise-specific MIB Object ID indicating this type of router. System Up Time – shows how long the router has been running since the last power off or reset.

  • Page 40: Interface Configuration

    DI-1162 Remote Access Router External MAC Address – the physical address of the external LAN add-in module, if present. Interface Configuration Under Interface Configuration in the main menu is the following interface configuration screen, used to configure the interfaces for the...

  • Page 41: Lan Sub-Menu

    DI-1162 Remote Access Router LAN Sub-menu The parameters are described below: Description – this is a user-defined, 32-character identifier used to name the LAN. Operation Mode – The LAN port is automatically set to Auto- Negotiation (NWay). When connected to another LAN port, NWay will configure this port to match the settings of the other LAN port.

  • Page 42: Wan Sub-Menu

    DI-1162 Remote Access Router WAN Sub-menu The parameters are described below: Description – this is a user-defined, 32-character identifier used to name the WAN. Modem Init String – this parameter is valid only for asynchronous connections. It is a user input AT command string to initialize a modem or ISDN TA attached to the WAN interface.
  • Page 43 DI-1162 Remote Access Router X1 – displays the established connection speed to the dial- in user (e.g. Connection established at 56.6 kps). Protocol – this is a protocol used to encapsulate IP messages over synchronous and asynchronous serial links. The device being connected to must be using the same protocol for a connection to succeed.
  • Page 44 DI-1162 Remote Access Router setting may be used when you do not wish dial-in users or networks to identify themselves or be subject to security. Baud Rate – this parameter must be set to configure the communication speed for asynchronous communication devices (modems).

  • Page 45: Network Configuration

    DI-1162 Remote Access Router Network Configuration IP protocol configuration and static routes are configured in the Network Configuration sub-menu. This menu is shown below: IP Stack Configuration The network interface IP address, mask and protocols are specified in the IP Stack Configuration submenus. Below, the submenus for both the LAN and WAN interfaces are shown.
  • Page 46 DI-1162 Remote Access Router The parameters are described below: IP Address – this is the IP address for the router on the network to which this interface is connected. Netmask – this is a 32-bit bit mask that shows how the IP address is to be divided into network, subnet and host parts.
  • Page 47 DI-1162 Remote Access Router The mask should contain at least the standard network portion (as determined by the address's class), and the subnet field should be contiguous with the network portion. Forwarding (LAN) – this enables or disables communications between this interface and other router(s) on the LAN.
  • Page 48 LAN. The router can also perform DVMRP if this feature is enabled (see Multicast Protocol below), which allows the DI-1162 to share multicast information with other routers, enabling IP multicasting over the ISDN port. Multicast Protocol – if this parameter is set to None, the router will only use the Internet Group Management Protocol (IGMP), if IP Multicasting is enabled above.

  • Page 49: Ip Static Route

    DI-1162 Remote Access Router LAN) where you wish the router to work with a device on the network that must act as a DHCP server. Otherwise, this feature should be kept disabled. RIP Spoofing (WAN) – this feature should only be enabled if you have more than one router on your network and this router is providing your WAN connection.
  • Page 50 DI-1162 Remote Access Router The parameters are described below: IP Address – this specifies the destination network IP address (or a host, depending on the netmask) and pairs it with a gateway. Netmask – this mask shows how the destination IP address is to be divided into network, subnet and host parts.

  • Page 51: Ip Networking

    DI-1162 Remote Access Router IP Static Route Examples The IP Static Route Table shown in the example IP Static Route screen above has the first three entries configured for common implementations of static routing. The first entry assumes that WAN1 has a connection to the Internet and defines the default next hop router.

  • Page 52: Router Advertisement

    DI-1162 Remote Access Router Router Advertisement When this option is enabled, the router will periodically send out ICMP packets that announce itself on the network. These ICMP packets are utilized by the Windows 98 or later operating system, which will automatically update the default gateway setting on the computer in which it is installed.

  • Page 53: Snmp Agent Configuration

    SNMP agent, a software process that responds to queries using SNMP to provide status and statistics about the router. Following is a description of how to configure the DI-1162 for SNMP management. From the main menu, select SNMP Agent Configuration. This will bring you to the SNMP Agent Configuration Menu, shown above.

  • Page 54: Snmp Trap Manager

    DI-1162 Remote Access Router The parameters are described below: SNMP Community String – this community string is a user- defined identifying name used to group together some arbitrary set of SNMP application entities managed by the network manager. Access Right – this element of the set { READ ONLY, READ/WRITE } is called the SNMP access mode.
  • Page 55 The parameters are described below: IP Address – enter the IP address of the host who will act as an SNMP Management Station. The DI-1162 router will send SNMP traps to these addresses. SNMP Community String – the community string is a user- defined identifying name used to group together some arbitrary set of SNMP application entities managed by the network manager.

  • Page 56: Snmp Authenticated Trap

    DI-1162 Remote Access Router SNMP Authenticated Trap Returning to the SNMP Agent Configuration menu, you can ‘Enable’ or ‘Disable’ an authentication failure trap message being sent to the Management Station by the router. When an SNMP packet with an invalid community name is received, it will be dropped. If this parameter is enabled, a trap will be sent to the network manager;...

  • Page 57: Advanced Functions

    PPP Configuration menu, the last item in the Advanced Functions window). Remote Operation Overview The DI-1162 is very flexible and can be configured for a variety of remote connections. Since configuring the router can be quite complex - depending on the number and type of remote connection(s) you wish...
  • Page 58 Once this is done, the remote user will be able to use network resources as if he were connected locally. When the user dials into the DI-1162, the call comes into the WAN port and after answering the phone, the DI-1162: Identifies the Username and Password using the authentication protocol defined in the Interface Configuration, WAN submenu.

  • Page 59: Dial-Out Network Connections

    DI-1162 Remote Access Router device is a router). In almost all cases, a Remote Network Profile needs to be set up for each network that will connect to the DI-1162 via a WAN connection. The Remote Network Profiles are necessary for the router to identify and tailor the connection to the remote network’s...
  • Page 60 DI-1162 Remote Access Router In the case where the destination resides in the same IP network on the LAN, the routing engine never acts on the packet and it is sent directly to the destination through the LAN. II. In the case where the destination resides on a different IP...
  • Page 61 Dial Configuration You can configure the two WAN interfaces on your DI-1162 to dial-out only when a packet is forwarded to that interface, and hang up after all data has been transferred and the link is idle. This can be used to lower the cost of an unpopular link or used as a backup link to your ISP.
  • Page 62 DI-1162 Remote Access Router Dial In IP Pool The dial in IP pool allows you to define a range of IP addresses that will be reserved for and assigned to dial-in users. The items are described as follows: IP Address – is the first IP Address that will be assigned to a dial- in user.
  • Page 63 DI-1162 Remote Access Router Range – is the number of IP Addresses that can be assigned. In the window shown above, dial-in users will be assigned the IP Addresses 170.100.200.1 or 170.100.200.2 (only two are necessary since the router used in the examples has only two WAN ports).
  • Page 64 Dial-In User Profile The Dial-In User Profile is used to configure the DI-1162 for single users (for example a person working at home) to dial in to the router and gain access to the network. At least one User Profile must be configured for each user who will dial in (in conjunction with Dial Configuration settings).
  • Page 65 DI-1162 Remote Access Router The parameters in the above window are described as follows: Name – the maximum length is 64 characters. This username is for password challenges (authentication). The user dialing in must supply this username in order to be allowed access to the router.

  • Page 66: Remote Network Profile

    1162 to establish a connection, the DI-1162 will dial-[Out] to the other network, or a connection can be established [Both] ways. When this is set to In, the DI-1162 will only establish a connection with the other network by receiving calls on the WAN port specified in the Interface field below.
  • Page 67 DI-1162 Remote Access Router When this is set to Out, the router will only make calls on the WAN interface specified in the Interface field below. Also, the outgoing calls will be subject to the Name, Password and Phone Number fields in the Outgoing section below.
  • Page 68 This username is for password challenges (authentication) which are automatically handled by the router when dialing out. The DI-1162 will use PAP and CHAP (whichever works) to make the connection. Password – this is the password associated with the above Name field.

  • Page 69: Script File Configuration

    Script files are executed immediately upon successfully establishing a connection. The DI-1162 can hold up to 8 different script files. Press <Enter> in a script name field (shown below as ISP LOGON and 7 empty ones) to define a script file.
  • Page 70 DI-1162 Remote Access Router Commands Script files can perform six Commands. You can choose the appropriate command by positioning the cursor in the Command field and pressing <space bar> to toggle to the appropriate command. The script commands are defined as follows: Wait –...

  • Page 71: Dhcp Configuration

    This can be a great help for network administration since many administrative tasks such as keeping track of each computer’s IP address are handled by the router. The DI-1162 can implement DHCP in one of the two ways shown below:...

  • Page 72: Dhcp Server Configuration

    DI-1162 Remote Access Router DHCP Server Configuration When acting as a DHCP server, the DI-1162 will manage many of the IP network parameters. The DI-1162 will never assign a broadcast or network IP addresses to hosts, even if such an address is included in the specified range.
  • Page 73 DI-1162 Remote Access Router The parameters are described below: IP Address – this is the base (starting) address for the IP pool of unassigned, IP addresses. Range – this is the range of contiguous, IP addresses, above the base IP Address above. In the above example, the IP Addresses assigned would be 202.93.47.1, 202.93.47.2, …...

  • Page 74: Static Ip Pool

    DI-1162 Remote Access Router DNS IP – this specifies the Domain Name System server, used by the DHCP clients using leased IP addresses, to translate hostnames into IP addresses or vice-versa. WINS IP – this specifies the IP address of the Windows Internet Naming Service server.

  • Page 75: Dhcp Relay Agent

    DHCP Relay Agent The DHCP Relay Agent feature allows the DI-1162 to act as a go- between for a remote DHCP server assigning IP addresses to local clients. This can be useful if you wish to have all IP addresses in your company, including those in branch offices, assigned from a DHCP server centrally located at your headquarters, for example.

  • Page 76: Filter Configuration

    State – enables/disables the DHCP Relay Agent function. Filter Configuration Your DI-1162 uses filters (configurable at two layers) to screen packet data, and apply a routing decision. There are two methods of configuring a filter: you can configure a filter at the network layer (IP filter) to restrict access between networks and reduce unnecessary internetwork traffic;...

  • Page 77: Filter State Of Interface

    DI-1162 Remote Access Router The three sub-menus are described: Filter State of Interface – this is used to choose the default, routing decisions for packets, not meeting the criteria for specific filters. Layer 2 Filter – this is a data-link layer (protocol independent) filter.

  • Page 78: Layer 2 Filter

    DI-1162 Remote Access Router that was applied to a specific interface, will be subjected to this default, routing decision. Each decision on handling packets is described below: Disable – this does not apply a default, routing decision. Forward – this allows the routing of a packet, even though it has not met the criteria of the corresponding filter.
  • Page 79 DI-1162 Remote Access Router The parameters of a filter are described below: Name – this is a 12 character (maximum), alphanumeric, user- defined name, used to identify the filter. Direction – this defines the direction of the frame relative to the Interface parameter below.

  • Page 80: Ip Filter

    DI-1162 Remote Access Router after the preamble. The range of the Offset parameter is from 0 to 255 octets. The first byte in a packet has an offset 0. Length – this is the number of bytes (octets) from the offset value (the Offset reference byte).
  • Page 81 DI-1162 Remote Access Router Name – this is a 12 character (maximum), alphanumeric, user- defined name, used to identify the filter. Direction – this defines the direction of the packet relative to the Interface parameter below. State – this is used to define the routing decision applied to the packet.

  • Page 82: Multiple Home Configuration

    DI-1162 Remote Access Router Dst IP – this is the destination address in the IP header of the packet. Dst Netmask – this mask is bit-wise AND’d with the destination IP address, and compared to the IP address of the outgoing interfaces.
  • Page 83 DI-1162 Remote Access Router Multiple Home can be demonstrated by this example: A company has 625 users (computers) all connected to one physical network using Ethernet. However, the company only has one Class C IP network address, 202.100.160.0. This network address will only support 254 users.

  • Page 84: Static Arp

    DI-1162 Remote Access Router The parameters are described below: IP Address – this is a network IP address, access point, to a separate, physical network, on the LAN. Routing Protocol – this is the same as in the Network Configuration section. Keep in mind that these exchanges are made with adjacent routers on the LAN, if present.

  • Page 85: Nat Configuration

    DI-1162 Remote Access Router Basically, when a packet comes into the router from a WAN port and is destined for a host on the LAN, the router will use information defined here to immediately send the packet to the host rather than send out an ARP request to find the host’s MAC address.

  • Page 86: How Nat Works

    In this document, the term NAT will refer to both NAT and NAPT unless otherwise stated. NAT can work in conjunction with DHCP. Thus, if both are enabled and properly configured, the DHCP server in the DI-1162 will assign local IP addresses to computers on your network. How NAT Works In the most common NAT configuration, your network uses local IP addresses that are not valid on the Internet.
  • Page 87 DI-1162 Remote Access Router sending and receiving data directly to the Internet and is therefore part of it. Please study the example diagram below carefully. Please note that in the above diagram, the Gateway IP address settings for the local PC’s needs to be set to 192.168.100.1, the LAN IP address of the router.
  • Page 88 DI-1162 Remote Access Router In the Outgoing Data Packet above, the Source IP address is the IP address that is translated by NAT. The Destination IP Address is the IP address of a computer outside the private network, on the Internet for example.
  • Page 89 DI-1162 Remote Access Router NAT is the initial protocol set forth by RFC 1631 and provides a means in which private networks can communicate with the Internet by using a small number of IP addresses. In our discussion, we will use the example IP addresses listed in the table below and the network diagram shown at the beginning of this section.

  • Page 90: Setting Local Ip Addresses

    DI-1162 Remote Access Router made. Since there are only 5 global IP addresses in the example above, there can only be 5 mappings at any one time. In other words, much like static NAT, only 5 local machines can access the Internet at any one time.
  • Page 91 DI-1162 Remote Access Router Configure NAT/NAPT The first screen shows the complete NAT table that is defined by the network manager: For any NAT entry, you must configure two different screens. The first one is accessible by positioning the cursor over the name field and hitting ENTER (in the window shown above, this corresponds to the field ‘Branch1’).
  • Page 92 DI-1162 Remote Access Router you must save the changes, EXIT, and position the cursor over the NAT IP Pool to configure variables there. Name Field Configuration Screen The configuration screen for the name field appears as follows: The parameters are described as follows: Name –...
  • Page 93 DI-1162 Remote Access Router Static NAT – Maps one global IP address to one local IP address. After all global IP addresses are assigned, they will remain static. This option may be necessary for email, web, ftp servers, etc. where static IP addresses are essential for operation.

  • Page 94: Dynamic Nat

    DI-1162 Remote Access Router Dynamic NAT This screen (below) is how the NAT IP Pool appears, if Dynamic NAT was chosen for the Translation Mode parameter. Each entry, in this configuration, can be used to map multiple, contiguous global addresses and local addresses to each other.

  • Page 95: Dynamic Napt

    DI-1162 Remote Access Router Range – this is the range of contiguous local addresses above (and including) the base Local IP. State – this toggles the enable, disable, for this NAT entry. Dynamic NAPT This screen (below) is how the NAT IP Pool appears, if Dynamic NATPT was chosen for the Translation Mode parameter.

  • Page 96: Static Nat

    DI-1162 Remote Access Router Static NAT This screen (below) is how the NAT IP Pool appears, if Static NAT was chosen for the Translation Mode parameter. Each entry in this configuration is used to map a single global IP address a single local IP address.

  • Page 97: Configure Napt For Special Ap[Plication]S

    DI-1162 Remote Access Router address and port. Notice that the global address will be the external IP address of the global interface. Port – this is a destination port number, used by TCP and UDP, to de-multiplex the incoming IP packet.
  • Page 98 DI-1162 Remote Access Router numbers. The exact port number used is specific to the application. However, if you find that you are having trouble using an application over the Internet and you are using NAPT, you may need to exempt certain port numbers from the NAPT port translation process.
  • Page 99 DI-1162 Remote Access Router The fields in the above window are described as follows: Protocol – [UDP] or [TCP]. This field designates the type of packets that will be acted on. Start Port – Some applications can only send data over a certain range of port numbers.

  • Page 100: Telnet/Discovery Enable

    Telnet State - This feature enables or disables the router’s ability to be configured over the LAN using telnet. Discovery Function – Enabling this feature allows the router to be auto-discovered by D-Link SNMP management software and the included Windows-based configuration software called RouterView. Configuration and Management...

  • Page 101: Dns Configuration

    DI-1162 Remote Access Router DNS Configuration The DI-1162 router has a built in recursive DNS server. The maximum amount of memory that will be used by the router’s Domain Name Server is 64Kb which averages out to be about 800 entries. In other words, up to 800 domain names and their associated IP Addresses can be stored, which can significantly speed up access to those domains.

  • Page 102: Host Table

    DNS Configuration submenu above (in this case, dlink.com) to produce nick.dlink.com. The mapping in the example of nick.dlink.com to the IP Address of 11.1.1.3 is only valid for computers which set the DI-1162 router as their DNS server. Configuration and Management...

  • Page 103: Radius Configuration

    DI-1162 Remote Access Router Items are described as follows: IP – The IP address for the host. Host Name – the name used by the host. State – Enables/disables entry. Radius Configuration Radius is a password protocol where passwords are stored on a Radius server.
  • Page 104 DI-1162 Remote Access Router Items in the above submenu are described as follows: RADIUS State – enables/disables Radius. Type – refers to the type of external password protocol. Currently, only Radius is supported. Server IP Address – this is the IP Address of your UNIX or NT- based Radius server.

  • Page 105: Ppp Configuration

    MLPPP. Typically MLPPP is used to combine the speed of two ISDN BRI B-Channels to get 128Kbps of virtual capacity. Before implementing MLPPP on the DI-1162, please ensure that your ISP or the device to which you are connecting supports, and is configured for MLPPP.
  • Page 106 DI-1162 Remote Access Router second WAN port to place a call and add bandwidth to the WAN connection when the BOD High Threshold is exceeded for the Add Bandwidth Delay period. Bandwidth can also be subtracted when WAN throughput falls below the BOD Low Threshold and Subtract Bandwidth Delay parameters.
  • Page 107 DI-1162 Remote Access Router BOD Criteria – Either [TX], [RX] or [TX+RX], where TX is Transmit and RX is Receive. The parameter defined here is used when monitoring the BOD High Threshold and BOD Low Threshold. BOD High Threshold (%) – (0 to 100) The throughput value as a...
  • Page 108 DI-1162 Remote Access Router RX) ever exceeds 80% of the 64kps (51.2kps), the router will sample the line for an additional 5 seconds. If the traffic continuously exceeds 80% for the 5 second delay time, WAN 2 will dial up and add bandwidth to the connection.

  • Page 109: Admin[Istration] Configuration

    Individual WAN ports can be set to join the MLPPP bundle by enabling Multi-Link on each port. When enabled, the port will join the MLPPP bundle. Please note that the DI-1162 contains only one MLPPP bundle. All ports taking part in MLPPP, even the first or primary port which initially establishes the connection, must have Multi-Link enabled.

  • Page 110: System Maintenance

    Please note any changes made here as they are necessary for logging into the console program. System Maintenance Your DI-1162 provides useful tools for maintaining your device. These tools include; updates on system status, upgrades to the system software, analysis, diagnostic tools and more. This section will describe how to use these tools in greater detail.
  • Page 111 DI-1162 Remote Access Router Configuration and Management...

  • Page 113: System Status

    DI-1162 Remote Access Router System Status The System Status submenu displays key information about the router and appears as follows: Statistics Under the Statistics submenu, the routing table and routing statistics for each interface are displayed. Routing Table The Routing Table gives you a snapshot of the IP routing table. Table...
  • Page 114 DI-1162 Remote Access Router IP Address – this is the destination, network IP address from an incoming packet. Netmask – this mask is received from RIP exchanges and internal calculations, as the router learns. Gateway – this is the next-hop router for which the packet, with destination IP Address and qualifying Netmask, will be forwarded.
  • Page 115 DI-1162 Remote Access Router Counter This feature displays some of the counters contained in MIBII and the proprietary MIB. The table is updated every 5 seconds, and the counter table can be reset by performing a system reset on the router. Note that performing a system reset clears ALL tables in the router, including the routing table.
  • Page 116 DI-1162 Remote Access Router to the shared nature of Ethernet. Excessive collisions show excessive utilization of the network. Tx Abort Packets – When the router transmits a packet and a collision occurs, the router will wait a random period and try to retransmit the packet.
  • Page 117 DI-1162 Remote Access Router Rx MPA Packets – Missed Packet. This is a count of packets intended for the router, but at the time, the router could not receive the packet (usually due to the temporary lack of receive buffers).
  • Page 118 DI-1162 Remote Access Router Tx Underrun Packets – Runt packets. This counter shows the number of packets transmitted by the router that are less than the allowed 64 octets minimum length. Underrun packets occur due to jam signals generated by collisions, backpressure, etc.

  • Page 119: Log And Trace

    Log and Trace This feature files events and errors that occurred and allows individual packets to be captured in a buffer. These items are to help D-Link technical support personnel identify problems that may be affecting your router. If problems occur with your router, D-Link technical support personnel will guide you through the use of these features.
  • Page 120 DI-1162 Remote Access Router The parameters are described as follows: Code – A special code for categorizing events. Some codes include: Cold Start Link Change Tx Abort Rx Abort Connect/Disconnect NAT Request DHCP Request Port – The interface on which an event occurs.

  • Page 121: Trace Buffer

    DI-1162 Remote Access Router Trace Buffer This feature captures packets in a buffer to help D-Link technical support personnel identify problems with your router. Trace Buffer Configuration Enables/disables the Trace buffer feature. View Trace Buffer Displays the header of packets captured in the buffer.

  • Page 122: Diagnostic

    DI-1162 Remote Access Router Diagnostic This feature tests the connection between the router and connected peripherals on a given interface. Connection Test This feature tests a dial-out WAN connection. Configuration and Management...
  • Page 123 DI-1162 Remote Access Router Interface – The WAN interface to be tested. Phone Number – The phone number that will be dialed by the WAN Interface. Please ensure that a modem answers the phone on the other end. Baud Rate – The rate of data transmission. The answering modem must be capable of operating at the baud rate defined here.

  • Page 124: Ping Test

    DI-1162 Remote Access Router Ping Test This test makes sure there is an IP network connection to a particular IP address. IP Address – This is the IP Address of the device that the router will attempt to reach. The router will check it routing table and try to locate the IP Address.

  • Page 125: System Wan Test

    DI-1162 Remote Access Router System WAN Test The System WAN test is used to diagnose the WAN port. It can only be run if the WAN port is disabled in the Interface Configuration submenu. Configuration and Management...

  • Page 126: External Module Test

    DI-1162 Remote Access Router External Module Test This performs either a System LAN or System WAN test on the external module depending on which type of module is installed. Configuration and Management...

  • Page 127: Software Update

    Perform a System Restart after configuring these settings begins the software update procedure. System Restart The system restart function enables you to reset the DI-1162 without powering off. Some settings changes require a system restart in order for them to take effect.

  • Page 128: Factory Reset

    Software Update submenu. The file defined here can be used as a backup for all the router settings and can be used to configure another DI-1162 with exactly the same settings, or as a backup before you make major changes to the configuration.
  • Page 129 DI-1162 Remote Access Router Items in the window are described below: Remote IP Address – this is the IP address of the TFTP server on which you wish to store the settings file. TFTP Time Interval – the time between requests to occupy TFTP server time.

  • Page 131: Prom System Configuration

    DI-1162 Remote Access Router PROM System Configuration The PROM program is run before the normal console (runtime) configuration program in the router’s Flash Memory. Thus, the PROM System Configuration can be used if there are problems with the router’s console program.

  • Page 132: System Configuration

    DI-1162 Remote Access Router System Configuration The parameters are described as follows: Hardware Revision – this is the version ID of hardware used in this router. Boot PROM Firmware Version – this is the version ID of firmware used in this router.

  • Page 133: Tcp/Ip Parameters Configuration

    DI-1162 Remote Access Router TCP/IP Parameters Configuration The parameters are described as follows: Interface – the LAN interface must use Ethernet/Fast Ethernet and is displayed here. This setting cannot be adjusted. IP Address – this is the router’s IP Address for the LAN interface.

  • Page 134: System Reset

    DI-1162 Remote Access Router System Reset The system reset function enables you to reset the DI-1162 without powering off. Some settings changes require a system reset in order for them to take effect. A system reset will not affect the router’s settings, but will clear all tables including the routing table and all SNMP counters and tables.
  • Page 135 DI-1162 Remote Access Router Items listed in the above menu are described as follows: Software Update Control – this toggles disable, enable. Software Update Mode – this specifies downloading the image file from a Network server on the local LAN.

  • Page 136: Eeprom Factory Reset

    DI-1162 Remote Access Router Last Boot Server IP Address – this shows the last boot server used to download an image file. This is for reference only. Last IP Address – this shows the last IP address used for the LAN interface.

  • Page 137: Execute Bootload

    DI-1162 Remote Access Router Please make sure you wish to wipe out all settings and configure the router from scratch before you perform a factory reset. Execute Bootload Choosing this option accepts the changes made in the PROM program and begins the router’s startup sequence.

  • Page 139: Using Telnet

    Telnet. Telnet Configuration In order to use telnet, the DI-1162 router must first be configured using a console connected to the RS-232 Diagnostic port. Depending on the placement of the management station using telnet, the initial...

  • Page 140: Using Telnet Via Wan

    Leased Lines section on page 19 of this manual. System Timeout When you are connected to your DI-1162 via Telnet, there is a system timeout (in the System Information sub-menu), adjustable to a maximum of 90 minutes. If you are logged onto the device and leave it inactive for this timeout period, the router will automatically disconnect you.

  • Page 141: Using Radius Authentication

    Configuring the DI-1162 for RADIUS Authentication To configure the DI-1162 to use the RADIUS server set up in the previous section, go to the Main Menu in the console program and choose Advanced Functions and then RADIUS Configuration.
  • Page 142 Port – the port number for the Radius server. The standard port number specified by RFC 1700 is 1812 (shown above). Key – this is a shared secret used to identify the DI-1162 as a valid Radius client. The Key password should be stored in the client file in the RADIUS server’s /etc/raddb directory.

  • Page 143: Adding Users To The Radius Database

    192.168.0.1 should be added to the client file. The Client Name field in the file gives the IP address of the DI-1162, and the Key field should be the same as the Key field in the Radius Configuration submenu. After a RADIUS server has been configured, the DI-1162 will use it to authenticate all users instead of checking it’s internal Dial-Up User...

  • Page 145: Appendix A - Cables And Connectors

    DI-1162 Remote Access Router Appendix A – Cables and Connectors RS-232 (EIA-574) for Diagnostic Port Signal Name Mnemonic Recv. Line Sig. Det. (DCD) Received Data Transmitted Data DTE Ready (DTR) Signal Ground DCE Ready (DSR) Request to Send 105/133 Clear to Send...

  • Page 146: Rs-449 Cable For Wan Port

    DI-1162 Remote Access Router TXD CLK RXD CLK Local Loopback Remote Loopback TXD CLK Test Mode End Connector: DB-25 Pin Female (ISO-2110) DB-25 Pin Male (ISO-2110) Cable Length: 1.5M RS-449 Cable for WAN Port DB25 DB37 Signal Name Female Male Pin...

  • Page 147: Cable For Wan Port

    DI-1162 Remote Access Router Local Loopback Remote Loopback TXD CLK Test Mode End Connector: DB-25 Pin Female (ISO-2110) DB-37 Pin Male Cable Length: 1.5 m V.35 Cable for WAN Port DB25 V.35 Signal Name Female Male Pin Number Number Protective Ground Signal Ground Rec.
  • Page 148 DI-1162 Remote Access Router TXD CLK End Connector: DB-25 Pin Female (ISO-2110) V.35 Male 34 Pin (ISO-2593) Cable Length: 1.5 m Appendix A – Cables and Connectors...

  • Page 149: Appendix B - Specifications

    DI-1162 Remote Access Router Appendix B – Specifications General Network Protocols: IP (Internet Protocol) WAN Protocols: PPP (Point-to-Point Protocol) Multi-Link PPP, SLIP, HDLC Routing Protocols: RIP and RIP V2.0 DVMRP, IGMP Management: Local RS-232 Console Port (out-of-band) Telnet (in-band) SNMP MIB II and Enterprise MIB...

  • Page 151: Appendix C - Ip Concepts

    DI-1162 Remote Access Router Appendix C - IP Concepts This appendix describes some basic IP concepts, the TCP/IP addressing scheme and show how to assign IP Addresses. When setting up the router, you must make sure all ports to be utilized on the router have valid IP addresses.

  • Page 152: Ip Network Classes

    DI-1162 Remote Access Router Networks attached to the Internet are assigned class types that determine the maximum number of possible hosts per network. The previous figure illustrates how the net and host portions of the IP address differ among the three classes. Class A is assigned to networks that have more than 65,535 hosts;...

  • Page 153: Subnet Mask

    DI-1162 Remote Access Router The value(s) in the host portion of a physical device's IP address can be in the range of 0 through 255 as long as this portion is not all-0 or all-255. Values outside the range of 0 to 255 can never appear in an IP address (0 to 255 is the full range of integer values that can be expressed with eight bits).
  • Page 154 DI-1162 Remote Access Router IP Class Class A Class B Class C Subnet mask settings other than those listed above add significance to the interpretation of bits in the IP address. The bits of the subnet mask correspond directly to the bits of the IP address.

  • Page 155: Appendix D - Ip Protocol And Port Numbers

    DI-1162 Remote Access Router Appendix D – IP Protocol and Port Numbers Common Internet service protocols and IP port numbers. IP Protocol Numbers Protocol # Protocol Name ICMP Internet Control Message [RFC792] IGMP Internet Group Management [RFC1112] Transmission Control [RFC793]...

  • Page 157: Appendix E - Configuration File

    DI-1162 Remote Access Router Appendix E – Configuration File The router can be configured when performing a Software Update through a configuration file. The configuration file can hold many settings for the router including IP Addresses for all ports, path to the boot server, and various port settings.

  • Page 158: Configuration File Example

    DI-1162 Remote Access Router Configuration File Example # The system configuration file for D-Link DI-1162 Remote Access Router # DI-1162 runtime image file name (software update path and file name) di1162-image d:\project\di1162\runtime\image\1162run\1162run.hdr # sysname (string name) sysname DI-1162 Remote Access Router...
  • Page 159 DI-1162 Remote Access Router # ip routing stat (enable/disable) ip-stat disable # interface decription (string name) wan-port-1 WAN SCC 1 Interface # interface protocol type (0:SLIP, 1:HDLC, 2:SyncPPP, 3:AsyncPPP) protocol-type 0 # modem initial string (initial string name, SLIP/AsyncPPP only) modem-init AT&FS0=1X1...

  • Page 161: Index

    DI-1162 Remote Access Router Index Access Right ...44 Admin[istration] Configuration ...100 Advanced Functions ...47 Age ...104 ARP request...50 Async PPP ...20 Auth Type ...48 automatic timeout ...28 Auto-Negotiation ...31 Bandwidth on Demand ...47 Baud Rate ...20, 34 Boot File Name...125 Boot Protocol...125...
  • Page 162 DI-1162 Remote Access Router dialing out...23 Dial-out...21 dial-out connections...47 Dial-Out Network Connections ...49 Direction ...56 DNS ...91 DNS Cache State ...92 DNS Configuration...91 DNS Domain Name ...92 DNS IP ...64 Domain Name...64 Dynamic Host Configuration Protocol ...3 Dynamic IP Pool...62 Dynamic NAPT ...85...
  • Page 163 DI-1162 Remote Access Router IP Port Numbers ...145 IP Protocol...145 IP Protocol Numbers ...145 IP STACK ...37 IP Stack Configuration ...35 IP Static Route...39 IP Static Route Table...41 IP Static Routes ...50 IPX ...2 ISP ...50 Key ...94, 132 LAN.1, 4, 5, 24, 31, 35, 43, 73 LAN Counter Table ...105...
  • Page 164 DI-1162 Remote Access Router Ping Test...114 Port ...87, 94, 110, 111, 132 Port Numbers...145 POST ...27, 121 Powering Up ...25 PPP Configuration ...95 PPP_ASYN ...33 PPP_SYN ...33 private network ...75 private networks...80 PROM System Configuration ...121 PROM System Menu ...121 Protocol...20, 33...
  • Page 165 DI-1162 Remote Access Router Software Update Control125, Static ARP ...74 Static ARPs...50 Static IP Pool ...64 Static NAPT...86 Static NAT...86 Statistics...103 stub network ...79 SUA . See Single User Account Subnet Mask ...143 Sync PPP ...20 System Contact ...29 System Description ...29 System Information...28...
  • Page 166 DI-1162 Remote Access Router Index...
  • Page 167 3. What network protocol(s) does your organization use ? "XNS/IPX "TCP/IP "DECnet "Others_____________________________ 4. What network operating system(s) does your organization use ? "D-Link LANsmart "Novell NetWare "NetWare Lite "SCO Unix/Xenix "PC NFS "3Com 3+Open "Banyan Vines "DECnet Pathwork "Windows NT "Windows NTAS "Windows '95 "Others__________________________________________ 5.
  • Page 169 TAIWAN D-LINK TAIWAN 2F, No. 233-2 Pao-Chiao Rd, Hsin-Tien, Taipei, Taiwan, R.O.C. TEL: 886-2-2916-1600 FAX: 886-2-2914-6299 WEB: www.dlink.com.tw U.K. D-LINK (EUROPE) LTD. D-Link House, 6 Garland Road, Stanmore, Middlesex HA7 1DP U.K. TEL: 44-181-235-5555 FAX: 44-181-235-5500 WEB: www.dlink.co.uk E-MAIL: info@dlink.co.uk...
  • Page 170 U.S.A. D-LINK SYSTEMS, INC. 53 Discovery Drive, Irvine, CA 92618 USA TEL: 1-949-788-0805 FAX: 1-949-753-7033 WEB: www.dlink.com E-MAIL: tech@dlink.com...

Table of Contents