Download
Share
Print this page
   
1
2
3
4
Table of Contents
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
  • Contents

Advertisement

Wireless Controller
User Manual
DWC-1000
Version 4.00
BUSINESS WIRELESS SOLUTION

Advertisement

Troubleshooting

   Also See for D-Link DWC-1000

D-Link DWC-1000 User Manual
D-Link DWC-1000 User Manual 368 pages
D-Link DWC-1000 User Manual
D-Link DWC-1000 User Manual 355 pages
D-Link DWC-1000 User Manual
D-Link DWC-1000 User Manual 324 pages

   Related Manuals for D-Link DWC-1000

   Summary of Contents for D-Link DWC-1000

  • Page 1

    Wireless Controller User Manual DWC-1000 Version 4.00 BUSINESS WIRELESS SOLUTION...

  • Page 2: Preface

    Preface D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any person or organization of such revisions or changes. Information in this document may become obsolete as our services and websites develop and change.

  • Page 3: Safety Cautions

    • To help protect your system from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or uninterrupted power supply (UPS). • Position system cables and power cables carefully; route cables so that they cannot be stepped on or D-Link DWC-1000 User Manual...

  • Page 4: Protecting Against Electrostatic Discharge

    EU Battery & WEEE Directives Disposal and Recycling This product may contain a battery. For recycling or to dispose of batteries, please follow the battery manufacturer’s instructions, and local/national disposal and recycling regulations. For more information, please refer to the warranty guide. D-Link DWC-1000 User Manual...

  • Page 5: Table Of Contents

    Step #6: Confirm Access Point Profile is Associated ..................39 Step #7: Configure Captive Portal Settings ......................40 Step #8: Use SSID with RADIUS Sever as Authenticator ..................48 Step #9: Configure Guest Management .......................49 Where to Go from Here ................................56 Advanced WLAN Configuration ........................ 57 D-Link DWC-1000 User Manual...

  • Page 6: Table Of Contents

    Configure AP Debug Mode .............................102 Configure AP Provisioning ............................103 AP Profiles ....................................105 Configure AP Profile Radio ............................107 Configure AP Profile SSID ............................113 Configure AP Profile QoS ............................114 SSID Profiles ....................................118 Configure SSID Profiles .............................118 Wireless Distribution System (WDS) ..........................122 D-Link DWC-1000 User Manual...

  • Page 7: Table Of Contents

    Single Option Port ..............................161 Auto-Rollover using Option Port ........................162 Load Balancing ................................163 Round Robin................................164 Spillover ..................................165 Routing ...................................166 NAT or Classical ...............................166 Transparent ................................167 IP Aliasing ..................................168 DMZ DHCP Reserved IPs ............................169 Dynamic DNS ................................170 VLANs .......................................171 D-Link DWC-1000 User Manual...

  • Page 8: Table Of Contents

    Guest Account Usage Management ..........................207 Payment Gateway ...............................211 Login Profiles ................................213 Customize the Captive Portal Login Page .....................213 Customize the SLA of the Captive Portal ......................216 Upload a Custom Profile ............................217 RADIUS Accounting Global Setting ..........................218 D-Link DWC-1000 User Manual...

  • Page 9: Table Of Contents

    Tunnel Mode .................................255 Split DNS Names ................................256 DHCP Range ..................................257 Certificates ..................................258 Trusted Certificates ..............................258 Active Self Certificates ............................259 Self Certificate Requests ............................260 Easy VPN Setup ................................261 PPTP VPN ....................................262 Server ....................................262 Client....................................263 PPTP Active Users List ..............................264 D-Link DWC-1000 User Manual...

  • Page 10: Table Of Contents

    Viewing Controller Status and Statistics ......................298 Controller Associated Clients ..........................299 Distributed Tunnel ..............................300 Peer Controller Receive Status ...........................301 Peer Controller Sent Status ..........................303 Viewing Access Point Information ........................304 Global Status ................................304 All APs ..................................306 Managed ..................................307 D-Link DWC-1000 User Manual...

  • Page 11: Table Of Contents

    Activating Licenses ..............................342 Localization ...................................343 Management ..................................345 Remote Management ...............................345 Power Saving Settings ...............................347 SNMP ....................................348 Configure SNMP v3 User List ..........................348 Configure SNMP Trap List ............................349 Configure SNMP Access Control List .......................350 Configure SNMP System Info ..........................351 D-Link DWC-1000 User Manual...

  • Page 12: Table Of Contents

    Capturing Log Packets ..............................374 Conducting a System Check ...........................375 Generating DBGLOGs ..............................375 Log Settings ...................................376 Defining What to Log ..............................376 Tracking Traffic/Routing Logs ..........................378 IPv4 .....................................378 IPv6 .....................................378 System Logging ..............................380 Remote Logging ..............................381 Email ....................................381 D-Link DWC-1000 User Manual...

  • Page 13: Table Of Contents

    Syslog Server Configuration ..........................383 All Logs ..................................384 Current Logs ................................384 Appendix A - Basic Planning Worksheet ....................385 Appendix B - Factory Default Settings ....................388 Appendix C - Glossary ..........................389 D-Link DWC-1000 User Manual...

  • Page 14: Product Overview

    2. AP6 license upgrades the number of APs controller can manage. You can upgrade up to 3 AP licenses. By default DWC-1000 can manage up to 6 AP’s. You increase the number by 6 upon each AP license. 3. WCF License is a powerful dynamic web filtering function that can be used in many places. It is ideal for companies that want to ensure that employees aren’t wasting time online, schools that want to prevent...

  • Page 15

    • Large networks that need different policies per building or department could have access points configured for security policies for each building and department (for example, one for guests, one for management, one for sales, and so on). D-Link DWC-1000 User Manual...

  • Page 16: Features And Benefits

    • Supports for 6 access points on a single wireless controller with no additional license. • Purchased license packs (DWC-1000-AP6-LIC) in increments of 6 access points which allows for support of up to 24 access points on a single wireless controller.

  • Page 17: Package Contents

    Required Tools and Information You will need the following additional items to install your wireless controller: • D-Link DWL-2600AP, DWL-3600AP, DWL-3610AP, DWL-6600AP, DWL-6700AP, DWL-8600AP, DWL-6610AP, DWL-8710AP, and/or DWL-8610AP access points. • A computer with a supported web browser for configuration: •...

  • Page 18: Front Panel

    Two Gigabit Ethernet ports labeled Option let you connect the wireless controller to Option Ports (1-2) a backbone (requires DWC-1000-VPN-LIC License Pack upgrade). Each port has an Activity LED (left) and Link LED (right). The RJ-45 console cable lets you connect a PC to access the wireless controller’s Console Port command-line interface.

  • Page 19: Installation

    Section 2 - Installation Installation A DWC-1000 wireless controller system consists of one or more wireless controllers and a collection of DWL- 2600AP, DWL-3600AP, DWL-3610AP, DWL-6600AP, DWL-6700AP, DWL-8600AP, DWL-6610AP, DWL-8710AP, and/ or DWL-8610AP access points that are organized into groups based on location or network access. This section describes how to unpack and install the wireless controller system.

  • Page 20: Rack Mount

    The wireless controller can be mounted in a standard 19-inch equipment rack. 1. Attach the mounting brackets to each side of the chassis and secure them with the supplied screws. 2. Use the screws provided with the equipment rack to mount the wireless controller into the rack. D-Link DWC-1000 User Manual...

  • Page 21: Connecting The Wireless Controller

    5. Using the supplied power cord, connect the wireless controller to a working AC outlet. 6. The Power LED will illuminate orange during boot up. The LED will turn green once the wireless controller has booted. D-Link DWC-1000 User Manual...

  • Page 22: Basic Configuration

    • “Standard Web Management Interface Features” on page 26 • “Basic Configuration Procedures” on page 27 Using the information in this chapter, you can perform the basic information and get your wireless controller up and running in a short period of time. D-Link DWC-1000 User Manual...

  • Page 23: Log In To The Web Management Interface

    Both the user name and password are case-sensitive. Note: We recommend that you change the password to a new, more secure password (see section “Editing Users” on page 203) and record it in Appendix A. D-Link DWC-1000 User Manual...

  • Page 24

    LAN, and WLAN status information. You can return to this page at any time by clicking Status > Dashboard. 5. To log out of the web management interface, click Logout, present at the top-right corner of the page in the System Menu area. D-Link DWC-1000 User Manual...

  • Page 25: Web Management Interface Layout

    Apply: To apply changes to the existing configuration. o Copy: Copy the configuration value of this item and create a new item. o Manage: Manage the discovered access point. o View Information: The information would vary depending on the items. D-Link DWC-1000 User Manual...

  • Page 26: Standard Web Management Interface Features

    The search box is always located near the top right corner of the table. Ranking/sort (on table) Rank/sort the relative order of value and information on the table by clicking table header. D-Link DWC-1000 User Manual...

  • Page 27: Basic Configuration Procedures

    • “Step #6: Confirm Access Point Profile is Associated” on page 39 • “Step #7: Configure Captive Portal Settings” on page 40 • “Step #8: Use SSID with RADIUS Sever as Authenticator” on page 48 • “Step #9: Configure Guest Management” on page 49 D-Link DWC-1000 User Manual...

  • Page 28: Step #1: Enable Dhcp Server (optional)

    If configured domain name system (DNS) servers are available on the LAN, enter the IP address of Server the secondary DNS server. If Windows Internet Name Service (DNS) servers are available on the LAN, enter the IP address of WINS Server the WINS server. D-Link DWC-1000 User Manual...

  • Page 29: Step #2: Configure Country Code

    Each country has its regulation for the radio usage. Use the following procedure to select the country where the wireless networks are. 1. Click Wireless > General. The General Setting page will appear. 2. At the bottom, select the Current Country Code from the drop-down menu and click Save. D-Link DWC-1000 User Manual...

  • Page 30: Step #3: Select Aps To Be Managed

    2. Under Discovered AP List, right-click on the access point you want the wireless controller to manage and select Manage. 3. Complete the fields in the Manage AP page (refer to the next page) and click Save. When the confirmation appears, click OK. D-Link DWC-1000 User Manual...

  • Page 31

    If AP Mode = Managed, this is operating channel for the radio. Power If AP Mode = Managed, this is percentage of power to use for the radio. 4. Repeat steps 2 and 3 for each additional access point you want the wireless controller to manage. D-Link DWC-1000 User Manual...

  • Page 32: Step #4: Change The Ssid And Set Up Security

    1. Click Wireless > Access Point > AP Profile > AP Profile SSID. The following page will appear with a list of the wireless networks configured on the wireless controller. 2. Under the SSID Status column, select an SSID, right-click the selected SSID, and click Edit. The following page will appear. D-Link DWC-1000 User Manual...

  • Page 33

    • 64 bit = ASCII: 5 characters; Hex: 10 characters • 128 bit = ASCII: 13 characters; Hex: 26 characters Each client station must be configured to use one of these WEP keys in the same slot as specified here. D-Link DWC-1000 User Manual...

  • Page 34

    If Security= WPA Enterprise, enter a value to set the interval at which the AP will refresh session Session Key Refresh (unicast) keys for each client associated to the VAP. Rate The valid range is 0-86400 seconds. A value of 0 indicates that the broadcast key is not refreshed. D-Link DWC-1000 User Manual...

  • Page 35

    Section 3 - Basic Configuration 4. To add a new SSID, go to Wireless > Access Point > SSID Profile and click the Add New SSID Profile button. 5. Fill in the fields below and click Save. D-Link DWC-1000 User Manual...

  • Page 36

    SSID network you want to enable, and click Enable on the AP Profile SSID List. Note: SSID ID 1 is always enabled. If you do not want to have the first SSID enabled, you must create a new SSID to be able to swap another SSID in the first slot. D-Link DWC-1000 User Manual...

  • Page 37: Step #5: Select Mac Authentication Mode

    MAC Authentication database or RADIUS server, and are not explicitly granted access. If the MAC address is not in the database, then the access will be granted to the client. 1. Click Wireless > General. 2. Next to Client MAC Authentication Mode, select Black-list or White-list. Click Save. D-Link DWC-1000 User Manual...

  • Page 38

    4. Click Add New MAC Authentication. Fill in the client’s MAC address, name and authentication action, and then click Save. 5. Click Wireless > Access Point > SSID Profiles. 6. Select an SSID by right-clicking on it and click Edit. The following page will appear. Select Local, and click Save. D-Link DWC-1000 User Manual...

  • Page 39: Step #6: Confirm Access Point Profile Is Associated

    2. Under Access Point Profile List, right-click the AP profile you want to update, and click Apply. 3. Wait for 30 seconds, and then click the refresh icon to verify that the profile is associated. Your associated access point is configured and ready to authenticate wireless users. D-Link DWC-1000 User Manual...

  • Page 40: Step #7: Configure Captive Portal Settings

    Complete the fields given in the table below, and click Save. Field Description Group Name Enter a name for the group. Description Enter a description of the group. Captive Portal User Enable (toggle to ON) this option under User Type. D-Link DWC-1000 User Manual...

  • Page 41

    Section 3 - Basic Configuration 2. Add captive portal users a. Go to Security > Authentication > User Database > Users. The Users List will appear. b. Click Add New User. The User Configuration page will appear. D-Link DWC-1000 User Manual...

  • Page 42

    Internet. For security, each typed password character is masked with a dot (•). Enter the same case-sensitive password entered in the Password field. For security, each Confirm Password typed password character is masked with a dot (•). D-Link DWC-1000 User Manual...

  • Page 43

    3. Associate the captive portal group to an SSID Profile a. Click Wireless > Access Point > SSID Profiles. b. Under the SSID column, right click the selected SSID that will use the Captive Portal function and click Edit. The following page will appear. D-Link DWC-1000 User Manual...

  • Page 44

    If the authentication database is using the RADIUS server, on step c above choose Permanent User on Captive Portal Type and select RADIUS Server on Authentication Server. 4. Customize the captive portal login page. a. Go to Security > Authentication > Login Profiles. The Login Profiles page will appear. D-Link DWC-1000 User Manual...

  • Page 45

    Section 3 - Basic Configuration b. Under the Login Profiles List, click Add New Login Profile to add a new profile or right-click an existing profile and click Edit to edit the profile. The Login Profile Configuration page will appear. D-Link DWC-1000 User Manual...

  • Page 46

    Enter the text that appears in the header of the login page during the captive portal session. Caption Font Select the font for the header text. Font Size Select the font size for the header text. Font Color Select the font color for the header text. D-Link DWC-1000 User Manual...

  • Page 47

    Under Login Profiles List, right-click the profile and click Show Preview to view the profile you just configured. Confirm that the appearance of the login page suits your requirements. If not, repeat steps 4b and 4c as necessary. D-Link DWC-1000 User Manual...

  • Page 48: Step #8: Use Ssid With Radius Sever As Authenticator

    1. Go to Security > Authentication > External Auth Server > RADIUS Server page. 2. Complete the fields given below and click Save. Your access point will be configured to use RADIUS authentication server. 3. Click Server Checking to test the connection between the DWC-1000 and your RADIUS server. Field Description Server Checking Click to test the connection between the controller and your RADIUS server.

  • Page 49: Step #9: Configure Guest Management

    Complete the fields and select the front desk group you created in the previous step on Selected Group. 3. Create a billing profile. a. Go to Security > Authentication > Billing Profile. Click Add New Billing Profile. b. The billing profile settings include four milestones by timeline: D-Link DWC-1000 User Manual...

  • Page 50

    This billing profile is suitable for the scenario in Coffee Shop, Airport, etc. The customer can use wireless internet service for a period of time counting from first time logs in. D-Link DWC-1000 User Manual...

  • Page 51

    V. The temporary account has limited usage traffic. The account doesn’t have the expiration time until the usage is run out. This billing profile is suitable for a Hotspot scenario. The service provider charge the wireless service based on usage volume. c. Complete the fields given below: D-Link DWC-1000 User Manual...

  • Page 52

    Maximum Usage Traffic traffic shall be considered towards bandwidth usage. Allow Front Desk to Modify If you enable Maximum Usage Time or Maximum Usage Traffic, checking this option Usage enables the front desk user to modify usage limits. D-Link DWC-1000 User Manual...

  • Page 53

    Enter the username and password of the user you created in a “Front Desk” group. b. This will open a billing desk page as shown in the figure below. Modify the usage if you want. Click Generate. D-Link DWC-1000 User Manual...

  • Page 54

    The Print button will provide a print out of the Billing Profile Configuration page . 6. Monitor user account status. a. Monitor temporary account status and extend account usage duration or volume. Click View Account for reviewing generated temporary status. D-Link DWC-1000 User Manual...

  • Page 55

    Select an account and right-click Extend Session. Manually change the usage time/traffic. Note: Make sure that Allow Front Desk to Modify Usage is turned ON in the “Captive Portal Billing Profile Configuration” page. b. Click Save. D-Link DWC-1000 User Manual...

  • Page 56: Where To Go From Here

    The following sections list the wireless controller’s advanced settings. Users who do not understand these features should not attempt to reconfigure their wireless controller, unless advised to do so by the technical support staff. D-Link DWC-1000 User Manual...

  • Page 57: Advanced Wlan Configuration

    • “Wireless Distribution System (WDS)” on page 122 • “Peer Group” on page 128 • “AP Firmware Download” on page 131 Note: The procedures in this chapter should only be performed by expert users who understand networking concepts and terminology. D-Link DWC-1000 User Manual...

  • Page 58: Wlan General Settings

    Path: Wireless > General To configure the WLAN general settings: 1. Click Wireless > General. The WLAN General Settings page will appear. 2. Complete the fields given in the table on the next page. 3. Click Save. D-Link DWC-1000 User Manual...

  • Page 59

    The Client QoS feature extends the primary QoS capabilities of the wireless controller to the wireless domain. More specifically, access control lists (ACLs) and differentiated service (DiffServ) policies are applied to wireless clients associated to the AP. D-Link DWC-1000 User Manual...

  • Page 60

    When you click Save, a pop-up message asks you to confirm the change. Country Code Wireless regulations vary from country to country. Make sure you select the correct country code so that your WLAN system complies with the regulations in your country. D-Link DWC-1000 User Manual...

  • Page 61: Channel Plan And Power Settings

    2. Each AP is dual‐band capable of operating in the 2.4GHz and 5GHz frequencies. The 802.11a/n and 802.11b/g/n modes use different channel plans. Before you configure channel plan settings, select the mode to configure. Click either the 5GHz or 2.4GHz tab. D-Link DWC-1000 User Manual...

  • Page 62

    9. Manual Channel Plan: If you select Manual, click on the Manual Channel Plan tab. Here you can apply and start the channel algorithm on selected access points. 10. Channel Plan History: This field shows whether the controller is using the automatic channel adjustment algorithm on the AP 2.4GHz and 5GHz radio. D-Link DWC-1000 User Manual...

  • Page 63: Configure Power Settings

    The signal detected below the threshold is ignored. 4. If you select Manual, click on the Manual Power Adjustments tab. Here you can apply and start the power algorithm on selected access points. D-Link DWC-1000 User Manual...

  • Page 64

    Identifies the location of the AP, which is set in the Valid AP database. Radio Interface Identifies the radio. Current Power Shows the earlier power level for the AP. New Power Shows the proposed power level for the AP. D-Link DWC-1000 User Manual...

  • Page 65: Wids

    A denser sentry deployment may be desirable in order to improve rogue or interferer signal triangulation. To configure WIDS AP: 1. Go to Wireless > General > WIDS > AP WIDS Security tab. D-Link DWC-1000 User Manual...

  • Page 66

    This test may detect network wrong configuration as well as potential intrusion Standalone AP with attempts. The following parameters are checked: Unexpected Configuration • Channel Number • SSID • Security Mode • WDS Mode • Presence on a wired network D-Link DWC-1000 User Manual...

  • Page 67

    Make sure that no legitimate APs are classified as rogues before enabling the attack feature. This feature is disabled by default. D-Link DWC-1000 User Manual...

  • Page 68: Configure Client Wids Settings

    APs monitor whether any clients exceed those thresholds or tests. To configure WIDS Client: 1. Go to Wireless > General > WIDS > AP WIDS Client Security tab. D-Link DWC-1000 User Manual...

  • Page 69

    Probe Requests Threshold Value threshold interval before the event is reported as a threat. Authentication Failure Specify the number of 802.1X authentication failures a client is allowed to have Threshold Value before the event is reported as a threat. D-Link DWC-1000 User Manual...

  • Page 70

    IP ACL are specified/created using the IP ACL Rule Configuration menu. To configure IP ACL: 1. Go to Wireless > ACL > IP ACL page. 2. Click Add New IP ACL, fill-in the fields (refer to the table below), and click Save. D-Link DWC-1000 User Manual...

  • Page 71: Ip Acl Rules

    The rule identification, and the ‘Action’ and ‘Match Every’ parameters must be specified next. If ‘Match Every’ is set to False, more options will be present from which the match criteria can be configured. D-Link DWC-1000 User Manual...

  • Page 72

    Requires a packet’s source port IP address listed here. Enter an IP Address in the Source IP Address appropriate field using dotted-decimal notation. The address you enter is compared with a packet’s source IP address. D-Link DWC-1000 User Manual...

  • Page 73

    Type octet in the IP header. Matches on the Type of Service bits in the IP header when checked. • TOS Bits: This value is a hexadecimal number from 00 to FF. Requires the bits in a packet’s TOS field to match the two-digit hexadecimal number entered here. D-Link DWC-1000 User Manual...

  • Page 74: Ip Acl Configuration Example

    Follow the steps given below: 1. Go to Wireless > ACL > IP ACL page, and click Add New IP ACL. 2. Select IP ACL as Create New Extended IP ACL from the drop-down menu. 3. Enter IP ACL ID. D-Link DWC-1000 User Manual...

  • Page 75

    7. After configuring all the rules, add one permit rule. Adding a permit rule is mandatory to allow all other types of traffic to flow between the source and destination, as in an AP, there is an implicit “deny all” rule at the end of ACL. D-Link DWC-1000 User Manual...

  • Page 76

    9. Go to Wireless > Access Point > AP Profiles > AP Profile SSID page, right click any of the configured SSID, and click Edit. For the selected SSID, enable the Client QoS and select the configured ACL for Client QoS Access Control Down and Client QoS Access Control Up. D-Link DWC-1000 User Manual...

  • Page 77

    11. To test the configuration, connect two wireless clients (STA1, STA2) and try to ping the STA2 from STA1 and vice-versa. You will observe that the ACL will block the ICMP traffic between the two stations. D-Link DWC-1000 User Manual...

  • Page 78

    MAC ACL Name: Enter a name for the MAC ACL. The name string may include alphabetic, numeric, dash, underscore, or space characters only. The name must start with an alphabetic character. This field dis- plays the name of the currently selected MAC ACL if the ACL has already been created. D-Link DWC-1000 User Manual...

  • Page 79: Mac Acl Rules

    Select the ACL forwarding action. Select the desired action from the following two options: Action • Permit: Forward the packets which meet the ACL criteria. • Deny: Drops the packets which meet the ACL criteria. D-Link DWC-1000 User Manual...

  • Page 80

    This field appears only if you select User Value from the EtherType dropdown list. The Custom Value value you enter specifies a customized EtherType to compare against an Ethernet frame. The valid range of values is (0x0600 to 0xFFFF). D-Link DWC-1000 User Manual...

  • Page 81: Mac Acl Configuration Example

    The topology required for this configuration is as follows: Follow the following steps: 1. Go to Wireless > ACL > MAC ACL page, and click Add New MAC ACL. 2. Enter a MAC ACL Name, and click Save. D-Link DWC-1000 User Manual...

  • Page 82

    4. Select the MAC ACL name from the MAC ACL List drop-down menu, and click Add New Rule (Rule 1) to block the traffic from STA1 to STA2. 5. Add Rule 2 to block the traffic from STA2 to STA1. D-Link DWC-1000 User Manual...

  • Page 83

    6. After saving all the rules, add one permit rule. This is mandatory to allow all other types of traffic to flow between the source and destination, as in an AP, there is an implicit “deny all” rule at the end of ACL. 7. Now, go to Wireless > General page, and enable AP client QoS. D-Link DWC-1000 User Manual...

  • Page 84

    9. Enable the Client QoS option, and select the configured MAC ACL for Client QoS Access Control Down and Client QoS Access Control Up. 10. Go to Wireless > Access Point > AP Profiles page, and to push the configuration to AP, right click the AP Profile, and click Apply. D-Link DWC-1000 User Manual...

  • Page 85

    11. To test the MAC ACL configuration, connect two wireless clients (STA1, STA2) and try to ping/HTTP STA2 from STA1 and vice-versa. You will observe that the ACL will block the traffic between the two stations. D-Link DWC-1000 User Manual...

  • Page 86: Diffserv

    This feature allows the user to define the criteria to associate with a DiffServ Class. As packets are received, these DiffServ Class is used to prioritize packets. The fields available on the Class Configuration page depend on whether you create a new class or configure a class that has already been created. D-Link DWC-1000 User Manual...

  • Page 87

    Select the desired L4 keyword from the list on which the rule can be based. If you select Other, the screen refreshes and a Port ID field appears. Enter a user-defined Port ID by which the packets are matched to the rule. The valid range is 0-65535. D-Link DWC-1000 User Manual...

  • Page 88: Diffserv Policy

    The list is automatically updated as a new class is added or removed from the policy. To associate a DiffServ class with a policy, select the name of the class from the list, and then click Add Selected Class. D-Link DWC-1000 User Manual...

  • Page 89: Diffserv Policy Class Definition

    Select the policy to associate with the member class from the menu. Policy Type The read-only field shows the type of policy. Member Class List Select the member class to associate with this policy name from the menu. D-Link DWC-1000 User Manual...

  • Page 90

    Mark IP Precedence value field be set. • Violate Action: It determines what happens to the packets that are considered non-conforming. The available actions are: Drop, Mark CoS, Mark IP DSCP, Mark IP Precedence and Send. D-Link DWC-1000 User Manual...

  • Page 91

    IP Precedence value before being presented to the system forwarding element. This selection requires that the Mark IP Precedence value field be set. • Send: (default)These packets are presented unmodified by DiffServ to the system forwarding element. D-Link DWC-1000 User Manual...

  • Page 92: Distributed Tunnel

    IP address. • Distributed Tunnel Max Multicast Replications Allowed - Specify the maximum number of tunnels to which a multicast frame is copied on the Home AP. 3. Click Save. D-Link DWC-1000 User Manual...

  • Page 93: Wlan Visualization

    This option is available only if images are already loaded onto the controller. To delete all images loaded onto the controller, click Delete All Images. Deleting background images is not recommended. However, if the user deletes the images, the user has to refresh the WLAN Visualization tool after deleting images. D-Link DWC-1000 User Manual...

  • Page 94: Launch

    To launch the WLAN Visualization tool, click Wireless > General > WLAN Deployment. This opens a new browser window and starts the Java applet that allows the AP and WLAN controller network to be presented as a topology diagram (with or without a custom background image). D-Link DWC-1000 User Manual...

  • Page 95: Ap Discovery Methods

    The color of MAC address of the Discovered AP List indicating the AP is: • Green = Managed AP • Red = Connected Fail AP or AP (D-Link UAP) which is not in local or RADIUS Valid AP Database • Gray = Unknown AP or Rogue AP •...

  • Page 96: Configure L2/ Vlan Discovery

    1. Click Wireless > Access Point > AP Poll List > VLAN Discovery tab. 2. Switch L2/ VLAN Discovery to ON and click Save. 3. Click Add New VLAN to Poll. Enter a VLAN number. 4. Click Save. D-Link DWC-1000 User Manual...

  • Page 97: L3/ Ip Discovery

    2. Switch L3/ IP Discovery to On and click Save. 3. Click Add New IP Addresses to Poll. Enter the IP range. 4. Click Save. 5. Navigate to Wireless > Access Point > Discovered AP List. Check the discovered AP via L3/ IP discovery. D-Link DWC-1000 User Manual...

  • Page 98: Managed Aps

    2. Click Add New Valid AP. 3. Complete the fields on the next page and click Save. Note: To add or delete an AP from the valid AP list, right-click the access point and select Edit or Delete. D-Link DWC-1000 User Manual...

  • Page 99

    Managed AP Mode. Channel If AP Mode= Managed, this is an operating channel for the radio. Power If AP Mode= Managed, this is a percentage of power to use for the radio. D-Link DWC-1000 User Manual...

  • Page 100: Add A Ap From Discovered Ap List

    Path: Wireless > Access Point > Discovered AP List 1. Click Wireless > Access Point > Discovered AP List. 2. Right-click an AP and select Manage. 3. Select an AP Mode and Profile (refer to the previous page), and then click Save. D-Link DWC-1000 User Manual...

  • Page 101: Manual Change Channel And Power Of Managed Ap

    4. Change the power as your desired. You can set a new power level for the AP. The manual power change overrides the power setting configured in the AP profile and is not retained when the AP reboots or when the AP profile is reapplied. 5. Click Save. D-Link DWC-1000 User Manual...

  • Page 102: Configure Ap Debug Mode

    Debug feature on the Managed APs page. 1. Click Wireless > Access Point > Managed APs List > Managed APs tab 2. Right-click on one of the entries and select Debug. 3. Toggle Enable Debug to On. 4. Click Save. D-Link DWC-1000 User Manual...

  • Page 103: Configure Ap Provisioning

    IP address of the primary or backup switch that provides provisioning information for the AP. 1. Go to Wireless > Access Point > Managed AP List > AP Provisioning page. 2. Right-click a managed AP from the status list and select Edit. D-Link DWC-1000 User Manual...

  • Page 104

    Enter the IP address of switch to which the AP should try to connect, if it is unable to New Backup IP Address connect to the primary wireless controller. Profile Select an AP profile you want to use. D-Link DWC-1000 User Manual...

  • Page 105: Ap Profiles

    • SSID Settings • QoS Configuration Path: Wireless > Access Point > AP Profiles > AP Profiles 1. Click Wireless > Access Point > AP Profiles > AP Profiles tab. 2. Click Add New AP Profile. D-Link DWC-1000 User Manual...

  • Page 106

    AP Profile Radio. Configure AP Profile QoS Radio 2 In a new AP Profile, you can edit the QoS on radio 802.11b/g/n from here. You can QoS Radio Mode 802.11b/g/n also edit it from AP Profile Radio. D-Link DWC-1000 User Manual...

  • Page 107: Configure Ap Profile Radio

    2.4 GHz frequency, and IEEE 802.11a/n operates in 5 GHz frequency of the radio spectrum. 1. Click Wireless > Access Point > AP Profiles > AP Profile Radio tab. 2. Right-click the radio you want to change, and click Edit. D-Link DWC-1000 User Manual...

  • Page 108

    When the Scan Other Channels= OFF is cleared, the AP scans only the operating channel. This field controls the amount of time the radio spends scanning the other channel (in RF Scan Duration milliseconds) during an RF scan. D-Link DWC-1000 User Manual...

  • Page 109

    802.11a or 802.11b/g devices. IEEE 802.11n can achieve a higher throughput when it does not need to be compatible with legacy devices (802.11b/g or 802.11a). • IEEE 802.11n/ac operates in 5GHz ISM band and includes support both 11n and 11ac devices. D-Link DWC-1000 User Manual...

  • Page 110

    RTS Threshold. The range is 1‐255. The value in this field indicates the maximum number of transmission attempts on frame Long Retries sizes greater than the RTS Threshold. The range is 1‐255. D-Link DWC-1000 User Manual...

  • Page 111

    802.11n protection is off, legacy clients or APs within range can be affected by 802.11n transmissions. 802.11 protection is also available when the mode is 802.11b/g. When protection is enabled in this mode, it protects 802.11b clients and APs from 802.11g transmissions. D-Link DWC-1000 User Manual...

  • Page 112

    These numbers indicate rates that the access point supports. You can select multiple Supported Rate Set (Mbps) rates. The AP automatically chooses the most efficient rate based on factors like error rates and distance of client stations from the AP. D-Link DWC-1000 User Manual...

  • Page 113: Configure Ap Profile Ssid

    5. Enable/disable the SSID by right-clicking Enable or Disable. Note: SSID ID 1 is always enabled. If you do not want to have the first SSID enabled, you must create a new SSID to be able to swap another SSID in the first slot. D-Link DWC-1000 User Manual...

  • Page 114: Configure Ap Profile Qos

    You can specify custom QoS settings, or you can select a template that configures the AP profile with pre‐defined settings that are optimized for data traffic or voice traffic. 1. Click Wireless > Access Point > AP Profiles > AP Profiles QoS tab. 2. Right-click an AP Profile, and select Edit. D-Link DWC-1000 User Manual...

  • Page 115

    Maximum Contention Window. Valid values for the cwmin are 1, 3, 7, 15, 31, 63, 127, 255, 511, or 1024. The value for cwmin must be lower than the value for cwmax. D-Link DWC-1000 User Manual...

  • Page 116

    If the first random backoff wait time expires before the data frame is sent, a retry counter is incremented and the random backoff value (window) is doubled. Doubling will continue until the size of the random backoff value reaches the number defined in the Maximum Contention Window. D-Link DWC-1000 User Manual...

  • Page 117

    (WM). This value specifies (in milliseconds) the Transmission Opportunity (TXOP) for client stations; that is, the interval of time when a WMM client station has the right to initiate transmissions on the wireless network. D-Link DWC-1000 User Manual...

  • Page 118: Ssid Profiles

    SSID Profile button. Note: SSID ID 1 is always enabled. If you do not want to have the first SSID enabled, you must create a new SSID to be able to swap another SSID in the first slot. D-Link DWC-1000 User Manual...

  • Page 119

    Disabling the broadcast SSID is sufficient to prevent clients from accidentally connecting Hide SSID to your network, but it will not prevent even the simplest of attempts by a hacker to connect or monitor unencrypted traffic. ON = SSID is hidden OFF = SSID is broadcasted D-Link DWC-1000 User Manual...

  • Page 120

    When the client re-associates, it obtains a new IP address. 3 - If the controller managing the association AP fails, the scenario is the same as in item 1 above. The AP takes down all the radios and the clients disassociate. D-Link DWC-1000 User Manual...

  • Page 121

    Choices are: Security • None = No security mechanism is used. • WEP = Enable WEP security. Complete the options in Table 3-1. • WPA/WPA2 = Enable WPA/WPA2 security. Complete the options in Table 3-2. D-Link DWC-1000 User Manual...

  • Page 122: Wireless Distribution System (wds)

    AP to the Valid AP database on the controller. • Optionally, to allow the Ethernet port on a satellite AP to provide wired access to the LAN, you must set the WDS Managed Ethernet Port to Enabled. It is disabled by default. D-Link DWC-1000 User Manual...

  • Page 123

    – On the Radio page for the AP profile, select only one channel in the list of Auto Eligible channels. By default, multiple channels are enabled. • D‐Link recommends that satellite APs do not have wired connectivity to the wireless controller. • A configuration push to WDS APs may take up to three minutes to complete. D-Link DWC-1000 User Manual...

  • Page 124: Configure Wds Managed Ap Group

    ASCII characters. To create or change the password, select the Edit checkbox and type a Edit Password password in the available field. This password must match the passwords set on the satellite APs in this group. By default, the password is AP‐Group‐n, where n is the AP group ID. D-Link DWC-1000 User Manual...

  • Page 125: Configure Wds Managed Ap

    STP Priority values for existing members 1. Click Wireless > Access Point > WDS Groups > WDS Managed AP tab. 2. Click Add New WDS Manage AP. D-Link DWC-1000 User Manual...

  • Page 126

    The lower value for the spanning tree priority means that the AP is more likely to be used for bridging data into the campus network. You should assign a lower priority to the APs connected to the wired network than to the satellite APs. The range is 0 – 64. D-Link DWC-1000 User Manual...

  • Page 127: Configure Wds Ap Link

    When multiple alternate paths are defined in the WDS group, the link cost is used to Link Cost indicate which links are the primary links and which links are the secondary links. The spanning tree selects the path with the lowest link cost. D-Link DWC-1000 User Manual...

  • Page 128: Peer Group

    Enable this field to include the RF management information in the configuration that Channel / Power the controller pushes to its peers. Enable this field to include the AP Database (Valid AP) in the configuration that the AP Database controller pushes to its peers. D-Link DWC-1000 User Manual...

  • Page 129: Synchronize Peer Group

    2. Click Start Sync for All Peers to synchronize the settings to all controllers, or synchronize one of the peer group by right-clicking Start Sync. 3. The fields available on the Peer Status page are give in the table on the next page. D-Link DWC-1000 User Manual...

  • Page 130

    Lists the IP address of each controller in the cluster and indicates the configuration Peer IP Address request status of that controller. Configuration Request Status It shows the configuration request status for the respective Peer IP Address. D-Link DWC-1000 User Manual...

  • Page 131: Ap Firmware Download

    2. Complete the fields (refer to the table on the next page) and then select the AP(s) you want to upgrade. Use CTRL + click to select multiple APs. 3. Click Save to begin the upgrade process. D-Link DWC-1000 User Manual...

  • Page 132

    Group Size field will limit the number of simultaneous AP upgrades in order not to overwhelm the TFTP server. To select multiple APs to upgrade, CTRL + click the APs to upgrade. Note: D‐Link recommends that you upgrade all managed APs at the same time. D-Link DWC-1000 User Manual...

  • Page 133: Ap Firmware Status

    The number of APs that failed to download the new code starting at 0 and incrementing Failure Count with each failure. The number of APs for which the download was aborted, starting at 0 and incrementing Abort Count each aborted download. D-Link DWC-1000 User Manual...

  • Page 134

    • Timed‐Out: The AP did not reconnect to the controller in the fixed time interval. AP MAC The managed AP MAC address. Location The location of the managed AP. Status Refer to Status (per-AP) above. Firmware Version The current firmware version of the managed AP. D-Link DWC-1000 User Manual...

  • Page 135: Advanced Network Configuration

    • “VLANs” on page 171 • “Configure IPv4 Static Routing” on page 177 • “Configure IPv6 Static Routing” on page 179 Note: The procedures in this chapter should only be performed by expert users who understand networking concepts and terminology. D-Link DWC-1000 User Manual...

  • Page 136

    LAN, you must set the controller to be in IPv4 / IPv6 mode. This mode will allow IPv4 nodes to communicate with IPv6 devices through this controller. 1. Go to Network > IPv6 > IP Mode. 2. Next to IP Mode, select either IPv4 only or IPv4 & IPv6. 3. Click Save. D-Link DWC-1000 User Manual...

  • Page 137: Lan Configuration

    You can also enable DNS proxy for the LAN. When this is enabled, the controller will act as a proxy for all DNS requests and communicates with the ISP’s DNS servers. When disabled, all DHCP clients receive the DNS IP addresses of the ISP. 1. Click Network > LAN > LAN Settings. D-Link DWC-1000 User Manual...

  • Page 138

    Enter the IP address assigned to the DNS host name. The DNS Host Name Mapping is IP Address used to assign a specific IP address to a domain name. We can use this domain name instead of IP address to access that particular host. D-Link DWC-1000 User Manual...

  • Page 139

    DNS servers of the active connection. DHCP Address Pool Pool ID Displays a unique numeric value. Start IP Displays Start IP address of the LAN DHCP Pool. End IP Displays End IP address of the LAN DHCP Pool. D-Link DWC-1000 User Manual...

  • Page 140: Dhcp Address Pool

    1. Go to Network > LAN > LAN Settings page. 2. Click Add New Pool. 3. Fill-in the following details: • Start IP: Displays Start IP address of the LAN DHCP Pool. • End IP: Displays End IP address of the LAN DHCP Pool. D-Link DWC-1000 User Manual...

  • Page 141: Ipv6 Lan Settings

    The IPv6 network (subnet) is identified by the initial bits of the address called the prefix. IPv6 Prefix Length All hosts in the network have the identical initial bits for their IPv6 address; the number of common initial bits in the networks addresses are set by the prefix length field. D-Link DWC-1000 User Manual...

  • Page 142

    Enter the primary DNS server address. Secondary DNS Server Enter the secondary DNS server address. Lease/Rebind Time Duration (in seconds) for which IP addresses will be leased to clients. Prefix Delegation On/Off button for Enable/Disable Prefix Delegation. D-Link DWC-1000 User Manual...

  • Page 143: Ipv6 Address Pools

    1. Go to Network > IPv6 > LAN Settings > IPv6 Address Pools tab. 2. Click Add New Address Pool. 3. Enter a starting IPv6 address, end IPv6 address, and the prefix length. 4. Click Save. D-Link DWC-1000 User Manual...

  • Page 144

    Section 5 - Advanced Network Configuration 5. Go to Network > IPv6 > LAN Settings > Prefixes for Prefix Delegation tab. 6. Click Add New Prefix Length. 7. Enter the IPv6 Prefix and Prefix Length. Click Save. D-Link DWC-1000 User Manual...

  • Page 145: Ipv6 Router Advertisement

    LAN hosts with router advisements. 1. Go to Network > IPv6 > LAN Settings > Router Advertisement tab. 2. Complete the fields from the table on the next page. 3. Click Save. D-Link DWC-1000 User Manual...

  • Page 146

    This is used in RA’s to ensure all nodes on the network use the same MTU value in the cases where the LAN MTU is not well known. The default is 1500 Router Lifetime The lifetime in seconds of the route. The default is 3600 seconds. D-Link DWC-1000 User Manual...

  • Page 147: Ipv6 Advertisement Prefixes

    1. Go to Network > IPv6 > LAN Settings > Advertisement Prefixes tab. 2. Click Add New Advertisement Prefixes. D-Link DWC-1000 User Manual...

  • Page 148

    IPv6 Prefix Length number of contiguous, higher order bits of the address that make up the network portion of the address. Prefix Lifetime The length of time over which the requesting controller is allowed to use the prefix. D-Link DWC-1000 User Manual...

  • Page 149: Lan Dhcp Reserved Ips

    1. Click Network > LAN > LAN DHCP Reserved IPs. 2. Click Add New DHCP Reserved IP. 3. Enter the IP address you want to reserve and the MAC Address of the client you want to assign the IP address to. 4. Click Save D-Link DWC-1000 User Manual...

  • Page 150: Ip/mac Binding

    1. Click Network > LAN > IP/MAC Binding. 2. Click Add New IP/MAC Binding to create a new entry. 3. Enter a name, MAC address, IP address and select whether to turn dropped packet logging on or off. Click Save. D-Link DWC-1000 User Manual...

  • Page 151: Igmp Setup

    To enable IGMP Proxy: 1. Click Network > LAN > IGMP Setup. 2. Toggle IGMP Proxy to On. 3. Click Save. 4. Click Add new Network Address. Enter a network address and mask length. 5. Click Save. D-Link DWC-1000 User Manual...

  • Page 152: Upnp Setup

    6. Click Save. 7. Your entry will be displayed in the UPnP Port Map List. To edit or delete, right-click an entry and select the action from the menu. Repeat steps 3-6 to add multiple entries. D-Link DWC-1000 User Manual...

  • Page 153

    Int. Port (Internal Port): The internal ports opened by UPnP (if any). • Ext. Port (External Port): The external ports opened by UPnP (if any). • Click Refresh to refresh the port map table and search for any new UPnP devices. D-Link DWC-1000 User Manual...

  • Page 154: Configure Jumbo Frames

    Jumbo frames are Ethernet frames with more than 1500 bytes of payload. When this option is enabled, the LAN devices can exchange information at Jumbo frames rate. 1. Click Network > LAN > Jumbo Frame. 2. Toggle Activate Jumbo Frames to On. 3. Click Save. D-Link DWC-1000 User Manual...

  • Page 155: Internet (ipv4)

    By default, Option1 is enabled and works as a LAN interface but with a dependent MAC address, and Option 2 is disabled. With a VPN license (DWC-1000-VPN/ DWC-1000-VPN-LIC), the controller turn into Option ports. You can set ISP connection type and NAT/Transparent mode features.

  • Page 156

    Secret Enter the secret phrase to log into the server. Enabling split tunnel will prevent you from adding a Gateway IP address and instead you Split Tunnel need to add specific routes to route LAN traffic. D-Link DWC-1000 User Manual...

  • Page 157

    PPTP connections, it is 1492 Bytes. For all l2tp connections, it is 1460 Bytes. Custom MTU Size Enter a specific MTU size. The Ethernet port speed can be manually set or specified depending on your Option1/ Port Speed Option 2 requirements. D-Link DWC-1000 User Manual...

  • Page 158: Option 2/dmz Settings

    3. Enter the IP address and the subnet mask of the computer/device you want to configure DMZ to. 4. Under DHCP for DMZ, select either None, DHCP Server (and enter the primary and secondary DNS Server addresses), or DHCP Relay. 5. Click Save. D-Link DWC-1000 User Manual...

  • Page 159: Ipv6 Option 1/2 Settings

    DHCPv6 server is available as well. 1. Go to Network > IPv6 > Option 1 Settings or Option 2 Settings. 2. Select your connection type (DHCPv6, PPPoE, or Static) and complete the fields from the next page. 3. Click Save. D-Link DWC-1000 User Manual...

  • Page 160

    Authentication Type CHAPv2). The mode of Dhcpv6 client that will start in this mode : disable dhcpv6/stateless dhcpv6/ DHCPv6 Options stateful dhcpv6/stateless dhcpv6 with prefix delegation. DNS Server(s) Enter the primary and secondary DNS server IP address(es). D-Link DWC-1000 User Manual...

  • Page 161: Option Mode

    Single Option Port If you do not want to use Auto Failover or Load Balancing, select Single Option Port from the Option Mode drop- down menu, and select the Option port you want to set. Click Save. D-Link DWC-1000 User Manual...

  • Page 162: Auto-rollover Using Option Port

    Enter the time in seconds to initiate the Option health check. Default is every 30 seconds. The Retry Interval number tells the controller how often it should run the above configured failure detection method. Failover After Enter the number of failures before the controller initiates the failover process. D-Link DWC-1000 User Manual...

  • Page 163: Load Balancing

    Load balancing is particularly useful when the connection speed of one Option port greatly differs from another. In this case you can define protocol bindings to route low-latency services (such as VOIP) over the higher-speed link and let low-volume background traffic (such as SMTP) go over the lower speed link. D-Link DWC-1000 User Manual...

  • Page 164: Round Robin

    • Retry Interval is: The number tells the controller how often it should run the above configured failure detection method. • Failover after: This sets the number of retries after which failover is initiated. Save Click save to activate your settings. D-Link DWC-1000 User Manual...

  • Page 165: Spillover

    Enter the percentage of bandwidth after which the controller switches to the secondary Option. Max Bandwidth This sets the maximum bandwidth tolerable by the primary Option for outbound traffic. Save Click save to activate your settings. D-Link DWC-1000 User Manual...

  • Page 166: Routing

    1. Click Network > Internet (IPv4) > Routing. 2. Complete the fields from the table below, and click Save. Field Description Select NAT or Classical. Routing Mode Save Click to save and activate your settings. D-Link DWC-1000 User Manual...

  • Page 167: Transparent

    “NAT loopback” since LAN generated traffic is redirected through the firewall to reach LAN servers by their external name. 1. Click Network > Internet (IPv4) > Routing. 2. Complete the fields from the table below and click Save. Field Description Routing Mode Select Transparent. Save Click save to activate your settings. D-Link DWC-1000 User Manual...

  • Page 168: Ip Aliasing

    Select either Option1 or Option2. IP Address Enter an alias IP address for the Option interface you selected. Subnet Mask Enter a subnet mask for the Option interface you selected. Save Click save to activate your settings. D-Link DWC-1000 User Manual...

  • Page 169: Dmz Dhcp Reserved Ips

    Enter the IP address you want to assign to this device. Note that this IP address must be in the IP Address same range as the starting/ending IP address under DHCP Settings. MAC Address Enter the MAC address of this device (xx:xx:xx:xx:xx:xx format). Save Click Save to save your reservation. D-Link DWC-1000 User Manual...

  • Page 170: Dynamic Dns

    Internet domain names. To use DDNS, you must setup an account with a DDNS provider such as DynDNS. org, D-Link DDNS, or Oray.net. Each configured Option port can have a different DDNS service if required. Once configured, the controller will update DDNS services changes in the Option IP address so that features that are dependent on accessing the controller’s Option via FQDN will be directed to the correct IP address.

  • Page 171: Vlans

    You can create VLANs on the VLAN Settings page. After you create VLANs, you can use the same page to view, edit, and delete VLANs. To create a VLAN: 1. Go to Network > VLAN > VLAN Settings. D-Link DWC-1000 User Manual...

  • Page 172

    Enter an IP address for the Multi-VLAN subnet. Subnet Mask Enter the subnet mask for the Multi-VLAN subnet. DHCP Mode Select whether to enable DHCP Server or DHCP Relay. LAN Proxy Click to enable DNS proxy. D-Link DWC-1000 User Manual...

  • Page 173: Editing Vlans

    2. In the VLAN List, right-click the VLAN you want to delete and click Delete. (Or right-click on a VLAN and click Select All, then Delete to delete all VLANs.) The selected VLAN(s) will be deleted. D-Link DWC-1000 User Manual...

  • Page 174: Multivlan Subnets

    VLAN. To view and edit the available multi-VLAN subnets: 1. Go to Network > VLAN > VLAN Settings. 2. To edit a multi-subnet VLAN, right-click the VLAN and click Edit. D-Link DWC-1000 User Manual...

  • Page 175

    IP address where the DNS proxy is running (i.e., the wireless controller’s LAN IP). • Disabled - All DHCP clients receive the DNS IP addresses of the ISP, excluding the DNS proxy IP address. D-Link DWC-1000 User Manual...

  • Page 176: Port Vlans

    VLAN with PVID=1, which is untagged. 4. Select the VLAN Membership. When the port is in General or Trunk mode, the traffic can be routed from this port VLAN to others in the VLAN Membership list. 5. Click Save. D-Link DWC-1000 User Manual...

  • Page 177

    1. Click Network > Routing > Static Routes. 2. Click Add New Static Route. The Static Route Configuration page will appear. 3. Complete the fields given in the table on the next page, and click Save. D-Link DWC-1000 User Manual...

  • Page 178

    • DMZ: The port configured for DMZ will interface to the static route. Enter the IP address of the gateway router, which is the next hop address for the wireless Gateway IP Address controller. Metric Enter the administrative distance of the route. The range is 2 to 15. D-Link DWC-1000 User Manual...

  • Page 179: Configure Ipv6 Static Routing

    The List of IPv4 Static Routes and List of IPv6 Static Routes share the same fields (with one exception): To configure IPv6 Static Routing: 1. Go to Network > IPv6 > Static Routing page. 2. Click Add New IPv6 Static Route. D-Link DWC-1000 User Manual...

  • Page 180: Editing/deleting Static Routes

    After you add static routes, you can edit it if you need to change settings. To edit a static route, right-click the static route you want to edit, and click Edit. To delete a static route, right-click the static route you want to remove, and click Delete. D-Link DWC-1000 User Manual...

  • Page 181

    The authentication key validity lifetimes are configurable to ensure that the routing information exchange is with current and supported controllers detected on the LAN. Click Save to save your settings. Save D-Link DWC-1000 User Manual...

  • Page 182: Ospf

    To configure OSPF: 1. Click Network > Routing > OSPF. 2. Right-click the port you want to edit (LAN/Option1/Option2), and click Edit. 3. Complete the fields given in the table on the next page, and click Save. D-Link DWC-1000 User Manual...

  • Page 183

    • MD5: The interface authenticates OSPF packets with MD5 authentication. Md5 Key ID If MD5 authentication is selected, enter the MD5 key ID. Md5 Authentication Key If MD5 authentication is selected, enter the MD5 authentication key. Click Save to save your settings. Save D-Link DWC-1000 User Manual...

  • Page 184: Ospfv3 (ipv6)

    To configure OSPFv3: 1. Click Network > IPv6 > OSPFv3. 2. Right-click the port you want to edit (LAN/Option1/Option2), and click Edit. 3. Complete the fields in the table on the next page, and click Save. D-Link DWC-1000 User Manual...

  • Page 185

    If any of these intervals are different, these controllers will not become neighbors on a particular segment. Cost Enter the cost of sending a packet on an OSPFv3 interface. Save Click Save to save your settings. D-Link DWC-1000 User Manual...

  • Page 186: To 4 Tunneling (ipv6)

    IPv4 network. When enabled, traffic from an IPv6 LAN to be sent over an IPv4 Option to reach a remote IPv6 network. To enable 6 to 4 Tunneling: 1. Click Network > IPv6 > 6 to 4 Tunneling. 2. Toggle Activate Auto Tunneling to On and click Save. D-Link DWC-1000 User Manual...

  • Page 187: Isatap Tunnels (ipv6)

    LAN interface (assuming the LAN is an IPv4 network), or a specific LAN IPv4 address. IPv4 Address If you selected LAN IPv4 Address, then enter the end point address. Save Click Save to save your settings. D-Link DWC-1000 User Manual...

  • Page 188: Protocol Binding

    Address Range is selected, enter the IP address or IP range. Select the destination network: Any, Single Address, or Address Range. If Single Destination Network Address or Address Range is selected, enter the IP address or IP range. Save Click Save to save your settings. D-Link DWC-1000 User Manual...

  • Page 189: Securing Your Network

    • “External Authentication” on page 219 • “Blocked Clients” on page 240 • “WIDS” on page 65 Note: The procedures in this chapter should only be performed by expert users who understand networking concepts and terminology. D-Link DWC-1000 User Manual...

  • Page 190: Client Management

    List type (white-list or black-list) of the client’s MAC address. MAC Authentication is enable at the network level. The network configuration also defines whether MAC addresses are looked up on the local database or on the RADIUS server. D-Link DWC-1000 User Manual...

  • Page 191

    Deny: Prohibit the client with the specified MAC address from accessing the Authentication Action network. • Global Action: Use the global white-list or black-list action configured on the Advanced Global Configuration page to determine how to handle the client. D-Link DWC-1000 User Manual...

  • Page 192: Editing/deleting Clients

    1. Go to Security > Authentication > User Database > MAC Authentication. 2. Under MAC Authentication List, right-click the client and select either Edit or Delete. 3. Change the desired settings (refer to the table on the previous page). 4. Click Save. D-Link DWC-1000 User Manual...

  • Page 193: Group Management

    After you define user groups, you can use the procedure under “User Management” on page 200 to populate the groups with users. To add a user group: 1. Go to Security > Authentication > User Database > Groups. D-Link DWC-1000 User Manual...

  • Page 194

    Enter the number of minutes of inactivity that must occur before the users in this user Idle Timeout group are logged out of their web management session automatically. Entering an Idle Timeout value of 0 (zero) means never log out. D-Link DWC-1000 User Manual...

  • Page 195: Editing User Groups

    1. Go to Security > Authentication > User Database > Groups. The Groups List page will appear. 2. Right-click the user group you want to edit, and click Edit. The Group Configuration pop-up page will appear. 3. Complete the fields in the previous page, and click Save. D-Link DWC-1000 User Manual...

  • Page 196: Deleting User Groups

    1. Go to Security > Authentication > User Database > Groups. The Groups page will appear. 2. Right-click on the user group you want to delete and click Delete. To delete all groups, click Select All and then Delete. D-Link DWC-1000 User Manual...

  • Page 197: Configuring Login Policies

    • On: Disable login access. • Off: Enable login access. Grants or denies login access from the wireless controller’s Option port. Choices are: Deny login from Option • On: Disable login access. Interface • Off: Enable login access. D-Link DWC-1000 User Manual...

  • Page 198: Configuring Browser Policies

    Defined Browsers area. Field Description Group Name Select the group name from the drop-down menu. Client Browser Select a web browser from the drop-down menu. 4. Right-click your entry from the list, and select Allow or Deny. D-Link DWC-1000 User Manual...

  • Page 199: Configuring Ip Policies

    Source Address Type • IP Address = specifies a particular IP address. • IP Network = specifies an entire IP network. Network Address/IP Address Enter the network or IP address. Mask Length Enter a subnet mask. D-Link DWC-1000 User Manual...

  • Page 200: User Management

    Path: Security > Authentication > User Database > Users One way of adding users is to add users individually. 1. Go to Security > Authentication > User Database > Users tab. 2. Click Add New User. The User Configuration pop-up page will appear. D-Link DWC-1000 User Manual...

  • Page 201: Importing Users

    DWC devices as needed. Once uploaded, the specific users in the local user database can be modified via the GUI as needed. Steps to upload User DB: 1. Go to Security > Authentication > User Database > Get User DB page. D-Link DWC-1000 User Manual...

  • Page 202

    The Group for a corresponding user (“GroupName” in the CSV) must be created via the GUI, in advance of the User Database CSV upload action. • None of the above fields can be left empty or NULL in the User Database CSV. D-Link DWC-1000 User Manual...

  • Page 203: Editing Users

    (•). Enter the new case-sensitive login password. For security, each typed password New Password character is masked with a dot (•). Record the new password in Appendix A. Confirm Password Enter the new password again. D-Link DWC-1000 User Manual...

  • Page 204: Deleting Users

    1. Click Security > Authentication > User Database > Users tab. The Users List page will appear. 2. Right-click on the user you want to delete, and click Delete. To delete all the users, click Select All and then Delete. D-Link DWC-1000 User Manual...

  • Page 205: Hotspot

    Note: Accounting is on a per-controller basis. This means that a temporary user authenticated on one controller will not have its usage statistics shared among controllers in the event that the same user credentials are used to authen- ticate via another peer or cluster controller. D-Link DWC-1000 User Manual...

  • Page 206: Captive Portal Front Desk

    I.e. if the LAN IP address is the default 192.168.10.1, then the Front Desk user’s entry of 192.168.10.1/frontdesk” in their browser’s URL will redirect to http://192.168.10.1/platform. cgi?page=billingDeskLogin.htm. • Opening the Front Desk page from the same browser as the current admin session will not auto-redirect to the correct page. D-Link DWC-1000 User Manual...

  • Page 207: Guest Account Usage Management

    1. The temporary account usage time is limited by duration. The account has the expiration time. The account is valid while the account is created. This billing profile is suitable for the scenario in Hotel. The temporary account is created and valid while cus- tomers check-in. D-Link DWC-1000 User Manual...

  • Page 208

    5. The temporary account has limited usage traffic. The account doesn’t have the expiration time until the usage is run out. This billing profile is suitable for a Hotspot scenario. The service provider charge the wireless service based on usage volume. D-Link DWC-1000 User Manual...

  • Page 209

    Enter a value here in Hours/Days/MB/GB to get an alert message when usage time/ Page while Rest of Usage traffic left reaches the desired limit. By default if 0 is entered it implies no alert message Time/ Traffic Under is required. D-Link DWC-1000 User Manual...

  • Page 210

    Captive Portal which is set the Captive Portal Type as Billing User Price Enter a price. Select the Monetary Unit from drop down menu. The available options are from the Monetary Unit Currency setting on Payment Gateway. D-Link DWC-1000 User Manual...

  • Page 211: Payment Gateway

    Enter the API password of the Paypal account. API Signature Enter the API signature of the Paypal Premier/Business/Website Payment Pro account. APP ID Enter the APP ID which Paypal provided to you. Currency Select the currency type. D-Link DWC-1000 User Manual...

  • Page 212

    Enter the API account ID used for receiving payments. Transaction Key Enter your transaction key. MD5 Hash Enter your MD5 Hash value. Transaction Server Live is selected. Select Live or Test. Transaction Mode Currency Select the currency type. D-Link DWC-1000 User Manual...

  • Page 213: Login Profiles

    Path: Security> Authentication> Login Profiles> Login Profiles 1. Go to Security > Authentication > Login Profiles > Login Profiles tab. 2. Click Add New Login Profile. 3. Complete the fields in the table on the next page and click Save. D-Link DWC-1000 User Manual...

  • Page 214

    Enter the text that appears in the header of the login page during the captive portal session. Caption Font Select the font for the header text. Font Size Select the font size for the header text. Font Color Select the font color for the header text. D-Link DWC-1000 User Manual...

  • Page 215

    Unit Price. Enable the billing profile by switch ON on STATUS. Enter the service disclaimer text which is shown before user select and purchase wireless Service Disclaimer Text service. Payment Server Select the payment received account and its payment agent. D-Link DWC-1000 User Manual...

  • Page 216: Customize The Sla Of The Captive Portal

    Enter the text that will appear in the title of the browser during the captive portal Browser Title session. Shows the set of rules on Captive Portal which is set for temporary and SLA type users. Term of Service Rule The user needs to accept before accessing internet. D-Link DWC-1000 User Manual...

  • Page 217: Upload A Custom Profile

    Upload a Custom Profile Path: Security > Authentication > Login Profiles > Custom CP Profile 1. Go to Security > Authentication > Login Profiles > Custom CP Profiles tab. 2. Click Browse and select a saved profile. Click Save. D-Link DWC-1000 User Manual...

  • Page 218: Radius Accounting Global Setting

    The interim Interval at which Radius Accounting (Interim-Update) packets should be Radius Accounting Interim sent by the controller. The value should be in the range 300 - 3600. By default, it is not Interval configured. Save Saves the settings. D-Link DWC-1000 User Manual...

  • Page 219: External Authentication

    RADIUS authentication attempt if communication with the server is not possible. To configure RADIUS Server: 1. Go to Security > Authentication > External Auth Server > RADIUS Server tab. D-Link DWC-1000 User Manual...

  • Page 220

    Set the amount of time in seconds, the controller should wait for a response from the Timeout RADIUS server. This determines the number of tries the controller will make to the RADIUS server Retries before giving up. D-Link DWC-1000 User Manual...

  • Page 221: Configure Radius Accounting

    IP address of the RADIUS accounting server. Accounting Server Name Enter a name for the server. Port Enter the port to use. Secret Secret key that allows the device to log into the configured RADIUS server. D-Link DWC-1000 User Manual...

  • Page 222: Configure Pop3 Server

    Set the amount of time in seconds, the controller should wait for a response from Timeout the POP3 server. This determines the number of tries the controller will make to the POP3 server Retries before giving up. D-Link DWC-1000 User Manual...

  • Page 223: Configure Pop3 Trusted Ca

    1. Go to Security > Authentication > External Auth Server > POP3 Trusted CA tab. 2. Click Add CA File to add a CA file. 3. Click Browse to select a CA file. Once selected, click Save. D-Link DWC-1000 User Manual...

  • Page 224: Configure Ldap Server

    LDAP server to authenticate the controller. To configure your LDAP Server: 1. Go to Security > Authentication > External Auth Server > LDAP Server tab. 2. Complete the fields given in the table on the next page, and click Save. D-Link DWC-1000 User Manual...

  • Page 225

    Admin account in LDAP server that will be used when LDAP authentication is required Administrator Account for PPTP/L2TP connection. Password Enter the admin password. LDAP Server List Name Displays the names of the LDAP Servers. IP Address The IP address of the respective LDAP Server is also displayed. D-Link DWC-1000 User Manual...

  • Page 226: Configure Active Directory Server

    Set the amount of time in seconds that the controller should wait for a response from Timeout the AD server. This determines the number of tries the controller will make to the AD server before Retries giving up. D-Link DWC-1000 User Manual...

  • Page 227: Configure Nt Domain Server

    Set the amount of time in seconds that the controller should wait for a response from Timeout the NT Domain server. This determines the number of tries the controller will make to the NT Domain server Retries before giving up. D-Link DWC-1000 User Manual...

  • Page 228: Facebook Wi-fi

    Facebook and the controller should be registered with Facebook so that the users can be directed to your facebook page when accessing the network. To configure: 1. Go to Security > Authentication > Facebook WiFi. 2. Enter the Registration Name, and then click Register. D-Link DWC-1000 User Manual...

  • Page 229

    4. The information about the fields present on the screen are given in the table below. Field Description Facebook WiFi Auth Registration Registration Name Enter the name you want to register. The default is DWC-1000. Reset Resets the Facebook WiFi registration. Register This is used to register gateway device with Facebook.

  • Page 230: Email Configuration

    Login Plain or CRAM-MD5 and enter the User Name and Password to be used for authentication. To disable authentication, select None. Toggle it ON to configure the controller to respond to an IDENT request from the Respond to Identd from SMTP SMTP server. Save Saves the settings. D-Link DWC-1000 User Manual...

  • Page 231: Web Content Filter

    Internet Explorer. For added security cookies, which typically contain session information, can be blocked as well for all devices on the private network. To configure: 1. Go to Security > Web Content Filter > Static Filtering. 2. Toggle which service you want to filter to On and click Save. D-Link DWC-1000 User Manual...

  • Page 232: Approved Urls

    2. To import a list from a text/CSV file, click Upload URLs List from File. If you want to export the current list, click Export URLs List to File. To add a new URL, click Add New Approved URL. 3. Enter a URL and click Save. D-Link DWC-1000 User Manual...

  • Page 233: Blocked Keywords

    2. To import a list from a text/CSV file, click Upload Keywords List from File. If you want to export the current list, click Export Keywords List to File. To add a new URL, click Add New Keyword. 3. Enter a keyword and click Save. D-Link DWC-1000 User Manual...

  • Page 234: Dynamic Filtering

    Section 6 - Securing Your Network Dynamic Filtering Note: You must activate the DWC-1000-WCF license to access the Dynamic Web Content Filtering option. Path: Security > Web Content Filter > Dynamic Filtering This feature allows the administrator to block access from a range of web content categories. The controller must be upgraded with the WCF license, and then the Content Filtering option, which allows the user to filter out internet sites, needs to be enabled.

  • Page 235

    Sites about politics, elections and legislation and sites that promote a politician or Politics political party Sports Sites about sports teams, fan clubs, and generally about all kinds of sports. Websites that allow users to send and/or receive email through a web accessible Email Sites email account. D-Link DWC-1000 User Manual...

  • Page 236: Firewall

    LAN from accessing internet services by creating an outbound firewall rule for each service. To create a new firewall rule: 1. Click Security > Firewall > Firewall Rules. 2. Right-click an entry and click either Edit or Delete. To add a new group, click Add New IPv4 Firewall Rule. D-Link DWC-1000 User Manual...

  • Page 237

    Outbound rules (where To Zone = insecure Option only) can have the traffic marked with a QoS priority tag. Select a priority level: • Normal-Service: ToS=0 (lowest QoS) QoS Priority (IPv4 only) • Minimize-Cost: ToS=1 • Maximize-Reliability: ToS=2 • Maximize-Throughput: ToS=4 • Minimize-Delay: ToS=16 D-Link DWC-1000 User Manual...

  • Page 238: Schedules

    Time Zone and configuring NTP servers for more information. To add a schedule profile: 1. Click Security > Firewall > Schedules Profiles. 2. Click Add New Schedule Profile. Enter a name for the profile and click Save. D-Link DWC-1000 User Manual...

  • Page 239

    Start Time/End Time utes, and am/pm to select the start time and end time. Click, hold, and move up to de- crease the value or move down to increase the value. Save Click to save your settings. D-Link DWC-1000 User Manual...

  • Page 240: Blocked Clients

    This page displays a list of blocked clients. You may add new clients to block. To configure blocked clients: 1. Go to Security > Firewall > Blocked Clients. 2. Click Add New Blocked Clients. Enter the client’s MAC address and a description. 3. Click Save. D-Link DWC-1000 User Manual...

  • Page 241: Custom Services

    If you selected Multiple Ports, enter the port or ports separated by a comma. ICMP Type The ICMP type is a numeric value that can range between 0 and 40. Save Click to save your settings. D-Link DWC-1000 User Manual...

  • Page 242: Algs

    1. Go to Security > Firewall > ALGs page. 2. Toggle the protocol(s) to ON that you want to allow through the controller. D-Link DWC-1000 User Manual...

  • Page 243: Smtp Algs

    SMTP traffic originating from both clients and servers. 1. Click Security > Firewall > ALGs > SMTP ALGs tab. 2. Toggle Status to ON. 3. Enter the port at which the SMTP packets are inspected. 4. Click Save. D-Link DWC-1000 User Manual...

  • Page 244: Mail Filtering

    2. Right-click an entry and select either Edit or Delete. To add a new mail ID, click Add New Mail Filter. 3. Enter a subject and a mail ID. 4. Select your action as allow or block. 5. Click Save. D-Link DWC-1000 User Manual...

  • Page 245: Vpn Passthrough

    VPN Passthrough page must be toggled to ON. 1. Click Security > Firewall > VPN Passthrough. 2. Toggle the VPN protocol you want to allow to ON and click Save. D-Link DWC-1000 User Manual...

  • Page 246: Dynamic Port Forwarding

    (TCP or UDP) and the range of incoming and outgoing ports to open when enabled. 1. Click Security > Firewall > Dynamic Port Forwarding > Application Rules tab. 2. Right-click an entry and select either Edit or Delete. To add a new schedule, click Add New Application Rule. D-Link DWC-1000 User Manual...

  • Page 247

    Enter the start and end trigger port range. Range Incoming Port Range Enter the port range to open. Save Click to save your settings. 4. Click on the Application Rules Status tab to see a list of rules and their status. D-Link DWC-1000 User Manual...

  • Page 248: Attack Checks

    Allow Ping from LAN Toggle to ON to prevent ICMP packets from being identified as such. ICMP packets, if iden- Block ICMP Notification tified, can be captured and used in a Ping (ICMP) flood DoS attack. D-Link DWC-1000 User Manual...

  • Page 249

    Option and prevents further ICMP traffic from that external address. Note: The ping on LAN interfaces is enabled by default. To disable the ping response from LAN hosts to the LAN/ Option port of the device, uncheck the “Allow Ping from LAN” option. D-Link DWC-1000 User Manual...

  • Page 250

    Router. The remote PC client at the NAT router initiates a VPN tunnel as the IP address of the remote NAT router is not known in advance. The gateway Option port acts as responder. • PPTP server for LAN / Option PPTP client connections. • L2TP server for LAN / Option L2TP client connections. D-Link DWC-1000 User Manual...

  • Page 251: Ipsec Vpn

    Path: VPN > IPSec VPN > Policies An IPSec policy is between the DWC-1000 and another gateway/router and an IPSec client on a remote host. The IPSec mode can be either tunnel or transport depending on the network being traversed between the two policy endpoints.

  • Page 252

    • Subnet: Allows an entire subnet to connect to the VPN. Enter the network address and subnet mask in the provided fields. Toggle to ON to periodically send ping packets to the host on the peer side of the network to keep the tunnel alive. Enable Keepalive D-Link DWC-1000 User Manual...

  • Page 253

    The VPN policy is one half of the IKE/VPN policy pair required to establish an Auto IPSec VPN tunnel. The IP addresses of the machine or machines on the two VPN endpoints are configured here, along with the policy parameters required to secure the tunnel. D-Link DWC-1000 User Manual...

  • Page 254

    The DWC-1000 supports VPN roll-over feature. This means that policies configured on the primary Option port will rollover to the secondary port in case of a link failure. This feature can be used only if your Option is configured in Auto-Rollover mode.

  • Page 255: Tunnel Mode

    The DWC-1000 allows full tunnel and split tunnel support. Full tunnel mode just sends all traffic from the client across the VPN tunnel to the switch. Split tunnel mode only sends traffic to the private LAN based on pre- specified client routes.

  • Page 256: Split Dns Names

    1. Click VPN > IPSec VPN > Tunnel Mode > Split DNS Names tab. 2. Click Add New Split DNS name. You can right-click any created entries to edit or delete. 3. Enter a domain name, and click Save. D-Link DWC-1000 User Manual...

  • Page 257: Dhcp Range

    Enter the starting IP address to issue your clients connecting using DHCP over IPSec. Ending IP Address Enter the ending IP address. Subnet Mask Enter the subnet mask. Click Save to save and activate your settings. Save Note: To support DHCP over IPsec, enable DHCP server on the LAN. D-Link DWC-1000 User Manual...

  • Page 258: Certificates

    Section 7 - VPN Certificates The DWC-1000 uses digital certificates for IPSec VPN authentication. You can obtain a digital certificate from a well-known Certificate Authority (CA) such as VeriSign, or generate and sign your own certificate using functionality available on this gateway.

  • Page 259: Active Self Certificates

    Expiry Time: The date after which this signed certificate becomes invalid. You should renew the certificate before it expires. To upload a certificate: 1. Click VPN > IPSec VPN > Certificate > Active Self Certificates tab. 2. Click the Browse button. Locate your certificate, and click Open. 3. Click Upload. D-Link DWC-1000 User Manual...

  • Page 260: Self Certificate Requests

    Select the application type from the drop-down menu. Select either HTTPS or IPSec. Application Type IP Address Enter an IP address (optional). Domain Name Enter a domain name (optional). Email Address Enter your email address. Save Click Save to save and activate your settings. D-Link DWC-1000 User Manual...

  • Page 261: Easy Vpn Setup

    2. Click Browse, and navigate to the policy file you want to upload. Select it, and click Open. 3. Click Upload. 4. Once uploaded, go to VPN > IPSec VPN > Policies and the loaded VPN will be listed. Right-click it to edit or delete. D-Link DWC-1000 User Manual...

  • Page 262: Pptp Vpn

    Idle TimeOut Enter the amount of time in seconds that the connection will disconnect when idle. Toggle to ON to allow NetBIOS broadcasts to travel over the VPN tunnel. NetBIOS Save Click to save your settings. D-Link DWC-1000 User Manual...

  • Page 263: Client

    Toggle to ON to enable Microsoft Point-to-Point Encryption (MPPE). Idle Time Out Enter the amount of time (in seconds) that you will disconnect from the PPTP server when idle. Save Click Save to save and activate your settings. D-Link DWC-1000 User Manual...

  • Page 264: Pptp Active Users List

    Section 7 - VPN PPTP Active Users List A list of PPTP connections will be displayed on this page. Right-click the connection to connect and disconnect. D-Link DWC-1000 User Manual...

  • Page 265: L2tp Vpn

    Idle TimeOut Enter the amount of time in seconds that the connection will disconnect when idle. NetBIOS Toggle to ON to allow NetBIOS broadcasts to travel over the VPN tunnel. Save Click to save your settings. D-Link DWC-1000 User Manual...

  • Page 266: L2tp Active Users List

    Section 7 - VPN L2TP Active Users List A list of L2TP connections will be displayed on this page. Right-click the connection to connect and disconnect. D-Link DWC-1000 User Manual...

  • Page 267: Server Policies

    1. Make sure you have enabled remote management and have created user(s) and group(s) to assign to this policy. 2. Click VPN > SSL VPN > SSL VPN Server Policy. Next to SSL VPN Server Policy, toggle to On and click Save. 3. Click Add New SSL VPN Server Policy. D-Link DWC-1000 User Manual...

  • Page 268

    If you have not created a resource, refer to “Resources” on page 271 to create a defined resource. Select either VPN Tunnel, Port Forwarding, or All. This field is not available when Service selecting Network Resource. Permission Select either Permit or Deny. Save Click to save your settings. D-Link DWC-1000 User Manual...

  • Page 269: Portal Layouts

    2. Click Add New SSL VPN Portal Layout. Note: You may right-click a layout from the list and edit or delete a layout. 3. Complete the fields from the table on the next page and click Save. D-Link DWC-1000 User Manual...

  • Page 270

    Select what group to include from the drop-down menu. VPN Tunnel Page Toggle to ON to allow remote users to view this page. Port Forwarding Toggle to ON to allow remote users to view this page. Save Click to save your settings. D-Link DWC-1000 User Manual...

  • Page 271: Resources

    Length, and Port Range/Port Number can all be defined for this resource as required. Add New Resource To add a new resource: 1. Click VPN > SSL VPN > Resources. 2. Click Add New Resource. 3. Complete the fields from the table on the next page and click Save. D-Link DWC-1000 User Manual...

  • Page 272

    Select Single IP Address or IP Network. Object Type Object Address Enter the IP address. Mask Length If you selected IP Network, enter the mask length (0-32). Begin/End Enter a port range for the object. Save Click to save your settings. D-Link DWC-1000 User Manual...

  • Page 273: Port Forwarding

    2. Click Add New Rule under either Port Forwarding List for Configured Applications (TCP Port) or under Port Forwarding List for Configured Host Names (FQDN). 3. Enter the IP address of the local server. 4. Next enter either the TCP port number or the domain name (FQDN). 5. Click Save. D-Link DWC-1000 User Manual...

  • Page 274

    3. Enter a primary and secondary DNS server addresses (optional). 4. Enter the range of IP addresses clients will be assigned (DHCP). 5. Next to LCP Timeout, set the value for LCP echo interval (in seconds). 6. Click Save. D-Link DWC-1000 User Manual...

  • Page 275: Client Routes

    • Subnet mask: The subnet information of the destination network is set here. To configure a client route: 1. Click VPN > SSL VPN > Client Routes. 2. Click Add New Client Route. 3. Enter the destination network and subnet mask. 4. Click Save. D-Link DWC-1000 User Manual...

  • Page 276: Open Vpn

    OpenVPN Access Server, and upload the same to connect. Server To configure the controller as an OpenVPN Server: 1. Click VPN > OpenVPN > OpenVPN Settings. 2. Toggle OpenVPN to ON and complete the fields in the table below. D-Link DWC-1000 User Manual...

  • Page 277

    Server 4)POP3 5)Active Directory 6)NT Domain Authentication Type This option is only configurable when authentication server is selected as Radius Server. The available authentication types are PAP/CHAP/MSCHAP/MSCHAPV2. Save Click Save to save and activate your settings. D-Link DWC-1000 User Manual...

  • Page 278

    Select the hash algorithm from the drop-down menu. Select the set of certificates OpenVPN server uses. First row indicates the set of certificates and Certificates keys that the server uses. Second row indicates the set of certificates and keys newly uploaded. D-Link DWC-1000 User Manual...

  • Page 279

    Enable User Based This option is introduced to provide the additional authentication method using username/ Auth password. Username Enter the username. Password Enter the password. Save Click Save to save and activate your settings. D-Link DWC-1000 User Manual...

  • Page 280: Access Server Client

    Enabling this adds facility to block invalid client certificate. This feature requires crl certificate Block Invalid Client which contains list of client certificates to be blocked. Please upload crl certificate in OpenVPN Certificates Authentication page. Save Click Save to save and activate your settings. D-Link DWC-1000 User Manual...

  • Page 281: Local Networks

    If Split Tunnel (from OpenVPN Server) is selected, you can create a local network by following the steps given below: 1. Click VPN > OpenVPN > Local Networks. 2. Click Add New OpenVPN Local Network. 3. Enter a local IP network. 4. Enter the subnet mask. 5. Click Save. D-Link DWC-1000 User Manual...

  • Page 282: Remote Networks

    1. Click VPN > OpenVPN > Remote Networks. 2. Click Add New OpenVPN Remote Network. 3. Enter a name of the remote network. 4. Enter a local IP network. 5. Enter the subnet mask. 6. Click Save. D-Link DWC-1000 User Manual...

  • Page 283: Authentication

    DH Key Browse and upload the pem formatted Diffie Hellman Key. TLS Authentication Browse and upload the pem formatted TLS Authentication Key. CRL Certificate Browse and upload the pem formatted CRL certificate to revoke the client certificate. D-Link DWC-1000 User Manual...

  • Page 284: Status And Statistics

    • “Viewing Statistic and Utilization” on page 285 • “Manage Dashboard” on page 287 • “System Information” on page 289 • “Network Information” on page 291 • “Wireless Information” on page 298 • “ACL & DiffServ Status” on page 332 D-Link DWC-1000 User Manual...

  • Page 285: Viewing Statistic And Utilization

    Interface statistics for the wired connections (LAN, Option1, Option2/DMZ, VLANs) provide indication of packets through and packets dropped by the interface. Click Refresh to have this page retrieve the most current statistics. D-Link DWC-1000 User Manual...

  • Page 286

    HTTP, HTTPS, DNS, SNMP, and others. Displays the current number of concurrent and active IPsec and SSL VPN VPN’s sessions. Displays a grid of traffic statistics (incoming, outgoing, dropped in and Traffic Information dropped out packets) for each interface. D-Link DWC-1000 User Manual...

  • Page 287: Manage Dashboard

    1. Click on the Manage Dashboard button. 2. The following window will pop out and allow you to enable or disable the overview panels shown on the dashboard. Toggle the panel to On or Off and click Save. D-Link DWC-1000 User Manual...

  • Page 288

    If you suspect issues with any of the wired ports, use this table to identify uptime or transmit level issues with the port. The statistics table has an auto-refresh control for displaying the most current port level data at each page refresh. The default auto-refresh for this page is 10 seconds. D-Link DWC-1000 User Manual...

  • Page 289: System Information

    • Port Information – Shows information based on the administrator configuration parameters. Note that LAN1 will display the local interface of the controller. If you set any of the LAN ports to Standalone, information will be displayed under the corresponding LAN heading. D-Link DWC-1000 User Manual...

  • Page 290: Viewing Usb Status

    USB printer and USB disk (for firmware upgrade only) directly. There are two USB ports. The D-Link Wireless Controller has a USB interface for printer access, and file sharing. There is no configuration on the GUI to enable USB device support. Upon inserting your USB storage device, printer cable, the DWC Controller will automatically detect the type of connected peripheral.

  • Page 291: Network Information

    Path: Status > Network Information > DHCP Leased Clients > LAN Leased Clients Two separated tabs shows a list of clients that have got IP leased from the wireless controller: LAN leased clients and LAN IPv6 leased clients. D-Link DWC-1000 User Manual...

  • Page 292: Viewing Captive Portal Sessions

    Select the session and right-click Block device. The “Block Device” button will result in the selected client being added to the blocked list (Security > Firewall > Blocked Clients), and the current and future sessions from this client will be prevented. D-Link DWC-1000 User Manual...

  • Page 293: Viewing Active Sessions

    Path: Status > Network Information > Active Sessions The Active Sessions page shows the following information about the active Internet sessions through the wireless controller: • Source • Destination • Protocol used during the Internet sessions • State D-Link DWC-1000 User Manual...

  • Page 294: Viewing Vpn Sessions

    The Active VPN Sessions page displays the following information about the active VPN sessions through the wireless controller: • Policy Name • Endpoint • Transfer Rate (KB and Packets) • Configuration State Click the tab of the VPN session you want to view (IPSec, SSL, PPTP, or Open VPN). D-Link DWC-1000 User Manual...

  • Page 295: Viewing Traffic On Interfaces

    Section 8 - Viewing Status and Statistics Viewing Traffic on Interfaces Path: Status > Network Information > Interfaces Statistics This page shows the incoming/outgoing packets on each interface. Table fields are shown on the next page. D-Link DWC-1000 User Manual...

  • Page 296

    Displays the current number of concurrent and active IPsec and SSL VPN Active VPN Tunnels sessions. Available VLANs Displays the current number of enabled and active VLAN interfaces. Active Interfaces Displays the number of enabled interfaces. Count Displays the count for number of packets. D-Link DWC-1000 User Manual...

  • Page 297: Ipv6 Tunnels Status

    The fields available on the IPv6 Tunnels Status page are: • Tunnel Name: The active IPv6 to IPv4 tunnel identifier. • IPv6 Addresses: The source IPv6 address(es) in your LAN that have data being sent over this tunnel. D-Link DWC-1000 User Manual...

  • Page 298: Wireless Information

    RF Scan databases for the whole cluster. The Controllers that are not Cluster Controllers can display information only about locally attached devices. Cluster Controller IP Address The IP address of the peer controller that is the Cluster Controller. D-Link DWC-1000 User Manual...

  • Page 299: Controller Associated Clients

    Field Description Shows the IP address of the Controller that manages the AP to which the Controller IP Address client is associated. Client MAC Address Shows the MAC address of the associated client. D-Link DWC-1000 User Manual...

  • Page 300

    Total number of clients that are associated with an AP that are using distributed Tunnel Clients tunneling. Total number of clients for which the system was unable to setup a distributed Tunnel Client Denials tunnel when client roamed. Clear Statistics Clears the current data. D-Link DWC-1000 User Manual...

  • Page 301: Peer Controller Receive Status

    • Not Started • Receiving Configuration • Saving Configuration Current Receive Status • Applying AP Profile Configuration • Success • Failure - Invalid Code Version • Failure - Invalid Hardware Version • Failure - Invalid Configuration D-Link DWC-1000 User Manual...

  • Page 302

    Timestamp manages. Use the drop-down list at the top of this page to select a peer controller whose access point information you want to view. Each peer controller is identified by its IP address. D-Link DWC-1000 User Manual...

  • Page 303: Peer Controller Sent Status

    Captive Portal • RADIUS Client Shows when the configuration was applied to the controller. The time is Timestamp displayed as UTC time and therefore only useful if the administrator has configured each peer controller to use NTP. D-Link DWC-1000 User Manual...

  • Page 304: Viewing Access Point Information

    Number of APs that were previously authenticated and managed, but Connection Failed APs currently don’t have connection with the Wireless controller. Number of APs that failed to establish communication with the FASTPATH Authentication Failed APs Unified Wireless controller. D-Link DWC-1000 User Manual...

  • Page 305

    Maximum Managed APs in Peer Group Maximum number of access points that can be managed by the cluster. Total network utilization across all APs managed by this controller. This is WLAN Utilization based on global statistics. D-Link DWC-1000 User Manual...

  • Page 306

    • Rogue = access point has not tried to contact the wireless controller and the access point’s MAC address is not in the Valid AP database. Radio Wireless radio mode the access point is using. Channel Operating channel for the radio. D-Link DWC-1000 User Manual...

  • Page 307: Managed

    The radios resume operation when that access point is managed again by a wireless controller. Shows whether the configuration profile applied to the managed access point Configuration Status is successful or not. D-Link DWC-1000 User Manual...

  • Page 308

    Shows per-radio information about the number and type of packets Radio Statistics transmitted and received for a specific access point. Shows per-VAP information about the number of packets transmitted and VAP Statistics received and the number of wireless client failures for a specific access point. D-Link DWC-1000 User Manual...

  • Page 309: Peer Managed

    All is selected from the drop-down menu. Location Descriptive location configured for the managed access point. Profile Access point profile that the wireless controller applies to the access point. Hardware ID Hardware ID associated with the access point hardware platform. D-Link DWC-1000 User Manual...

  • Page 310: Authentication Failed

    This can also happen with the local database when the configuration has been received from a peer controller. Hardware Type: The access point hardware type specified in the access point Profile Mismatch Profile is not compatible with the actual access point hardware. D-Link DWC-1000 User Manual...

  • Page 311

    The RF Scan page shows information about other access points and wireless clients that the wireless controller has detected. Right-click on an AP or client to bring up options to view details. D-Link DWC-1000 User Manual...

  • Page 312: De-authentication Attacks

    The wireless controller maintains a list of BSSIDs against which it is conducting a de‐authentication attack. The controller sends the list of BSSIDs and channels on which the rogue APs are operating to every managed AP. D-Link DWC-1000 User Manual...

  • Page 313

    Time Since Attack Started Shows the amount of time that has passed since the attack started on the AP. RF Scan Report Age Shows the amount of time that has passed since the RF Scan reported this AP. D-Link DWC-1000 User Manual...

  • Page 314: Hardware Capability

    Describes the platform and the supported IEEE 802.11 modes. Radio Count Shows whether the hardware supports one radio or two radios. Image Type Shows the type of software the hardware requires. The right-click option will display the radio Information for the selected hardware type. D-Link DWC-1000 User Manual...

  • Page 315

    Shows whether support for IEEE 802.11bg mode is enabled. VAP Count Displays the number of VAPs the radio supports. 802.11n Support Shows whether support for IEEE 802.11n mode is enabled. 802.11ac Support Shows whether support for IEEE 802.11ac mode is enabled. D-Link DWC-1000 User Manual...

  • Page 316: Associated Clients

    Current number of pre-authentication history entries in use by the system. Maximum number of entries that can be recorded in the roam history for all Maximum Roam History Entries detected clients. Total Roam History Entries Current number of pre-authentication history entries in use by the system. D-Link DWC-1000 User Manual...

  • Page 317

    Name of the wireless network on which the client is connected. MAC address for the managed access point/virtual access point where this BSSID client is associated. AP MAC Address Ethernet MAC address of the access point. D-Link DWC-1000 User Manual...

  • Page 318

    Shows a history of the different APs the client has been connected to that are Roam History Details managed by the DWC-1000. Purge Roam History Will purge the roam history for the selected client. After right-clicking next to the MAC address, the Client Statistic page shows the fields in the table on the next page.

  • Page 319

    The WLAN Associated Detected Clients Pre-Authentication History List page shows detected clients that have made pre-authentication requests and identifies the access points that received the requests. Right-clicking next to the MAC address, the Pre-Auth History page shows the fields in the table on the next page. D-Link DWC-1000 User Manual...

  • Page 320

    VAP MAC address to which the client roamed. SSID SSID name used by the VAP. A flag indicating whether the history entry represents a new authentication Status or a roam event. Time Since Event Time since the history entry was added. D-Link DWC-1000 User Manual...

  • Page 321: Ad Hoc Clients

    Deny Known Client database where the default action is Deny. Allows an ad hoc client access to the WLAN. The MAC address is added to the Allow Known Client database where the default action is Allow. D-Link DWC-1000 User Manual...

  • Page 322: Detected Clients

    • Rogue = client is classified as a threat by one of the threat-detection algorithms. Time since any event has been received for this client that updated the detected client database entry. Create Time Time since this entry was first added to the detected client database. D-Link DWC-1000 User Manual...

  • Page 323

    If a client has been classified as a rogue, this page provides information about which tests the client might have failed to trigger the classification. Purge Pre-auth HIstory Clears pre auth data from Pre-Auth History section. D-Link DWC-1000 User Manual...

  • Page 324: Viewing Radius Accounting Server Statistics

    The number of RADIUS packets of unknown type which were received from Unknown Types this server on the accounting port. The number of RADIUS packets received from this server on the accounting Packets Dropped port and dropped for some other reason D-Link DWC-1000 User Manual...

  • Page 325: Viewing Cluster Information

    Discovery method of the given peer wireless controller, either through an L2 Discovery Reason Poll or IP Poll. Managed AP Count Number of access points that the wireless controller manages currently. Time since last communication with the wireless controller, in hours, minutes, and seconds. D-Link DWC-1000 User Manual...

  • Page 326: Viewing Wds Group Status

    Number of configured bidirectional links in the WDS AP Group. Number of WDS links detected in the system.APs on both sides of the link Detected WDS Links Count must detect each other in order for the link to be counted. D-Link DWC-1000 User Manual...

  • Page 327: Wds Group Ap Status

    Number of configured bidirectional links in the WDS AP Group. Number of WDS links detected in the system. APs on both sides of the link Detect WDS Links Count must detect each other in order for the link to be counted. D-Link DWC-1000 User Manual...

  • Page 328

    To change the password for all controllers and APs in this WDS Group, select the Edit checkbox, type the new password, and then click Apply Password. Edit Password Password must be minimum of 8 characters and can be up to 63 characters in length. D-Link DWC-1000 User Manual...

  • Page 329: Viewing Wds Ap Status

    On Satellite APs the Ethernet port can be manually disabled. On root APs the Ethernet Port Mode port is always enabled. Ethernet Port Link State When the Ethernet port is enabled, this status reports the link state of the port. D-Link DWC-1000 User Manual...

  • Page 330: Viewing Wds Link Status

    Spanning Tree State of the link on the destination AP, which is one of the following: • Disabled (STP is disable or Link is down) Destination AP STP • Forwarding • Learning • Listening • Blocking D-Link DWC-1000 User Manual...

  • Page 331: Viewing Wds Link Statistics

    Source AP Packets/Bytes Received Number of packets/bytes received by the source AP. Destination AP Packets/Bytes Sent Number of packets/bytes sent by the destination AP. Destination AP Packets/Bytes Received Number of packets/bytes received by the destination AP. D-Link DWC-1000 User Manual...

  • Page 332: Acl & Diffserv Status

    The IP ACL status page displays the number of rules configured for the specific IP ACL ID/Name. IP ACL Rules Path: Status > ACL & DiffServ > IP ACL Rules The IP ACL Rules status page provides a summary of the Rules configuration for the respective IP ACL List. D-Link DWC-1000 User Manual...

  • Page 333

    The MAC ACL status page displays the number of rules configured for the specific MAC ACL Name. MAC ACL Rules Path: Status > ACL & DiffServ > MAC ACL Rules The MAC ACL Rules status page provides a summary of the MAC ACL Rules configuration. D-Link DWC-1000 User Manual...

  • Page 334: Diffserv Class

    DiffServ Policy Path: Status > ACL & DiffServ > DiffServ Policy The DiffServ Policy status page provides the Policy name, policy Type and the member classes i.e. the selected classes to which the policy is associated . D-Link DWC-1000 User Manual...

  • Page 335: Diffserv Policy Attribute

    Section 8 - Viewing Status and Statistics DiffServ Policy Attribute Path: Status > ACL & DiffServ > DiffServ Policy Attribute The DiffServ Policy Attribute status page summarizes the configuration done for the DiffServ Policy Class Definition. D-Link DWC-1000 User Manual...

  • Page 336: Maintenance

    This chapter describes the following maintenance activities: • “Administration” on page 337 • “Management” on page 345 • “Firmware” on page 354 • “Using the Command Line Interface” on page 360 • “Wizard” on page 361 D-Link DWC-1000 User Manual...

  • Page 337: Administration

    1. Select the controller’s time zone, relative to Greenwich Mean Time (GMT). 2. If supported for your region, click to Enable Daylight Savings. 3. Determine whether to use default or custom Network Time Protocol (NTP) servers. If custom, enter the server addresses or FQDN. D-Link DWC-1000 User Manual...

  • Page 338: Session Settings

    Enter the session timeout value for administrator and guest users, and then click Save. USB Share Ports Path: Maintenance > Administration > USB Share Ports This page allows to configure the USB Share Ports feature available in the device. D-Link DWC-1000 User Manual...

  • Page 339

    Displays the LAN interfaces on which the usb sharing is en- Interface Name abled; at least one interface must be selected to begin sharing. Enable Printer Enables printer sharing on the selected interface. Enable Storage Enables storage device sharing on the selected interface. D-Link DWC-1000 User Manual...

  • Page 340: Package Manager

    Path: Maintenance > Administration > Package Manager A package is a set of files which are installed by the router from D-Link’s repositories. This feature allows users to download new drivers for supported USB devices and language packs to enable multi-lingual support for the router’s management interface.

  • Page 341

    Description This describes the drivers that are supported It consists of 2 options: Action • Install: Click on “Install” to install a particular Language pack • Remove: To remove the installed language pack, click on “Remove”. D-Link DWC-1000 User Manual...

  • Page 342: Activating Licenses

    2. After obtaining the Activation Key, go to Maintenance > Administration > License Update. The License Update page will appear. 3. Under Activation Setup, enter the D-Link-supplied code for the license you want to activate in the Activation Code field.

  • Page 343: Localization

    The drivers which are installed by the user are indicated with green icon while un-installed drivers are indicated with red icon. To install or upgrade any drivers, the user has to right click the respective driver, and click Install or Upgrade, whichever available. D-Link DWC-1000 User Manual...

  • Page 344

    The installed language can be set by selecting the language from the drop down list, present at the following page: Maintenance > Administration > Set Language. The languages supported by the device are Spanish, French, Chinese, Italian, German and English. For complete detail, please refer “Package Manager” on page 340. D-Link DWC-1000 User Manual...

  • Page 345: Management

    1. Go to Maintenance > Management > Remote Management. 2. Set HTTP and/or HTTPS to On. If you select HTTPS, you may enter a port (4443 is the default setting). 3. To understand each field, refer to the table given on the next page. D-Link DWC-1000 User Manual...

  • Page 346

    Option side, switch it to ON. This setting is usually Respond to Ping used as a diagnostic tool for connectivity problems. It is recommend- ed that the option be OFF at other times to prevent hackers from easily discovering the controller through a ping . D-Link DWC-1000 User Manual...

  • Page 347: Power Saving Settings

    This option will reduce the power to a LAN port if an Ethernet cable of less than 10 ft is detected as being connected to that port. D-Link DWC-1000 User Manual...

  • Page 348: Snmp

    SNMP version (v1, v2c, v3) for the trap. Configure SNMP v3 User List 1. Go to Maintenance > Management > SNMP page, and click SNMP tab. 2. Right-click either admin or guest and select Edit. D-Link DWC-1000 User Manual...

  • Page 349: Configure Snmp Trap List

    The community string to which the agent belongs. Most agents are Community configured to listen for traps in the Public community. Authentication Type The SNMP version used by the trap agent. The choices are v1, v2c, or v3. D-Link DWC-1000 User Manual...

  • Page 350: Configure Snmp Access Control List

    The IP Address of the SNMP trap agent. Subnet Mask The network mask used to determine the list of allowed SNMP managers. Community The community string to which the agent belongs. Access Type Access will be either read only (ROcommunity) or read-write (RWcommunity). D-Link DWC-1000 User Manual...

  • Page 351: Configure Snmp System Info

    APs it manages. All Wireless SNMP traps are disabled by default. 1. Go to Maintenance > Management > SNMP > SNMP Trap tab. D-Link DWC-1000 User Manual...

  • Page 352

    If you enable this field, the SNMP agent sends a trap when the controller discovers a Rogue AP Traps rogue AP. The agent also sends a trap every Rogue Detected Trap Interval seconds if any rogue AP continues to be present in the network. D-Link DWC-1000 User Manual...

  • Page 353

    • Managed AP database Wireless Status Traps • AP Neighbor List • Client Neighbor List • AP Authentication Failure List • RF Scan AP List • Client Association Database • Ad Hoc Clients List • Detected Clients List D-Link DWC-1000 User Manual...

  • Page 354: Firmware

    B. If Save from USB Port 1, or Save from USB Port 2 is chosen, the file will immediately be backed up to the corresponding USB flash drive without further prompts. If no USB flash medium is present, these options will do nothing. D-Link DWC-1000 User Manual...

  • Page 355: Restoring Configuration Settings

    Open. You may also restore from a USB drive connected to one of the USB ports. 3. Click Restore. A message will appear. 4. Click OK to close the message and restore the configuration settings from the selected file. D-Link DWC-1000 User Manual...

  • Page 356: Soft Reboot

    3. At the confirmation message, click OK to restore factory default settings; or click Cancel to retain your current settings. Note: After restoring the factory default configuration, the wireless controller’s default LAN IP address is 192.168.10.1, the default login user name is admin, and the default login password is admin. D-Link DWC-1000 User Manual...

  • Page 357: Rebooting The Wireless Controller

    1. Go to Maintenance > Firmware > Soft Reboot. 2. Next to Soft Reboot, click Soft Reboot. To reboot to the original factory default, click Default. 3. At the confirmation message, click OK to reboot the wireless controller, or click Cancel to abort reboot. D-Link DWC-1000 User Manual...

  • Page 358: Upgrading Firmware

    Wireless Controller Firmware Upgrade Path: Maintenance > Firmware > Firmware Upgrade > Using System (PC) D-Link is constantly improving the operation and performance of the wireless controller. When improvements are available, they are offered to customers as firmware upgrade releases.

  • Page 359

    To use a USB drive to update the firmware, click the Using USB tab. 2. If the firmware version on the D-Link Support website has a higher number than the firmware version shown under Firmware Information, continue with this procedure.

  • Page 360: Using The Command Line Interface

    2. CLI login credentials are shared with the GUI for administrator users. When prompted, type cli in the SSH or console prompt and login with administrator user credentials. For more information, refer to the Wireless Controller CLI Reference Guide: DWC-1000. D-Link DWC-1000 User Manual...

  • Page 361: Wizard

    Section 11 - Wizard Wizard The Wizard is a user friendly approach provided by D-Link Wireless Controller which guides its users step- by-step for various configurations required for the applications. This is a very useful tool for the new users as it would help them to understand the steps required for the several settings.

  • Page 362: Internet Connection Wizard

    3. Depending on the connection type, a username/password may be required to register this controller with the ISP. 4. In most cases, the default settings can be used if the ISP does not specify that parameter. D-Link DWC-1000 User Manual...

  • Page 363

    5. The last step in the Wizard is to click the Save button, which confirms the settings by establishing a link with the ISP. 6. Once connected, you can move on and configure other features in this controller. D-Link DWC-1000 User Manual...

  • Page 364: Vpn Wizard

    Note: The VPN Wizard is the recommended method to set up an Auto IPsec policy. Once the Wizard creates the matching IKE and VPN policies required by the Auto policy, one can modify the required fields through the edit link. Refer to the online help for details. D-Link DWC-1000 User Manual...

  • Page 365: Troubleshooting

    • “Discovery Problems with Access Points” on page 368 • “Connection Problems” on page 369 • “Network Performance and Rogue Access Point Detection” on page 370 • “Using Diagnostic Tools on the Wireless Controller” on page 371 D-Link DWC-1000 User Manual...

  • Page 366: Led Troubleshooting

    If the error persists, please contact D-Link technical support. LAN Port LEDs Not ON If the LAN LEDs do not go ON when the Ethernet connection is made: 1.

  • Page 367: Unable To Save Configuration Changes

    If yes, inform your ISP that you have bought a new network device, and ask them to use the firewall’s MAC address. Alternatively, select Network > Internet (IPv4) > Option1 Settings and configure your controller to spoof • your PC’s MAC address. D-Link DWC-1000 User Manual...

  • Page 368: Using The Reset Button To Restore Default Settings

    IP address, and then run discovery again to discover the next access point with that IP address (see “Step #3: Select APs to be Managed” on page 30). D-Link DWC-1000 User Manual...

  • Page 369: Connection Problems

    • Verify that the Ethernet card driver software and TCP/IP software are installed and configured on the PC. • Verify that the IP address for the controller and PC are correct and on the same subnet. D-Link DWC-1000 User Manual...

  • Page 370

    If security concerns are more important than network performance, you can enable rogue access point detection. If network performance is more important than security concerns, you can temporarily disable rogue access point detection. D-Link DWC-1000 User Manual...

  • Page 371: Using Diagnostic Tools On The Wireless Controller

    2. Under Command Output for Ping and Traceroute, in the IP Address / Domain Name field, enter an IP address or domain name. 3. Click Ping. The results will appear in the Command Output display below. D-Link DWC-1000 User Manual...

  • Page 372: Using Traceroute

    2. Under Command Output for Ping and Traceroute, in the IP Address / Domain Name field, enter an IP address or domain name. 3. Click Traceroute. The results will appear in the Command Output display given below. D-Link DWC-1000 User Manual...

  • Page 373: Performing Dns Lookups

    3. Click Lookup. The results will appear in the Command Output display below. If the host or domain entry exists, a response will appear with the IP address. If the message Host Unknown appears, the Internet name does not exist. D-Link DWC-1000 User Manual...

  • Page 374: Capturing Log Packets

    2. Select an interface (LAN or Option 1/Option 2) from the drop-down menu. 3. Click Start Trace. The results are shown in the Command Output page. The trace can be downloaded by clicking the Download button, which will immediately begin the download to the browsers default download location. D-Link DWC-1000 User Manual...

  • Page 375: Conducting A System Check

    The link (http://<device-ip>/scgi-bin/dbglog.cgi)from the device allows the user to download and automate the debug log (dbglog) package, grouping of system status, statistics, and support logs that are useful for D-Link support to evaluate and diagnose the controller issues. D-Link DWC-1000 User Manual...

  • Page 376: Log Settings

    Kernel, System, Network, VPN, WCF, Firewall, Wireless Controller, and Captive Portal. For each facility, the following events (in order of severity) can be logged: Severity Description Emergency System is unusable Alert Action must be taken immediately Critical Critical conditions Error Error conditions Warning Warning conditions D-Link DWC-1000 User Manual...

  • Page 377

    (the Event Log viewer is in the Status > System Information > All Logs > Current Logs) or a remote Syslog server for later review. E-mail logs, discussed in a subsequent section, follow the same configuration as logs configured for a Syslog server. D-Link DWC-1000 User Manual...

  • Page 378: Tracking Traffic/routing Logs

    Maintenance > Logs Settings > Routing Logs > IPv6 This section is used to configure the logging options for each network segment (for example, LAN-WAN). Note: Enabling logging options may generate a significant volume of log messages and is recommended for debugging purposes only. D-Link DWC-1000 User Manual...

  • Page 379

    LAN, then whenever a LAN machine tries to make an SSH connection, those packets will be dropped and a message will be logged. (Make sure the log option is set to allow for this firewall rule.) D-Link DWC-1000 User Manual...

  • Page 380: System Logging

    If enabled, it tracks the number of packets exceeded the bandwidth range. Remote Classification Server By enabling this option, the logs related to WCF classification will be logged, this Logs option is available only when the WCF licence is enabled in device. D-Link DWC-1000 User Manual...

  • Page 381: Remote Logging

    If E-Mail Logs is enabled, enter the e-mail address where the replies from the SMTP Return E-Mail Address server are to be sent (required for failure messages). If E-Mail Logs is enabled, enter up to three email addresses where logs and alerts are Send to E-mail Address(1-3) to be sent. D-Link DWC-1000 User Manual...

  • Page 382

    • Weekly = send logs weekly, at the Day and Time specified. If Unit is set to Weekly, select the day when logs will be sent. Time If Unit is set to Daily or Weekly, select the time when logs will be sent. D-Link DWC-1000 User Manual...

  • Page 383: Syslog Server Configuration

    For each syslog server, select a unique facility for logging. Select the appropriate Syslog severity. When a severity is selected, all Syslogs with Severity severity equal to or greater than the chosen severity are logged on the configured Syslog Server. D-Link DWC-1000 User Manual...

  • Page 384: All Logs

    If remote logging such as a syslog server or e-mail logging is configured, the same logs are sent to the remote interface while being displayed here . D-Link DWC-1000 User Manual...

  • Page 385: Appendix A - Basic Planning Worksheet

    • Total number of users and number of users per access point • Radio type(s) • Desired access point data rates • Areas where you want to deploy access points • Areas where you cannot deploy an access point • Areas where you do not want coverage D-Link DWC-1000 User Manual...

  • Page 386

    Yes = host name and IP address should be assigned dynamically. No = use DHCP relay or configure static IP addresses and record them below. IP address: IP subnet mask: Gateway IP address: Primary DNS server: Secondary DNS server: D-Link DWC-1000 User Manual...

  • Page 387

    Record MAC addresses for the wireless controller and all access points: DWC-1000 wireless controller: DWL-2600AP access point(s): DWL-3600AP access point(s): DWL-6600AP access point(s): DWL-6700AP access point(s): DWL-8600AP access point(s): DWL-3610AP access point(s): DWL-6610AP access point(s): DWL-8610AP access point(s): DWL-8710AP access point(s): D-Link DWC-1000 User Manual...

  • Page 388: Appendix B - Factory Default Settings

    Device Login admin Login password (case sensitive) admin IP address 192.168.10.1 IPv4 subnet mask 255.255.255.0 DHCP server Disabled Local area network Time zone (LAN) Time zone adjusted for Daylight Savings Time Disabled SNMP Disabled Remote management Disabled D-Link DWC-1000 User Manual...

  • Page 389: Appendix C - Glossary

    NAT - Network Address Translation. Process of rewriting IP addresses as a packet passes through a controller or firewall. NAT enables multiple hosts on a LAN to access the Internet using the single public IP address of the LAN’s gateway controller. D-Link DWC-1000 User Manual...

  • Page 390

    WINS - Windows Internet Name Service. Service for name resolution. Allows clients on different IP subnets to dynamically resolve addresses, register themselves, and browse the network without sending broadcasts. Wireless Controller - D-Link device that centralizes and simplifies network management of a wireless LAN by consolidating individually managed access points into a single, unified solution.

Comments to this Manuals

Symbols: 0
Latest comments: