D-Link DRO-250i User Manual
  1. Manuals
  2. Brands
  3. D-Link Manuals
  4. Network Router
  5. DRO-250i
  6. User manual
D-Link DRO-250i User Manual

D-Link DRO-250i User Manual

Hide thumbs Also See for DRO-250i:
Table of Contents

Advertisement

Quick Links

Download this manual
DRO-250i Router
Users Guide
Rev 1.0(MAY 2006)

Advertisement

Table of Contents
loading

Related Manuals for D-Link DRO-250i

Summary of Contents for D-Link DRO-250i

  • Page 1 DRO-250i Router Users Guide Rev 1.0(MAY 2006)

  • Page 2: Table Of Contents

    2.1.1 Front Panel ..............13 2.1.2 Rear Panel ..............15 2.2 Unpacking the DRO-250i ............15 2.1.3 Mounting the DRO-250i ..........16 2.3 Connecting the DRO-250i to your network ......17 2.4 Configuration via Web Browser..........18 CONFIGURATION THROUGH WEB ..........20 Interfaces ................20 3.2.1 Interfaces -LAN ..............20...
  • Page 3 Introduction to DRO-250i 3.2.5.5 WAN 4 - Serial Port Settings ........45 3.2.6 Interfaces -BACKUP CONFIG ........46 3.2.7 Interfaces -DMZ/WAN3..........48 Routing ................49 Advanced................55 3.4.1 Advanced - DHCP............55 3.4.1.1 DHCP - DHCP Servers..........55 3.4.1.2 DHCP -DHCP Reservation........58 3.4.2 Advanced -DNS Proxy ...........59 3.4.3 Advanced -NAT..............60...
  • Page 4 Introduction to DRO-250i 3.7.2 Tools - System .............102 3.7.3 Tools - Upload..............103 3.7.4 Tools - Ping Test............104 3.7.5 Tools - Time ..............105 3.7.6 Tools - System Log ............107 3.7.7 Tools - Remote Access..........108 Status................110 3.8.1 Status - Device Info............110 3.8.2 Status - Route Table ............112...

  • Page 5: Introduction To Dro-250I

    DRO-250i Router is targeted for low cost market in SOHO segment. This router uses XScale architecture (ARM core with NPEs) from INTEL (IXP425). The hardware is designed with 5 Interfaces (V.35, LAN, ISDN, &...

  • Page 6: Product Features

    Introduction to DRO-250i which ideally gives bandwidth up to 2Mbps. ISDN WAN interface can be a backup interface which gives 128kbps bandwidth 1.2 Product Features 1.2.1 Hardware Features LAN Port The Product is equipped with an auto-negotiated 10/100 (Ethernet) RJ-45 interface for connecting the router to the LAN.
  • Page 7 Introduction to DRO-250i Auto Hang-up The product can be configured for Auto Hang-up with idle times which can hang-up the ISDN WAN connection when the line stays idle for predetermined time duration. To disable this feature set idle- timeout to 0 in ISDN Configuration page.

  • Page 8: Software Features

    56Kbps 1.2.2 Software Features Routing DRO-250i supports both the dynamic and static routing. As part of dynamic routing it supports RIP and OSPF routing protocols. The Routing Information Protocol, or RIP, as it is more commonly called, is one of the most enduring of all routing protocols.DRO-250i supports both the versions of V1 and V2.
  • Page 9 If any interface goes down the traffic will be diverted back to the connected interfaces. Firewall The DRO-250i also includes a firewall which has the following features: • Access Policies • Network Address Translation (NAT/NAPT) with Popular ALG Support.
  • Page 10 SNMP DRO-250i supports SNMPV1, V2 &V3 to allow user to monitor the device through any SNMP manager. This feature allows network administrators to manage network performance, find and solve network problems, and plan for network growth.
  • Page 11 Internet Access The product supports the TCP/IP protocol which is the protocol language for the Internet. DRO-250i Router allows everyone connected to the LAN to access the Internet. NAT feature is required at LAN side to access ISP through any WAN connection.
  • Page 12 Introduction to DRO-250i Chapter 2 and 3 will give the detail info on how to install/configure the DRO-250i router. DRO-250i User Manual...

  • Page 13: Installing Dro-250I

    Installing DRO-250i CHAPTER INSTALLING DRO-250i 2.1 About the router This section will introduce hardware of the router. Front View Rear View DRO-250i User Manual...

  • Page 14: Front Panel

    Introduction to DRO-250i 3.1.1 Front Panel WAN1 WAN2 WAN3 Number Module Status Description/Designation Power WAN1 (V.35) Ready ON: Interface is up OFF: Interface is down WAN1 (V.35) Link ON: There is activity on /ACT this interface OFF: There is no activity...
  • Page 15 OFF: Receive Activity off Restores the factory settings Hard reset for board Interfaces Description V.35 DTE WAN1 WAN Port Ethernet 10BaseT for LAN Port (RJ-45) WAN3/DMZ WAN3 Port/ De Militarized Zone Port ISDN ISDN Port Aux Port DRO-250i User Manual...

  • Page 16: Rear Panel

    INPUT 85-265 VAC Input Voltage 230 VAC 2.2 Unpacking the DRO-250i DRO-250i Package Contents The DRO-250i package contains the following items: • The DRO-250i router • 1 Blue cross-over Ethernet Cables • 3 Grey Straight Ethernet Cables • 1 V.35 Cables •...

  • Page 17: Mounting The Dro-250I

    2.2.1 Mounting the DRO-250i The DRO-250i can be mounted on any stable surface. It requires 1 U of vertical space in the rack. The DRO-250i Router can be installed as a standalone unit on any stable surface. For standalone, make sure the unit has at least 1.5 in.

  • Page 18: Connecting The Dro-250I To Your Network

    Introduction to DRO-250i Connecting the DRO-250i to your network Once the initial configuration of the DRO-250i is completed, you can connect the DRO-250i between your internal network and the internet Internal Network DLM-G2100V DRO-250i V.35 Internet Hub or switch WAN 3...

  • Page 19: Configuration Via Web Browser

    Installing DRO-250i 2.4 Configuration via Web Browser With some advance preparation, it’s easy to install DRO-250i and begin using it. The following topics have been organized as a set of guidelines to ensure that your computer and your network are ready for it.
  • Page 20 Introduction to DRO-250i D-Link Welcome Page will appear and you can browse through the web page. DRO-250i User Manual...

  • Page 21: Configuration Through Web

    192.168.0.1 and configure its DHCP server to assign addresses in the range between 192.168.0.2 to 192.168.0.100. The default gateway setting for computers on the LAN side will be the DRO-250i’s IP address which in this case is 192.168.0.1. Saving all of this information to the DRO-250i's flash and restarting it will make this IP addressing scheme current.
  • Page 22 Introduction to DRO-250i It is recommended that if user needs to change the IP addressing scheme for the Router, he/she can configure its DHCP server with the appropriate IP address range and subnet mask, and then assign an IP address from the same range.

  • Page 23: Interfaces - Wan 1

    (x.x.x.x). The Router will not accept the IP address if it is not in this format. Protocol: CiscoHDLC/Sync PPP user can select the sync protocol which can be either cisco HDLC or Sync PPP. User should confirm the protocol supported by the ISP and then configure accordingly. DRO-250i User Manual...

  • Page 24: Interfaces - Wan2

    Introduction to DRO-250i 3.2.3 INTERFACES – WAN2 3.2.3.1 Mode Settings Click on Interfaces > WAN2 > Mode Settings and the web page open as shown below: This page allows user to configure ISDN in either Leased or Dialup. If the user selects Leased on this page and clicks apply then only leased configuration page will be shown.

  • Page 25: Wan2-Dial Up

    PBX, then provide the MSN (phone number) stored in the PBX. E.g.: If the area code of user is 080 and phone number is 26788835 then enter 08026788835 in this field. It can be of maximum 14 digits. DRO-250i User Manual...
  • Page 26 Introduction to DRO-250i This field must be filled with proper values as mentioned above to support dial- Layer 2 Protocol: For this protocol, the parameter is set as HDLC. Layer 3 Protocol: For this protocol, the parameter is set as Transparent.
  • Page 27 Automatic apply of dialin pages: Dialin page is automatically applied with appropriate profile if they are configured previously. -If user configured profile for B1 previously then when user selects connection type 128K dialin/dialout or 2 64Kdialin then B1’s profile will DRO-250i User Manual...

  • Page 28: 2.2Dial Up-Dial Out

    Introduction to DRO-250i automatically applied -If user has configured channel B2 then when user selects connection type 64KDialin+64KDialout or 2 64Kdialin it will automatically be applied. Automatic apply of mode settings: Suppose if user has selected leased and press apply on the mode settings page then leased page will be applied automatically if it was configured previously.
  • Page 29 IP octets separated by a dot (x.x.x.x).. Area Code: It provides the Area Code of the ISP. e.g. area code of user is 080 and ISP's area code is 022, then user should enter 22 in the area code field. DRO-250i User Manual...
  • Page 30 Introduction to DRO-250i If the area code of user and the ISP is same, then enter zero in the area code field. Dial Prefix: In Dial Prefix, user should enter the country code if the user is dialing to other country, or else enter zero e.g. if user wants to dial to Singapore then enter 0065 as dial prefix where 65 is country code of Singapore.

  • Page 31: 2.3Dial Up-Dial In

    Click on Interfaces > WAN2 > Dial up > Dial in > Dial In and the web page open as shown below This page has the parameters required for establishing Dialin connection. User can configure either channel 1 or channel 2 depending upon the DRO-250i User Manual...
  • Page 32 Introduction to DRO-250i connection type he/she selects from the ISDN connections page. User can select Channel 1(B1) or Channel 2(B2) only when the connection type is 2-64K Dial in. For all other connection types Channel 1(B1) will be selected automatically. When the user clicks on the Channel 1 or Channel 2 he will get the information which he configured previously for the particular channel.
  • Page 33 Dialin user area code is 080 and phone number is 26788345 then enter 08026788345 in this field. This number is used to allow Dialin connection, in case the SECURE option on this page is set to ON. DRO-250i User Manual...

  • Page 34: Wan2-Dial

    Introduction to DRO-250i Channel Type: User can select channel type in this page so that he can restrict some user dialing on particular channel.If he selects channel1 then username and password will be allowed on that channel only. If user has selected connection type 128K dialin/dialout then he can enter a user account on channel1 .
  • Page 35 Connection Type: This will show the connection type and whether channel is being used as dial out or dial in. Local IP address: This will show Local IP address. Remote IP address: This will show Remote IP address. DRO-250i User Manual...

  • Page 36: Interfaces -Wan3

    Click on Interfaces > WAN3 and web page opens up as shown below: WAN3 Settings The WAN3 Settings menu allows you to view the current configuration for your DRO-250i, and to choose the protocol by which your DRO-250i will receive its WAN3 network settings WAN3 Settings - Static IP address Select this option to set static IP information.
  • Page 37 Select this option if your ISP provides you an IP address automatically. This option is typically used for Cable services. Dynamic IP address allows the DRO-250i to get its IP address information from your ISP using the Dynamic Host Configuration Protocol (DHCP). Use this setting if your ISP instructs you to use DHCP or to automatically obtain an IP address.
  • Page 38 DSL services. Unnumber Interface - This interface can be configured as an Unnumbered interface. When this is not selected, DRO-250i will obtain an IP address automatically for your PPPoE connection. User Name - Enter your PPPoE username.
  • Page 39 Option to choose DMZ/Ethernet WAN DRO-250i users can use the same physical port as DMZ or Ethernet WAN, called WAN3. User can check the option he/she wants. After checking the proper option i.e. DMZ or Ethernet WAN, the physical port will behave in that manner.

  • Page 40: Interfaces - Wan 4

    Introduction to DRO-250i 3.2.5 INTERFACES – WAN 4 3.2.5.1 WAN 4 - Dial Out Dial Out configuration is used for connecting a remote host using modem and telephone cable. For this it will require some basic information such as connection name, telephone number, user name and password.
  • Page 41 IP address field and fill the appropriate subnet mask. Unnumbered: This interface can be configured as an unnumbered interface. User Name: Enter the user name for authentication. Password: Enter the Password for authentication. DRO-250i User Manual...

  • Page 42: Wan 4 - Dial In Configuration

    Introduction to DRO-250i 3.2.5.2 WAN 4 - Dial In Configuration This page has the parameters required for establishing Dial-In connection Click on Interfaces > WAN4 > Dial In Configuration and page opens up as shown below: Remote IP: Enter the IP address to be assigned to the remote end for the Dial-In connection.

  • Page 43: Wan 4 - Dial In User Account

    User Name: Enter the user name to be given to Dial-In user. It can be of 20 characters long. Password: Enter the password to be given to the Dial-In user. It can be of 20 characters long. DRO-250i User Manual...

  • Page 44: Wan 4 - Modem Configuration

    Introduction to DRO-250i 3.2.5.4 WAN 4 - Modem Configuration Modem configuration is used for storing basic modem command information which is specific to a modem. Click on Interfaces > WAN4 > Modem Configuration and opens up as shown below: Initialization String (0): String used to initialize the modem. It is specific for a modem.
  • Page 45 Answer Response: Provide answer response string for modem, the default value is "CONNECT". Modem Time Out: This is the time required to wait for the CONNECT response from modem. A setting of about 30 seconds should be sufficient for most purposes. DRO-250i User Manual...

  • Page 46: Wan 4 - Serial Port Settings

    Introduction to DRO-250i 3.2.5.5 WAN 4 - Serial Port Settings Information is required for initializing the serial port for asynchronous Dial In/Dial Out Click on Interfaces > WAN4 > Serial Port Settings and the web page opens up as shown below: Flow control: Select the appropriate flow control i.e.

  • Page 47: Interfaces-Backup Config

    If user connects the backup manually all the features like NAT, Virtual Server and Static routes pertaining to this backup interface will be automatically configured. Backup Interface: This interface will be configured as backup interface for the primary. DRO-250i User Manual...
  • Page 48 Introduction to DRO-250i There exists a one-to-one relationship between the primary and backup interface. Following rules apply backup configuration: 1. Cannot configure a single interface to act as backup for two or more primary interfaces. 2. If an interface is configured as a backup interface it cannot be made a primary interface.

  • Page 49: Interfaces-Dmz/Wan3

    INTERFACES-DMZ/WAN3 Click on Interface > DMZ/WAN3 to get the web page as shown below: DRO-250i users can use the same physical port as DMZ or Ethernet WAN, called WAN3. User can check the option if he/she wants. After checking the proper option i.e. DMZ or Ethernet WAN, checked physical port will behave in that manner.

  • Page 50: Routing

    Introduction to DRO-250i 3.3 Routing Click on Routing to get the web page as shown below: Static Route Settings Static Route Web Page allows the user to add and delete static routes. View link: by clicking on this link the user can see all the active routes.
  • Page 51 RIP settings for every interface. RIP Version: RIP version can be either 1 or 2. Redistribute: Static, Connected and OSPF routes can be redistributed into the RIP table. RIP Daemon: Start or Stop the RIP Daemon. DRO-250i User Manual...
  • Page 52 Introduction to DRO-250i Interface Settings: Configure interface specific RIP settings. Interface Name: Name of the interface for which RIP can be configured. Interface WAN2(ISDN) can be configured as a single 64kbps, single 128kbps or two 64kbps channels. In case of a single channel, only B1 will be configurable by the user.
  • Page 53 Set the Router ID of the OSPF Router. This is of the 4 octet form as IP address format. Redistribute: Static, Connected and RIP routes can be redistributed into the OSPF table. OSPF Daemon: Start or Stop the OSPF Daemon. Interface Settings: Configure interface specific OSPF settings. DRO-250i User Manual...
  • Page 54 Introduction to DRO-250i Interface Name: Name of the interface for which OSPF can be configured. Interface WAN2(ISDN) can be configured as a single 64kbps, single 128kbps or two 64kbps channels. In case of a single channel, only B1 will be configurable by the user.
  • Page 55 ‘c’ and the last two digits represent ‘d’. For example in 0x0000010C, a = 00 (i.e 0) b = 00 (i.e 0) c = 01 (i.e 1) d = 0C (i.e 12) Step 3: So Area ID 268 in dotted format (a.b.c.d) is 0.0.1.12 DRO-250i User Manual...

  • Page 56: Advanced

    Introduction to DRO-250i 3.4 ADVANCED 3.4.1 ADVANCED- DHCP 3.4.1.1 DHCP - DHCP Servers Click on Advanced > DHCP> DHCP Server to get the web page as shown below: DHCP (Dynamic Host Configuration Protocol) is a method of automatically assigning IP addresses, subnet masks, default gateway and DNS server IP addresses to computers on the LAN side of the Router.
  • Page 57 Configuring DRO-250i is 192.168.0.2. IP addresses can range from 0.0.0.0 to 255.255.255.255, but in the DRO-250i's default IP addressing scheme the range is from 192.168.0.0 to 192.168.0.255. Please note that the addresses ending in 0 and 255 are reserved for other uses, so the effective IP address range is 192.168.0.1 to 192.168.0.254.
  • Page 58 Introduction to DRO-250i secondary DNS server IP address is optional. Check disables checkbox to disable secondary DNS. DHCP client table shows the client computers to which the IP addresses have been assigned by DHCP. The DHCP Client Table will show the Host Name, IP address, MAC Address, and Expire Time of the DHCP lease for each client computer.

  • Page 59: Dhcp -Dhcp Reservation

    MAC Address. System administrator can use this feature to configure the static IP address for some of the systems in the LAN. These IP address, however will fall in the DHCP server configured IP address range DRO-250i User Manual...

  • Page 60: Advanced-Dns Proxy

    Introduction to DRO-250i 3.4.2 ADVANCED-DNS Proxy Click on Advanced > DNS Proxy to get the web page as shown below: DNS Server IP : This is the IP address of the DNS Server provided by the ISP . Interface: This is the Interface name corresponding to the DNS Server IP entered .

  • Page 61: Advanced-Nat

    NAT can be Enabled/Disabled on the specific interface on this page. Enable the interface on which the NAT is to be applied and then click Apply. To configure the NAT, visit NAT configuration Page. DRO-250i User Manual...

  • Page 62: Nat - Nat Configuration

    Introduction to DRO-250i 3.4.3.2 NAT - NAT Configuration Click on Advanced > NAT> NAT Configuration to get the web page as shown below: NAT - Enable or Disable the NAT Configuration for the WAN Interface selected. This field only Enable/Disable particular Configuration entry made.
  • Page 63 User cannot make a Many-To-One entry when Many-To-Many entry • exist for any interface. The IP range of Many-To-One should not overlap with the • existing One-To-One entry for any interface. User cannot make Many-To-Many entry when Many-To-One entry • exist for that interface. DRO-250i User Manual...

  • Page 64: Nat - Advanced Nat

    Introduction to DRO-250i The IP Range of Many-To-Many entry should not overlap with the • existing Many-To-Many or One-To-One entry for any particular interface. One-To-One can co-exist with Many-To-One or Many-To-Many • entry. One-To-One IP range should not overlap with the existing Many-To- •...

  • Page 65: Advanced - Virtual Server

    Private IP - This is the IP address of the server on LAN that will provide the service to remote users. Transport Type - User can select the transport protocol (TCP or UDP) that the application on the virtual server will use for its connections. The DRO-250i User Manual...
  • Page 66 Introduction to DRO-250i choice of this protocol is dependent on the application that is providing the service. Protocol - User can select from a list of commonly used protocols from this drop-down menu. This is the equivalent of entering the correct Transport Type (TCP or UDP) and the correct port number corresponding to a given protocol.

  • Page 67: Advanced -Firewall

    If more than one interface is of same security type then Policy database for them is same i.e. if WAN1 and WAN3 are configured as Un-Trusted then both of them will share a common Inbound Policies database. DRO-250i User Manual...
  • Page 68 If user configures LAN as Un-trusted, then user needs to configure Remote Access for getting the web-configuration. So before configuring LAN as un-trusted, user should enter the IP of the LAN PC (which is configuring the DRO-250i) in the Remote access configuration web-page. DRO-250i User Manual...

  • Page 69: Firewall- Policy

    Click Advanced > Firewall > Policy to get the web page as shown below: Policy (Firewall) Schedule DRO-250i allows the user to configure three types of policies which are Always, One-Time and one-week. “Always” Policy is used when user wants the policy to be active all the time. If user wants to activate some firewall policy, then enter a “one-time”...
  • Page 70 Introduction to DRO-250i Automatically “Always” policy will become active. The same thing can be used with the “One-week” policy also. Policy (Firewall) Rules The Router allows you to specify a range of IP addresses, MAC addresses, and Domain names for connections between computers on the WAN and computers on user's LAN that will be controlled.
  • Page 71 Source IP address To - This allows you to specify the last in a range of IP addresses that the IP filter policy will be applied to. If you have only one IP address that you want to filter, enter this address in both the From and To fields. DRO-250i User Manual...

  • Page 72: Firewall - Ids Configuration

    Introduction to DRO-250i MAC Filter These settings are used to deny LAN computers from accessing the Internet based on their MAC address Domain Filter These settings are used to deny LAN computers from accessing the Internet based on URL Domain Name String 3.4.6.3...
  • Page 73 Winnuke Attack - Denial of service attack to any windows 95/NT/3.x user by sending OOB data to an established connection on port 139 [NetBIOS]. XMAS-Tree Attack - DoS technique that sets all TCP header flags to on in an attempt to gain information regarding a network. DRO-250i User Manual...
  • Page 74 Introduction to DRO-250i Ascend kill Attack - It was possible to make the remote Ascend router reboot by sending it a UDP packet containing special data on port 9(discard). The Attacks are logged in the Intrusion Log webpage. The IPs of the attacker are blacklisted for prevention of further Attacks from the same IP.

  • Page 75: Advanced -Vpn

    (Encapsulating Security Payload) header addresses the same features and also includes data confidentiality or encryption capabilities. By default, IPSec uses the AH as a minimum level for its capabilities. If data confidentiality is desired, the AH is replaced with an ESP header for the DRO-250i User Manual...
  • Page 76 Introduction to DRO-250i encryption feature and the authentication and data integrity components that the AH offer as well. IPSec Passthrough - Click Enable to allow IPSec packets to pass through the router to the destination computer on your LAN. When IPSec Pass- through is enabled, the Router will allow IPSec packets to reach their destination computer on your LAN.

  • Page 77: Vpn - Tunnel

    (B1 or B2) can be selected as the tunnel source. Termination IP - The IP address of the remote gateway. Shared Key - The encryption key that should be entered exactly the same way on both endpoints in order to establish Phase I negotiation. DRO-250i User Manual...
  • Page 78 Introduction to DRO-250i Tunnel Type - This drop-down menu allows user to select the type of VPN Tunnel user wants to configure. User can choose between Public, Private, and Manual. At the time of writing of this manual, only Public...
  • Page 79 ESP transform (encryption algorithm) on both ends of a VPN tunnel. ESP Auth - This drop-down menu allows user to select the encryption algorithm that will be used when ESP is selected in the IPSec Operation drop-down menu above. User can choose between Null - no authorization, DRO-250i User Manual...
  • Page 80 Introduction to DRO-250i MD5 - using MD5 message digest authentication, and SHA - using the SHA authentication method. User must select the exact same ESP authentication method on both ends of a VPN tunnel. AH Transform - This drop-down menu allows user to select the encryption algorithm that will be used when AH is selected in the IPSec Operation drop-down menu above.

  • Page 81: Vpn -Tunnel Table

    The Tunnel Table displays the current tunnel setup. Click on the View icon corresponding to a given Tunnel ID to display its current Tunnel Settings. Click on Delete icon to remove the tunnel with its configuration DRO-250i User Manual...

  • Page 82: Advanced - Load Balancing

    Introduction to DRO-250i 3.4.8 ADVANCED - Load Balancing 3.4.8.1 Load Balancing-Policy Based Click Advanced >Load balancing>Policy Based to get the web page as shown below: Policy-Based Routing enables a user to define policies to achieve efficient traffic distribution or load balancing. A set of parameters such as Source...
  • Page 83 Destination Port Number: Network traffic uses Destination port number to specify the type of application for which it is destined. This is an optional field. Only if user specifies a Destination Port, the network traffic having this as its destination port will use this policy. DRO-250i User Manual...

  • Page 84: Load Balancing-Weight Based

    Introduction to DRO-250i 3.4.8.2 Load Balancing-Weight Based Click Advanced >Load balancing>Weight Based to get the web page as shown below: Load-balancing enables a user to distribute internet traffic among multiple WAN interfaces. User can configure the percentage of traffic to be sent through a WAN interface.

  • Page 85: Advanced - Link Detection

    Destination Type: The destination can be Domain Name or IP address. Destination IP/Domain: Domain Name or IP address which is directly connected to Ethernet WAN. The link is considered UP/DOWN depending on the reach ability of this Destination. DRO-250i User Manual...
  • Page 86 Introduction to DRO-250i No of Retries: Number of attempts to reach the specified destination, before confirming the status (UP/DOWN) of the Link. Delay between Retries: Time in seconds between retry attempts. ICMP Ping messages are used to determine the status of the link. So the destination system should NOT be configured to block ICMP protocol.

  • Page 87: Advanced - Snmp

    Click ADVANCED > SNMP > SNMP Configuration to get the web page as shown below: DRO-250i supports SNMP feature so that user can monitor the device through any SNMP manager. In the current release, user can only monitor the device configuration through SNMP.
  • Page 88 Introduction to DRO-250i System Location: The physical location of the device is specified here. It should type STRING. value here specifies the current location of the device where it is placed. Example: Second Floor. User Name: User name should be of STRING type and it should be Unique.
  • Page 89 All the traffic between them is encrypted using the Data Encryption Standard (DES). Privacy Password: This sets the DES pass phrase to the SNMPv3 users which should be at least eight characters long. DRO-250i User Manual...

  • Page 90: Snmp-Trap Configuration

    Introduction to DRO-250i 3.4.10.2 SNMP-TRAP Configuration Click ADVANCED > SNMP > TRAP Configuration to get the web page as shown below: TRAP is an “Unsolicited” message sent to the manager by the agent in case of failure that occurred in the agent. This is to inform the manager about the agents status.
  • Page 91 Configuring DRO-250i about “UnAuthorized User". This option is used to enable/disable the authentication trap. DRO-250i User Manual...

  • Page 92: Multicast

    So in order to use any multicast application through DRO-250i, user should enable multicast on a particular interface. Click on Multicast > Multicast to get the web page as shown below:...

  • Page 93: Multicast - Multicast Routing

    Candidate RP : Choose the interface which should become Candidate Candidate RP Priority: It is priority which is set for RP (Rendezvous Point). Lesser number will be higher priority. Candidate BSR : Choose the interface which should become Candidate BSR. DRO-250i User Manual...
  • Page 94 Introduction to DRO-250i Candidate BSR Priority: It is priority which is set for BSR (Bootstrap Router). Lesser number will be lower priority. Threshold Data Rate: It is the data rate at which SPT (Source Path Tree) is formed. If user enters zero, then it will switch to SPT if there is any traffic.

  • Page 95: Qos

    Priority queuing (PQ) is the basis for a class of queue scheduling algorithms that are designed to provide a relatively simple method of supporting differentiated service classes. In classic PQ, packets are first classified by the system and then placed into different priority queues. DRO-250i User Manual...
  • Page 96 Introduction to DRO-250i Packets are scheduled from the head of a given queue only if all queues of higher priority are empty. Within each of the priority queues, packets are scheduled in FIFO order. The PRIO qdisc is a classic queuing discipline that contains an arbitrary number of classes of different priority.
  • Page 97 TBF can be a child of a PQ, and user can configure by entering values like rate as 115 Kbps, burst as 5Kb and larency as 70 ms. These value are given just for an example DRO-250i User Manual...
  • Page 98 Introduction to DRO-250i Random Early Detection (RED): Random Early Detection is a classless qdisc which limits its queue size smartly. Regular queues simply drop packets from the tail when they are full which may not be the optimal behaviour. RED also performs tail drop but does so in a more gradual way.
  • Page 99 32000 average packet as 1000 burst as 20, probability as 0.02 and bandwidth as 512. These values are just to give an idea to the user, so that user does not enter any wrong range of values. DRO-250i User Manual...

  • Page 100: Qos - Filter Configuration

    Introduction to DRO-250i 3.6.2 QOS - Filter Configuration Click QoS > Filter Configuration to get the web page as shown below: The filter by default supported is u32. Filters are attached to the root qdisc or a class (parent parameter) to filter the packets that belongs to that qdisc/class.
  • Page 101 Flow Id decides, flows matching this filter have to be sent, directly, to the class identify with number flow major:flow minor. All other parameters decide what has to be matched against the header of the packet. Thus user does not need to enter the handle major. It will be constant. DRO-250i User Manual...

  • Page 102: Tool

    Introduction to DRO-250i 3.7 Tool 3.7.1 Tools - Admin Click on Tools > Admin to get the web page as shown below: The Admin Settings page allows you to change the Password to control access to the configuration of the Router.

  • Page 103: Tools - System

    Restore to Factory Default Settings-Here user can restore the default settings to the device Restart the Device-Here user can restart the device from the Web. But this option will not save the configuration. DRO-250i User Manual...

  • Page 104: Tools - Upload

    Tech. Support whenever any module or any feature is changed. DRO-250i.cfg is the file which contains the entire configuration of the DRO-250i. User can configure the device and then, download the configuration in cfg format on Local PC, so that he/she can upload the configuration file (DRO-250i.cfg) on the device again whenever required.

  • Page 105: Tools - Ping Test

    If domain name is selected, user needs to enter the domain name in the text box. IP Domain Name support is not available in this release. The results will be displayed in the field with a scroll bar to the right. DRO-250i User Manual...

  • Page 106: Tools - Time

    Introduction to DRO-250i 3.7.5 Tools - Time Click on Tools > Time to get the web page as shown below: This page allows the user to configure the system date and time. System Date Time - It displays the system date and time.
  • Page 107 The domain name field allows the user to enter the complete domain name. Manual Settings: YYYY-MM-DD - User can select the year, month and date directly from the drop down menu. HH-MM-SS - To set the time manually user can select hour, minute and seconds. DRO-250i User Manual...

  • Page 108: Tools - System Log

    Introduction to DRO-250i 3.7.6 Tools - System Log Click on Tools > Sys Log to get the web page as shown below: Sys Log page is used to keep the sys log files at the remote server. Sys-log Status: User can select either enable or disable the Syslog feature. If user selects the disable option and presses apply, then no messages will be saved on the remote server.

  • Page 109: Tools - Remote Access

    Web remotely. Remote IP - This is the IP address of the machine or device which can configure DRO-250i remotely. If NAT is enabled on the remote side, then the Global IP should be entered here because DRO-250i will get the request from that Global IP.
  • Page 110 In order to use this tool, configure firewall properly and block all the traffic which you do not need. In that case, if you will enable Remote access, then only those IP which are configured, can access the web-configuration of DRO-250i DRO-250i User Manual...

  • Page 111: Status

    IP Address - This is the Router current IP address on the LAN. Subnet Mask - This is the subnet mask corresponding to the IP address above that is currently in use by the Router on the LAN. DRO-250i User Manual...
  • Page 112 Introduction to DRO-250i DHCP Server - Displays whether the Router is currently configured as a DHCP server on the LAN. WAN Status Active WAN Interface: It displays which WAN interface is active at that moment. IP Address - This is the Router current IP address on the WAN.

  • Page 113: Status - Route Table

    The web page shows static routes in gray color and dynamic routes in yellow color. Dynamic routes are learnt through routing protocols such as RIP and OSPF. Static routes which are not currently active will not be shown on this web page DRO-250i User Manual...

  • Page 114: Status - Multicast

    Introduction to DRO-250i 3.8.3 Status Multicast – 3.8.3.1 Status–Multicast-Group Status Click on Status > Multicast> Group Status to open the web page as shown below: Multicast status is displayed on this web-page. User can look at the current connected groups in the network. Remember that it will display all the groups which are in the LAN.
  • Page 115 Flags: This field shows the flags which tells the type of the routing entry. Flag can be any one of the following: WC : It is a wild-card entry. • SPT: It is a shortest Path entry. • Cache: It is a cache entry. • DRO-250i User Manual...

  • Page 116: Status - Nat Info

    Introduction to DRO-250i 3.8.4 Status - NAT Info Click on Status > NAT Info to open the page as shown below: The Router maintains a table containing statistics concerning the Network Address on the NAT Sessions table. Private IP address: Port - This is the IP address and port number of a computer or device on LAN that has an active NAT session.

  • Page 117: Status - Ipsec Status

    IPSec uses the AH as a minimum level for its capabilities. If data confidentiality is desired AH is replaced with an ESP header for the encryption feature and the authentication and data integrity components that the AH offer as well. DRO-250i User Manual...
  • Page 118 Introduction to DRO-250i IPSec Passthrough - Click Enable to allow IPSec packets to pass through the router to the destination computer on LAN. When IPSec Pass-through is enabled, the Router will allow IPSec packets to reach their destination computer on LAN.

  • Page 119: Status - Log

    Intrusion Time - This is the time of intrusion. It will be helpful for the user to know the details about the time when intrusion happened. Intrusion Type - A brief statement of the type of intrusion that was attempted is displayed here. The Router firewall can detect following DRO-250i User Manual...
  • Page 120 Introduction to DRO-250i attacks: SYN Flooding, TCP Hijacking, LAND Attack, Win Nuke/ OOBNuke, Christmas Tree SYN / FIN (Jackal), SYN / FIN (zero-sized DNS zone payload), BackOffice, NetBus, Smurf, Tear Drop, ICMP Flooding. Source port: - Displays the source IP address and the TCP/UDP port that the intrusion was attempted from.

  • Page 121: Status -Log- Blocking Log

    Transport Type - The protocol used to make the connection attempt is displayed here. Source - The IP address of a computer or device that has had a connection attempt to the Router and blocked is displayed here. DRO-250i User Manual...

  • Page 122: Status- Log- Session Log

    Introduction to DRO-250i Destination: port - The IP address and the TCP/UDP port number of the computer or device that was the destination of connection attempt to the Router is displayed here. A brief statement of why the connection attempt was blocked is displayed here 3.8.6.3 Status- Log- Session Log...

  • Page 123: Status- Log - Ipsec Log

    IPSEC Statistics table). Index - This is the sequence of the IPSec log . Description - A brief description of the log entry will be displayed here. User can use it to check tunnel behaviour. DRO-250i User Manual...

  • Page 124: Status - Log - Black List

    Introduction to DRO-250i 3.8.6.5 Status Black list Click on Status > Log > Black list to open the web page as shown below: The Router firewall is pre-programmed to recognize and block many commonly used intrusion methods from computers on the WAN (Internet,) from one computer to another on the LAN, and from computers on LAN to the WAN.

  • Page 125: Status - Traffic

    The Router keeps statistics of traffic that it receives or forwards. User can view the amount of packets that are sent or received by the Router on the WAN port and the LAN port. The traffic counters will be reset if the Router is rebooted. DRO-250i User Manual...

  • Page 126: Status - Isdn

    Introduction to DRO-250i 3.8.8 Status – ISDN Click on Status > ISDN to open the page as shown below: Physical Line Status: This will show UP when D-Channel is up otherwise it will show DOWN. Channel1 Status: This will show UP when Channel1 (B1) is UP otherwise it will show DOWN.

  • Page 127: Status - Wan4 Dial

    Subnet Mask: It is in dotted decimal A.B.C.D format. Remote IP: IP address to be assigned to the remote end. It is in dotted decimal A.B.C.D format. User name: It will show the connected profiles user name. DRO-250i User Manual...
  • Page 128 Introduction to DRO-250i Dial or Disconnect: If connection is established, the button caption shows disconnect otherwise dial. Change Profile: For dial out user can change the profile, for changing the profile click on change profile. DRO-250i User Manual...

  • Page 129: Help

    Configuring DRO-250i 3.9 HELP Click Help to open this web page. Here help is provided for all configurations. For warranty policy and other details please visit our website www.dlink.co.in DRO-250i User Manual...

  • Page 130: Appendix

    Introduction to DRO-250i APPENDIX Password Recovery: 1. In Case the user forgets the IP given to the LAN Port, it is possible to open the Device Manager Web Page by pressing the factory default switch and the settings will be restored back to default settings. Type https://192.168.100.254.

  • Page 131: Warranty Policy

    Configuring DRO-250i Warranty Policy For warranty Policy and other details visit our website viz www.dlink.co.in DRO-250i User Manual...

Table of Contents