1. Manuals
  2. Brands
  3. D-Link Manuals
  4. Network Router
  5. DRO-210i
  6. User manual

D-Link DRO-210i User Manual

Load balancing router
Hide thumbs Also See for DRO-210i:
Table of Contents

Advertisement

Quick Links

Download this manual
DRO-210i
LOAD BALANCING ROUTER

Users Guide

Rev 1.0 (July 2006)
DRO-210i User Manual

Advertisement

Table of Contents
loading

Related Manuals for D-Link DRO-210i

Summary of Contents for D-Link DRO-210i

  • Page 1: Users Guide

    DRO-210i LOAD BALANCING ROUTER Users Guide Rev 1.0 (July 2006) DRO-210i User Manual...

  • Page 2: Table Of Contents

    REAR PANEL ......................2-3 Unpacking the DRO-210i....................2-4 2.2.1 Mounting the DRO-210i ...................2-4 2.2.2 Power requirements....................2-5 Connecting the DRO-210i to your network ............2-5 Configuration via Web Browser ................2-7 3................................ 3-1 DRO-210i WEB CONFIGURATION ..................3-1 Interface..........................3-1 3.1.1 Interface - Port Config ....................3-1 3.1.2...
  • Page 3 Status – Log Tables – Intrusion Log ............3-78 3.9.6.4 Status – Log Tables – Black List ...............3-79 3.9.6.5 Status – Log Tables – Black List ...............3-81 3.9.6.6 Status – Log Tables – IPSec Log ..............3-82 3.10 Help..........................3-83 APPENDIX........................... 3-84 Password recovery:........................3-84 DRO-210i User Manual...

  • Page 4: Introduction To Dro-210I

    SOHO & enterprise market. Dlink DRO-210i is a broadband router targeted at SOHO and SMB users. The router uses XScale architecture (ARM core with NPEs) from INTEL (IXP425). The router supports load-balancing, along with firewall access control, secure VPN connectivity, and quality of service and remote management features in a single, easy-to use box.

  • Page 5: Product Features

    Introduction to DRO-210i 1.2 Product Features 1.2.1 Hardware Features 2 LAN Ports The product is equipped with 2 dedicated 10/100 Ethernet LAN Ports to connect user computers to the network. 1 DMZ Port The product is equipped with one 10/100 Ethernet DMZ Port to connect the company servers (eg.

  • Page 6: Software Features

    WAN interfaces to get good bandwidth. If any interface goes down the traffic will be diverted back to the connected interfaces. Firewall The DRO-210i also includes a firewall which has the following features: · Access Policies · Network Address Translation (NAT/NAPT) with Popular ALG Support.
  • Page 7 When a TCP or UDP packet is received by the Router the IP address in this packet will be translated between the WAN and LAN side of the Router if this option is enabled. DRO-210i supports all the combinations of NAT models like Many to Many, Many to One and One to One.
  • Page 8 Internet Access The product supports the TCP/IP protocol which is the protocol language for the Internet. DRO-210i Router allows everyone connected to the LAN to access the Internet. NAT feature is required at WAN Interface to access Internet through any WAN connection.

  • Page 9: Installing Dro-210I

    Installing DRO-210i INSTALLING DRO-210i 2.1 About the router This section will introduce hardware of the router. Front View Rear View DRO-210i User Manual Page 2-1...

  • Page 10: Front Panel

    WAN1 LED Module Status Description Power WAN1 LED Ready ON: Link and Protocol is UP OFF: Link or Protocol is DOWN WAN2 LED Ready ON: Link and Protocol is UP OFF: Link or Protocol is DOWN DRO-210i User Manual Page 2-2...

  • Page 11: Rear Panel

    LAN or DMZ Port LAN/WAN2 10/100Mbps Ethernet Port (RJ-45) - configurable as LAN or WAN2 Port WAN1 10/100Mbps Ethernet WAN2 Port (RJ-45) CONSOLE DB-9 Console Port 5V/3A DC INPUT Input Voltage 5V, 3A DC DRO-210i User Manual Page 2-3...

  • Page 12: Unpacking The Dro-210I

    2.2.1 Mounting the DRO-210i The DRO-210i is a Desktop mount type router which can be installed as a standalone unit on any stable surface. For standalone, make sure the unit has at least 1.5 in. (3.75 cm) of clearance on each side to allow for adequate airflow and cooling.

  • Page 13: Power Requirements

    Humidity: 5 to 95% non-condensing 2.3 Connecting the DRO-210i to your network Once the initial configuration of the DRO-210i is completed, you can connect the DRO-210i between your internal network and the internet Make the necessary power connections. The power LED will turn ON to indicate proper operation.
  • Page 14 Installing DRO-210i Internet FIBER 1.1.1.1.1 2 Mbps Leased Line OPTIMUX D-Link ADSL Modem D-Link Interface Converter DSL-502T DIC-2000FE2VL WAN2 WAN1 DRO-210i DES-3208i+ DES-3208i+ D-LINK SWITCH DRO-210i User Manual Page 2-6...

  • Page 15: Configuration Via Web Browser

    Installing DRO-210i 2.4 Configuration via Web Browser With some advance preparation, it’s easy to install DRO-210i and begin using it. The following topics have been organized as a set of guidelines to ensure that your computer and your network are ready for it.
  • Page 16 Installing DRO-210i 3. It will ask for username and password. User name: “admin” Password: “admin” D-Link Welcome Page will appear and you can browse through the web page DRO-210i User Manual Page 2-8...

  • Page 17: Dro-210I Web Configuration

    The Web configuration is simple and easy to use. It will help in quick setting of the Router to connect to ISP (Internet Service Provider) with few steps required. It will guide user step by step to configure the password and WAN settings of DRO-210i. 3.1 Interface 3.1.1 Interface - Port Config This Web Page is used to configure the optional ports of router.

  • Page 18: Interface - Lan

    DRO-210i Web Configuration Click on Interface > Port Config to get the web page as shown below: 3.1.2 Interface - LAN The LAN Settings allows you to configure the current IP address and subnet mask assigned to the Router. As an example, if your LAN network is to be a 192.168.100.x network with a subnet mask of 255.255.255.0, you might assign the Router an IP...
  • Page 19 DRO-210i Web Configuration Saving all of this information to the DRO-210i's flash and restarting it will make this IP addressing scheme current. In Windows, when the user enables DHCP on the NIC he/she will obtain an IP address automatically, upon restarting the computer(s) connected on the LAN side of the Router.

  • Page 20: Interface - Wan1

    DRO-210i Web Configuration 3.1.3 Interface - WAN1 For WAN1 settings Click on Interfaces > WAN1 and the web page opens as shown below: This page allows you to configure the WAN interface. The WAN interface can operate in 3 modes: Static, Dynamic and PPPoE.
  • Page 21 WAN Settings - Dynamic Select this option if your ISP provides you an IP address automatically. Dynamic IP address allows the DRO-210i to get its IP address information from your ISP using the Dynamic Host Configuration Protocol (DHCP). Use this setting if your ISP instructs you to use DHCP to automatically obtain an IP address.
  • Page 22 DRO-210i Web Configuration WAN Settings – PPPoE PPPoE stands for Point-to-Point Protocol over Ethernet. Select this option if your ISP requires you to use a PPPoE connection. Unnumber Interface - This interface can be configured as an Unnumbered interface. For more information, refer to Unnumbered Interfaces.
  • Page 23 DRO-210i Web Configuration Service Name - Enter the service name provided by your ISP (Optional). Ethernet WAN Link Detection This feature is used to detect the link status of a particular Ethernet WAN interface. Interface: Allows choosing an Ethernet WAN interface on which link detection is to be performed.

  • Page 24: Interface - Wan2

    DRO-210i Web Configuration Unnumbered-Interfaces Only point-to-point interfaces can be configured as an unnumbered interface. An unnumbered interface, borrows the LAN IP address by default. The user can edit this and configure a custom IP address on the unnumbered interface. The subnet mask for an unnumbered interface is always 255.255.255.255.

  • Page 25: Interface - Autobackup

    DRO-210i Web Configuration WAN2 configuration is same as that of WAN1. Refer WAN1 Setting for configuration of WAN2. 3.1.5 Interface - AutoBackup For WAN1 settings Click on Interfaces > AutoBackup and the web page opens as shown below: This Web Page is used to configure primary and backup relation between WAN interfaces of router.
  • Page 26 DRO-210i Web Configuration Backup Interface: This interface will be configured as backup interface for the primary. Following rules apply for backup configuration: 1. If an interface is configured as a backup interface it cannot be made a primary interface. 2. When auto backup happens all configurations other than VPN and SIP-ALG made for a backup interface will be applied automatically.

  • Page 27: Interface - Loadbalancing

    DRO-210i Web Configuration 3.1.6 Interface - LoadBalancing Click on Interface > LoadBalancing to get the web page as shown below: Load-balancing enables a user to distribute internet traffic among multiple WAN interfaces. User can configure the percentage of traffic to be sent through a WAN interface.

  • Page 28: Routing

    DRO-210i Web Configuration 3.2 Routing 3.2.1 Routing – Static Click on Routing > Static to get the web page as shown below: Static Route Web Page allows the user to add and delete static routes. View Active Routes: This link is used to see all the active routes.

  • Page 29: Routing - Dynamic

    DRO-210i Web Configuration Gateway IP address: The Gateway IP address for the route. This is an optional field. Route Entries: This table displays the configured routes of all the interfaces. Click on the delete icon to delete a specific route entry. The colour scheme indicates which route is active and which is inactive: 1) Entries with yellow colour are active routes (i.e.
  • Page 30 DRO-210i Web Configuration RIP page allows user to configure the RIP Routing Protocol. In the web page, user can also customize RIP settings for every interface. RIP Version: RIP version can be either 1 or 2. Redistribute: Static and Connected routes can be redistributed into the RIP table.

  • Page 31: Routing - Policy-Based

    DRO-210i Web Configuration 3.2.3 Routing – Policy-Based Click on Routing > Policy-Based to get the web page as shown below: Policy-Based Routing enables a user to define policies to achieve efficient traffic distribution or load balancing. A set of parameters such as Source IP, Destination IP, Inbound Interface, Protocol, Src/Dest Ports are used to identify and direct the traffic out of a specific Outbound Interface.
  • Page 32 DRO-210i Web Configuration Inbound Interface: This field sets the policy for the network traffic which comes into the router through this interface. Source: The network traffic's source IP. 1. Any - If Any is set on this field the policy will be applied on the network traffic regardless of its source IP.

  • Page 33: Firewall

    DRO-210i Web Configuration 3.3 Firewall 3.3.1 Firewall – Interface Configuration Click on Firewall > Interface Configuration to get the web page as shown below: Firewall Enabled: Firewall will be active only when this flag is selected; when this flag is not selected firewall is disabled on all Interfaces.

  • Page 34: Firewall - Policy

    If user configures LAN as Un-trusted, then user needs to configure Remote Access for getting the web-configuration. So before configuring LAN as Untrusted, user should enter the IP of the LAN PC (which is configuring the DRO-210i) in the Remote access configuration web-page.
  • Page 35 Remote Access for getting the web-configuration. So before configuring LAN as Untrusted, user should enter the IP of the LAN PC (which is configuring the DRO-210i) in the Remote access configuration web-page. Policy (Scheduler) Rules The Router allows user to specify different policies for different times. A policy is active for certain period of time according to the configuration.
  • Page 36 DRO-210i Web Configuration End Time – Configure this to the time until which the policy remains active starting from the start time. The format of time is Month: Day: Hr: Min. This field is applicable for One Time Policy only Status - Allows user to make particular Policy enable o r disable.
  • Page 37 DRO-210i Web Configuration Deny all Wan Domain to be accessed except “Trusted Domain”. · All the packets from all the Domains are dropped except the Domain names in the Trusted Domain. Web Filter – The different types of Web Filters in the firewall are...
  • Page 38 DRO-210i Web Configuration · COM controls (file types .DLL and .OCX) · Win32 executable files (file type .EXE) · INF set-up files, used to specify locations and versions for a collection of other files (file type .INF) · "cabinet" files that are referred to by an OBJECT tag (file type .CAB)
  • Page 39 DRO-210i Web Configuration HTTP header. The administrator can configure the Keyword he needs to block for the other users. The blocked keyword is checked in the URL and if found, the site is blocked. For Example: If you want to block any Web Page that has "jobs" in the URL give the keyword as jobs in the Keyword configuration Page.
  • Page 40 DRO-210i Web Configuration Inbound Policy (Firewall) Rules: The Traffic flowing from untrusted to trusted network is the Inbound traffic. Port Filter - Port Filter Policy is used to allow or deny network packets both coming from and going to the WAN. That is from Untrusted to trusted network.
  • Page 41 DRO-210i Web Configuration Port Range - You can enter a range of port numbers for which the current policy rules will be applied. If you have only one port number to enter, enter it in both fields. Direction - This allows you to specify the source of network traffic for which the current policy entry will be applied - from the Internet (Inbound), or from your LAN (Outbound).
  • Page 42 DRO-210i Web Configuration Slow EMail/FTP Access: Some old eMail and FTP Servers use IDENT protocol to automatically identify the users connecting to them. By default, the firewall in the router will block the incoming IDENT protocol at an untrusted port.
  • Page 43 DRO-210i Web Configuration Ping of Death - A form of DoS (denial of service) attack consisting of a flood of ping requests designed to disrupt the normal activity of a system. Boink Attack - It involves the perpetrator sending corrupt UDP packets to host.

  • Page 44: Nat

    DRO-210i Web Configuration 3.4 NAT 3.4.1 NAT – Interface Configuration Click on NAT > Interface Configuration to get the web page as shown below: NAT can be Enabled/Disabled on the specific interface in this page. Select the interface on which the NAT is to be applied and press apply button. To configure the NAT please visit NAT configuration Page.

  • Page 45: Nat - Nat Configuration

    DRO-210i Web Configuration 3.4.2 NAT - NAT Configuration Click on NAT > NAT Configuration to get the web page as shown below: NAT - Enable or Disable the NAT Configuration for the WAN Interface selected. This field only Enable/Disable particular NAT Configuration entry made.
  • Page 46 DRO-210i Web Configuration Private IP addresses. The Global Start Address and Global End IP address need to be same. Many-To-Many: Any IP from the private network passing through · the NAT enabled interface are mapped to the range of Global IP addresses specified.

  • Page 47: Nat - Nat Exception

    DRO-210i Web Configuration 3.4.3 NAT - NAT Exception Click on NAT > NAT Exception to get the web page as shown below: NAT can be disabled between any two interfaces. If NAT is disabled between two Interfaces then sessions between these two Interfaces are not NATed.

  • Page 48: Nat - Virtual Server/Napt

    DRO-210i Web Configuration 3.4.4 NAT - Virtual Server/NAPT Click on NAT > Virtual Server/NAPT to get the web page as shown below: Virtual Servers allow remote users to access services on LAN such as FTP for file transfers or STMP and POP3 for e-mail. The user configures the global IP address that the remote client uses, TCP or UDP protocol and port number.
  • Page 49 DRO-210i Web Configuration Transport Type (TCP or UDP) and the correct port number corresponding to a given protocol. The difference here is that the protocol is identified by name. For example, the Simple Mail Transfer Protocol (SMTP in the drop-down menu) is used to send and receive e-mail. It uses the TCP transport protocol and port number 25.

  • Page 50: Nat - Sip-Alg

    DRO-210i Web Configuration 3.4.5 NAT - SIP-ALG Click on NAT > SIP-ALG to get the web page as shown below: SIP ALG enables SIP phones on the LAN side to make calls across the Internet. User needs to configure the Port number for the SIP (Session Initiation Protocol) in the web page.

  • Page 51: Vpn

    DRO-210i Web Configuration 3.5 VPN 3.5.1 VPN - IPSec Click on VPN > VPN-IPSec to get the web page as shown below: IPSec (Internet Protocol Security) is a group of protocols designed to allow flexible, secure and interoperable communication over the Internet.
  • Page 52 DRO-210i Web Configuration confidentiality is desired, the AH is replaced with an ESP header for the encryption feature and the authentication and data integrity components that the AH offer as well. This page allows an user to control the mode of IPSec VPN. It can be configured in two modes.

  • Page 53: Vpn - Peer To Peer

    DRO-210i Web Configuration 3.5.2 VPN - Peer to Peer Click on VPN > Peer to Peer to get the web page as shown below The IPSec Tunnel Mode page allows you to setup a secure tunnel between your Router and a remote gateway.
  • Page 54 DRO-210i Web Configuration Shared Key - The secret key that should be entered exactly the same way on both endpoints in order to establish Phase I negotiation. The purpose of this key is for the IPSec peers to authenticate each other.
  • Page 55 DRO-210i Web Configuration IKE Encryption - This drop-down menu allows user to select the encryption algorithm that will be used to encrypt the messages passed between the VPN tunnel endpoints during the Phase 1 negotiation. User can choose between DES and 3DES encryption methods. The key length for the 3DES algorithm is three times as long as the DES key, and is therefore more likely to be secure.
  • Page 56 DRO-210i Web Configuration ESP Auth - This drop-down menu allows user to select the authentication algorithm to be used when ESP is selected in the IPSec Operation drop- down menu above. User can choose between Null - no authentication, MD5 - using MD5 message digest authentication, and SHA - using the SHA authentication method.

  • Page 57: Vpn - Ipsec Server

    DRO-210i Web Configuration 3.5.3 VPN - IPSec Server 3.5.3.1 VPN - IPSec Server - Server Click on VPN > IPSec Server > Server to get the web page as shown below This page allows a user to configure IPSec server. With the help of an IPSec server, multiple IPSec clients can connect anywhere from the world to their corporate office securely.
  • Page 58 DRO-210i Web Configuration Tunnel Source Interface - The WAN interface which serves as the tunnel's source endpoint. Shared Key - The secret key that should be entered exactly the same way on both endpoints in order to establish Phase I negotiation. The purpose of this key is for the IPSec peers to authenticate each other.
  • Page 59 DRO-210i Web Configuration - a 128-bit message digest, and SHA - which generates a 160-bit message digest. You must have exactly the same IKE Hash algorithm on both ends of a VPN tunnel. IKE Encryption - This drop-down menu allows user to select the encryption algorithm that will be used to encrypt the messages passed between the VPN tunnel endpoints during the Phase 1 negotiation.
  • Page 60 DRO-210i Web Configuration Operation drop-down menu above. User can choose between Null - n o encryption, DES - using DES encryption, 3DES - using triple DES encryption and AES - using AES encryption. User must select the same ESP transform (encryption algorithm) on both ends of a VPN tunnel.

  • Page 61: Vpn - Ipsec Server - Remoteid

    DRO-210i Web Configuration 3.5.3.2 VPN - IPSec Server – RemoteId Click on VPN > IPSec Server > RemoteId to get the web page as shown below: This page allows user to configure a set of remote ids corresponding to a server.

  • Page 62: Vpn - Tunnel Table

    DRO-210i Web Configuration 3.5.4 VPN - Tunnel Table Click on VPN > Tunnel Table to get the web page as shown below: The Tunnel Table displays the current tunnel setup. The following is a brief description of the tunnel table fields:...

  • Page 63: Qos

    DRO-210i Web Configuration Delete: Click on Delete icon to remove the peer-to-peer tunnel or IPSec server. When IPSec server is deleted all its corresponding remote ids also get deleted. The total no of IPSec configuration entries includes the number of peer-to- peer tunnel along with number of IPSec servers plus its corresponding remote ids.
  • Page 64 DRO-210i Web Configuration QoS Settings: The basic building block of the Traffic Control system is qdiscs(queueing disciplines) . If qdiscs are configured with some parameters,then packets will be enqueued and dequeued from them. Each interface has 1 root qdisc. Q-Disc Type : User can select the type of qdisc in this page as one of the following: 1.
  • Page 65 DRO-210i Web Configuration Handle: Queues are identified by a handle <major number, minor number>, where the minor number is zero for queues. Handles are used to associate classes or sub-queues to queuing disciplines. Parent: Parent does not apply for root qdisc.
  • Page 66 DRO-210i Web Configuration larger buffer. For 10Mpbs on Intel, you need at least 10kbytes buffer if you want to reach your configured rate. If your buffer is too small, packets may be dropped because more tokens arrive per timer tick than fit in your bucket.
  • Page 67 DRO-210i Web Configuration Rate: Minimum bandwidth ,Which a class and all its children are guaranteed. Rate should be between 1 and 100,000 Kbps. Ceil: Maximum bandwidth ,Which a class and all its children are guaranteed. Ceil should be between 1 and 100,000 Kbps.

  • Page 68: Qos - Filter Configuration

    DRO-210i Web Configuration 3.6.2 QOS - Filter Configuration Click on QOS > Filter Configuration to get the web page as shown below: Filters are attached to the root qdisc or a class (parent parameter) to filter the packets that belongs to that qdisc/class. If the packet matches a filter, it's placed in the class specified with the flowid parameter.
  • Page 69 DRO-210i Web Configuration 2. Subnet - Setting this will allow user to configure specific Source IP address with Subnet for which the filter will be applied on the network traffic. Destination: The network traffic's destination IP. 1. Any - I f Any is set on this field the filter will be applied on the network traffic regardless of its destination IP.

  • Page 70: Qos - Tos/Diffserv

    DRO-210i Web Configuration 3.6.3 QOS - TOS/DiffServ Click on QOS > TOS/DiffServ to get the web page as shown below: This page is used to set the TOS octet in IP header. Source: The network traffic's source IP. 1. Any - If Any is set on this field the policy will be applied on the network traffic regardless of its source IP.
  • Page 71 DRO-210i Web Configuration Protocol: The network traffic whose protocol matches with this field will follow this policy. Source Port Number: Network traffic whose Source port matches with this field will follow this policy. This field is applicable only if Protocol is selected as TCP/UDP.

  • Page 72: Misc

    DRO-210i Web Configuration 3.7 Misc 3.7.1 Misc - DHCP 3.7.1.1 Misc - DHCP - DHCP Server Click on Misc > DHCP > DHCP Server to get the web page as shown below: DHCP (Dynamic Host Configuration Protocol) is a method of automatically assigning IP addresses, subnet masks, default gateway and DNS server IP address to computers on the LAN side of the Router.
  • Page 73 DRO-210i Web Configuration Starting IP address - This is the first IP address in a range that the Router will assign to a computer on your network. Ending IP address - This is the last IP address in a range that the Router will assign to a computer on user's network.
  • Page 74 DRO-210i Web Configuration Primary DNS Server - This is the IP address of a server on the Internet that provides the service of changing text URLs into IP address for sites on the Internet. Secondary DNS Server - This is the IP address of a secondary DNS server, to be used in case of a problem with the Primary DNS Server.

  • Page 75: Misc - Dhcp - Static Mapping

    DRO-210i Web Configuration 3.7.1.2 Misc - DHCP - Static Mapping Click on Misc > DHCP > Static Mapping to get the web page as shown below: DHCP Static Mapping (or DHCP Reservation) is a method of assigning the static IP address to a defined MAC Address. System administrator can use this feature to configure the static IP address for some of the systems in the LAN.

  • Page 76: Misc - Dhcp - Dhcp Relay

    DRO-210i Web Configuration 3.7.1.3 Misc – DHCP - DHCP Relay Click on Misc > DHCP > DHCP Relay to get the web page as shown below: DHCP Relay enables LAN clients to get IP address from the DHCP server which is in the different subnet.

  • Page 77: Misc - Dns Proxy

    DRO-210i Web Configuration 3.7.2 Misc - DNS Proxy Click on Misc > DNS Proxy to get the web page as shown below: DNS Server IP: This is the IP address of the DNS Server provided by the ISP. Interface: This is the Interface name corresponding to the DNS Server IP entered.

  • Page 78: Misc - Time

    DRO-210i Web Configuration 3.7.3 Misc - Time Click on Misc > Time to get the web page as shown below: This page allows the user to configure the system date and time. System Date Time - It displays the system date and time.

  • Page 79: Misc - Sys Log

    DRO-210i Web Configuration Domain Name - Alternatively user can also use domain name for setting up the time. The domain name field allows the user to enter the complete domain name. Manual Settings - User needs to enter values here if MANUAL type is chosen.

  • Page 80: Tools

    DRO-210i Web Configuration Sys-Log Status: User can enable/disable system logging. Remote Server: User needs to enter the IP address of the remote server where he/she wants to keep the system log files. Sys Log level: There are various System Log levels e.g. Alert, Emergency, Critical etc.

  • Page 81: Tools - System

    DRO-210i Web Configuration Username - The username for the account is admin. Old Password - Enter the old password for the account. New Password - Enter the new password for the account. Confirm New Password - Enter the new password again to verify that the password has been entered correctly.

  • Page 82: Tools - Upload

    DRO-210i Web Configuration Restore to Factory Default Settings: Click this button to restore the factory default settings at the router. Restart the Device: Click this button to restart the router without saving current changes in the settings. 3.8.3 Tools - Upload Click on Tools >...

  • Page 83: Tools - Ping Test

    DRO-210i Web Configuration will be made available by Technical Support whenever any module or any feature is changed. DRO210.cfg is the file, which contains the entire configuration of the DRO-210i. User can configure the device, save the configuration and download the configuration in cfg format on Local PC.

  • Page 84: Tools - Remote Access

    DRO-210i Web Configuration IP address: User needs to enter the IP address in this field if Set Type chosen is IP address. Domain Name: User needs to enter the Domain Name in this field if Set Type chosen is Domain Name.

  • Page 85: Status

    Web remotely. Remote IP - This is the IP address of the machine or device which can configure DRO-210i remotely. If NAT is enabled on the remote side then the Global IP should be entered here because DRO-210iwill get the request from that Global IP.
  • Page 86 DRO-210i Web Configuration This page displays the current information of the Router. It displays the LAN IP address, Subnet Mask, DHCP Server Status, WAN Connection Type, IP address, Subnet Mask and Default Gateway. "System Up Since" tell you how long the system has been running. It will give information in terms of number of hours;...

  • Page 87: Status - Traffic

    DRO-210i Web Configuration DMZ Status: DMZ Physical Link Status - Displays the DMZ cable plug-in(UP) or plug-out(DOWN) status. IP Address - This is the Router's current DMZ IP address. Subnet Mask - This is the subnet mask corresponding to the DMZ IP address above.

  • Page 88: Status - Route Table

    DRO-210i Web Configuration 3.9.3 Status – Route Table Click on Status > Route Table to get the web page as shown below: This page shows all the active route entries - both static and dynamic. The colour scheme indicates to the user whether an entry is static or dynamic.

  • Page 89: Status - Nat Table

    DRO-210i Web Configuration 3.9.4 Status – NAT Table Click on Status > NAT Table to get the web page as shown below: The Router maintains a table of statistics concerning the Network Address Translation (NAT) applied between the WAN and the LAN.

  • Page 90: Status - Ipsec Status

    DRO-210i Web Configuration 3.9.5 Status – IPSec Status Click on Status > IPSec Status to get the web page as shown below: IPSec Status page displays the current IPSec status table. It shows the state of the tunnel with number of packets transmitted and received through the tunnel.

  • Page 91: Status - Log Tables - Session Log

    DRO-210i Web Configuration Blocking Log: This shows what traffic and the reasons why they are blocked by the Firewall. Intrusion Log: The Intrusion Detection System of the router detects suspicious attacks and logs all the information about the intrusion attempts here.

  • Page 92: Status - Log Tables - Blocking Log

    DRO-210i Web Configuration Session events (when a computer on your LAN accesses an application of service on the WAN) are logged by the Router and are displayed on the Session Log Table. Source: port - The IP address and TCP/UDP port number of the computer or device that initiated the session is displayed here.
  • Page 93 DRO-210i Web Configuration Certain sessions between computers on your LAN and the WAN have the potential to cause a disruption in the function of your computers and are blocked by the Router's firewall. Some of these session types are defined by you in the Port Filter Policy page under Firewall Settings from the Advanced Settings tab.

  • Page 94: Status - Log Tables - Intrusion Log

    DRO-210i Web Configuration 3.9.6.3 Status – Log Tables – Intrusion Log Click on Status > Log Tables > Intrusion Log to get the web page as shown below: Certain sessions between computers on your LAN and the WAN have the potential to cause a disruption in the function of your computers and are blocked by the Router's firewall.

  • Page 95: Status - Log Tables - Black List

    DRO-210i Web Configuration (zero-sized DNS zone payload), BackOffice, NetBus, Smurf, Tear Drop, ICMP Flooding. Source: port - Displays the source IP address and the TCP/UDP port that the intrusion was attempted from. Destination: port - Displays the source IP address and the TCP/UDP port that the intrusion was attempted to.
  • Page 96 DRO-210i Web Configuration connections. When a serious intrusion attempt is detected (that is, when a large number of packets consistent with a commonly used intrusion method are detected by the Router) the IP address, the protocol used, and the corresponding port number is determined and entered into the Router Intruder Blacklist.

  • Page 97: Status - Log Tables - Black List

    DRO-210i Web Configuration 3.9.6.5 Status – Log Tables – Black List Click on Status > Log Tables > Black List to get the web page as shown below: The Router firewall is pre-programmed to recognize and block many commonly used intrusion methods from computers on the WAN (Internet) from one computer to another on the LAN and from computers on your LAN to the WAN.

  • Page 98: Status - Log Tables - Ipsec Log

    DRO-210i Web Configuration Source IP - The IP address of a computer or device that will not be allowed to make a connection from the WAN to the Router is displayed here. Destination IP - The IP address of the computer or device that the intruder has tried to connect to is displayed here.

  • Page 99: Help

    DRO-210i Web Configuration Index - This is the sequence of the IPSec log. Description - A brief description of the log entry will be displayed here. User can use it to check tunnel behaviour. 3.10 Help Click on Help to get the web page as shown below:...

  • Page 100: Appendix

    DRO-210i Web Configuration APPENDIX Password recovery: If user forgets his/her password he/she has to call Technical support and tell his/her MAC addresses which is there on the product sticker of the Router. Once user informs Tech. support his MAC address, Tech. support will generate one <username>...

Table of Contents