D-Link DI-1162M User Manual

D-link remote access router user's guide
Table of Contents

Advertisement

Quick Links

DI-1162/DI-1162M
Remote Access Router
User' s Guide
First Edition (August 2000)
6DI1162M..01
Printed In Taiwan
RECYCLABLE

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DI-1162M

  • Page 1 DI-1162/DI-1162M Remote Access Router User’ s Guide First Edition (August 2000) 6DI1162M..01 Printed In Taiwan RECYCLABLE...
  • Page 2: Limited Warranty

    Registration Card. If a Registration Card for the product in question has not been returned to a D-Link office, then a proof of purchase (such as a copy of the dated purchase invoice) must be provided when requesting warranty service.
  • Page 3: Copyright Statement

    Trademarks Copyright 2000 D-Link Corporation. Contents subject to change without prior notice. D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective proprietors. Copyright Statement No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the United...
  • Page 4: Table Of Contents

    Step 4 - Connecting the Router to a LAN ... 13 Step 5 - Connecting the Router to WAN Devices ... 13 Step 6 – Plugging in All Devices... 13 Step 7 - Powering Up the DI-1162/DI-1162M... 14 CONFIGURATION AND MANAGEMENT... 15 ONSOLE ROGRAM ...
  • Page 5 Using Telnet via WAN ... 117 System Timeout... 117 USING RADIUS AUTHENTICATION ... 117 RADIUS S NSTALLING A ERVER DI-1162/DI-1162M ONFIGURING THE RADIUS D DDING SERS TO THE APPENDIX A – CABLES AND CONNECTORS ... 120 RS-232 (EIA-574) for Diagnostic Port... 120 RS-232 (EIA-530) Cable for WAN Port ...
  • Page 6 IP A ... 124 DDRESSES IP Network Classes ... 124 ... 125 UBNET APPENDIX D – IP PROTOCOL AND PORT NUMBERS... 126 IP P ... 126 ROTOCOL UMBERS IP P ... 126 UMBERS APPENDIX E – CONFIGURATION FILE ... 127 ONFIGURATION XAMPLE INDEX ...
  • Page 7: Introduction

    Ease of Installation The DI-1162/DI-1162M is a self-contained unit that is quick and easy to install. It is designed to be a standalone unit or it may be mounted on a standard 19-inch networking equipment rack. It uses standard Ethernet wiring to connect (route) a local area network (LAN) to up to 4 separate wide area networks (WANs) through dial-up or dedicated, leased lines.
  • Page 8: Dial On Demand

    Dial on Demand The Dial-On-Demand feature allows the DI-1162/DI-1162M to automatically place a call to a remote node, via a WAN, whenever there is traffic coming from any workstation on the LAN to that remote site. Full Network Management The DI-1162/DI-1162M incorporates SNMP (Simple Network Management Protocol) agents and a menu-driven Network Management System accessible via an RS-232 (console) or Telnet connection.
  • Page 9: Internet Access

    Internet Security The DI-1162/DI-1162M can act as a firewall between your office network and the Internet, and can hide the size of your office network and the host addresses of your office computers from prying Internet users. It can also filter traffic to and from the Internet allowing only certain types of communications to or from certain locations to pass through.
  • Page 10: Installation

    Frequently Asked Questions (FAQ) and application notes for this router can be found on the D-Link Web site at http://tsd.dlink.com.tw/. Packing List Before you proceed further, please check all items you received with your DI-1162/DI-1162M Router with this list to make sure the package is complete. The complete package should include: One DI-1162 or DI-1162M Router.
  • Page 11: Identifying External Components

    One CD-ROM disc or floppy diskette containing the Windows-based Router Configuration Utility. This User’s Guide. If any item is found missing or damaged, please contact your local D-Link Reseller for replacement. Identifying External Components The following section illustrates the different components on the router’s front and rear panels. Before using the router it is highly recommended to familiarize yourself with these components to ensure effective use of the device.
  • Page 12 DI-1162/DI-1162M Remote Access Router Power Diag Boot WANs 1 & 2 Module Diagnostics RS-232 Serial Port A DB-9 female connector used to connect a console to the router for initial setup and out-of-band management. Wan Ports (1 and 2) Two DB-25 male connectors each of which can be connected to a dial-up (dial in or out) line or a dedicated leased line by multiplexing with a modem or CSU/DSU (Channel Service Unit/ Data Service Unit), respectively.
  • Page 13: Site Installation

    Power Switch A rocker switch that turns the router off and on. Site Installation The site where you install the DI-1162/DI-1162M Router may greatly affect its performance. Please follow these guidelines for setting up the router. Install the router on a sturdy, level surface that can support at least 2 kg of weight. Do not place heavy objects on the router.
  • Page 14: Step 1 - Setting Up The Console

    Step 2 - Connecting the Console to the Router A serial cable is included in the DI-1162/DI-1162M package. To connect this cable, plug its nine-pin connector into the 9-pin RS-232 Diagnostic port on the router’s front panel, then connect the other end to the serial port on the rear of your computer or data terminal.
  • Page 15 DI-1162/DI-1162M Remote Access Router To log on to the router, use the factory set username and password ‘Admin’ (without the quotes). Please note that the user name and password are case-sensitive. Upon entering the username and password (using the <Tab> key to jump to the next field), position the cursor on...
  • Page 16: Step 3A - Configuring The Lan Port

    Choose Exit in the submenus to return to the Main Menu. The router can now be accessed via the LAN by Telnet, the Windows-based DI-1162/DI-1162M Router Configuration Utility (included with the router) and other SNMP management applications. If you have any questions regarding the settings you made or other settings in the submenus, please refer to the next chapter, “Configuration and Management.”...
  • Page 17 Enter a valid IP address for the WAN in the first item. You may also enter a Netmask if you wish. For more information about IP Addresses and Subnet masks, please refer to “Appendix C – IP Concepts.” DI-1162/DI-1162M Remote Access Router...
  • Page 18 DI-1162/DI-1162M Remote Access Router Other items in this screen may also need to be configured such as the State, Routing and Multicast settings. Please refer to the appropriate section in the “Configuration and Management” chapter of this manual for detailed explanations concerning the nature and use of these items.
  • Page 19: Step 4 - Connecting The Router To A Lan

    Step 4 - Connecting the Router to a LAN Your DI-1162/DI-1162M has a single LAN port for connecting to an Ethernet or Fast Ethernet switch or hub. The jack for the router’s Ethernet port is of the type known as EIA RJ-45. The cabling used should be Category 3, 4 or 5 UTP or STP depending on the connection speed, fitted with an RJ-45 connector.
  • Page 20: Step 7 - Powering Up The Di-1162/Di-1162M

    Step 7 - Powering Up the DI-1162/DI-1162M After all the devices are powered up, the DI-1162/DI-1162M can be turned ON. The router will perform a POST (Power-On Self-Test). It is during this POST procedure that the PROM Configuration Menu can be accessed.
  • Page 21: Configuration And Management

    Please see Step 3 - Initial Configuration of the Router on page 8 of this manual for more detailed information. Console Program Main Menu The Main Menu is shown below. DI-1162/DI-1162M Remote Access Router...
  • Page 22: System Information

    DI-1162/DI-1162M Remote Access Router As mentioned earlier, your first endeavor should be to increase the automatic timeout. Enter the System Information to do this. You will see this screen: System Information This menu contains administrative and system-related information: The above parameters are described as follows:...
  • Page 23: Interface Configuration

    External MAC Address – The physical address of the external LAN add-in module, if present. Interface Configuration Under Interface Configuration in the main menu is the following Interface Configuration screen, used to configure the interfaces for the LAN(s) and two WANs: DI-1162/DI-1162M Remote Access Router...
  • Page 24: Lan

    DI-1162/DI-1162M Remote Access Router The parameters are described below: Description – This is a user-defined, 32-character identifier used to name the LAN. Operation Mode – The LAN port is automatically set to auto-negotiation. When connected to another LAN port, 10/100 Fast Ethernet will configure this port to match the settings of the other LAN port. If the other port also implements 10/100 Fast Ethernet, the two ports will auto-negotiate the best possible settings achievable by both ports.
  • Page 25: Wan

    If linking the router to a computer, each end must know the other’s IP address. PPP_SYN – This serial line encapsulation provides a method for transmitting datagrams over synchronous serial point-to-point links. Unlike the SLIP protocol, PPP can determine the IP address configuration automatically. DI-1162/DI-1162M Remote Access Router...
  • Page 26 DI-1162/DI-1162M Remote Access Router PPP_ASYN – This serial line encapsulation provides a method for transmitting datagrams over asynchronous serial point-to-point links. Unlike the SLIP protocol, PPP can determine the IP address configuration automatically. FRAME_RELAY – This serial line encapsulation provides a method for high speed transmission of datagrams over dedicated lines.
  • Page 27 Switch Type – This allows you to choose Local Management Interface (LMI) specification. Currently, we support ANSI T1.617 Annex D and ITU Q.933 Annex A specifications. This switch type must be configured to match your Frame Relay subscription. Once a change has been made, the router must be rebooted. DI-1162/DI-1162M Remote Access Router...
  • Page 28: Network Configuration

    DI-1162/DI-1162M Remote Access Router The parameters are described below: DLCI(16. .991) – This Data Link Connection Identifier is used to match your Frame Relay subscription.. State – This is a toggle, to Disable or Enable the WAN interface. Network Configuration...
  • Page 29: Ip Configuration

    IP Stack Configuration The network interface IP address, mask and protocols are specified in the IP Stack Configuration submenus. Choose the desired interface from the IP Stack Configuration menu below: DI-1162/DI-1162M Remote Access Router...
  • Page 30 DI-1162/DI-1162M Remote Access Router Below, the submenus for both the LAN and WAN interfaces are shown.
  • Page 31 The options are described below: None – The router will not participate in any RIP exchange with adjacent routers. Listen – The router will incorporate routing information from adjacent routers, but will not send it’s own routing table. DI-1162/DI-1162M Remote Access Router...
  • Page 32 DI-1162/DI-1162M Remote Access Router Talk – The router will send adjacent routers it’s own routing table, but will not incorporate routing information from them. Both – The router will incorporate routing information from adjacent routers, and will send adjacent routers it’s own routing table.
  • Page 33: Ip Static Route

    DI-1162/DI-1162M Remote Access Router The descriptions for all the fields are the same as in the previous section. IP Static Route A static route is a permanent entry in the routing table. Static routing provides a means of explicitly defining the next hop router for a particular destination network IP address.
  • Page 34: Ospf Configuration

    DI-1162/DI-1162M Remote Access Router IP Address – This specifies the destination network IP address (or a host, depending on the netmask) and pairs it with a gateway. Netmask – This mask shows how the destination IP address is to be divided into network, subnet and host parts.
  • Page 35: Ospf Area Configuration

    OSPF Router ID is not configured, the router will automatically choose LAN 1’s IP as the OSPF Router AS Border Router – Setting to allow DI-1162/DI-1162M to act as Autonomous System Border Router. As an AS Border Router, the router can import and export routing information of other Autonomous Systems, such as RIP.
  • Page 36 DI-1162/DI-1162M Remote Access Router Complete the OSPF configuration information on the screen below: The parameters are described below: Area ID – Enter the OSPF Area ID number in this field. Authentication Type – Toggle between None and SimplePasswd.
  • Page 37 Advertisement is set to either Yes or No. Routing information of these address ranges is advertised external to the area if and only if such status is set to Yes. OSPF Intf. Configuration Select the desired interface on the OSPF Intf. Configuration screen: Complete the OSPF interface configuration information on the screen below: DI-1162/DI-1162M Remote Access Router...
  • Page 38 DI-1162/DI-1162M Remote Access Router The parameters are described below: Area ID – Enter the OSPF Area ID number in this field. Output Cost (0 . . 65535) – The cost of sending a packet on the interface, expressed in the link static metric.
  • Page 39 Complete the OSPF virtual interface configuration information on the screen below: The parameters are described below: Transit Area ID – Enter the Transit Area ID number in this field. Neighbor Router ID – Enter the Neighbor Router ID number in this field. DI-1162/DI-1162M Remote Access Router...
  • Page 40: Bridge Configuration

    DI-1162/DI-1162M Remote Access Router Hello Interval (1. . 65535) – The length of time (in seconds) between the Hello Packets that the router sends on the interface. This value is advertised in the router’s Hello Packets. It must be the same for all routers attached to a common network.
  • Page 41: Bridge Settings

    Forward Delay – The Forward Delay is a read-write object that can be set from 4 to 30 seconds. This is the time any port on the Switch spends in the listening state while moving from the blocking state to the forwarding state. Bridge Port Setting: DI-1162/DI-1162M Remote Access Router...
  • Page 42: Ipx Configuration

    DI-1162/DI-1162M Remote Access Router Priority – Port Priority is a read-write object that can be set from 0 to 255. The priority is used to determine the designated port if the Path costs of redundant switch to switch connections are the same. The higher the port priority, the more chance the port has of becoming the designated port.
  • Page 43 IPX Networking – The IPX Networking function is enabled or disabled in this field. Enable it to set up IPX (Internetwork Packet eXchange), a routing protocol for Novell networking environments. IPX Stack Configuration This menu is used to configure the LAN and WAN interfaces. DI-1162/DI-1162M Remote Access Router...
  • Page 44 DI-1162/DI-1162M Remote Access Router Complete the IPX stack configuration information for the desired interface on the screen below: The parameters described below also apply to WAN interfaces.: IPX Network Number – This determines which IPX network you belong to. Frame type – Select from the following: Ether II, SNAP, 802.2, or 802.3 IPX RIP –...
  • Page 45 DI-1162/DI-1162M Remote Access Router IPX Static Route The parameters are described below: Network – This is the IPX network number. Next Node Address – This is the next node address of the device that the router will attempt to reach.
  • Page 46 DI-1162/DI-1162M Remote Access Router SPX Static Service Select an entry and then press <Enter>. The parameters are described below: Service Name – This is the name that has been configured for the server. This name must be the exact name...
  • Page 47: Snmp Agent Configuration

    The Simple Network Management Protocol (SNMP), defined in STD 15, RFC 1157, is a protocol governing the management and the monitoring of IP network devices and their functions. The DI-1162/DI-1162M supports the use of SNMP to acknowledge communication between management stations and itself. Basically, the DI-1162/DI- 1162M, when connected to the network, acts as an SNMP agent, a software process that responds to queries using SNMP to provide status and statistics about the router.
  • Page 48: Snmp Community Configuration

    DI-1162/DI-1162M Remote Access Router SNMP Community Configuration Select and enter the SNMP Community Configuration submenu. You will see the following configuration screen: The parameters are described below: SNMP Community String – This community string is a user-defined identifying name used to group together some arbitrary set of SNMP application entities managed by the network manager.
  • Page 49: Advanced Functions

    Valid or Invalid. Note that setting the string to Invalid is the same as removing the string, however, the string remains so as to be validated again at an appropriate time. Advanced Functions The Advanced Functions menu holds most of the more complex configuration settings and is shown below: DI-1162/DI-1162M Remote Access Router...
  • Page 50: Remote Access Configuration

    Once this is done, the remote user will be able to use network resources as if he were connected locally. When the user dials into the DI-1162/DI-1162M, the call comes into the WAN port and after answering the phone, the DI-1162/DI-1162M: 1.
  • Page 51: Remote Network Connections

    This is because if a user on your LAN makes a request to download a web page for the first time, for instance, since it is the first time, the DI-1162/DI-1162M will not have any record of the web page’s IP address.
  • Page 52 Dial Configuration You can configure the two WAN interfaces on your DI-1162/DI-1162M to dial-out only when a packet is forwarded to that interface, and hang up after all data has been transferred and the link is idle. This can be used to lower the cost of an unpopular link or used as a backup link to your ISP.
  • Page 53 The dial backup configuration function allows you to configure information about a backup interface. An example of a backup interface on the Remote Network Profile menu would be making WAN 2 a backup interface for WAN 1. Enter configuration information below to complete the dial backup configuration. DI-1162/DI-1162M Remote Access Router...
  • Page 54 DI-1162/DI-1162M Remote Access Router The items are described as follows: Backup State – Choose among Answer, Dial on Demand, Always Connect, or Disable. Answer Select this to accept phone calls. Dial on Demand This initiates phone calls to make a connection.
  • Page 55: Dial-In User Profile

    Dial-In User Profile The Dial-In User Profile is used to configure the DI-1162/DI-1162M for single users (for example a person working at home) to dial in to the router and gain access to the network. At least one User Profile must be configured for each user who will dial in (in conjunction with Dial Configuration settings).
  • Page 56 DI-1162/DI-1162M Remote Access Router Select an entry from above and hit <Enter>. This screen will be blank if a dial-in user profile has not been configured yet. The parameters in the above window are described as follows: Name – The maximum length is 64 characters. This username is for password challenges (authentication). The user dialing in must supply this username in order to be allowed access to the router.
  • Page 57: Remote Network Profile

    Remote Network Profile The Remote Network Profile is used to configure the router for WAN connections to other networks. In practice, the DI-1162/DI-1162M will either dial-out to or receive incoming calls from another router, the ‘gateway’ to the other network.
  • Page 58 The parameters in the above window are described as follows: Remote Name – Name for the remote network that the DI-1162/DI-1162M is being set up to connect with. Direction – Dial-[In], dial-[Out], or [Both]. This field defines whether the router on the other network will dial-[In] to the DI-1162/DI-1162M to establish a connection, the router will dial-[Out] to the other network, or a connection can be established [Both] ways.
  • Page 59 Stac compression, the two devices will still communicate, albeit without using Stac compression. When disabled, Stac compression will never be used on this port State – Enables or disables this Remote Network Profile. DI-1162/DI-1162M Remote Access Router...
  • Page 60: Script File Configuration

    (common with many ISP’s). If you would like the router to automatically logon to a remote server, you must define a script file. Script files are executed immediately upon successfully establishing a connection. The DI-1162/DI-1162M can hold up to 8 different script files.
  • Page 61 Get Srv IP – Will get the Servers IP address if it is sent. This command is only valid for SLIP connections. End – Ends the script file. Parameters Parameters are data fields which hold text or numbers that are used in the Wait, Transmit, and Delay commands. State Toggles to enable or disable the line item. DI-1162/DI-1162M Remote Access Router...
  • Page 62: Dhcp Configuration

    When acting as a DHCP server, the DI-1162/DI-1162M will manage many of the IP network parameters. The DI-1162/DI-1162M will never assign a broadcast or network IP addresses to hosts, even if such an address is included in the specified range.
  • Page 63: Dynamic Ip Pool

    DI-1162/DI-1162M Remote Access Router Dynamic IP Pool The Dynamic IP Pool screen shown below contains the parameters that the router can set on the hosts. Please note that the Dynamic IP Pool cannot be enabled when the DHCP Agent feature is enabled.
  • Page 64: Static Ip Pool

    DI-1162/DI-1162M Remote Access Router Range – This is the range of contiguous, IP addresses, above the base IP Address above. In the above example, the IP Addresses assigned would be 202.93.47.1, 202.93.47.2, … 202.93.47.100. Netmask – This mask informs the client, how the destination IP address is to be divided into network, subnet, and host parts.
  • Page 65: Dhcp Relay Agent

    This can be useful if you wish to have all IP addresses in your company, including those in branch offices, assigned from a DHCP server centrally located at your headquarters, for example. DI-1162/DI-1162M Remote Access Router...
  • Page 66: Filter Configuration

    DHCP Server IP Address – This is the IP address of the remote DHCP server. When a local computer powers up and sends a DHCP request for an IP address, the DI-1162/DI-1162M will forward the request to the address specified here.
  • Page 67: Filter State Of Interface

    LAN. Alternatively, you can set up filters that allow certain types of IP packets to enter the LAN. IPX Filter – This contains information necessary to set up an IPX filter (DI-1162M only). Filter State of Interface The Filter State of Interface submenu lets you toggle default, routing decisions, if the packets are not subjected to a filter, routing decision.
  • Page 68: Layer 2 Filter

    DI-1162/DI-1162M Remote Access Router Please note that the IPX Filter column will only appear on DI-1162M models. Each decision on handling packets is described below: 1. Disable – This does not apply a default, routing decision. 2. Forward – This allows the routing of a packet, even though it has not met the criteria of the corresponding filter.
  • Page 69 Direction – This defines the direction of the frame relative to the Interface parameter. In means that packets will be checked when they are received from this interface. Out means that packets are checked as they are sent out from this interface. DI-1162/DI-1162M Remote Access Router...
  • Page 70: Ip Filter

    DI-1162/DI-1162M Remote Access Router State – This is used to choose the routing decision applied to the frame. The three decisions are described: Forward – This allows the routing of the frame, if it has met the criteria of the corresponding filter.
  • Page 71 Src Port – This is the source port in the TCP or UDP header of the packet. Src Port Operation – Select a source port operation: None, EQ, GT, or LT. Dst IP – This is the destination address in the IP header of the packet. DI-1162/DI-1162M Remote Access Router...
  • Page 72 DI-1162/DI-1162M Remote Access Router Dst Netmask – This mask is bit-wise AND’d with the destination IP address, and compared to the IP address of the outgoing interfaces. Dst Port – This is the destination port, in the TCP or UDP header, of the packet.
  • Page 73 State – This is used to define the routing decision applied to the packet. The three routing decisions are described: Forward – This allows the routing of the packet, if it has met the criteria of the corresponding IPX filter. DI-1162/DI-1162M Remote Access Router...
  • Page 74: Multiple Home Configuration

    DI-1162/DI-1162M Remote Access Router Drop – This drops (doesn’t allow routing for) a specific packet that has met the criteria of the corresponding IPX filter. Disable – This does not apply the IPX filter. Direction – This defines the direction of the packet relative to the Interface parameter below.
  • Page 75 DI-1162/DI-1162M Remote Access Router reserved for LAN1 and MIP4 to MIP6 are reserved for LAN2 (if present). This type of configuration is known as a multiple home configuration. Multiple Home can be demonstrated by this example: A company has 625 users (computers) all connected to one physical network using Ethernet. However, the company only has one Class C IP network address, 202.100.160.0.
  • Page 76: Static Arp

    DI-1162/DI-1162M Remote Access Router The parameters are described below: IP Address – This is a network IP address, access point, to a separate, physical network, on the LAN. Routing Protocol – This is the same as in the Network Configuration section. Keep in mind that these exchanges are made with adjacent routers on the LAN, if present.
  • Page 77 IP Address – This is the IP address that causes the router to reply with the MAC Address upon receiving an ARP request. MAC Address – This is the physical address, of the host, that is the authorized owner of the IP address. DI-1162/DI-1162M Remote Access Router...
  • Page 78: Nat Configuration

    NAT will refer to both NAT and NAPT unless otherwise stated. NAT can work in conjunction with DHCP. Thus, if both are enabled and properly configured, the DHCP server in the DI-1162/DI-1162M will assign local IP addresses to computers on your network. How NAT Works In the most common NAT configuration, your network uses local IP addresses that are not valid on the Internet.
  • Page 79 Please note that in the above table there are 9 users on the local network using 5 global IP addresses to access the Internet. Global IP Addresses Local IP Addresses (for use with NAT) (assigned to computers on the local network) 200.100.50.1 192.168.100.1 200.100.50.2 192.168.100.2 200.100.50.3 192.168.100.3 200.100.50.4 192.168.100.4 200.100.50.5 192.168.100.5 192.168.100.6 192.168.100.7 192.168.100.8 192.168.100.9 192.168.100.10 DI-1162/DI-1162M Remote Access Router...
  • Page 80: Setting Local Ip Addresses

    DI-1162/DI-1162M Remote Access Router When a packet on the local network arrives at the router and needs to be sent to the Internet, NAT will change the source IP address (for example 192.169.100.2) to a global address (200.100.50.1, for example). If this packet generates a reply (as for example, a request to view a web page will), NAT will change the destination IP address on the reply packet back to the local IP address for delivery to the machine on the local (stub) network.
  • Page 81 DI-1162/DI-1162M Remote Access Router Configure NAT/NAPT The first screen shows the complete NAT table that is defined by the network manager: For any NAT entry, you must configure two different screens. The first one is accessible by positioning the cursor over the name field and hitting <Enter>...
  • Page 82 DI-1162/DI-1162M Remote Access Router The parameters are described as follows: Name – This is a 12 character, alphanumeric, user-defined name, used to identify the network address translation. Global Interface – This is the interface corresponding to the Global IP and Range parameters, in the NAT table, to form unique IP address[es], known to the outside (regional or Internet) routers, on this interface.
  • Page 83: Dynamic Nat

    This screen (below) is how the NAT IP Pool appears, if Dynamic NAPT was chosen for the Translation Mode parameter. Each entry, in this configuration, can be used to map a single global address and multiple, contiguous local addresses to each other. DI-1162/DI-1162M Remote Access Router...
  • Page 84: Static Nat

    DI-1162/DI-1162M Remote Access Router All of the parameters are the same as in Dynamic NAT, except the Global IP is a solitary, global address. Global IP – this is a single, globally unique IP Address of the global interface (the interface to which it is assigned, in this case, one of the WAN interfaces) that is valid on the Internet.
  • Page 85: Napt For Special Aps

    Please refer to the user guide for the program to find out whether it transmits and receives data only through specified IP port numbers. In order for these programs to work with NAPT, the IP port numbers required by these applications must be entered in the Configure NAPT for Special APs screen shown below. DI-1162/DI-1162M Remote Access Router...
  • Page 86 DI-1162/DI-1162M Remote Access Router In the above window, position the cursor on any of the numbered name fields and press <Enter>. This will take you to the NAPT configuration screen for special applications shown below. The fields in the above window are described as follows:...
  • Page 87: Telnet/Discovery Enable

    Telnet State - This feature enables or disables the router’s ability to be configured over the LAN using telnet. Discovery Function – Enabling this feature allows the router to be auto-discovered by D-Link SNMP management software and the included Windows-based configuration software called RouterView.
  • Page 88: Dns Configuration

    DNS Configuration The DI-1162/DI-1162M router has a built in recursive DNS server. The maximum amount of memory that will be used by the router’s Domain Name Server is 64Kb which averages out to be about 800 entries. In other words, up to 800 domain names and their associated IP Addresses can be stored, which can significantly speed up access to those domains.
  • Page 89: Radius Configuration

    Configuration submenu above (in this case, dlink.com) to produce ctsnow.dlink.com. The mapping in the example of ctsnow.dlink.com to the IP Address of 11.1.1.3 is only valid for computers which set the DI-1162/DI-1162M router as their DNS server. Items are described as follows: IP –...
  • Page 90: Multi-Link Ppp Configuration

    MLPPP. Typically MLPPP is used to combine the speed of two ISDN BRI B-Channels to get 128Kbps of virtual capacity. Before implementing MLPPP on the DI-1162/DI-1162M, please ensure that your ISP or the device to which you are connecting supports, and is configured for MLPPP.
  • Page 91 Subtract Bandwidth Delay (sec) – (0 to 999) The amount of time in seconds the router will wait and sample the BOD Criteria before subtracting bandwidth once the throughput falls below the BOD Low Threshold. This prevents bandwidth from being unnecessarily subtracted due to temporary lulls in traffic. DI-1162/DI-1162M Remote Access Router...
  • Page 92: Admin Configuration

    Please note any changes made here as they are necessary for logging into the console program. System Maintenance Your DI-1162/DI-1162M provides useful tools for maintaining your device. These tools include updates on system status, upgrades to the system software, analysis, diagnostic tools, and more. This section will describe how to use these tools in greater detail.
  • Page 93: System Status

    Under the Statistics item of the System Maintenance screen is a Counter menu that displays some of the counters contained in MIB-II and the proprietary MIB. The table is updated every 5 seconds and can be reset by performing DI-1162/DI-1162M Remote Access Router...
  • Page 94 DI-1162/DI-1162M Remote Access Router a system reset on the router. Note that performing a system reset clears ALL tables in the router, including the routing table. Select the desired entry from the screen below and then press <Enter>. LAN 1 Items in the screen are described as follows: Tx Packets –...
  • Page 95 DI-1162/DI-1162M Remote Access Router Tx Bytes – The total number of bytes transmitted by the router. Tx Discard Packets – The number of packets dropped by the router. Tx Error Packets – The number of invalid packets transmitted by the router. This hardware counter shows the sum of Collisions, Abort, and Underrun packets.
  • Page 96 DI-1162/DI-1162M Remote Access Router WAN 1 Items in the screen are described as follows: Tx Packets – The total number of valid packets transmitted by the router since the last reset. Tx Bytes – The total number of bytes transmitted by the router.
  • Page 97: Runtime Tables

    Rx Parity Err Packets – The number of times parity errors occurred on the line. Runtime Tables Please note that the IPX Routing Table and SAP Table will only appear on DI-1162M models. IP Routing Table The IP Routing Table gives you a snapshot of the IP routing table. Table entries will expire after the Age value in the table counts down to zero seconds (except for entries for the router itself which have an age value of zero but will never expire).
  • Page 98: Arp Table

    DI-1162/DI-1162M Remote Access Router Items in the screen are described as follows: IP Address – This is the destination, network IP address from an incoming packet. Netmask – This mask is received from RIP exchanges and internal calculations, as the router learns.
  • Page 99: Ipx Routing Table

    IPX Routing Table This table displays IPX topology information (DI-1162M only). Items in the screen are described as follows: Net No – This displays the selected network number. Next Node Address – This is the node address that will be used next.
  • Page 100: Ppp Status

    DI-1162/DI-1162M Remote Access Router SAP Table This table displays Service Advertising Protocol information (DI-1162M only). Items in the screen are described as follows: Name Network – This displays the selected name network. Type – This displays the type of service based on numbers and services defined by Novell.
  • Page 101 CCP – Compress Communication Protocol is used to compress data sent between routers. IPNCP – IP Network Control Protocol is used to keep lines open between IPs. LCP – Link Control Protocol is used to maintain a link state between routers. DI-1162/DI-1162M Remote Access Router...
  • Page 102: Log And Trace

    This feature file events and errors that occurred and allows individual packets to be captured in a buffer. These items are to help D-Link technical support personnel identify problems that may be affecting your router. If problems occur with your router, D-Link technical support personnel will guide you through the use of these...
  • Page 103: Event/Error Log

    DI-1162/DI-1162M Remote Access Router Event/Error Log Log Configuration This option allows you to Enable or Disable the Event/Error log and begin recording events.
  • Page 104: Trace Buffer

    Port – The interface on which an event occurs. Time – Tick-times denoting when events occurred. Data – Data petaining to specific events. Trace Buffer This feature captures packets in a buffer to help D-Link technical support personnel identify problems with your router.
  • Page 105 DI-1162/DI-1162M Remote Access Router Trace Buffer Configuration Enables or disables the Trace buffer feature. View Trace Buffer Displays the header of packets captured in the buffer.
  • Page 106: Packet Triggered Last Call

    DI-1162/DI-1162M Remote Access Router The contents are described as follows: Port – This is the interface from which the packets were captured. Time – In clock ticks. The time the packet was captured. Data – The contents of the header of the packet.
  • Page 107: Diagnostic

    Diagnostic This feature tests the connection between the router and connected peripherals on a given interface. Please note that the IPX Ping Test is for the DI-1162M only. Connection Test This feature tests a dial-out WAN connection. DI-1162/DI-1162M Remote Access Router...
  • Page 108: Ip Ping Test

    DI-1162/DI-1162M Remote Access Router The parameters are described as follows: Interface – The WAN interface to be tested. Phone Number – The phone number that will be dialed by the WAN Interface. Please ensure that a modem answers the phone on the other end.
  • Page 109 Delay (10ms) – The amount of time in 10 millisecond intervals between each ping in the Count. Start Ping Test - Press <Enter> or <Return> to begin the test. IPX Ping Test This test makes sure there is an IPX network connection to a particular IP address (DI-1162M only). DI-1162/DI-1162M Remote Access Router...
  • Page 110 DI-1162/DI-1162M Remote Access Router The parameters are described as follows: IPX Net – This is the IPX network number. Node Address – This is the node address of the device that the router will attempt to reach. The router will check its routing table and try to locate the IPX Address.
  • Page 111: Software Update Menu

    If you do not have a TFTP server on your LAN, you can use the included Router Configuration Utility to upgrade the software. This Windows-based utility has a built-in TFTP emulator enabling you to use the computer (connected to the LAN and running the Configuration Utility) to upload the new software to the router. DI-1162/DI-1162M Remote Access Router...
  • Page 112: System Restart

    Perform a System Restart after configuring these settings begins the software update procedure. System Restart The system restart function enables you to reset the DI-1162/DI-1162M without powering off. Some settings changes require a system restart in order for them to take effect.
  • Page 113: Factory Reset

    DI-1162/DI-1162M Remote Access Router Factory Reset Performing a factory reset erases all settings and tables. All configuration changes ever made to the router will be deleted. The router will be set to the factory defaults it was shipped with and will no longer have an IP address.
  • Page 114: System Settings Backup/Restore

    Menu. The files defined here can be used as a backup for all the router settings and can be used to configure another DI-1162/DI-1162M with exactly the same settings, or as a backup before you make major changes to the...
  • Page 115 DI-1162/DI-1162M Remote Access Router Backup System Settings Items in the window are described below: Remote IP Address – This is the IP address of the TFTP server on which you wish to store the settings file. TFTP Time Interval – The time between requests to occupy TFTP server time. If the router doesn’t receive a response (ACK) from the TFTP server within the time interval defined here, it will assume the request has been dropped and send another.
  • Page 116 DI-1162/DI-1162M Remote Access Router Backup System Settings Items in the window are described below: Remote IP Address – This is the IP address of the TFTP server on which you wish to store the settings file. TFTP Time Interval – The time between requests to occupy TFTP server time. If the router doesn’t receive a response (ACK) from the TFTP server within the time interval defined here, it will assume the request has been dropped and send another.
  • Page 117: Prom System Configuration

    LAN IP address of the router in order to allow the console software in the router’s flash memory to be replaced if it has been damaged or deleted. PROM System Menu To enter the PROM System Menu, press Ctrl-C during the router’s POST procedure. The following menu will appear: DI-1162/DI-1162M Remote Access Router...
  • Page 118: System Configuration Menu

    DI-1162/DI-1162M Remote Access Router System Configuration Menu The parameters are described as follows: Hardware Revision – This is the version ID of hardware used in this router. Boot PROM Firmware Version – This is the version ID of firmware used in this router.
  • Page 119: Tcp/Ip Parameters Configuration Menu

    TFTP server IP Address and the routers own IP Address. System Reset The system reset function enables you to reset the DI-1162/DI-1162M without powering off. Some settings changes require a system reset in order for them to take effect.
  • Page 120: Software Update Menu

    DI-1162/DI-1162M Remote Access Router Software Update Menu The Software Update option is used to change the software in the flash memory of the router. This is the runtime software that is used to configure the router and is described in full in the preceding chapter.
  • Page 121 Boot File Name path. Please see “Appendix E – Configuration File” for more information about configuration files. After the parameters are set in the Software Update Menu, save the changes, exit, and perform a System Reset or Execute Bootload to begin the software download process. DI-1162/DI-1162M Remote Access Router...
  • Page 122: Factory Reset

    DI-1162/DI-1162M Remote Access Router After the new runtime software has been downloaded, the router will automatically start up using the new software with the Software Update Control setting disabled to avoid a downloading loop. Factory Reset Performing a factory reset erases all settings and tables. All configuration changes ever made to the router will be deleted.
  • Page 123: Using Telnet

    Telnet. Telnet Configuration In order to use telnet, the DI-1162/DI-1162M router must first be configured using a console connected to the RS- 232 Diagnostic port. Depending on the placement of the management station using telnet, the initial configuration...
  • Page 124: Installing Aradius Server

    Configuring the DI-1162/DI-1162M for RADIUS Authentication To configure the DI-1162/DI-1162M to use the RADIUS server set up in the previous section, go to the Main Menu in the console program and choose Advanced Functions and then RADIUS Configuration. Items in the above submenu are described as follows: RADIUS State –...
  • Page 125: Adding Users To The Radius Database

    #----------------------------- 192.168.0.1 should be added to the client file. The Client Name field in the file gives the IP address of the DI-1162/DI-1162M, and the Key field should be the same as the Key field in menu 23.2. After a RADIUS server has been configured, the DI-1162/DI-1162M will use it to authenticate all users instead of checking it’s internal Dial-Up User Profile.
  • Page 126: Appendix A - Cables And Connectors

    DI-1162/DI-1162M Remote Access Router Appendix A – Cables and Connectors RS-232 (EIA-574) for Diagnostic Port Signal Name Recv. Line Sig. Det. (DCD) Received Data Transmitted Data DTE Ready (DTR) Signal Ground DCE Ready (DSR) Request to Send Clear to Send...
  • Page 127: Rs-449 Cable For Wan Port

    RXD CLK Rec. Line Signal Det. TXD CLK TXD CLK TXD CLK RXD CLK Local Loopback Remote Loopback TXD CLK Test Mode End Connector: DB-25 Pin Female (ISO-2110) DB-37 Pin Male Cable Length: 1.5 m DI-1162/DI-1162M Remote Access Router Mnemonic Source...
  • Page 128: Cable For Wan Port

    DI-1162/DI-1162M Remote Access Router V.35 Cable for WAN Port DB25 V.35 Signal Name Female Male Pin Number Number Protective Ground Signal Ground Rec. Line Signal Det. RXD CLK TXD CLK TXD CLK TXD CLK RXD CLK TXD CLK End Connector: DB-25 Pin Female (ISO-2110) V.35 Male 34 Pin (ISO-2593)
  • Page 129: Appendix B - Specifications

    IP (Internet Protocol) PPP (Point-to-Point Protocol) Multi-Link PPP, SLIP, HDLC, Frame Relay RIP 1 and RIP 2, DVMRP, IGMP, OSPF; IPX and Bridge (DI-1162M only) Local RS-232 Console Port (out-of-band) Telnet (in-band) SNMP MIB II and Enterprise MIB 16 MB DRAM...
  • Page 130: Appendix C - Ip Concepts

    DI-1162/DI-1162M Remote Access Router Appendix C - IP Concepts This appendix describes some basic IP concepts, the TCP/IP addressing scheme and show how to assign IP Addresses. When setting up the router, you must make sure all ports to be utilized on the router have valid IP addresses. Even if you will not use the WAN ports, you should, at the very least, make sure the LAN port is assigned a valid IP address.
  • Page 131: Subnet Mask

    IP address. Any bit an a subnet mask that is to correspond to a net ID bit in the IP address must be set to Class Beginning Address 10.0.0.0 172.16.0.0 192.168.0.0 IP Class Subnet Mask Class A Class B 255.255.0.0 Class C 255.255.255.0 DI-1162/DI-1162M Remote Access Router Ending Address 10.255.255.255 172.31.255.255 192.168.255.255 255.0.0.0...
  • Page 132: Appendix D - Ip Protocol And Port Numbers

    DI-1162/DI-1162M Remote Access Router Appendix D – IP Protocol and Port Numbers Common Internet service protocols and IP port numbers. IP Protocol Numbers Protocol # IP Port Numbers Service Telnet SMTP Finger WWWHTTP POP3 NetBios- ns NetBios – NetBios – ssn...
  • Page 133: Appendix E - Configuration File

    # (comment) line above as meaning IP routing statistics. disable is the parameter you set. Configuration File Example # The system configuration file for D-Link DI-1162 Remote Access Router # DI-1162 runtime image file name (software update path and file name) di1162-image d:\project\di1162\runtime\image\1162run\1162run.hdr...
  • Page 134 DI-1162/DI-1162M Remote Access Router ip-address 10.19.88.1 # subnet mask ip-netmask 255.255.255.0 # routing protocol type (0:RIPv1, 1:RIPv2, 2:RIPv1&2) routing-type 0 # routing operating mode (0:None, 1:Listen, 2:Talk, 3:Both) operating-mode 1 # ip routing stat (enable/disable) ip-stat disable # interface decription (string name)
  • Page 135: Index

    13 Dial-out... 13 dial-out connections... 46 Dial-Out Network Connections ... 47 Direction ... 54 DNS ... 84 DI-1162/DI-1162M Remote Access Router DNS Cache State ... 84 DNS Configuration... 84 DNS Domain Name... 84 DNS IP ... 60 Domain Name... 60 Dynamic Host Configuration Protocol ...
  • Page 136 DI-1162/DI-1162M Remote Access Router IP Protocol Numbers ... 131 IP STACK ... 27 IP Static Route... 29 IP Static Route Table... 30 IP Static Routes ... 47 IPX ... 1 ISP ... 47 Key ... 86, 121 LAN... 1, 2, 3, 14, 20, 23, 26, 43, 71 LAN Port ...
  • Page 137 TCP/IP ... 1, 3 TCP/IP Parameters Configuration ... 115 Telecommuting ... 3 telephone number... 47 Telnet... 2, 17, 25, 119 DI-1162/DI-1162M Remote Access Router Using Telnet via LAN ... 119 Using Telnet via WAN... 119 Telnet Configuration ... 119 Telnet Enable ... 83 TFTP ...
  • Page 138 TEL: 39-02-2900-0676 FAX: 39-02-2900-1723 URL: www.dlink.it E-MAIL: info@dlink.it JAPAN D-LINK TOKYO 10F, 8-8-15 Nishi-Gotanda, Shinagawa-ku, Tokyo 141 Japan TEL: 81-3-5434-9678 FAX: 81-3-5434-9868 URL: www.d-link.co.jp E-MAIL: kida@d-link.co.jp SINGAPORE D-LINK INTERNATIONAL/D-LINK SINGAPORE 1 International Business Park, #03-12 The Synergy, Singapore 609917 TEL : 65-774-6233 FAX: 65-774-6322 E-MAIL: info@dlink.com.sg URL: www.dlink-intl.com...
  • Page 139 3. What network protocol(s) does your organization use ? "XNS/IPX "TCP/IP "DECnet "Others_____________________________ 4. What network operating system(s) does your organization use ? "D-Link LANsmart "Novell NetWare "NetWare Lite "SCO Unix/Xenix "PC NFS "3Com 3+Open "Banyan Vines "DECnet Pathwork "Windows NT "Windows NTAS "Windows '95 "Others__________________________________________ 5.

This manual is also suitable for:

Di-1162

Table of Contents