Home » D-Link Manuals » Hubs & Switches » D-Link DWC-1000 » Manual Viewer

D-Link DWC-1000 DWC-1000 User's Guide - Page 222

Accepted Packets Example, Accept Packets from, LAN to Option, Allow for the SSH, firewall rule

Add to My Manuals
Save this manual to your list of manuals

Page 222 highlights

Troubleshooting Option Accepted Packets Dropped Packets LAN to Option Option to LAN All Unicast Traffic All Broadcast / Multicast Traffic FTP Logs Redirected ICMP Packets Invalid Packets Bandwidth Limit Description If checked, tracks packets that were transferred through the segment successfully. This option is useful when the Default Outbound Policy is set to Block Always, so traffic that passes through the firewall can be monitored using the Firewall Rules page (ADVANCED > Firewall Settings > Firewall Rules). Also, see "Accepted Packets Example" on page 222. Enabling accepted packet logging through the firewall can generate a significant volume of log messages depending on typical network traffic. This is recommended for debugging purposes only. If checked, tracks packets that were blocked from being transferred through the segment. This option is useful when the Default Outbound Policy is set to Allow Always on the Firewall Rules page (ADVANCED > Firewall Settings > Firewall Rules). Also, see "Dropped Packets Example" on page 222. Routing Logs If checked, tracks traffic from the LAN port to the Option port. If checked, tracks traffic from the Option port to the LAN port. System Logs If checked, tracks packets directed to the wireless controller. If checked, tracks all broadcast or multicast packets directed to the wireless controller. If checked, logged information is sent to FTP logs. If checked, tracks the number of redirected Internet Control Message Protocol (ICMP) packets. If checked, tracks the number of invalid packets received. Other Events Logs If checked, tracks logs related to packets dropped due to Bandwidth Limiting. By logging packets that are dropped due to configured bandwidth profiles over a particular interface, you can decide whether the bandwidth profile must be changed to account for the desired Internet traffic of LAN users. Accepted Packets Example If a LAN machine tries to make an SSH connection when the option Accept Packets from LAN to Option is enabled and there is a firewall rule to allow SSH traffic from a LAN, those packets are accepted and a message is logged if the log option is set to Allow for the SSH firewall rule . Dropped Packets Example If a LAN machine tries to make an SSH connection when the option Drop Packets from LAN to Option is enabled and there is a firewall rule to block SSH traffic from a LAN, those packets are dropped and a message is logged. (Be sure the log option is set to allow for this firewall rule.) After making your selections on this page, click Save Settings to save your changes or click Don't Save Settings to revert to the previous settings. 222 DWC-1000 Wireless Controller User's Guide

Section	Page
Front Page	1
Contents	2
Preface	7
Audience	7
Document Revision Level	8
Changes in this Revision	8
Related Documents	8
Document Conventions	9
Safety and Warnings	9
Typographic Conventions	9
1. Product Overview	10
Features and Benefits	11
Scalable architecture with stacking and redundancy	11
Centralized management and configuration	11
Security	11
2. Unpacking and Installation	12
Unpacking	13
Package Contents	13
Required Tools and Information	13
Selecting a Location	14
Front Panel Ports and LEDs	15
Rear Panel	17
Using the Reset Button	17
Bottom Panel (Default IP Address)	18
Licenses	18
Installing the Wireless Controller	18
Rack-Mounting the Wireless Controller	18
Connecting the Wireless Controller	19
Sample Applications	21
Connecting to a Secured Network	21
Authenticating to an Authentication Server	22
Logging In to a Captive Portal	24
Where to Go from Here	25
3. Basic Configuration	26
Logging In to the Web Management Interface	27
Web Management Interface Layout	30
Basic Configuration Procedures	31
Basic Configuration Step #1. Enable DHCP Server (Optional)	32
Basic Configuration Step #2. Select the Access Points to be Managed	33
Basic Configuration Step #3. Change the SSID Name and Set Up Security	35
Basic Configuration Step #4. Confirm Access Point Profile is Associated	39
Basic Configuration Step #5. Configure Captive Portal Settings	40
1. Create a captive portal group	40
2. Add captive portal users	41
3. Associate the captive portal group to an interface	44
4. Customize the captive portal login page	45
Basic Configuration Step #6. Use SSID with RADIUS	48
Where to Go from Here	48
4. Advanced Configuration Settings	49
QoS Configuration	50
Enabling QoS Mode	50
Defining DSCP and CoS Settings	52
Configuring DSCP Priorities	52
Configuring CoS Priorities	53
VLANs	56
Enabling VLANs	56
Creating VLANs	57
Editing VLANs	59
Deleting VLANs	61
Port VLANs	62
MultiVLAN Subnets	63
DMZ Settings	66
Configuring a Port to Operate as a DMZ	66
Configuring DMZ Settings	67
Static Routing	69
Adding a Static Route	69
Editing Static Routes	71
Deleting Static Routes	72
Auto-Failover Settings	73
Load Balancing Settings	75
Additional Advanced Configuration Settings	77
5. Securing Your Network	79
Managing Clients	80
Viewing Known Clients and Adding Clients	80
Editing Clients	83
Deleting Clients	84
Content Filtering	85
Enabling Content Filtering	85
Specifying Approved URLs	86
Specifying Blocked Keywords	88
Exporting Web Filters	89
Additional Security Settings	91
6. VPN Settings	92
Configuring VPN Clients	93
Configuring IPsec Policies	95
Adding IPsec Policies	95
Example of a Manual Policy	103
Editing IPsec Policies	104
Enabling IPsec Policies	105
Disabling IPsec Policies	106
Exporting IPsec Policies	107
Deleting IPsec Policies	108
Mode Config Settings	109
DHCP Range	112
PPTP/LT2P Tunnels	113
PPTP Tunnel Support	113
Configuring PPTP Clients	113
Configuring PPTP Servers	114
L2TP Tunnel Support	118
OpenVPN Support	121
Additional VPN Settings	123
7. Viewing Status and Statistics	124
Viewing CPU and Memory Utilization	126
Viewing System Status	128
Viewing Managed Access Point Information	130
Viewing Cluster Information	132
Viewing Hardware and Usage Statistics	134
Wired Port Statistics	136
Managed Access Points and Associated Clients Statistics	137
LAN-Associated Clients	139
WLAN-Associated Clients	141
Sessions through the Wireless Controller	142
Associated Clients	143
LAN Clients	145
Detected Clients	146
Access Point Status	148
Access Point Summary	150
Managed Access Point	152
Authentication Failure Status	154
AP RF Scan Status	156
Global Status	158
Peer Controller Status	161
Peer Controller Configuration Status	163
Peer Controller Managed AP Status	164
IP Discovery	166
Configuration Receive Status	168
AP Hardware Capability	170
Client Status	171
Associated Client Status	173
Associated Client SSID Status	175
Associated Client VAP Status	177
Controller Associated Client Status	179
Detected Client Status	181
Pre-Authorization History	183
Detected Client Roam History	184
8. Maintenance	185
Group Management	186
Adding User Groups	186
Editing User Groups	189
Deleting User Groups	189
Configuring Login Policies	190
Configuring Browser Policies	191
Configuring IP Policies	193
User Management	196
Adding Users Manually	196
Importing Users	198
Editing Users	199
Deleting Users	200
Backing Up Configuration Settings	201
Restoring Configuration Settings	202
Restoring Factory Default Settings	203
Rebooting the Wireless Controller	204
Upgrading Firmware	205
Access Point Firmware Upgrade	205
Wireless Controller Firmware Upgrade	206
Activating Licenses	208
Using the Command Line Interface	210
9. Troubleshooting	211
LED Troubleshooting	212
Power LED is OFF	212
LAN Port LEDs Not ON	212
Troubleshooting the Web Management Interface	213
Using the Reset Button to Restore Default Settings	213
Problems with Date and Time	214
Discovery Problems with Access Points	214
Connection Problems	214
Network Performance and Rogue Access Point Detection	215
Using Diagnostic Tools on the Wireless Controller	215
Pinging an IP Address	215
Using Traceroute	216
Performing DNS Lookups	217
Capturing Log Packets	218
Checking Log Settings	219
Defining What to Log	219
Tracking Traffic	221
Accepted Packets Example	222
Dropped Packets Example	222
Remote Logging	223
Wireless Controller Event Log	226
IPsec VPN Log Messages	227
(USA and Canada Only)	235
Appendix D. Limited Lifetime Warranty	235

Match case Limit results 1 per page

Troubleshooting

222

DWC-1000 Wireless Controller User’s Guide

Option

Description

Accepted Packets

If checked, tracks packets that were transferred through the segment successfully. This option is

useful when the Default Outbound Policy is set to Block Always, so traffic that passes through the

firewall can be monitored using the Firewall Rules page (ADVANCED > Firewall Settings >

Firewall Rules). Also, see “Accepted Packets Example” on page 222.

Enabling accepted packet logging through the firewall can generate a significant volume of log

messages depending on typical network traffic. This is recommended for debugging purposes

only.

Dropped Packets

If checked, tracks packets that were blocked from being transferred through the segment. This

option is useful when the Default Outbound Policy is set to Allow Always on the Firewall Rules

page (ADVANCED > Firewall Settings > Firewall Rules). Also, see “Dropped Packets Example”

on page 222.

Routing Logs

LAN to Option

If checked, tracks traffic from the LAN port to the Option port.

Option to LAN

If checked, tracks traffic from the Option port to the LAN port.

System Logs

All Unicast Traffic

If checked, tracks packets directed to the wireless controller.

All Broadcast / Multicast Traffic

If checked, tracks all broadcast or multicast packets directed to the wireless controller.

FTP Logs

If checked, logged information is sent to FTP logs.

Redirected ICMP Packets

If checked, tracks the number of redirected Internet Control Message Protocol (ICMP) packets.

Invalid Packets

If checked, tracks the number of invalid packets received.

Other Events Logs

Bandwidth Limit

If checked, tracks logs related to packets dropped due to Bandwidth Limiting. By logging packets

that are dropped due to configured bandwidth profiles over a particular interface, you can decide

whether the bandwidth profile must be changed to account for the desired Internet traffic of LAN

users.

Accepted Packets Example

If a LAN machine tries to make an SSH connection when the option

Accept Packets from

LAN to Option

is enabled and there is a firewall rule to allow SSH traffic from a LAN, those

packets are accepted and a message is logged if the log option is set to

Allow for the SSH

firewall rule

Dropped Packets Example

If a LAN machine tries to make an SSH connection when the option

Drop Packets from

LAN to Option

is enabled and there is a firewall rule to block SSH traffic from a LAN, those

packets are dropped and a message is logged. (Be sure the log option is set to allow for this

firewall rule.)

After making your selections on this page, click

Save Settings

to save your changes or click

Don't Save Settings

to revert to the previous settings.