D-Link DRO-210i manual 11.8 QoS

Page 77

Frequently Asked Questions

Ans: No. VPN provides security by encrypting and decrypting data that passes through a VPN connection; it does not offer protection from viruses.

Q28. How should I configure my VPN Tunnel to ensure maximum security?

Ans: Configure the VPN Tunnel in the following manner to ensure maximum security:

￿In Phase 1 Proposal, use Main Mode instead of Aggressive Mode, because Main Mode has more messages to ensure secure exchange of encryption keys.

￿In Phase 2 Proposal, use ESP IPSec Operation instead of AH, because ESP encrypts the traffic unlike AH. And use ESP Transform of AES or 3DES algorithms since they are more secure.

￿In both Phase 1 and Phase 2, use DH Group/PFS Mode of Group 2 because it uses a 1024-bit prime number, which is longer than the 768-bit prime number used by Group 1.

Q29. What are the different IPSec VPN solutions that have been tested with the DRO- 2XX products?

Ans: For the purpose of site-to-site VPN connectivity, the DRO-2XX has been tested & interoperating successfully with DFW-100i (Powered by Intoto’s VPN implementation), OpenSwan (formerly called FreeSwan) and DFL series of routers.

For the purpose of secure remote access (i.e. Server Tunnels for Roaming Users), the product has been tested & interoperates successfully with SafeNet SoftRemote VPN client and D-Link VPN client.

Q30. What is the maximum number of VPN Tunnels supported by the router?

Ans: The router supports up to 32 VPN Tunnels. This includes both Peer-To-Peer as well as Roaming User Tunnels.

11.8 QoS

Q31. I have a ISP Connection with 128kbps upstream bandwidth. And I want to ensure that my email traffic is always guaranteed atleast 50 kbps. How can I do this?

Ans: Configure QoS on the WAN Interface in the following manner:

￿Add a HTB Root Node with interface bandwidth as 128kbps. Set the Default Class ID as 3.

￿Add a HTB Class Node (for Email Traffic) with Priority 0, Guaranteed Rate 50kbps, Maximum Rate 128kbps, Parent ID 1 and Class ID 2.

￿Add another HTB Class Node (for all other traffic) with Priority 1, Guaranteed Rate 78kbps, Maximum Rate 128kbps, Parent ID 1 and Class ID 3.

￿Add a HTB Filter on the corresponding WAN interface for Email Traffic. The Protocol and Destination Port Number should correspond to the Email Protocol and set the Class ID as 2.

Dlink DRO-210i User Guide

77

Page 76 Page 78
Image 77
Page 76 Page 78
Contents DRO-210i Table Of Contents Virtual Private Network Bold About This ManualDlink DRO-210i User Guide Product OverviewProduct Overview Hardware Details DRO-210i Package ContentsFront Panel Rear Panel Routing Software FeaturesVPN Tools Optional Port Configuration Port ConfigurationDisabled WAN2/DMZ InterfacesLAN Interface LAN SettingsDMZ Interface Forgot LAN IP ?Maximum Transmission Unit DMZ SettingsWAN Interface Dynamic Mode Static ModeIP Settings for WAN1 Interface Dhcp Settings for WAN1 InterfaceUnnumbered Interfaces PPPoE ModePPPoE Settings for WAN1 Interface Dhcp DHCP, DNS and TimeDhcp Server DHCP, DNS and TimeDhcp Static Mapping Dhcp Static MappingDhcp Relay Dhcp RelayDNS Proxy DNS Proxy SettingsTime System Time SettingsRouting RoutingStatic Routing Static RoutingDynamic Routing RIP Settings Policy Based Routing Routing TableRouting Table Policy Based RoutingTo the same destination Backup Configuration Auto BackupHigh Availability High AvailabilityEthernet Link Detection Load Balancing ConfigurationLoad Balancing Ethernet WAN Link Detection NAT Interface Configuration NAT Interface ConfigurationNetwork Address Translation NATNAT Exception NAT ConfigurationNAT Configuration Virtual Server/NAPT Virtual ServerNAT Exception SIP-ALG SIP ALG ConfigurationNAT Session Table NAT TableFirewall Interface Configuration Interface ConfigurationFirewall Firewall PoliciesPolicy Rules Policy RulesInbound Policies Permitted Services Permitted ServicesInbound Policies Inbound PoliciesAdd Permitted IP Rule Outbound PoliciesIP Permitted Rules Outbound Policies Outbound PoliciesOutbound Policies Service Blocked Rule Blocked ServicesIP Blocked Rules Add Blocked IP RuleUntrusted Domain Domain FilterOutbound Policies Untrusted Domain Trusted DomainJava Filter Web FilterCookie Filter ActiveX FilterFile Extension Filter Keyword FilterKeyword Exception Blocking Log MAC FilterAdd Blocked MAC Address Blocking Log TableIntrusion Detection IDS ConfigurationIDS Configuration Black List Intrusion LogIntrusion Log Table Black List TableVirtual Private Network Virtual Private NetworkPeer-To-Peer IPSec Tunnel or PassthroughIPSec Passthrough IPSec TunnelVirtual Private Network Same IKE Encryption algorithm on both ends of a VPN tunnel IPSec Server IPSec Server ConfigurationsMaximum life duration is 86400 seconds Limitation Tunnel Remote ID ConfigurationTunnel Table IPSec Status IPSec StatusIPSec Log Table IPSec LogClass Configuration Quality of ServiceQuality of Service HTB QoS ConfigurationsQuality of Service QoS Filter Configurations Filter ConfigurationTOS/DiffServ Type Of Service/DiffServQuality of Service Administration AdministrationDevice Information Device InfoTraffic Statistics Traffic StatisticsSession Log SysLog Password ChangeSession Log System LogPassword Recovery Change PasswordSystem SystemUpload/Download Update Firmware/ConfigurationRemote Access Remote AccessPing Test Ping TestAdministration Dlink DRO-210i User Guide General Frequently Asked QuestionsFrequently Asked Questions DHCP, DNS Q6. What is the purpose of Dhcp Server Auto Configuration?High Availability RoutingFirewall Frequently Asked Questions 11.6 NAT 11.7 VPN Q21. What are the call features supported by SIP-ALG?11.8 QoS Frequently Asked Questions

DRO-210i specifications

The D-Link DRO-210i is an innovative smart security camera designed to bring peace of mind to homeowners and businesses alike. With its sleek design and advanced features, the DRO-210i stands out as a reliable surveillance solution that caters to a range of security needs.

One of the main features of the DRO-210i is its high-definition video streaming capability. With a resolution of up to 1080p, users can enjoy crisp and clear video footage, ensuring that every detail is captured. This camera is equipped with a wide-angle lens, offering a 130-degree field of view, which allows for comprehensive monitoring of large areas, making it ideal for both indoor and outdoor use.

The DRO-210i utilizes advanced infrared night vision technology, enabling it to capture clear images even in complete darkness. This feature ensures that security is maintained 24/7, offering peace of mind regardless of lighting conditions. The camera automatically switches to night mode when it detects low light, ensuring continuous monitoring without manual intervention.

Another standout characteristic of the DRO-210i is its motion detection capabilities. The camera features customizable motion zones and alerts, allowing users to define specific areas for monitoring. When motion is detected, the camera can send real-time alerts to the user's smartphone or email, ensuring prompt responses to any potential security threats.

The integration of two-way audio allows for real-time communication through the camera. Users can listen and speak through the camera's built-in speaker and microphone, providing an added layer of security. This feature is particularly useful for engaging with visitors or deterring potential intruders.

For convenient storage options, the DRO-210i supports both local and cloud storage. Users can insert a microSD card for local recording or opt for D-Link’s cloud storage service for easy and secure access to footage from anywhere in the world. This flexibility ensures that important recordings are safely stored and easily retrievable.

The camera's compatibility with smart home systems is an essential aspect of its design. The DRO-210i works seamlessly with various smart home ecosystems, allowing users to integrate it into their existing setups, enhancing their overall smart home experience.

In summary, the D-Link DRO-210i is a feature-rich, user-friendly security camera equipped with high-definition video, night vision, motion detection, two-way audio, and flexible storage options. Its compatibility with smart home technologies makes it an ideal choice for those seeking a comprehensive surveillance solution that not only enhances security but also integrates with their lifestyle.
Top Page Image Contents