Network Configuration:
This setup consists of two networks separated by two VLANS. This example will use the following setup:
Network 1 – 192.168.10.0 /24 – SSID: NET – Corporate Wireless Network
Network 2 – 172.16.0.0 /16 – SSID: Guest – Wireless Guest Network
Step 1 – Enter the web GUI interface of the DSR using its IP address in a web browser. In our example we have used the IP address of 192.168.10.1
Accept any certificate warnings you may see, this is perfectly normal and safe
Step 2 – We first now need to create VLANs to separate the traffic
Network > VLAN Settings
Step 3 – Click on “Add New VLAN”
VLAN ID: 100
Name: Guest
Captive Portal: ON
Multi VLAN Subnet
IP Address: 172.16.0.1
Subnet: 255.255.0.0
Use the scroll bar to the left to scroll down…
DHCP Mode: DHCP
Domain Name: Guest
Starting IP Address: 172.16.0.2
Ending IP Address: 172.16.0.1
Primary DNS Server: 172.16.0.1
Lease Time: 24
Click “Save”
Step 4 – We should see the following summary for our VLANS
Step 5 – We need to create our two profiles, “NET” and “Guest”
Wireless > Profiles
Step 6 – Right-click on “default1” and click “Edit”
Step 7 – Change the default values to your SSID. In our example we are using “NET” as our corporative wireless SSID
SSID: NET
Broadcast SSID: ON
Security: WPA+WPA2
Encryption: TKIP+CCMP
Authentication: PSK
WPA Password: (enter a password for this SSID)
Click “Save”
Step 8 – Click on “Add New Profile” to create a profile for our Guest SSID
Profile Name: Guest
SSID: Guest
Broadcast SSID: ON
Security: OPEN (Due to our Guest users will need to authenticate with a user and password we will define later)
Click “Save”
Step 9 – You should have two Wireless Profiles (as per our example)
Step 10 – We now need to add an extra access-point to our configuration to deal with the profile “Guest”
Wireless > Access Points
Step 11 – Click on “Add New Access Point”
AP Name: ap2
Profile Name: Guest (Drop down box to display profiles available)
WLAN Partition: ON
*Active Time: Here you can set a time for from and to you would like the access-point to be available.
In our example, we have chosen not to use this feature
Click “Save”
Step 12 – We now need to associate the Guest SSID to VLAN100
Network > Port VLAN
Step 13 – Right-click on “Guest” and enter for PVID 100 (The VLAN we created in step 3)
Click “Save”
Step 14 – So that our guest users are able to login and authenticate against the local database, we need to add a new Group – Security > Internal User Database > Groups
Step 15 – Click on “Add New Group”
Group Name: CP
Description: Captive Portal
User Type: Network Captive Portal User: ON
Idle Timeout: 10
Click “Save”
Group List Summary:
Step 16 – We now need to a associate a User to our new Group – Security > Internal User Database > Users
Step 17 – Click on “Add New User”
User Name: CP
First Name: CP
Last Name: CP
Select Group: CP
MultiLogin: ON
Password: (Enter the password the guest will need to use for authentication)
Click “Save”
Users List Summary:
Login from a Laptop with Window 7:
Step 18 – Open your wireless card adapter and now search for SSID “Guest”
Step 19 – Once connected, open a web browser and try to go to a web site, for example dlink.com
Username: CP (User created in Step 17)
Password: (Password created in Step 17)
Click “Login”
Login from a Windows Phone:
Login from an iPad:
Step 20 – To see the clients connected – Status > Network Information > CaptivePortal Sessions
Step 21 – Within this section you are able to manage ALL connected devices by right-clicking over the session and choose between; “Disconnect” or “Blocking Device”
Disconnect – This will simply disconnect the wireless device from the session and will be forced to login via the portal
Block Device – This will block the wireless device and will automatically be placed into the Firewall Blocked Client List
Tags: Captive Portal, DSR Series
