D-Link DSA-3600, Руководство пользователя

Страница: 8 / 204

Chapter 2. Overview
2
Chapter 2. Overview
2.1 Introduction of DSA-3600
DSA-3600 is a Multi-Service Business Gateway specially designed for small and medium business, and branch
office operational environments. The major functional areas include user management, access control, AP
management, security management, and VLAN. The major features of DSA-3600 can be grouped into four
functional blocks:
A.
User Access Control
B.
Network Security (examples: Firewall, VLAN and VPN)
C.
Web-based administration and centralized AP management
D.
General networking features
2.2 System Concept
Small and Midsize Business (SMB) Network Environment
Networking devices such as switches, hubs, and access points are usually included in SMB environments. The
Internet connection of a SMB is usually via ADSL or cable modem. Figure-2.2a shows a typical network deployment
example which includes switches, access points, and connections to the Internet via ADSL/cable modem.
The DSA-3600 provides user authentication, authorization and management. The user account information is stored
in the local database or specified external database servers. User authentication is processed via the SSL encrypted
web interface. This interface is compatible to most desktop devices and palm computers. The appended figures are
typical examples of DSA-3600 deployed in a SMB environment. Figure-2.2b shows DSA-3600 authenticating the
users of its built-in database, as well as the users of external authentication database. Both LAN and WLAN can be
secured by IPSec VPN. PPTP VPN is supported for remote users to increase security at remote sites. The
DSA-3600 also supports Site-to-site VPN, WAN Failover, and DMZ.
The DSA-3600 can be used to control access to the company’s intranet. In a managed network that includes cable
and wireless network users, users located at the managed network can be set to be unable to access the network
resource without permission. In the event access right to the network beyond the managed area is required, an
Internet browser, such as the Internet Explorer, may be opened to connect to any website. When the browser
attempts to connect to a website, the DSA-3600 will force the browser to redirect to the user login webpage. The
user must then enter the username and password, where upon successful identification and authentication, the user
will then be granted proper access right as defined in the DSA-3600.