Service Router with 3 Configurable 10/100/1000Base-T Ports and 2 USB Ports


The router DSA-2003 is designed to protect SMB networks infrastructure against external threats and organize secure VPN connection. The router supports concurrent connection of a large number of users.
The advanced security functions allow to divide the network into zones, configure the zone interaction policies and traffic filtering rules with a wide range of available parameters.
The router supports multiple types of secure VPN connection tunnels: IPsec (IKEv1/IKEv2), L2TP over IPsec, PPTP/L2TP, GRE, IPIP, EoGRE, and unmanaged L2TPv3 tunnels.
In addition, the SSH protocol support provides more secure remote configuration and management of the router due to encryption of all transmitted traffic, including passwords.
The router supports the SkyDNS web content filtering service, which provides more settings and opportunities for safer Internet experience for home users of all ages and for professional activities of corporate users.
The schedules are also implemented; they can be applied to the rules and settings of the firewall and used to reboot the router at the specified time or every specified time period and to automatically save the configuration of the router to a connected USB storage.
The new ad blocking function effectively blocks advertisements which appear during web surfing.
LAN/WAN Conversion, WAN Failover
You can use any Ethernet port of the router as LAN or WAN port. The firmware supports assigning several WAN ports, for example, in order to configure the primary and backup WAN connection of different ISPs. In addition, you can configure the WAN failover using a 3G/4G modem.
USB Ports
The router is equipped with two USB ports for connecting a USB modem, a USB storage device or a printer. You are able to quickly connect to the Internet via a USB modem and use a USB storage device as a network drive.
In order to use multifunction USB ports effectively, the router supports simultaneous operation of several USB devices. For example, you can access multimedia content of the connected HDD storage and at the same time share a
USB printer.
Easy configuration and update
By default, a DHCP client WAN connection is configured for each WAN port and all settings to get started are configured.
You can customize the settings of the router DSA-2003 via the user-friendly web-based interface (the interface is available in two languages – in Russian and in English).
You can simply update the firmware: the router itself finds approved firmware on D-Link update server and notifies when ready to install it.
The built-in TR-069 client allows to perform remote configuration and diagnostics of the device.
The built-in SLA agent allows to monitor the state of the router’s network and clients and to pass the collected data in order to timely troubleshoot the problems. 

General features

• Intel Atom E3825 (1.33GHz, dual-core)
• 1 SO-DIMM socket, DDR3L, support up to 8GB
• 4GB, eMMC
• 3 10/100/1000BASE-T LAN/WAN ports
• USB 2.0 port
• USB 3.0 port
• Power
• Status (per port)
• Rate (per port)
• Button to power on/power off and restore factory default settings
Power connector
• Power input connector (DC)
Firewall functions
  - Division into zones; ability to specify rules and policies for zone interaction
  - One or several interfaces or VPN servers in a zone
  - Types of zones: FW, IPv4, IPv6, IPSec
  - Types of policies: ACCEPT, DROP, REJECT
Rules for zones, network interfaces, and VPN servers
  - Wide choice of parameters to add to a rule
  - Exclusion of parameters from a rule
  - Statistics collection
  - Stateful Packet Inspection (SPI)
  - URL filter
  - Ad blocking function
  - Built-in SkyDNS web content filtering service
  - Support of TWIN IP (IP Passthrough)
WAN connection types
• Mobile Internet (via supported USB modem)
• IPv6 PPPoE
• PPPoE Dual Stack
• Static IPv4 / Dynamic IPv4
• Static IPv6 / Dynamic IPv6
• PPPoE + Static IP (PPPoE Dual Access)
• PPPoE + Dynamic IP (PPPoE Dual Access)
• PPTP/L2TP + Static IP
• PPTP/L2TP + Dynamic IP
• L2TP Dual Stack
• IPIP6 in DSLite mode
• 6in4
• 6to4
• 6rd
Network functions
  - Configuration of the device's ports according to the switch model
  - Support of several physical switches
  - Port tagging
  - Tracking link watcher events (port connection on/off)
  - Combining interfaces into network bridges
  - Ports/connections statistics
Networks interaction
  - Support of several independent LAN subnets
  - Support of several physical WAN ports; WAN failover
  - Network isolation or routing
  - Static routing (flexible configuration of routes, rules, and routing tables)
  - RIP v1/v2
  - DHCP server/relay
  - Advanced configuration of built-in DHCP server
  - Stateful/Stateless mode for IPv6 address assignment, IPv6 prefix delegation
  - DNS relay
  - Dynamic DNS
  - IGMPx
  - Support of UPnP
  - Support of VLAN
  - Interface grouping
  - Support of SIP ALG
  - Support of RTSP
  - Support of H.323
  - Autonegotiation of speed, duplex mode, and flow control / Manual speed and duplex mode setup for each Ethernet port
  - Built-in UDPXY application
  - XUPNPD plug-in
  - Equal load distribution while using several WAN connections (traffic balancing)
  - Support of VRRP
  - Support of TWAMP
  - Wake-on-LAN support
• PPPoE pass-through
• L2TP over IPsec client
• PPTP/L2TP servers
• PPTP/L2TP/IPIP/GRE tunnels (L3)
• EoGRE/L2TPv3 tunnels (L2)
• IPsec tunnels
  - Transport/Tunnel mode
  - IKEv1/IKEv2 support
  - NAT Traversal
  - Support of DPD (Keep-alive for VPN tunnels)
USB interface functions
• USB modem
  - Auto connection to available type of supported network (4G/3G/2G)
  - Auto configuration of connection upon plugging in USB modem
  - Enabling/disabling PIN code check, changing PIN code1
  - Sending/receiving/reading/removing SMS messages1
  - Support of USSD requests1
• USB storage
  - File browser
  - Print server
  - Access to storage via accounts
  - Built-in Samba server
  - Built-in FTP server supporting TLS
  - Built-in DLNA server
  - Built-in Transmission torrent client; uploading/downloading files from/to USB storage
Management and monitoring
• Local and remote access to settings through SSH/TELNET/WEB (HTTP/HTTPS)
• Bilingual web-based interface for configuration and management (Russian/English)
• Firmware update via web-based interface
• Automatic notification on new firmware version
• Saving/restoring configuration to/from file
• Support of logging to remote host/connected USB storage
• Automatic synchronization of system time with NTP server and manual time/date setup
• Ping utility
• Traceroute utility
• TR-069 client
• SNMP agent
• SLA agent
• Schedules for rules and settings of firewall, automatic reboot, and saving a configuration backup to a connected USB storage
• Automatic upload of configuration file from ISP's server (Auto Provision)
• Automatic and manual recovery points
• iPerf3 utility (client/server)
• Route monitoring
Physical Parameters
Dimensions (L x W x H)
• 155 x 120 x 35 mm (6.1 x 4.7 x 1.4 in)
• Vertical stand
Housing material
• Plastic and metal
Operating Environment
• Output: 12V DC, 2A
Power Consumption
• Up to 24W
• Passive ventilation system
• Operating: from 0 to 35 °C
• Storage: from -20 to 70 °C
• From 20 % to 80 % (non-condensing)
Delivery Package
• Router DSA-2003
• Power adapter DC 12V/2A
• Vertical stand
• “Quick Installation Guide” (brochure)
Supported USB Modems2
• Alcatel X500
• D-Link DWM-152C1
• D-Link DWM-156A6
• D-Link DWM-156A7
• D-Link DWM 156A8
• D-Link DWM-156C1
• D-Link DWM-157B1
• D-Link DWM-157B1 (Velcom)
• D-Link DWM-158D1
• D-Link DWR-710
• Huawei E150
• Huawei E1550
• Huawei E156G
• Huawei E160G
• Huawei E169G
• Huawei E171
• Huawei E173 (Megafon)
• Huawei E220
• Huawei E3131 (MTS 420S)
• Huawei E352 (Megafon)
• Huawei E3531
• Prolink PHS600
• Prolink PHS901
• ZTE MF112
• ZTE MF192
• ZTE MF626
• ZTE MF627
• ZTE MF652
• ZTE MF667
• ZTE MF668
• ZTE MF752
• Alcatel IK40V
• Brovi E3372-325
• D-Link DWM-221
• D-Link DWM-222
• D-Link DWR-910 (revision D1)
• Huawei E3131
• Huawei E3272
• Huawei E3351
• Huawei E3372s
• Huawei E3372h-153
• Huawei E3372h-320
• Huawei E367
• Huawei E392
• Megafon M100-1
• Megafon M100-2
• Megafon M100-3
• Megafon M100-4
• Megafon M150-1
• Megafon M150-2
• Megafon M150-3
• Megafon M150-4
• Quanta 1K6E (Beeline 1K6E)
• MTS 824F
• MTS 827F
• MTS 830FT
• Yota LU-150
• Yota WLTUBA-107
• ZTE MF823
• ZTE MF823D
• ZTE MF827
• ZTE MF833T
• ZTE MF833V
Smartphones in USB tethering mode
• Some models of Android smartphones
1For some models of USB modems.
2The manufacturer does not guarantee proper operation of the router with every modification of the firmware of USB modems.


Order info

DSA-2003 Service Router with 3 Configurable 10/100/1000Base-T Ports and 2 USB Ports


Front view
Back view


Support Resources