Table of Contents. DI-LB604 User s Manual. Table of Contents

Transcription

1

2 Table of Contents Table of Contents Package Contents... 4 Minimum System Requirements... 4 Introduction... 5 Features and Benefits... 6 Hardware Overview... 7 Connections...7 LEDs...8 Getting Started... 9 Using the Configuration Menu Home...11 Wizard...11 WAN...12 Port Options...14 LAN...16 DHCP...16 DHCP Client List...17 Setting Static DHCP...18 Load Balance...19 Advanced...20 Host IP...20 Static Routing...22 Virtual Server...23 Applications...24 Multi-DMZ...25 Filters...26 QoS...28 QoS Set Policy...29 NAT...30 Tools...32 Admin...32 Time...33 System...33 Firmware Alert...35 SNMP DDNS

3 Table of Contents UPnP...38 Misc...39 Status...41 Device Info...41 Log...42 Log Settings...42 Stats...44 NAT Status...46 NAT Connection List...47 Troubleshooting Technical Specifications Frequently Asked Questions Appendix Securing Your Network...78 Glossary...79 Contacting Technical Support Warranty Registration

4 Package Contents Package Contents CAT-5 Ethernet Cable (All the DI-LB604 s Ethernet ports are Auto-MDIX) Power Adapter (5.0V, 2A) CD-ROM with Software and Manual Quick Installation Guide Note: Using a power supply with a different voltage than the one included with your product will cause damage and void the warranty for this product. If any of the above items are missing, please contact your reseller. Minimum System Requirements Ethernet-Based Cable or DSL Modem Computers with Windows, Macintosh, or Linux-based operating systems with an installed Ethernet adapter and CD-ROM Drive Internet Explorer Version 6.0 or Netscape Navigator Version 7.0 and Above 4

5 Introduction Introduction The D-Link Express EtherNetwork DI-LB604 is a 4-port Ethernet Broadband Router. The D-Link DI-LB604 enables users to quickly and easily share a high speed Internet connection. The D-Link DI-LB604 also incorporates many advanced features, traditionally found in more expensive routers. After completing the steps outlined in the Quick Installation Guide (included in your package) you will have the ability to share a single Internet connection as well as sharing information and resources such as files and printers. The DI-LB604 is compatible with most popular operating systems, including Macintosh, Linux and Windows, and can be integrated into an existing network. This Manual is designed to help you connect the D-Link Express EtherNetwork DI-LB604 to a high speed Internet connection and 4 Ethernet PC connections. This manual provides a quick introduction to Broadband Router Technology, Firewalls, and Local Area Networking. Please take a moment to read through this manual and get acquainted these various technologies. 5

6 Features and Benefits Features and Benefits Connects multiple computers to a Broadband (Cable or DSL) modem to share the Internet connection. Allows you to quickly and easily share an Internet connection with multiple computers and devices. Supports multiple and concurrent IPSec and PPTP pass-through sessions, so multiple users behind the DI-LB604 can access corporate networks through various VPN clients more securely. The Web-Based user interface displays a number of advanced network management features including: Easily applied content filtering based on MAC Address, IP Address, URL and/or Domain Name. These filters can also be scheduled to be active on certain days or for a duration of hours or minutes. NAT allows you to share a single IP Address and protects you from outside intruders gaining access to your private network. All of the networked computers can retrieve TCP/IP settings automatically from the DI-LB604. DI-LB604 is configurable through any network computer s web browser using Netscape or Internet Explorer. Allows you to assign different access rights for different users. Enables you to expose WWW, FTP and other services on your LAN to be accessible to Internet users. Special applications requiring multiple connections, like Internet gaming, video conferencing, Internet telephony and so on. The DI-LB604 can sense the application type and open a multi-port tunnel for it. Allows a networked computer to be fully exposed to the Internet. This function is used when the Special Application feature is insufficient to allow an application to function correctly. 6

7 Hardware Overview Hardware Overview Connections Power Receptor LAN Ports These are the connections for Ethernet cables to Ethernet enabled computers. WAN Ports This is for the connection of an Ethernet cable to your Cable or DSL modem. Reset Button Pressing this button restores the Router to its original factory default settings. 7

8 LEDs Hardware Overview WAN LEDs A solid light indicates a connection on the WAN port. These LEDs blink during data transmission. Power LED A solid light indicates a proper connection to the proper power supply. Status LED This LED will be off to indicate proper operation and it will blink during data transmission. Local Network LEDs A solid light on each port indicates a connection to an Ethernet enabled computer. These LEDs blink during data transmission. 8

9 Getting Started Getting Started 9

10 Using the Configuration Menu Using the Configuration Menu Whenever you want to configure your DI-LB604, you can access the Configuration Menu by opening the Web-browser and typing in the IP Address of the DI-LB604. The DI-LB604 s default IP Address is shown below: Open the Web browser. Type in the IP Address of the Router ( Note: if you have changed the default IP Address assigned to the DI-LB604, make sure to enter the correct IP Address. Type admin for the User Name. Leave the Password blank. Click Ok. 10

11 Using the Configuration Menu Home The Home tab provides the following configuration options: Wizard, WAN, LAN, DHCP and Load Balance Wizard The Home>Wizard screen will appear. Please refer to the Quick Installation Guide for more information regarding the Setup Wizard. Home > Wizard These buttons appear on most of the configuration screens in this section. Please click on the appropriate button at the bottom of each screen after you have made a configuration change. 11

12 Using the Configuration Menu WAN Connection Connection Mode: Static IP: Dynamic IP: PPPoE: PPTP Connection: Backup of: Home > WAN There are three connection modes for each WAN port, Enable, Disable and Backup. Set to Disable if there is no modem connected to the WAN port. If both WAN ports are used, one is set to Enable and the other is set to Backup, the backup line will automatically be used when the other line is disconnected. Select this if you want to specify a fixed IP address for the WAN port. Select this if you want the WAN port to get its IP address from a DHCP server. Select this if you want the WAN port to get its IP address from a PPPoE server. To enable or disable PPTP connection on the WAN port. To indicate which WAN port to be the backup of current port. 12

13 Using the Configuration Menu Address Information Address Information: PPTP Dialup DNS Optional Username / Password: DNS (Domain Name Server): Optional: Host Name: Domain Name: MAC Address: If you choose the connection type Static IP, then you have to fill in the information, IP address, Subnet Mask, and Gateway, provided by your ISP. These 2 fields must be completed if you are using PPPoE or PPTP dialup. If you are using PPTP dialup, remember you must select Static IP or Dynamic IP on Connection Type setup. There are three entries available. It is necessary for those who are using static IP connected to the Internet. It is optional for those who are using dynamic IP or PPPoE. If you still have trouble of connecting to the Internet, you may need to fill in this optional information. This information is most often used by Cable Modem services. The name of this device. The specific name of this device on the Internet. There is one default MAC Address for each WAN port of this device and it can be changed by user if necessary. (Cable Modem User may need this) 13

14 Using the Configuration Menu Port Options Interface WAN Port: Home > WAN > Port Options Select the WAN port that you would like these port options to apply to. MTU: Connection Health Check Connection Health Check: The largest amount of data that can be transferred across a given physical network. There are three methods, ICMP, HTTP and Traffic, provided for device to check if WAN interfaces are connected to internet or not. A successful response of either method means that the connection is OK. If the choosen method fails, the connection is considered to be down. 14

15 Using the Configuration Menu Method: Interval: Alive Indicator: ICMP: The health checking is performed by sending an ICMP echo request packet to the specific destination. The specific destination ( Alive Indicator ) could be either : 1. if the input box is filled (NAME or IP address): the host is used. 2. if the input box is left blank: gateway of wan interface will be used. If one ICMP echo reply packet from Alive Indicator or gateway is received, the connection is considered OK. If there are no response received after 4 tries, the connection is considered to be down. HTTP: Traffic: The device gets a TCP connection with the Alive Indicator first. Then the device sends HTTP HEAD packet to the Alive Indicator. If any HTTP DATA from the Alive Indicator is received, the connection is considered OK. If there are no response received after 5 tries, the connection is considered to be down. If there is no traffic on the WAN port in the Interval time, the connection is considered to be down. The period to check if the WAN port is alive or not. This is used for the ICMP or HTTP methods to determine if your Internet connection is active or not.(you can either fill-out the IP address or host name) PPPoE / PPTP Connection Auto Dialup: To enable or disable auto dialup for a PPPoE/PPTP connection. If you decide not to use auto dialup or auto disconnect, then you have to connect/disconnect manually. Disconnect After Idle: EchoTime: Echo Retry: The amount of time the router will wait before it disconnects if there is no traffic on the connection. Enter -1 to keep the connection always alive. Enter 0 to enable dial on demand by trigger. To determine how often an Echo request is sent to the PPPoE server. Normally, leave this setting as its default value. To determine the most times that the Echo request is allowed to be sent to the PPPoE server until getting a response. Normally, leave this setting as its default. 15

16 Using the Configuration Menu LAN LAN Settings IP Address: Subnet Mask: Home > LAN This is the LAN IP address for this broadband router unit. Other computers on this LAN will see it as their gateway. The subnet mask address must be the same as PCs onyour LAN. The default subnet mask address is DHCP DHCP Server DHCP Server: Starting IP Address: Ending IP Address: Home > DHCP To activate DHCP Server function. If you have another DHCP server available on your network or your LAN IP are static, you should disable the DHCP Server function. The Starting of the IP address range that will be leased to DHCP clients in device s LAN side. The Ending of the IP address range that will be leased to DHCP clients in device s LAN side. 16

17 Using the Configuration Menu Lease Time: DNS Server 1 IP for Client: DNS Server 2 IP for Client: View DHCP List: Setting Static DHCP: The amount of time for a DHCP server leased a IP address to a client. The IP address of the first default DNS server for the client requsting DHCP. The IP address of the second default DNS server for the client requsting DHCP. This button is linked to the page DHCP client List. Click here to configure static DHCP. DHCP Client List DHCP Client List Help DHCP Client List: Home > DHCP > View DHCP List Lists the information about the hosts which have obtained an IP address from this router s DHCP server. 17

18 Using the Configuration Menu Setting Static DHCP Static DHCP Host Name: MAC Address: Reserved IP Address: Home > DHCP > Setting Static DHCP This should be your computer name. This is your computer s network adapter address. You can find this address by typing ipconfig /all under the command prompt mode of window NT /2000/XP, or winipcfg under window/95/98/ Me s command prompt mode. The IP address you wish to assign to this host. 18

19 Using the Configuration Menu Load Balance Home > Load Balance Load Balance Configuration Load Balance: To determine how the traffic is shared among the WAN ports. Enable: Load Balance Base on: Loading Share: NAT Statistics NAT Statistics: Interface Statistics: This will allow you enable or disable the load balance feature. Select the desired option to measure traffic. Enter the desired percent of traffic load for each WAN port. The traffic statistics on NAT for WAN ports. The traffic statistics on WAN ports. 19

20 Using the Configuration Menu Advanced The Advanced tab provides the following configuration options: Host IP, Static Routing, Virtual Server, Applications, Multi DMZ, Filters, QoS and NAT. Host IP Advanced > Host IP Host IP Host IP: Host Network Identity Host Name: MAC Address: Select Group: Reserved IP Address: The main purpose of this section is to define hosts on your LAN, and assign them to groups. Groups are used by the Access Filter and Block URL features. You can also bind multiple PPPoE sessions to individual hosts on the LAN. This should be your computer name. This is your computer s network adapter address. You can find this address by typing ipconfig /all under the command prompt mode of window NT /2000/XP, or winipcfg under window/95/98/ Me s command prompt mode. Select a group to assign the host to. The IP address you wish to assign to this host. 20

21 Using the Configuration Menu Host Network binding Host Network binding: Strict Binding: Loose Binding: Host & Group List Host & Group List: This is used only if you have multiple PPPoE sessions. Use this to ensure that a particular host always uses the same PPPoE session. Only the bound interface is allowed to send packets for the specified host. If the bound interface is not available, no packet from the specified host can be sent. In normal case, the packets from the specified host will be sent via the bound interface. If the bound interface is not available, the other interfaces are alternative. All the host entries you have made will be listed here. 21

22 Using the Configuration Menu Static Routing Advanced > Static Routing Static Routing Static Routing: Network Address: Netmask: Gateway: Interface: Metric: If there is more than one router on a network, this Routing table must be configured because the router needs to know what packet goes to which router. A routing table entry is required for each LAN segment on the network. Network Address is the address of the destination network segment. The subnet mask used to select the bits from an IP Address that corresponds to the subnet. The IP router that the packets destined to the Network Address will be forwarded to. The device s port that the packets destined to the Network Address will be passed through. The number of routers that must be traversed to reach the destination network segment. 22

23 Using the Configuration Menu Virtual Server Virtual Server Virtual Server: Enable: Server Name: Private IP: Protocol Type: Private Port Range: Interface Binding: Advanced > Virtual Server This feature allows the servers (web server, mail server, FTP server, DNS,... etc) on your LAN to be accessed from the Internet. To activate or deactivate current entry. An unique name to identify the virtual server. Enter the IP address of the server on the device s LAN side. The hosts used as Virtual Servers should have a static IP address or a reserved IP address. Select the protocol (either TCP or UDP) used by the server software. The range of port numbers used by the server. If only one port number is used, fill the same number in both starting and ending fields. The WAN port that the virtual server is bound to. 23

24 Using the Configuration Menu Public Port Range: Allowed Remote IP: Applications The range of port numbers for users in public to access the virtual server. If only one port number is used, fill the same number in both starting and ending fields. The range of IP addresses that are allowed to access the virtual server. Advanced > Applications Special Application Special Application: Special Application Configuration Special Application Configuration: There are many special network applications that normally do not work behind a firewall. Due to network security considerations, only a few ports are open. Traffic using other ports is blocked. Here, you can choose to open other ports and allow the traffic which uses those ports. This section lets you enter the configuration data for the special application. Enable: Name: Trigger Port Range: To activate or deactivate current entry. The name to identify the Special Application. The port number range to trigger the Special Application. 24

25 Using the Configuration Menu Trigger Type: Public Port Range: Public Type: Special Application List Special Application List: The protocol to trigger the Special Application. The port range used in the connection from the Special Application server. The protocol used in the connection from the Special Application server. Lists all the entries that have been created. Multi-DMZ Multi DMZ Multi DMZ (De-Militarized Zone): Enable: Advanced > Multi DMZ This special function allows multiple Hosts on your LAN to be exposed to the Internet without any restrictions. This is useful for some network games, net meeting, or special applications. In order to enable these functions, you have to map one LAN IP address to one WAN IP address. However, because of the security risk, you should activate these functions only if they are necessary. To activate or deactivate current DMZ entry. 25

26 Using the Configuration Menu WAN: Name: PPPoE Sess: Private IP (LAN): Access Group: Direction: The WAN port applied for current DMZ entry. To identify current DMZ entry. The PPPoE session that current DMZ entry is bound to. The IP address of the server in DMZ. To specify which Access Group will be applied. Each Access Group has its own access rules. To specify that the Access Group will be applied in which way. Filters URL Blocking URL Blocking: Access Filters Access Filters: Advanced > Filters If the URL, IP address or keyword entered here is found in the web page access packet from LAN users, the web page access will be blocked. You can have different restrictions for different groups. (Use the Host IP screen to assign Hosts to groups.) To control the Internet access by LAN users. 26

27 Using the Configuration Menu Select One Group: No Filtering: Allow Selected Access only: Block All Access: Block Selected Items: ICMP Filters ICMP Filters: Block Selected Packet Types: Packet Types: The Group that current rule is applied to. To allow all Internet access to LAN users. To apply the rules defined in User-Defined Ports To Filter. To prohibit all Internet access to LAN users. To apply the rules defined in User-Defined Ports To Block. To limit the ICMP activities initialized from LAN. To prohibit the selected types of ICMP packets from the LAN to be passed through the device. The types of the ICMP packets that could be blocked. User-defined Ports To Filter User-defined Ports To Block: This lets you define custom ports to be filtered. Enable: Name: Protocol Type: Port No. Range: To activate or deactivate current rule. A unique name to identify current rule. The protocol to be blocked. The port number range to be blocked. (for TCP and UDP only ) If only one port number is used, enter the same port number in both fields. 27

28 Using the Configuration Menu QoS Advanced > QoS QoS Setup Enable QoS: Queuing Method: Process TOS Field: Overwrite Policy Priority: Users can choose to Enable QoS (Quality of Service). If set to enable QoS, the QoS will allow higher priority packets to pass through the device. The methods for managing your queue. Priority Queuing is one of the first queuing variations to be widely implemented. This is based on the concept that certain types of traffic can be identified and shuffled to the front of the output queue so that some traffic is always transmitted ahead of other types of traffic. An 8 bits field in the IP packet header designed to contain values indicating how each packet should be handled in the network. If you choose enable then it will enable this function to process the IP Type of Service field. Choose Yes to enable the IP packet TOS field priority to overwrite the priority defined in the policy configuration. 28

29 Using the Configuration Menu QoS Set Policy Advanced > QoS > Set Policy Setting the QoS policy can assign received packets a higher/lower priority (based on your configuration) to pass through this device. You can define some policies which classify received packets based on local/remote IP addresses, ports and protocol type. This feature is useful when the WAN link is very busy or congested or when using special applications that need real time services such as Internet phone, video conference...etc. QoS Policy Policy Name: The friendly name of a policy which is used to classify the received packets based on the following rules. Local/Remote Address: Protocol Type: Source/ Destination Port: Priority Queue: Specify a packet based on local/remote IP address. By default, the address is which represents all IP Addresses. Port and Protocol Type define all packets for special applications. This field is defined for which type of packet. It has some values such as IP, TCP and UDP. Specify the port number ranges if TCP or UDP protocol is selected. This device supports four queues. When a packet meets a policy rule requirement, it will be put into the responding queue. Otherwise it is assigned the lowest priority to pass through. 29

30 Using the Configuration Menu NAT NAT Configuration: NAT Routing: TCP Timeout: UDP Timeout: TCP Window Limit: TCP MSS Limit: Advanced > Nat To enable or disable NAT routing by checking or unchecking the checkbox. If you disable NAT routing, this device will act as a Bridge or Static Router. Most features, including Load Balance, will be unavailable. If some packets whose port number cannot be translated for special applications, you must input value in port range for Disable Port Translation. During the time that TCP expects to receive the acknowledgement from the destination. During the time that UDP expects to receive the acknowledgement from the destination. The maxmimum number of outstanding packets before TCP receiving an acknowledgement. The largest amount of data that can be transmitted in one TCP packet. 30

31 Using the Configuration Menu NAT Port Options Port Range: Non-Port- Translation: The Source Port Number Range for TCP and UDP protocol. To keep the source port number unchanged for TCP/UDP sessions on the specified Port Range. Some special applications do not allow the source port number to be translated. Specific TCP / UDP Timeout: Set NAT Alias Set NAT Alias: NAT Alias: Enable: Local Lan IP: To define specific Timeout for TCP/UDP sessions on the specified Port Range. The link to NAT Alias setting page. For each alias entry, the Wan IP acts as an alias IP of the host with Local Lan IP to internet via the specified WAN port for the specified Protocol packets. i.e. 1-1 NAT. To activate or deactivate current entry. The IP address of the host in LAN that wants to use the specific WAN IP as its source IP. Wan IP: Protocol: WAN: Back: The IP address used as the source IP of the packets out from the specified host. The protocol that current rule is applied for. The WAN port that current rule is applied for. The link to NAT Configuration page. 31

32 Using the Configuration Menu Tools The Tools tab provides the following options: Admin, Time, System, Firmware, Alert, SNMP, DDNS, UPNP and Misc. Admin Tools > Admin Administrator Settings New Password / Confirm Password: Remote Management Remote Upgrade: Remote Setup: Allowed Remote IP: Access Port: This administrator password protects the configuration for this broadband router. It is recommended that you set a password to prevent other people change the router s configuration. To allow or disallow users to upgrade the firmware of the device through the web page remotely. To allow or disallow users to setup the configuration of the device through the web page remotely. Only the requests from the hosts that its IP address is within the range of the Allowed Remote IP are allowed to Upgrade or Setup remotely. The specific port number used for users to Upgrade or Setup the device remotely. 32

33 Using the Configuration Menu Time NTP Configuration Time Zone: System NTP Servers: To specify one time zone from the time zone list that lists all time differences between GMT and each local time zone. Up to 3 NTP servers can be used for the device to receive the time and date in Greenwich Mean Time (GMT), you can enter its IP or Domain address here. Tools > System 33

34 Using the Configuration Menu System Setting Save Settings To Local Hard Drive: Load Settings Load Settings: User Name / Password: Load Settings From Local Hard Drive: Restore To Factory Default Settings: You can save current system configuration as a text file on a local hard disk, and then use the saved configuration file to upgrade another device later. You can Load the Settings through this web page.( If you are using remote Load, you have to enable Remote Upgrade and Remote Setup from the Admin page first). Enter a password which will be used to login to the router. Select the configuration file from local hard disk. To restore the factory settings to system configuration. Firmware Upgrade Firmware Upgrade Firmware: User Name / Password: Upgrade Software From Local Hard Drive: Tools > Firmware You can upgrade new firmware through this web page.( If you are using remote upgrade, you have to enable Remote Upgrade and Remote Setup from the Admin page first). The password will be authenticated for firmware upgrade. Select the firmware file from local hard disk. 34

35 Using the Configuration Menu Alert Tools > Alert Global Settings Notification on Alert Enable: To enable or disable the Alert in case that one of the WAN ports is disconnected. Excessive Ping: This function is useful to prevent ICMP packets attacks, from WAN or LAN, on the device. It will drop the packets if the ping times are excessive the threshold value Max. Pings Before Notification. And it will send to notify the administrator if Alert is enabled. Alert Configuration Alert Configuration: The purpose of alert is when any of WAN ports is disconnected or malfunction, it will send an message to inform of the recipient. (SMTP) Server Address: User Name: The server address (ex. mail.yourdomain.com) The user name of the address used for authentication. Password: The password of the address used for authentication. Sender Address: The address of the sender. 35

36 Using the Configuration Menu Recipient Address: Send Test The address of the receiver. Click this button will send a test in order to verify the settings are correct. SNMP Tools >SNMP SNMP (Simple Network Management Protocol) SNMP: This page only useful if you an SNMP program which you can use to access the Router and receive the trap alerts. System Information: Community: Trap Targets: This is the system information which will identify this device. It is a relationship between an SNMP agent and a set of SNMP managers that defines authentication, access control, and proxy characteristics. Up to three IP address can be entered. Trap information will be sent to these addresses. 36

37 Using the Configuration Menu DDNS Dynamic DNS Dynamic DNS: Dynamic DNS Service Service: Server Name: User Name: Password: Verify Password: Domain Name: Additional Settings Enable Wildcard: Tools > DDNS This is a technology that people can use to connect to your router using a domain name, instead of an IP address, even if you have a dynamic IP address from your ISP(instead of a static IP address). To specify the service provider. The name of the DDNS server. The username to login to the DDNS server. The password to login to the DDNS server. Re-enter the password to prevent the typing error. The complete hostname to be updated. If enabled, all subdomains of your domain name maps to your current IP address. If disabled, no subdomains of your domain name have an IP address. 37

38 Using the Configuration Menu Enable Backup MX: Mail Exchanger: WAN Port Binding WAN Port Binding: Enable Backup to allow the use of Mail Exchanger. Define mail exchanger for the domain name. If omitted, the mail exchanger will be set to the domain name. If bound on the WAN port, the domain name will be mapped to the IP address of the WAN port. UPnP UPnP Option UPnP Option: UPnP Port Mapping List: Tools >UPnP With UPnP (Universal Plug & Play) function, it can easily setup and configure an entire network, enable discovery and control of networked devices and services. You can set the dynamic port mappings to Internet gateway via UPnP on Windows XP. This will allow you make a connection between applications and the defined device. 38

39 Using the Configuration Menu Misc. External Filters Configuration External Filters Configuration: Tools >Misc To limit the packets passing through the device from WAN side to LAN side. IDENT Port: Block Selected ICMP Types: This port provides a means to determine the identity of a user on a particular TCP connection. By defult, the device is stealth for this port. Enable to make this port closed, not stealth. To prohibit the selected types of ICMP packets from WAN to be passed through the device. 39

40 Using the Configuration Menu Packet Types: System Restart System Restart: DNS Loopback DNS Loopback: Interface Binding SMTP Binding: The types of the ICMP packets that could be blocked. The link to the page to restart system. If there is any domain in your private network. You can setup the mapping table of Domain Name & Private IP for DNS query. To determine if the SMTP packets are bound on the WAN port. SMTP Binding Port: To specify the WAN port that your SMTP traffic is only transmitted on. It could be that you have two accounts from two different ISP. It is best to use only one. IP Sec/PPTP: Enable this to allow UPN connections from PCs on the LAN to senders. Set Protocol & Port Binding Set Protocol & Port Binding: To determine if the SMTP packets are bound on the WAN port. Protocol & Port Binding Protocol & Port Binding: Enable: Source IP: Dest. IP / IP Address: Protocol: Port Range: It is very like SMTP binding, but you must setup extra data like Protocol & Port Range. If all the checking items are met, the packet will be bound on the specified WAN port. To activate or deactivate current rule. The IP address that the packet s source IP will be checked against. The specific IP range that the packet s destination IP will be checked against. There are two forms of Dest. IP: If Subnet is selected, the fields IP Address and Subnet Mask need to be filled. If IP Range is selected, the fields From and To need to be filled. The protocol that the packet s protocol will be checked against. The specific port number range that the packet s destination port number will be checked against. Back WAN: Back: The specific WAN port that the packet will be bound on if all the checking items are met. The link to the main page of Advanced Feature. 40

41 Using the Configuration Menu Status The Status tab provides the following options: Device Info, Log, and Stats Device Info Device Information Device Information: Status > Device Information This page describes the device s interfaces (WAN ports and LAN port) settings and status. Connect/Disconnect: Connect or disconnect PPPoE session immediately. Force Renew: Renew DHCP lease immediately. 41

42 Using the Configuration Menu Log View Log View Log: Log Settings Status > Log The device keeps a running log of events and activities occurring on the device. The log will display up to 100 recent logs. Newer log activities will overwrite the older logs. When the device is rebooted, the logs are automatically cleared. Status > Log > Log Settings 42

43 Using the Configuration Menu Syslog Delivery Sending Out: Keep Sent Messages: Syslog Servers: Log Priority for Modules Log Priority for Modules: Message Status: If checked, device will send syslog messages to other machine (log servers). Note: Even you uncheck it, the system will generate log messages. If checked, the sent messages will be kept on device, otherwise the sent message will be deleted. IP Address: Up to 3 syslog servers can be used. Enable: If checked, the log message will be sent to the server. You can disable or enable each server temporarily. Port: If your syslog server does not use the default port (514), change it. Log Priority Level: The messages are grouped into 8 priority levels, from Emergency to Debug. The lower level it is, the fewer messages it will generate. Emergency is the lowest priority level, and Debug is the highest one. So set priority to Debug will send all generated messages. This feature displays and controls current log priority for each module. For a module with different priorities, the different level of messages will be generated in Syslog. The lower level of log priority for module is, the more messages will be generated. DEBUG is the lowest level of log priority. Messages sent will be kept only when Keep Sent Messages checked. Currently we keep last 100 messages in RAM area, reboot or power-off will clear them. Clear All: Use this button to clear all unsent messages. Submit: It will validate the new settings. Reset: It will reserve current settings in flash. View Syslog: It will display current messages in Syslog. 43

44 Using the Configuration Menu Stats Status > Statistics Refresh Refresh: Get the newest statistics data. Restart Counters Restart Counters: Clear all the statistics counters to 0. Check NAT Detail: NAT Statistics Connection Status: Default Loading Share: Current Loading Share: Current Loading: Current bandwidth: The link to NAT Status page. Check if WAN1 and WAN2 ports are connected or disconnected. Display the default traffic loading between WAN1 and WAN2 ports. Display current traffic loading between WAN1 and WAN2 ports. The number of sessions, Bytes and Packets currently being processed on each port. Current Download and Upload speeds on each WAN port. 44

45 Using the Configuration Menu Interface Statistics Interface Statistics: Load Share: Overall Statistics: This section displays cumulative statistics. Current traffic loading in percent, including the traffic for device itself, on each WAN port. Received: Current incoming traffic loading in KByte, including the traffic for device itself, on each WAN port. Transmited: Current outgoing traffic loading in KByte, including the traffic for device itself, on each WAN port. Total: Current traffic loading in KByte, including the traffic for device itself, on each WAN port. 45

46 Using the Configuration Menu NAT Status NAT Status Refresh: View Connection List: NAT Timeouts: Status > Statistics > NAT Status Get the newest status information. The link to NAT Connection List page. This displays the current timeout values for TCP and UDP connections. 46

47 Using the Configuration Menu TCP Property: NAT Traffic: Connections: Errors: Misc: NAT Connection List: This displays the MSS (Maximum Segment Size) and Maximum Windows size for TCP packets. This section displays statistics for both outgoing (LAN to Internet) and Incoming (Internet to Local) traffic. This displays the current number of active connections. For further details, click the View Connection list button. Statistics are displayed for Checksum errors, number of retries, and number of bad packets. This displays the total IP packets and reserved address. To display the information and status of all the entries in NAT table. NAT Connection List Status > Statistics > NAT Status > View Connection List 47

48 Troubleshooting Troubleshooting This Chapter provides solutions to problems that can occur during the installation and operation of the DI-LB604 QoS Router. We cover various aspects of the network setup, including the network adapters. Please read the following if you are having problems. Note: It is recommended that you use an Ethernet connection to configure the DI-LB604 QoS Router. The computer used to configure the DI-LB604 cannot access the Configuration menu. Check that the Ethernet LED on the DI-LB604 is ON. If the LED is not ON, check that the cable for the Ethernet connection is securely inserted. Check that the Ethernet Adapter is working properly. Please see item 3 (Check that the drivers for the network adapters are installed properly) in this Troubleshooting section to check that the drivers are loaded properly. Check that the IP Address is in the same range and subnet as the DI-LB604. Please see Checking the IP Address in Windows XP in the Networking Basics section of this manual. Note: The IP Address of the DI-LB604 is All the computers on the network must have a unique IP Address in the same range, e.g., x. Any computers that have identical IP Addresses will not be visible on the network. They must all have the same subnet mask, e.g., Do a Ping test to make sure that the DI-LB604 is responding. Go to Start>Run>Type Command>Type ping A successful ping will show four replies. Note: If you have changed the default IP Address, make sure to ping the correct IP Address assigned to the DI-LB

49 Troubleshooting To hard-reset the DI-LB604 to Factory Default Settings, please do the following: Locate the Reset button on the back of the DI-LB604. Use a paper clip to press the Reset button. Hold for about 10 seconds and then release. After the DI-LB604 reboots (this may take a few minutes) it will be reset to the factory Default settings. Resetting the DI-LB604 to Factory Default Settings After you have tried other methods for troubleshooting your network, you may choose to Reset the DI-LB604 to the factory default settings. 49

50 Technical Specifications Technical Specifications VPN Pass Through/ Multi-Sessions PPTP IPSec Device Management Web-Based- Internet Explorer v6 or later; Netscape Navigator v7 or later; or other Java-enabled browsers DHCP Server and Client Advanced Firewall Features NAT with VPN Passthrough (Network Address Translation) MAC Filtering URL Filtering Scheduling Operating Temperature 32ºF to 131ºF (0ºC to 55ºC) Humidity: 95% maximum (non-condensing) Safety and Emissions: LEDs: FCC Power Status LAN (10/100) WAN Physical Dimensions: L = 7.56 inches (192mm) W = 4.65 inches (118mm) H = 1.22 inches (31mm) 50

51 Technical Specifications Power Input: Ext. Power Supply DC 5V, 3A Weight: 10.8 oz. (0.3kg) Warranty: 1 year 51

52 Frequently Asked Questions Frequently Asked Questions 1 Why can t I access the Web-based configuration? When entering the IP Address of the DI-LB604 ( ), you are not connecting to the Internet or have to be connected to the Internet. The device has the utility builtin to a ROM chip in the device itself. Your computer must be on the same IP subnet to connect to the web-based utility. To resolve difficulties accessing a Web utility, please follow the steps below. Step 1: Verify physical connectivity by checking for solid link lights on the device. If you do not get a solid link light, try using a different cable or connect to a different port on the device if possible. If the computer is turned off, the link light may not be on. What type of cable should I be using? The following connections require a Crossover Cable: Computer to Computer Computer to Uplink Port Computer to Access Point Computer to Print Server Computer/XBOX/PS2 to DWL-810 Computer/XBOX/PS2 to DWL-900AP+ Uplink Port to Uplink Port (hub/switch) Normal Port to Normal Port (hub/switch) The following connections require a Straight-through Cable: Computer to Residential Gateway/Router Computer to Normal Port (hub/switch) Access Point to Normal Port (hub/switch) Print Server to Normal Port (hub/switch) Uplink Port to Normal Port (hub/switch) Rule of Thumb: If there is a link light, the cable is right. 52

53 Frequently Asked Questions What s the difference between a crossover cable and a straight-through cable? The wiring in crossover and straight-through cables are different. The two types of cable have different purposes for different LAN configurations. EIA/TIA 568A/568B define the wiring standards and allow for two different wiring color codes as illustrated in the following diagram. *The wires with colored backgrounds may have white stripes and may be denoted that way in diagrams found elsewhere. How to tell straight-through cable from a crossover cable: The main way to tell the difference between the two cable types is to compare the wiring order on the ends of the cable. If the wiring is the same on both sides, it is straight-through cable. If one side has opposite wiring, it is a crossover cable. All you need to remember to properly configure the cables is the pinout order of the two cable ends and the following rules: A straight-through cable has identical ends. A crossover cable has different ends. It makes no functional difference which standard you follow for straight-through cable ends, as long as both ends are the same. You can start a crossover cable with either standard as long as the other end is the other standard. It makes no functional difference which end is which. The order in which you pin the cable is important. Using a pattern other than what is specified in the above diagram could cause connection problems. When to use a crossover cable and when to use a straight-through cable: Computer to Computer Crossover Computer to an normal port on a Hub/Switch Straight-through Computer to an uplink port on a Hub/Switch - Crossover Hub/Switch uplink port to another Hub/Switch uplink port Crossover Hub/Switch uplink port to another Hub/Switch normal port - Straight-through 53

54 Frequently Asked Questions Step 2: Disable any Internet security software running on the computer. Software firewalls like Zone Alarm, Black Ice, Sygate, Norton Personal Firewall, etc. might block access to the configuration pages. Check the help files included with your firewall software for more information on disabling or configuring it. Step 3: Configure your Internet settings. Go to Start>Settings>Control Panel. Double click the Internet Options Icon. From the Security tab, click the button to restore the settings to their defaults. Click to the Connection tab and set the dial-up option to Never Dial a Connection. Click the LAN Settings button. 54

55 Frequently Asked Questions Nothing should be checked. Click OK. Go to the Advanced tab and click the button to restore these settings to their defaults. Click OK. Go to the desktop and close any open windows. Step 4: Check your IP Address. Your computer must have an IP Address in the same range of the device you are attempting to configure. Most D-Link devices use the X range. How can I find my IP Address in Windows 95, 98, or ME? Click on Start, then click on Run. The Run Dialogue Box will appear. Type winipcfg in the window as shown then click OK. 55

56 Frequently Asked Questions The IP Configuration window will appear, displaying your Ethernet Adapter Information. Select your adapter from the drop down menu. If you do not see your adapter in the drop down menu, your adapter is not properly installed. After selecting your adapter, it will display your IP Address, subnet mask, and default gateway. Click OK to close the IP Configuration window. How can I find my IP Address in Windows 2000/XP? Click on Start and select Run. Type cmd then click OK. 56

57 Frequently Asked Questions From the Command Prompt, enter ipconfig. It will return your IP Address, subnet mask, and default gateway. Type exit to close the command prompt. Make sure you take note of your computer s Default Gateway IP Address. The Default Gateway is the IP Address of the D-Link router. By default, it should be How can I assign a Static IP Address in Windows 98/Me? From the desktop, right-click on the Network Neigborhood icon (Win ME - My Network Places) and select Properties. Highlight TCP/IP and click the Properties button. If you have more than 1 adapter, then there will be a TCP/IP Binding for each adapter. Highlight TCP/IP > (your network adapter) and then click Properties. 57

58 Frequently Asked Questions Click Specify an IP Address. Enter in an IP Address that is on the same subnet as the LAN IP Address on your router. Example: If the router s LAN IP Address is , make your IP Address X where X is between Make sure that the number you choose is not in use on the network. Click on the Gateway tab. Enter the LAN IP Address of your router here ( ). Click Add when finished. 58

59 Frequently Asked Questions Click on the DNS Configuration tab. Click Enable DNS. Type in a Host (can be any word). Under DNS server search order, enter the LAN IP Address of your router ( ). Click Add. Click OK twice. When prompted to reboot your computer, click Yes. After you reboot, the computer will now have a static, private IP Address. 59

60 Frequently Asked Questions How can I assign a Static IP Address in Windows 2000? Right-click on My Network Places and select Properties. Right-click on the Local Area Connection which represents your network card and select Properties. Highlight Internet Protocol (TCP/IP) and click Properties. Click Use the following IP Address and enter an IP Address that is on the same subnet as the LAN IP Address on your router. Example: If the router s LAN IP Address is , make your IP Address X where X = Make sure that the number you choose is not in use on the network. Set the Default Gateway to be the same as the LAN IP Address of your router ( ). Set the Primary DNS to be the same as the LAN IP address of your router ( ). 60

61 Frequently Asked Questions The Secondary DNS is not needed or enter a DNS server from your ISP. Click OK twice. You may be asked if you want to reboot your computer. Click Yes. How can I assign a Static IP Address in Windows XP? Click on Start > Control Panel > Network and Internet Connections > Network connections. See the second step for assigning a static IP address in Windows 2000 and continue from there. Step 5: Access the Web management. Open your Web browser and enter the IP Address of your D-Link device in the address bar. This should open the login page for the Web management. Follow instructions to login and complete the configuration. 2 How can I setup my router to work with a Cable modem connection? Dynamic Cable connection (IE AT&T-BI, Cox, Adelphia, Rogers, Roadrunner, Charter, and Comcast). Note: Please configure the router with the computer that was last connected directly to the cable modem. Step 1: Log into the web based configuration by typing in the IP Address of the router (default: ) in your web browser. The username is admin (all lowercase) and the password is blank (nothing). 61

62 Frequently Asked Questions Step 2: Click the Home tab and click the WAN button. Dynamic IP Address is the default value, however, if Dynamic IP Address is not selected as the WAN type, select Dynamic IP Address by clicking on the radio button. Click on Apply and then Continue to save the changes. Step 3: Power cycle the cable modem and router. Turn the cable modem off (first). Turn the router off Leave them off for 2 minutes.** Turn the cable modem on (first). Wait until you get a solid cable light on the cable modem. Turn the router on. Wait 30 seconds. ** If you have a Motorola (Surf Board) modem, leave off for at least 5 minutes. Step 4: Follow step 1 again and log back into the web configuration. Click the Status tab and click the Device Info button. If you do not already have a public IP Address under the WAN heading, click on the DHCP Renew and Continue buttons. 62

63 Frequently Asked Questions Static Cable Connection Step 1: Log into the web based configuration by typing in the IP Address of the router (default: ) in your web browser. The username is admin (all lowercase) and the password is blank (nothing). Step 2: Click the Home tab and click the WAN button. Select Static IP Address and enter your static settings obtained from the ISP in the fields provided. If you do not know your settings, you must contact your ISP. Step 3: Click on Apply and then click Continue to save the changes. Step 4: Click the Status tab and click the Device Info button. Your IP Address information will be displayed under the WAN heading. 63

64 Frequently Asked Questions 3 How can I setup my router to work with DSL or any PPPoE connection? Make sure you disable or uninstall any PPPoE software such as WinPoet or Enternet 300 from your computer or you will not be able to connect to the Internet. Step 1: Upgrade Firmware if needed. (Please visit the D-Link tech support website at: for the latest firmware upgrade information.) Step 2: Take a paperclip and perform a hard reset. With the unit on, use a paperclip and hold down the reset button on the back of the unit for 10 seconds. Release it and the router will recycle, the lights will blink, and then stabilize. Step 3: After the router stabilizes, open your browser and enter into the address window and hit the Enter key. When the password dialog box appears, enter the username admin and leave the password blank. Click OK. If the password dialog box does not come up repeat Step 2. Note: Do not run Wizard. Step 4: Click on the WAN tab on left-hand side of the screen. Select PPPoE. Step 5: Select Dynamic PPPoE (unless your ISP supplied you with a static IP Address). Step 6: In the username field enter ELN/username@earthlink.net and your password, where username is your own username. For SBC Global users, enter username@sbcglobal.net. For Ameritech users, enter username@ameritech.net. For BellSouth users, enter username@bellsouth.net. For Mindspring users, enter username@mindspring.com. For most other ISPs, enter username. Step 7: Maximum Idle Time should be set to zero. Set MTU to 1492, unless specified by your ISP, and set Autoreconnect to Enabled. Note: If you experience problems accessing certain websites and/or issues, please set the MTU to a lower number such as 1472, 1452, etc. Contact your ISP for more information and the proper MTU setting for your connection. Step 8: Click Apply. When prompted, click Continue. Once the screen refreshes, unplug the power to the D-Link router. 64