Contents Package Contents ............................................................................... 6 Minimum System Requirements .............................................................. 6 Introduction ...................................................................................... 7 Features and Benefits .......................................................................... 8 Hardware Overview ............................................................................. 9 Connections .........................................................................................................9 LEDs...................................................................................................................10 Wireless Basics ................................................................................ 11 Standards-based Technology .............................................................................12 Installation Considerations .................................................................................12 Using the Configuration Interface ........................................................... 13 Basic ..................................................................................................................13 Wizard ..........................................................................................................13 Internet Connection Setup Wizard ...........................................................14 Wireless Security Setup Wizard ..............................................................16 WAN .............................................................................................................18 Modes ....................................................................................................18 Advanced ...........................................................................................19 Static WAN Mode ....................................................................................20 DHCP WAN Mode....................................................................................20 PPPoE WAN Mode ..................................................................................21 PPTP WAN Mode ....................................................................................22 L2TP WAN Mode .....................................................................................23 LAN...............................................................................................................23 LAN Settings ...........................................................................................23 DHCP ............................................................................................................24 DHCP Settings.........................................................................................24 Number of Dynamic DHCP Clients ..........................................................24 Add Static DHCP Client ...........................................................................25 2 Table of Contents D-Link Systems, Inc. Table of Contents Static DHCP Client List ............................................................................25 Wireless ........................................................................................................26 Basic Wireless Settings ...........................................................................26 Wireless Security Mode ................................................................................27 WEP ........................................................................................................27 WPA-Personal .........................................................................................28 WPA-Enterprise .......................................................................................28 Advanced ...........................................................................................................29 Virtual Server ...............................................................................................29 Add/Edit Virtual Server ............................................................................30 Virtual Servers List ..................................................................................30 Special Applications......................................................................................31 Application Level Gateway (ALG) Configurations ...................................31 Add/Edit Special Applications Rule ...............................................................32 Special Applications Rules List .....................................................................32 Gaming .........................................................................................................33 Add/Edit Game Rule ..............................................................................33 Game Rules List ......................................................................................33 GameFuelTM ...................................................................................................34 GameFuelTM Setup ...................................................................................34 Add/Edit GameFuelTM Rule .......................................................................35 GameFuel Rules List................................................................................35 Routing .........................................................................................................36 Add/Edit Route ........................................................................................36 Route List ................................................................................................36 Access Control..............................................................................................37 Enabled ...................................................................................................37 Add/Edit Access Control Rule .................................................................37 Access Control Rules List .......................................................................38 Web Filter .....................................................................................................38 Add/Edit Web Site ...................................................................................38 Allowed Web Site List .............................................................................38 3 D-Link Systems, Inc. Table of Contents Mac Address Filters ......................................................................................39 Filter Settings ..........................................................................................39 Add MAC Address ...................................................................................39 MAC Address List....................................................................................39 Firewall .........................................................................................................40 Firewall Settings ......................................................................................40 Inbound Filters..............................................................................................41 Add/Edit Inbound Filter Rule ...................................................................41 Inbound Filter Rules List .........................................................................41 Configuring an Inbound Filter Rule..........................................................42 Advanced Wireless .......................................................................................43 Advanced Wireless Settings ....................................................................43 Tools ................................................................................................................44 Admin ...........................................................................................................44 Password ................................................................................................44 Administration .......................................................................................44 Save and Restore Configuration ..............................................................44 Time..............................................................................................................45 Time Configuration ..................................................................................45 Set the Date and Time .............................................................................45 Schedules .....................................................................................................46 Add/Edit Schedule Rule ..........................................................................46 Schedule Rules List .................................................................................46 Syslog...........................................................................................................47 Email.............................................................................................................47 Email Settings .........................................................................................47 Email Log When Full or on Schedule .......................................................47 System .........................................................................................................48 System Commands .................................................................................48 Firmware.......................................................................................................49 Firmware Information ..............................................................................49 Firmware Upgrade ...................................................................................49 4 D-Link Systems, Inc. Table of Contents Firmware Upgrade Notification Options...................................................49 Dynamic DNS ...............................................................................................50 Status .................................................................................................................51 Device Info....................................................................................................51 General ....................................................................................................51 WAN ........................................................................................................51 LAN .........................................................................................................51 Wireless LAN...........................................................................................52 Wireless ........................................................................................................52 Routing .........................................................................................................52 Logs .............................................................................................................53 Log Options.............................................................................................53 Log Details ..............................................................................................53 Statistics .......................................................................................................53 Network Traffic Stats ...............................................................................53 LAN Statistics ..........................................................................................54 WAN Statistics ........................................................................................54 Wireless Statistics ...................................................................................54 Active Sessions.............................................................................................54 Appendix ......................................................................................... 55 Securing Your Network .....................................................................................55 Glossary .............................................................................................................57 Technical Specifications ...................................................................... 67 Contacting Technical Support ................................................................ 69 Warranty ......................................................................................... 70 Registration ..................................................................................... 74 5 D-Link Systems, Inc. Package Contents D-Link® DGL-4300 GamerLoungeTM Gaming Router Detachable Antenna Cat5 Ethernet Cable Power Adapter (5.0V, 2.5A) CD-ROM with Manual Quick Installation Guide Vertical Stands Rubber Feet Vertical Stands Rubber Feet Package Contents D-Link® DGL-4300 Gaming Router CD-ROM with Manual Ethernet Cable Power Adapter Detachable Antenna Note: Using a power supply with a different voltage than the one included with your product will cause damage and void the warranty for this product. If any of the above items are missing, please contact your reseller. Minimum System Requirements Ethernet-Based Cable or DSL Modem To Change Default Settings PC with 1.2GHz Processor 256MB Memory CD-ROM Drive Ethernet Adapter with TCP/IP Protocol Installed Windows® XP/2000 or Mac® OS X v10.3/v10.2/v10.1 Internet Explorer v6 or Netscape® Navigator v7 6 D-Link Systems, Inc. Introduction The D-Link GamerLoungeTM DGL-4300 High-Speed Wireless Gaming Router is an 802.11g high-performance, wireless router that supports high-speed wireless networking and is designed to provide maximum gaming performance. With top-notch maximum wireless signal rates of up to 108Mbps* and Gigabit Ethernet support for 10/100/1000Mbps LAN connections, rest assured enough bandwidth is available for all your gaming needs. The DGL-4300 incorporates GameFuelTM Technology designed to provide the uninterrupted and flawless gaming experience serious online gamers expect. The DGL-4300's high-performance CPU supports up to 6000 concurrent connections, making it ideal for P2P applications and multiplayer interactivity. Introduction * Maximum wireless signal rate derived from IEEE Standard 802.11g specifications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead lower actual data throughput rate. 7 D-Link Systems, Inc. Features and Benefits Loaded with game-centric features boasting maximum flexibility for configuration and performance Designed for the Gamers Network GameFuel Priority powered platform delivers fully-loaded features boosting network efficiency and performance Enhanced wireless technology for optimal range and connectivity ­ up to 108Mbps* High-Performance CPU ­ ideal for P2P applications and multiplayer interactivity Automatically prioritizes and intelligently manages network traffic to better execute bandwidthsensitive applications such as VoIP and multimedia streaming Enables multi-tasking between other applications without degradation in game connection Pre-configured ports to accommodate up to 256 policies for games and applications Customizable settings to add or modify new applications or game configurations New firmware upgrade notification keeps your D-Link Gaming Router up-to-date Next Generation hardware with one Fast Ethernet 10/100 WAN port and four Gigabit Ethernet 10/100/1000 auto-sensing LAN ports Shamelessly attractive chassis ­ chrome-plated front panel, hypnotizing blue LEDs 5dBi high-gain antenna for exceptional wireless signal Smooth GUI design for seamless device management Protect your wireless data with both Wi-Fi Protected Access (WPA) and 128-bit Wired Equivalent Privacy (WEP) Integrated Stateful Packet Inspection (SPI) firewall and Network Address Translation (NAT) firewall help protect against hackers, wardrivers, and other unauthorized users Create versatile Access Control policies to control network access based on time, date, websites, and/or applications Disable SSID Broadcast and MAC Filtering features help increase your level security to protect against unauthorized access to your wireless network Supports Virtual Private Network (VPN) pass-through to create a secure connection to your day job Features and Benefits 1 Maximum wireless signal rate derived from IEEE Standard 802.11g specifications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead lower actual data throughput rate. 8 D-Link Systems, Inc. Hardware Overview Connections Hardware Overview All Ethernet Ports (WAN and LAN) are auto MDI/MDIX, meaning you can use either a straight-through or a crossover Ethernet cable. Antenna Connector for wireless antenna Receptor for the Power Adapter Auto MDI/MDIX LAN por ts automatically sense the cable type when connecting to Ethernet-enabled computers. The Auto MDI/MDIX WA N port is the connection for the Ethernet cable to the Cable or DSL modem. Pressing the Reset Button restores the router to its or iginal factor y default settings. 9 D-Link Systems, Inc. LEDs Hardware Overview LOCAL NETWORK LEDs A solid light indicates a connection to an Ethernet-enabled computer on ports 1-4. This LED blinks during data transmission WLAN LED This LED will blink to indicate activity on the wireless network POWER LED A solid light indicates a proper connection to the power supply WAN LED A solid light indicates connection on the WAN port. This LED blinks during data transmission 10 D-Link Systems, Inc. Wireless Basics D-Link wireless products are based on industry standards to provide easy-to-use and compatible high-speed wireless connectivity within your home, business, or on public access wireless networks. D-Link wireless products will allow you access to the data you want, when and where you want it. You will be able to enjoy the freedom that wireless networking brings. A WLAN is a cellular computer network that transmits and receives data with radio signals instead of wires. WLANs are used increasingly in both home and office environments, and public areas such as airports, coffee shops and universities. Innovative ways to utilize WLAN technology are helping people to work and communicate more efficiently. Increased mobility and the absence of cabling and other fixed infrastructure have proven to be beneficial for many users. Wireless users can use the same applications they use on a wired network. Wireless adapter cards used on laptop and desktop systems support the same protocols as Ethernet adapter cards. People use wireless LAN technology for many different purposes: Mobility - Productivity increases when people have access to data in any location within the operating range of the WLAN. Management decisions based on real-time information can significantly improve worker efficiency. Low Implementation Costs ­ WLANs are easy to set up, manage, change and relocate. Networks that frequently change can benefit from WLANs ease of implementation. WLANs can operate in locations where installation of wiring may be impractical. Installation and Network Expansion - Installing a WLAN system can be fast and easy and can eliminate the need to pull cable through walls and ceilings. Wireless technology allows the network to go where wires cannot go - even outside the home or office. Scalability ­ WLANs can be configured in a variety of topologies to meet the needs of specific applications and installations. Configurations are easily changed and range from peer-to-peer networks suitable for a small number of users to larger infrastructure networks to accommodate hundreds or thousands of users, depending on the number of wireless devices deployed. Inexpensive Solution - Wireless network devices are as competitively priced as conventional Ethernet network devices. Wireless Basics 11 D-Link Systems, Inc. Standards-based Technology The DGL-4300 Wireless Broadband Router utilizes the new 802.11g standard. The IEEE 802.11g standard is an extension of the 802.11b standard. It increases the data rate up to 54Mbps within the 2.4GHz band, utilizing OFDM technology. This means that in most environments, within the specified range of this device, you will be able to transfer large files quickly or even watch a movie in MPEG format over your network without noticeable delays. This technology works by transmitting high-speed digital data over a radio wave utilizing OFDM (Orthogonal Frequency Division Multiplexing) technology. OFDM works by splitting the radio signal into multiple smaller sub-signals that are then transmitted simultaneously at different frequencies to the receiver. OFDM reduces the amount of crosstalk (interference) in signal transmissions. The DGL-4300 is backwards compatible with 802.11b devices. This means that if you have an existing 802.11b network, the devices in that network will be compatible with 802.11g devices at speeds of up to 11Mbps in the 2.4GHz range. Wireless Basics Installation Considerations The D-Link DGL-4300 lets you access your network, using a wireless connection, from virtually anywhere within its operating range. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to follow these basic guidelines: Keep the number of walls and ceilings between the DGL-4300 and other network devices to a minimum - each wall or ceiling can reduce your D-Link wireless product's range from 3-90 feet (1-30 meters). Position your devices so that the number of walls or ceilings is minimized. Be aware of the direct line between network devices. A wall that is 1.5 feet thick (.5 meters), at a 45-degree angle appears to be almost 3 feet (1 meter) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better reception. Building Materials can impede the wireless signal - a solid metal door or aluminum studs may have a negative effect on range. Try to position wireless devices and computers with wireless adapters so that the signal passes through drywall or open doorways and not other materials. Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate extreme RF noise. 12 D-Link Systems, Inc. Using the Configuration Interface The Configuration Interface can be accessed from your Web browser. Open up your Web browser and type http://192.168.0.1 in the address field and press Enter. The Configuration Interface login screen will appear. By default, there is no password. Click on the Log In button to access the Configuration main screen. Note: If you are online you will see status. Using the Configuration Interface Basic The Basic settings tab contains the Setup Wizards, Internet connection, and network setting options. Wizard The Wizard screen contains two wizards that assist you with the configuration of your D-Link® Gaming Router. Basic > Wizard 13 D-Link Systems, Inc. Using the Configuration Interface Internet Connection Setup Wizard The Internet Connection Setup Wizard will assist you with connecting your D-Link® Gaming RouterTM to the Internet. The step by step guide will prompt you for the necessary information to get you connected. The Internet Connection Setup Wizard guides you through the following basic router setup steps: To begin, click on the Launch Internet Connection Setup Wizard button. The Welcome To The D-Link Setup Wizard screen appears, click Next to continue. Step 1: Set Your Password prompts you to enter a password for the Web-based configuration interface. You must also enter the password in the Verify Password prompt. Step 2: Select Your Time Zone prompts you to select your time zone from the pull-down menu. Step 3: Configure Your Internet Connection prompts you to select your Internet Service Provider from the pull-down menu. If your Internet Service Provider is not listed or you do not know who it is, you can select the connection type manually. 14 D-Link Systems, Inc. Using the Configuration Interface Depending upon your Internet Service Provider or the type of connection you selected in the previous step, one of five screens will appear. If you are unsure of any of the information, please contact your Internet Service Provider (ISP) for details. DHCP Connection (Dynamic IP Address) requires you to enter the MAC address of the computer that was originally connected to your broadband modem. If you are using that computer, click on the Clone Your PC's MAC Address button and the MAC address is automatically copied. If your ISP requires you to enter a Host Name, please do so. Set Username and Password Connection (PPPoE) prompts you to enter your Username and Password. You must also verify the Password. If your ISP requires a Service Name entry, please enter it here. Set Username and Password Connection (PPTP) prompts you to enter your PPTP IP Address, PPTP Subnet Mask, PPTP Gateway IP Address, PPTP Server IP Address, Username, and Password. You must also verify the Password. Set Username and Password Connection (L2TP) prompts you to enter your L2TP IP Address, L2TP Subnet Mask, L2TP Gateway IP Address, L2TP Server IP Address, Username and Password. You must also verify the Password. Set Static IP Address Connection prompts you to enter the IP address, Subnet Mask, Gateway Address, Primary and Secondary DNS address information. Setup Complete will appear after all of the settings have been entered. Click Connect to save your settings and reboot the router. 15 D-Link Systems, Inc. Using the Configuration Interface Wireless Security Setup Wizard The Wireless Security Setup Wizard will assist you with setting up your wireless network. The step by step guide will ask you for the necessary information to secure your wireless network. The Wireless Security Setup Wizard guides you through the following steps: To begin, click on the Launch Wireless Security Setup Wizard button. The Welcome To The D-Link Wireless Security Setup Wizard screen appears, click Next to continue. Step 1: Name Your Wireless Network prompts you to enter a wireless network name for your network. This name is also referred to as SSID. For security purposes, it is highly recommended that you do not use the default name. Step 2: Select A Channel for your Wireless Network prompts you to select the channel that will be used by your router to communicate to wireless devices. Step 3: Secure Your Wireless Network prompts you to select the level of security that you want to use on your wireless network. 16 D-Link Systems, Inc. Using the Configuration Interface Depending upon your selection in Step 3, you will see one of the following screens. Step 4: Set Your Wireless Security Password prompts you to enter a wireless security password between 2 and 20 characters in length. If you selected Best security in step 3, this screen will appear providing you your pre-shared key information. If you selected Better security in step 3, this screen will appear providing you your pre-shared key information. If you selected Good security in step 3, this screen will appear providing you your WEP key information. If you selected None security in step 3, this screen will appear providing you your wireless network name. 17 D-Link Systems, Inc. Using the Configuration Interface WAN The WAN section is where your Internet Connection mode is selected. Your Internet Service Provider (ISP) determines the type of connection that you use. Modes There are five connection modes to choose from as shown below. If you are unsure of your connection settings, contact your Internet Service Provider (ISP) and you can enter the necessary information on the QIG or print this page and write the settings for future reference. Primary DNS Server: _____._____._____._____ Secondary DNS Server: _____._____._____._____ Static: Used when your ISP provides you a set IP address that does not change. The IP information is manually entered in your IP configuration settings. IP Address: _____._____._____._____ Subnet Mask: _____._____._____._____ Default Gateway: _____._____._____._____ DHCP: A method of connection where the ISP assigns your IP address when your computer requests one from the ISP's server. Some ISP's require you to make some settings on your side before your computer can connect to the Internet. Host Name:______________________ PPPoE: A method of connection that requires you to enter a Username and Password (provided by your Internet Service Provider) to gain access to the Internet. Username:______________________ Password:______________________ Service Name (Optional):______________________ PPTP: A method of connection that requires you to enter information provided by your Internet Service Provider to gain access to the Internet. PPTP IP Address: _____._____._____._____ PPTP Subnet Mask: _____._____._____._____ PPTP Gateway IP Address: _____._____._____._____ PPTP Server IP Address: _____._____._____._____ Username:______________________ Password:______________________ L2TP: A method of connection that requires you to enter informatiom provided by your Internet Service Provider to gain access to the Internet. L2TP IP Address: _____._____._____._____ L2TP Subnet Mask: _____._____._____._____ L2TP Gateway IP Address: _____._____._____._____ L2TP Server IP Address: _____._____._____._____ Username:______________________ 18 Password:______________________ Basic > WAN D-Link Systems, Inc. Using the Configuration Interface All five modes have some common configuration options. The Primary and Secondary DNS Server settings are required for Static configurations and optional for DHCP and PPPoE configurations. The Advanced options on the following page can be modified for any of the five connection modes. You should be able to get the Primary DNS and Secondary DNS Servers settings from your router configuration settings, ISP, or your network administrator. Only the primary DNS server address is required, though it is best to have both the primary and secondary addresses. Advanced The Advanced options apply to all WAN modes. Use the Default MTU: This option is enabled by default allowing the router to select the typical MTU settings for the selected WAN interface. If this option is unchecked, the router will use the value assigned in the MTU field. The MTU (Maximum Transmission Unit) is a parameter that determines the largest packet size (in bytes) that the router will send to the WAN. If LAN devices send larger packets, the router will break them into smaller packets. Ideally, you should set this to match the MTU of the connection to your ISP. Typical values are 1500 bytes for an Ethernet connection and 1492 bytes for a PPPoE connection. If the router's MTU is set too high, packets will be fragmented downstream. If the router's MTU is set too low, the router will fragment packets unnecessarily and in extreme cases may be unable to establish some connections. In either case, network performance can suffer. The WAN Port Speed is set to auto by default. If you have trouble connecting the WAN port, you can select the connection type (10 or 100Mbps). This option is disabled by default. By disabling the WAN ping, the router will not respond to requests from a ping command received via the Internet. Pinging public WAN IP addresses is a common method used by hackers to test whether your WAN IP address is valid. Some ISP's may check your computer's MAC address. Each networking device has it's own unique MAC address defined by the hardware manufacturer. Some ISP's record the MAC address of the network adapter in the computer used to initially connect to their service. The ISP will then only grant Internet access to requests from a computer with this particular MAC address. The D-Link router has a different MAC address than the computer that initially connected to the ISP. To resolve this problem, enable this option. When MAC Cloning is enabled, you can enter in a MAC address manually in this field or click the Clone Your Computer's MAC Address button. When this button is clicked, the WAN port will use the MAC Address of the network adapter in the computer that you are using to access the router. 19 D-Link Systems, Inc. MTU: WAN Port Speed: Respond to WAN Ping: Basic > WAN > Advanced MAC Cloning Enabled: MAC Address: Clone Your PC's MAC Address: Using the Configuration Interface Static WAN Mode Used when your ISP provides you a set IP address that does not change. The IP information is manually entered in your IP configuration settings. IP Address: Subnet Mask: Default Gateway: Input the IP Address provided from your router configuration settings, ISP or network administrator. Input the Subnet mask provided from your router configuration settings, ISP or network administrator. Input the Gateway address provided from your router configuration settings, ISP or network administrator. Basic > WAN > Static DHCP WAN Mode A method of connection where the ISP assigns your IP address when your computer requests one from the ISP's server. Some ISP's require you to make some settings on your side before your computer can connect to the Internet. Host Name: Some ISP's may check your computer's HOST name. The HOST name identifies your system to the ISP's server. This way they know your computer is eligible to receive an IP address. In other words, they know that you are paying for their service. The Release button will release the current IP address of the router. The Renew button will request an IP address. DHCP Connection: Basic > WAN > DHCP Basic > WAN > DHCP 20 D-Link Systems, Inc. Using the Configuration Interface PPPoE WAN Mode A method of connection that requires you to enter a Username and Password (provided by your Internet Service Provider) to gain access to the Internet. Username: Password: Verify Password: Service Name: Reconnect Mode: The username that you use to login to your Internet connection. Enter the password associated with your username. Retype the password for verification. If your ISP requires a service name, enter it here. Typically PPPoE connections are not always on. The D-Link Router allows you to set the connection mode: · Always on: A connection to the Internet is always maintained. · On demand: A connection to the Internet is made as needed. · Manual: You have to open up the Web-based management interface and click the Connect button manually any time that you wish to connect to the Internet. Maximum Idle Time: PPPoE Connection: Defines how long the machine can be idle before the PPPoE connection is disconnected. The Disconnect button will immediately terminate any active connection. Note: These buttons become enabled after the router has been rebooted with the PPPoE mode selected. Basic > WAN > PPPoE 21 D-Link Systems, Inc. Using the Configuration Interface PPTP WAN Mode A method of connection that requires you to enter your PPTP IP Address, PPTP Subnet Mask, PPTP Gateway IP Address, PPTP Server IP Address, Username and Password (provided by your Internet Service Provider) to gain access to the Internet. PPTP IP Address: Enter the IP Address provided by your ISP. PPTP Subnet Mask: PPTP Gateway IP Address: PPTP Server IP Address: Username: Password: Verify Password: Maximum Idle Time: PPTP Connection: Enter the Subnet mask provided by your ISP. Enter the Gateway address provided by your ISP. Enter the IP Address of the PPTP server you are connecting to. This information is provided by your ISP. The username that you use to login to your Internet connection. Enter the password associated with your username. Retype the password for verification. Basic > WAN > PPTP Defines how long the machine can be idle before the PPTP connection is disconnected. The Disconnect button will immediately terminate any active connection. Note: These buttons become enabled after the router has been rebooted with the PPTP mode selected. 22 D-Link Systems, Inc. Using the Configuration Interface L2TP WAN Mode A method of connection that requires you to enter your L2TP IP Address, L2TP Subnet Mask, L2TP Gateway IP Address, L2TP Server IP Address, Username and Password (provided by your Internet Service Provider) to gain access to the Internet. L2TP IP Address: L2TP Subnet Mask: Enter the IP Address provided by your ISP. Enter the Subnet mask provided by your ISP. L2TP Gateway IP Address: L2TP Server IP Address: User Name: Password: Verify Password: Maximum Idle Time: L2TP Connection: Enter the Gateway address provided by your ISP. Enter the IP address of the L2TP server you are connecting to. This information is provided by your ISP. The username that you use to login to your Internet connection. Enter the password associated with your username. Retype the password for verification. Defines how long the machine can be idle before the L2TP connection is disconnected. The Disconnect button will immediately terminate any active connection. Note: These buttons become enabled after the router has been rebooted with the L2TP mode selected. Basic > WAN > L2TP LAN Your internal network settings are configured based on the IP Address and Subnet Mask assigned in this section. The IP address is also used to access this Web-based management interface. It is recommended that you use the default settings if you do not have an existing network. LAN Settings IP Address: Default Subnet Mask: RIP Announcement: Gateway Metric: The IP address of the router on the local area network. The local network settings are based on the address assigned here. The subnet mask of your router on the local area network. Used with multiple routers to broadcast routing information. This option is used if you have multiple routers. 23 Basic > LAN D-Link Systems, Inc. Using the Configuration Interface DHCP The DHCP section is where you configure the built-in DHCP Server to assign IP addresses to the computers and other devices on your local area network. DHCP Settings Enable DHCP Server: Once your D-Link Router is properly configured and this option is enabled, the DHCP Server function will assign your network devices the necessary information to connect to the LAN and Internet. This eliminates the need to manually configure each device on your network with IP settings. Note: The devices on your network must have TCP/IP bound to the Ethernet connection with the "DHCP" or "Obtain an IP address automatically" option enabled. DHCP IP Address Range: This option defines the range of addresses available for the Router to assign to your internal network. If you have any devices using static IP addresses, be sure the addresses do not fall within the range defined here. A Static IP address is one that is entered in manually on the device. Example: Your D-Link Router uses an IP address of 192.168.0.1. You've assigned a computer designated as a Web server with a static IP address of 192.168.0.3. You've assigned another computer designated as an FTP server with a static IP address of 192.168.0.4. The starting IP address for your DHCP server needs to be 192.168.0.5 or above. DHCP Lease Time: The amount of time a computer may have an IP address before it is required to renew the lease. The lease functions just as a lease on an apartment would. The initial lease designates the amount of time before the lease expires. If the tenant wishes to retain the address when the lease expires then a new lease is established. If the lease expires and the address is no longer needed, then another tenant may use the address. Basic > DHCP Number of Dynamic DHCP Clients In this section, you can see what LAN devices are currently leasing IP addresses. The DHCP Client table displays the number of clients that are receiving an IP address from the router. The computer name, MAC address, and IP address assigned to each computer are displayed here as well. You can Revoke IP addresses in this section. The revoke option allows you to tale away a leased IP address from a client. This feature is useful for freeing up addresses when the client table is full or nearly full. Be sure to only revoke addresses from devices that are no longer needed on the network. 24 D-Link Systems, Inc. Using the Configuration Interface Add Static DHCP Client Static DHCP Clients receive the same IP address all the time. This is almost the same as if a device has a static IP address except that it must still actually request an IP address from the D-Link Router. The D-Link Router will provide the device the same IP address all the time. Servers on your network should either use a static IP address or this option. To input the MAC address of your system, enter it in manually or connect to the D-Link Router's Web-Management interface from the system and click the Copy Your PC's MAC Address button. A MAC address is usually located on a sticker on the bottom of a network device. The MAC address is comprised of twelve digits. Each pair of hexadecimal digits are usually separated by dashes or colons such as 00-0D-88-11-22-33 or 00:0D:88:11:22:33. If your network device is a computer and the network card is already located inside the computer, you can connect to the D-Link Router from the computer and use the Copy Your PC's MAC Address option to enter the MAC address. Example: You have an FTP server that you want to share files over the Internet. You can connect to the D-Link Router from the computer designated as the FTP server. 1. Enter a designated IP address somewhere between the Starting IP and Ending IP addresses. 2. Click the Copy Your PC's MAC Address button and the D-Link Router will detect the MAC address and enter it automatically. 3. The computer name can be entered in for reference but is not required. 4. Click the OK button and then click on the Save Settings button at the top of the page. The IP address will now only be assigned to the designated computer and it will always receive the same IP address as long as it uses the same Ethernet adapter. Note: If you replace the Ethernet adapter in a computer that is using Static DHCP, you will need to Copy the PC's MAC Address again because every Ethernet adapter has a unique MAC address. The same goes for any network device. If you replace a network device such as a print server, you will need to input the MAC address of the new print server into the Static DHCP configuration. Static DHCP Client List Entries on this list can be enabled/disabled by toggling the Enable checkbox. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 25 D-Link Systems, Inc. Using the Configuration Interface Wireless The wireless section is used to configure the wireless settings for your D-Link Router. Please note that changes made on this section may also need to be duplicated on your Wireless Client. Basic Wireless Settings Enable Wireless Radio: Wireless Network Name: Visibility Status: This option turns off and on the wireless connection feature of the router. If this is not enabled, you cannot connect using a wireless network adapter. When you are browsing for available wireless networks, this is the name that will appear in the list (unless Visibility Status is set to Invisible, see below). This name is also referred to as the SSID. The Invisible option allows you to hide your wireless network. When this option is set to Visible, your wireless network name is broadcast to anyone within the range of your signal. If you're not using encryption then they could connect to your network. When Invisible mode is enabled, you must enter the Wireless Network Name (SSID) manually to connect to the network. With this box selected, the router will automatically choose the best channel. Select the channel with the clearest signal. By default the transmission rate will automatically select the fastest rate. You have the option of selecting the speed if necessary. If all of your devices can connect in 802.11g Mode then leave the setting at 802.11g only. If you have some devices that are 802.11b than you can change the mode to Mixed. Super G Turbo Modes must use channel 6 for transmission and 802.11 Mode must be set to 802.11g. · Super G without Turbo: Performance enhancing features such as Packet Bursting, FastFrames, and Compression. · Super G with Static Turbo: Mode is not backwards compatible with non-Turbo (legacy) devices. Static turbo mode is always on and is only enabled when all devices on the wireless network are Super G with Static Turbo enabled. · Super G with Dynamic Turbo: Mode is backwards compatible with non-Turbo (legacy) devices. Dynamic Turbo mode is only enabled when all devices on the wireless network are Super G with Dynamic Turbo enabled. Basic > Wireless Auto Channel Select: Channel: Transmission Rate: 802.11 Mode: Super GTM Mode: 26 D-Link Systems, Inc. Using the Configuration Interface Wireless Security Mode To protect your privacy, use the wireless security mode to configure the wireless security features. This device supports three wireless security modes including: WEP, WPA-Personal, and WPAEnterprise. WEP is the original wireless encryption standard. WPA provides a higher level of security. WPA-Personal does not require an authentication server. The WPA-Enterprise option does require a RADIUS authentication server. WEP A method of encrypting data for wireless communication intended to provide the same level of privacy as a wired network. WEP is not as secure as WPA encryption. To gain access to a WEP network, you must know the key. The key is a string of characters that you create. When using WEP, you must determine the level of encryption. The type of encryption determines the key length. 128-bit encryption requires a longer key than 64-bit encryption. Keys are defined by entering in a string in HEX (hexadecimal - using characters 0-9, A-F) or ASCII (American Standard Code for Information Interchange ­ alphanumeric characters) format. ASCII format is provided so you can enter a string that is easier to remember. The ASCII string is converted to HEX for use over the network. Four keys can be defined so that you can change keys easily. A default key is selected for use on the network. Example: 64-bit hexadecimal keys are exactly 10 characters in length. (12345678FA is a valid string of 10 characters for 64-bit encryption) 128-bit hexadecimal keys are exactly 26 characters in length. (456FBCDF123400122225271730 is a valid string of 26 characters for 128-bit encryption) 64-bit ASCII keys are exactly 5 characters in length (DMODE is a valid string of 5 characters for 64-bit encryption) 128-bit ASCII keys are exactly 13 characters in length (2002HALOSWIN1 is a valid string of 13 characters for 128-bit encryption) 27 D-Link Systems, Inc. Using the Configuration Interface WPA-Personal This option uses Wi-Fi Protected Access with a Pre-Shared Key (PSK). Pre-Shared Key: The key is entered as a pass-phrase of up to 63 characters in ASCII format at both ends of the wireless connection. The pass-phrase cannot be shorter than 8 characters. The pass-phrase is used to generate session keys that are unique for each wireless client. The encryption algorithm used to secure the data communication. TKIP (Temporal Key Integrity Protocol) provides per packet key generation and is based on WEP. AES (Advanced Encryption Standard) is a very secure block based encryption. The amount of time before the group key used for broadcast and multicast data is changed. Cipher Type: Group Key Update Interval: WPA-Enterprise This option works with a RADIUS server to authenticate wireless clients. Wireless clients should have established the necessary credentials before attempting to authenticate to the Server through the Gateway. Furthermore, the RADIUS Server may need to be configured to allow this Gateway to authenticate users. Cipher Type: Group Key Update Interval: Authentication Timeout: RADIUS Server IP Address: RADIUS Server Port: RADIUS Server Shared Secret: MAC Address Authentication: The method in which the pre-shared key is changed. The amount of time before the group key used for broadcast and multicast data is changed. Amount of time before a client is required to re-authenticate. The IP address of the authentication server. The port number used to connect to the authentication server. A passphrase that must much with the authentication server. If this is selected then the user will need to connect from the same computer whenever logging into the wireless network. 28 D-Link Systems, Inc. Advanced The Advanced options allow you to configure a variety of advanced features including ports, application priority, Internet access, filters, and advanced wireless settings. Using the Configuration Interface Virtual Server The Virtual Server option gives Internet users access to services on your LAN. This feature is useful for hosting online services such as FTP, Web, or Game Servers. For each Virtual Server, you define a public port on your router for redirection to an internal LAN IP Address and port. Example: You are hosting a Web Server on a PC that has Private IP Address of 192.168.0.50 and your ISP is blocking Port 80. 1. Name the Virtual Server Rule (ex. Web Server) 2. Enter in the IP Address of the machine on your LAN ­ 192.168.0.50 3. Enter the Private Port as [80] 4. Enter the Public Port as [8888] 5. Select the Protocol - TCP 6. Ensure the schedule is set to Always 7. Check the Add Rule to add the settings to the Virtual Server List 8. Repeat these steps for each Virtual Server Rule you wish to add. After the list is complete, click Save Settings at the top of the page. With this Virtual Server Rule all Internet traffic on Port 8888 will be redirected to your internal web server on port 80 at IP Address 192.168.0.50. Advanced > Virtual Server 29 D-Link Systems, Inc. Using the Configuration Interface Add/Edit Virtual Server Virtual Server Rule: IP Address: Protocol: Private Port: Public Port: Schedule: Name of the virtual server, such as Web Server. The IP address of the system on your internal network that will provide the virtual service, such as 192.168.0.50. Select the protocol used by the service. The port that will be used on your internal network. The port that will be accessed from the Internet. Select a schedule for when this rule is in effect. If you do not see the schedule you need in the list of schedules, go to the Tools -> Schedules screen and create a new schedule. Saves the new rule or modified existing rule to the Rules list. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. Save: Virtual Servers List Entries on this list can be enabled/disabled by toggling the Enable checkbox. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 30 D-Link Systems, Inc. Using the Configuration Interface Special Applications The Special Application section is used to open single or multiple ports on your router when the router senses data sent to the Internet on a `trigger' port or port range. Special Applications rules apply to all computers on your internal network. Application Level Gateway (ALG) Configurations Here you can enable or disable ALG's. Some protocols and applications require special handling of the IP payload to make them work with network address translation (NAT). Each ALG provides special handling for a specific protocol or application. A number of ALGs for common applications are enabled by default. Allows multiple machines on the LAN to connect to their corporate network PPTP: using PPTP protocol. IPSec VPN: Allows multiple VPN clients to connect to their corporate network using IPSec. Some VPN clients support traversal of IPSec through NAT. This ALG may interfere with the operation of such VPN clients. If you are having trouble connecting with your corporate network, try turning this ALG off. Please check with the system adminstrator of your corporate network whether your VPN client supports NAT traversal. Allows applications that use Real Time Streaming Protocol to receive streaming media from the internet. QuickTime and Real Player are some of the common applications using this protocol. Allows FTP clients and servers to transfer data across NAT. Refer to the Advanced -> Virtual Server page if you want to host an FTP server. Allows Microsoft NetMeeting clients to communicate across NAT. Note that if you want your buddies to call you, you should also set up a virtual server for NetMeeting. Refer to the Advanced -> Virtual Server page for information on how to set up a virtual server. Allows devices and applications using VoIP (Voice over IP) to communicate across NAT. Some VoIP applications and devices have the ability to discover NAT devices and work around them. This ALG may interfere with the operation of such devices. If you are having trouble making VoIP calls, try turning this ALG off. Allows Windows Media Player, using MMS protocol, to receive streaming media from the internet. Allows multiple machines on the LAN to connect to their corporate network using the L2TP protocol. Allows all of the Windows Messenger functions to work properly through the router. 31 D-Link Systems, Inc. Advanced > Special Applications RTSP: FTP: NetMeeting: SIP: MMS: L2TP: Windows Messenger: Using the Configuration Interface Add/Edit Special Applications Rule The Special Application section is used to open single or multiple ports on your router when the router senses data sent to the Internet on a "trigger" port or port range. Special Applications rules apply to all computers on your internal network. Rule Name: Enter a name for the Special Application Rule, for example Game App, which will help you identify the rule in the future. You can also select from a list of common applications, and the remaining configuration values will be filled in accordingly. Enter the outgoing port range used by your application. Select the outbound protocol used by your application. Enter the port range that you want to open up to Internet traffic. Select the protocol used by the Internet traffic coming back into the router through the opened port range. Select a schedule for when this rule is in effect. If you do not see the schedule you need in the list of schedules, go to the Tools -> Schedules screen and create a new schedule. Saves the new rule or modified existing rule to the Rules list. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. Trigger Port Range: Trigger Port Protocol: Input Port Range: Input Port Protocol: Schedule: Save: Special Applications Rules List Entries on this list can be enabled/disabled by toggling the Enable checkbox. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 32 D-Link Systems, Inc. Using the Configuration Interface Gaming The Gaming section is used to open multiple ports or a range of ports in your router and redirect data through those ports to a single PC on your network. This feature allows you to enter ports in various formats: Add/Edit Game Rule Rule Name: Give the Gaming Rule a name that is meaningful to you, such as Game Server. You can also select from a list of pre-defined rules for many popular games. If you have any trouble with pre-defined rules, verify whether the port values have changed since the list was created. You also must fill in the IP address field. Enter the local network IP address of the system hosting the game server, such as 192.168.0.50. Enter the TCP ports to open, such as 6159-6180, 99 Enter the UDP ports to open, such as 6159-6180, 99 Select a schedule for when this rule is in effect. If you do not see the schedule you need in the list of schedules, go to the Tools -> Schedules screen and create a new schedule. Saves the new rule or modified existing rule to the Rules list. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. Advanced > Gaming IP Address: TCP Ports To Open: UDP Ports To Open: Schedule: Save: Game Rules List Entries on this list can be enabled/disabled by toggling the Enable checkbox. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 33 D-Link Systems, Inc. Using the Configuration Interface GameFuelTM The GameFuelTM option helps improve your network gaming performance by prioritizing applications. By default the GameFuel settings are disabled and application priority is not classified automatically. GameFuelTM Setup Enable GameFuel: This option is disabled by default. Enable this option for better performance and experience with online games and other interactive applications, such as VoIP. This option is enabled by default when the GameFuel option is enabled. This option will allow your router to automatically determine which programs should have network priority. This option should be enabled when you have a slot Internet uplink. It helps to reduce the impact that large low priority network packets can have on more urgent ones. This option is enabled by default when the GameFuel option is enabled. This option will allow your router to automatically determine the uplink speed of your Internet connection. This displays the detected uplink speed. The speed at which data can be transferred from the router to your ISP. This is determined by your ISP. ISP's often speed as a download/upload pair. For example, 1.5Mbits/284Kbits. Using this example, you would enter 284. Alternatively you can test your uplink speed with a service such as www.dslreports.com. By default, the router automatically determines whether the underlying connection is an xDSL/Frame-relay network or some other connection type (such as cable modem or Ethernet), and it displays the result as Detected xDSL or Frame Relay Network. If you have an unusual network connection in which you are actually connected via xDSL but for which you configure either "Static" or "DHCP" in the WAN settings, setting this option to xDSL or Other Frame Relay Network ensures that the router will recognize that it needs to shape traffic slightly differently in order to give the best performance. Choosing xDSL or Other Frame Relay Network causes the measured uplink speed to be reported slightly lower than before on such connections, but gives much better results. When Connection Type is set to automatic, the automatically detected connection type is displayed here. Automatic Classification: Dynamic Fragmentation: Automatic Uplink Speed: Measured Uplink Speed: Uplink Speed: Advanced > GameFuel Connection Type: Detected XDSL or other Frame Relay Network: 34 D-Link Systems, Inc. Using the Configuration Interface Add/Edit GameFuel Rule TM Automatic classification should be adequate for most applications. GameFuel rules identify a specific message flow and assign priority to that flow. Name: Priority: Protocol: Source IP Range: Source Port Range: Destination IP Range: Destination Port Range: Save: Create a name for the rule that is meaningful to you. The priority of the message flow is entered here. O receives the highest priority (most urgent) and 255 receives the lowest priority. The protocol used by the messages. The rule applies to a flow of messages whose LAN-side IP address is within the range set here. The rule applies to a flow of messages whose LAN-side port number is within the range set here. The rule applies to a flow of messages whose WAN-side IP address is within the range set here. The rule applies to a flow of messages whose WAN-side port number is within the range set here. Saves the new rule or modified existing rule to the Rules list. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. GameFuel Rules List Entries on this list can be enabled/disabled by toggling the Enable checkbox. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 35 D-Link Systems, Inc. Using the Configuration Interface Routing Add/Edit Route Adds a new route to the IP routing table or edits an existing route. Enable: Destination IP: Specifies whether the entry will be enabled or disabled. The IP address or network that the packets will be attempting to access Note: 192.168.1.0 with a Netmask of 255.255.255.0 means traffic will be routed to the entire 192.168.1.x network. Netmask: Used to specify which portion of the Destination IP signifies the network trying to be accessed and which part signifies the host that the packets will be routed to Note: 255.255.255.255 is used to signify only the host that was entered in the Destination IP field. Gateway: Specifies the next hop to be taken if this route is used. A gateway of 0.0.0.0 implies there is no next hop, and the IP address matched is directly connected to the router on the interface specified: LAN or WAN. Specifies the interface, LAN or WAN, that the IP packet must use to transit out of the router when this route is used. The amount of hops it will take to reach the Destination IP or network. A hop is considered to be traffic passing through a router from one network to another. If there is only one router between your network and the Destination network, then the Metric value would be 1. Saves the new rule or modified existing rule to the Rules list. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. Advanced > Routing Interface: Metric: Save: Route List This section shows the current routing table entries. Certain required routes are predefined and cannot be changed. Entries on this list that can modified can be enabled/disabled by toggling the Enable checkbox. Editable entries can be modified by clicking on the paper and pencil icon. To delete an editable entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 36 D-Link Systems, Inc. Access Control The Access Control section allows you to control access in and out of your network. Use this feature as Parental Controls to only grant access to approved sites, limit web access based on time or dates, and/or block access from applications like P2P utilities or games. Using the Configuration Interface Enabled By default the Access Control feature is disabled. If you enable Access Control, every device on the LAN must either have a static IP address (that is one that is not in the DHCP range) or must be in the Static DHCP Client List (see Basic > DHCP). When Access Control is disabled, every device on the LAN is permitted to access the Internet. However, if you enable Access Control, every device on the LAN that needs to access the Internet must have an Access Control rule that explicitly permits it to access the Internet. Devices that do not have an Access Control Rule cannot access the Internet. When Access Control is enabled, the options below will appear: Add/Edit Access Control Rule Policy Name: Address Type: IP Address: Create a name for this access control policy that is meaningful to you. Typically this would be a system name or user name such as Rob's PC. Select IP, MAC, or Others to apply this rule to the corresponding address type. The local network IP address of the machine that you want the access control rule to apply to. Example: 192.168.0.50. Make sure that this is a static IP address or the system is in the static DHCP Client list (See Basic > DHCP). The MAC address of the machine that you want the access control rule to apply to. Select a schedule of times when you want the policy to apply. If you do not see the schedule you need in the list of schedules, go to the Tools > Schedules screen and create a new schedule. With this option enabled, the specified system will only have access to the Web sites listed in the Web filter section. If this option is enabled, all of the Web sites visited by the specified machine will be logged. By clicking the Filter Ports >> button you can specify that the rule enables access only to specific IP addresses and ports. Saves the new or edited access control rule in the Access Control Rules List. Repeat the process, creating an Access Control Rule for each of the devices on your LAN that needs access to the Internet. When finished updating Access Control Rules, you must still click the Save Settings button at the top of the page to make changes effective and permanent. 37 Advanced > Access Control Machine Address: Schedule: Apply Web Filter: Log Internet Access: Filter Ports: Save: D-Link Systems, Inc. Using the Configuration Interface Access Control Rules List This section shows the current Access Control rules. Any device that does not have a rule, cannot access the Internet. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. Web Filter The Web Filter section is where you add the Web site to be used for Access Control. Add/Edit Web Site This field is where you can add Web sites to the Allowed Web List. The Allowed Web List is used for systems that have the Web filter option enabled in Access Control. Enable: Web Site: Entries in the Allowed Web Site List can be activated or deactivated with this checkbox. New entries are activated by default. Enter the URL (address) of the web site that you want to allow (such as google.com). Enter the most inclusive domain name. For instance, entering dlink.com will give you access to www.dlink.com and support.dlink.com. Do not enter the http:// preceding the URL. Note: Many web sites construct pages with images and content from other web sites. Access will be forbidden if you do not enable all of the web sites used to construct a page. For example, to access my.yahoo.com, you must enable access to yahoo.com, yimg.com, and doubleclick.net. Save: Saves the new or modified Allowed Web Site in the Allowed Web Site List. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. Advanced > Web Filter Allowed Web Site List This section lists the currently allowed web sites. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 38 D-Link Systems, Inc. Using the Configuration Interface Mac Address Filters The MAC (Media Access Controller) Address filter section is used to control network access based on the MAC Address of the network adapter. A MAC address is a unique ID assigned by the manufacturer of a networking device. This feature can be configured to ALLOW or DENY network/ Internet access. Filter Settings Enable MAC Address Filter: Mode: When this is enabled, depending on the mode selected, computers are granted or denied network access based on their MAC address. When Allow is selected, only computers with MAC addresses listed in the MAC Address List are granted network access. When Deny is selected, any computer with a MAC address listed in the MAC Address List When this is selected, the MAC address filters will be applied to wireless network clients. When this is selected, the MAC address filters will be applied to wired network clients. Advanced > MAC Address Filter Filter Wireless Clients: Filter Wired Clients: Add MAC Address Enable: MAC Address: Save: MAC address entries are activated or deactivated with this checkbox. Enter the MAC address of the desired computer or connect to the router from the desired computer and click Copy Your PC's MAC Address button. Saves the new or modified MAC address in the MAC Address List. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. MAC Address List This section lists the current MAC address filters. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 39 D-Link Systems, Inc. Using the Configuration Interface Firewall A firewall protects your network from the outside world. The D-Link Gaming Router offers a firewall type functionality. The SPI feature helps prevent cyber attacks. Sometimes you may want a computer exposed to the outside world for certain types of applications. If you choose to expose a computer, you cam enable DMZ. DMZ is short for Demilitarized Zone. This option will expose the chosen computer completely to the outside world. Firewall Settings Enable SPI: SPI (Stateful Packet Inspection, also known as dynamic packet filtering) helps to prevent cyber attacks by tracking more state per session. It validates that the traffic passing through the session conforms to the protocol. When SPI is enabled, the extra state information will be reported on the Status > Active sessions page. If an application has trouble working from behind the router, you can expose one computer to the Internet and run the application on that computer. Note: Placing a computer in the DMZ may expose that computer to a variety of security risks. Use of this option is only recommended as a last resort. DMZ IP Address: Specify the IP address of the computer on the LAN that you want to have unrestricted Internet communication. If this computer obtains it's IP address automatically using DHCP, be sure to make a static reservation on the Basic > DHCP page so that the IP address of the DMZ machine does not change. Advanced > Firewall Enable DMZ: After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 40 D-Link Systems, Inc. Using the Configuration Interface Inbound Filters The Inbound Filters option is an advanced method of controlling data received from the Internet. With this feature you can configure inbound data filtering rules that control data based on IP Address, Protocol, and/or Port. The Inbound Filter option is best suited for custom applications. For most applications you should use Virtual Server, Special Applications, or the Gaming section to create rules that will allow applications to communicate through the router. Add/Edit Inbound Filter Rule Enable: Name: Action: Source IP Range: Protocol: Source Port Range: Public Port Range: Schedule: Enables inbound filtering. Enter a name for the rule that is meaningful to you. The rule can be set to either allow or deny applicable messages. Defines the range of Internet addresses this rule applies to. Select the protocol used for this rule. Enter the range of ports that this rule applies to. Enter the range of WAN side ports associated with the servers on the LAN that this rule applies to. Select a schedule for the times when this rule should be in effect. If you do not see the schedule you need in the list of schedules, go to the Tools > Schedules screen and create a new schedule. Check this option if you want the router to add an entry to the log whenever a rule is enforced. Saves the new rule or modified existing rule to the Rules list. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. Advanced > Inbound Filters Log: Save: Inbound Filter Rules List This section lists the current Inbound Filter rules. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 41 D-Link Systems, Inc. Using the Configuration Interface Configuring an Inbound Filter Rule When the Rule List is empty or none of the rules are enabled, all inbound data that corresponds to a connection that originated from inside the router or which corresponds to a Virtual Server, Gaming, or Special Application Rule is ALLOWED by default. When rules are configured, the router compares incoming data packets against the rules in the list. It is very important to understand that the router examines each rule one by one in the order that they are listed in the Rule list until it finds a match. The packet will either be DENIED (Dropped) or ALLOWED. Once a match has been made, no further rules will be examined for that packet. If no rules match the data packet, it is ALLOWED. This means that to allow only a specific subset of traffic usually requires more than one rule to be entered. Example: You have configured a game server, using the Advanced > Gaming page, to play HALO: Combat Evolved with some friends. You would like to limit the access to your network and server to specific times of the day and only to your friends. Next you would define a schedule on the Tools > Schedule page, called Gametime, which specifies a schedule of Friday and Saturday between 7PM and 11PM. All of your friends use the same service provider and have IP addresses 67.150.220.117, 67.150.231.43, and 67.150.231.75. You have an option of defining a set of rules to match each one of these addresses individually or you may just decide that using an IP range that covers all of them is sufficient for your needs. The first rule is to configure a DENY rule that will catch all of the traffic that arrives on these ports but does not match data from the sources you want to have access to your network. It is important to enter the DENY rule first since all subsequent rules will be added higher in the list and will be checked first. It should look similar to the figure on the right. Notice that it covers all Source IP Address, Source Ports, and Times (Always), but is specifically tied to the Public Ports defined in the Game Rule List. This is because you do not want to accidentally block traffic for other applications. It is a good idea to turn on the log for this rule so that you can check in the log for anything that is filtered inappropriately. Next configure the ALLOW rules. In the example on the right, two rules are used to cover the three IP addresses. 42 D-Link Systems, Inc. Using the Configuration Interface Advanced Wireless Advanced Wireless Settings Fragmentation Threshold: This setting should remain at its default setting of 3200. If you experience a high packet error rate, you may slightly adjust your "Fragmentation" value somewhere in the between the recommended range of 256 to 3200. Setting the Fragmentation value too low may result in poor performance. This setting should remain at its default setting of 3200. If you encounter inconsistent data flow, only minor modifications to the value are recommended. Beacons are packets sent by a wireless router to synchronize wireless devices. Specify a Beacon Period value between 20 and 1000. The default value is set to 100 milliseconds. The default value is set to 1. Valid settings are between 1 and 255. A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages. When the wireless router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. Wireless clients hear the beacons and awaken to receive the broadcast and multicast messages. This enables 802.11d opration. 802.11d is a wireless specification developed to allow implementation of wireless networks in countries that cannot use the 802.11 standard. This feature should only be enabled if you are in a country that requires it. When WDS is enabled, this access point functions as a wireless bridge and is able to wirelessly communicate with other AP's via WDS links. Note: WDS is incompatible with WPA. Both features cannot be used at the same time. A WDS link is bidirectional so this AP must know the MAC address (creates the WDS link) of the other AP, and the other AP must have a WDS link back to this AP (the router). WDS AP MAC Address: Specifies one-half of the WDS link. The other AP must also have the MAC address of this AP (the router) to create the WDS link back to the router. RTS Threshold: Beacon Period: Advanced > Advanced Wireless DTIM Interval: 802.11d Enable: WDS Enable: 43 D-Link Systems, Inc. Tools Admin The Admin option is used to set a password for access to the Web-based management. By default there is no password configured. It is highly recommended that you create a password to keep your new router secure. Using the Configuration Interface Password Password: Enter a password the will grant access to the Web-based management interface. Administration Gateway Name: Enable Remote Management: Remote Management Server Port: Admin Idle Timeout: The name of the router can be changed here. Enabling this allows you to manage the router from anywhere with an Internet connection. The port that will be accessed from the Internet. The amount of time before the administration session is closed when there is no activity. Note: This applies to local or remote administration. Tools > Admin Save and Restore Configuration Save Settings: This option allows you to save the router configuration to a file on your computer. Be sure to save the configuration before performing a firmware upgrade. Use this option to load previously saved router configuration settings. Restore Settings: 44 D-Link Systems, Inc. Using the Configuration Interface Time The Time Configuration option allows you to configure, update, and maintain the correct time on the internal system clock. From this section you can set the time zone that you are in and set the Time Server. Daylight Saving can also be configured to automatically adjust the time when needed. Time Configuration Time Zone: Daylight Saving Enable: Daylight Saving Offset: Synchronize time with NTP server: NTP Server: Select your local time zone from pull down menu. Check this option if your location observes daylight saving time. Select the time offset if your location observes daylight saving time. Select this option if you want the router's clock synchronized to a Time Server over the Internet. If you are using schedules or logs, this is the best way to ensure that the schedules and logs are kept accurate Select a Time Server for synchronization. You can type in the address of a time server or select one from the list. If you have trouble using one server, select another. Tools > Time Set the Date and Time If you do not have the NTP Server option in effect, you can either manually set the time for your router here or you can click the Copy Your Computer's Time Settings button to copy the time from the computer you are using (Note: Be sure the computer's time is set correctly). Note: If the router loses power for any reason, it cannot keeps its clock running and will not have the correct time when it is started again. To maintain the correct time for schedules and logs, either you must enter the correct time after you restart the router or you must enable the NTP Server option. 45 D-Link Systems, Inc. Using the Configuration Interface Schedules Schedules can be created for use with enforcing rules. For example, if you want to restrict web access to Mon-Fri from 3pm to 8pm. You could create a schedule selecting Mon, Tue, Wed, Thu, and Fri and enter a Start Time of 3pm and End Time of 8pm. Add/Edit Schedule Rule Schedule Name: Day(s): All Day: Start Time: Name the schedule, such as Weekday rule. Place a checkmark in the boxes for the desired days or select the All Week radio button to select all seven days of the week. Select this option if you want this schedule in effect all day for the selected day(s). If you don't use the All Day option, then you enter in the time here. The start time is entered in two fields. The first box is for the hour and the second box is for the minute. Email events are triggered only by the start time. The end time is entered in the same format as the start time. The hour in the first box and the minutes in the second box. The end time is used for most other rules, but is not used for email events. Saves the new or modified Schedule in the Schedule Rules List. When you are done editing the settings, you must click the Save Settings button at the top of the page to make the changes effective and permanent. Tools > Schedules End Time: Save: Schedule Rules List This list displays all of the currently defined schedules. Entries can be modified by clicking on the paper and pencil icon. To delete an entry, click on the trash can icon. After you've completed all modifications or deletions, you must click the Save Settings button at the top of the page to save your changes. The router must reboot before new settings will take effect. You will be prompted to Reboot the Device or Continue. If you need to make additional settings changes, click Continue. If you are finished with your configuration settings, click the Reboot the Device button. 46 D-Link Systems, Inc. Using the Configuration Interface Syslog This section allows you to archive your log files to a Syslog Server. Enable Logging To Syslog Server: Syslog Server IP Address: Enable this option to output the router logs to a Syslog Server on your network. Enter the IP address of the Syslog Server. Tools > Syslog Email The Email feature can be used to send the system log files, router alert messages, and firmware update notification to your email address. Email Settings Enable Email Notification: From Email address: To Email address: SMTP Server Address: Enable Authentication: Account Name: Password: Verify Password: When this option is enabled, router activity logs are e-mailed to a designated email address. This email address will appear as the sender when you receive a log file or firmware upgrade notification via email. Enter the email address where you want the email sent. Enter the SMTP server address for sending email. If your SMTP server requires authentication, select this option. Enter your account for sending email. Enter the password associated with the account. Re-type the password associated with the account. Tools > Email Email Log When Full or on Schedule On Log Full: On Schedule: Schedule: When this option is selected, logs will be sent via email when the log is full. Selecting this option will send the logs via email according to schedule. This option is enabled when On Schedule is selected. You can select a schedule from the list of defined schedules. To create a schedule, go to Tools > Schedules. 47 D-Link Systems, Inc. Using the Configuration Interface System The System Settings section allows you to reboot the device or restore the router to the factory default settings. Restoring the unit to the factory default settings will erase all settings including any rules that you've created. System Commands Reboot the Device: Restore all Settings to the Factory Defaults: This will restart the router. Useful for restarting when you are not near the device. This option will restore all configuration settings back to the factory defaults. Any settings that have not been saved will be lost. If you want to save your router configuration settings, you can do so from the Admin page. Tools > System 48 D-Link Systems, Inc. Using the Configuration Interface Firmware The Firmware Upgrade section can be used to update your router to the latest firmware code to improve functionality and performance. To check for the latest firmware, click the Check Online Now button. If you would like to be notified when new firmware is released, place a checkmark in the box next to Email Notification of Newer Firmware Version. Firmware Information This section displays the Current Firmware Version and the Latest Firmware Version. To verify the latest firmware version, the gaming router checks the Internet. To check for the latest version, click the Check Online Now for Latest Firmware Version button. Firmware Upgrade To upgrade the firmware, follow these steps: 1. Click the [Browse] button to locate the D-Link upgrade file on your computer. 2. Once you have found the file to be used, click the Upload button below to start the firmware upgrade process. 3. Wait for the router to reboot 4. Confirm updated firmware revision on status page Firmware Version: 1.3, 18 Mar 2005 Tools > Firmware Firmware Upgrade Notification Options Automatically Check Online for Latest Firmware Version: Email Notification of Newer Firmware Version: When this option is enabled, your router will check online periodically to see if a newer version of the firmware is available. When this option is enabled, an email will be sent to the email address configured in the email section whenever new firmware is available. 49 D-Link Systems, Inc. Using the Configuration Interface Dynamic DNS The DDNS feature allows you to host a server (Web, FTP, Game Server, etc...) using a domain name that you have purchased (www.whateveryournameis.com) with your dynamically assigned IP address. Most broadband Internet Service Providers assign dynamic (changing) IP addresses. Using a DDNS service provider, your friends can enter in your domain name to connect to your server no matter what your IP address is. Enable Dynamic DNS: Server Address: Host Name: Username or Key: Password or Key: Verify Password or Key: Timeout: Enable this option only if you have purchased your own domain name and registered with a dynamic DNS service provider. Select a dynamic DNS service provider from the pull-down list. Enter your host name. Enter the username or key provided by your service provider. Enter the password or key provided by your service provider. Re-type the password or key provided by your service provider. The time between periodic updates to the Dynamic DNS, if your dynamic IP address has not change. The timeout period is entered in hours. Tools > Dynamic DNS Note: Option will disable it self if Username and Password or keys are incorrect. 50 D-Link Systems, Inc.