Express EtherNetwork TM DI-604 4-PortEthernetBroadbandRouter Manual Rev.060620 BuildingNetworksforPeople Contents Introduction........................................................................................ 3 Package Contents......................................................................... 6 Hardware Description................................................................. 7 Reset...................................................................................................... 8 Getting Started ................................................................................ 9 Configuring the DI-604............................................................. 10 Using the Configuration Wizard......................................... 11 Using the Configuration Menu ............................................ 17 Troubleshooting............................................................................ 49 Networking Basics ...................................................................... 55 Technical Specifications.......................................................... 82 Contacting Technical Support ............................................. 84 Warranty and Registration..................................................... 85 -2- Introduction The D-Link Express EtherNetwork DI-604 is a 4-port Ethernet Broadband Router. The D-Link DI-604 enables users to quickly and easily share a high speed Internet connection. The D-Link DI-604 also incorporates many advanced features, traditionally found in more expensive routers. After completing the steps outlined in the Quick Installation Guide (included in your package) you will have the ability to share a single Internet connection as well as sharing information and resources such as files and printers. The DI-604 is compatible with most popular operating systems, including Macintosh, Linux and Windows, and can be integrated into an existing network. This Manual is designed to help you connect the D-Link Express EtherNetwork DI-604 to a high speed Internet connection and 4 Ethernet PC connections. This manual provides a quick introduction to Broadband Router Technology, Firewalls, and Local Area Networking. Please take a moment to read through this manual and get acquainted these various technologies. Features and Benefits Broadband Modem and IP Sharing Connects multiple computers to a Broadband (Cable or DSL) modem to share the Internet connection. Ethernet Switch Allows you to quickly and easily share an Internet connection with multiple computers and devices. VPN supported Supports multiple and concurrent IPSec and PPTP pass-through sessions, so multiple users behind the DI-604 can access corporate networks through various VPN clients more securely. Advanced Firewall & Parental Control Features The Web-Based user interface displays a number of advanced network management features including: -3- Content Filtering Easily applied content filtering based on Mac Address, IP Address, URL and/or Domain Name. Filter Scheduling These filters can also be scheduled to be active on certain days or for a duration of hours or minutes. Network Address Translation NAT allows you to share a single IP Address and protects you from outside intruders gaining access to your private network. DHCP Server Supported All of the networked computers can retrieve TCP/IP settings automatically from the DI-604. Web-Based Management DI-604 is configurable through any network computer's web browser using Netscape or Internet Explorer. Access Control Supported Allows you to assign different access rights for different users. Virtual Server Supported Enables you to expose WWW, FTP and other services on your LAN to be accessible to Internet users. Special Application Supported Special applications requiring multiple connections, like Internet gaming, video conferencing, Internet telephony and so on. The DI-604 can sense the application type and open a multi-port tunnel for it. DMZ Host Supported Allows a networked computer to be fully exposed to the Internet. This function is used when the Special Application feature is insufficient to allow an application to function correctly. Technology Introduction Introduction to Broadband Router Technology A router is a device that forwards data packets from a source to a destination. Routers forward data packets using IP addresses and not a MAC address. A router will forward data from the Internet to a particular computer on your LAN. The information that makes up the Internet gets moved around using routers. When you click on a link on a web page, you send a request to a -4- server to show you the next page. The information that is sent and received from your computer is moved from your computer to the server using routers. A router also determines the best route that your information should follow to ensure that the information is delivered properly. A router controls the amount of data that is sent through your network by eliminating information that should not be there. This provides security for the computers connected to your router, because computers from the outside cannot access or send information directly to any computer on your network. The router determines which computer the information should be forwarded to and sends it. If the information is not intended for any computer on your network, the data is discarded. This keeps any unwanted or harmful information from accessing or damaging your network. Introduction to Firewalls A firewall is a device that sits between your computer and the Internet that prevents unauthorized access to or from your network. A firewall can be a computer using firewall software or a special piece of hardware built specifically to act as a firewall. In most circumstances, a firewall is used to prevent unauthorized Internet users from accessing private networks or corporate LAN's and Intranets. A firewall watches all of the information moving to and from your network and analyzes each piece of data. Each piece of data is checked against a set of criteria that the administrator configures. If any data does not meet the criteria, that data is blocked and discarded. If the data meets the criteria, the data is passed through. This method is called packet filtering. A firewall can also run specific security functions based on the type of application or type of port that is being used. For example, a firewall can be configured to work with an FTP or Telnet server. Or a firewall can be configured to work with specific UDP or TCP ports to allow certain applications or games to work properly over the Internet. Local Area Networking (LAN) is the term used when connecting several computers together over a small area such as a building or group of buildings. LAN's can be connected over large areas. A collection of LAN's connected over a large area is called a Wide Area Network (WAN). A LAN consists of multiple computers connected to each other. There are many types of media that can connect computers together. The most common media is CAT5 cable (UTP or STP twisted pair wire.) On the other hand, wireless networks do not use wires; instead they communicate over radio waves. Each computer must have a Network Interface Card (NIC), which communicates the data between computers. A NIC is usually -5- Introduction to Local Area Networking a 10Mbps network card, or 10/100Mbps network card, or a wireless network card. Most networks use hardware devices such as hubs or switches that each cable can be connected to in order to continue the connection between computers. A hub simply takes any data arriving through each port and forwards the data to all other ports. A switch is more sophisticated, in that a switch can determine the destination port for a specific piece of data. A switch minimizes network traffic overhead and speeds up the communication over a network. Networks take some time in order to plan and implement correctly. There are many ways to configure your network. You may want to take some time to determine the best network set-up for your needs. Package Contents DI-604 Ethernet Broadband Router Power Adapter Ethernet Cable Quick Installation Guide Manual on CD Note: Using a power supply with a different voltage rating will damage and void the warranty for this product. If any of the above items are missing, please contact your reseller. -6- Hardware Description Front Panel Power WAN LAN Power WAN LAN Link/Act. Power indicator will light Green. WAN status indicator will light Green when there is good physical WAN connection Link status indicators light Green. The LED flickers when the corresponding port is sending or receiving data. -7- Hardware Description Rear Panel Reset Power LAN Reset LAN PORTS 1-4 WAN Power WAN Used to restore the DI-604 back to factory default settings. LAN port sockets (CAT5 Ethernet RJ-45 cable). The LED glows steadily when a port is connected to a hub, switch or network-adapter-equipped computer in your local area network (LAN.) WAN port socket (CAT5 Ethernet RJ-45 cable). This is where you will connect to your Cable or DSL modem. Connect one end of your included power adapter to the power port and the other end into your power outlet. Reset To reset the system settings to factory defaults, please follow these steps: 1. Leave the device powered on, do not disconnect the power 2. Press the reset button and hold (use a paper-clip) 3. Keep the button pressed about 10 seconds 4. Release the button The DI-604 will then automatically reboot itself. -8- Getting Started Installation Location The DI-604 can be positioned at any convenient place in your office or house. No special wiring or cooling requirements are needed. However, you should comply with the following guidelines: Place the DI-604 on a flat horizontal plane. Keep away from any heating devices. Do not place in a dusty or wet environment. The recommended operational specifications of the DI-604 are: Temperature 32o F ~ 131o F Humidity 5 % ~ 90 % In addition, remember to turn off the power, remove the power cord from the outlet, and keep your hands dry when you install the hardware. Network Settings To use the DI-604 correctly, you have to properly configure the network settings of your computers. The default IP address of the DI-604 is 192.168.0.1, and the default subnet mask is 255.255.255.0. These addresses can be changed as needed, but the default values are used in this manual. If the TCP/IP environment of your computer has not yet been configured, you can refer to Configuring Your PCs to Connect to the DI-604 to configure it. For example: 1. Configure your computer IP as 192.168.0.3, subnet mask as 255.255.255.0 and gateway as 192.168.0.1 Or more conveniently 2. Configure your computers to obtain TCP/IP settings automatically from the DHCP server feature of the DI-604 Since the IP address of the DI-604 is 192.168.0.1, the IP address of your computer must be 192.168.0.X (where "X" is a number between 2 and 254.) Each computer on your network must have a different IP address within that range. The default gateway must be 192.168.0.1 (the IP address of the DI-604). -9- Configuring the DI-604 The DI-604 provides an embedded Web-based management utility making it operating system independent. You can configure your DI-604 through the Netscape Communicator or Internet Explorer browser in MS Windows, Macintosh, Linux or UNIX based platforms. All that is needed is a web browser such as Internet Explorer or Netscape Navigator version 4 and higher with Java Script enabled. Start-up and Log in Activate your web browser and type in the IP address of the DI-604 into the Location (for Netscape) or Address (for IE) field and press "Enter." The default IP address of the DI-604 is 192.168.0.1 For example: http://192.168.0.1 After the connection is established, the logon screen will pop up. To log in as an administrator, enter the username of "admin" and the password (there are no default password, leave it blank). Click the OK button. If the password is correct, the web-management interface will appear. -10- Using the Configuration Wizard The Setup Wizard screen will appear. Follow the Wizard step by step to quickly configure the DI-604. Click Next It is recommended that you change the admin password for security purposes. Enter in your new password. Enter it in a second time for verification. Click Next Click on the drop down box arrow and select the appropriate time zone for your location. Click Next -11- There will be three options to select from. Please select the appropriate option that is used by your ISP. Dynamic IP Address: (ex: Cable users) Select this option to obtain an IP address automatically from your ISP. Please see Dynamic IP Address section. Static IP Address: Select this option to manually input the IP address that your ISP assigned to you. Please see Static IP Address section. PPP over Ethernet (P ...