User manual D-LINK DI-634M

DI-634M User's Manual Table of Contents Table of Contents Package Contents ............................................................................................ 4 Minimum System Requirements ....................................................................... 4 Introduction ....................................................................................................... 5 Features and Benefits ...................................................................................... 6 Hardware Overview .......................................................................................... 7 Connections............................................................................................ 7 LEDs ....................................................................................................... 8 Wireless Basics ................................................................................................ 9 Getting Started ............................................................................................... 11 Using the Configuration Menu ........................................................................ 12 Home .................................................................................................... 13 WCN Wizard .................................................................................... 14 Wireless Settings ............................................................................. 15 Super G Settings ........................................................................ 16 WEP Encryption ......................................................................... 17 WPA-EAP Authentication ............................................................ 18 WPA-PSK Authentication ............................................................ 19 WAN Settings (Connect to Internet) ................................................ 20 Dynamic IP Address ................................................................... 20 Static IP Address ........................................................................ 21 PPPoE ........................................................................................ 22 PPTP .......................................................................................... 24 L2TP ........................................................................................... 26 Big Pond ..................................................................................... 28 LAN .................................................................................................. 29 DHCP .............................................................................................. 30 Static DHCP ............................................................................... 31 Advanced .............................................................................................. 32 Virtual Server ................................................................................... 32 Applications ..................................................................................... 34 Port Forwarding ............................................................................... 35 StreamEngine .................................................................................. 36 Filters ............................................................................................... 38 IP Filters ..................................................................................... 38 MAC Filters ................................................................................. 39 Parental Control (Domain Blocking) ................................................ 40 D-Link Systems, Inc. 2 DI-634M User's Manual Table of Contents Firewall ............................................................................................ 41 DMZ ................................................................................................. 42 Performance Settings ...................................................................... 43 Schedules ........................................................................................ 44 Tools ..................................................................................................... 45 Admin .............................................................................................. 45 Change Passwords ..................................................................... 45 Remote Management ................................................................. 45 Time ................................................................................................. 46 System ............................................................................................. 47 Save/Load Settings..................................................................... 47 Save Configuration to WCN ........................................................ 48 Firmware.......................................................................................... 49 DDNS .............................................................................................. 50 Misc. ................................................................................................ 51 Block WAN Ping .......................................................................... 51 VPN Passthrough ....................................................................... 52 Log Email Settings ...................................................................... 52 Status ................................................................................................... 53 Device Info ....................................................................................... 53 Log................................................................................................... 54 Stats ................................................................................................ 55 Wireless ........................................................................................... 56 Technical Specifications ................................................................................. 57 Troubleshooting .............................................................................................. 60 Frequently Asked Questions........................................................................... 66 Appendix......................................................................................................... 85 Securing Your Network ........................................................................ 85 Glossary ............................................................................................... 86 Contacting Technical Support ......................................................................... 94 Warranty ........................................................................................................ 95 Registration .................................................................................................... 99 D-Link Systems, Inc. 3 DI-634M User's Manual Package Contents Package Contents DI-634M Wireless 108G MIMO Router CAT-5 Ethernet Cable Power Adapter (5.0V, 3.0A) Vertical Stands Mounting Kit CD-ROM with Software and Manual Note: Using a power supply with a different voltage than the one included with your product will cause damage and void the warranty for this product. If any of the above items are missing, please contact your reseller. Minimum System Requirements Ethernet-Based Cable or DSL Modem Computers with Windows, Macintosh, or Linux-based operating systems with an installed Ethernet adapter and CD-ROM Drive Internet Explorer Version 6.0 or Netscape Navigator Version 7.0 and Above D-Link Systems, Inc. 4 DI-634M User's Manual Introduction Introduction The D-Link DI-634M Wireless 108G MIMO Router is an 802.11g high-performance, wireless router that supports high-speed wireless networking at home, at work or in public places. Unlike most routers, the DI-634M provides data transfers at up to 108Mbps* (compared to the standard 54Mbps) when used with other D-Link Wireless 108G MIMO and AirPlus Xtreme GTM Products. The 802.11g standard is backwards compatible with 802.11b products. This means that you do not need to change your entire network to maintain connectivity. You may sacrifice some of 802.11g's speed when you mix 802.11b and 802.11g devices, but you will not lose the ability to communicate when you incorporate the 802.11g standard into your 802.11b network. You may choose to slowly change your network by gradually replacing the 802.11b devices with 802.11g devices . In addition to offering faster data transfer speeds when used with other 802.11g products, the DI-634M has the newest, strongest, most advanced security features available today. When used with other 802.11g WPA (WiFi Protected Access) compatible products in a network, the security features include: WPA: Wi-Fi Protected Access authorizes and identifies users based on a secret key that changes automatically at a regular interval. WPA uses TKIP (Temporal Key Integrity Protocol) to change the temporal key every 10,000 packets (a packet is a kind of message transmitted over a network.) This insures much greater security than the standard WEP security. By contrast, the older WEP encryption required the keys to be changed manually. The DI-634M router includes an easy-to-use installation wizard located on the D-Link CD. Simply insert the CD into your computer and follow the on-screen instructions. Your router will automatically be configured. D-Link Systems, Inc. 5 DI-634M User's Manual Features and Benefits Features and Benefits Fully compatible with the 802.11g standard to provide a wireless data rate of up to 108Mbps*. Backwards compatible with the 802.11b standard to provide a wireless data rate of up to 11Mbps WPA (Wi-Fi Protected Access) authorizes and identifies users based on a secret key that changes automatically at a regular interval, for example: Pre Shared Key mode means that the home user, without a RADIUS server, will obtain a new security key every time the he or she connects to the network, vastly improving the safety of communications on the network Utilizes OFDM technology (Orthogonal Frequency Division Multiplexing) User-friendly configuration and diagnostic utilities Operates in the 2.4GHz frequency range Connects multiple computers to a Broadband (Cable or DSL) modem to share the Internet connection Advanced Firewall features: Supports NAT with VPN pass-through, providing added security, MAC Filtering, URL Filtering, and Scheduling DHCP server enables all networked computers to automatically receive IP addresses Web-based interface for Managing and Configuring Access Control to manage users on the network Supports special applications that require multiple connections Equipped with 4 10/100 Ethernet ports, 1 WAN port, Auto MDI/MDIX * Maximum wireless signal rate derived from IEEE Standard 802.11g specifications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead lower actual data throughput rate. D-Link 108G performance results are based on testing with other D-Link 108G enabled devices utilizing Packet Bursting, FastFrames, Turbo Mode and Compression techniques. Data already compressed may not benefit from the D-Link 108G compression techniques. D-Link Systems, Inc. 6 DI-634M User's Manual Hardware Overview Hardware Overview Rear Panel All Ethernet Ports (WAN and LAN) are auto MDI/MDIX, meaning you can use either a straight-through or a crossover Ethernet cable. Reset Button Pressing and holding the reset button for 10 seconds restores the router to its original factory default settings. Auto MDI/MDIX LAN Ports These ports automatically sense the cable type when connecting to Ether netenabled computers. DC Power Connector The DC power input connector is labeled DC 5V 3A with a single jack socket to supply power to the DI-634M. Auto MDI/MDIX WAN Port This is the connection for the Ethernet cable to the Cable or DSL modem. D-Link Systems, Inc. 7 DI-634M User's Manual Hardware Overview Hardware Overview (continued) Rear Panel WLAN LED A solid orange light indicates that the wireless segment is ready. This LED blinks during wireless data transmission. WAN LED A solid green light indicates connection on the WAN port. This LED blinks during data transmission. LOCAL NETWORK LED POWER LED A solid green light indicates a proper connection to the power supply. STATUS A blinking yellow light indicates that the DI-634M is ready. D-Link Systems, Inc. 8 A solid green light indicates a connection to an Ethernetenabled computer on ports 1-4. This LED blinks during data transmission. DI-634M User's Manual Wireless Basics Wireless Basics D-Link wireless products are based on industry standards to provide easy-to-use and compatible high-speed wireless connectivity within your home, business or public access wireless networks. D-Link wireless products will allow you access to the data you want, when and where you want it. You will be able to enjoy the freedom that wireless networking brings. A WLAN is a cellular computer network that transmits and receives data with radio signals instead of wires. WLANs are used increasingly in both home and office environments, and public areas such as airports, coffee shops and universities. Innovative ways to utilize WLAN technology are helping people to work and communicate more efficiently. Increased mobility and the absence of cabling and other fixed infrastructure have proven to be beneficial for many users. Wireless users can use the same applications they use on a wired network. Wireless adapter cards used on laptop and desktop systems support the same protocols as Ethernet adapter cards. People use wireless LAN technology for many different purposes: Mobility - Productivity increases when people have access to data in any location within the operating range of the WLAN. Management decisions based on real-time information can significantly improve worker efficiency. Low Implementation Costs ­ WLANs are easy to set up, manage, change and relocate. Networks that frequently change can benefit from WLANs ease of implementation. WLANs can operate in locations where installation of wiring may be impractical. Installation and Network Expansion - Installing a WLAN system can be fast and easy and can eliminate the need to pull cable through walls and ceilings. Wireless technology allows the network to go where wires cannot go - even outside the home or office. Scalability ­ WLANs can be configured in a variety of topologies to meet the needs of specific applications and installations. Configurations are easily changed and range from peer-to-peer networks suitable for a small number of users to larger infrastructure networks to accommodate hundreds or thousands of users, depending on the number of wireless devices deployed. Inexpensive Solution - Wireless network devices are as competitively priced as conventional Ethernet network devices. D-Link Systems, Inc. 9 DI-634M User's Manual Wireless Basics Standards-based Technology The DI-634M Wireless 108G MIMO Router utilizes the 802.11g standard. The IEEE 802.11g standard is an extension of the 802.11b standard. It increases the data rate up to 54Mbps* within the 2.4GHz band, utilizing OFDM technology. This means that in most environments, within the specified range of this device, you will be able to transfer large files quickly or even watch a movie in MPEG format over your network without noticeable delays. This technology works by transmitting highspeed digital data over a radio wave utilizing OFDM (Orthogonal Frequency Division Multiplexing) technology. OFDM works by splitting the radio signal into multiple smaller sub-signals that are then transmitted simultaneously at different frequencies to the receiver. OFDM reduces the amount of crosstalk (interference) in signal transmissions. The DI-634M is backwards compatible with 802.11b devices. This means that if you have an existing 802.11b network, the devices in that network will be compatible with 802.11g devices at speeds of up to 11Mbps in the 2.4GHz range. Installation Considerations The D-Link DI-634M Wireless 108G MIMO Router lets you access your network, using a wireless connection, from virtually anywhere within its operating range. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to follow these basic guidelines: 1 Keep the number of walls and ceilings between the DI-634M and other network devices to a minimum - each wall or ceiling can reduce your D-Link wireless product's range from 3-90 feet (1-30 meters.) Position your devices so that the number of walls or ceilings is minimized. 2 Be aware of the direct line between network devices. A wall that is 1.5 feet thick (.5 meters), at a 45-degree angle appears to be just over 2 feet (.6 meters) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better reception. 3 Building Materials can impede the wireless signal - a solid metal door or aluminum studs may have a negative effect on range. Try to position wireless devices and computers with wireless adapters so that the signal passes through drywall or open doorways and not other materials. 4 Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate extreme RF noise. * Maximum wireless signal rate derived from IEEE Standard 802.11g specifications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead lower actual data throughput rate. D-Link Systems, Inc. 10 DI-634M User's Manual Getting Started Getting Started Please remember that D-Link Wireless 108G MIMO devices are pre-configured to connect together, right out of the box, with their default settings. For a typical wireless setup at home (as shown above), please do the following: 1 2 3 4 5 6 You will need broadband Internet access (a Cable or DSL-subscriber line into your home or office) Consult with your Cable or DSL provider for proper installation of the modem. Connect the Cable or DSL modem to the DI-634M Wireless Broadband Router (see the printed Quick Installation Guide included with your router). If you are connecting a desktop computer to your network, install the D-Link DWL-G520M wireless PCI adapter into an available PCI slot on your desktop computer. You may also install the DWL-G510 or DWL-G520 (See the printed Quick Installation Guide included with the network adapter). Install the D-Link DWL-G650M wireless Cardbus adapter into a notebook computer. (See the printed Quick Installation Guide included with the DWL-G650M.) Install the D-Link DFE-530TX+ adapter into a desktop computer. The four Ethernet LAN ports of the DI-634M are Auto MDI/MDIX and will work with both straight through and cross-over cable. (See the printed Quick Installation Guide included with the DFE-530TX+.) D-Link Systems, Inc. 11 DI-634M User's Manual Using the Configuration Menu Using the Configuration Menu Whenever you want to configure your DI-634M, you can access the Configuration Menu by opening the Web-browser and typing in the IP Address of the DI-634M. The DI-634M's default IP Address is 192.168.0.1. Open the Web browser. Type in the IP Address of the Router (http://192.168.0.1). Note: if you have changed the default IP Address assigned to the DI-634M, make sure to enter the correct IP Address. Select Admin or User from the drop-down menu. User cannot make changes. Leave the Password blank. Click Log In. D-Link Systems, Inc. 12 DI-634M User's Manual Using the Configuration Menu Home > Wizard The Home > Wizard screen will appear. Click Run Wizard to start the setup wizard or insert your CD-ROM to setup your D-Link wireless router. These buttons appear on most of the configuration screens in this section. Please click on the appropriate button at the bottom of each screen after you have made a configuration change. D-Link Systems, Inc. 13 DI-634M User's Manual Using the Configuration Menu Home > Wizard > WCN WCN Wizard If your PC's operating system is Windows XP Service Pack 2 (SP2) or later and you are using Windows Internet Explorer (IE) as your browser, you can use Windows Connect Now (WCN) technology to help configure the router's wireless security settings. Wireless Network Setup Wizard Before you can use the router's WCN Wizard, you must first execute the Wireless Network Setup Wizard on your PC. If you have not already done so, go to the Windows Control Panel and select Wireless Network Setup Wizard. The Wireless Network Setup Wizard gives you the choices: "Use a USB flash drive" and "Set up a network manually". Choose "Set up a network manually". In fact, you will not have to do the set-up manually; it will be done with the WCN ActiveX Control. WCN ActiveX Control The WCN ActiveX Control provides the WCN link between your PC and the router via the browser that communicates wireless configuration data without a USB flash drive. The browser will attempt to download the WCN ActiveX Control, if it is not already available on your PC. For this action to succeed, you must already have a WAN connection, and the browser's internet security setting must be Medium or lower (select Tools > Internet Options > Security > Custom Level > Medium). When the necessary preparations are complete, the WCN technology will propagate the wireless network settings from your PC to the router. Then you will have to reboot the router for the settings to take effect. Note that WCN only sets a few of the wireless options. You will still need to go to the Home > Wireless page to set other wireless options such as Super G Mode and transmission rate. D-Link Systems, Inc. 14 DI-634M User's Manual Using the Configuration Menu Home > Wireless Wireless Radio: Select On or Off. Selecting off will turn disable all wireless functions of the router. Service Set Identifier (SSID) is the name designated for a specific wireless local area network (WLAN). The SSID's factory default setting is default. The SSID can be easily changed to connect to an existing wireless network or to establish a new wireless network. 6 is the default channel. All devices on the network must share the same channel. Note: The wireless adapters will automatically scan and match the wireless setting. Check the Auto Channel Select box to allow the router to automatically find the best channel to use. By default Super G mode is Disabled. Super G is a group of performance enhancement features that increase end user application throughput in an 802.11g network. Super G is backward compatible to standard 802.11g devices. For top performance, all wireless devices on the network should be Super G capable. Select either Disabled, Super G without Turbo, Super G with Dynamic Turbo, or Super G with Static Turbo. 15 SSID: Channel: Super G Mode: D-Link Systems, Inc. DI-634M User's Manual Disabled: Super G without Turbo: Super G with Dynamic Turbo: Using the Configuration Menu Standard 802.11g support, no enhanced capabilities. Capable of Packet Bursting, FastFrames, Compression, and no Turbo mode. Capable of Packet Bursting, FastFrames, Compression, and Dynamic Turbo. This setting is backwards compatible with non-Turbo (legacy) devices. Dynamic Turbo mode is only enabled when all nodes on the wireless network is Super G with Dynamic Turbo enabled. Capable of Packet Bursting, FastFrames, Compression, and Static Turbo. This setting is not backwards compatible with non-Turbo (legacy) devices. Static turbo mode is always on and is only enabled when all nodes on the wireless network is Super G with Static Turbo enabled. Set a specific transmission rate. It is strongly recommended to set to Auto. Select Enabled if your network uses all 802.11g devices. Select Disabled if you are using a mixure (802.11b and 802.11g) of wireless devices. Choose Enabled to broadcast the SSID across the network. All devices on a network must share the same SSID (Service Set Identifier) to establish communication. Choose Disabled if you do not wish to broadcast the SSID over the network. Select WEP, WPA-EAP, or WPA-PSK authentication. Super G with Static Turbo: Transmission Rate: 802.11g-Only Mode: SSID Broadcast: Security Mode: D-Link Systems, Inc. 16 DI-634M User's Manual Using the Configuration Menu Home > Wireless (WEP) Authentication: WEP: Select Shared Key. Wired Equivalent Privacy (WEP) is a wireless security protocol for Wireless Local Area Networks (WLAN). WEP provides security by encrypting the data that is sent over the WLAN. Select Enabled or Disabled. Disabled is the default setting. (Note: If you enable encryption on the DI-634M make sure to also enable encryption on all the wireless clients or wireless connection will not be established). Select the level of encryption desired: 64-bit or 128-bit. Select HEX or ASCII. Input up to 4 WEP keys; select the one you wish to use. 17 WEP Encryption: Key Type: Keys 1-4: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Home > Wireless (WPA-EAP) WPA Mode: Cipher Type: RADIUS Server IP 1: Port: Shared Secret: RADIUS Server IP 2: Port: Shared Secret: D-Link Systems, Inc. Select WPA, WPA2, or WPA2 only. Select TKIP, AES, or TKIP and AES. Enter the IP address of your primary RADIUS server. The server must be on the same IP network as the router. Enter the port used for the RADIUS Server (1812 is default). Enter the "Shared Secret" or security key. Enter the IP address of your secondary RADIUS server (optional). Enter the port used for the RADIUS Server (1812 is default). Enter the "Shared Secret" or security key. 18 DI-634M User's Manual Using the Configuration Menu Home > Wireless (WPA-PSK) WPA Mode: Cipher Type: Passphrase: Select WPA, WPA2, or WPA2 only. Select TKIP, AES, or TKIP and AES. Enter a passphrase. The passphrase is an alpha-numeric password between 8 and 63 characters long. The password can include symbols (!?*&_) and spaces. Make sure you enter this key exactly the same on all other wireless clients. Re-enter the passphrase. Confirm Passphrase: D-Link Systems, Inc. 19 DI-634M User's Manual Using the Configuration Menu Home > WAN (Dynamic) Dynamic IP Address: Choose Dynamic IP Address to obtain IP Address information automatically from your ISP. Select this option if your ISP does not give you any IP numbers to use (most Cable ISPs). The Host Name is optional but may be required by some ISPs. The default host name is the device name of the Router and may be changed. The default MAC Address is set to the WAN's physical interface MAC address on the Broadband Router. It is not recommended that you change the default MAC address unless required by your ISP. The default MAC address is set to the WAN's physical interface MAC address on the Broadband Router. Checking this checkbox will allow you to copy the MAC address of your computer to the WAN port on the router. Maximum Transmission Unit-1500 is the default setting-you may need to change the MTU for optimal performance with your specific ISP. 20 Host Name: MAC Address: Clone Your PC's MAC Address: MTU: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Home > WAN (Static) Choose Static IP Address if all WAN IP information is provided to you by your ISP. Each IP address entered in the fields must be in the appropriate IP form, which are four octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format. IP Address: Subnet Mask: Input the public IP Address provided by your ISP. Input your Subnet mask. (All devices in the network must have the same subnet mask.) Input the public IP address of the ISP to which you are connecting. Input the primary DNS (Domain Name Server) IP address provided by your ISP. The Secondary DNS is optional. ISP Gateway Address: Primary/ Secondary DNS Address: MAC Address: The default MAC Address is set to the WAN's physical interface MAC address on the Broadband Router. The default MAC address is set to the WAN's physical interface MAC address on the Broadband Router. Checking this checkbox will allow you to copy the MAC address of your computer to the WAN port on the router. Maximum Transmission Unit-1492 is the default setting-you may need to change the MTU for optimal performance with your specific ISP. 21 Clone Your PC's MAC Address: MTU: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Home > WAN (PPPoE) Please be sure to remove any existing PPPoE client software installed on your computers. Choose PPPoE (Point to Point Protocol over Ethernet) if your ISP uses a PPPoE connection. Your ISP will provide you with a username and password. This option is typically used for DSL services. Select Dynamic PPPoE to obtain an IP address automatically for your PPPoE connection. Select Static PPPoE to use a static IP address for your PPPoE connection. D-Link Systems, Inc. 22 DI-634M User's Manual Using the Configuration Menu Home > WAN (PPPoE) PPPoE: Choose this option if your ISP uses PPPoE. (Most DSL users will select this option.) Your PPPoE username provided by your ISP. Re-enter the PPPoE password. Enter the Service Name provided by your ISP (optional). This option is only available for Static PPPoE. Enter the static IP Address for the PPPoE connection. The network mask of the PPPoE interface. The Maximum Idle Time value is only used for the On Demand connection mode. It specifies how many minutes the WAN connection can be idle before the connection is dropped. A value of zero means the connection will not be dropped due to idle time. Maximum Transmission Unit-1492 is the default setting-you may need to change the MTU for optimal performance with your specific ISP. If you are using AOL DSL+ service, you may need to set the MTU to 1400. Typically, connections such as PPPoE, PPTP, and L2TP are not always on. The router allows you to set the connection mode. The settings are: Always on: A connection to the Inter net is always maintained. Connect on demand: A connection to the Internet is made as needed; and the connection is dropped after "Maximum Idle Time" minutes of no activity. Manual: You have to open up the Web-based management interface and click the Connect button manually any time that you wish to connect to the Internet. User Name: Verify Password: Service Name: IP Address: Network Mask: Maximum Idle Time: MTU: Connection Mode Select: D-Link Systems, Inc. 23 DI-634M User's Manual Using the Configuration Menu Home > WAN (PPTP) IP Address: Subnet Mask: Input the public IP Address provided by your ISP. Input your Subnet mask. (All devices in the network must have the same subnet mask.) Input the public IP address of the ISP to which you are connecting. Input the primary and secondary DNS (Domain Name Server) IP addresses provided by your ISP. Enter your account or username. Enter your password (and again to confirm). The Maximum Idle Time value is only used for the On Demand connection mode. It specifies how many minutes the WAN connection can be idle before the connection is dropped. A value of zero means the connection will not be dropped due to idle time. 24 ISP Gateway Address: DNS Addresses: User Name: Password: Maximum Idle Time: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Home > WAN (PPTP) MTU: Maximum Transmission Unit-1492 is the default setting-you may need to change the MTU for optimal performance with your specific ISP. Typically, connections such as PPPoE, PPTP, and L2TP are not always on. The router allows you to set the connection mode. The settings are: Always on: A connection to the Inter net is always maintained. Connect on demand: A connection to the Internet is made as needed; and the connection is dropped after "Maximum Idle Time" minutes of no activity. Manual: You have to open up the Web-based management interface and click the Connect button manually any time that you wish to connect to the Internet. Connection Mode Select: D-Link Systems, Inc. 25 DI-634M User's Manual Using the Configuration Menu Home > WAN (L2TP) IP Address: Subnet Mask: Input the public IP Address provided by your ISP. Input your Subnet mask. (All devices in the network must have the same subnet mask.) Input the public IP address of the ISP to which you are connecting. Input the primary and secondary DNS (Domain Name Server) IP addresses provided by your ISP. Enter your account or username. Enter your password (and again to confirm). The Maximum Idle Time value is only used for the On Demand connection mode. It specifies how many minutes the WAN connection can be idle before the connection is dropped. A value of zero means the connection will not be dropped due to idle time. 26 ISP Gateway Address: DNS Addresses: Account: Password: Maximum Idle Time: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Home > WAN (L2TP) MTU: Maximum Transmission Unit-1492 is the default setting-you may need to change the MTU for optimal performance with your specific ISP. Typically, connections such as PPPoE, PPTP, and L2TP are not always on. The router allows you to set the connection mode. The settings are: Always on: A connection to the Inter net is always maintained. Connect on demand: A connection to the Internet is made as needed; and the connection is dropped after "Maximum Idle Time" minutes of no activity. Manual: You have to open up the Web-based management interface and click the Connect button manually any time that you wish to connect to the Internet. Connection Mode Select: D-Link Systems, Inc. 27 DI-634M User's Manual Using the Configuration Menu Home > WAN (Big Pond) Username: Password: Auth Server: Enter your username. Enter your password (and again to confirm). Select the type of authentication server you are connecting to from the drop-down menu. The default MAC Address is set to the WAN's physical interface MAC address on the Broadband Router. The default MAC address is set to the WAN's physical interface MAC address on the Broadband Router. Checking this checkbox will allow you to copy the MAC address of your computer to the WAN port on the router. MAC Address: Clone Your PC's MAC Address: D-Link Systems, Inc. 28 DI-634M User's Manual Using the Configuration Menu Home > LAN LAN is short for Local Area Network. This is considered your internal network. These are the IP settings of the LAN interface for the DI-634M. These settings may be referred to as Private settings. You may change the LAN IP address if needed. The LAN IP address is private to your internal network and cannot be seen on the Internet. IP Address: The IP address of the LAN interface. The default IP address is 192.168.0.1. The subnet mask of the LAN interface. The default subnet mask is 255.255.255.0. Enter the name of your Domain (optional). If Enabled, the DHCP assigns its own IP address as the DNS server to your computers. If Disabled, the DNS server address(es) from your ISP will be assigned to your computers. Default Subnet Mask: Local Domain Name: DNS Relay: D-Link Systems, Inc. 29 DI-634M User's Manual Using the Configuration Menu Home > DHCP DHCP stands for Dynamic Host Control Protocol. The DI-634M has a built-in DHCP server. The DHCP Server will automatically assign an IP address to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to "Obtain an IP Address Automatically." When you turn your computers on, they will automatically load the proper TCP/IP settings provided by the DI-634M. The DHCP Server will automatically allocate an unused IP address from the IP address pool to the requesting computer. You must specify the starting and ending address of the IP address pool. DHCP Server: DHCP IP Address Range: Lease TIme: Select Enabled or Disabled. The default setting is Enabled. Enter the starting and ending IP address for the DHCP server's IP assignment. Select the amount of time of the DHCP lease from the drop-down menu. If one or more computers or devices fail to obtain an IP address from the router, it may have an old DHCP client that incorrectly turns off the broadcast flag of DHCP packets. Enabling this option will cause the router to always broadcast its responses to all clients, thereby working around the problem. This will add broadcast traffic to the network. Always Broadcast: D-Link Systems, Inc. 30 DI-634M User's Manual Using the Configuration Menu Home > DHCP (Static DHCP) Computer Name: IP Address: Enter a name for the computer or device. Enter the IP address you would like to assign the computer or device. This IP address must be within the IP address range. Enter the MAC Address of the computer or device. If the device has already received an IP address from the router, it will show up in the drop-down menu. Select the computer or device from the drop-down menu and click Clone Your PC. MAC Address: DHCP Client: D-Link Systems, Inc. 31 DI-634M User's Manual Using the Configuration Menu Advanced > Virtual Server The DI-634M can be configured as a virtual server so that remote users accessing Web or FTP services (for example) via the public IP address can be automatically redirected to local servers in the LAN (Local Area Network). The DI-634M firewall feature filters out unrecognized packets to protect your LAN network so all computers networked with the DI-634M are invisible to the outside world. If you wish, you can make some of the LAN computers accessible from the Internet by enabling Virtual Server. Depending on the requested service, the DI-634M redirects the external service request to the appropriate server within the LAN network. The DI-634M is also capable of port-redirection meaning incoming traffic to a particular port may be redirected to a different port on the server computer. Each virtual service that is created will be listed at the bottom of the screen in the Virtual Servers List. There are pre-defined virtual services already in the table. You may use them by enabling them and assigning the server IP to use that particular virtual service. D-Link Systems, Inc. 32 DI-634M User's Manual Using the Configuration Menu Advanced > Virtual Server (continued) Virtual Server: Name: Private IP: Select Enabled or Disabled. Enter the name referencing the virtual service. The server computer in the LAN (Local Area Network) that will be providing the virtual services. The protocol used for the virtual service. The port number of the service used by the Private IP computer. The port number on the WAN (Wide Area Network) side that will be used to access the virtual service. Select to Allow or Deny. The schedule of time when the virtual service will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. If it is set to Time, select the time frame for the service to be enabled. If the system time is outside of the scheduled time, the service will be disabled. If you have an FTP server that you wanted Internet users to access by WAN port 2100 and only during the weekends, you would need to enable it as such. FTP server is on LAN computer 192.168.0.30. FTP uses port 21, TCP. Name: FTP Server Private IP: 192.168.0.30 Protocol Type: TCP Private Port: 21 Public Port: 2100 Schedule: From: 01:00AM to 01:00AM, Sat to Sun All Internet users who want to access this FTP Server must connect to it from port 2100. This is an example of port redirection and can be useful in cases where there are many of the same servers on the LAN network. Protocol Type: Private Port: Public Port: Firewall Rule: Schedule: Example #1: D-Link Systems, Inc. 33 DI-634M User's Manual Using the Configuration Menu Advanced > Applications Some applications require multiple connections, such as Internet gaming, video conferences, Internet telephony and others. These applications have difficulties working through NAT (Network Address Translation). Special Applications makes some of these applications work with the DI-634M. If you need to run applications that require multiple connections, specify the port normally associated with an application in the "Trigger Port" field, select the protocol type as TCP or UDP, then enter the public ports associated with the trigger port to open them for inbound traffic. The DI-634M provides some predefined applications in the table on the bottom of the web page. Select the application you want to use and enable it. Note: Only one PC can use each Special Application tunnel. Name: Trigger Port: This is the name referencing the special application. This is the port used to trigger the application. It can be either a single port or a range of ports. This is the protocol used to trigger the special application. This is the port number on the WAN side that will be used to access the application. You may define a single port or a range of ports. You can use a comma to add multiple ports or port ranges. This is the protocol used to trigger the special application. 34 Trigger Type: Public Port: Public Type: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Advanced > Port Forwarding Port forwarding is used to open a port or a range of ports in your router and redirect data through to these ports to a single PC on your network. Click the Enabled or Disabled radio button. Name: IP Address: Enter a name for your port forwarding rule. Enter the IP address of the computer or device you want to forward the ports to. Enter the TCP ports to open. You may enter a single port or a range of ports (1000-2000). Use a comma to seperate ports or range of ports (1000-2000,99,133). Enter the UDP ports to open. TCP Ports to Open: UDP Ports to Open: Firewall Rule: Schedule: Select to Allow or Deny (block) the ports. The schedule of time when the virtual service will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. If it is set to Time, select the time frame for the service to be enabled. If the system time is outside of the scheduled time, the service will be disabled. 35 D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Advanced > StreamEngine StreamEngine QoS (Quality of Service) Technology will improve your online experience by ensuring that important traffic is prioritized over other network traffic, such as FTP or Web. Click Enabled to turn this service on. Dynamic Fragmentation: Enable this option when you have a slow Internet uplink. This will reduce the impact that large low priority packets can have on more urgent ones by breaking the large packets into several smaller packets. When enabled, this option causes the router to automatically measure the useful uplink bandwidth each time the WAN interface is re-established (e.g. after a reboot). This is the uplink speed measured when the WAN interface was last re-established. The value may be lower than that reported by your ISP as it does not include all of the network protocol overheads associated with your ISP's network. Typically, this figure will be between 87% and 91% of the stated uplink speed for xDSL connections and around 5 kbps lower for cable network connections. 36 Automatic Uplink Speed: Measured Uplink Speed: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Advanced > StreamEngine (continued) Uplink Speed: If Automatic Uplink Speed is disabled, this options allows you to set the uplink speed manually. Uplink speed is the speed at which data can be transferred from the router to your ISP. This is determined by your ISP. ISPs often specify speed as a downlink/uplink pair; for example, 1.5Mbits/284Kbits. For this example, you would enter "284". Alternatively you can test your uplink speed with a service such as www.dslreports.com. Note however that sites such as DSL Reports, because they do not consider as many network protocol overheads, will generally note speeds slightly lower than the Measured Uplink Speed or the ISP rated speed. By default, the router automatically determines whether the underlying connection is an xDSL/Frame-relay network or some other connection type (such as cable modem or Ethernet), and it displays the result as Detected xDSL or Frame Relay Network. If you have an unusual network connection in which you are actually connected via xDSL but for which you configure either "Static" or "DHCP" in the WAN settings, setting this option to xDSL or Other Frame Relay Network ensures that the router will recognize that it needs to shape traffic slightly differently in order to give the best performance. Choosing xDSL or Other Frame Relay Network causes the measured uplink speed to be reported slightly lower than before on such connections, but gives much better results. When Connection Type is set to Auto-detect, the automatically detected connection type is displayed here. Connection Type: Detected xDSL or Other Frame Relay Network: D-Link Systems, Inc. 37 DI-634M User's Manual Using the Configuration Menu Advanced > Filters (IP Filters) Use IP Filters to deny LAN (Local Area Network) computers access to the Internet. Enter the IP address or range of IP addresses and the ports you would like to block access to. Filters: IP Range: Port: Protocol Type: Schedule: Details: D-Link Systems, Inc. Select Enabled or Disabled. Enter the IP address or range you want to block. Enter the port or range of ports to block. Select the protocol type (TCP, UDP, or Both). Select a schedule from the drop-down menu. Enter a description for your rule. 38 DI-634M User's Manual Using the Configuration Menu Advanced > Filters (MAC Filters) Use MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network) computers by their MAC addresses from accessing the Network. You can either manually add a MAC address or select the MAC address from the list of clients that are currently connected to the Broadband Router. Filters: Select the filter you wish to use; in this case, MAC filters was chosen. Choose Disable MAC filters; allow MAC addresses listed below; or deny MAC addresses listed below. Enter the name here. Enter the MAC Address. Select a DHCP client from the pull-down list; click Clone to copy that MAC Address. 39 MAC Filters: Name: MAC Address: DHCP Client: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Advanced > Parental Controls The Parental Controls section controls access to Web sites from computers on the LAN. URL Blocking: Domain: Select Enabled or Disabled. Enter the domain name that you want to allow; for example: google.com. Do not enter the http:// preceding the URL. Enter the most inclusive domain; for example, enter dlink.com and access will be permitted to both www.dlink.com and support. dlink.com. Note: Many web sites construct pages with images and content from other web sites. Access will be forbidden if you do not enable all the web sites used to construct a page. For example, to access my.yahoo.com, you need to enable access to yahoo. com, yimg.com, and doubleclick.net. D-Link Systems, Inc. 40 DI-634M User's Manual Using the Configuration Menu Advanced > Firewall The Firewall option is an advanced method of controlling data received from the Internet. With this feature you can configure inbound data filtering rules that control data based on IP Address. The Firewall option is best suited for custom applications. For most applications you should use the Virtual Server, Special Applications, or Gaming section to create rules that will allow applications to communicate through the router. Name: Action: Source IP: Enter a name for your rule. Select Allow or Deny. Define the range of Internet addresses this rule applies to. D-Link Systems, Inc. 41 DI-634M User's Manual Using the Configuration Menu Advanced > DMZ If you have a client PC that cannot run Internet applications properly from behind the DI-634M, then you can set the client up for unrestricted Internet access. It allows a computer to be exposed to the Internet. This feature is useful for gaming purposes. Enter the IP address of the internal computer that will be the DMZ host. Adding a client to the DMZ (Demilitarized Zone) may expose your local network to a variety of security risks, so only use this option as a last resort. DMZ: Enable or Disable the DMZ. The DMZ (Demilitarized Zone) allows a single computer to be exposed to the internet. By default the DMZ is disabled. Enter the IP Address of the computer to be in the DMZ. IP Address: D-Link Systems, Inc. 42 DI-634M User's Manual Using the Configuration Menu Advanced > Performance Transmit Power: Normally the wireless transmitter operates at 100% power. In some circumstances, however, there might be a need to isolate specific frequencies to a smaller area. By reducing the power of the radio, you can prevent transmissions from reaching beyond your corporate/home office or designated wireless area. Beacons are packets sent by a wireless router to synchronize wireless devices. Specify a Beacon Interval value between 20 and 1000 milliseconds. The default value is 100 milliseconds. This setting should remain at its default value of 2346. If you encounter inconsistent data flow, only minor modifications to the value range between 1 and 2346 are recommended. This setting should remain at its default value of 2346. Setting the Fragmentation value too low may result in poor performance. A DTIM is a countdown for informing clients of the next window for listening to broadcast and multicast messages. When the wireless router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. Wireless clients detect the beacons and awaken to receive the broadcast and multicast messages. The default value is 1. Valid settings are between 1 and 255. 43 Beacon Interval: RTS Threshold: Fragmentation Threshold: DTIM Interval: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Advanced > Schedules Schedules define the times with other rules are in force. For example, if you want to restrict web access to Mon-Fri from 3pm to 8pm, you could create a schedule selecting Mon, Tue, Wed, Thu, and Fri and enter a Start Time of 3pm and End Time of 8pm. Name: Day(s): Enter a name for the rule. Place a checkmark in the boxes for the desired days, or select the All Week radio button to schedule all seven days of the week. Select this option if you want this schedule in effect all day for the selected day(s). If you don't use the All Day option, then you enter the time here. The start time is entered in two fields. The first box is for the hour and the second box is for the minute. Email events are triggered only by the start time. The end time is entered in the same format as the start time. The hour in the first box and the minutes in the second box. The end time is used for most other rules, but is not used for email events. All Day - 24 hrs: Start Time: End Time: D-Link Systems, Inc. 44 DI-634M User's Manual Using the Configuration Menu Tools > Admin Admin Password: Enter a password for the user "admin", who will have full access to the Web-based management interface. Enter a password for the user "user", who will have read-only access to the Web-based management interface. Enabling Remote Management allows you to manage the router from anywhere on the Internet. Disabling Remote Management allows you to manage the router only from computers on your LAN. The port that you will use to address the management interface from the Internet. For example, if you choose port 1080 here, then, to access the router from the Internet, you would use a URL of the form: http://my.domain.com:1080/. Select a firewall rule that controls access as needed for this admin port. If you do not see the firewall rule you need in the list of firewall rules, go to the Advanced > Firewalls page and create a new firewall rule. 45 User Password: Remote Management: Port: Remote Admin Firewall Rule: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Tools > Time The Time Configuration option allows you to configure, update, and maintain the correct time on the router's internal system clock. From this section you can set the time zone that you are in and set the Time Server. Daylight saving can also be configured to automatically adjust the time when needed. Maintaining accurate time is important if you have created schedule-based rules. Automatic: Select Automatic to use the default time server or enter a specific time server next to Customized NTP. You must be connected to the Internet. To manually input the time, select Manual and enter the values for the Year, Month, Day, Hour, and Minute. After inputing the values, click Apply. Select your time zone from the drop-down menu. Select Enabled or Disabled. Manual: Daylight Saving: D-Link Systems, Inc. 46 DI-634M User's Manual Using the Configuration Menu Tools > System Save Settings to Local Hard Drive: Use this option to save the current router configuration settings to a file on the hard disk of the computer you are using. First, click the Save button. You will then see a file dialog, where you can select a location and file name for the settings. Use this option to load previously saved router configuration settings. First, use the Browse control to find a previously save file of configuration settings. Then, click the Load button to transfer those settings to the router. This option will restore all configuration settings back to the settings that were in effect at the time the router was shipped from the factory. Any settings that have not been saved will be lost, including any rules that you have created. If you want to save the current router configuration settings, use the Save button above. 47 Load Settings from Local Hard Drive: Restore to Factory Default Settings: D-Link Systems, Inc. DI-634M User's Manual Using the Configuration Menu Tools > System (continued) Save to Windows Connect Now: If your PC's operating system is Windows XP Service Pack 2 (SP2) or later and you are using Windows Internet Explorer (IE) as your browser (or any browser that supports ActiveX controls), you can use this option to save key parts of the router's current wireless security settings to your PC with Windows Connect Now (WCN) technology. The settings will then be available to propagate to other wireless devices. The WCN ActiveX Control provides the necessary WCN link between the router and your PC via the browser. The browser will attempt to download the WCN ActiveX Control, if it is not already available on your PC. For this action to succeed, you must already have a WAN connection, and the browser's Internet security setting must be Medium or lower (select Tools > Internet Options > Security > Custom Level > Medium). WCN ActiveX Control: When the necessary preparations are complete, click the Save to Windows Connect Now button, and the WCN technology will capture the wireless network settings from your router and save them on your PC. Note that WCN only saves a few of the wireless security settings. When you use WCN to propagate settings to other wireless devices, you may have to make additional settings manually on those devices. Note that, in Microsoft's current implementation of WCN, you cannot save the wireless settings if a profile of the same name already exists. To work around this limitation, either delete the existing profile or change the SSID when you change the wireless settings; then, when you save the new settings, a new profile will be created. D-Link Systems, Inc. 48 DI-634M User's Manual Using the Configuration Menu Tools > Firmware You can upgrade the firmware of the Router here. Make sure the firmware you want to use is on the local hard drive of the computer. Click on Browse to browse the local hard drive and locate the firmware to be used for the update. Please check the D-Link support site for firmware updates at http://support.dlink.com. You can download firmware upgrades to your hard drive from the D-Link support site. Firmware Upgrade: Click on the link in this screen to find out if there is an updated firmware; if so, download the new firmware to your hard drive. After you have downloaded the new firmware, click Browse in this window to locate the firmware update on your hard drive. Click Apply to complete the firmware upgrade. Browse: D-Link Systems, Inc. 49 DI-634M User's Manual Using the Configuration Menu Tools > DDNS The Dynamic DNS feature allows you to host a server (Web, FTP, Game Server, etc.) using a domain name that you have purchased (www.whateveryournameis.com) with your dynamically assigned IP address. Most broadband Internet Service Providers assign dynamic (changing) IP addresses. When you use a Dynamic DNS service provider, others can enter your domain name to connect to your server, no matter what your IP address is. The router automatically updates your DDNS server every time it receives a different IP address. DDNS: If Enabled, this will allow you to use the DDNS update client built into the router. Choose your DDNS provider from the drop-down menu. Enter the hostname that you registered with your DDNS service provider. Enter the username for your DDNS acount. Enter the password for your DDNS account. Server Address: Host Name: User Name or Key: Password or Key: D-Link Systems, Inc. 50