User manual D-LINK DI-774

D-Link Air Xpert DI-774 2.4 GHz / 5 GHz Tri-Mode Dualband Wireless Router Manual Building Networks for People Contents Package Contents ................................................................................3 Introduction............................................................................................4 Connections .......................................................................................... 5 Features ...............................................................................................6 LEDs ....................................................................................................7 Wireless Basics ....................................................................................8 Getting Started ....................................................................................10 Using the Configuration Menu.............................................................. 11 Networking Basics ..............................................................................43 Troubleshooting ...................................................................................58 Technical Specifications ......................................................................64 Frequently Asked Questions ................................................................67 Contacting Technical Support ..............................................................95 Warranty and Registration ...................................................................96 2 Package Contents Contents of Package: ! D-Link Air Xpert DI-774 2.4GHz/5GHz Tri-Mode Dualband Wireless Router ! ! ! ! Power Adapter ­ 5V DC, 3.0A Manual on CD Quick Installation Guide Ethernet Cable Note: Using a power supply with a different voltage rating than the one included with the DI-774 will cause damage and void the warranty for this product. If any of the above items are missing, please contact your reseller. System Requirements For Configuration: ! Computer with Windows, Macintosh, or Linux-based operating system with an installed Ethernet adapter 3 Introduction At up to five times the speed of previous wireless devices, you can work faster and more efficiently, increasing productivity. With the DI-774, bandwidth-intensive applications like graphics or multimedia will benefit significantly because large files are able to move across the network quickly. This versatile wireless router also features four times the number of non-overlapping channels than a device that supports only 802.11g, so more users can access the network. Support for all three standards (802.11g; 802.11a; 802.11b) means that you can grow your network without having to worry about legacy wireless equipment being incompatible with newer compliant devices from other manufacturers. This also allows network administrators to partition the usage of the dualband by segmenting users and creating special access privilege networks for classified document transfer and communications. With the DI-774 you can securely connect to wireless clients on the network using 802.1x for wireless user authentication, as well as WPA (Wi-Fi Protected AccessTM) providing you a much higher level of security for your data and communications than has previously been available. Through its easy-to-use Web-based user interface, the DI-774 lets you control the information that is accessible to those on the wireless network, whether from the Internet or from your company's server: Content Filtering ­ Easily applied content filtering based on MAC Address, IP Address, URL and /or Domain Name. Filter Scheduling ­ Filters can be scheduled to be active on certain days or for a duration of hours or minutes. Network Address Translation ­ NAT protects the DI-774 and its users from outside intruders gaining access to your private network VPN Multiple/Concurrent Sessions ­ Supports multiple and concurrent IPSec and PPTP sessions, so multiple users behind the DI-774 can access corporate networks through various VPN clients more securely. 4 Connections - Back Panel of Unit All Ethernet Ports (WAN and LAN) are auto MDI/MDIX, meaning you can use either a straight-through or a crossover Ethernet cable. Pressing the Reset Button restores the router to its original factory default settings. Auto MDI/MDIX LAN ports automatically sense the cable type when connecting to Ethernet-enabled computers. The Auto MDI/MDIX WAN port is the connection for the Ethernet cable to the Cable or DSL modem Receptor for the Power Adapter 5 Features ! Fully compatible with the 802.11a and 802.11g standards to provide a wireless data rate of up to 54Mbps ! Backwards compatible with the 802.11b standard to provide a wireless data rate of up to 11Mbps ! WPA (Wi Fi Protected Access TM ) authorizes and identifies users based on a secret key that changes automatically at a regular interval, for example: ! TKIP (Temporal Key Integrity Protocol), in conjunction with a RADIUS server, changes the temporal key every 10,000 packets, ensuring greater security ! Pre-Shared Key mode means that the home user, without a RADIUS server, will obtain a new security key every time the he or she connects to the network, vastly improving the safety of communications on the network. ! 802.1x Authentication in conjunction with the RADIUS server verifies the identity of would be clients ! Utilizes OFDM technology (Orthogonal Frequency Division Multiplexing) to ensure strong wireless signals for both 802.11g and 802.11a ! User-friendly configuration and diagnostic utilities ! Operates in the 2.4GHz and 5GHz frequency ranges ! Connects multiple computers to a Broadband (Cable or DSL) modem to share the Internet connection ! Advanced Firewall features ! Supports NAT with VPN pass-through, providing added security ! MAC Filtering ! IP Filtering ! URL Filtering ! Domain Blocking ! Scheduling ! DHCP server supported enables all networked computers to automatically receive IP addresses ! Web-based interface for Managing and Configuring ! Access Control to manage users on the network ! Supports special applications that require multiple connections ! Equipped with 4 10/100 Ethernet ports, 1 WAN port, Auto MDI/MDIX 6 LEDs - Front Panel of Unit LED stands for Light-Emitting Diode. The DI-774 has the following LEDs: Power A solid light indicates a proper connection to the power supply Status A blinking light indicates that the DI-774 is ready WAN LED A solid light indicates connection on the WAN port. This LED blinks during data transmission WLAN LEDs for 11a and 11g wireless network segments. A solid light indicates that the wireless segment is ready. The LEDs blink during wireless data transmission Local Network LEDs A solid light indicates a connection to an Ethernet-enabled computer on ports 14. The LEDs blink during data transmission 7 Wireless Basics D-Link wireless products are based on industry standards to provide easy-to-use and compatible high-speed wireless connectivity within your home, business or public access wireless networks. D-Link wireless products will allow you access to the data you want, when and where you want it. You will be able to enjoy the freedom that wireless networking brings. A WLAN is a cellular computer network that transmits and receives data with radio signals instead of wires. WLANs are used increasingly in both home and office environments, and public areas such as airports, coffee shops and universities. Innovative ways to utilize WLAN technology are helping people to work and communicate more efficiently. Increased mobility and the absence of cabling and other fixed infrastructure have proven to be beneficial for many users. Wireless users can use the same applications they use on a wired network. Wireless adapter cards used on laptop and desktop systems support the same protocols as Ethernet adapter cards. People use wireless LAN technology for many different purposes: Mobility - Productivity increases when people have access to data in any location within the operating range of the WLAN. Management decisions based on real-time information can significantly improve worker efficiency. Low Implementation Costs ­ WLANs are easy to set up, manage, change and relocate. Networks that frequently change can benefit from WLANs ease of implementation. WLANs can operate in locations where installation of wiring may be impractical. Installation and Network Expansion - Installing a WLAN system can be fast and easy and can eliminate the need to pull cable through walls and ceilings. Wireless technology allows the network to go where wires cannot go - even outside the home or office. Scalability ­ WLANs can be configured in a variety of topologies to meet the needs of specific applications and installations. Configurations are easily changed and range from peer-to-peer networks suitable for a small number of users to larger infrastructure networks to accommodate hundreds or thousands of users, depending on the number of wireless devices deployed. Inexpensive Solution - Wireless network devices are as competitively priced as conventional Ethernet network devices. 8 Wireless Basics (continued) Standards-Based Technology The DI-774 Wireless Broadband Router utilizes the new 802.11g standard, in addition to the 802.11a and 802.11b standards. The IEEE 802.11g standard is an extension of the 802.11b standard. It increases the data rate up to 54 Mbps within the 2.4GHz band, utilizing OFDM technology. This means that in most environments, within the specified range of this device, you will be able to transfer large files quickly or even watch a movie in MPEG format over your network without noticeable delays. This technology works by transmitting high-speed digital data over a radio wave utilizing OFDM (Orthogonal Frequency Division Multiplexing) technology. OFDM works by splitting the radio signal into multiple smaller sub-signals that are then transmitted simultaneously at different frequencies to the receiver. OFDM reduces the amount of crosstalk (interference) in signal transmissions. . Installation Considerations The D-Link Air Xpert DI-774 lets you access your network, using a wireless connection, from virtually anywhere within its operating range. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to follow these basic guidelines: 1 Keep the number of walls and ceilings between the DI-774 and other network devices to a minimum - each wall or ceiling can reduce your D-Link wireless product's range from 3-90 feet (1-30 meters.) Position your devices so that the number of walls or ceilings is minimized. Be aware of the direct line between network devices. A wall that is 1.5 feet thick (.5 meters), at a 45-degree angle appears to be almost 3 feet (1 meter) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better reception. Building Materials can impede the wireless signal - a solid metal door or aluminum studs may have a negative effect on range. Try to position wireless devices and computers with wireless adapters so that the signal passes through drywall or open doorways and not other materials. Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate extreme RF noise. 2 3 4 9 Getting Started Setting up a Wireless Infrastructure Network 1 2 3 4 6 5 For a typical wireless setup at home (as shown above), please do the following: You will need broadband Internet access (a Cable or DSL-subscriber line into your home or office) Consult with your Cable or DSL provider for proper installation of the modem Connect the Cable or DSL modem to the DI-774 Wireless Router (see the printed Quick Installation Guide included with your router.) If you are connecting a desktop computer to your network, install the D-Link Air Xpert DWL-AG520 wireless PCI adapter into an available PCI slot on your desktop computer. (See the printed Quick Installation Guide included with the network adapter.) Install the D-Link DWL-AG650 wireless Cardbus adapter into a laptop computer. (See the printed Quick Installation Guide included with the DWL-AG650.) Install the D-Link DFE-530TX+ wireless Cardbus adapter into a desktop computer. The four Ethernet LAN ports of the DI-774 are Auto MDI/MDIX and will work with both Straight-through and Crossover cable. (See the printed Quick Installation Guide included with the DFE-530TX+.) 10 Using the Configuration Menu Whenever you want to configure your network or the DI-774, you can access the Configuration Menu by opening the web-browser and typing in the IP Address of the DI-774. The DI-774 default IP Address is shown here: ! Open the web browser ! Type in the IP Address of http://192.168.0.1 the Router (http://192.168.0.1) Note: if you have changed the default IP Address assigned to the DI-774, make sure to enter the correct IP Address. ! ! ! Type admin in the User Name field Leave the Password blank Click OK Home > Wizard The Home>Wizard screen will appear. Please refer to the Quick Installation Guide for more information regarding the Setup Wizard. These buttons appear on most of the configuration screens in this section. Please click on the appropriate button at the bottom of each screen after you have made a configuration change. 11 Using the Configuration Menu (continued) Home > Wireless > Open or Shared 52 Wireless SettingsChoose 802.11a or 802.11g. Here, 802.11a is selected. 802.11a uses the 5GHz frequency range and can support speeds of up to 54Mbps. 802.11g uses the 2.4GHz frequency range and can support speeds of up to 54Mbps. 802.11g is also backwards compatible with 802.11b. SSID"default" is the default setting. All devices on the network must share the same SSID. If you change the default setting, the SSID may be up to 32 characters long. 12 Using the Configuration Menu (continued) Home > Wireless > Open or Shared (continued) Channel52 is the default channel for 802.11a. 6 is the default channel for 802.11g. All devices on the network must share the same channel. Open System - communicates the key across the network Shared Key - devices must have identical WEP settings in order to communicate in the network WPA - Wi-Fi Protected Access authorizes and authenticates users onto the wireless network. WPA uses stronger security than WEP and is based on a key that changes automatically at a regular interval. This mode requires a RADIUS server in the network. WPA-PSK - Pre-Shared Key mode means that the wireless client and the router must have the same passphrase in order to establish the wireless connection. A RADIUS server is not required with PSK. Authentication- WEPWEP Encryption- Select Enabled or Disabled. Disabled is the default setting. Select the level of encryption desired: 64, 128 or 152-bit All the devices on your network must share the same wireless settings in order to communicate. Key Type- Select HEX or ASCII Hexadecimal digits consist of the numbers 0-9 and the letters A-F ASCII (American Standard Code for Information Interchange) is a code for representing English letters as numbers from 0-127 Keys 1-4- Input up to 4 WEP keys; select the one you wish to use. 13 Using the Configuration Menu (continued) Home > Wireless > WPA 1 1 1 Authentication- WPA (Wi-Fi Protected Access) is selected. Wi-Fi Protected Access authorizes and authenticates users onto the wireless network. WPA uses stronger security than WEP and is based on a key that changes automatically at a regular interval.This mode requires the inclusion of a RADIUS server in your network. 802.1x Authentication is a first line of defense against intrusion. In the Authentication process the server verifies the identity of the client attempting to connect to the network. Unfamiliar clients are denied access. Select 5, 15, 30 minutes, or 1 or 8 hours, or 1 day for the authentication period. After this period expires, a new key will automatically be generated. IP - Enter the IP Address of the RADIUS server. Port - Enter the port number that your RADIUS server uses for Authentication. The default setting of 1812 is the port setting for many RADIUS servers. Shared Secret - Enter the Shared Secret. The Shared Secret must be the same as the Shared Secret on your RADIUS server. 802.1x Lifetime- Radius Server 1- Radius Server 2- Optional. If you have a second RADIUS server, you will input the same information as shown above. 14 Using the Configuration Menu (continued) Home > Wireless > WPA-PSK 1 Authentication- WPA-PSK - Pre-Shared Key mode means that the wireless client and the router must have the same passphrase in order to establish the wireless connection. A RADIUS server is not required with PSK. Enter a passphrase for the router. The RADIUS server should use the same passphrase (secret key) as the router. Passphrase- 15 Using the Configuration Menu (continued) Home > WAN > Dynamic IP Address Dynamic IP AddressHost NameMAC AddressClone MAC Address- Most Cable modem users will select this option to obtain an IP Address automatically from their ISP (Internet Service Provider). This is optional, but may be required by some ISPs. The host name is the device name of the Router. The default MAC Address is set to the WAN's physical interface MAC address on the Router. Copy the MAC address of the Ethernet card installed by your ISP, and replace the WAN MAC address with this Ethernet card MAC address. It is not recommended that you change the default MAC address unless required by your ISP. Primary/Secondary Enter a DNS Address if you do not wish to use the one provided by your ISP. (DNS is short for Domain Name System. It transDNSlates domain names into IP Addresses). MTU- Enter an MTU value only if required by your ISP. Otherwise, leave this section to its default setting of 1500. (MTU is short for Maximum Transfer Unit. Messages longer than the MTU 16 will be divided into smaller units for transmission). Using the Configuration Menu (continued) Home > WAN > Static IP Address Static IP AddressIP AddressSubnet MaskISP Gateway AddressPrimary/ Secondary DNS- Select this option to set static IP information provided to you by your ISP. Input the IP Address provided by your ISP Input your Subnet mask. (All devices in the network must have the same subnet mask.) Input the Gateway address Enter a DNS Address if you do not wish to use the one provided by your ISP. (DNS is short for Domain Name System. It translates domain names into IP Addresses). Enter an MTU value only if required by your ISP. Otherwise, leave this section to its default setting of 1500. (MTU is short for Maximum Transfer Unit. Messages longer than the MTU will be divided into smaller units for transmission). MTU- 17 Using the Configuration Menu (continued) Home > WAN > PPPoE Please be sure to remove any existing PPPoE client software installed on your computers. PPPoE- Choose this option if your ISP uses PPPoE. (Most DSL users will select this option). Dynamic PPPoE- receive an IP Address automaticsally from your ISP. Static PPPoE- you have an assigned (static) IP Address. User NamePassword- Your PPPoE username provided by your ISP. Your PPPoE password provided by your ISP. Retype Password- Re-enter the PPPoE password Service NameIP AddressEnter the Service Name provided by your ISP (optional). This option is only available for Static PPPoE. Enter the static IP Address for the PPPoE connection. 18 Using the Configuration Menu (continued) Home > WAN > PPPoE continued Primary/Secondary Enter a DNS Address if you do not wish to use the one provided by your ISP. (DNS is short for Domain Name System. It transDNSlates domain names into IP Addresses). Maximum Idle TimeMTUAuto-reconnect- Enter a maximum idle time during which Internet connection is maintained during inactivity. To disable this feature, enter zero or enable Auto-reconnect. Maximum Transmission Unit-1472 is default-you may need to change the MTU to conform with your ISP. If enabled, the DI-774 will automatically connect to your ISP after your system is restarted or if the connection is dropped. Home > LAN LAN is short for Local Area Network. This is considered your internal network. These are the IP settings of the LAN interface for the DI-774. These settings may be referred to as Private settings. You may change the LAN IP Address if needed. The LAN IP Address is private to your internal network and cannot be seen on the Internet. IP AddressSubnet MaskLocal Domain Name- The IP Address of the LAN interface. The default IP Asddress is: 192.168.0.1 The subnet mask of the LAN interface. The default subnet mask is 255.255.255.0 The domain name assigned to the router 19 Using the Configuration Menu (continued) Home > DHCP DHCP stands for Dynamic Host Control Protocol. The DI-774 has a built-in DHCP server. The DHCP Server will automatically assign an IP Address to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to "Obtain an IP Address Automatically." When you turn your computers on, they will automatically load the proper TCP/ IP settings provided by the DI-774. The DHCP Server will automatically allocate an unused IP Address from the IP Address pool to the requesting computer. You must specify the starting and ending address of the IP Address pool. DHCP ServerStarting IP AddressEnding IP AddressLease TimeStatic DHCPStatic & Dynamic DHCP Client TableSelect Enabled or Disabled The starting IP Address for the DHCP server's IP assignment The ending IP Address for the DHCP server's IP assignment The length of time of the DHCP lease Enable the Static DHCP server to assign the same IP Address to a MAC Address that you specify here. This prevents the problems sometimes encountered with changing IP Addresses Displays a list of Static and Dynamic DHCP clients assigned by the router 20 Using the Configuration Menu (continued) Advanced > Virtual Server The DI-774 can be configured as a virtual server so that remote users accessing Web or FTP services via the public IP Address can be automatically redirected to local servers in the LAN (Local Area Network). The DI-774 firewall feature filters out unrecognized packets to protect your LAN network so all computers networked with the DI-774 are invisible to the outside world. If you wish, you can make some of the LAN computers accessible from the Internet by enabling Virtual Server. Depending on the requested service, the DI-774 redirects the external service request to the appropriate server within the LAN network. 21 Using the Configuration Menu (continued) Advanced > Virtual Server continued The DI-774 is also capable of port-redirection meaning incoming traffic to a particular port may be redirected to a different port on the server computer. Each virtual service that is created will be listed at the bottom of the screen in the Virtual Servers List. There are pre-defined virtual services already in the table. You may use them by enabling them and assigning the server IP to use that particular virtual service. Virtual ServerNamePrivate IPProtocol TypePrivate PortPublic Port- Select Enabled or Disabled Enter the name referencing the virtual service The server computer in the LAN (Local Area Network) that will be providing the virtual services. The protocol used for the virtual service The port number of the service used by the Private IP computer The port number on the WAN (Wide Area Network)side that will be used to access the virtual service. The schedule of time when the virtual service will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. If it is set to Time, select the time frame for the service to be enabled. If the system time is outside of the scheduled time, the service will be disabled. Schedule- Example #1: If you have a Web server that you wanted Internet users to access at all times, you would need to enable it. Web (HTTP) server is on LAN (Local Area Network) computer 192.168.0.25. HTTP uses port 80, TCP. Name: Web Server Private IP: 192.168.0.25 Protocol Type: TCP Private Port: 80 Public Port: 80 Schedule: always 22 Using the Configuration Menu (continued) Advanced > Virtual Server continued Click on this icon to edit the virtual service Click on this icon to delete the virtual service Example #2: If you have an FTP server that you wanted Internet users to access by WAN port 2100 and only during the weekends, you would need to enable it as such. FTP server is on LAN computer 192.168.0.30. FTP uses port 21, TCP. Name: FTP Server Private IP: 192.168.0.30 Protocol Type: TCP Private Port: 21 Public Port: 2100 Schedule: From: 01:00AM to 11:00PM, Sat to Sun All Internet users who want to access this FTP Server must connect to it from port 2100. This is an example of port redirection and can be useful in cases where there are many of the same servers on the LAN network. 23 Using the Configuration Menu (continued) Advanced > Applications Some applications require multiple connections, such as Internet gaming, video conferencing, Internet telephony and others. These applications have difficulties working through NAT (Network Address Translation). Special Applications makes some of these applications work with the DI-774. If you need to run applications that require multiple connections, specify the port normally associated with an application in the "Trigger Port" field, select the protocol type as TCP or UDP, then enter the public ports associated with the trigger port to open them for inbound traffic. The DI-774 provides some predefined applications in the table on the bottom of the web page. Select the application you want to use and enable it. Note! Only one PC can use each Special Application tunnel. Name: Trigger Port: Trigger Type: Public Port: This is the name referencing the special application. This is the port used to trigger the application. It can be either a single port or a range of ports. This is the protocol used to trigger the special application. This is the port number on the WAN side that will be used to access the application. You may define a single port or a range of ports. You can use a comma to add multiple ports or port ranges. This is the protocol used for the special application. Public Type: 24 Using the Configuration Menu (continued) Advanced > Filters > IP Filters Filters are used to deny or allow LAN (Local Area Network) computers from accessing the Internet. The DI-774 can be setup to deny internal computers by their IP or MAC addresses. The DI-774 can also block users from accessing restricted web sites. IP Filters- Use IP Filters to deny LAN IP Addresses from accessing the Internet. You can deny specific port numbers or all ports for the specific IP Address. The IP Address of the LAN computer that will be denied access to the Internet. The single port or port range that will be denied access to the Internet. Select the protocol type This is the schedule of time when the IP Filter will be enabled. IPPortProtocol TypesSchedule- 25 Using the Configuration Menu Advanced > Filters > URL Blocking URL Blocking is used to deny LAN computers from accessing specific web sites. A URL is a specially formatted text string that defines a location on the Internet. If any part of the URL contains the blocked word, the site will not be accessible and the web page will not display. FiltersURL BlockingKeywords- Select the filter you wish to use; in this case, URL Blocking was chosen. Select Enabled or Disabled. Block URLs which contain the keywords listed below. Enter the keywords in this space. 26 Using the Configuration Menu Advanced > Filters > MAC Filters Use MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network) computers by their MAC addresses from accessing the Internet. You can either manually add a MAC address or select the MAC address from the list of clients that are currently connected to the Broadband Router. FiltersMAC FiltersNameMAC AddressDHCP Client- Select the filter you wish to use; in this case, MAC filters was chosen. Choose to Disable MAC filters, or choose to allow or deny MAC addresses listed below. Enter the name here. Enter the MAC Address of the client that will be allowed or denied access. Select a DHCP client from the pull-down list; click Clone to copy that MAC Address. 27 Using the Configuration Menu (continued) Advanced > Filters > Domain Blocking Domain Blocking is used to allow or deny LAN (Local Area Network) computers from accessing specific domains on the Internet. Domain blocking will deny all requests to a specific domain such as http and ftp. It can also allow computers to access specific sites and deny all other sites. FiltersDomain Blocking DisabledAllowDeny- Select the filter you wish to use; in this case, Domain Blocking was chosen. Select Disabled to disable Domain Blocking Allows users to access all domains except Blocked Domains Denies users access to all domains except Permitted Domains Enter the Permitted Domains in this field Permitted Domains- Blocked Domains- Enter the Blocked Domains in this field 28 Using the Configuration Menu (continued) Advanced > Firewall Firewall Rules is an advanced feature used to deny or allow traffic from passing through the DI-774. It works in the same way as IP Filters with additional settings. You can create more detailed access rules for the DI-774. When virtual services are created and enabled, it will also display in Firewall Rules. Firewall Rules contains all network firewall rules pertaining to IP (Internet Protocol). In the Firewall Rules List at the bottom of the screen, the priorities of the rules are from top (highest priority) to bottom (lowest priority.) Note: The DI-774 MAC Address filtering rules have precedence over the Firewall Rules. Firewall RulesNameActionSourceDestinationSchedule- Enable or disable the Firewall Rules Enter a name for the rule Allow or deny IP traffic through the router Enter the IP Address range Enter the IP Address range; the Protocol; and the Port Range Select Always or enter the Time. 29 Using the Configuration Menu (continued) Advanced > DMZ If you have a client PC that cannot run Internet applications properly from behind the DI-774, then you can set the client up to unrestricted Internet access. It allows a computer to be exposed to the Internet. This feature is useful for gaming purposes. Enter the IP Address of the internal computer that will be the DMZ host. Adding a client to the DMZ (Demilitarized Zone) may expose your local network to a variety of security risks, so only use this option as a last resort. DMZIP Address- Enable or disable the DMZ. The DMZ (Demilitarized Zone) allows a single computer to be exposed to the Internet. Enter the IP Address of the computer to be in the DMZ 30 Using the Configuration Menu (continued) Wireless PerformanceSelect 802.11a or 802.11g. Here, 802.11a has been chosen. This screen displays the wireless performance features of the Access Point portion of the DI-774. Advanced > Performance > 802.11a Data RateAuto is the default selection. Select from the drop down menu for your selection. Transmit PowerBeacon interval- Full is the default selection. Select from the drop down menu for your selection. Beacons are packets sent by the DI-774 to synchronize a wireless network. Specify a value. 100 is the default setting and is recommended. This value should remain at its default setting of 2346. If inconsistent data flow is a problem, only a minor modification should be made. This value should also remain at its default setting of 2346. If you experience a high packet error rate, you may slightly increase your Fragmentation value within the range of 256-2346. Setting the Fragmentation value too low may result in poor performance. (Delivery Traffic Indication Message) 1 is the default setting. A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages. RTS Threshold- Fragmentation- DTIM interval- Authentication- Select Open system or Shared Key Open System - The DI-774 will be visible to all devices on the network. This is the default setting Shared Key - In this mode, in order to access the DI-774 on the network, the device must be listed in the MAC Address Control List Choose Enabled to broadcast the SSID across the network. All devices on a network must share the same SSID (Service Set Identifier) to establish communication. Choose Disabled if you do not wish to broadcast the SSID over the network. SSID Broadcast- 31 Using the Configuration Menu (continued) Wireless PerformanceSelect 802.11a or 802.11g. 802.11g is selected here. Displayed in this window are the Wireless Performance features for the Access Point portion of the DI-774. Advanced > Performance > 802.11g TX RatesAuto is the default selection. Select from the drop down menu for your selection. Transmit PowerBeacon interval- Full is the default selection. Select from the drop down menu for your selection. Beacons are packets sent by the DI-774 to synchronize a wireless network. Specify a value. 100 is the default setting and is recommended. This value should remain at its default setting of 2346. If inconsistent data flow is a problem, only a minor modification should be made. This value should also remain at its default setting of 2346. If you experience a high packet error rate, you may slightly increase your Fragmentation value within the range of 256-2346. Setting the Fragmentation value too low may result in poor performance. (Delivery Traffic Indication Message) 1 is the default setting. A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages. Select Open system or Shared Key The DI-774 will be visible to all devices on the network. This is the default setting In this mode, in order to access the DI-774 on the network, the device must be listed in the MAC Address Control List Choose Enabled to broadcast the SSID across the network. All devices on a network must share the same SSID (Service Set Identifier) to establish communication. Choose Disabled if you do not wish to broadcast the SSID over the network. RTS Threshold- Fragmentation- DTIM interval- AuthenticationOpen System Shared Key - SSID Broadcast- 32 Using the Configuration Menu (continued) Advanced > Performance > 802.11g (continued) CTS ModeCTS (Clear To Send) is a function used to minimize collisions among wireless devices on a wireless local area network (LAN). CTS will make sure the wireless network is clear before a wireless client attempts to send wireless data. Enabling CTS will add overhead and may lower wireless throughput. None- CTS is typically used in a pure 802.11g environment. If CTS is set to "None" in a mixed mode environment populated by 802.11b clients, wireless collisions may occur frequently. LAN is clear before sending data. Always- CTS will always be used to make sure the wireless AutoCTS will monitor the wireless network and automatically decide whether to implement CTS based on the amount of traffic and collisions that occurs on the wireless network. 802.11g only mode- Select this mode to restrict your network to only those devices that employ the 802.11g standard. Enabling this mode will ensure that you maintain the highest connectivity rate, unhampered by any connection to an 802.11b device. Tools> Admin Administrator Login Nameuser (lower case) is the default login name for the user account. The user account has read-only access to the router. User Login Nameadmin (lower case) is the default login name for the admin account. The admin account has read/write access to the router. Admin PasswordUser Password- The default setting is blank - no password. To change the password, enter and confirm the new password. The default setting is blank - no password. To change the password, enter and confirm the new password. 33 Using the Configuration Menu (continued) Tools> Admin (continued) Remote Management Remote Management allows the DI-774 to be configured from the Internet by a web browser. A username and password is still required to access the Web-Management interface. In general, only a member of your network can browse the built-in web pages to perform "Administrator" tasks. This feature enables you to perform "Administrator" tasks from the remote (Internet) host. IP Address: Internet IP Address of the computer that has access to the Router. It is not recommended that you set the IP Address to * (star), because this allows any Internet IP Address to access the Router, which could result in a loss of security for your network. If you elect to enable Remote Management, make sure to enter the IP Address of the remote computer allowed to configure the DI-774. Port: For security purposes, select a separate port number used to access the Router. (The following is an example only; you may use a different port number.) Example: http://x.x.x.x:8080 where x.x.x.x is the WAN IP Address of the Router and 8080 is the port used for the Web-Management interface. Tools > Time Time settingsDefault NTP Server- In this window you can choose the time zone; set the time; and enable or disable Daylight Savings Time. NTP is short for Network Time Protocol. NTP synchronizes computer clock times in a network of computers. This field is optional. 34 Using the Configuration Menu (continued) Tools > System System Settings Save Settings to Local Hard Drive- Click Save to save the current settings to the local Hard Drive Load Settings from Local Hard Drive- Click Browse to find the settings, then click Load Restore to Factory Default Settings- Click Restore to restore the factory default settings 35 Using the Configuration Menu (continued) Tools > Firmware Firmware Upgrade- Click on the link in this screen to find out if there is an updated firmware; if so, download the new firmware to your hard drive. After you have downloaded the new firmware, click Browse in this window to locate the firmware update on your hard drive. Click Apply to complete the firmware upgrade. Browse- 36 Using the Configuration Menu (continued) Tools > Misc DDNSDynamic Domain Name System is a method to keep domain names linked to changing IP Addresses. In this way, changing IP Addresses (e.g., via DHCP) will not interfere with network connectivity. Ping Test- The Ping Test is used to send Ping packets to test if a computer is on the Internet. Enter the IP Address that you wish to Ping, and click Ping Click Reboot to restart the DI-774 If you choose to block WAN Ping, the WAN IP Address of the DI774 will not respond to pings. Blocking the Ping may provide some extra security from hackers. Click Enabled to block the WAN ping The DI-774 supports VPN (Virtual Private Network) pass-through for both PPTP (Point-to-Point Tunneling Protocol) and IPSec (IP Security). Once VPN pass-through is enabled, there is no need to open up virtual services. Multiple VPN connections can be made through the DI-774. This is useful when you have many VPN clients on the LAN network. PPTP- select Enabled or Disabled IPSec- select Enabled or Disabled Fill in the required fields to use the Dynamic Domain Name Service (DDNS) feature. 37 Restart DeviceBlock WAN PingDiscard Ping from WAN sideVPN Pass Through- DDNS- Using the Configuration Menu (continued) Tools > Cable Test Cable Test Cable Test Cable Test is an advanced feature that integrates a LAN cable tester on every Ethernet port on the router. Through the graphical user interface (GUI), Cable Test can be used to remotely diagnose and report cable faults such as opens, shorts, swaps, and impedance mismatch. This feature significantly reduces service calls and returns by allowing users to easily troubleshoot their cable connections. Ports ­ The Ethernet port names associated to the physical ports. Link Status ­ The current link status of the Ethernet cable connected to the respective Ethernet port. More Info ­ Click on More Info for detailed information about the cable link status. Refresh ­ Click on Refresh to run the Cable test. Allow the router a few seconds to complete the test. 38 Using the Configuration Menu (continued) Status > Device Info Device Information- This screen displays information about the DI-774 Status > Log View LogLog Settings- This screen displays the activity on the DI-774 For advanced features, click on Log Settings 39 Using the Configuration Menu (continued) Status > Log > Log Settings SMTP Server/ IP AddressEmail Address- Enter the proper SMTP Server information or the IP Address Enter the email address of the recipient who will receive the email logs. The administrator can specify which surveillance they want to log. Check mark the box for specific activities. Log Type- 40 Using the Configuration Menu (continued) Status > Stats Traffic Statistics- Displays the receive and transmit packets that are passing through the DI-774. Click on Refresh, for the most recent information. Click Reset to reset the counters back to zero. Status > Wireless Connected Wireless Client List- Displays the wireless clients that are connected to the Access Point function of the DI-774. 41 Using the Configuration Menu (continued) Help Help- Displays the complete Help menu. For help at anytime, click the Help tab in the Configuration menu. 42 Networking Basics Using the Network Setup Wizard in Windows XP In this section you will learn how to establish a network at home or work, using Microsoft Windows XP. Note: Please refer to websites such as http://www.homenethelp.com and http://www.microsoft.com/windows2000 for information about networking computers using Windows 2000, ME or 98. Go to Start>Control Panel>Network Connections Select Set up a home or small office network When this screen appears, Click Next. 43 Networking Basics Please follow all the instructions in this window: Click Next In the following window, select the best description of your computer. If your computer connects to the internet through a gateway/router, select the second option as shown. Click Next 44 Networking Basics Enter a Computer description and a Computer name (optional.) Click Next Enter a Workgroup name. All computers on your network should have the same Workgroup name. Click Next 45 Networking Basics Please wait while the Network Setup Wizard applies the changes. When the changes are complete, click Next. Please wait while the Network Setup Wizard configures the computer. This may take a few minutes. 46 Networking Basics In the window below, select the option that fits your needs. In this example, Create a Network Setup Disk has been selected. You will run this disk on each of the computers on your network. Click Next. Insert a disk into the Floppy Disk drive, in this case drive A. 47 Networking Basics Please read the information under Here's how in the screen below. After you complete the Network Setup Wizard you will use the Network Setup Disk to run the Network Setup Wizard once on each of the computers on your network. To continue click Next. 48 Networking Basics Please read the information on this screen, then click Finish to complete the Network Setup Wizard. The new settings will take effect when you restart the computer. Click Yes to restart the computer. You have completed configuring this computer. Next, you will need to run the Network Setup Disk on all the other computers on your network. After running the Network Setup Disk on all your computers, your new wireless network will be ready to use. 49 Networking Basics Naming your Computer To name your computer, please follow these directions:In Windows XP: ! Click Start (in the lower left corner of the screen) ! ! Right-click on My Computer Select Properties and click ! Select the Computer Name Tab in the System Properties window. ! You may enter a Computer Description if you wish; this field is optional. ! To rename the computer and join a domain, Click Change. 50