User manual D-LINK DSL-G604T

DSL-G604T Wireless ADSL Router User's Guide (October 2004) 651G604AU015 Table Of Contents About This User's Guide........................................................................................................................................ 1 BEFORE YOU START................................................................................................. 1 Installation Overview .......................................................................................................................... 1 The Setup Wizard ................................................................................................................................................... 1 INSTALLATION REQUIREMENTS ............................................................................. 2 PACKING LIST ............................................................................................................ 4 INTRODUCTION .......................................................................................................... 7 Router Description and Operation ......................................................................................................................... 7 Standards Compatibility and Compliance ........................................................................................................... 10 Front Panel Display .............................................................................................................................................. 11 Rear Panel Connections........................................................................................................................................ 12 Wireless LAN Basics ........................................................................................................................ 13 About 802.11g Wireless ....................................................................................................................................... 14 HARDWARE INSTALLATION................................................................................... 15 Choosing the Best Location for Wireless Operation ..................................................................... 15 Power on Router ................................................................................................................................................... 16 Factory Reset Button ............................................................................................................................................ 16 Wired Network Connections................................................................................................................................ 17 BASIC ROUTER CONFIGURATION......................................................................... 19 Configuring IP Settings on Your Computer ........................................................................................................ 19 Access the Configuration Manager ................................................................................................ 25 Login to Home Page............................................................................................................................................. 25 Configure the Router ........................................................................................................................ 26 Using the Setup Wizard........................................................................................................................................ 27 Configure WAN Connection............................................................................................................. 32 Dynamic IP Address for WAN ............................................................................................................................ 33 Static IP Address for WAN.................................................................................................................................. 34 PPPoE and PPPoA Connection for WAN ........................................................................................................... 35 Bridged Connection for WAN ............................................................................................................................. 36 LAN IP Settings................................................................................................................................. 37 DHCP Server Settings for the LAN .................................................................................................. 38 DNS Server Settings......................................................................................................................... 39 Basic Wireless LAN Setup ............................................................................................................... 40 ADVANCED ROUTER MANAGEMENT.................................................................... 41 Port Forwarding.................................................................................................................................................... 42 Filters .................................................................................................................................................................... 44 DMZ...................................................................................................................................................................... 46 Firewall ................................................................................................................................................................. 47 Static Routing ....................................................................................................................................................... 48 Dynamic Routing (RIP)........................................................................................................................................ 49 ATM VC............................................................................................................................................................... 50 Advanced Wireless LAN Configuration .......................................................................................... 51 Wireless Performance........................................................................................................................................... 51 Wireless Security.................................................................................................................................................. 52 SSID and Channel ................................................................................................................................................ 53 WEP Encryption ................................................................................................................................................... 53 Wireless Management (MAC Access and Multiple SSID) ................................................................................. 56 Tools and Utilities............................................................................................................................. 58 Change System Password..................................................................................................................................... 58 Time & Date ......................................................................................................................................................... 59 Save Configuration File to PC ............................................................................................................................. 60 Load Saved Configuration Files........................................................................................................................... 60 Restore Factory Default Settings ......................................................................................................................... 60 Firmware Upgrade................................................................................................................................................ 61 Misc. Settings ....................................................................................................................................................... 62 Save Router Configuration Settings..................................................................................................................... 62 Diagnostic Test ..................................................................................................................................................... 63 Router Status Information................................................................................................................ 64 Device Information Display ................................................................................................................................. 64 Multiple Virtual Connections ........................................................................................................... 66 TECHNICAL SPECIFICATIONS................................................................................ 68 IP ADDRESS SETUP................................................................................................. 70 IP CONCEPTS ........................................................................................................... 72 MICROFILTERS AND SPLITTERS........................................................................... 75 DSL-G604T Wireless A DSL Router User's Guide About This User's Guide This user's guide provides instructions on how to install the DSL-G604T Wireless ADSL Router and use it to provide Internet access for an Ethernet or 802.11g/802.11b wireless LAN. If you are using a computer with a functioning Ethernet port, the quickest and easiest way to set up the DSL-G604T is to insert the Installation CD into the CD-ROM drive of your computer and follow the instructions provided in the Quick Installation Guide. Before You Start Please read and make sure you understand all the prerequisites for proper installation of your new Router. Have all the necessary information and equipment on hand before beginning the installation. Installation Overview The procedure to install the Router can be described in general terms in the following steps: 1. 2. 3. 4. Gather information and equipment needed to install the device. Before you begin the actual installation make sure you have all the necessary information and equipment. Install the hardware, connect the cables to the device and connect the power adapter. Check the IP settings on your computer and change them if necessary so the computer can access the web-based software built into the Router. Use the web-based management software to configure the device to suit the requirements of your ADSL service and wireless LAN. The Setup Wizard Many users will be able to configure all the settings necessary to use the DSL-G604T with the Setup Wizard. For ADSL connections that use Dynamic, Statis IP, PPPoE/PPPoA, or Bridge connections, the simplest way to setup the DSL-G604T is to use the Setup Wizard to configure the Internet connection. Once you access the web interface used to configure the device, just launch the Setup Wizard to configure your Internet connection. Once you have the Internet connection established, set up the wireless nework and security settings using web manager. 1 DSL-G604T Wireless A DSL Router User's Guide Installation Requirements In order to establish a connection to the Internet it will be necessary to provide information to the Router that will be stored in its memory. For most users, only their account information (Username and Password) is required. For others, various parameters that control and define the Internet connection will be required. You can print out the section labeled "Information you will need from your ADSL service provider" and use the tables to list this information. This way you have a hard copy of all the information needed to setup the Router. If it is necessary to reconfigure the device, all the necessary information can be easily accessed. Be sure to keep this information safe and private. Low Pass Filters Since ADSL and telephone services share the same copper wiring to carry their respective signals, a filtering mechanism may be necessary to avoid mutual interference. A low pass filter device can be installed for each telephone that shares the line with the ADSL line. These filters are easy to install passive devices that connect to the ADSL device and/or telephone using standard telephone cable. Ask your service provider for more information about the use of low pass filters with your installation. Operating Systems The DSL-G604T uses an HTML-based web interface for setup and management. The web configuration manager may be accessed using any operating system capable of running web browser software, including Windows 98 SE, Windows ME, Windows 2000, and Windows XP. Web Browser Any common web browser can be used to configure the Router using the web configuration management software. The program is designed to work best with more recently released browsers such as Opera, Microsoft Internet Explorer® version 5.0, Netscape Navigator® version 4.7, or later versions. The web browser must have JavaScript enabled. JavaScript is enabled by default on many browsers. Make sure JavaScript has not been disabled by other software (such as virus protection or web user security packages) that may be running on your computer. Ethernet Port (NIC Adapter) Any computer that uses the Router must be able to connect to it through the Ethernet port on the Router. This connection is an Ethernet connection and therefore requires that your computer be equipped with an Ethernet port as well. Most laptop computers are now sold with an Ethernet port already installed. Likewise, most fully assembled desktop computers come with an Ethernet NIC adapter as standard equipment. If your computer does not have an Ethernet port, you must install an Ethernet NIC adapter before you can use the Router. If you must install an adapter, follow the installation instructions that come with the Ethernet NIC adapter. Wireless LAN Configuration Wireless LAN settings for 802.11g and 802.11b wireless operation must be enabled using the Setup Wizard before it can be configured. Basic wireless settings including the Channel and SSID can be configured through the Setup Wizard. Advanced wireless security settings can also be configured with the Setup Wizard. Security for wireless communication can be accomplished in a number of ways. The DSL-G604T supports WEP, WPA and WPA -PSK. Additional Software It may be necessary to install software on your computer that enables the computer to access the Internet. Additional software must be installed if you are using the device a simple bridge. For a bridged connection, the information needed to make and maintain the Internet connection is stored on another computer or gateway device, not in the Router itself. 2 DSL-G604T Wireless A DSL Router User's Guide Information you will need from your ADSL service provider: Username This is the Username used to log on to your ADSL service provider's network. It is commonly in the form - user@isp.com. Your ADSL service provider uses this to identify your account. This is the Password used, in conjunction with the Username above, to log on to your ADSL service provider's network. This is used to verify the identity of your account. This is the method your ADSL service provider uses to transport data between the Internet and your computer. Most users will use the default PPPoE/PPPoA, connection type. The Setup Wizard can be used to configure a PPPoE/PPPoA connection type. You may need to specify one of the following connection types (PPPoE LLC, PPPoA LLC or PPPoA VC-MUX). The other available connection and encapsulation combinations must be configured using the web manager. These include Bridge Mode (1483 Bridged IP LLC or 1483 Bridged IP VC-MUX), and Static IP (Bridged IP LLC, 1483 Bridged IP VC-MUX, 1483 Routed IP LLC, 1483 Routed IP VC-MUX or IPoA). Most users will not be required to change this setting. The Virtual Path Identifier (VPI) is used in conjunction with the Virtual Channel Identifier (VCI) to identify the data path between your ADSL service provider's network and your computer. If you are setting up the Router for multiple virtual connections, you will need to configure the VPI and VCI as instructed by your ADSL service provider for the additional connections. This setting can be changed in the WAN menu of the web management interface. Most users will not be required to change this setting. The Virtual Channel Identifier (VCI) used in conjunction with the VPI to identify the data path between your ADSL service provider's network and your computer. If you are setting up the Router for multiple virtual connections, you will need to configure the VPI and VCI as instructed by your ADSL service provider for the additional connections. This setting can be changed in the WAN menu of the web management interface. Record info here Password Connection and Encapsulation Type VPI VCI The Setup Wizard can be used to configure the Internet connection for most users. Note 3 DSL-G604T Wireless A DSL Router User's Guide nformation you will need about your DSL-G604T ADSL Router: This is the Username needed access the Router's management interface. When you attempt to connect to the device through a web browser you will be prompted to enter this Username. The default Username for the Router is admin. The user cannot change this. This is the Password you will be prompted to enter when you access the Router's management interface. The default Password is admin. The user may change this. This is the IP address you will enter into the Address field of your web browser to access the Router's configuration graphical user interface (GUI) using a web browser. The default IP address is 192.168.11 and it is referred to as the "Management IP" address in this User's Manual. This may be changed to suit any IP address scheme the user desires. This address will be the base IP address used for DHCP service on the LAN when DHCP is enabled. This is the subnet mask used by the DSL-G604T, and will be used throughout your LAN. The default subnet mask is 255.255.255.0 - this can be changed later. Record info here Username Password LAN IP addresses for the DSL-G604T LAN Subnet Mask for the DSL-G604T Information you will need about your LAN or computer: Ethernet NIC If your computer has an Ethernet NIC, you can connect the DSL-G604T to this Ethernet port using an Ethernet cable. You can also use the Ethernet ports on the DSL-G604T to connect to other computer or Ethernet devices. Your DSL-G604T ADSL Router is configured, by default, to be a DHCP server. This means that it can assign an IP address, subnet mask, and a default gateway address to computers on your LAN. The default range of IP addresses the DSL-G604T will assign are from 192.168.1.2 to 192.168.1.254. Your computer (or computers) needs to be configured to Obtain an IP address automatically (that is, they need to be configured as DHCP clients.) Record info here DHCP Client status It is recommended that you collect and record this information here, or in some other secure place, in case you have to re-configure your ADSL connection in the future. Once you have the above information, you are ready to setup and configure your DSL-G604T ADSL Router. Packing List Open the shipping carton and carefully remove all items. Make sure that you have the items listed here. 1. 2. 3. 4. 5. 6. 7. One DSL-G604T 802.11g Wireless ADSL Ethernet Router One CD-ROM containing the User's Guide One twisted-pair telephone cable used for ADSL connection One straight-through Ethernet cable One 12V, 1.2A power adapter suitable for your electric service One Quick Installation Guide Rubber stand 4 DSL-G604T Wireless A DSL Router User's Guide 5 1 Introduction This section provides a brief description of the Router, its associated technologies and a list of Router features. Router Description and Operation The DSL-G604T Router is designed to provide a simple and cost-effective ADSL Internet connection for a private Ethernet or 802.11g/802.11b wireless network. The Router combines high-speed ADSL Internet connection, IP routing for the LAN and wireless connectivity in one package. The Router is easy to install and use. The DSL-G604T connects to an Ethernet LAN or computers via standard Ethernet ports. The ADSL connection is made using ordinary telephone line with standard connectors. Multiple workstations can be networked and connected to the Internet using a single Wide Area Network (WAN) interface and single global IP address. The advanced security enhancements, packet filtering and port redirection, can help protect your network from potentially devastating intrusions by malicious agents from outside your network. Network and Router management is done through the web-based management interface that can be accessed through the local Ethernet using any web browser. You may also enable remote management to enable configuration of the Router via the WAN interface. ADSL Asymmetric Digital Subscriber Line (ADSL) is a broadband network technology that utilizes standard twistedpair copper wire telephone lines to enable broadband high-speed digital data transmission and bandwidth hungry applications for business and residential customers. ADSL routers and modems provide faster downloads and more reliable connectivity to the user without loss of quality or disruption of voice/fax telephone capabilities. ADSL service operates at speeds of up to 8 Mbps downstream and up to 640 Kbps upstream. A secure dedicated point-to-point connection is established between the user and the central office of the service provider. 802.11g Wireless The embedded 802.11g wireless access point provides Internet access and connectivity to the Ethernet for 802.11g and 802.11b wireless workstations. IEEE 802.11g is fully compatible with IEEE 802.11b wireless devices. The 802.11g standard supports data transfer rates of up to 54 Mbps.* The Router's wireless access point supports common security protocols used for wireless LAN including WEP encryption, 802.1x and WPA. *Maximum wireless signal rate based on IEEE Standard 802.11g specifications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead lower actual data throughput rate. Router Features The DSL-G604T Wireless ADSL Router utilizes the latest ADSL enhancements to provide a reliable Internet portal suitable for most small to medium sized offices. DSL-G604T advantages include: · · · 802.11g Wireless Access Point ­ The built-in 802.11g wireless access point connects 802.11g and 802.11b wireless devices to the Internet and the Ethernet. PPP (Point-to-Point Protocol) Security ­ The DSL-G604T ADSL Router supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol) for PPP connections. DHCP Support ­ Dynamic Host Configuration Protocol automatically and dynamically assigns al LAN IP settings to each host on your network. This eliminates the need to reconfigure every host whenever changes in network topology occur. Network Address Translation (NAT) ­ For small office environments, the DSL-G604T allows multiple users on the LAN to access the Internet concurrently through a single Internet account. This provides Internet access to everyone in the office for the price of a single user. NAT improves network security in effect by hiding the private network behind one global and visible IP address. NAT address mapping can also be used to link two IP domains via a LAN-to-LAN connection. · · · TCP/IP (Transfer Control Protocol/Internet Protocol) ­ The DSL-G604T supports TCP/IP protocol, the language used for the Internet. It is compatible with access servers manufactured by major vendors. RIP-1/RIP-2 ­ The DSL-G604T supports both RIP-1 and RIP-2 exchanges with other routers. Using both versions allow the Router to communicate with all RIP enabled devices. Static Routing ­ This allows you to select a data path to a particular network destination that will remain in the routing table and never "age out". If you wish to define a specific route that will always be used for data traffic from your LAN to a specific destination within your LAN (for example to another router or a server) or outside your network (to a ISP defined default gateway for instance). Default Routing ­ This allows you to choose a default path for incoming data packets for which the destination address is unknown. This is particularly useful when if the Router functions as the sole connection to the Internet. ATM (Asynchronous Transfer Mode) ­ The DSL-G604T supports Bridged Ethernet over ATM (RFC1483), IP over ATM (RFC1577) and PPP over ATM (RFC 2364). Precise ATM Traffic Shaping ­ Traffic shaping is a method of controlling the flow rate of ATM data cells. This function helps to establish the Quality of Service for ATM data transfer. G.hs (Auto-handshake) ­ This allows the Router to automatically choose either the G.lite or G.dmt ADSL connection standards. High Performance ­ Very high rates of data transfer are possible with the Router. Up to eight Mbps downstream bit rate using the G.dmt standard. Full Network Management ­ The DSL-G604T incorporates SNMP (Simple Network Management Protocol) support for web-based management and text-based network management via Telnet connection. Telnet Connection ­ The Telnet enables a network manager to access the Router's management software remotely. Easy Installation ­ The DSL-G604T uses a web-based graphical user interface program for convenient management access and easy set up. Any common web browser software can be used to manage the Router. · · · · · · · · · Standards Compatibility and Compliance The DSL-G604T complies with or is compatible with the following standards as recognized by their respective agencies. · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · · ITU G.992.2 (G.lite) compliant ITU-T Rec. I.361 compliant RFC 791 Internet Protocol compliant RFC 792 UDP compliant RFC 826 Address Resolution Protocol compliant (ARP) compliant RFC 1058 Routing Information Protocol (RIP) compliant RFC 1213 MIB II for IP compliant RFC 1334 PPP Authentication Protocol compliant RFC 1389 Routing Information Protocol 2 (RIP2) compliant RFC 1483 IP over AAL5/ Bridged Ethernet over AAL5 compliant RFC 1557 Classical IP over ATM (IPoA) compliant RFC 1661 Point to Point Protocol (PPP) compliant RFC 1877 Automatic IP assignment compliant RFC 1994 Challenge Handshake Authentication Protocol compliant Supports RFC 2131 and RFC 2132 DHCP functions including: automatic assignment of IP address, use of subnet mask and default gateway and provision of DNS server address for all hosts RFC 2364 PPP over ATM compliant (PPPoA) compliant RFC 2516 PPP over Ethernet compliant (PPPoE) compliant RFC 2684 Bridged/Routed Ethernet over ATM compliant IEEE 802.3 compliant IEEE 802.3u compliant IEEE 802.1d compliant IEEE 802.11g compliant IEEE 802.3x compliant Embedded web server support Supports Dynamic Learning Supports Static Routing Supports NAPT for up to 4096 connections Supports DHCP for up to 253 hot connections Supports IGMP Supports ATM Forum UNI 3.1/4.0 Supports ATM VCC (Virtual Channel Circuit) for up to eight sessions Supports TELNET and TFTP Supports back pressure for half-duplex Front Panel Display Place the Router in a location that permits an easy view of the LED indicators on the front panel. The LED indicators on the front panel include the Power, Status, ADSL and WLAN and Ethernet (1-4) Link/Act indicators. The ADSL, WLAN and Ethernet indicators monitor link status and activity (Link/Act). Power Steady green light indicates the unit is powered on. When the device is powered off this remains dark. Lights steady green during power on self-test (POST). Once the connection status has been settled, the light will blink green. If the indicator lights steady green after the POST, the system has failed and the device should be rebooted. Steady green light indicates a valid ADSL connection. This will light after the ADSL negotiation process has been settled. A blinking green light indicates activity on the WAN (ADSL) interface. Steady green light indicates a wireless connection. A blinking green light indicates activity on the WLAN interface. A solid green light indicates a valid link on startup. This light will blink when there is activity currently passing through the Ethernet ports. Status ADSL (Link/Act) WLAN (Link/Act) Ethernet (Link/Act) 1 - 4 Rear Panel Connections All cable connections to the Router are made at the rear panel. Connect the power adapter here to power on the Router. Use the Reset button to restore the settings to the factory default values in the next chapter for instructions on using the reset button). Antenna For wireless operation, mount the antenna on the threaded antenna post ADSL Port Use the ADSL cable to connect to the your telephone line (RJ-11 port) Ethernet ports Use the Ethernet ports to connect the Router to your Ethernet LAN or Ethernet devices Reset button To manually reset, depress button with the power on for at least seven seconds Power Insert Use the adapter shipped with the Router to connect to power source Note To manually reboot the Router, disconnect and then reconnect the power. Wireless LAN Basics Some basic understanding of 802.11b/g wireless technology and terminology is useful when you are setting up the Router or any wireless access point. If you are not familiar with wireless networks please take a few minutes to learn the basics. Radio Transmission Wireless LAN or WLAN devices use electromagnetic waves within a broad, unlicensed range of the radio spectrum to transmit and receive radio signals. When a wireless access point is present, it becomes a base station for the WLAN nodes in its broadcast range. WLAN nodes transmit digital data using FM (frequency modulation) radio signals. WLAN devices generate a carrier wave and modulate this signal using various techniques. Digital data is superimposed onto the carrier signal. This radio signal carries data to WLAN devices within range of the transmitting device. The antennae of WLAN devices listen for and receive the signal. The signal is demodulated and the transmitted data extracted. The transmission method used by the access point is called Direct Sequence Spread Spectrum (DSSS) and operates in a range of the radio spectrum between 2.4GHz and 2.5GHz for transmission. See the technical specifications for more details on wireless operation. Range Range should not be a problem in most homes or small offices. If you experience low or no signal strength in some areas, consider positioning the Router in a location between the WLAN devices that maintains a roughly equal straight-line distance to all devices that need to access the Router through the wireless interface. Adding more 802.11g access points to rooms where the signal is weak can improve signal strength. Read the section about placement of the Router titled Location in the next chapter, Hardware Installation, for more information. SSID Wireless networks use an SSID (Service Set Identifier) to allow wireless devices to roam within the range of the network. Wireless devices that wish to communicate with each other must use the same SSID. Several access points can be set up using the same SSID so that wireless stations can move from one location to another without losing connection to the wireless network. The DSL-G604T operates in Infrastructure mode. It controls network access on the wireless interface in its broadcast area. It will allow access to the wireless network to devices using the correct SSID after a negotiation process takes place. By default he DSL-G604T broadcasts its SSID so that any wireless station in range can learn the SSID and ask permission to associate with it. Many wireless adapters are able to survey or scan the wireless environment for access points. An access point in Infrastructure mode allows wireless devices to survey that network and select an access point with which to associate. You may disable SSID broadcasting in the web manager's wireless menu. Wireless Security Various security options are available on the DSL-G604T including open or WEP, WPA, and WPA-PSK. Authentication may use an open system or a shared key. For details on these methods and how to use them, please read the wireless LAN configuration information in chapters 3 (Basic Router Configuration) and 4 (Advanced Router Configuration). About 802.11g Wireless Today's 11-megabits-per-second 802.11b wireless networks are fine for broadband Internet access (which typically tops out at about 1 mbps) but rather slow for large internal file transfers or streaming video. However, 54-mbps, corporate-oriented 802.11a is expensive--and because its radio uses the 5-GHz band and 802.11b uses the 2.4-GHz band, upgrading to an 802.11a network means either scrapping 802.11b gear or buying even-pricier hardware that can support both standards. But 802.11g promises the same speed as 802.11a and the ability to coexist with 802.11b equipment on one network, since it too uses the 2.4-GHz band. 802.11g is an extension to 802.11b, the basis of many wireless LANs in existence today. 802.11g will broaden 802.11b's data rates to 54 Mbps* within the 2.4 GHz band using OFDM (orthogonal frequency division multiplexing) technology. Because of backward compatibility, an 802.11b radio card will interface directly with an 802.11g access point (and vice versa) at 11 Mbps or lower depending on range. You should be able to upgrade the newer 802.11b access points to be 802.11g compliant via relatively easy firmware upgrades. Similar to 802.11b, 802.11g operates in the 2.4GHz band, and the transmitted signal uses approximately 30MHz, which is one third of the band. This limits the number of non-overlapping 802.11g access points to three, which is the same as 802.11b. *Maximum wireless signal rate based on IEEE Standard 802.11g specifications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network traffic, building materials and construction, and network overhead lower actual data throughput rate. 2 Hardware Installation The DSL-G604T maintains three separate interfaces, an Ethernet LAN, a wireless LAN and an ADSL (WAN) interface. Place the Router in a location where it can be connected to the various devices as well as to a power source. The Router should not be located where it will be exposed to moisture or excessive heat. Make sure the cables and power cord are placed safely out of the way so they do not create a tripping hazard. As with any electrical appliance, observe common sense safety procedures. The Router can be placed on a shelf or desktop, ideally you should be able to see the LED indicators on the front if you need to view them for troubleshooting. Choosing the Best Location for Wireless Operation Many environmental factors can affect the effective wireless function of the DSL-G604T. If this is your first time setting up a wireless network device, read and consider the points listed below. The access point can be placed on a shelf or desktop, ideally you should be able to see the LED indicators on the front if you need to view them for troubleshooting. Designed to go up to 100 meters indoors and up to 300 meters outdoors, Wireless LAN lets you access your network from anywhere you want. However, the number of walls, ceilings, or other objects that the wireless signals must pass through can limit signal range. Typical ranges vary depending on the types of materials and background RF noise in your home or business. For optimum range and signal strength, use these basic guidelines: 1. Keep the number of walls and ceilings to a minimum: The signal emitted from Wireless LAN devices can penetrate through ceilings and walls. However, each wall or ceiling can reduce the range of Wireless LAN devices from 1 to 30M. Position your wireless devices so that the number of walls or ceilings obstructing the signal path is minimized. Consider the direct line between access points and workstations: A wall that is 0.5 meters thick, at a 45-degree angle appears to be almost 1 meter thick. At a 2-degree angle, it is over 14 meters thick. Be careful to position access points and client adapters so the signal can travel straight through (90º angle) a wall or ceiling for better reception. Building Materials make a difference: Buildings constructed using metal framing or doors can reduce effective range of the device. If possible, position wireless devices so that their signal can pass through drywall or open doorways, avoid positioning them so that their signal must pass through metallic materials. Poured concrete walls are reinforced with steel while cinderblock walls generally have little or no structural steel. Position the antenna for best reception. Play around with the antenna position to see if signal strength improves. Some adapters or access points allow the user to judge the strength of the signal. Keep your product away (at least 1-2 meters) from electrical devices: Position wireless devices away from electrical devices that generate RF noise such as microwave ovens, monitors, electric motors, etc. 2. 3. 4. 5. Power on Router CAUTION: The Router must be used with the power adapter included with the device. To power on the Router: 1. 2. 3. Insert the AC Power Adapter cord into the power receptacle located on the rear panel of the Router and plug the adapter into a suitable nearby power source. You should see the Power LED indicator light up and remain lit. The Status LED should light solid green and begin to blink after a few seconds. If the Ethernet port is connected to a working device, check the Ethernet Link/Act LED indicators to make sure the connection is valid. The Router will attempt to establish the ADSL connection, if the ADSL line is connected and the Router is properly configured this should light up after several seconds. If this is the first time installing the device, some settings may need to be changed before the Router can establish a connection. Factory Reset Button The Router may be reset to the original factory default settings by depressing the reset button for a few seconds while the device is powered on. Use a ballpoint or paperclip to gently push down the reset button. Remember that this will wipe out any settings stored in flash memory including user account information and LAN IP settings. The device settings will be restored to the factory default IP address 192.168.1.1 and the subnet mask is 255.0.0.0, the default management Username is admin and the default Password is admin. Wired Network Connections Wired network connections are provided through the ADSL port and the four Ethernet ports on the back of the Router. See the Rear Panel diagram above and the illustrations below for examples. Connect ADSL Line Use the ADSL cable included with the Router to connect it to a telephone wall socket or receptacle. Plug one end of the cable into the ADSL port (RJ-11 receptacle) on the rear panel of the Router and insert the other end into the RJ-11 wall socket. If you are using a low pass filter device, follow the instructions included with the device or given to you by your service provider. The ADSL connection represents the WAN interface, the connection to the Internet. It is the physical link to the service provider's network backbone and ultimately to the Internet. Connect Router to Ethernet The Router may be connected to a single computer or Ethernet device through the 10/100 BASE-TX Ethernet port on the rear panel. Any connection to an Ethernet concentrating device such as a switch or hub must operate at a speed of 10/100 Mbps only. When connecting the Router to any Ethernet device that is capable of operating at speeds between 0~100Mbps, be sure that the device has auto-negotiation (NWay) enabled for the connecting port. Use standard twisted-pair cable with RJ-45 connectors. The RJ-45 port on the Router is a crossed port (MDI-X). Follow standard Ethernet guidelines when deciding what type of cable to use to make this connection. When connecting the Router directly to a PC or server use a normal straight-through cable. You should use a crossed cable when connecting the Router to a normal (MDI-X) port on a switch or hub. Use a normal straight-through cable when connecting it to an uplink (MDI-II) port on a hub or switch. The rules governing Ethernet cable lengths apply to the LAN to Router connection. Be sure that the cable connecting the LAN to the Router does not exceed 100 meters. Hub or Switch to Router Connection Connect the Router to an uplink port (MDI-II) on an Ethernet hub or switch with a straight-through cable as shown in the diagram below: If you wish to reserve the uplink port on the switch or hub for another device, connect to any on the other MDI-X ports (1x, 2x, etc.) with a crossed cable. Computer to Router Connection You can connect the Router directly to a 10/100BASE-TX Ethernet adapter card (NIC) installed on a PC using the Ethernet cable provided as shown in this diagram. The illustration below shows the DSL-G604T connected to Ethernet LAN devices, Wireless LAN devices and the Internet. 3 Basic Router Configuration The first time you setup the Router it is recommended that you configure the WAN connection using a single computer making sure that both the computer and the Router are not connected to the LAN. Once the WAN connection is functioning properly, you may continue to make changes to Router configuration including IP settings and DHCP setup. This chapter is concerned with using your computer to configure the WAN connection. The following chapter describes the various menus used to configure and monitor the Router including how to change IP settings and DHCP server setup. Wan Configuration Summary 1. Connect to the Router To configure the WAN connection used by the Router it is first necessary to communicate with the Router through its management interface, which is HTML-based and can be accessed using a web browser. To access the management software your computer must be able to "see" the Router. Your computer can see the Router if it is in the same "neighborhood" or subnet as the Router. This is accomplished by making sure your computer has IP settings that place it in the same subnet as the Router. The easiest way to make sure your computer has the correct IP settings is to configure it to use the DHCP server in the Router. The next section describes how to change the IP configuration for a computer running a Windows operating system to be a DHCP client. Configure the WAN Connection Once your are able to access the configuration software you can proceed to change the settings required to establish the ADSL connection and connect to the service provider's network. There are different methods used to establish the connection to the service provider's network and ultimately to the Internet. You should know what Encapsulation and connection type you are required to use for your ADSL service. It is also possible that you must change the PVC settings used for the ADSL connection. Your service provider should provide all the information you need to configure the WAN connection. 2. Configuring IP Settings on Your Computer In order to configure your system to receive IP settings from the Router it must first have the TCP/IP protocol installed. If you have an Ethernet port on your computer, it probably already has TCP/IP protocol installed. If you are using Windows XP the TCP/IP is enabled by default for standard installations. Below is an illustrated example of how to configure a Windows XP system to automatically obtain IP settings from the Router. Following this example is a step-by-step description of the procedures used on the other Windows operating systems to first check if the TCP/IP protocol has been installed; if it is not, instructions are provided for installing it. Once the protocol has been installed you can configure the system to receive IP settings from the Router. For computers running non-Windows operating systems, follow the instructions for your OS that configure the system to receive an IP address from the Router, that is, configure the system to be a DHCP client. Note If you are using this Router to provide Internet access for more than one computer, you can use these instructions later to change the IP settings for the other computers. However, you cannot use the same IP address since every computer must have its own IP address that is unique on the local network. Configure Windows XP for DHCP Use the following steps to configure a computer running Windows XP to be a DHCP client. 1. From the Start menu on your desktop, go to Settings, then click on Network Connections. 2. In the Network Connections window, right-click on LAN (Local Area Connection), then click Properties. 3. In the General tab of the Local Area Connection Properties menu, highlight Internet Protocol (TCP/IP) under "This connection uses the following items:" by clicking on it once. Click on the Properties button. 4. Select "Obtain an IP address automatically" by clicking once in the circle. Click the OK button. Your computer is now ready to use the Router's DHCP server. Windows 2000 First, check for the IP protocol and, if necessary, install it: 1. 2. 3. 4. In the Windows task bar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network and Dial-up Connections icon. In the Network and Dial-up Connections window, right-click the Local Area Connection icon, and then select Properties. The Local Area Connection Properties dialog box displays with a list of currently installed network components. If the list includes Internet Protocol (TCP/IP), then the protocol has already been enabled, skip ahead to Configure Windows 2000 for DHCP. If Internet Protocol (TCP/IP) does not display as an installed component, click Install. In the Select Network Component Type dialog box, select Protocol, and then click Add. Select Internet Protocol (TCP/IP) in the Network Protocols list, and then click OK. You may be prompted to install files from your Windows 2000 installation CD or other media. Follow the instructions to install the files. If prompted, click OK to restart your computer with the new settings. 5. 6. 7. 8. 9. Configure Windows 2000 for DHCP 1. 2. 3. 4. 5. In the Control Panel, double-click the Network and Dial-up Connections icon. In Network and Dial-up Connections window, right-click the Local Area Connection icon, and then select Properties. In the Local Area Connection Properties dialog box, select Internet Protocol (TCP/IP), and then click Properties. In the Internet Protocol (TCP/IP) Properties dialog box, click the button labeled Obtain an IP address automatically. Double-click OK to confirm and save your changes, and then close the Control Panel. Your computer is now ready to use the Router's DHCP server. Windows ME First, check for the IP protocol and, if necessary, install it: 1. 2. 3. 4. In the Windows task bar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network and Dial-up Connections icon. In the Network and Dial-up Connections window, right-click the Network icon, and then select Properties. The Network Properties dialog box displays with a list of currently installed network components. If the list includes Internet Protocol (TCP/IP), then the protocol has already been enabled. Skip ahead to Configure Windows ME for DHCP. If Internet Protocol (TCP/IP) does not display as an installed component, click Add. In the Select Network Component Type dialog box, select Protocol, and then click Add. Select Microsoft in the Manufacturers box. Select Internet Protocol (TCP/IP) in the Network Protocols list, and then click OK. You may be prompted to install files from your Windows Me installation CD or other media. Follow the instructions to install the files. 5. 6. 7. 8. 9. 10. If prompted, click OK to restart your computer with the new settings. Configure Windows ME for DHCP 1. 2. 3. 4. 5. In the Control Panel, double-click the Network and Dial-up Connections icon. In the Network and Dial-up Connections window, right-click the Network icon, and then select Properties. In the Network Properties dialog box, select TCP/IP, and then click Properties. In the TCP/IP Settings dialog box, click the Obtain and IP address automatically option. Double-click OK twice to confirm and save your changes, and then close the Control Panel. Your computer is now ready to use the Router's DHCP server. Windows 95 and Windows 98 First, check for the IP protocol and, if necessary, install it: 1. 2. In the Windows task bar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network icon. The Network dialog box displays with a list of currently installed network components. If the list includes TCP/IP, and then the protocol has already been enabled, skip to Configure IP Information Windows 95, 98. If TCP/IP does not display as an installed component, click Add. The Select Network Component Type dialog box displays. Select Protocol, and then click Add. The Select Network Protocol dialog box displays. Click on Microsoft in the Manufacturers list box, and then click TCP/IP in the Network Protocols list box. Click OK to return to the Network dialog box, and then click OK again. You may be prompted to install files from your Windows 95/98 installation CD. Follow the instructions to install the files. Click OK to restart the PC and complete the TCP/IP installation. 3. 4. 5. 6. 7. Configure Windows 95 and Windows 98 for DHCP 1. 2. 3. 4. 5. 6. 7. Open the Control Panel window, and then click the Network icon. Select the network component labeled TCP/IP, and then click Properties. If you have multiple TCP/IP listings, select the listing associated with your network card or adapter. In the TCP/IP Properties dialog box, click the IP Address tab. Click the Obtain an IP address automatically option. Double-click OK to confirm and save your changes. You will be prompted to restart Windows. Click Yes. When it has restarted, your computer is ready to use the Router's DHCP server. Windows NT 4.0 Workstations First, check for the IP protocol and, if necessary, install it: 1. 2. 3. 4. 5. 6. In the Windows NT task bar, click the Start button, point to Settings, and then click Control Panel. In the Control Panel window, double-click the Network icon. In the Network dialog box, click the Protocols tab. The Protocols tab displays a list of currently installed network protocols. If the list includes TCP/IP, then the protocol has already been enabled. Skip to "Configure IP Information" If TCP/IP does not display as an installed component, click Add. In the Select Network Protocol dialog box, select TCP/IP, and then click OK. You may be prompted to install files from your Windows NT installation CD or other media. Follow the instructions to install the files. After all files are installed, a window displays to inform you that a TCP/IP service called DHCP can be set up to dynamically assign IP information. Click Yes to continue, and then click OK if prompted to restart your computer. 7. 8. Configure Windows NT 4.0 for DHCP 1. 2. 3. 4. 5. Open the Control Panel window, and then double-click the Network icon. In the Network dialog box, click the Protocols tab. In the Protocols tab, select TCP/IP, and then click Properties. In the Microsoft TCP/IP Properties dialog box, click the Obtain an IP address automatically option. Click OK twice to confirm and save your changes, and then close the Control Panel. Access the Configuration Manager Now that your computer's IP settings allow it to communicate with the Router, you can access the configuration software. Be sure that the web browser on your computer is not configured to use a proxy server in the Internet settings. In Windows Internet Explorer, you can check if a proxy server is enabled using the following procedure: 1. In Windows, click on the Start button, go to Settings and choose Control Panel. 2. In the Control Panel window, double-click on the Internet Options icon. Note 3. Click the Connections tab and click on the LAN Settings button. 4. Verify that the "Use proxy server" option is NOT checked. If it is checked, click in the checked box to deselect the option and click OK. Alternatively, you can access this Internet Options menu using the Tools pull-down menu in Internet Explorer. Login to Home Page To use the web-based management software, launch a suitable web browser and direct it to the IP address of the Router. Type in http:// followed by the default IP address, 192.168.1.1 in the address bar of the browser. The URL in the address bar should read: http://192.168.1.1. A dialog box prompts for the User Name and Password. Type in the default User Name admin and default Password admin and click the OK button to access the web-based manager. Figure 3-1. Enter Password You should change the web-based manager access user name and password once you have verified that a connection can be established. The user name and password allows any computer within the same subnet as the Router to access the web-based manger. Note Do not confuse the user name and password used to access the web-based manager with the ADSL account user name and password needed for PPP connections to access the Internet. Configure the Router When you successfully connect to the web manager, the Home directory tab will display the Setup Wizard menu. You can launch the Setup Wizard from this page or use the menu buttons located in the left panel of the web page to view other menus used for basic configuration. You may use the Setup Wizard if your Internet connection is a PPPoE connection. If you are using a PPPoE connection and want to use the Setup Wizard, follow the instructions below. If your Internet connection is a Bridge or Static IP type connection, you should follow the instructions below in the section Configure WAN Connection. When you successfully connect to the web manager, the Home directory tab will display the Setup Wizard menu. You can launch the Setup Wizard from this page or use the menu buttons located in the left panel of the web page to view other menus used for basic configuration. You may use the Setup Wizard if your Internet connection is a Dynamic IP, Static IP, PPPoE/PPPoA, and Bridge connection. Click on a directory tab to view the menus available in that directory Click here to Run the Setup Wizard Click on a menu button to use or view the menu Web Manager ­ First Time Log On All configuration and management of the Router is done using the web-based management interface pictured in the above example. The various menus accessed by clicking on one of the directory tabs, Home, Advanced, Tools, Status and Help. Each tab displays menu buttons located in the left hand panel of the web interface. The table below lists the menus for each directory in the web manager. Directory Home Configuration and Read-only Menus Click the Home tab to access the Setup Wizard, Wireless LAN setup, WAN Configuration, LAN IP Configuration, DHCP for the LAN Setup and DNS Configuration menus. Click the Advanced tab to access the Virtual Server, IP Filters, IP Routing, DMZ, Firewall, RIP, PPP, ADSL, ATM VCC, Wireless Performance and Wireless Management menus. Click the Tools tab to access the Administrator Settings (used to set the system user name and password), System Time Configuration, System Settings (load and save configuration files), Firmware Upgrade, Administrator Settings (save & reboot) and Diagnostic Test menus. Click the Status tab to view the Device Information, Event Log, Traffic Statistics and ADSL Status information windows. The Help menu presents links to pages that explain various functions and services provided by the Router. Advanced Tools Status Help Using the Setup Wizard To use the Setup Wizard, click the Run Wizard button in the first browser window and follow the instructions in the pop-up window that appears. The first window summarizes the setup process. Click the Next button to proceed. You may stop using the Setup Wizard at any time by clicking the Exit button. If you exit the wizard you will return to the first page without saving any of the settings changed during the process. The first window of the Setup Wizard lists the basic steps in the process. These steps are as follows: 1. 2. 3. 4. Set your new system password. Set the system time. Configure the connection to the Internet. Save the new configuration settings and reboot the system. Set a password that is required to make changes to the configuration settings of the Router in the Advanced Configurations menus. Type in a password and verify it by typing a second time. Click Next to continue. The default User Name admin used for Router management cannot be changed. Note Set the system time of the Router. Choose the time zone you are in from the pull-down menu and click Next. If you wish to return to the previous menu during the setup process, click the Back button. Now select the Connection Type for the Internet and enter your account User Name and Password. Your ISP has given this information to you. Connection Type: Dynamic IP Address 1. 2. Do not change the VPI or VCI value unless you have been told to do so. These numbers are used to define a unique path for your connection. If you have been given specific settings for this to configure, type in the correct values assigned by your ISP. Under Dynamic IP Address mode, choose the Connection Type from the pull-down menu. For Dynamic IP mode connections the available encapsulation methods are 1483 Bridged IP LLC and 1483 Bridged IP VC-Mux. Some ISP's may require you to use the original computer that was originally registered for the Internet service. In this case, type in the MAC address of the computer that was used. To obtain the MAC address of the computer, you can do the following. 3. For Windows XP/2000: Start Run cmd OK In the command prompt, type in ipconfig/all. The physical Address is the MAC address of the computer. For Windows ME: Start Run command OK In the command prompt, type in ipconfig/all. The physical Address is the MAC address of the computer. 4. Click Next to proceed to the next page. Connection Type: Static IP Address 1. 2. 3. 4. 5. After selecting Static IP Address, it will direct you to the information menu. Do not change the VPI or VCI value unless you have been told to do so. These numbers are used to define a unique path for your connection. If you have been given specific settings for this to configure, type in the correct values assigned by your ISP. Change the IP Address, Subnet Mask, Gateway Address and (if available) Secondary DNS Server IP address as instructed by your ISP. Your ISP should have provided these IP settings to you.. Select the Connection Type from the pull-down menu under the Static IP heading. Your ISP should provide this information to you. The available options are IPOA, 1483 Bridged VC-Mux, 1483 Bridged LLC, 1483 Routed LLC, and 1483 Routed VC-Mux. If have not been provided specific information for the Connection Type setting, leave the default setting. Click Next to proceed to the next page. Connection Type: PPPoE/PPPoA 1. 2. Type in the Username and Password used to identify and verify your account to the ISP. After selecting PPPoE/PPPoA, it will direct you to the information menu. Do not change the VPI or VCI value unless you have been told to do so. These numbers are used to define a unique path for your connection. If you have been given specific settings for this to configure, type in the correct values assigned by your ISP. 3. Choose the Connection Type from the pull-down menu. This defines both the connection protocol and encapsulation method used for your ADSL service. The available options are PPPoA VC-MUX, PPPoA LLC and PPPoE LLC. If have not been provided specific information for the Connection Type setting, leave the default setting. Click Next to proceed to next page. 4. Connection Type: Bridge Mode 1. In Bridge mode, the next page will prompt you to enter the VPI / VCI / Connection Type. Do not change the VPI or VCI value unless you have been told to do so. These numbers are used to define a unique path for your connection. If you have been given specific settings for this to configure, type in the correct values assigned by your ISP. For bridge mode Connection Type, the available encapsulation methods are 1483 Bridged IP LLC and 1483 Bridged IP VC-Mux. If you are unsure of the connection type, please ask your service provider. Click Next to proceed to next page. 2. 3. Note If your service provider has instructed you to change the VPI or VCI value for your ADSL connection, use the WAN menu to change these. Finally you can confirm that the setup process is completed. If you are satisfied that you have entered all the necessary information correctly, click the Restart button to save the new configuration settings and restart the Router. If you need to change settings from a previous menu, click the Back button. Do not turn the Router off while it is restarting. When it is finished rebooting, click Close to close the box and continue to configure the Router as desired. Configure WAN Connection To configure the Router's basic configuration settings without running the Setup Wizard, you can access the menus used to configure WAN, LAN, DHCP and DNS settings directly from the Home directory. To access the WAN Settings menu, click on the WAN link button on the left side of the first window that appears when you successfully access the web manager. The WAN Settings menu is also used to configure the Router for multiple virtual connections (Multiple PVCs). The next chapter contains a section describing how to set up multiple PVCs on the Router. WAN Settings Menu Select the connection type used for your account. The menu will display settings that are appropriate for the connection type you select. Follow the instruction below according to the type of connection you select in the WAN Settings menu. Dynamic IP Address for WAN Follow the instructions below to configure the Router to use a Dynamic IP Address for the Internet connection. Make sure you have all the necessary information before you configure the WAN connection. 1. The ATM VC Settings at the top of the menu should not be changed unless you have been instructed to change them. However, if you are instructed to change the VPI or VCI values, type in the values assigned for your account. Leave the PVC and Virtual Circuit settings at their default (Pcv0 and Enabled) values for now. These can be used later if you are configuring multiple virtual circuits for your ADSL service. Under Dynamic IP section, choose the Connection Type from the pull-down menu. For Dynamic IP mode connections the available encapsulation methods are 1483 Bridged IP LLC and 1483 Bridged IP VC-Mux. Some ISP's may require you to use the original computer that was originally registered for the Internet service. In this case, type in the MAC address of the computer that was used. To obtain the MAC address of the computer, you can do the following. 2. 3. 4. For Windows XP/2000: Start Run cmd OK In the command prompt, type in ipconfig/all. The physical Address is the MAC address of the computer. For Windows ME: Start Run command OK In the command prompt, type in ipconfig/all. The physical Address is the MAC address of the computer. 5. If you have not been instructed to change the ATM settings at the bottom of the menu, leave these at the default settings. If you have been given new settings to configure, select the Service Category and type in the values for PCR and VCI in Kbps. Static IP Address for WAN When the Router is configured to use Static IP Address assignment for the WAN connection, you must manually assign a global IP Address, Subnet Mask and Gateway IP Address used for the WAN connection. Most users will also configure DNS server IP settings in the DNS Settings configuration menu (see below). Follow the instruction below to configure the Router to use Static IP Address assignment for the WAN connection. WAN Settings - Static IP 6. 7. 8. Click to select the Static IP Address radio button listed in the WAN Settings options list. The menu will change to offer a different set of configuration options. Under the ATM VC Setting heading, do not change the PVC (Pvc0) index for the initial connection. Also under the ATM VC Setting, you see two numbers, the VCI and VPI values. Do not change the VPI or VCI value unless you have been told to do so. These numbers are used to define a unique path for your connection. If you have been given specific settings for this to configure, type in the correct values assigned by your ISP. Set the Virtual Circuit setting to Enabled in the pull-down menu if it is not already enabled. Select the Connection Type from the pull-down menu under the Static IP heading. Your ISP should provide this information to you. The available options are IPOA, 1483 Bridged VC-Mux, 1483 Bridged LLC,1483 Routed LLC, and 1483 Routed VC-Mux. If have not been provided specific information for the Connection Type setting, leave the default setting. Change the IP Address, Subnet Mask, Gateway Address and (if available) Secondary DNS Server IP address as instructed by your ISP. Your ISP should have provided these IP settings to you. Set NAT to Enabled unless you have been told to NAT must be Disabled for your account When you are satisfied that all the WAN settings are configured correctly, click on the Apply button. 9. 10. 11. 12. 13. The new settings must be saved and the Router must be restarted for the settings to go into effect. To Save & Reboot the Router, click on the Tools directory tab and then click the Admin menu button. In the Administrator Settings menu, click the Reboot button under Force the DSL-G604T to system restart. The Router will save the new settings and restart. Upon restarting the Router will automatically establish the WAN connection. PPPoE and PPPoA Connection for WAN Follow the instructions below to configure the Router to use a PPPoE or PPPoA for the Internet connection. Make sure you have all the necessary information before you configure the WAN connection. 6. Click to select the PPPoE/PPPoA radio button in the WAN Settings options list. This is selected by default if you are configuring the Router for the first time. If it is not selected, click the PPPoE/PPPoA radio button located under the WAN Settings heading. The ATM VC Settings at the top of the menu should not be changed unless you have been instructed to change them. However, if you are instructed to change the VPI or VCI values, type in the values assigned for your account. Leave the PVC and Virtual Circuit settings at their default (Pcv0 and Enabled) values for now. These can be used later if you are configuring multiple virtual circuits for your ADSL service. Under the PPPoE/PPPoA heading, type the User Name and Password used for your ADSL account. A typical User Name will be in the form user@isp.com.au, the Password may be assigned to you by your ISP or you may have selected it when you set up the account with your ISP. Choose the Connection Type from the pulldown menu located under the User Name and Password entry fields. This defines both the connection protocol and encapsulation method used for your ADSL service. The available options are PPPoA VC-MUX, PPPoA LLC and PPPoE LLC. If have not been provided specific information for the Connection Type setting, leave the default setting. 7. 8. 9. 10. Leave the MRU value at the default setting (default = 1492) unless you have been instructed to change this. 11. If you are instructed to use enable Default Route, this setting specifies that the Router be used to define the default route to the Internet for your LAN. Whenever a computer on the LAN attempts to access the Internet, the Router becomes the Internet gateway to the computer. 12. Set NAT to Enabled unless you have been told to NAT must be Disabled for your account. 13. If you have not been instructed to change the ATM settings at the bottom of the menu, leave these at the default settings. If you have been given new settings to configure, select the Service Category and type in the values for PCR and SCR in Kbps. 14. When you are satisfied that all the WAN settings are configured correctly, click on the Apply button. The new settings must be saved and the Router must be restarted for the settings to go into effect. To Save & Reboot the Router, click on the Tools directory tab and then click the Admin menu button. In the Administrator Settings menu, click the Reboot button under Force the DSL-G604T to system restart. The Router will save the new settings and restart. Upon restarting the Router will automatically establish a connection to the Internet. Bridged Connection for WAN For Bridged connections it will be necessary for most users to install additional software on any computer that will the Router for Internet access. The additional software is used for the purpose of identifying and verifying your account, and then granting Internet access to the computer requesting the connection. The connection software requires the user to enter the User Name and Password for the ISP account. This information is stored on the computer, not in the Router. Follow the instructions below to configure a Bridged connection for the WAN interface. WAN Settings Menu ­ Bridge Mode 1. 2. 3. Click to select the Bridge Mode radio button in the WAN Settings options list. The menu will change to offer a different set of configuration options. Under the ATM VC Setting heading, do not change the PVC (Pvc0) index for the initial connection. Also under the ATM VC Setting, you see two numbers, the VCI and VPI values. Do not change the VPI or VCI value unless you have been told to do so. These numbers are used to define a unique path for your connection. If you have been given specific settings for this to configure, type in the correct values assigned by your ISP. Set the Virtual Circuit setting to Enabled in the pull-down menu if it is not already enabled. Under Bridge Mode, choose the Connection Type from the pull-down menu. For bridge mode connections the available encapsulation methods are 1483 Bridged IP LLC and 1483 Bridged IP VC-Mux. If you have not been instructed to change the ATM settings at the bottom of the menu, leave these at the default settings. If you have been given new settings to configure, select the Service Category and type in the values for PCR and SCR in Kbps. When you are satisfied that all the WAN settings are configured correctly, click on the Apply button. The new settings must be saved and the Router must be restarted for the settings to go into effect. To Save & Reboot the Router, click on the Tools directory tab and then click the Admin menu button. In the Administrator Settings menu, click the Reboot button under Force the DSL-G604T to system restart. The Router will save the new settings and restart. Upon restarting the Router will automatically establish the WAN connection. 4. 5. 6. 7. 8. LAN IP Settings You can configure the LAN IP address to suit your preference. Many users will find it convenient to use the default settings together with DHCP service to manage the IP settings for their private network. The IP address of the Router is the base address used for DHCP. In order to use the Router for DHCP on your LAN, the IP address pool used for DHCP must be compatible with the IP address of the Router. The IP addresses available in the DHCP IP address pool will change automatically if you change the IP address of the Router. See the next section for information on DHCP setup. To access the LAN Settings menu, click the LAN button in the Home directory. Configure LAN IP settings To change the LAN IP Address or LAN Network Mask, type in the desired values and click the Apply button. Your web browser should automatically be redirected to the new IP address. DHCP Server Settings for the LAN The DHCP server is enabled by default for the Router's Ethernet LAN interface. DHCP service will supply IP settings to computers configured to automatically obtain IP settings that are connected to the Router though the Ethernet port. When the Router is used for DHCP it becomes the default gateway for DHCP client connected to it. Keep in mind that if you change the IP address of the Router, you must change the range of IP addresses in the pool used for DHCP on the LAN. To display the DHCP Server menu, click the DHCP button in the Home directory. Active DHCP Clients appear listed in the DHCP Client List below the configuration menu. Information about DHCP clients includes the IP address, MAC address, host name and lease time are displayed in the list. Configure DHCP server settings for the LAN The three options for DHCP service are as follows: You may use the Router as a DHCP server for your LAN. You can disable DHCP service and manually configure IP settings for workstations. You use DHCP service provided by your ISP. Follow the instructions below according to which of the above DHCP options you want to use. When you have configured the DHCP Settings as you want them, click the Apply button to commit the new settings. The new DHCP settings must be saved and the Router must be restarted for the settings to go into effect. To Save & Reboot the Router, click on the Tools directory tab and then click the Admin menu button. In the Administrator Settings menu, click he Save & Reboot button. Use the Router for DHCP To use the built-in DHCP server, click to select the DHCP Server option if it is not already selected. The IP Address Pool settings can be adjusted. The Starting IP Address is the lowest available IP address (default = 192.168.1.2). If you change the IP address of the Router this will change automatically to be 1 more that the IP address of the Router. The Ending IP Address is the highest IP address number in the pool. Type in the Lease Time in the entry field provided. This is the amount of time in seconds that a workstation is allowed to reserve an IP address in the pool if the workstation is disconnected from the network or powered off. Disable the DHCP Server To disable DHCP, click to select the No DHCP option and click on the Apply button. DHCP Relay To use DHCP service from your ISP, select the DHCP Relay option and type the DHCP Relay IP address in the space provided. Click Apply to begin DHCP relay from the ISP. DNS Server Settings The Router can be configured to relay DNS from your ISP or another available service to workstations on your LAN. When using DNS relay, the Router will accept DNS requests from hosts on the LAN and forward them to the ISP (or alternative) DNS servers. DNS relay can use auto discovery or the DNS IP address can be manually entered by the user. Alternatively, you may also disable the DNS relay and configure hosts on your LAN to use DNS servers directly. Most users who are using the Router for DHCP service on the LAN and are using DNS servers on the ISP's network. Leave DNS relay enabled (either auto discovery of user configured), unless specified by your ISP. Configure DNS Settings In the DNS Relay Selection pull-down menu, choose to Use Auto Discovery, Use User Configured or Disable DNS relay. If you have not been given specific DNS server IP addresses or if the Router is not pre-configured with DNS server information, select the Auto Discover option for DNS relay. Auto discovery DNS instructs the Router to automatically obtain the DNS IP address from the ISP through DHCP. If your WAN connection uses a Static IP address, auto discovery for DNS cannot be used. If you have DNS IP addresses provided by your ISP, enter these IP addresses in the available entry fields for the Preferred DNS Server and the Alternative DNS Server. If you choose to disable DNS relay, it will be necessary to configure DNS settings for hosts on the LAN since they will not be depending on the Router to forward the DNS requests. When you have configured the DNS settings as desired, click the Apply button. Basic Wireless LAN Setup The two essential settings for wireless LAN operation are the SSID and Channel Number. The SSID (Service Set Identifier) is used to identify a group of wireless LAN components. To enable or disable the wireless interface, configure a new SSID or change the broadcast channel, click on the Wireless Setup link to view the menu displayed below. For instructions on setting up wireless security, please read the next chapter. Configure Basic Wireless LAN settings Configure Basic Wireless Settings Follow the instructions below to change basic wireless settings. 1. To disable the wireless interface: click in the Enable AP check box to remove the check mark and click the Apply button. This will immediately disable the wireless access point, it is not necessary to restart the access point to make this change. If the wireless interface has been disabled: click the Enable AP check box to place a check mark in it. Click the Apply button. It is not necessary to restart the access point unless you have also changed the channel or SSID. The SSID can be changed to suit your wireless network. Remember that any wireless device using the access point must have the same SSID and use the same channel. The SSID can be a continuous character string (i.e. no spaces) of up to 16 characters in length. To disable SSID sharing, use the Advanced Wireless Setup menu (see next chapter). Click the Apply button to save any change to the SSID. The Channel: may be changed to channels that are available in your region. Channels available for wireless LAN communication are subject to regional and national regulation. Click the Apply button to save any change to the Channel. If you are looking for information on how to configure wireless security settings, please read Wireless Security in the following chapter. 2. 3. 4. Note 4 Advanced Router Management This chapter introduces and describes the management features that have not been presented in the previous chapter. These include the more advanced features used for network management and security as well as administrative tools to manage the Router, view statistics and other information used to examine performance and for troubleshooting. Use your mouse to click the directory tabs and menu buttons in order to display the various configuration and read-only menus discussed below. The table below summarizes again the directories and menus available in the management web interface. In this chapter you will find descriptions for the menus located in the Advanced, Tools and Status directories. Directory Configuration and Read-only Menus Click the Home tab to access the Setup Wizard, Wireless LAN Configuration, WAN Configuration, LAN IP Configuration, DHCP for the LAN Setup and DNS IP Configuration menus. These menus are discussed in the previous Chapter on Basic Router Configuration. Click the Advanced tab to access the UPnP, Virtual Server, IP Filters, IP Routing, DMZ, Firewall, RIP, PPP, ADSL, ATM VCC, Wireless Performance and Wireless Management menus. Click the Tools tab to access the Administrator Settings, System Time Configuration, System Settings (load and save configuration files), Firmware Upgrade and Diagnostic Test menus. Click the Status tab to view the Device Information, Event Log, Traffic Statistics and ADSL Status information windows. The Help menu presents links to pages that explain various functions and services provided by the Router. Home Advanced Tools Status Help Port Forwarding Use the Port Forwarding menu to create Virtual Server functions through the Router. A Virtual Server can allow remote users to access services on your LAN such as FTP for file transfers or SMTP and POP3 for e-mail. The DSL-G604T will accept remote requests for these services at your Global IP Address, using the specified TCP or UDP protocol and port number, and then redirect these requests to the server on your LAN with the Private IP address you specify. Remember that the Private IP Address must be within the range specified for your LAN. The Virtual Server feature employs UDP/TCP port redirection to direct traffic through the WAN port to specified servers on your private network. Port redirection can also be used to direct potentially hazardous packets to a proxy server outside your firewall. For example, you can configure the Router to direct HTTP packets to a designated HTTP server in the DMZ. You can define a set of instructions for a specific incoming port or for a range of incoming ports. Each instruction set or rule is indexed and can be modified or deleted later as needed. Virtual server configuration sets can be used together with complimentary features such as Firewall Rules, DMZ devices and IP Filters to improve efficiency and security. Consider how these other functions will effect the virtual server sets you have configured and enabled. The table below describes the configuration settings presented in the Virtual Server menu. Figure 4- 1. Virtual Server Menu and List To modify virtual server settings for any previously created virtual server set listed, click on the note pad icon in the right hand column of the Virtual Servers List for the set you want to configure. The set will appear highlighted in the list and the parameters that have been configured appear in the settings fields above the list. Adjust the settings as desired and click the Apply button to put them into effect. To configure a virtual server set, define the following settings in the Virtual Server configuration menu located in the top half of the browser window. Parameter Rule Name Description Provide a name for the rule. This name will not appear in the list below, however it may be useful if you later need to edit the settings for the rule. Rule names are optional. This is the IP address of the server on your LAN that will provide the service to remote users. The Private IP address is used to direct the service to a specific computer on your private network such as an FTP, Email or public web server. Type in the IP address of the server used for the service being configured here. You can select the transport protocol (TCP or UDP) that the application on the virtual server will use for its connections. Select one of the following options from the pull-down menu to define a TCP, UDP or Both. The choice of this protocol is dependent on the application that is providing the service. If you do not know which protocol to choose, check your application's documentation. Configure a range of ports for forwarding. Type the lowest numbered port in the range in the Port Start space. Type the highest numbered port in the Port End space. For a single port, just enter the same number in both spaces. Virtual server port redirection must be used with a specified server or computer on the LAN (identified by the Private IP address). This is the local port being forwarded to from the Port Start/Port End port(s). Keep in mind that if you use a non-standard port number for an application with a reserved UDP/TCP port, some additional configuration may be required for the servers or workstations using the application on the LAN side. Private IP Protocol Port Start/Port End Port Map Click the Apply button to put the new virtual server configuration set or modification into effect. Any server sets configured in the menu will appear in the Virtual Server List with the new settings. The Router must save the new settings and reboot before the new virtual server configurations are applied. To remove any configuration set from the Virtual Server List, click on the trashcan icon for set you want to delete. Some applications require multiple TCP or UDP ports to function properly. Applications such as Internet gaming, video conferencing, and Internet telephony are some examples of applications that often require multiple connections. These applications often conflict with NAT, and therefore require special handling. See the discussion of DMZ configuration below. Note Filters Filter rules in the Router are put in place to allow or block specified traffic. The Filter Rules however can be used in a single direction to examine and then Allow or Deny traffic for Inbound (WAN to LAN) or Outbound (LAN to WAN) routed data. The rules based on IP address and TCP/UDP port. Configure the filter rules as desired and click the Apply button to create the rule. The newly created rule appears listed in the Outbound Filter List at the bottom of the menu. The table below describes the various parameters that are configured for the filter rules. Figure 4- 2. Filters Configuration Menu To modify any previously created filter rule, click on the note pad icon in the right hand column of the Filter List for the set you want to configure. Adjust the settings as desired and click the Apply button to put the new settings into effect. First determine the direction of the traffic you want the rule to filter. To filter WAN to LAN traffic, select the Inbound Filter option. Any new Inbound Filter rules created will appear in the list. Likewise, should you to filter LAN to WAN traffic, create an Outbound Filter rule. The parameters described below are used to set up filter rules. Parameter Description For an Outbound Filter, this is the IP address or IP addresses on your LAN for which you are creating the filter rule. For an Inbound Filter, this is the IP address or IP addresses for which you are creating the filter rule. You can opt to indicate a Mask Range, a Single IP, an IP Range or Any IP from the pulldown menu. Choosing Any IP will apply the rule to all WAN or all LAN IP addresses depending on which type of rule (Inbound or Outbound) is being configured. Where the Destination IP address resides also depends on if you are configuring an Inbound or Outbound filter rule. You can opt to indicate a Mask Range, a Single IP, an IP Range or Any IP from the pull-down menu. The Source Port is the TCP/UDP port on either the LAN or WAN depending on if you are configuring an Outbound or Inbound Filter rule. Select one of the following options from the pull-down menu to define a Any Port, Single Port, Port Range or Safe Range (ports above 1024). The Destination Port is the TCP/UDP port on either the LAN or WAN depending on if you are configuring an Outbound or Inbound Filter rule. Select one of the following options from the pull-down menu to define a Any Port, Single Port, Port Range or Safe Range (ports above 1024). Select the transport protocol (TCP, UDP or All) that will be used for the filter rule. Select to Allow or Deny transport of the data packets according to the criteria defined in the rule. Packets that are allowed are routed to their destination; packets that are denied are blocked. Source IP Destination IP Source Port Destination Port Protocol Action Click the Apply button to put the new rule into effect. Any filter rule configured in the menu will appear in the Filters List with the new settings. The Router must save the new settings and reboot before the new rules are applied. DMZ Since some applications are not compatible with NAT, the Router supports use of a DMZ IP address for a single host on the LAN. This IP address is not protected by NAT and will therefore be visible to agents on the Internet with the right type of software. Keep in mind that any client PC in the DMZ will be exposed to various types of security risks. If you use the DMZ, take measures (such as client-based virus protection) to protect the remaining client PCs on your LAN from possible contamination through the DMZ. Figure 4- 3. DMZ IP address configuration To designate a DMZ IP address, type in the IP Address of the server or device on your LAN, select the Enabled radio button and click the Apply button. To remove DMZ status from the designated IP address, select the Disabled radio button and click Apply. It will be necessary to save the settings and reboot the Router before the DMZ is activated. Firewall The Firewall Configuration menu allows the Router to enforce specific predefined policies intended to protect against certain common types of attacks. There are two general types of protection (DoS and Port Scan) that can be enabled on the Router, as well as filtering for specific packet types sometimes used by hackers. You can choose to Enable or Disable protection against a customized basket of attack and scan types. To enable DoS Protection or Port Scan Protection, select the Enable radio button for the protection type and click in the selection boxes for the various types of protection listed under each. Figure 4- 4. Firewall Configuration Menu When DoS, Port Scan, or Service Filtering Protection is enabled, it will create a firewall policy to protect your network against the following: Dos Protection SYN Flood check ICMP Redirection check Port Scan Protection Nmap/FIN attack URG/PSH attack Xmas Tree Scan Null Scan attack SYN/RST attack SYN/FIN Scan Service Filtering Ping from WAN Telnet from WAN FTP from WAN DNS from WAN IKE from WAN RIP from WAN DHCP from WAN