D Link DI624D2 AirPlus XTERME G 2.4GHz Wireless Router User Manual DI 624 071003

D Link Corporation AirPlus XTERME G 2.4GHz Wireless Router DI 624 071003

Contents

Manual 1

High-Speed 2.4 GHz
Manual
Building Networks for People
Wireless Router
D-Link AirPlus Xtreme G
DI-624DI-624
DI-624DI-624
DI-624
TM
Version 1.06
2
Contents
Package Contents ................................................................................3
Introduction............................................................................................4
Wireless Basics ....................................................................................8
Getting Started .................................................................................... 11
Using the Configuration Menu..............................................................12
Networking Basics ..............................................................................40
Troubleshooting ...................................................................................55
Technical Specifications ......................................................................62
Frequently Asked Questions ................................................................65
Contacting Technical Support ..............................................................93
Warranty ..............................................................................................94
Registration ........................................................................................97
3
Internet Explorer Version 6.0 or Netscape Navigator
Version 6.0 and Above
Contents of Package:
D-Link AirPlus XTREME G DI-624
High-Speed 2.4GHz Wireless Router
Power Adapter-DC 7.5V, 1A
Manual and Warranty on CD
Quick Installation Guide
Ethernet Cable (All the DI-624’s Ethernet ports are Auto-MDIX)
Computers with Windows, Macintosh, or Linux-based
operating systems with an installed Ethernet adapter
Package Contents
Note: Using a power supply with a different voltage rating than the one included with the
DI-624 will cause damage and void the warranty for this product.
If any of the above items are missing, please contact your reseller.
System Requirements for Configuration:
Ethernet-Based Cable or DSL Modem
4
Introduction
The D-Link AirPlus Xtreme G DI-624 High-Speed Wireless Router is an 802.11g high-
performance, wireless router that supports high-speed wireless networking at home, at
work or in public places.
Unlike most routers, the DI-624 provides data transfers at up to 108 Mbps (compared to
the standard 54 Mbps) when used with other D-Link AirPlus Xtreme G products. The
802.11g standard is backwards compatible with 802.11b products. This means that you
do not need to change your entire network to maintain connectivity. You may sacrifice
some of 802.11g’s speed when you mix 802.11b and 802.11g devices, but you will not
lose the ability to communicate when you incorporate the 802.11g standard into your
802.11b network. You may choose to slowly change your network by gradually replacing
the 802.11b devices with 802.11g devices .
In addition to offering faster data transfer speeds when used with other 802.11g products,
the DI-624 has the newest, strongest, most advanced security features available today.
When used with other 802.11g WPA (WiFi Protected Access) and 802.1x compatible
products in a network with a RADIUS server, the security features include:
WPA: Wi-Fi Protected Access authorizes and identifies users based on a secret key
that changes automatically at a regular interval. WPA uses TKIP (Temporal
Key Integrity Protocol) to change the temporal key every 10,000 packets (a
packet is a kind of message transmitted over a network.) This insures much
greater security than the standard WEP security. (By contrast, the older WEP
encryption required the keys to be changed manually.)
802.1x: Authentication is a first line of defense against intrusion. In the Authentication
process the server verifies the identity of the client attempting to connect to the
network. Unfamiliar clients would be denied access.
For home users that will not incorporate a RADIUS server in their network, the security
for the DI-624, used in conjunction with other 802.11g products, will still be much stronger
than ever before. Utilizing the Pre Shared Key mode of WPA, the DI-624 will obtain a
new security key every time it connects to the 802.11g network. You only need to input
your encryption information once in the configuration menu. No longer will you have to
manually input a new WEP key frequently to ensure security, with the DI-624, you will
automatically receive a new key every time you connect, vastly increasing the safety of
your communications.
5
Connections
All Ethernet Ports (WAN and LAN)
are auto MDI/MDIX, meaning you can
use either a straight-through or a
crossover Ethernet cable.
The Auto MDI/
MDIX WAN port is
the connection for
the Ethernet cable
to the Cable or
DSL modem
Auto MDI/MDIX
LAN ports
automatically sense
the cable type when
connecting to
Ethernet-enabled
computers.
Receptor
for the
Power
Adapter
Pressing the
Reset Button
restores the
router to its
original factory
default settings.
6
LEDs
WLAN LED
A solid light
indicates that the
wireless segment
is ready. This LED
blinks during
wireless data
transmission.
POWER LED
A solid light
indicates a proper
connection to the
power supply.
STATUS
A blinking light
indicates that the
DI-624 is ready.
WAN LED
A solid light indi-
cates connection
on the WAN port.
This LED blinks
during data trans-
mission.
LOCAL
NETWORK LED
A solid light indicates
a connection to an
Ethernet-enabled
computer on ports 1-
4. This LED blinks
during data trans-
mission.
7
Features
WPA (Wi Fi Protected Access) authorizes and identifies users based on a
secret key that changes automatically at a regular interval, for example:
802.1x Authentication in conjunction with the RADIUS server verifies the
identity of would be clients
TKIP (Temporal Key Integrity Protocol), in conjunction with a RADIUS
server, changes the temporal key every 10,000 packets, ensuring greater
security
Pre Shared Key mode means that the home user, without a RADIUS
server, will obtain a new security key every time the he or she connects
to the network, vastly improving the safety of communications on the
network
Backwards compatible with the 802.11b standard to provide a wireless data
rate of up to 11Mbps
Fully compatible with the 802.11g standard to provide a wireless data rate of
up to 108Mbps
Utilizes OFDM technology (Orthogonal Frequency Division Multiplexing)
User-friendly configuration and diagnostic utilities
Operates in the 2.4GHz frequency range
Connects multiple computers to a Broadband (Cable or DSL) modem to
share the Internet connection
IP Filtering
Advanced Firewall features
DHCP server enables all networked computers to automatically receive IP
addresses
Web-based interface for Managing and Configuring
Access Control to manage users on the network
Supports special applications that require multiple connections
Equipped with 4 10/100 Ethernet ports, 1 WAN port, Auto MDI/MDIX
URL Filtering
Domain Blocking
Scheduling
Supports NAT with VPN pass-through, providing added security
MAC Filtering
8
Wireless Basics
D-Link wireless products are based on industry standards to provide easy-to-use and
compatible high-speed wireless connectivity within your home, business or public access
wireless networks. D-Link wireless products will allow you access to the data you want,
when and where you want it. You will be able to enjoy the freedom that wireless networking
brings.
A WLAN is a cellular computer network that transmits and receives data with radio
signals instead of wires. WLANs are used increasingly in both home and office
environments, and public areas such as airports, coffee shops and universities. Innovative
ways to utilize WLAN technology are helping people to work and communicate more
efficiently. Increased mobility and the absence of cabling and other fixed infrastructure
have proven to be beneficial for many users.
Wireless users can use the same applications they use on a wired network. Wireless
adapter cards used on laptop and desktop systems support the same protocols as
Ethernet adapter cards.
People use wireless LAN technology for many different purposes:
Mobility - Productivity increases when people have access to data in any location
within the operating range of the WLAN. Management decisions based on real-time
information can significantly improve worker efficiency.
Low Implementation Costs – WLANs are easy to set up, manage, change and
relocate. Networks that frequently change can benefit from WLANs ease of
implementation. WLANs can operate in locations where installation of wiring may be
impractical.
Installation and Network Expansion - Installing a WLAN system can be fast
and easy and can eliminate the need to pull cable through walls and ceilings. Wireless
technology allows the network to go where wires cannot go - even outside the home or
office.
Scalability – WLANs can be configured in a variety of topologies to meet the needs of
specific applications and installations. Configurations are easily changed and range
from peer-to-peer networks suitable for a small number of users to larger infrastructure
networks to accommodate hundreds or thousands of users, depending on the number
of wireless devices deployed.
Inexpensive Solution - Wireless network devices are as competitively priced as
conventional Ethernet network devices.
9
Standards-Based Technology
The DI-624 Wireless Broadband Router utilizes the new 802.11g standard.
The IEEE 802.11g standard is an extension of the 802.11b standard. It increases the
data rate up to 54Mbps within the 2.4GHz band, utilizing OFDM technology.
This means that in most environments, within the specified range of this device, you will
be able to transfer large files quickly or even watch a movie in MPEG format over your
network without noticeable delays. This technology works by transmitting high-speed
digital data over a radio wave utilizing OFDM (Orthogonal Frequency Division Multiplexing)
technology. OFDM works by splitting the radio signal into multiple smaller sub-signals
that are then transmitted simultaneously at different frequencies to the receiver. OFDM
reduces the amount of crosstalk (interference) in signal transmissions.
The DI-624 is backwards compatible with 802.11b devices. This means that if you have
an existing 802.11b network, the devices in that network will be compatible with 802.11g
devices at speeds of up to 11Mbps in the 2.4GHz range.
Wireless Basics (continued)
10
Wireless Basics (continued)
Installation Considerations
The D-Link AirPlus Xtreme G DI-624 lets you access your network, using a wireless
connection, from virtually anywhere within its operating range. Keep in mind, however,
that the number, thickness and location of walls, ceilings, or other objects that the
wireless signals must pass through, may limit the range. Typical ranges vary depending
on the types of materials and background RF (radio frequency) noise in your home or
business. The key to maximizing wireless range is to follow these basic guidelines:
Keep the number of walls and ceilings between the DI-624 and other network
devices to a minimum - each wall or ceiling can reduce your D-Link wireless
product’s range from 3-90 feet (1-30 meters.) Position your devices so that
the number of walls or ceilings is minimized.
Be aware of the direct line between network devices. A wall that is 1.5 feet
thick (.5 meters), at a 45-degree angle appears to be almost 3 feet (1 meter)
thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position
devices so that the signal will travel straight through a wall or ceiling (instead
of at an angle) for better reception.
Keep your product away (at least 3-6 feet or 1-2 meters) from electrical
devices or appliances that generate extreme RF noise.
Building Materials can impede the wireless signal - a solid metal door or
aluminum studs may have a negative effect on range. Try to position wireless
devices and computers with wireless adapters so that the signal passes
through drywall or open doorways and not other materials.
11
11
1
22
22
2
33
33
3
44
44
4
11
Please remember that D-Link AirPlus Xtreme G wireless devices are pre-configured
to connect together, right out of the box, with their default settings.
You will need broadband Internet access (a Cable or DSL-subscriber line into
your home or office).
Consult with your Cable or DSL provider for proper installation of the modem.
Connect the Cable or DSL modem to the DI-624 Wireless Broadband Router
(see the printed Quick Installation Guide included with your router.)
If you are connecting a desktop computer to your network, install the D-Link
AirPlus Xtreme G DWL-G520 wireless PCI adapter into an available PCI slot on
your desktop computer. You may also install the DWL-520+, or the DWL-520.
(See the printed Quick Installation Guide included with the network adapter.)
Install the D-Link DWL-G650 wireless Cardbus adapter into a laptop computer.
(See the printed Quick Installation Guide included with the DWL-G650.)
Getting Started
For a typical wireless setup at home (as shown above),
please do the following:
Setting up a
Wireless
Infrastructure
Network
11
11
1
22
22
2
33
33
3
44
44
4
Install the D-Link DFE-530TX+ adapter into a desktop computer. The four
Ethernet LAN ports of the DI-624 are Auto MDI/MDIX and will work with both
Straight-Through and Cross-Over cable.
(See the printed Quick Installation Guide included with the DFE-530TX+.)
66
66
6
55
55
5
12
Type admin in the User
Name field
Leave the Password blank
Click OK
Whenever you want to configure your network or the
DI-624, you can access the Configuration Menu by
opening the web-browser and typing in the IP Address
of the DI-624. The DI-624 default IP Address is shown
at right:
Open the web browser
Type in the IP Address of
the Router (http://192.168.0.1)
Using the Configuration Menu
Home > Wizard
The Home>Wizard
screen will appear.
Please refer to the
Quick Installation
Guide for more infor-
mation regarding the
Setup Wizard.
Note: if you have changed the default IP Address assigned
to the DI-624, make sure to enter the correct IP Address.
These buttons appear
on most of the configu-
ration screens in this
section. Please click on
the appropriate button
at the bottom of each
screen after you have
made a configuration
change.
http://192.168.0.1
.
.
.
.
13
Using the Configuration Menu (continued)
Home > Wireless
Keys 1-4- Input up to 4 WEP keys; select the one you wish to use.
Key Type- Select HEX or ASCII.
WEP Encryption- Select the level of encryption desired: 64-bit, or 128-bit.
SSID- Service Set Identifier (SSID) is the name designated for a spe-
cific wireless local area network (WLAN). The SSID’s factory
default setting is default. The SSID can be easily changed to
connect to an existing wireless network or to establish a new
wireless network.
WEP- Wired Equivalent Privacy (WEP) is a wireless security protocol
for Wireless Local Area Networks (WLAN). WEP provides secu-
rity by encrypting the data that is sent over the WLAN. Select
Enabled or Disabled. Disabled is the default setting. (Note: If
you enable encryption on the DI-624 make sure to also enable
encryption on all the wireless clients or wireless connection will
not be established.)
Channel- 6 is the default channel. All devices on the network must share
the same channel. (Note: The wireless adapters will automati-
cally scan and match the wireless setting.)
14
Using the Configuration Menu (continued)
Home > WAN > Dynamic IP Address
DI-754
Host Name- The Host Name is optional but may be required by some ISPs.
The default host name is the device name of the Router and may
be changed.
MAC Address- The default MAC Address is set to the WAN’s physical inter-
face MAC address on the Broadband Router. It is not recom-
mended that you change the default MAC address unless re-
quired by your ISP.
Clone
MAC Address-
The default MAC address is set to the WAN’s physical interface
MAC address on the Broadband Router. You can use the “Clone
MAC Address” button to copy the MAC address of the Ethernet
Card installed by your ISP and replace the WAN MAC address
with the MAC address of the router. It is not recommended that
you change the default MAC address unless required by your
ISP.
Dynamic
IP Address-
Choose Dynamic IP Address to obtain IP Address information
automatically from your ISP. Select this option if your ISP does
not give you any IP numbers to use. This option is commonly
used for Cable modem services.
Primary/
Secondary DNS
Address-
Enter an MTU value only if required by your ISP. Otherwise, leave
it at the default setting.
MTU-
Enter a DNS Address if you do not wish to use the one
provided by your ISP.
15
Home > WAN > Static IP Address
Static IP Address-
IP Address-
Subnet Mask-
ISP
Gateway Address-
Primary
DNS Address-
Secondary
DNS Address-
Choose Static IP Address if all WAN IP information is provided to
you by your ISP. You will need to enter in the IP address, subnet
mask, gateway address, and DNS address(es) provided to you
by your ISP. Each IP address entered in the fields must be in the
appropriate IP form, which are four octets separated by a dot
(x.x.x.x). The Router will not accept the IP address if it is not in
this format.
Input the public IP Address provided by your ISP.
Input your Subnet mask. (All devices in the network must have
the same subnet mask.)
Input the public IP address of the ISP to which you are
connecting.
Input the primary DNS (Domain Name Server) IP address
provided by your ISP.
This is optional.
Enter an MTU value only if required by your ISP. Otherwise, leave
it at the default setting.
MTU-
Using the Configuration Menu (continued)
16
Using the Configuration Menu (continued)
Home > WAN > PPPoE
IP Address- This option is only available for Static PPPoE. Enter the static IP
Address for the PPPoE connection.
(Continued on the next page)
User Name- Your PPPoE username provided by your ISP.
Service Name- Enter the Service Name provided by your ISP (optional).
Retype Password- Re-enter the PPPoE password
PPPoE-
Static PPPoE-you have an assigned (static) IP Address.
Choose this option if your ISP uses PPPoE. (Most DSL users
will select this option.)
Dynamic PPPoE- receive an IP Address automatically from your ISP.
Primary DNS
Address-
Primary DNS IP address provided by our ISP
Secondary DNS
Address-
This option is only available for Static PPPoE. Enter the static IP
Address for the PPPoE connection.
Choose PPPoE (Point
to Point Protocol over
Ethernet) if your ISP
uses a PPPoE con-
nection. Your ISP will
provide you with a
username and pass-
word. This option is
typically used for DSL
services. Select Dy-
namic PPPoE to ob-
tain an IP address au-
tomatically for your
PPPoE connection.
Select Static PPPoE
to use a static IP ad-
dress for your PPPoE
connection.
Please be sure to
remove any
existing
PPPoE client
software
installed on your
computers.
17
Using the Configuration Menu (continued)
Home > WAN > PPPoE continued
Home > LAN
LAN is short for Local Area Network. This is considered your internal network. These are
the IP settings of the LAN interface for the DI-624. These settings may be referred to as
Private settings. You may change the LAN IP address if needed. The LAN IP address is
private to your internal network and cannot be seen on the Internet.
Auto-reconnect- If enabled, the DI-624 will automatically connect to your ISP af-
ter your system is restarted or if the PPPoE connection is dropped.
MTU- Maximum Transmission Unit-1492 is the default setting-you may
need to change the MTU for optimal performance with your
specific ISP.
Local Domain- This field is optional. Enter in the local domain name.
Subnet Mask- The subnet mask of the LAN interface.
The default subnet mask is 255.255.255.0
IP Address- The IP address of the LAN interface. The default IP address is:
192.168.0.1
18
Using the Configuration Menu (continued)
Home > DHCP
DHCP stands for Dynamic Host Control Protocol. The DI-624 has a built-in DHCP server.
The DHCP Server will automatically assign an IP address to the computers on the LAN/
private network. Be sure to set your computers to be DHCP clients by setting their TCP/
IP settings to “Obtain an IP Address Automatically.” When you turn your computers on,
they will automatically load the proper TCP/IP settings provided by the DI-624. The
DHCP Server will automatically allocate an unused IP address from the IP address pool
to the requesting computer. You must specify the starting and ending address of the IP
address pool.
DHCP Server- Select Enabled or Disabled. The default setting is Enabled.
Starting
IP Address- The starting IP address for the DHCP server’s IP assignment
Ending
IP Address- The ending IP address for the DHCP server’s IP assignment
Lease Time- The length of time for the IP lease. Enter the Lease time. The
default setting is one hour
DI-754
19
Advanced > Virtual Server
Using the Configuration Menu (continued)
The DI-624 can be configured as a virtual server so that remote users accessing Web
or FTP services via the public IP address can be automatically redirected to local
servers in the LAN (Local Area Network).
The DI-624 firewall feature filters out unrecognized packets to protect your LAN
network so all computers networked with the DI-624 are invisible to the outside world.
If you wish, you can make some of the LAN computers accessible from the Internet
by enabling Virtual Server. Depending on the requested service, the DI-624 redirects
the external service request to the appropriate server within the LAN network.
The DI-624 is also capable of port-redirection, meaning incoming traffic to a particular
port may be redirected to a different port on the server computer.
Each virtual service that is created will be listed at the bottom of the screen in the
Virtual Servers List. There are pre-defined virtual services already in the table. You
may use them by enabling them and assigning the server IP to use that particular
virtual service.
20
Advanced > Virtual Server continued
Using the Configuration Menu (continued)
Example #1:
Protocol Type- The protocol used for the virtual service.
Public Port- The port number on the WAN (Wide Area Network) side that will
be used to access the virtual service.
Private Port- The port number of the service used by the Private IP computer.
Schedule- The schedule of time when the virtual service will be enabled.
The schedule may be set to Always, which will allow the
particular service to always be enabled. If it is set to Time,
select the time frame for the service to be enabled. If the
system time is outside of the scheduled time, the service will
be disabled.
Virtual Server- Select Enabled or Disabled.
Name- Enter the name referencing the virtual service.
Private IP- The server computer in the LAN (Local Area Network) that will be
providing the virtual services.
If you have a Web server that you wanted Internet users to
access at all times, you would need to enable it. Web
(HTTP) server is on LAN (Local Area Network) computer
192.168.0.25. HTTP uses port 80, TCP.
Name: Web Server
Private IP: 192.168.0.25
Protocol Type: TCP
Private Port: 80
Public Port: 80
Schedule: always
21
Example #2:
If you have an FTP server that you wanted Internet users to access by WAN port
2100 and only during the weekends, you would need to enable it as such. FTP
server is on LAN computer 192.168.0.30. FTP uses port 21, TCP.
Name: FTP Server
Private IP: 192.168.0.30
Protocol Type: TCP
Private Port: 21
Public Port: 2100
Schedule: From: 01:00AM to 01:00AM, Sat to Sun
Using the Configuration Menu (continued)
Advanced > Virtual Server continued
Click on this icon to edit the virtual service
Click on this icon to delete the virtual service
All Internet users who want to access this FTP Server
must connect to it from port 2100. This is an example of
port redirection and can be useful in cases where there
are many of the same servers on the LAN network.
22
Using the Configuration Menu (continued)
Advanced > Applications
Some applications require multiple connections, such as Internet gaming, video
conferencing, Internet telephony and others. These applications have difficulties
working through NAT (Network Address Translation). Special Applications makes
some of these applications work with the DI-624. If you need to run applications that
require multiple connections, specify the port normally associated with an application
in the “Trigger Port” field, select the protocol type as TCP or UDP, then enter the
public ports associated with the trigger port to open them for inbound traffic.
The DI-624 provides some predefined applications in the table on the bottom of the
web page. Select the application you want to use and enable it.
Note! Only one PC can use each Special Application tunnel.
Name: This is the name referencing the special application.
Trigger Port: This is the port used to trigger the application. It can be either
a single port or a range of ports.
Trigger Type: This is the protocol used to trigger the special application.
Public Port: This is the port number on the WAN side that will be used to
access the application. You may define a single port or a
range of ports. You can use a comma to add multiple ports or
port ranges.
Public Type: This is the protocol used for the special application.
23
Using the Configuration Menu (continued)
Advanced > Filters > IP Filters
Filters are used to deny or allow LAN (Local Area Network) computers from accessing
the Internet. The DI-624 can be setup to deny internal computers by their IP or MAC
addresses. The DI-624 can also block users from accessing restricted web sites.
This is the schedule of time when the IP Filter will be enabled.
Schedule:
Select the protocol type.
Protocol Type:
Use IP Filters to deny LAN IP addresses from accessing the
Internet. You can deny specific port numbers or all ports for
the specific IP address.
IP Filters:
The single port or port range that will be denied access to the
Internet.
Port:
The IP address of the LAN computer that will be denied
access to the Internet.
IP:
24
Using the Configuration Menu (continued)
Advanced > Filters > URL Blocking
Filters-
URL Blocking is used to deny LAN computers from accessing specific web sites by
the URL. A URL is a specially formatted text string that defines a location on the
Internet. If any part of the URL contains the blocked word, the site will not be
accessible and the web page will not display. To use this feature, enter the text string
to be blocked and click Apply. The text to be blocked will appear in the list. To
delete the text, just highlight it and click Delete.
Select the filter you wish to use; in this case, URL Blocking
was chosen.
Keywords- Block URLs which contain keywords listed below.
Enter the keywords in this space.
URL Blocking- Select Enabled or Disabled.
25
Using the Configuration Menu
Advanced > Filters > MAC Filters
Use MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network)
computers by their MAC addresses from accessing the Network. You can either manually
add a MAC address or select the MAC address from the list of clients that are currently
connected to the Broadband Router.
MAC Filters- Choose Disable MAC filters; allow MAC addresses listed be-
low; or deny MAC addresses listed below.
Filters-
Name- Enter the name here.
MAC Address- Enter the MAC Address.
DHCP Client- Select a DHCP client from the pull-down list; click Clone to
copy that MAC Address.
Select the filter you wish to use; in this case, MAC filters was
chosen.
(continued)
26
Using the Configuration Menu
Advanced > Filters > Domain Blocking
Filters-
Domain Blocking-
Blocked Domains-
Permitted
Domains-
Domain Blocking is used to allow or deny LAN (Local Area Network) computers from
accessing specific domains on the Internet. Domain blocking will deny all requests to a
specific domain such as http and ftp. It can also allow computers to access specific
sites and deny all other sites.
Select the filter you wish to use; in this case, Domain Blocking
was chosen.
Disabled-
Allow-
Deny-
Enter the Permitted Domains in this field.
Enter the Blocked Domains in this field.
Select Disabled to disable Domain Blocking.
Allows users to access all domains except Blocked Domains.
Denies users access to all domains except
Permitted Domains.
(continued)
27
Using the Configuration Menu (continued)
Advanced > Firewall
Firewall Rules is an advanced feature used to deny or allow traffic from passing
through the DI-624. It works in the same way as IP Filters with additional settings.
You can create more detailed access rules for the DI-624. When virtual services are
created and enabled, it will also display in Firewall Rules. Firewall Rules contain all
network firewall rules pertaining to IP (Internet Protocol).
In the Firewall Rules List at the bottom of the screen, the priorities of the rules are
from top (highest priority) to bottom (lowest priority.)
Note:
The DI-624 MAC Address filtering rules have precedence over the Firewall Rules.
Firewall Rules- Enable or disable the Firewall
Name- Enter the name
Action- Allow or Deny
Source- Enter the IP Address range
Schedule- Select Always or enter the Time Range.
Destination- Enter the IP Address range; the Protocol;
and the Port Range
28
Advanced > DMZ
Using the Configuration Menu (continued)
If you have a client PC that cannot run Internet applications properly from behind the
DI-624, then you can set the client up for unrestricted Internet access. It allows a
computer to be exposed to the Internet. This feature is useful for gaming purposes.
Enter the IP address of the internal computer that will be the DMZ host. Adding a
client to the DMZ (Demilitarized Zone) may expose your local network to a variety of
security risks, so only use this option as a last resort.
DMZ- Enable or Disable the DMZ. The DMZ (Demilitarized Zone)
allows a single computer to be exposed to the internet. By
default the DMZ is disabled.
IP Address- Enter the IP Address of the computer to be in the DMZ.
29
Using the Configuration Menu (continued)
Advanced > Performance
Preamble Type- Select Short or Long Preamble. The Preamble defines the
length of the CRC block (Cyclic Redundancy Check is a com-
mon technique for detecting data transmission errors) for com-
munication between the wireless router and the roaming wire-
less network adapters. Note: High network traffic areas should
use the shorter preamble type.
Beacon Interval- Beacons are packets sent by an Access Point to synchronize a
wireless network. Specify a value. 100 is the default setting and
is recommended.
RTS Threshold- This value should remain at its default setting of 2432. If inconsis-
tent data flow is a problem, only a minor modification should be
made.
Fragmentation- The fragmentation threshold, which is specified in bytes, deter-
mines whether packets will be fragmented. Packets exceeding
the 2346 byte setting will be fragmented before transmission.
2346 is the default setting.
DTIM interval- (Delivery Traffic Indication Message) 3 is the default setting. A
DTIM is a countdown informing clients of the next window for
listening to broadcast and multicast messages.
Wireless
Performance-
Displayed in this window are
the Wireless Performance
features for the Access Point
portion of the DI-624.
TX Rates-
Auto is the default selection.
Select from the drop down
menu.
SSID Broadcast- Choose Enabled to broadcast the SSID across the network.
All devices on a network must share the same SSID (Service
Set Identifier) to establish communication. Choose Disabled
if you do not wish to broadcast the SSID over the network.
30
Super G Mode- Super G is a group of performance enhancement features that
increase end user application throughput in an 802.11g network.
Super G is backwards compatible to standard 802.11g devices.
For top performance, all wirelss devices on the network should
be Super G capable. Select either Disabled, Super G without
Turbo, Super G with Dynamic Turbo, or Super G with Static Turbo.
Disabled- Standard 802.11g support, no enhanced capabilities.
Super G without
Turbo-
Capable of Packet Bursting, FastFrames, Compression, and no
Turbo mode.
Super G with
Dynamic Turbo- Capable of Packet Bursting, FastFrames, Compression, and
Dynamic Turbo. This setting is backwards compatible with non-
Turbo (legacy) devices. Dynamic Turbo mode is only enabled
when all nodes on the wireless network are Super G with Dy-
namic Turbo enabled.
802.11g only mode- Select this mode to restrict your network to only those devices
that employ the 802.11g standard. Enabling this mode will en-
sure that you maintain the highest connectivity rate, unhampered
by any connection to an 802.11b device.
CTS Mode- CTS (Clear To Send) is a function used to minimize collisions
among wireless devices on a wireless local area network (LAN).
CTS will make sure the wireless network is clear before a wire-
less client attempts to send wireless data. Enabling CTS will
add overhead and may lower wireless throughput.
Auto- CTS will monitor the wireless network and automati-
cally decide whether to implement CTS based on
the amount of traffic and collisions that occurs on
the wireless network.
Always- CTS will always be used to make sure the wireless
LAN is clear before sending data.
None- CTS is typically used in a pure 802.11g environment.
If CTS is set to “None” in a mixed mode environment
populated by 802.11b clients, wireless collisions may
occur frequently.
Super G with
Static Turbo-
Capable of Packet Bursting, FastFrames, Compression, and
Static Turbo. This setting is not backwards compatible with non-
Turbo (legacy) devices. Static turbo mode is always on and is
only enabled when all nodes on the wireless network is Super G
with Static Turbo enabled.
Using the Configuration Menu (continued)
Advanced > Performance (continued)
31
Using the Configuration Menu (continued)
Tools> Admin
At this page, the DI-624 administrator can change the system password. There are two
accounts that can access the Broadband Router’s Web-Management interface. They
are admin and user. Admin has read/write access while user has read-only access. User
can only view the settings but cannot make any changes.
Remote Management- Remote management allows the DI-624 to be configured from
the Internet by a web browser. A username and password is still required to access the
Web-Management interface. In general, only a member of your network can browse the
built-in web pages to perform Administrator tasks. This feature enables you to perform
Administrator tasks from the remote (Internet) host.
IP Address- The Internet IP address of the computer that has access to the Broadband
Router. If you input an asterisk (*) into this field, then any computer will be able to access
the Router. Putting an asterisk (*) into this field would present a security risk and is not
recommended.
Port- The port number used to access the Broadband Router.
Example- http://x.x.x.x:8080 where x.x.x.x is the WAN IP address of the Broadband
Router and 8080 is the port used for the Web-Mangement interface.
Administrator-
Password-
admin is the Administrator login name
Enter the password and enter again to confirm
User-
Password-
user is the User login name
Enter the password and enter again to confirm
32
Using the Configuration Menu (continued)
Tools > Time
Time Zone- Select the Time Zone from the pull-down menu.
Daylight
Saving- To select Daylight Saving time manually, select enabled or dis-
abled, and enter a start date and an end date for daylight saving
time.
Set the Time- To manually input the time, enter the values in these fields for
the Year, Month, Day, Hour, Minute, and Second. Click Set Time.
Default
NTP Server- NTP is short for Network Time Protocol. NTP synchronizes com-
puter clock times in a network of computers.
This field is optional.
33
Using the Configuration Menu (continued)
Tools > System
The current system settings can be saved as a file onto the local hard drive. The saved
file or any other saved setting file can be loaded back on the Broadband Router. To reload
a system settings file, click on Browse to browse the local hard drive and locate the
system file to be used. You may also reset the Broadband Router back to factory set-
tings by clicking on Restore.
Click Save to save the current settings to the local Hard Drive
Click Browse to find the settings, then click Load
Save Settings to
Local Hard Drive-
Load Settings from
Local Hard Drive-
Restore to Factory
Default Settings- Click Restore to restore the factory default settings
Browse
34
Using the Configuration Menu (continued)
Tools > Firmware
You can upgrade the firmware of the Router here. Make sure the firmware you want to
use is on the local hard drive of the computer. Click on Browse to browse the local hard
drive and locate the firmware to be used for the update. Please check the D-Link support
site for firmware updates at http://support.dlink.com. You can download firmware up-
grades to your hard drive from the D-Link support site.
Firmware Upgrade-
Browse-
Click on the link in this screen to find out if there is an updated
firmware; if so, download the new firmware to your hard drive.
After you have downloaded the new firmware, click Browse in
this window to locate the firmware update on your hard drive.
Click Apply to complete the firmware upgrade.
Browse
35
Using the Configuration Menu (continued)
Tools > Misc
Ping Test-
Restart
Device-
Block
WAN
Ping-
Discard Ping from
WAN side-
VPN
Pass
Through-
PPTP- select Enabled or Disabled
IPSec- select Enabled or Disabled
The Ping Test is used to
send Ping packets to test if
a computer is on the
Internet. Enter the IP Ad-
dress that you wish to Ping,
and click Ping.
If you choose to block WAN
Ping, the WAN IP Address
of the DI-624 will not respond
to pings. Blocking the Ping
may provide some extra se-
curity from hackers.
The DI-624 supports VPN (Virtual Private Network) pass-through
for both PPTP (Point-to-Point Tunneling Protocol) and IPSec
(IP Security). Once VPN pass-through is enabled, there is no
need to open up virtual services. Multiple VPN connections can
be made through the DI-624. This is useful when you have many
VPN clients on the LAN network.
Click Reboot to restart the
DI-624.
Click Enabled to block the
WAN ping.
UPNP-
Gaming
Mode-
Dynamic
DNS-
To use the Universal Plug and Play feature click on Enabled. UPNP
provides compatibility with networking equipment, software and periph-
erals of the over 400 vendors that cooperate in the Plug and Play forum.
Gaming mode allows a form of pass-through for certain Internet Games.
If you are using Xbox, Playstation2 or a PC, make sure you are using
the latest firmware and Gaming Mode is enabled. To utilize Gaming
Mode, click Enabled. If you are not using a Gaming application, it is
recommended that you Disable Gaming Mode.
Dynamic Domain Name System is a method of keeping a domain name
linked to a changing IP Address. This is a useful feature since many
computers do not use a static IP address.
36
Using the Configuration Menu (continued)
Status > Device Info
This page displays the current information for the DI-624. It will display the LAN, WAN
and MAC address information.
If your WAN connection is set up for a Dynamic IP address then a Release button and
a Renew button will be displayed. Use Release to disconnect from your ISP and use
Renew to connect to your ISP.
If your WAN connection is set up for PPPoE, a Connect button and a Disconnect button
will be displayed. Use Disconnect to drop the PPPoE connection and use Connect to
establish the PPPoE connection.
This window will show the DI-624’s working status:
IP Address: WAN/Public IP Address
Subnet Mask: WAN/Public Subnet Mask
Gateway: WAN/Public Gateway IP Address
Domain Name Server: WAN/Public DNS IP Address
WAN Status: WAN Connection Status
Wireless
IP Address: LAN/Private IP Address of the DI-624
Subnet Mask: LAN/Private Subnet Mask of the DI-624
WAN
LAN
MAC Address: Displays the MAC address
SSID: Displays the current SSID
Channel: Displays the current channel
WEP: indicates whether WEP is enabled or disabled
37
The Broadband Router keeps a running log of events and activities occurring on the
Router. If the device is rebooted, the logs are automatically cleared. You may save the log
files under Log Settings.
Using the Configuration Menu (continued)
Status > Log
View Log-
DI-754
First Page - The first page of the log
Last Page - The last page of the log
Previous - Moves back one log page
Next - Moves forward one log page
Clear - Clears the logs completely
Log Settings - Brings up the page to configure the log
38
Using the Configuration Menu (continued)
Status > Log > Log Settings
Not only does the Broadband Router display the logs of activities and events, it can be
setup to send these logs to another location.
The address of the SMTP server that will be used to send the
logs.
The email address to which the logs will be sent.
Click on Send Mail Now to send the email.
SMTP Server/
IP Address -
Email Address -
39
Status > Wireless
Using the Configuration Menu (continued)
Status > Stats
The screen above displays theTraffic Statistics. Here you can view the amount of pack-
ets that pass through the DI-624 on both the WAN and the LAN ports. The traffic counter
will reset if the device is rebooted.
The wireless client table displays a list of current connected wireless clients. This
table also displays the connection time and MAC address of the connected wireless
client.
Click on Help at any time, for more information.
40
Using the Network Setup Wizard in Windows XP
In this section you will learn how to establish a network at home or work, using
Microsoft Windows XP.
Note: Please refer to websites such as http://www.homenethelp.com
and http://www.microsoft.com/windows2000 for information about networking
computers using Windows 2000, ME or 98.
Go to Start>Control Panel>Network Connections
Select Set up a home or small office network
Networking Basics
When this screen appears, Click Next.
41
Please follow all the instructions in this window:
Networking Basics
Click Next.
In the following window, select the best description of your computer. If your computer
connects to the internet through a gateway/router, select the second option as shown.
Click Next.
42
Enter a Computer description and a Computer name (optional.)
Networking Basics
Click Next.
Enter a Workgroup name. All computers on your network should have the same
Workgroup name.
Click Next.
43
Please wait while the Network Setup Wizard applies the changes.
Networking Basics
When the changes are complete, click Next.
Please wait while the Network Setup Wizard configures the computer.
This may take a few minutes.
44
Networking Basics
In the window below, select the option that fits your needs. In this example, Create a
Network Setup Disk has been selected. You will run this disk on each of the
computers on your network. Click Next.
Insert a disk into the Floppy Disk Drive, in this case drive A.
Click Next.
45
Networking Basics
Please read the information under Here’s how in the screen below. After you complete
the Network Setup Wizard you will use the Network Setup Disk to run the Network
Setup Wizard once on each of the computers on your network. To continue click Next.
46
Networking Basics
Please read the information on this screen, then click Finish to complete the
Network Setup Wizard.
The new settings will take effect when you restart the computer. Click Yes to restart
the computer.
You have completed configuring this computer. Next, you will need to run the Network
Setup Disk on all the other computers on your network. After running the Network
Setup Disk on all your computers, your new wireless network will be ready to use.
47
Networking Basics
Naming your Computer
To name your computer, please follow these directions:In Windows XP:
Click Start (in the lower left corner of the screen)
Right-click on My Computer
Select Properties and click
Select the Computer
Name Tab in the System
Properties window.
You may enter a
Computer Description if
you wish; this field is
optional.
To rename the computer
and join a domain, Click
Change.
48
Networking Basics
Naming your Computer
In this window, enter the
Computer name.
Select Workgroup and enter
the name of the Workgroup.
All computers on your network
must have the same
Workgroup name.
Click OK.
Checking the IP Address in Windows XP
The wireless adapter-equipped computers in your network must be in the same IP Ad-
dress range (see Getting Started in this manual for a definition of IP Address Range.) To
check on the IP Address of the adapter, please do the following:
Right-click on the
Local Area
Connection icon
in the task bar.
Click on Status.
49
Networking Basics
Checking the IP Address in Windows XP
This window will appear.
Click the
Support tab
Click Close
Assigning a Static IP Address in Windows XP/2000
Note: Residential Gateways/Broadband Routers will automatically assign IP Addresses
to the computers on the network, using DHCP (Dynamic Host Configuration Protocol)
technology. If you are using a DHCP-capable Gateway/Router you will not need to assign
Static IP Addresses.
If you are not using a DHCP capable Gateway/Router, or you need to assign a Static IP
Address, please follow these instructions:
Go to Start
Double-click on
Control Panel
50
Networking Basics
Assigning a Static IP Address in Windows XP/2000
Double-click on
Network
Connections
Double-click on
Properties
Right-click on Local Area
Connections

Navigation menu