background image

27

Using the Configuration Menu (continued)

Advanced > Firewall 

Firewall Rules

 is an advanced feature used to deny or allow traffic from passing 

through the DI-624. It works in the same way as IP Filters with additional settings. 

You can create more detailed access rules for the DI-624. When virtual services are 

created and enabled, it will also display in Firewall Rules. Firewall Rules contain all 

network firewall rules pertaining to IP (Internet Protocol). 

In the Firewall Rules List at the bottom of the screen, the priorities of the rules are 

from top (highest priority) to bottom (lowest priority.)

Note:

The  DI-624  MAC Address  filtering  rules  have  precedence  over  the  Firewall 

Firewall Rules-

 

Enable

 or 

disable

 the Firewall

Name-

 

Enter the name  

Action-

 

Allow

 or 

Deny 

Source- 

Enter the 

IP Address range

  

Schedule-

 

Select 

Always

 or enter the 

Time Range

 

Destination-

 

Enter the 

IP Address range

; the 

Protocol

and the 

Port Range

Summary of Contents for AirPlusXtremeG DI-624

Page 1: ...High Speed 2 4 GHz Manual Building Networks for People Wireless Router D Link AirPlus Xtreme G DI 624 TM Version 1 06...

Page 2: ...duction 4 Wireless Basics 8 Getting Started 11 Using the Con guration Menu 12 Networking Basics 40 Troubleshooting 55 Technical Speci cations 62 Frequently Asked Questions 65 Contacting Technical Supp...

Page 3: ...ll the DI 624 s Ethernet ports are Auto MDIX Computers with Windows Macintosh or Linux based operating systems with an installed Ethernet adapter Package Contents Note Using a power supply with a diff...

Page 4: ...omatically at a regular interval WPA uses TKIP Temporal Key Integrity Protocol to change the temporal key every 10 000 packets a packet is a kind of message transmitted over a network This insures muc...

Page 5: ...rnet cable The Auto MDI MDIX WAN port is the connection for the Ethernet cable to the Cable or DSL modem Auto MDI MDIX LAN ports automatically sense the cable type when connecting to Ethernet enabled...

Page 6: ...n dicates a proper connection to the power supply STATUS A blinking light indicates that the DI 624 is ready WAN LED A solid light indicates connection on the WAN port This LED blinks during data tran...

Page 7: ...bps Utilizes OFDM technology Orthogonal Frequency Division Multiplexing User friendly con guration and diagnostic utilities Operates in the 2 4GHz frequency range Connects multiple computers to a Broa...

Page 8: ...wireless LAN technology for many different purposes Mobility Productivity increases when people have access to data in any location within the operating range of the WLAN Management decisions based on...

Page 9: ...Multiplexing technology OFDM works by splitting the radio signal into multiple smaller sub signals that are then transmitted simultaneously at different frequencies to the receiver OFDM reduces the a...

Page 10: ...ur D Link wireless product s range from 3 90 feet 1 30 meters Position your devices so that the number of walls or ceilings is minimized Be aware of the direct line between network devices A wall that...

Page 11: ...to your network install the D Link AirPlus Xtreme G DWL G520 wireless PCI adapter into an available PCI slot on your desktop computer You may also install the DWL 520 or the DWL 520 Install the D Link...

Page 12: ...he IP Address of the Router http 192 168 0 1 Using the Con guration Menu Home Wizard The Home Wizard screen will appear Please refer to the Quick Installation Guide for more infor mation regarding the...

Page 13: ...ing wireless network or to establish a new wireless network WEP Wired Equivalent Privacy WEP is a wireless security protocol for Wireless Local Area Networks WLAN WEP provides se curity by encrypting...

Page 14: ...the Broadband Router You can use the Clone MAC Address button to copy the MAC address of the Ethernet Card installed by your ISP and replace the WAN MAC address with the MAC address of the router It i...

Page 15: ...t be in the appropriate IP form which are four octets separated by a dot x x x x The Router will not accept the IP address if it is not in this format Input the public IP Address provided by your ISP...

Page 16: ...option Dynamic PPPoE receive an IP Address automatically from Primary DNS Address Primary DNS IP address provided by our ISP Secondary DNS Address This option is only available for Static PPPoE Enter...

Page 17: ...al network and cannot be seen on the Internet Auto reconnect If enabled the DI 624 will automatically connect to your ISP after your system is restarted or if the PPPoE connection is MTU Maximum Trans...

Page 18: ...ll automatically load the proper TCP IP settings provided by the DI 624 The DHCP Server will automatically allocate an unused IP address from the IP address pool to the requesting computer You must sp...

Page 19: ...you can make some of the LAN computers accessible from the Internet by enabling Virtual Server Depending on the requested service the DI 624 redirects the external service request to the appropriate...

Page 20: ...lways be enabled If it is set to Time select the time frame for the service to be enabled If the system time is outside of the scheduled time the service will be disabled Virtual Server Select Enabled...

Page 21: ...col Type TCP Private Port 21 Public Port 2100 Schedule From 01 00AM to 01 00AM Sat to Sun Using the Con guration Menu continued Advanced Virtual Server continued Click on this icon to edit the virtual...

Page 22: ...with the trigger port to open them for inbound traf c The DI 624 provides some prede ned applications in the table on the bottom of the web page Select the application you want to use and enable it No...

Page 23: ...block users from accessing restricted web sites This is the schedule of time when the IP Filter will be Schedule Select the protocol type Protocol Type Use IP Filters to deny LAN IP addresses from acc...

Page 24: ...URL contains the blocked word the site will not be accessible and the web page will not display To use this feature enter the text string to be blocked and click Apply The text to be blocked will appe...

Page 25: ...select the MAC address from the list of clients that are currently connected to the Broadband Router MAC Filters Choose Disable MAC lters allow MAC addresses listed below or deny MAC addresses listed...

Page 26: ...l requests to a speci c domain such as http and ftp It can also allow computers to access speci c sites and deny all other sites Select the lter you wish to use in this case Domain Block ing was chose...

Page 27: ...irewall Rules Firewall Rules contain all network rewall rules pertaining to IP Internet Protocol In the Firewall Rules List at the bottom of the screen the priorities of the rules are from top highest...

Page 28: ...feature is useful for gaming purposes Enter the IP address of the internal computer that will be the DMZ host Adding a client to the DMZ Demilitarized Zone may expose your local network to a variety...

Page 29: ...modi cation should be made Fragmentation The fragmentation threshold which is speci ed in bytes deter mines whether packets will be fragmented Packets exceeding the 2346 byte setting will be fragmente...

Page 30: ...nnectivity rate unham pered by any connection to an 802 11b device CTS Mode CTS Clear To Send is a function used to minimize collisions among wireless devices on a wireless local area network LAN CTS...

Page 31: ...ilt in web pages to perform Administrator tasks This feature enables you to perform Administrator tasks from the remote Internet host IP Address The Internet IP address of the computer that has access...

Page 32: ...elect enabled or disabled and enter a start date and an end date for daylight saving time Set the Time To manually input the time enter the values in these elds for the Year Month Day Hour Minute and...

Page 33: ...ick on Browse to browse the local hard drive and locate the system le to be used You may also reset the Broadband Router back to factory settings by clicking on Restore Click Save to save the current...

Page 34: ...ate Please check the D Link support site for rmware updates at http support dlink com You can download rmware upgrades to your hard drive from the D Link support site Firmware Upgrade Browse Click on...

Page 35: ...s Multiple VPN connections can be made through the DI 624 This is useful when you have many VPN clients on the LAN network Click Reboot to restart the DI 624 Click Enabled to block the WAN ping UPNP G...

Page 36: ...Disconnect but ton will be displayed Use Disconnect to drop the PPPoE connection and use Connect to establish the PPPoE connection This window will show the DI 624 s working status IP Address WAN Publ...

Page 37: ...ally cleared You may save the log les under Log Settings Using the Con guration Menu continued Status Log View Log DI 754 First Page The rst page of the log Last Page The last page of the log Previous...

Page 38: ...uter display the logs of activities and events it can be setup to send these logs to another location The address of the SMTP server that will be used to send the logs The email address to which the l...

Page 39: ...packets that pass through the DI 624 on both the WAN and the LAN ports The traf c counter will reset if the device is rebooted The wireless client table displays a list of current connected wireless...

Page 40: ...soft Windows XP Note Please refer to websites such as http www homenethelp com and http www microsoft com windows2000 for information about networking computers using Windows 2000 ME or 98 Go to Start...

Page 41: ...structions in this window Networking Basics Click Next In the following window select the best description of your computer If your computer connects to the internet through a gateway router select th...

Page 42: ...42 Enter a Computer description and a Computer name optional Networking Basics Click Next Enter a Workgroup name All computers on your network should have the same Workgroup name Click Next...

Page 43: ...wait while the Network Setup Wizard applies the changes Networking Basics When the changes are complete click Next Please wait while the Network Setup Wizard con gures the computer This may take a fe...

Page 44: ...ect the option that ts your needs In this example Create a Network Setup Disk has been selected You will run this disk on each of the computers on your network Click Next Insert a disk into the Floppy...

Page 45: ...read the information under Here s how in the screen below After you com plete the Network Setup Wizard you will use the Network Setup Disk to run the Network Setup Wizard once on each of the computers...

Page 46: ...ttings will take effect when you restart the computer Click Yes to restart the computer You have completed con guring this computer Next you will need to run the Network Setup Disk on all the other co...

Page 47: ...ndows XP Click Start in the lower left corner of the screen Right click on My Computer Select Properties and click Select the Computer Name Tab in the System Properties window You may enter a Computer...

Page 48: ...same Workgroup name Click OK Checking the IP Address in Windows XP The wireless adapter equipped computers in your network must be in the same IP Ad dress range see Getting Started in this manual for...

Page 49: ...nd Routers will automatically assign IPAddresses to the computers on the network using DHCP Dynamic Host Con guration Protocol technology If you are using a DHCP capable Gateway Router you will not ne...

Page 50: ...50 Networking Basics Assigning a Static IP Address in Windows XP 2000 Double click on Network Connections Double click on Properties Right click on Local Area Connections...

Page 51: ...ke 192 168 0 3 and 192 168 0 4 The subnet mask must be the same for all the computers on the network Networking Basics Assigning a Static IP Address in Windows XP 2000 Input your DNS server addresses...

Page 52: ...to the Apple Menu and select System Preferences cClick on Network Select Built in Ethernet in the Show pull down menu Select Manually in the Con gure pull down menu Input the Static IPAddress the Subn...

Page 53: ...Go to the Apple Menu and select System Preferences Click on Network Select Built in Ethernet in the Show pull down menu Select Using DHCP in the Con gure pull down menu Click Apply Now The IP Address...

Page 54: ...xxx xxx where xxx is the IP Address of the Wireless Router or Access Point A good wireless con nection will show four replies from the Wireless Router or Acess Point as shown Go to Start Run type com...

Page 55: ...e for the Ethernet connection is securely inserted Check that the Ethernet Adapter is working properly Please see item 3 Check that the drivers for the network adapters are installed properly in this...

Page 56: ...e range e g 192 168 0 x Each device must have a unique IP Address no two devices may have the same IP Address The subnet mask must be the same for all the computers on the network To check the IP Addr...

Page 57: ...re installed properly You may be using different network adapters than those illustrated here but this procedure will remain the same regardless of the type of network adapters you are using Click Dev...

Page 58: ...0 you may be using other network adapters but the procedure will remain the same Select Proper ties to check that the drivers are installed properly Look under Device Status to check that the device i...

Page 59: ...y the same If they are not wireless connection will not be established For 802 11g the Encryption settings are 64 or 128 bit Make sure that the encryption bit level is the same on the Router and the W...

Page 60: ...ng 2 4GHz cordless phones X 10 equipment or other home se curity systems ceiling fans and lights your wireless connection will degrade dramatically or drop altogether Try changing the Channel on your...

Page 61: ...Pro products network together out of the box at the factory default settings To hard reset the DI 624 to Factory Default Settings please do the following Troubleshooting After the DI 624 reboots this...

Page 62: ...Navigator v6 or later or other Java enabled browsers Advanced Firewall Features NAT with VPN Passthrough Network Address Translation 95 maximum non condensing Wireless Operating Range Operating Temper...

Page 63: ...Bm 2dB Security 802 1x WPA WiFi Protected Access 64 128 WEP with TKIP MIC IV Expansion Shared Key Authentication External Antenna Type Single detachable reverse SMA Orthogonal Frequency Division Multi...

Page 64: ...OFDM 10 PER 82dBm 12Mbps OFDM 10 PER 84dBm 11Mbps CCK 8 PER 82dBm 9Mbps OFDM 10 PER 87dBm 6Mbps OFDM 10 PER 88dBm 5 5Mbps CCK 8 PER 85dBm 2Mbps QPSK 8 PER 86dBm 1Mbps BPSK 8 PER 89dBm Technical Speci...

Page 65: ...t port on the device if possible If the computer is turned off the link light may not be on The following connections require a Crossover Cable Computer to Computer Computer to Uplink Port Computer to...

Page 66: ...r cable All you need to remember to properly con gure the cables is the pinout order of the two cable ends and the following rules A straight through cable has identical ends A crossover cable has dif...

Page 67: ...it Frequently Asked Questions continued Click the Connection tab and set the dial up option to Never Dial a Connection Click the LAN Settings button Nothing should be checked Click OK Go to the Advan...

Page 68: ...Run Dialogue Box will appear Type winipcfg in the window as shown then click OK Step 3 The IP Con guration window will appear displaying your Ethernet Adapter Information Select your adapter from the...

Page 69: ...gure Most D Link devices use the 192 168 0 X range How can I nd my IP Address in Windows 2000 XP Step 1 Click on Start and select Run Step 2 Type cmd then click OK Step 3 From the Command Prompt ente...

Page 70: ...ault it should be 192 168 0 1 How can I assign a Static IP Address in Windows XP Step 1 Click on Start Control Panel Network and Internet Connections Network connections Step 2 See Step 2 for Windows...

Page 71: ...r 192 168 0 1 Set the Primary DNS to be the same as the LAN IP address of your router 192 168 0 1 The Secondary DNS is not needed or enter a DNS server from your ISP Click OK twice You may be asked if...

Page 72: ...where X is between 2 99 Make sure that the number you choose is not in use on the network Step 5 Click OK twice Click Enable DNS Type in a Host can be any word Under DNS server search order enter the...

Page 73: ...modem Step 1 Log into the web based con guration by typing in the IP Address of the router default 192 168 0 1 in your web browser The username is admin all lowercase and the password is blank nothing...

Page 74: ...button If you do not already have a public IP Address under the WAN heading click on the DHCP Renew and Continue buttons Static Cable Connection Step 1 Log into the web based con guration by typing i...

Page 75: ...appears enter the username admin and leave the password blank Click OK If the password dialog box does not come up repeat Step 2 Note Do not run Wizard Step 4 Click on the WAN tab on left hand side of...

Page 76: ...ion provided by AOL DSL Plus In most cases yes AOL DSL may use PPPoE for authentication bypassing the client software If this is the case then our routers will work with this service Please contact AO...

Page 77: ...ype either TCP UDP or both If you are not sure select both Step 7 Enter the port information next to Private Port and Public Port The private and public ports are usually the same The public port is t...

Page 78: ...of the public network outside the company can access only the DMZ host The DMZ may typically also have the company s Web pages so these could be served to the outside world However the DMZ provides ac...

Page 79: ...thing How do I con gure the DMZ Host continued Step 3 Click the Advanced tab and then click on the DMZ button Select Enable and type in the IP Address you found in step 1 Step 4 Click Apply and then C...

Page 80: ...plied to If you would like this rule to allow all internet users to be able to access these ports then put an Asterisk in the rst box and leave the second box empty Step 5 Select LAN as the Destinatio...

Page 81: ...ver mapping table Server Port Server IP Enable 21 192 168 0 5 X 80 192 168 0 6 X 1723 192 168 0 7 X How do I use PC Anywhere with my DI 624 router You will need to open 3 ports in the Virtual Server s...

Page 82: ...Step 6 Create a second entry as shown here Step 7 Click Apply and then click Continue Step 8 Create a third and nal entry as shown here Step 9 Click Apply and then click Continue Step 10 Run PCAnywhe...

Page 83: ...h as the Java Interface with the client Step 1 Open your web browser and enter the IP Address of your router 192 168 0 1 Enter username admin and your password leave blank Step 2 Click on Advanced and...

Page 84: ...n the Advanced tab and then click on Virtual Server on the left side Step 4 You will now create a new Virtual Server entry Click Enabled and enter a name socom Enter the IP Address of your Playstation...

Page 85: ...side Step 3 You will create 2 entries Step 4 Click Enabled and enter Settings Click Apply and then continue Step 5 Enter 2nd entry Click Enabled Click Apply and then continue NAME Gamespy1 PRIVATE IP...

Page 86: ...ddress of your router in a web browser 192 168 0 1 Step 2 Enter your username admin and your password blank by default Step 3 Click on Advanced and then click Virtual Server Step 4 Click Enabled and t...

Page 87: ...IP Enter the IP Address of the computer you want to host the game Select Both for Protocol Type Enter 6112 for both Private Port and Public Port Click Always or set a schedule Step 4 Click Apply and t...

Page 88: ...s have taken it on themselves to actually provide H 323 compatibility This is not an easy task since the router must search each incoming packet for signs that it might be a netmeeting packet This is...

Page 89: ...dule Step 4 Click Apply and then Continue Step 5 Repeat steps 3 and 4 enter ichat2 and open ports 16384 16403 UDP How do I set up my router to use iChat for Macintosh users continued Click Enabled Ent...

Page 90: ...Click Apply and then Continue Frequently Asked Questions continued If using Mac OS X Firewall you may need to temporarily turn off the rewall in the Sharing preference pane on both computers To use th...

Page 91: ...r may keep the rewall on if the AIM port is open To open the AIM port If you do not want to turn off the rewall at the sending computer a different le sharing service may be used instead of iChat The...

Page 92: ...slate the local IP Addresses to global address and vice versa Simply put it is a method of connecting multiple computers to the Internet or any other IP network using one IP Address D Link s broadband...

Page 93: ...nk Technical Support over the Telephone 877 453 5465 24 hours a day seven days a week D Link Technical Support over the Internet http support dlink com email support dlink com Tech Support for custome...

Page 94: ...ants that the software portion of the product Software will substantially conform to D Link s then current functional speci cations for the Software as set forth in the applicable documentation from t...

Page 95: ...reasonable care repair or service in any way that is not contemplated in the documentation for the product or if the model or serial number has been altered tampered with defaced or removed Initial i...

Page 96: ...thout prior notice Copyright 2002 by D Link Corporation D Link Systems Inc All rights reserved CE Mark Warning This is a Class B product In a domestic environment this product may cause radio interfer...

Page 97: ...97 Register your D Link product online at http support dlink com register 10 11 04 Registration...

Reviews: