D-Link DI-804 User Manual Download Page 29 | Manualshive

Page: 29 / 75

background image

29

Advanced Filter/Firewall

This screen allows you to set up rules based filtering and logging to

ensure maximum control over internal and external Internet communication.

The default settings ensure proper configuration for normal Internet

operation. Advanced users can use these settings to configure special

settings for their need.

Refer to the following sections for instructions on configuring the

filters and firewall settings.

«
...
27
28
29
30
31
...
»

Summary of Contents for DI-804

Page 1: ...D Link DI 804 Broadband Router User s Manual Rev 01 March 2001 6RDI804 01 ...

Page 2: ...tallation 10 Placement 10 Safety Precautions 10 Side Panel 10 Front Panel 11 Rear Panel 11 Basic DI 804 Configuration 12 Start up and Log in 12 Main Page 14 Setup Wizard 15 Basic Setup 16 Internet Settings 17 Local Network Settings 20 Specific Application Support 21 DMZ Control 22 Advanced DI 804 Configuration 24 Open Ports 25 Port Redirection 27 Advanced Filter Firewall 29 General Setup 30 Set to...

Page 3: ...7 Viewing PPP Logs 48 Viewing WAN Logs 48 Troubleshooting the DHCP Client on WAN 49 Troubleshooting 50 Basic Functions 50 LAN Connection Problems 52 ISP Connection Problems 54 Internet Application Problems 55 Performing a Factory Reset 57 Using the PING Utility in Windows 95 98 Me 58 Using the WINIPCFG Utility in Windows 95 98 Me 60 Technical Specifications 63 Key Features 64 D Link Offices 65 Lim...

Page 4: ...es two levels of security support First it masks local users IP addresses from others on the Internet making it much more difficult for a hacker to target a machine on your network Secondly it can block and redirect certain ports to limit the services that outside users can access Specific ports can be opened to ensure that games and other Internet applications will run properly The Broadband Rout...

Page 5: ...hen access is desired from a client Integrated DHCP services allow up to 253 users to get their IP address automatically on boot up from the Broadband Router Client machines require no software simply set them to accept a dynamically assigned IP address and reboot Each time they are powered up the Broadband Router will recognize them and set their IP address to instantly connect them to the LAN Pa...

Page 6: ...data that is sent through your network by eliminating information that should not be there This provides security for the computers behind your router because computers from the outside can not access or send information directly to any computer on your network The router determines which computer the information should be forwarded to and sends it If the information is not intended for any comput...

Page 7: ...ocal Area Networking LAN is the term used when connecting several computers together over a small area such as a building or group of buildings LAN s can be connected over large areas A collection of LAN s connected over a large area is called a Wide Area Network WAN A LAN consists of multiple computers connected to each other There are many types of media that can connect computers together The m...

Page 8: ...ere the same network For example an employee can access the corporate network from home using VPN allowing the employee to access files and printers Here are several different implementations of VPN that can be used Point to Point Tunneling Protocol PPTP PPTP uses proprietary means of connecting two private networks over the Internet PPTP is a way of securing the information that is communicated b...

Page 9: ...9 standard for VPN server software Because of this each ISP or business can implement their own VPN network making interoperability a challenge ...

Page 10: ...I 804 The DI 804 should only be repaired by authorized and qualified personnel Please do not try to open or repair the DI 804 yourself Do not place the DI 804 in a damp or humid location i e a bathroom The DI 804 should be placed in a sheltered and non slip location within a temperature range of 5 to 40 Celsius degree Please keep the wrap bag of the DI 804 and the clip binding the cable out of rea...

Page 11: ... the Link light in on and the 10 100 light is off the speed is 10Mbps Rear Panel The rear panel features a Power switch an uplink port LAN ports 1 through 4 WAN port and Factory Reset button Refer to the following table for the meaning of each feature Power Use this switch to provide power to your DI 804 Uplink The Uplink port is used to connect your DI 804 to a switch or hub using a straight thro...

Page 12: ...ration interface and how to use different options and settings Although you can change the IP address of your Broadband Router to meet your needs this manual will assume that the defaults are left in place This means that the IP address of your Broadband Router will be 192 168 0 1 If you have changed the IP address scheme please substitute 192 168 0 1 with the IP address scheme that you have chose...

Page 13: ...s a good idea to change the administrator password to ensure a secure connection to your Broadband Router The System Management section described later in this manual describes how to change the password Once you have input the correct password and logged in the screen will change to the Main Page screen If you are having problems logging in and you are sure that the password you are using is corr...

Page 14: ...s of this manual The Unit Status links to the status screen to view current status of your internet connection and is described in the System Management chapter Note The Web Configuration Interface was designed to provide helpful information on each screen When help is needed refer to the left side of each screen for information regarding the features on that page ...

Page 15: ... Setup Wizard The Setup Wizard page is a step by step guide to configuring the DI 804 to work with your ISP provider Refer to the information provided in the left frame for information regarding each step ...

Page 16: ...16 Basic Setup The Basic Setup screen enables you to change basic settings related to accessing the Internet All of the settings covered in the Basic Setup section are covered in the Setup Wizard ...

Page 17: ...to change the settings related to connecting to your ISP The Computer Name is used to give a name to your connection if you are using a Cable modem The Domain Name host name is the name given to you by your ISP provider if you using the Home cable Internet service ...

Page 18: ...he MAC address to your cable company if they want a MAC address authentication Select Specify a MAC Address means you have been authenticated one MAC address before you purchased the DI 804 by your cable company Please key in the MAC address here Select Static IP if your ISP assigns you an IP address This means that your ISP has given you an IP address that you will use to connect to the Internet ...

Page 19: ...nternet service If you select PPPoE you will need to enter the correct values for your User Name and Password in the fields provided The DNS section needs to be set to the correct option in order for the DI 804 to resolve domain name information in URL s Select Dynamic DNS if your ISP provides the DNS information much in the same way as you receive an IP Address Select Static DNS if you were given...

Page 20: ...n IP addresses automatically to PCs that have attached to your LAN You need specify where you want DI 804 to start to assign IP addresses and how many IP addresses you hope to use Please notice the Starting IP Address needs to have same values at the first three fields with DI 804 Local Port Local IP Address The DI 804 Local Port lets you can specify your local port IP address ...

Page 21: ...n enables you to select certain predefined applications to allow those applications to operate correctly over the Internet To enable a specific application put a check in the box next to that application by clicking on the box Click the Finish button to save your settings ...

Page 22: ...e box provided or click the Choose PC button When the Choose PC button is pressed a list of IP Addresses will be displayed Choose the IP Address of the computer that you want DMZ control enabled for and click the Finish button to save your changes Only one computer can use DMZ at a time Please note that enabling DMZ removes the protection of the firewall which exposes the computer to intrusion Use...

Page 23: ...23 contact the maximum number of servers which can improve ping times Once the game connects to the game server disable DMZ to ensure proper firewall protection ...

Page 24: ...uration in order to operate correctly with the Internet Your DI 804 provides additional features such as Open Ports Allows specific ports to be opened to allow certain Internet applications to work correctly Port Redirection Allows incoming ports to be redirected to clients on the local network to a specified client port Advanced Filter Firewall Allows you to set up rules based filtering and loggi...

Page 25: ...bility This screen shows which Open Ports rules you have configured Please note that opening a port or port range can be a security risk so only open necessary ports To open a port or port range click on the underlined number on the right to configure The following screen will be shown ...

Page 26: ...ck the Choose PC button and click on the IP Address To configure certain ports to be opened you must configure the Protocol Start Port and End Port fields The Protocol drop down box enables you to choose TCP UDP or means that the router will not care if it is TCP or UDP It will lose efficacy protocol Then enter a starting port number and an ending port number in the Start Port and End Port fields ...

Page 27: ...shows which Port Redirection rules that you have configured Please note that redirecting a port or port range also opens the ports and can be a security risk so only redirect necessary ports To redirect a port or port range click on the underlined number on the right to configure The following screen will be shown ...

Page 28: ...rt that you would like the Internet port to use on your LAN side The Protocol drop down box enables you to choose TCP UDP or means that the router will not care if it is TCP or UDP It will lose efficacy protocol Only one computer on your LAN can use each Index You can choose which computer you want to use by entering the IP Address of that computer in the Local Computer field or click the Choose P...

Page 29: ...ontrol over internal and external Internet communication The default settings ensure proper configuration for normal Internet operation Advanced users can use these settings to configure special settings for their need Refer to the following sections for instructions on configuring the filters and firewall settings ...

Page 30: ...active Block means that the log function will record all blocked packets Pass means that the log function will record all passed packets No Match means that the log function will record all packets that are unmatched Note When using Telnet the filter log will be displayed if you type the log f command The MAC Address for Packet Duplicate log function can record the logged packets via Ethernet If y...

Page 31: ...able the feature Set to Default Rules The Set to Default Rules button will change all modified settings within the Advanced Filter Firewall to the default settings Filter Rules Setup This screen enables you to set specific filter rules based on settings that ...

Page 32: ...differentiate each filter set Click on a Filter Rule button to add or edit each filter rule When you click the Filter Rule button the following screen will be shown The Comments field can be used to name the rule To enable the Filter Rule click the checkbox next to the labeled Click ...

Page 33: ... menu lets you specify the next filter rule to run on a packet if the packet matches the current filter rule Click in the checkbox next to Duplicate to LAN if you want to duplicate the matched packets to another network device The other network device is defined in the MAC Address for Packet Duplicationof General Setup Click in the checkbox next to Log to enable the log function when using the Tel...

Page 34: ... Port Otherwise the port range is between the Start Port and the End Port including the Start Port and the End Port The operator specifies a not equal to operation If the End Port is empty the port number is not equal the value of the Start Port Otherwise this port number is not between the Start Port and the End Port including the Start and End Port The operator is used to specify that the port n...

Page 35: ...packets Select Don t Care to specify no fragment options in Select Without Fragment to filter when packets are not fragmented Use With Fragment to filter when packets are fragmented Select With Short Fragment to filter when packets which are too short to contain a complete header Click the OK button to save your settings and return to the filter set screen ...

Page 36: ...d in this chapter Passwords Change administrator password Local Remote Configuration Change remote configuration settings Unit Status View WAN and LAN connection information Logs View logs related to routing sessions DHCP and PPPoE Diagnostics View WAN and LAN diagnostic information Reboot Reboot the DI 804 Restore Default Settings Restore settings to factory default ...

Page 37: ...f the New Password box and type the password that you would like to change to Next click inside of the Reconfirm box and type in the new password again Click Finishto save the new password or click the Cancel button to remove the passwords you just typed in To ensure that you use a password that is effective follow these simple rules 1 Choose a password that would be hard for someone other than th...

Page 38: ...d Telnet configuration Enter the desired port number into the box provided for both HTML and Telnet Configuration Settings Click inside of the checkbox located at the left of the Enable Remote HTML or Telnet Configuration to enable the use of remote configuration The use of remote configuration is not recommended because of the higher risk involved when additional ports are opened to enable the us...

Page 39: ...ection shows the connection information of your WAN port to your ISP If no information is provided in this section you do not have a current Internet connection The Local section shows the IP Address and Subnet Mask that the local port The status of your PPPoE connection and IP Address of the DMZ client is also provided Links to the current Open Redirected Ports and Active Filter Firewall Rules ar...

Page 40: ...e Triggered Packet Header Log shows the header information of the PPPoE packet that requests that the DI 804 dial your PPPoE connection The Routing Table displays the DI 804 routing table The Users DHCP Log displays the allocation of LAN IP Address s This is helpful in troubleshooting LAN IP Address problems such as IP Address conflicts The Sessions Log displays the list of active outgoing session...

Page 41: ... information This screen is similar to the Unit Status screen although both sections can be used to diagnose problems with your Internet connection The following diagnostic pop up screen displays WAN and LAN port information and allows you to dial or drop your PPPoE connection ...

Page 42: ...ic IP Dynamic IP PPTP or PPPoE GW IP Address Indicates the gateway IP address IP Address IP address of the LAN2 WAN interface TX Packets Total number of transmitted IP packets sent during this connection session TX Rate Transmission rate for outgoing data The unit is characters per second cps RX Packets Total number of received IP packets received during this connection session RX Rate Reception r...

Page 43: ...ancel to return to the DI 804 configuration interface Restore Default Settings The Restore Default Settings button will change the configuration settings to the default settings used when you first received your DI 804 The following screen will be shown asking you if you want to restore the DI 804 to the default settings Press OK to restore to default settings or press Cancel to return to the DI 8...

Page 44: ...ou download the updated firmware which was ZIP file format completely Please extract this ZIP file that has a execute file in it The following screen will be shown when you double click your mouse directly in this execute file Press Search to search to find how many DI 804 s devices you have Select one device what you want to upgrade Press OK to progress to next instruction or press Exit to exit D...

Page 45: ...et your password the value is empty Press OK to next instruction or press Cancel to return to the previously configuration interface Ready to upgrade your DI 804 s firmware Press Send to upgrade your DI 804 s firmware or press Abort to quit your firmware upgrade ...

Page 46: ...46 Press Ok to finish your firmware upgrade ...

Page 47: ...le Telnet commands If you are not familiar with these commands listed you could type the command a space and a question mark to view more information about that command This Telnet based management or Telnet terminal also provides a method to recall the command history You can use the Up and Down Arrow key to recall the command history These two keys are on your keyboards The quit or exit command ...

Page 48: ...adband Router to dial the connection 4 Type log p to view the latest PPP log If you want to dump the entire PPP log use the log p t command The PPP log is useful to help determine communication problems for normal PPPoE and PPTP dialup with a DSL modem Viewing WAN Logs The log w t command will display all WAN connection logs including PPP PPPoE and PPTP The steps are 1 Login the Telnet terminal 2 ...

Page 49: ...elp Type ip dhcpc release to release the WAN IP address Type ip dhcpc renew to renew the WAN IP address Type ip dhcpc status to show the status of the DHCP client for the WAN interface For some special cases you may want to know the detailed DHCP packet information between the WAN interface and the cable head end access server Type log i to view these DHCP exchanged messages Note that the DHCP cli...

Page 50: ... help The phone numbers for Technical Support are in the appendix of this manual under D Link Office Information Basic Functions My Broadband Router will not turn on No LED s light up Cause The power is not connected or the power switch is set to Off Resolution Connect the power adapter to your Broadband Router and plug it into the power outlet Make sure that the power switch is set to On Note Onl...

Page 51: ...ed but not the right type whether it is patch or straight through Resolution Make sure that both ends of the cable are connected Try using another cable If you are using a straight through cable try a patch cable and vice versa Sometimes my Broadband Router stops working or locks up Cause Someone has attempted to hack into someone on your LAN The Broadband Router has detected harmful data trying t...

Page 52: ...you are currently experiencing frequent lock ups you may wish to upgrade the firmware LAN Connection Problems I can t access my Broadband Router Cause The unit is not turned on There is not a network connection The computer you are using does not have a compatible IP Address Resolution Make sure your Broadband Router is turned on Make sure that there is a physical connection between your computer ...

Page 53: ...ly Use the Reset button located on the front of your Broadband Router to revert to the default settings I can t connect to other computers on my LAN Cause The IP Addresses of the computers are not set correctly Network cables are not connected properly Windows network settings are not set correctly Resolution Make sure that each computer has a unique IP Address If using DHCP through the Broadband ...

Page 54: ...s their service Resolution Make sure that your DSL or Cable modem is running correctly and connected to the WAN port of the Broadband Router Make sure that the right connection type is used in the web configuration Make sure that the username and password used in the connection type is correct If using Home make sure that the computer name is input correctly Clone the MAC address using the web con...

Page 55: ...Broadband Router can fill up and stop working temporarily Try using the DMZ host feature while connecting to game servers and then disabling DMZ while playing the game Turn the Broadband Router off and then on again to reset the NAT table Make sure that the correct ports have been opened in order for your specific game to operate correctly behind a firewall Consult your game documentation or conta...

Page 56: ...ould appear similar to this dlink occa home com Find the Domain Suffix on your invoice or call your Internet Service Provider ISP to obtain it I can t connect to AOL Cause Your AOL software is not set correctly to use the Broadband Router Resolution Use your AOL software to change the location information to use TCP IP in the Network field Leave the phone number blank Save your settings and try to...

Page 57: ... then release 3 Wait a few seconds for the Broadband Router to reboot using default settings A Factory Reset can also be performed through the web configuration interface Follow these steps to perform a factory reset using the web configuration interface 1 Log in to the DI 804 web configuration interface 2 Click on the System Management link at the bottom of the screen 3 Click on Restore Default S...

Page 58: ... ping 192 168 0 1 which is the IP address of the Gateway in this case and hit the Enter key The following screen will be shown C ping 192 168 0 1 Pinging 192 168 0 1 with 32 bytes of data Reply from 192 168 0 1 bytes 32 time 130ms TTL 64 Reply from 192 168 0 1 bytes 32 time 10ms TTL 64 Reply from 192 168 0 1 bytes 32 time 20ms TTL 64 Reply from 192 168 0 1 bytes 32 time 10ms TTL 64 Ping statistics...

Page 59: ...ly but there is a problem with your ISP or the Internet site you tried to PING is unavailable The screen shown below is an example of an unsuccessful PING C ping 192 168 0 1 Pinging 192 168 0 1 with 32 bytes of data Request timed out Request timed out Request timed out Request timed out Ping statistics for 192 168 0 1 Packets Sent 4 Received 0 Lost 4 100 loss Approximate round trip times in milli ...

Page 60: ... be used to perform similar tasks Use the following steps to use the WINIPCFG utility Click on the Start button and click Run Type winipcfg in the Open box Click OK The IP Configuration screen will be displayed The IP address will be displayed in the IP Address box If you have more than one network card make sure that the network card that you are using is displayed in the white dropdown box Make ...

Page 61: ...Address of your Broadband Router is set in the Gateway portion of the TCP IP settings in your network settings Click on More Info to display additional IP information The important settings to watch for in this screen are in the Host Informationbox Make sure that the DNS Servers box has the correct DNS information ...

Page 62: ...62 Also check the DHCP server box to make sure that you are connected to the right DHCP server ...

Page 63: ...iation LAN Port Features ARP IP ICMP TCP UDP DHCP Server NAT Server DNS Cache And Proxy Server PPPoE WAN Port Features PPPoE DHCP Client PPTP Client ARP IP ICMP TCP UDP IP Routing RIP II Firewall IP Packet Filtering IP Spoofing Management Web Based Telnet Ports LAN NWay 10BASE T 100BASE TX Fast Ethernet WAN 10BASE T RS 232 DB 9 Serial ...

Page 64: ...DNS cache including a mapping table between domain name and IP address The proxy also can learn all DNS query packets through the router and save it into its own DNS cache Telnet terminal server The Telnet user interface TUI is an efficient method for the configuration and management of routers The Telnet interface is a traditional command line user interface for advanced configuration management ...

Page 65: ...EPAIR LINE 00800 7250 8000 INDIA D LINKINDIA Plot No 5 Kurla Bandra Complex Road Off Cst Road Santacruz E Bombay 400 098 India TEL 91 22 652 6696 FAX 91 22 652 8914 URL www dlink india com E MAIL service dlink india com ITALY D LINKITALIA Via Nino Bonnet No 6 b 20154 Milano Italy TEL 39 02 2900 0676 FAX 39 02 2900 1723 URL www dlink it E MAIL info dlink it JAPAN D LINKJAPAN 10F 8 8 15 Nishi Gotand...

Page 66: ...90 days after the date of original retail purchase of the Hardware If a completed Registration Card is not received by an authorized D Link Service Office within such ninety 90 day period then the Warranty Period shall be ninety 90 days from the date of purchase Product Type Warranty Period Product excluding power supplies and fans if purchased and delivered in the fifty 50 United States or the Di...

Page 67: ...t the software portion of the product Software will substantially conform to D Link s then current functional specifications for the Software as set forth in the applicable documentation from the date of original delivery of the Software for a period of ninety 90 days Warranty Period if the Software is properly installed on approved hardware and operated as contemplated in its documentation D Link...

Page 68: ... or licensed The addresses telephone fax list of the nearest Authorized D Link Service Office is provided in the back of this manual FAILURE TO PROPERLY COMPLETE AND TIMELY RETURN THE REGISTRATION CARD MAY AFFECT THE WARRANTY FOR THIS PRODUCT Submitting A Claim Any claim under this limited warranty must be submitted in writing before the end of the Warranty Period to an Authorized D Link Service O...

Page 69: ...ts or that is determined by D Link not to be defective or non conforming What Is Not Covered This limited warranty provided by D Link does not cover Products that have been subjected to abuse accident alteration modification tampering negligence misuse faulty installation lack of reasonable care repair or service in any way that is not contemplated in the documentation for the product or if the mo...

Page 70: ...ECTION AND PERFORMANCE OF THE PRODUCT IS WITH THE PURCHASER OF THE PRODUCT Limitation of Liability TO THE MAXIMUM EXTENT PERMITTED BY LAW D LINK IS NOT LIABLE UNDER ANY CONTRACT NEGLIGENCE STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT INCONVENIENCE OR DAMAGES OF ANY CHARACTER WHETHER DIRECT SPECIAL INCIDENTAL OR CONSEQUENTIAL INCLUDING BUT NOT LIMITED TO DA...

Page 71: ...product owner may also have other rights which vary from state to state Trademarks Copyright 1999 D Link Corporation Contents subject to change without prior notice D Link is a registered trademark of D Link Corporation D Link Systems Inc All other trademarks belong to their respective proprietors Copyright Statement No part of this publication may be reproduced in any form or by any means or used...

Page 72: ...vironnement domestique ce produit pourrait causer des interférences radio auquel cas l utilisateur devrait prendre les mesures adéquates Attenzione Il presente prodotto appartiene alla classe B Se utilizzato in ambiente domestico il prodotto può causare interferenze radio nel cui caso è possibile che l utente debba assumere provvedimenti adeguati FCC Warning This equipment has been tested and foun...

Page 73: ...nce to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the equipment and receiver Connect the equipment into an outlet on a circuit different from that to which the receiver is connect...

Page 74: ...t 1 Where and how will the product primarily be used oHome oOffice oTravel oCompany Business oHome Business oPersonal Use 2 How many employees work at installation site o1 employee o2 9 o10 49 o50 99 o100 499 o500 999 o1000 or more 3 What network protocol s does your organization use oXNS IPX oTCP IP oDECnet oOthers_____________________________ 4 What network operating system s does your organizat...

Page 75: ...75 ...

Reviews:

No comments

Related manuals for DI-804

Verizon DSL-2750B

Brand: D-Link Pages: 6

Brand: D-Link Pages: 10

Brand: D-Link Pages: 38

Brand: IBM Pages: 248

Brand: Salusfin Pages: 6

Brand: QNAP Pages: 54

Brand: PaloAlto Networks Pages: 28

Brand: Zhone Pages: 28

HFisolator 9730/26-11

Brand: Stahl Pages: 2

Brand: Planet Pages: 20

Brand: EXAGATE Pages: 7

Brand: Matrix Switch Corporation Pages: 54

Brand: Extron electronics Pages: 19

CNGE28FX4TX24MS2

Brand: Comnet Pages: 154

Brand: Epson Pages: 71

Brand: Epson Pages: 29

Brand: Epson Pages: 57

C823312 (Ethernet)

Brand: Epson Pages: 76

Brands by name

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Popular brands

Load more brands