background image

86

D-Link DIR-652 User Manual

Section 4 - Security

Wireless Security

This section will show you the different levels of security you can use to protect your data from intruders. The DIR-652 offers the following types 

of security:

• WPA2

 (Wi-Fi Protected Access 2)    

• WPA2-PSK (Pre-Shared Key)

• WPA

 (Wi-Fi Protected Access) 

 

• WPA-PSK (Pre-Shared Key)

What is WPA?

WPA, or Wi-Fi Protected Access, is a Wi-Fi standard that was designed to improve the security features of WEP (Wired Equivalent Privacy).  

The 2 major improvements over WEP: 

•  Improved data encryption through the Temporal Key Integrity Protocol (TKIP). TKIP scrambles the keys using a hashing algorithm 

and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered with. WPA2 is based on 802.11i and 

uses Advanced Encryption Standard (AES) instead of TKIP.

•  User authentication, which is generally missing in WEP, through the extensible authentication protocol (EAP). WEP regulates 

access to a wireless network based on a computer’s hardware-specific MAC address, which is relatively simple to be sniffed out 

and stolen. EAP is built on a more secure public-key encryption system to ensure that only authorized network users can access 

the network.

WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wireless connection. The key is an alpha-numeric password between 8 and 63 

characters long. The password can include symbols (!?*&_) and spaces. This key must be the exact same key entered on your wireless router or 

access point.

WPA/WPA2 incorporates user authentication through the Extensible Authentication Protocol (EAP). EAP is built on a more secure public key encryption 

system to ensure that only authorized network users can access the network.

Summary of Contents for DIR-652

Page 1: ......

Page 2: ... or registered trademarks of D Link Corporation or its subsidiaries in the United States or other countries All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies Copyright 2011 by D Link Systems Inc All rights reserved This publication may not be reproduced in whole or in part without prior expressed written permission from D Link...

Page 3: ...al Configuration 21 Dynamic Cable 22 Internet Setup 23 PPPoE DSL 23 PPTP 24 L2TP 25 Static assigned by ISP 26 DS Lite 27 Wireless Settings 28 Network Settings 29 DHCP Server Settings 30 DHCP Reservation 31 Parental Controls 32 IPv6 Internet Connection 33 IPv6 Manual Setup 34 Auto Detection 34 Static IPv6 Stateful 35 Static IPv6 Stateless 36 Autoconfiguration Stateful 37 Autoconfiguration Stateless...

Page 4: ...rewall 69 IPv6 Routing 70 Administrator Settings 71 Time Settings 72 SysLog 73 Email Settings 74 System Settings 75 Update Firmware 76 DDNS 77 System Check 78 Schedules 79 Device Information 80 Log 81 Stats 82 Active Sessions 82 Wireless 83 IPv6 84 IPv6 Routing 84 Support 85 Wireless Security 86 What is WPA 86 Wireless Security Setup Wizard 87 Configure WPA Personal PSK 89 Configure WPA Enterprise...

Page 5: ...iv D Link DIR 652 User Manual Table of Contents Networking Basics 113 Check your IP address 113 Technical Specifications 115 ...

Page 6: ...ng a power supply with a different voltage rating than the one included with the DIR 652 will cause damage and void the warranty If any of the above items are missing please contact your reseller DIR 652 Wireless N Gigabit Home Router Ethernet Cable Power Adapter CD ROM with Manual and Setup Wizard ...

Page 7: ...cintosh or Linux based operating system An installed Ethernet adapter Browser Requirements Internet Explorer 6 0 or higher Chrome 2 0 or higher Firefox 3 0 or higher Safari 3 0 or higher with Java 1 3 1 or higher Windows Users Make sure you have the latest version of Java installed Visit www java com to download the latest version CD Installation Wizard Requirements Computer with the following Win...

Page 8: ... online gaming smooth and responsive providing a better Internet experience EXTENDED WHOLE HOME COVERAGE This high performance router provides superiorWhole Home Coverage while reducing dead spots TheWireless N Gigabit Home Router is designed for use in bigger homes and for users who demand higher performance networking Add a notebook or desktop adapter and stay connected to your network from virt...

Page 9: ...ess URL and or Domain Name Filter Scheduling These filters can be scheduled to be active on certain days or for a duration of hours or minutes Secure Multiple Concurrent Sessions The DIR 652 can pass through VPN sessions It supports multiple and concurrent IPSec and PPTP sessions so users behind the DIR 652 can securely access corporate networks User friendlySetupWizard Throughitseasy to useWeb ba...

Page 10: ... devices such as computers switches and hubs 2 Internet Port The auto MDI MDIX Internet port is the connection for the Ethernet cable to the cable or DSL modem 3 Power Receptor Receptor for the supplied power adapter 4 Reset Press and hold the reset button to restore the router to its original factory settings 1 2 3 4 ...

Page 11: ...D blinks during data transmission A solid blue light indicates that there is an Internet connection an orange light indicates that there is none 3 WLAN LED A solid light indicates that the wireless segment is ready This LED blinks during wireless data transmission 4 Local Network s LED A solid light indicates a connection to an Ethernet enabled computer on ports 1 4 This LED blinks during data tra...

Page 12: ...em Also you can only use the Ethernet port on your modem If you were using the USB connection before using the router then you must turn off your modem disconnect the USB cable and connect an Ethernet cable to the Internet port on the router and then turn the modem back on In some cases you may need to call your ISP to change connection types USB to Ethernet If you have DSL and are connecting via ...

Page 13: ... that is 1 5 feet thick 5 meters at a 45 degree angle appears to be almost 3 feet 1 meter thick At a 2 degree angle it looks over 42 feet 14 meters thick Position devices so that the signal will travel straight through a wall or ceiling instead of at an angle for better reception 3 Building Materials make a difference A solid metal door or aluminum studs may have a negative effect on range Try to ...

Page 14: ...uctions that follow are shown inWindows XP The steps and screens are similar for the other Windows operating systems If the CD Autorun function does not automatically start on your computer go to Start Run In the run box type D DWizard exe where D represents the drive letter of your CD ROM drive When the autorun screen appears click START Getting Started Note It is recommended to write down the SS...

Page 15: ...router using the web based configuration utility Note If you have successfully completed the setup on your router with the CD the Quick Setup Wizard will not appear Please refer to page 16 Quick Setup Wizard To access the configuration utility open a web browser such as Internet Explorer and enter the IP address of the router 192 168 0 1 ...

Page 16: ...uration This wizard is designed to guide you through a step by step process to configure your new D Link router and connect to the Internet Click Next to continue In order to secure your new networking device please enter a password and click Next ...

Page 17: ... User Manual Section 3 Configuration SelectEnableAdvancedDNSServicestoallowthisfunctiontoimproveyour overall Internet experience Click Next to continue Please wait while your router detects your internet connection type ...

Page 18: ...nnection type and click Next to continue If you selected DHCP Connection make suer that you are connected to the D Link router with the PC that was originally connected to your broadband connection Then clicktheCloneMACbuttontocopyyourcomputer sMAC address Click Next to continue ...

Page 19: ... have a security key for your network If you would like the router to automatically assign a security key choose Automatically assign a network key or you may choose Manually assign a network key and you may enter your own Network key Click Next to continue Once this screen appears your setup is complete Click Save Connect to reboot the router ...

Page 20: ...15 D Link DIR 652 User Manual Section 3 Configuration Before your router reboots you will be asked if you want to bookmark D Link Router Web Management click Ok to finish ...

Page 21: ...ternet Explorer and enter the IP address of the router 192 168 0 1 You may also connect using the NetBIOS name in the address bar http dlinkrouter Select Admin from the drop down menu and then enter your password The password is left blank by default If you get a Page Cannot be Displayed error please refer to the Troubleshooting section for assistance ...

Page 22: ...withoutrunningthewizard clickManualConfiguration and skip to page 21 Click Wireless Connection Setup Wizard to begin If you want to add your wireless clients to your router using WPS click Add Wireless Device with WPS and skip to page 88 If you want to configure your wireless settings manually click Manual Wireless Connection Setup and skip to page 28 Internet Connection Wireless Settings ...

Page 23: ...figuration Click Next to continue Create a new password and then click Next to continue Select your time zone from the drop down menu and then click Next to continue Select the type of Internet connection you use and then click Next to continue ...

Page 24: ...onal but may be required by some ISPs The default host name is the device name of the Router and may be changed If you selected PPPoE enter your PPPoE username and password Click Next to continue Select Static if your ISP assigned you the IP address subnet mask gateway and DNS server addresses Note Make sure to remove your PPPoE software from your computer The software is no longer needed and will...

Page 25: ... Static enter your network settings supplied by your Internet provider Click Next to continue Click Connect to save your settings Once the router is finished rebooting click Continue Please allow 1 2 minutes to connect Close your browser window and reopen it to test your Internet connection It may take a few tries to initially connect to the Internet ...

Page 26: ...CP PPPoE PPTP L2TP Static or DS Lite Refer to the next few pages for more information When this option is enabled the router will speed up NAT performance by hardware acceleration mechanism Note SPI and the QoS engine will be disabled automatically when hardware NAT is enabled My Internet Connection is Enable True Gigabit Routing Connectivity ...

Page 27: ...ssigned by your ISP These addresses are usually obtained automatically from your ISP Leave at 0 0 0 0 if you did not specifically receive these from your ISP Maximum Transmission Unit you may need to change the MTU for optimal performance with your specific ISP 1500 is the default MTU The default MAC Address is set to the Internet port s physical interface MAC address on the Broadband Router It is...

Page 28: ... change the MTU for optimal performance with your specific ISP 1492 is the default MTU The default MAC Address is set to the Internet port s physical interface MAC address on the Broadband Router It is not recommended that you change the default MAC address unless required by your ISP You can use the Clone Your PC s MAC Address button to replace the Internet port s MAC address with the MAC address...

Page 29: ...r information will be supplied by your ISP Internet Service Provider Maximum Transmission Unit you may need to change the MTU for optimal performance with your specific ISP 1400 is the default MTU The default MAC Address is set to the Internet port s physical interface MAC address on the Broadband Router It is not recommended that you change the default MAC address unless required by your ISP You ...

Page 30: ...r the Primary and Secondary DNS Server Addresses Static L2TP only Maximum Transmission Unit you may need to change the MTU for optimal performance with your specific ISP 1400 is the default MTU The default MAC Address is set to the Internet port s physical interface MAC address on the Broadband Router It is not recommended that you change the default MAC address unless required by your ISP You can...

Page 31: ...ended that you change the default MAC address unless required by your ISP You can use theCloneYourPC s MAC Address button to replace the Internet port s MAC address with the MAC address of your Ethernet card IP Address Subnet Mask Default Gateway DNS Servers MTU MAC Address Static assigned by ISP Select Static IP Address if all the Internet port s IP information is provided to you by your ISP You ...

Page 32: ... enter the AFTR IPv6 address used here Enter the B4 IPv4 address value used here Once connected the WAN IPv6 address will be displayed here Once connected the IPv6 WAN Default Gateway address will be displayed here DS Lite Configuration AFTR IPv6 Address B4 IPv4 Address WAN IPv6 Address IPv6 WAN Default Gateway DS Lite Another Internet Connection type is DS Lite Click on the Save Settings button t...

Page 33: ...f you enableAutoChannelScan this option will be greyed out Select one of the following 802 11g Only Select if all of your wireless clients are 802 11g 802 11n Only Select only if all of your wireless clients are 802 11n Mixed 802 11n and 802 11g Select if you are using a mix of 802 11n and 11g wireless clients Select the Channel Width Auto 20 40 This is the default setting Select if you are using ...

Page 34: ...8 0 1 If you change the IP address once you click Apply you will need to enter the new IP address in your browser to get back into the configuration utility Enter the Subnet Mask The default subnet mask is 255 255 255 0 Enter the Domain name Optional Uncheck the box to transfer the DNS server information from your ISP to your computers If checked your computers will use the router for a DNS server...

Page 35: ...lly assign IP addresses to your computers or devices make sure the IP addresses are outside of this range or you may have an IP conflict The length of time for the IP address lease Enter the Lease time in minutes Enable this feature to broadcast your networks DHCP server to LAN WLAN clients NetBIOS allows LAN hosts to discover all other computers within the network enable this feature to allow the...

Page 36: ...nseewhatLANdevicesarecurrentlyleasing IP addresses ClickRevoketocanceltheleaseforaspecificLANdeviceandfree an entry in the lease table Do this only if the device no longer needs the leased IP address because for example it has been removed from the network Note The Revoke option will not disconnect a PC with a current network session from the network you would need to use MAC Address Filter to do ...

Page 37: ...n uses OpenDNS Includes Advanced DNS FamilyShield and customizable blocking of malware and phishing sites You may also customize filtering of web content by category This option uses OpenDNS DNS servers will be provided via DHCP by your ISP or you may manually enter DNS servers Advanced DNS Service is a free security option that provides anti phishing protection to your network and offers navigati...

Page 38: ...Configuration IPv6 Internet Connection Click IPv6 Internet Connection Setup Wizard to begin Skip to page 51 If you want to configure your IPv6 Internet Connection manually click Manual IPv6 Internet Connection Setup and skip to the next page ...

Page 39: ...6 in IPv4 Tunnel 6to4 6rd and Link local If you are unsure of your connection method please contact your IPv6 Internet Service Provider Note If using the PPPoE option you will need to ensure that any PPPoE client software on your computers has been removed or disabled Auto Detection Select Auto Detection to have the router detect and automatically configure your IPv6 setting from your ISP ...

Page 40: ...Address Check to enable the Autoconfiguration feature Select Stateful DHCPv6 Enter the start IPv6 Address for the DHCPv6 range for your local computers Enter the end IPv6 Address for the DHCPv6 range for your local computers Enter the IPv6 Address Lifetime in minutes My IPv6 Connection WAN IPv6 Address Settings LAN IPv6 Address LAN Link Local Address Enable Autoconfiguration Autoconfiguration Type...

Page 41: ...LAN local IPv6 address for the router Displays the Router s LAN Link Local Address Check to enable the Autoconfiguration feature SelecteitherSLAAC RDNSSorSLAAC Stateless DHCPv6 Enter the Router Advertisement Lifetime in minutes My IPv6 Connection WAN IPv6 Address Settings LAN IPv6 Address LAN Link Local Address Enable Autoconfiguration Autoconfiguration Type Router Advertisement Lifetime ...

Page 42: ... Displays the Router s LAN Link Local Address Check to enable the Autoconfiguration feature Select Stateful DHCPv6 Enter the start IPv6 Address for the DHCPv6 range for your local computers Enter the end IPv6 Address for the DHCPv6 range for your local computers Enter the IPv6 Address Lifetime in minutes My IPv6 Connection IPv6 DNS Settings Primary Secondary DNS Address LAN IPv6 Address LAN Link L...

Page 43: ...condary DNS server addresses Enter the LAN local IPv6 address for the router Displays the Router s LAN Link Local Address Check to enable the Autoconfiguration feature Select either SLAAC RDNSS or SLAAC Stateless DHCPv6 Enter the Router Advertisement Lifetime in minutes My IPv6 Connection IPv6 DNS Settings Primary Secondary DNS Address LAN IPv6 Address LAN Link Local Address Enable Autoconfigurati...

Page 44: ...ring which the Internet connection is maintained during inactivity To disable this feature enable Auto reconnect MaximumTransmission Unit you may need to change the MTU for optimal performance with your specific ISP 1492 is the default MTU Select either Obtain DNS server address automatically or Use the following DNS Address Enter the primary and secondary DNS server addresses Enter the LAN local ...

Page 45: ...v6 Address Range Start IPv6 Address Range End IPv6 Address Lifetime Select Stateful DHCPv6 Enter the start IPv6 Address for the DHCPv6 range for your local computers Enter the end IPv6 Address for the DHCPv6 range for your local computers Enter the IPv6 Address Lifetime in minutes ...

Page 46: ... Manual Enter a maximum idle time during which the Internet connection is maintained during inactivity To disable this feature enable Auto reconnect MaximumTransmission Unit you may need to change the MTU for optimal performance with your specific ISP 1492 is the default MTU Select either Obtain DNS server address automatically or Use the following DNS Address Enter the primary and secondary DNS s...

Page 47: ... Configuration Enable Autoconfiguration Autoconfiguration Type Router Advertisement Lifetime Check to enable the Autoconfiguration feature Select either SLAAC RDNSS or SLAAC Stateless DHCPv6 Enter the Router Advertisement Lifetime in minutes ...

Page 48: ... Address Check to enable the Autoconfiguration feature Select Stateful DHCPv6 Enter the start IPv6 Address for the DHCPv6 range for your local computers Enter the end IPv6 Address for the DHCPv6 range for your local computers Enter the Router Advertisement Lifetime in minutes My IPv6 Connection IPv6 in IPv4 Tunnel Settings LAN IPv6 Address LAN Link Local Address Enable Autoconfiguration Autoconfig...

Page 49: ...SP Enter the LAN local IPv6 address for the router Displays the Router s LAN Link Local Address Check to enable the Autoconfiguration feature Select either SLAAC RDNSS or SLAAC Stateless DHCPv6 Enter the IPv6 Address Lifetime in minutes My IPv6 Connection IPv6 in IPv4 Tunnel Settings LAN IPv6 Address LAN Link Local Address Enable Autoconfiguration Autoconfiguration Type IPv6 Address Lifetime ...

Page 50: ...Link Local Address Check to enable the Autoconfiguration feature Select Stateful DHCPv6 Enter the start IPv6 Address for the DHCPv6 range for your local computers Enter the end IPv6 Address for the DHCPv6 range for your local computers Enter the IPv6 Address Lifetime in minutes My IPv6 Connection 6 to 4 Settings Primary Secondary DNS Address LAN IPv6 Address LAN Link Local Address Enable Autoconfi...

Page 51: ...esses Enter the LAN local IPv6 address for the router Displays the Router s LAN Link Local Address Check to enable the Autoconfiguration feature Select either SLAAC RDNSS or SLAAC Stateless DHCPv6 Enter the Router Advertisement Lifetime in minutes My IPv6 Connection 6 to 4 Settings Primary Secondary DNS Address LAN IPv6 Address LAN Link Local Address Enable Autoconfiguration Autoconfiguration Type...

Page 52: ...N local IPv6 address for the router Displays the Router s LAN Link Local Address Check to enable the Autoconfiguration feature SelecteitherSLAAC RDNSS orSLAAC Stateless DHCPv6 Enter the Router Advertisement Lifetime in minutes My IPv6 Connection 6RD Settings LAN IPv6 Address LAN Link Local Address Enable Autoconfiguration Autoconfiguration Type Router Advertisement Lifetime ...

Page 53: ...heck to enable the Autoconfiguration feature Select Stateful DHCPv6 Enter the start IPv6 Address for the DHCPv6 range for your local computers Enter the end IPv6 Address for the DHCPv6 range for your local computers Enter the IPv6 Address Lifetime in minutes My IPv6 Connection 6RD Address Settings LAN IPv6 Address LAN Link Local Address Enable Autoconfiguration Autoconfiguration Type IPv6 Address ...

Page 54: ... Link DIR 652 User Manual Section 3 Configuration Select Link Local Only from the drop down menu Displays the IPv6 address of the router My IPv6 Connection LAN IPv6 Address Settings Link Local Connectivity ...

Page 55: ...t by enabling Virtual Server Depending on the requested service the DIR 652 redirects the external service request to the appropriate server within the LAN network The DIR 652 is also capable of port redirection meaning incoming traffic to a particular port may be redirected to a different port on the server computer Each virtual service that is created will be listed at the bottom of the screen i...

Page 56: ...ur computer and click Enter the port that you want to open next to Private Port and PublicPort Theprivateandpublicportsareusuallythesame The publicportistheportseenfromtheInternetside andtheprivate port is the port being used by the application on the computer within your local network Select TCP UDP or Both from the drop down menu Select Allow All most common or a created Inbound filter You maycr...

Page 57: ...P you computer will be listed in the Computer Name drop down menu Select your computer and click Enter the TCP and or UDP port or ports that you want to open You can enter a single port or a range of ports Separate ports with a common Example 24 1009 3000 4000 Select Allow All most common or a created Inbound filter You maycreateyourowninboundfiltersinthe Advanced Inbound Filter page Thescheduleof...

Page 58: ...service to always be enabled You can create your own times in the Tools Schedules section Name Trigger Traffic Type Firewall Traffic Type Schedule Application Rules Some applications require multiple connections such as Internet gaming video conferencing Internet telephony and others These applications have difficulties working through NAT Network Address Translation Special Applications makes som...

Page 59: ...lays the detected uplink speed Thespeedatwhichdatacanbetransferredfromtherouter to your ISP This is determined by your ISP This option is enabled by default This will allow your router to automatically determine the network priority of running programs This option is enabled by default so that your router will automatically determine which programs should have network priority For best performance...

Page 60: ... meaningful to you The priority of the message flow is entered here 1 receives thehighestpriority mosturgent and255receivesthelowest priority least urgent The protocol used by the messages The rule applies to a flow of messages whose LAN side IP address falls within the range set here The rule applies to a flow of messages whose LAN side port number is within the range set here The rule applies to...

Page 61: ...adband Router Select Turn MAC Filtering Off Turn MAC Filtering ON and ALLOW computers listed to access the network or Turn MAC Filtering ON and DENY computers listed to access the network from the drop down menu Enter the MAC address you would like to filter To find the MAC address on a computer please refer to the Networking Basics section in this manual Select a DHCP client from the drop down me...

Page 62: ...d Policy The Access Control section allows you to control access in and out of your network Use this feature as Parental Controls to only grant access to approved sites limit web access based on time or dates and or block access from applications like P2P utilities or games Click Next to continue with the wizard Access Control Wizard ...

Page 63: ...t to continue Select a schedule I E Always from the drop down menu and then click Next to continue Enter the following information and then click Next to continue Address Type Select IP address MAC address or Other Machines IP Address Enter the IP address of the computer you want to apply the rule to ...

Page 64: ... enter the rule Enable Check to enable the rule Name Enter a name for your rule Dest IP Start Enter the starting IP address Dest IP End Enter the ending IP address Protocol Select the protocol Dest Port Start Enter the starting port number Dest Port End Enter the ending port number To enable web logging click Enable Click Save to save the access control rule ...

Page 65: ... part of the URL contains the blocked word the site will not be accessible and the web page will not display To use this feature enter the text string to be blocked and click Save Settings The text to be blocked will appear in the list To delete the text click Clear the List Below Website Filters Select Allow or Deny Enter the keywords or URLs that you want to allow or deny Click Save Settings Con...

Page 66: ... save the settings This section will list any rules that are created You may click the Edit icon to change the settings or enable disable the rule or click the Delete icon to remove the rule Name Action Enable Source IP Start Source IP End Add Inbound Filter Rules List The Inbound Filter option is an advanced method of controlling data received from the Internet With this feature you can configure...

Page 67: ...nd run the application on that computer Note Placing a computer in the DMZ may expose that computer to a variety of security risks Use of this option is only recommended as a last resort Specify the IP address of the computer on the LAN that you want to have unrestricted Internet communication If this computer obtains it s IP address automatically using DHCP be sure to make a static reservation on...

Page 68: ...l of IPSec through NAT This ALG may interfere with the operation of such VPN clients If you are having trouble connecting with your corporate network try turning this ALG off Please check with the system adminstrator of your corporate network whether your VPN client supports NAT traversal Allows applications that use RealTime Streaming Protocol to receive streaming media from the internet QuickTim...

Page 69: ...ay to be taken if this route is used The route metric is a value from 1 to 16 that indicates the cost of using this route A value 1 is the lowest cost and 15 is the highest cost Select the interface that the IP packet must use to transit out of the router when this route is used Destination IP Netmask Gateway Metric Interface Routing The Routing option is an advanced method of customizing specific...

Page 70: ... exceeding the 2346 byte setting will be fragmented before transmission 2346 is the default setting Delivery Traffic Indication Message 3 is the default setting A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages WMM is QoS for your wireless network This will improve the quality of video and voice applications for your wireless clients Check...

Page 71: ...on on the device If the device supports Wi Fi Protected Setup and has a configuration button you can add it to the network by pressing the configuration button on the device and then the on the router within 60 seconds The status LED on the router will flash three times if the device has been successfully added to the network There are several ways to add a wireless device to your network A regist...

Page 72: ...uthenticating point Unchecking the box will not allow the DIR 652 to respond topings BlockingthePingmayprovidesomeextrasecurity from hackers Check the box to allow the Internet port to be pinged YoumaysettheportspeedoftheInternetportto10Mbps 100Mbps 1000Mbps or 10 100 1000Mbps Auto Some oldercableorDSLmodemsmayrequireyoutosettheport speed to 10Mbps Check the box to allow multicast traffic to pass ...

Page 73: ...ion Enter a wireless network name SSID that is different from your main wireless network Checktoallownetworkconnectivitybetweenthedifferent zones created Select the type of security or encryption you would like to enable for the guest zone Enable Guest Zone Schedule Wireless Network Name Enable Routing Between Zones Security Mode The Guest Zone feature will allow you to create temporary zones that...

Page 74: ...Section 3 Configuration IPv6 Firewall This section may be used to allow or deny traffic from passing through the device It works the same way as IP Filters with additional settings Users can create more detailed rules for the device ...

Page 75: ...70 D Link DIR 652 User Manual Section 3 Configuration IPv6 Routing This page allows you to specify custom routes that determine how data is moved around your network ...

Page 76: ...ine hackers and unauthorized users from gaining access to your router s network settings Check to enable HTTPS to connect to the router securely Remote management allows the DIR 652 to be configured from the Internet by a web browser A username and password is still required to access the Web Management interface In general only a member of your network can browse the built in web pages to perform...

Page 77: ... Internet not a local server Enter the NTP server or select one from the drop down menu To manually input the time enter the values in these fields for theYear Month Day Hour Minute and Second and then click Set Time You can also click Copy Your Computer s Time Settings Time Zone Daylight Saving Enable NTP Server NTP Server Used Manual TheTime Configuration option allows you to configure update an...

Page 78: ...u may send these logs to a SysLog server on your network Enable Logging to SysLog Server SysLog Server IP Address Check this box to send the router logs to a SysLog Server The address of the SysLog server that will be used to send the logs You may also select your computer from the drop down menu only if receiving an IP address from the router via DHCP ...

Page 79: ... a log file or firmware upgrade notification via email Enter the email address where you want the email sent Enter the SMTP server address for sending email If your SMTP server requires authentication select this option Check this box if your SMTP server requires authentication Enter your account for sending email Enter the password associated with the account Re type the password associated with ...

Page 80: ...te a previously saved configuration file and then click the Load button to transfer those settings to the router This option will restore all configuration settings back to the settings that were in effect at the time the router was shipped from the factory Any settings that have not been saved will be lost including any rules that you have created If you want to save the current router configurat...

Page 81: ...router check automatically to see if there is a new firmware upgrade Check Email Notification of Newer Firmware Version to have the router send an email when there is a new firmware available Firmware Upgrade Browse Notifications Options Update Firmware You can upgrade the firmware of the Router here Make sure the firmware you want to use is on the local hard drive of the computer Click on Browse ...

Page 82: ...for your DDNS account Enter the Password for your DDNS account Enter a time in hours Displays the status of your DDNS connection DDNS for IPv6 Hosts Check the box to enable DDNS for IPv6 Hosts Enter the IPv6 address of your computer server in your local network You can click the button and select a computer server from the drop down list Enter the IPv6 Host Name that you registered with your DDNS ...

Page 83: ...figuration The Ping Test is used to send Ping packets to test if a computer is on the Internet Enter the IP Address that you wish to Ping and click Ping The results of your ping attempts will be displayed here System Check Ping Test Ping Results ...

Page 84: ...Check All Day 24hrs or enter a start and end time for your schedule Click Save to save your schedule You must click Save Settings at the top for your schedules to go into effect The list of schedules will be listed here Click the Edit icon to make changes or click the Delete icon to remove the schedule Name Days Time Save Schedule Rules List Schedules ...

Page 85: ...ion and use Connect to establish the PPPoE connection Displays the router s time and firmware version Display CPU usage and idle percentage Display memory usage status Displays the MAC address and the public IP settings for the router Displays the MAC address and the private local IP settings for the router Displays the wireless MAC address and your wireless settings such as SSID and Channel Displ...

Page 86: ...plays any recent activity Clears all of the log contents This option will send a copy of the router log to the email address configured in the Tools Email screen This option will save the router to a log file on your computer The router automatically logs records events of possible interest in it s internal memory If there isn t enough internal memory for all events logs of older events are delete...

Page 87: ...on 3 Configuration Stats ThescreenbelowdisplaystheTrafficStatistics HereyoucanviewtheamountofpacketsthatpassthroughtheDIR 652 on both the Internet and the LAN ports The traffic counter will reset if the device is rebooted Active Sessions ...

Page 88: ...User Manual Section 3 Configuration The wireless client table displays a list of current connected wireless clients This table also displays the connection time and MAC address of the connected wireless clients Wireless ...

Page 89: ...nts In the IPv6 Connection Information section more information about the IPv6 connection will be displayed Information like the connection type gateway address Link Local address DNS Servers and more In the LAN IPv6 Computers section a list of actively connected LAN IPv6 com puters will be displayed IPv6 Routing This page displays IPv6 routing details configured for your router ...

Page 90: ...85 D Link DIR 652 User Manual Section 3 Configuration Support ...

Page 91: ...d on 802 11i and uses Advanced Encryption Standard AES instead of TKIP User authentication which is generally missing in WEP through the extensible authentication protocol EAP WEP regulates access to a wireless network based on a computer s hardware specific MAC address which is relatively simple to be sniffed out and stolen EAP is built on a more secure public key encryption system to ensure that...

Page 92: ...D Link DIR 652 User Manual Section 4 Security Wireless Security Setup Wizard To run the security wizard click on Setup at the top and then click Launch Wireless Security Setup Wizard Click Next to continue ...

Page 93: ...ity The following screen will show you your Pre Shared Key to enter on your wireless clients Click Save to finish the Security Wizard If you selected WPA Enterprise the RADIUS information will be displayed Click Save to finish the Security Wizard ...

Page 94: ...de 2 Next to Security Mode select WPA Personal 3 Next to WPA Mode select Auto WPA2 Only or WPA Only Use Auto if you have wireless clients using both WPA and WPA2 4 NexttoGroupKeyUpdateInterval entertheamountoftimebeforethegroup key used for broadcast and multicast data is changed 3600 is default 5 Next to Pre Shared Key enter a key passphrase The key is entered as a pass phrase in ASCII format at ...

Page 95: ...Only orWPA Only Use Auto if you have wireless clients using both WPA and WPA2 4 NexttoGroupKeyUpdateInterval entertheamountoftimebeforethegroup key used for broadcast and multicast data is changed 3600 is default 5 Next to Authentication Timeout enter the amount of time before a client is required to re authenticate 60 minutes is default 6 Next to RADIUSServerIPAddress enter the IP Address of your...

Page 96: ...91 D Link DIR 652 User Manual Section 4 Security 10 Click Advanced to enter settings for a secondary RADIUS Server 11 Click Apply Settings to save your settings ...

Page 97: ...sing Windows 7 and WPS for Wireless Configuration The following steps allow you to configure your DIR 652 wireless network settings using Windows 7 through WPS 1 Click the Start button and select Computer from the Start menu 2 Click the Network option ...

Page 98: ...Link DIR 652 User Manual Section 4 Security 3 Double click the DIR 652 router 4 Input the WPS PIN number displayed in the Advanced Wi Fi Protected Setup section in the Router s Web UI and click Next DIR 652 ...

Page 99: ...94 D Link DIR 652 User Manual Section 4 Security 5 Type a name for your wireless network 6 To configure advanced settings click the icon Click Next to continue ...

Page 100: ...it for the configuration to complete 8 After configuration is complete a window will appear that your wireless network has been set up successfully Make a note of the security key as you may need to provide this security key when adding an older wireless device to the network in the future Click Close to complete WPS setup ...

Page 101: ...rity WPA WPA2 on your wireless router or access point before configuring your wireless adapter If you are joining an existing network you will need to know the security key or passphrase being used 1 Click on the wireless icon in your system tray lower right corner 2 The utility will display any available wireless networks in your area ...

Page 102: ... connect to and click the Connect button If you get a good signal but cannot access the Internet check your TCP IP settings for your wireless adapter Refer to the Networking Basics section in this manual for more information 4 The following window appears while your computer tries to connect to the router ...

Page 103: ...urity key or passphrase that is on your router and click Ok It may take 20 30 seconds to connect to the wireless network If the connection fails please verify that the security settings are correct The key or passphrase must be exactly the same as on the wireless router ...

Page 104: ...the Windows Vista utility as seen below Right clickonthewirelesscomputericoninyoursystemtray lower rightcorner next to the time Select Connect to a network If you receive the Wireless Networks Detected bubble click on the center of the bubble to access the utility or The utility will display any available wireless networks in your area Click on a network displayed using the SSID and click the Conn...

Page 105: ...point before configuring your wireless adapter If you are joining an existing network you will need to know the security key or passphrase being used 2 Highlight the wireless network SSID you would like to connect to and click Connect 1 OpentheWindowsVista WirelessUtilitybyright clickingonthewireless computer icon in your system tray lower right corner of screen Select Connect to a network ...

Page 106: ...e same security key or passphrase that is on your router and click Connect It may take 20 30 seconds to connect to the wireless network If the connection fails please verify that the security settings are correct The key or passphrase must be exactly the same as on the wireless router ...

Page 107: ... option similar to the Windows XP utility as seen below Right click on the wireless computer icon in your system tray lower right corner next to the time Select View Available Wireless Networks If you receive the Wireless Networks Detected bubble click on the center of the bubble to access the utility or The utility will display any available wireless networks in your area Click on a network displ...

Page 108: ...onfiguring your wireless adapter If you are joining an existing network you will need to know the passphrase being used 2 Highlight the wireless network SSID you would like to connect to and click Connect 1 Open the Windows XP Wireless Utility by right clicking on the wireless computer icon in your system tray lower right corner of screen Select View Available Wireless Networks ...

Page 109: ...NetworkConnection box will appear Enter theWPA PSK passphrase and click Connect It may take 20 30 seconds to connect to the wireless network If the connection fails please verify that the WPA PSK settings are correct The WPA PSK passphrase must be exactly the same as on the wireless router ...

Page 110: ...y built in to a ROM chip in the device itself Your computer must be on the same IP subnet to connect to the web based utility Make sure you have an updated Java enabled web browser We recommend the following Internet Explorer 6 0 or higher Chrome 2 0 or higher Safari 3 0 or higher Firefox 3 0 or higher Verify physical connectivity by checking for solid link lights on the device If you do not get a...

Page 111: ...dress bar This should open the login page for your the web management Ifyoustillcannotaccesstheconfiguration unplugthepowertotherouterfor10secondsandplugbackin Waitabout30secondsandtryaccessing the configuration If you have multiple computers try connecting using a different computer 2 What can I do if I forgot my password If you forgot your password you must reset your router Unfortunately this p...

Page 112: ...rements of ten Ex 1492 1482 1472 etc Note AOL DSL users must use MTU of 1400 To find the proper MTU Size you ll have to do a special ping of the destination you re trying to go to A destination could be another computer or a URL Click on Start and then click Run Windows 95 98 and Me users type in command Windows NT 2000 XP Vista and 7 users type in cmd and press Enter or click OK Once the window o...

Page 113: ...th 1452 28 1480 Once you find your MTU you can now configure your router with the proper MTU size To change the MTU rate on your router follow the steps below Open your browser enter the IP address of your router 192 168 0 1 and click OK Enter your username admin and password blank by default Click OK to enter the web configuration page for the device Click on Setup and then click Manual Configure...

Page 114: ...y and the absence of cabling and other fixed infrastructure have proven to be beneficial for many users Wireless users can use the same applications they use on a wired network Wireless adapter cards used on laptop and desktop systems support the same protocols as Ethernet adapter cards Under many circumstances it may be desirable for mobile network devices to link to a conventional Ethernet LAN i...

Page 115: ...ts industrial locations college and high school campuses airports golf courses and many other outdoor venues Wireless Personal Area Network WPAN Bluetooth is the industry standard wireless technology used for WPAN Bluetooth devices in WPAN operate in a range up to 30 feet away Compared to WLAN the speed and wireless operation range are both less than WLAN but in return it doesn t use nearly as muc...

Page 116: ...s of setting up a wireless network Tips Here are a few things to keep in mind when you install a wireless network Centralize your router or Access Point Make sure you place the router access point in a centralized location within your network for the best performance Try to place the router access point as high as possible in the room so the signal gets dispersed throughout your home If you have a...

Page 117: ...to peer communication using wireless network adapters on each computer such as two or more DIR 652 wireless network Cardbus adapters An Infrastructure network contains an Access Point or wireless router All the wireless devices or clients will connect to the wireless router or access point An Ad Hoc network contains only clients such as laptops with wireless cardbus adapters All the adapters must ...

Page 118: ...type cmd and click OK Windows Vista users type cmd in the Start Search box At the prompt type ipconfig and press Enter This will display the IP address subnet mask and the default gateway of your adapter Iftheaddressis0 0 0 0 checkyouradapterinstallation security settings andthesettingsonyourrouter Somefirewallsoftware programs may block a DHCP request on newly installed adapters If you are connec...

Page 119: ...click on the Local Area Connection which represents your D Link network adapter and select Properties Step 3 Highlight Internet Protocol TCP IP and click Properties Step 4 Click Use the following IP address and enter an IP address that is on the same subnet as your network or the LAN IP address on your router Example If the router s LAN IP address is 192 168 0 1 make your IP address 192 168 0 X wh...

Page 120: ...s 40 5 12Mbps 27 6 5Mbps 13 5 Frequency Range 2 4GHz to 2 483GHz Transmitter Output Power 26 5dBm peak 18dBm average LEDs Power Internet Operating Temperature 32 F to 104 F 0 C to 40 C Humidity 95 maximum non condensing Safety Emissions FCC CE Dimensions L 8 4 inches W 6 3 inches H 1 2 inches Warranty 2 Year Maximum wireless signal rate derived from IEEE Standard 802 11g and 802 11n specifications...

Page 121: ...ction against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communication However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to r...

Page 122: ...llowing two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause undesired operation IMPORTANT NOTE Radiation Exposure Statement This equipment complies with Canada radiation exposure limits set forth for an uncontrolled environment This equipment should be installed and operated with minimum dista...

Reviews: