background image

 

48 

Advanced

 Firewall

 

Rules for Schedule 

 

 

 

 

 

 

 

 

This section allows you to determine what local network users can 

access on the Internet, and when. Parental control profiles enable you 

to restrict access to particular websites or block sites with specific 

keywords that you do not want home network users to access. Parental 

control configuration is accomplished in two steps. First content 

filtering rules or schedules are defined and then a parental control 

profile is created using a combination of content filtering rules and 
schedules. 

Parental Control Settings: 

Check the box to enable parental control. 

You will be able to prevent local network computers from accessing 

undesirable content or connecting to the Internet during scheduled 

access times.   

Summary of Contents for DWR-966

Page 1: ...DWR 966 4G Integrated Access Device User Manual ...

Page 2: ... 1 2006 A11 2009 A1 2010 A12 2011 A2 2013 3 Electromagnetic compatibility Article 3 1 b of the R TTE Directive EN 301 489 1 V1 9 2 EN 301 489 7 V1 3 1 EN 301 489 17 V2 2 1 EN 301 489 24 V1 5 1 EN 55022 2010 AC 2011 Class B EN55024 2010 EN 61000 3 2 2006 A1 2009 A2 2009 EN 61000 3 3 2008 4 Radio frequency spectrum usage Article 3 2 of the R TTE Directive EN 301 511 V9 0 2 EN 301 908 1 V6 2 1 EN 300...

Page 3: ...2 The technical documentation relevant to the above equipment will be held at D Link Corp No 289 Sinhu 3rd Rd Neihu District Taipei City 114 Taiwan ...

Page 4: ...s i use the mobile phone in good reception conditions ii use a hand free kit iii advise pregnant women to hold the mobile phone far from hers stomach iv advise child and adolescent to use a mobile phone far from genital parts The maximum ambient temperature specified by manufacturer is 40 C Please make sure the temperature for adapter will not be higher than 40 C The adapter shall be installed nea...

Page 5: ... 1 6 Hardware Overview Side Panel 9 2 INSTALLATION 10 3 USER CONFIGURATION INTERFACE 11 3 1 Accessing the User Configuration Interface 11 3 2 Interface Layout 12 3 3 Using the User Configuration Interface 13 3 3 1 Home 13 3 3 2 Internet 15 3 3 3 Wi Fi 22 3 3 4 LAN 34 3 3 5 Advanced 38 3 3 6 System 66 4 APPENDIX 75 4 1 First Login to the User Interface 75 4 2 Connected PC IP Address Configuration 7...

Page 6: ... a range of methods for connecting to the Internet allowing users to access 4G mobile network services via a single device Once connected you can easily share your network utilizing wireless Wi Fi and wired Ethernet interfaces The advanced 4G technology provides much better performance than traditional 3G networks ...

Page 7: ...ems and accessories 1 3 System Requirements 4G SIM card with valid Internet service A computer with a Windows Macintosh or Linux based operating system with an installed Ethernet adapter Internet Explorer Version 8 0 or above for configuration usage 1 DWR 966 unit 1 2 Ethernet cable 1 3 Antenna 2 4 Power adapter 1 5 Cigarette lighter adapter 1 ...

Page 8: ...is disabled 4 Wi Fi 2 4 GHz Off Wi Fi 2 4 GHz is disabled Green Wi Fi 2 4 GHz is enabled Blinking Green Data transmission 5 Wi Fi 5 GHz Off Wi Fi 5 GHz is disabled Green Wi Fi 5 GHz is enabled Blinking Green Data transmission 6 Ext Int antenna Off Internal antenna is used Green External antennas are used 7 3G 2G mode Green 3G network connected Blue 2G network connected off 3G 2G network not connec...

Page 9: ... settings will erase all of your existing settings 2 LAN ports Connects to your local network devices such as a PC or laptop 3 USB ports Optional external device connections 4 Power switch Turns device on 5 Power input port Connects to the power adapter LED Status Description LAN Green Port connected Blinking green Data transmitting receiving Off Port not connected ...

Page 10: ...escription 1 WPS button Quick wireless connection with other WPS supported devices 2 SIM card slot 4G or 3G SIM card connection 3 Antenna switch Press the button to switch between using external antennas or using the internal antenna of the product ...

Page 11: ...e antenna to fasten it 3 Insert the Ethernet cable into one of the LAN ports on the rear panel of the DWR 966 Insert the other end of this Ethernet cable into the port of the computer You can also use the default network password to connect Wi Fi devices to the DWR 966 directly The default SSID and network password is listed on the label attached to the rear panel of the DWR 966 ...

Page 12: ...55 255 255 0 Note Set the IP address of this computer to obtain an IP address automatically or assign an IP address from 192 168 1 100 to 192 168 1 230 See the Appendix for detailed procedures for manually setting your IP address 2 Open your web browser and type 192 168 1 1 in the address field 3 Users that log in to the configuration interface for the first time will be directed to a password mod...

Page 13: ...tent In the Home screen basic system status is displayed The menu bar of the User Configuration Interface Click tabs to access configuration pages of each function Additional options will appear on the left hand side as you click the main tabs This part displays your Login status and provides links to refresh the page and open the Help page 3 2 1 1 2 3 ...

Page 14: ...ction status The indicator displays in green to confirm the product has connected to the Internet successfully Signal Strength Indicator Indicates the current signal strength of the connected mobile network Network Provides the current status of the interface used to access the Internet Carrier Provider name of your mobile network service Roaming Confirms whether the mobile network service is roam...

Page 15: ...66 System Information System Name Displays the DWR 966 s configured name System Uptime Elapsed time since the DWR 966 was last turned on or rebooted HW Version Hardware version that the DWR 966 is currently using SW Version Firmware version that the DWR 966 is currently using Wi Fi SSID Names of the DWR 966 s wireless networks Security Encryption and authentication settings of each wireless networ...

Page 16: ...15 3 3 2 Internet Internet 3G LTE Status Network Status 4G Device Name Name of the 4G device that the DWR 966 connects to Registration State Status of connection to a network service ...

Page 17: ...ase transceiver station Transmit Displays transmission status and related statistics Tx Packets Number of IP packets transmitted from the DWR 966 Tx Errors Number of error packets transmitted from the DWR 966 Tx Overflows Number of overflows transmitted from the DWR 966 Tx Bytes Number of bytes transmitted from the DWR 966 Receive Displays receiving status and related statistics Rx Packets Number ...

Page 18: ...n Choose to enable or disable PIN protection After selecting Yes a field will appear below for you to enter the PIN code for certification PIN Verify Enter the PIN code Click Verify to proceed When you enter the PIN code incorrectly for three consecutive times you may have to use a PUK code to reset a new PIN code ...

Page 19: ...ed and you will need a PUK code to unlock it Please contact your service provider for the PUK code You have ten attempts to enter the PUK code to unlock your SIM card After ten failed attempts your SIM card will be permanently blocked New PIN Enter the new PIN code Confirm New PIN Enter the new PIN code again ...

Page 20: ...tworks automatically when the 4G signal is not stable Radio Frequency When you select 4G or 4G Preferred select a radio frequency from Band 3 Band 7 Band 8 or Band 20 according to your region and the frequency your service uses Selecting Auto will allow the system to choose a most appropriate frequency automatically Antenna Select EXT if using an external antenna with this device or select INT if ...

Page 21: ...t Profile Configuration This page displays the network profiles that are currently being used Select one from the list and then click Connect to establish a connection or click Edit to modify the selected profile ...

Page 22: ... scan for networks choose Manual then click Scan Networks to scan for networks After scanning nearby network providers and the network service they use will be listed in the chart For example you can choose only to use either 2G 3G or 4G networks of a designated service provider Select your desired network provider and then click Apply to apply the changes or click Scan Networks to scan again ...

Page 23: ...6 via Wi Fi Wi Fi Wi Fi Settings You will need to establish a wireless local area network WLAN to connect your client devices with the DWR 966 wirelessly and to access the Internet You can mark the box of the SSID and click Edit to modify its contents or click SSID Schedule to set a schedule rule for this network ...

Page 24: ... they must select this network name from the list of detected wireless networks in the area Broadcast SSID Check the box if you want to broadcast this SSID The SSID will be displayed when you search for available networks Security Select one security method from the drop down menu OPEN No data encryption WEP Personal Enables wireless with WEP protection and provides a 5 13 character ASCII string t...

Page 25: ... handshake is required with the receiving client Using a small value causes RTS packets to be sent more often consuming more of the available bandwidth therefore reducing the apparent throughput of the network packets The default value is 2346 which effectively disables RTS Fragmentation Threshold This is the maximum length of the frame in bytes beyond which packets must be broken up fragmented in...

Page 26: ...i Wi Fi Settings To set a schedule rule for a network 1 Click Add to add a new schedule rule Active Time Mark the box to enable this schedule rule Schedule Name Name of this schedule Start Time and Stop Time The time that you wish to turn on or turn off this wireless network 2 Click Apply to apply the changes ...

Page 27: ...he wireless computer s unique hardware ID MAC address With this feature you can prevent unknown or unauthorized computers from accessing the DWR 966 and the services like shares DMC it offers In most cases you know which devices will be connecting to the DWR 966 through a wireless connection which allows you to add these known devices to a list for authorized access This feature helps in securing ...

Page 28: ...DWR 966 Deny Devices that are added in the MAC address list will be blocked when trying to connect to the DWR 966 Click Apply to apply the changes or click Reset to undo your configurations List of MAC Addresses This is the list of wireless devices that have been added for the ACL policy MAC Address The unique hardware ID of the local network wireless computer Click Add to add an access policy or ...

Page 29: ...ction using WPA2 security 1 Check the box to enable WPS 2 Select the SSID of the wireless network you are establishing a connection with via WPS 3 Click Apply to apply the changes or click Reset to undo your configurations Push Button Connect PBC If other wireless devices support the PBC WPS function click on Click for PBC and then push the WPS button on the other device ...

Page 30: ...29 Personal Information Number PIN If other wireless devices support the PIN WPS function specify the same PIN for the DWR 966 and the wireless device and then click Via PIN to establish a connection ...

Page 31: ...b only Establishes the Wi Fi network in 802 11b mode Only 802 11b compatible devices can connect to DWR 966 via Wi Fi g only Establishes the Wi Fi network in 802 11g mode Only 802 11g compatible devices can connect to DWR 966 via Wi Fi b g n mode Select this mode to allow devices supporting 802 11b 802 11g or 802 11n to connect to the DWR 966 Channel Spacing The channel bandwidth occupied For high...

Page 32: ...z channel spacing Channel This specifies the frequency the radio uses to transmit the wireless frames Select a channel from the list of channels or choose Auto to let the system determine the best channel to use based on the environment noise levels for the available channels Transmit Power Select the signal power strength of the DWR 966 s Wi Fi network Click Apply to apply the changes or click Re...

Page 33: ...e a only Establishes the Wi Fi network in 802 11a mode Only 802 11a compatible devices can connect to DWR 966 via Wi Fi a n mode Select this mode to allow devices supporting 802 11a or 802 11n to connect to the DWR 966 ac mode Establishes the Wi Fi network in 802 11ac mode Only 802 11ac compatible devices can connect to DWR 966 via Wi Fi Channel Spacing The channel bandwidth occupied For high nois...

Page 34: ...he radio uses to transmit the wireless frames Select a channel from the list of channels Transmit Power Select the signal power strength of the DWR 966 s Wi Fi network Click Apply to apply the changes or click Reset to undo your configurations ...

Page 35: ... Address IP address that the client device is using MAC Address MAC address of the client device LAN LAN Settings This page allows you to configure the local network settings of the DWR 966 In most cases the default settings should be sufficient In this section you can configure the TCP IP details for the LAN Note The settings on this page will affect all devices that are ...

Page 36: ...on Interface IP Address Enter the local network IP address for the DWR 966 The default IP address is 192 168 1 1 Subnet Mask The subnet mask along with the previously configured IP address defines the network The default value for subnet mask is 255 255 255 0 Host Name The host name of the DWR 966 Click Apply to apply the changes or click Reset to undo your configurations ...

Page 37: ...rk Enter the number of local network computers including those connecting over Wi Fi and the DHCP server will calculate the number of leases required for the network Start IP distribution from Define the starting range of the IP address The DHCP server will iterate the DHCP IP addresses to be given out by taking into account the starting IP address range and the configured number of devices in you...

Page 38: ...rdware ID of the device called the MAC address to an IP address in the DHCP server reserved IP address list List of Reserved IP Addresses MAC Address The MAC address of the computer or local network device IP Address The reserved IP address to associate with the above MAC address Click Add to add a reserved IP or select an item and click Edit to modify or click Delete to delete the selected item ...

Page 39: ...in name to a particular computer with the use of Domain Name System DNS entries DNS allows you to assign a readable system name to the DWR 966 All connected local network computers will appear in the list of hosts as belonging to the domain configured on this page Network hosts which are a part of a common domain can view the list of other computers that are part of that domain ...

Page 40: ...ame Username and Password on this page Select the Dynamic DNS Service Select the DNS service that you are subscribed to Domain Name Enter the domain name of the dynamic DNS account This is the DNS domain name which will be used An example is dyndns org Username Enter the username of the dynamic DNS account This will be provided by the dynamic DNS service provider Password Enter the password for th...

Page 41: ... levels are grouped into a set of rules corresponding to maximum typical and minimum security settings Advanced users can supplement these rules with custom parental controls or port mapping rules as needed Select from one of the three security modes to protect the local network from Internet intrusion ...

Page 42: ...lt but the computers on the local network can access the Internet without restrictions This is the default and generally most appropriate security setting for home networks All traffic from the Internet is blocked from reaching the local network thus blocking unwanted intrusion from the outside At the same time local network users are given unrestricted access to the Internet regardless of service...

Page 43: ...ypes of traffic in accordance with rules specified by network administrators You can use this page to manage the firewall rules that control traffic to and from your network Access Control Application The application on which the filtering rule is applied Computer Name The name of the host on which the filtering rule is applied Status Displays if the traffic is allowed or blocked Click Add to add ...

Page 44: ...ntify computers by a unique name instead of local IP address Hostname mapping for the known local network devices can be done by clicking the Add button Computer Name The name assigned to the host IPv4 Address Enter the host s IP address here if it uses an IPv4 address IPv6 Address Enter the host s IP address here if it uses an IPv6 address Click Add to set the configuration Click Edit to edit the...

Page 45: ... the content filtering rule Keywords The keywords that are used to filter websites accessed by local network users the content filtering rule is based on these keywords Domains The internet domain on which content filtering rules is applied Please follow the steps below to set up Step 1 Click Add to add a blocking rule The image below uses yahoo to demonstrate set limit_yahoo as the filter name an...

Page 46: ...tal Control Click Apply to enable the configurations for the List of Parental Control Profiles Step 3 Click Add to add profiles 1 Enter Profile Name 2 Select your Group membership admin guest 3 Check the box to Enable Content Filtering 4 Select a Filter Content 5 Click Apply ...

Page 47: ...gin Please login with the username and password of the group you set on step 2 admin guest Step 5 After logging in link to http www yahoo com tw again Since yahoo is the keyword for blocked webpage therefore you will see the denial message while accessing any content that includes the keyword ...

Page 48: ...itors the number of pings per second to determine when to declare an echo storm intrusion event Echo storm intrusion events are not blacklisted This value can range between 1 and 10 000 ping packets per second The default is 128 ping packets per second ICMP Flood The security tool monitors the number of ICMP packets per second not including ping packets to determine when to declare an ICMP flood i...

Page 49: ... want home network users to access Parental control configuration is accomplished in two steps First content filtering rules or schedules are defined and then a parental control profile is created using a combination of content filtering rules and schedules Parental Control Settings Check the box to enable parental control You will be able to prevent local network computers from accessing undesira...

Page 50: ...r click Delete to delete the selected item List of Schedules Schedules are a very useful feature to allow security files to be enabled or disabled based on the time of day or day of the week Configured schedules are available for selection in the firewall rule configuration page All schedules follow the configured system time When you create a parental control policy you have the option to specify...

Page 51: ...nternet bandwidth Specify the bandwidth for each priority level in Bandwidth Management Then apply a Bandwidth Profile for the service in which you want to control its bandwidth with priority assigned to the Internet to ensure that high priority traffic such as voice is maintained at a certain quality of service while also limiting low priority traffic ...

Page 52: ...aximum bandwidth of this router Bandwidth Profiles Apply a priority profile for a designated computer when using a certain service Click Add to add a rule Available Profiles The priority in which profiles will be applied Service The service that the priority profile will apply to Traffic Selector Match Type The method for applying a profile IP Address The IP address to which this profile applies f...

Page 53: ...ing rules for the DWR 966 Service The name of the service for which the port forwarding rule has been created IP Address The IP address of the computer on the local network to which the traffic will be forwarded Port Translation The port number of the destination host for traffic forwarding Click Add to add a port mapping rule or select an item and click Edit to modify or click Delete to delete th...

Page 54: ...ers on the Internet NAT Select NAT if your ISP has assigned you only one IP address The computers that connect through the DWR 966 will need to be assigned IP addresses from a private subnet e g 192 168 10 0 Bridge Mode The DWR 966 in bridge mode can act as a bridge and also filter inspect packets It has all the interfaces belonging to the same LAN segment and you do not have to change other netwo...

Page 55: ...the security of the local area network Virtual DMZ Enable Disable Enable or disable the Virtual DMZ function If this function is enabled threats from external networks will be directed to the Virtual DMZ instead of the network IP Address of host DMZ Enter the IP address of the host DMZ Click Apply to apply the changes or click Reset to undo your configuration ...

Page 56: ... Mapping function will allow automatic port forwarding that helps your UPnP devices communicate with the Internet UPnP Settings Check the box and click Apply to enable the UPnP port mapping function UPnP Portmap Table UPnP devices that are applied with the UPnP port mapping function will be listed in this chart ...

Page 57: ...services of the DWR 966 Service Name Name of the service for identification and management purposes Protocol The layer 4 protocol that the service uses TCP UDP Start Port The start of the port range for the custom service End port The end of the port range for the custom service Click Add to add a special application or select an item and click Edit to modify or click Delete to delete the selected...

Page 58: ...of the route for identification and management purposes Destination Network The destination host or network to which the route leads IP Subnet Mask Subnet Mask for the destination Network Displays the network to which the route belongs and can be either wired or wireless Gateway The IP Address of the gateway through which the destination host or network can be reached Click Add to add a static rou...

Page 59: ...ing the mounted directory its capacity and the percentage of capacity used You can also designate a folder in the USB storage device as a shared folder to share its files with other computers connecting to the DWR 966 Note USB storage information will only be displayed when the product s DLNA Media Server function is enabled ...

Page 60: ...s a User Password User Password The password of the admin user account used to access the SAMBA server Display Password Displays the User Password when the check box is selected To designate a shared folder for file sharing You can designate a folder within the USB storage device to serve as a shared folder Computers connected to the DWR 966 will then be able to browse the shared folder by typing ...

Page 61: ...R 966 will be able to use a browser to browse data stored on the USB drive by accessing the following directories DWR 966 s LAN IP address Sharing Profile Name or SAMBA Server Name Sharing Profile Name Folder Path This field displays the folder path of the shared folder you designated You do not have to manually enter this information Access Level There are two access levels Read Only and Read Wri...

Page 62: ...SharePort Network USB Utility on your PC to use the USB device connected with DWR 966 see the following notes before enabling the DLNA function 1 Please note that enabling or disabling the DLNA function will only be applied after you click the Apply button 2 When DLNA is disabled all USB devices connected to the DWR 966 will be detected by the SharePort utility For detailed instructions of the Sha...

Page 63: ...s page displays the client devices that use an IPv6 IP address and are currently connected to the DWR 966 Host Name Name of the client device IP Address IP address used by the client device MAC Address MAC address of the client device ...

Page 64: ...63 Advanced IPv6 Settings IPv6 Settings Select the appropriate option button to turn the IPv6 function on or off ULA Settings Select the appropriate option button to turn the ULA function on or off ...

Page 65: ...tic routes Name The name of the route for identification and management purposes Destination IP The destination host or network of the route Prefix The length of the prefix to which the route leads Network Displays the network to which the route belongs Gateway The IPv6 address of the gateway used to reach the destination host or network Click Add to add an IPv6 static route Select an item and cli...

Page 66: ...tain types of traffic in accordance with rules specified by network administrators You can use this page to manage the firewall rules that control traffic to and from your network Firewall Rule Application The application on which the filtering rule is applied Computer Name The name of the host on which the filtering rule is applied Status Displays if the traffic is allowed or blocked Click Add to...

Page 67: ...time in a network of computers This page allows you to set the date time and NTP Network Time Protocol servers Accurate time across a network is important for logging and execution of scheduled upgrades and scheduled policies Setting the system time correctly is also required to make the firewall schedules work properly ...

Page 68: ...ally Adjust for Daylight Savings Time NTP Server1 The NTP server to sync Default is 0 us pool ntp org NTP Server2 The second NTP server to sync in case the first one does not respond Default is 1 us pool ntp org NTP Server3 The third NTP server to sync in case the first and second do not respond Default is 2 us pool ntp org Configure date and time manually Select this if you would like to set the ...

Page 69: ...ser along with the default guest admin can be assigned to a group upon which common parental control and content sharing policies can be applied Custom users are not able to access the web management interface Name Unique identifier for this user Group Membership Group to which the user belongs Description Description of the user Click Add to add a user account or select a user and click Edit to m...

Page 70: ...er the device reboots the Login page will be displayed Revert to factory reset configuration Select revert to factory reset configuration and click Apply The DWR 966 will restore all configuration settings to the original factory default settings Note Restoring factory default settings will erase all of your existing settings ...

Page 71: ...esolved This section helps you to upgrade your firmware to the latest version available online Select to upgrade the firmware for the DWR 966 system or the LTE module 1 Click Browse to locate the firmware file from the directory on the local host 2 Click Router Upgrade Module Upgrade to begin the firmware upgrade ...

Page 72: ... IMPORTANT When Remote Management is enabled the security appliance is accessible to anyone who knows its IP address Since a malicious WAN user can reconfigure the DWR 966 and misuse it in many ways it is HIGHLY RECOMMENDED that you change the admin and guest passwords before continuing Permission for Remote Management can be given to the following Enable Remote Management Check the box to enable ...

Page 73: ...u will have to specify your PC IP address IP Address IP address of the PC given remote management permissions Click Apply to apply the changes or click Reset to undo your configurations Multiple IP Ranges Configuration Start IP Address Displays the starting IP address for the allowed range End IP Address Displays the ending IP address for the allowed range Click Add to add an IP address or select ...

Page 74: ...leshooting and network analysis by the home network administrator The logging features for various sections can be enabled for desired features such as Internet WiFi Firewall Applications and LAN to analyze the actions performed in these sections of the DWR 966 1 Check the Enable Logging box to enable log collection on the DWR 966 ...

Page 75: ...are displayed in this section Click Refresh Log to view the most up to date log information or click Clear Log to erase all of the log information Download Tar Log Files Select a tar log file and then click Download to download the selected file to your computer Remote Logging You can write and maintain the log data to a remote computer using the remote logging function Enable this function and en...

Page 76: ... The web pages for the first login will also be displayed when users replace a SIM card or reset the DWR 966 to its factory default settings Please follow the steps below to complete the first login 1 Enter the PIN code of your SIM card for verification 2 After the PIN code is successfully verified you can choose to change your PIN code Continue to the next page after establishing your settings ...

Page 77: ... SSID and its password The network name is used for other wireless devices to connect to the DWR 966 which will be displayed when the wireless network is searching for available wireless networks 4 Specify the password for accessing the user configuration interface ...

Page 78: ...77 5 The last page displays the settings you have made Complete the process after your confirmation ...

Page 79: ...n the Windows Start menu click Control Panel 2 Double click Network Connections if required switch to Classic View first 3 Right click Local Area Connection and then click Properties 4 The Local Area Connection Properties window will appear 5 From the This connection uses the following items list select Internet Protocol TCP IP and then click Properties The Internet Protocol TCP IP window will app...

Page 80: ... select Use the following IP address ensure that your IP address is from 192 168 1 100 to 192 168 1 230 The subnet mask is 255 255 255 0 Note We recommend you set the DNS address of the computer as the IP address of the DHCP server which is DWR 966 s LAN IP address 8 Click OK OK to apply this IP address setting ...

Reviews: