D-link DI-707 User Manual
D-Link
Express EtherNetwork
Broadband Router
DI-707P
Manual
TM
Building Networks for People
Content s
Package Contents ................................................................................3
Introduction............................................................................................4
Getting Started....................................................................................10
Using the Configuration Menu..............................................................11
Installing the Print Server Software ......................................................43
Networking Basics ..............................................................................47
Reset to Factory Default Settings ........................................................75
T echnical S pecifications ......................................................................76
Frequently Asked Questions ................................................................77
Contacting T echnical Support ............................................................105
Warranty............................................................................................106
Registration ......................................................................................109
2
Package Contents
Contents of Package:
D-Link DI-707P Express EtherNetwork Broadband Router
Power Adapter – 5V AC
Ethernet (CA T5-UTP/Straight-Through) Cable
Manual on CD
Quick Installation Guide
TM
Note: Using a power supply with a different voltage rating than the one included with the
DI-707P will cause damage and void the warranty for this product.
If any of the above items are missing, please contact your reseller.
System Requirements For Configuration:
Computer with Windows, Macintosh, or Linux-based
operating system with an installed Ethernet adapter
Internet Explorer version 6x or Netscape Navigator
version 6x and above, with JavaScript enabled
3
Introduction
The D-Link DI-707P Broadband Router includes 7 ports and a printer port. It
provides a complete solution for Internet surfing and office resources sharing.
It is an ideal way to extend the reach and number of computers connected to
your network.
After completing the steps outlined in the Quick Installation Guide (included in
your package), you will have the ability to share information and resources, as
well as share a printer on your network.
The DI-707P is compatible with most popular operating systems, including
Macintosh, Linux, and Windows, and can be integrated into a large network.
4
Connections
All LAN ports auto-sense cable
types to accomodate straightthrough or cross-over cable.
WAN port is the
connection for the
Ethernet cable to the
Cable or DSL modem
Pressing the
Reset Button
restores the
router to its
original factory
default settings.
Printer Port. Most printers will work with
this bi-directional printer port. If you
experience difficulties with a multifunctional printer, please confirm that your
printer is compatible with a bi-directional
port.
Features & Benefits
Broadband modem and IP sharing
Connects multiple computers to a broadband (cable or DSL) modem to surf the
Internet.
Auto-sensing Ethernet Switch
Equipped with a 7-port auto-sensing Ethernet switch.
VPN Pass-Through supported
Supports pass-through PPTP sessions and allows you to setup a VPN server
and VPN clients.
Printer sharing (Optional)
Embeds a print server to allow all of the networked computers to share one
printer.
Firewall
All unwanted packets from outside intruders are blocked to protect your
network.
LAN ports provide
connections to Ethernetenabled devices.
Receptor
for the
Power
Adapter
DHCP server supported
All of the networked computers can retrieve TCP/IP settings automatically from
the DI-707P .
Web-based configuration
Configurable through any networked computer’s web browser using Netscape or
Internet Explorer.
5
Features & Benefits continued
Access Control supported
Allows you to assign different access rights for different users.
Packet filter supported
Packet Filter allows you to control access to a network by analyzing the
incoming and outgoing packets and letting them pass or halting them based on
the IP address of the source and destination.
Virtual Server supported
Enables you to expose WWW, FTP, and other services on your LAN to be
accessible to Internet users.
User-Definable Application Sensing Tunnel
User can define the attributes to support special applications requiring multiple
connections, such as Internet gaming, video conferencing, Internet telephony
and so on. The DI-707P can sense the application type and open a multi-port
tunnel for it.
DMZ Host supported
Allows a networked computer to be fully exposed to the Internet; this function is
used when the special “application-sensing tunnel feature” is insufficient to allow an application to function correctly .
Introduction to Broadband
Router Technology
A router is a device that forwards data packets from a source to a destination. Routers
forward data packets using IP addresses and not a MAC address. A router will forward
data from the Internet to a particular computer on your LAN.
The information that makes up the Internet gets moved around using routers. When you
click on a link on a web page, you send a request to a server to show you the next page.
The information that is sent and received from your computer is moved from your computer to the server using routers. A router also determines the best route that your information should follow to ensure that the information is delivered properly .
A router controls the amount of data that is sent through your network by eliminating
information that should not be there. This provides security for the computers connected
to your router, because computers from the out side cannot access or send information
directly to any computer on your network. The router determines which computer the
information should be forwarded to and sends it. If the information is not intended for any
computer on your network, the data is discarded. This keeps any unwanted or harmful
information from accessing or damaging your network.
6
Introduction to Firewalls
A firewall is a device that sits between your computer and the Internet that prevents
unauthorized access to or from your network. A firewall can be a computer using firewall
software or a special piece of hardware built specifically to act as a firewall. In most
circumstances, a firewall is used to prevent unauthorized Internet users from accessing
private networks or corporate LANs and Intranets.
A firewall watches all of the information moving to and from your network and analyzes
each piece of data. Each piece of data is checked against a set of criteria that the
administrator configures. If any data does not meet the criteria, the data is blocked and
discarded. If the data meets the criteria, the data is passed through. This method is
called packet filtering.
A firewall can also run specific security functions based on the type of application or type
of port that is being used. For example, a firewall can be configured to work with an FTP
or T elnet server . Or a firewall can be configured to work with specific UDP or TCP ports to
allow certain applications or games to work properly over the Internet.
Introduction to Local Area Networking
Local Area Networking (LAN) is the term used when connecting several computers together over a small area such as a building or group of buildings. LANs can be connected
over large areas. A collection of LANs connected over a large area is called a Wide Area
Network (WAN).
A LAN consist s of multiple computers connected to each other . There are many types of
media that can connect computers together. The most common media is a CAT5 cable
(UTP or STP twisted pair wire). On the other hand, wireless networks do not use wires;
instead they communicate over radio waves. Each computer must have a Network Interface Card (NIC), which communicates the data between computers. A NIC is usually a
10Mbps network card, a 10/100Mbps network card, or a wireless network card.
Most networks use hardware devices such as hubs or switches that each cable can be
connected to in order to continue the connection between computers. A hub simply takes
any data arriving through each port and forwards the data to all other ports. A switch is
more sophisticated, in that it can determine the destination port for a specific piece of
data. A switch minimizes network traffic overhead and speeds up the communication
over a network.
Networks take some time to plan and implement correctly. There are many ways to
configure your network. Y ou may want to take some time to determine the best network
set-up for your needs.
7
Introduction to Virtual Private Networking
Virtual Private Networking (VPN) uses a publicly wired network (the Internet) to securely
connect two different networks as if they were the same network. For example, an employee can access the corporate network from home using VPN, allowing the employee
to access files and printers. Here are several different implementations of VPN that can
be used.
Point-to-Point Tunneling Protocol (PPTP)
PPTP uses proprietary means of connecting two private networks over the Internet. PPTP
is a way of securing the information that is communicated between networks. PPTP
secures information by encrypting the data inside of a packet.
IP Security (IPSec)
IPSec provides a more secure network-to-network connection across the Internet or a
Wide Area Network (WAN). IPSec encrypts all communication between the client and
the server whereas PPTP only encrypts the data packets.
Both of these VPN implementations are used because there is not a standard for VPN
server software. Because of this, each ISP or business can implement its own VPN
network making interoperability a challenge.
8
LEDS
LED stands for Light-Emitting Diode. The DI-707P has the following LEDs
as described below:
LED
Power
M1 LED
M2 LED
WAN
LAN
LOCAL
NETWORK
(Ports 1-7)
LED Activity
A steady light indicates
a connection to a power source. power source
Flashes once per second to indicate an
active system.
Lights up when the device has an Internet
connection.
A solid light indicates connection on the
WAN port. This LED blinks during data
transmission.
This LED blinks during data transmission.
A solid light indicates a connection to an
Ethernet-enabled computer on ports 1-7. This
LED blinks during data transmission.
9
Getting Started
With its default settings, the DI-707P, when activated, will connect with
other D-Link Express EtherNetwork products, right out of the box.
11
1
11
Please refer to the following
sections of this manual for
additional information about
setting up a network:
Networking Basics - learn
how to check and assign your
IP Address; share printers and
files.
Using the Configuration
Menu - learn the settings for
the DI-707P, using the webbased interface.
For a typical network setup at home (as shown above), please do the
following:
Y ou will need broadband Internet access (a Cable or DSL subscription line into
your home or office).
Consult with your Cable or DSL provider for proper installation of the modem.
Connect the Cable or DSL modem to the DI-707P wireless broadband router
(see the Quick Installation Guide included with the DI-707P).
22
2
22
44
4
44
33
3
33
66
6
66
55
5
55
If you are connecting a desktop computer to your network, you can install the
D-Link DFE-530TX+ ethernet adapter into an available PCI slot. (See the
Quick Installation Guide included with the DWL-530TX+.)
If you are connecting a laptop computer to your network, install the drivers for
the Ethernet Cardbus adapter (e.g., D-Link DFE-690TXD) into a laptop
computer.(See the Quick Installation Guide included with the DFE-690TXD.)
Connect your printer to the printer port on the DI-707P . Please refer to the
quick installation guide for loading the print server software.
10
Using the Configuration Menu
Whenever you want to configure your network or the DI-707P , you can access the
Configuration Menu by opening the web-browser and typing in the IP Address of the
DI-707P . The DI-707P default IP Address is shown below:
Open the web browser
Type in the IP Address of
the DI-707P
Note: if you have changed the default IP Address assigned to the DI-707P, make sure to
enter the correct IP Address.
The factory default User name is admin and the default
Password is blank (empty). It is recommended that you
change the admin password for security purposes. Please
refer to Tools>Admin to change the admin password.
Home > Wizard
The Home>Wizard screen will
appear. Please refer to the
Quick Installation Guide for
more information regarding the
Setup Wizard.
http://192.168.0.1
Apply
Cancel
Help
Clicking Apply will save changes made to the page.
Clicking Cancel will clear changes made to the page.
Clicking Help will bring up helpful information regarding the page.
Clicking Restart will restart the router. (Necessary for some changes.)
11
Using the Configuration Menu
Home > WAN
Choose WAN Type
WAN stands for Wide Area Network. In this case WAN represents the mode in which
you connect to the Internet. If you are uncertain, please ask your ISP which of the
following represents your connection mode to the Internet:
Dynamic
IP Address-
Static IP Address-
PPP over
Ethernet-
Others-
PPTPBig Pond Cable-
Obtain an IP address from your ISP automatically (mainly for
Cable users).
Your ISP assigns you a Static IP Address.
Some ISPs require the use of PPPoE to connect to their
services (mainly for DSL users).
For use in Europe only .
For use in Australia only.
12
Using the Configuration Menu
Home > W AN > Dynamic IP Address
Most Cable modem users will select this option to obtain an IP
from their ISP (Internet Service Provider).
Host Name-
MAC Address-
This is optional, but may be required by some ISPs. The host
name is the device name of the Router.
The default MAC Address is set to the WAN’s physical interface
MAC address on the Router.
Clone
MAC Address-
This feature will copy the MAC address of the Ethernet card, and
replace the WAN MAC address of the Router with this Ethernet
card MAC address. It is not recommended that you change the
default MAC address unless required by your ISP .
Primary DNS
Address-
Input the primary DNS address provided by your ISP
Secondary DNS
Address-
MTU-
Auto-reconnect -
(Optional) Input the Secondary DNS address provided by your ISP .
Maximum Transmission Unit; default is 1500; you may need to
change the MTU to conform to your ISP.
If enabled, the Broadband Router will automatically connect to
your ISP after your system is restarted or if the connection is
dropped.
Address automatically
13
Using the Configuration Menu
Home > WAN > S t atic IP Address
If you use a St atic IP Address, you will input information here that your ISP has provided
to you.
IP Address-
Subnet Mask-
ISP Gateway-
Input the IP Address provided by your ISP.
Input the Subnet Mask provided by your ISP .
Input the Gateway address provided by your ISP .
Primary DNS
Address-
Secondary DNS
Address-
MTU-
Input the primary DNS address provided by your ISP .
(Optional) Input the Secondary DNS address provided by your
ISP.
Maximum T ransmission Unit; default is 1500; you may need to
change the MTU to conform to your ISP.
14
Using the Configuration Menu
Home > WAN > PPPoE
Most DSL users will select this option to obtain an IP address automatically from their
ISP through the use of PPPoE.
User Name-
Y our PPPoE username provided by your ISP
PasswordService Name-
IP Address-
Primary DNS
Address-
Maximum
Idle Time-
MTU-
Auto-reconnect -
Y our PPPoE password is provided by your ISP
(Optional) Check with your ISP for more information if they
require the use of service name.
(Optional) Enter in the IP Address if you are assigned a static
PPPoE address.
Y ou will get the DNS IP automatically from your ISP but you
may enter a specific DNS address that you want to use instead.
(Optional) Input the secondary DNS address
Enter a maximum idle time during which Internet connection is
maintained during inactivity . T o disable this feature, enable Auto-
reconnect.
Maximum T ransmission Unit; default is 1492; you may need to
change the MTU to conform to your ISP .
If enabled, the Broadband Router will automatically connect to
your ISP after your system is restarted or if the connection is
dropped.
15
Using the Configuration Menu
Home > WAN > PPTP
Point-to-Point Tunneling Protocol (PPTP) is a WAN connection used in Europe.
My IP Address-
My Subnet MaskServer IP Address-
PPTP Account-
PPTP Password-
Connection IDMaximum
Idle Time-
Auto-reconnect -
Enter the IP Address.
Enter the Subnet Mask.
Enter the Server IP Address.
Enter the PPTP account name.
Enter the PPTP password.
(Optional) Enter the connection ID if required by your ISP .
Enter a maximum idle time during which Internet connection is
maintained during inactivity . T o disable this feature, enable Auto-
reconnect.
If enabled, the Broadband Router will automatically connect to
your ISP after your system is restarted or if the connection is
dropped.
16
Using the Configuration Menu
Home > WAN > BigPond Cable
Dynamic IP Address for BigPond is a W AN connection used in Australia.
User Name-
Password-
Login Server-
Auto-reconnect -
Enter in the username for the BigPond account.
Enter the password for the BigPond account.
(Optional) Enter the Login Server name if required.
If enabled, the Broadband Router will automatically connect to
your ISP after your system is restarted or if the connection is
dropped.
17
Using the Configuration Menu
Home > LAN
LAN is short for Local
Area Network. This is
considered your internal network. These
are the IP settings of
the LAN interface for
the DI-707P. These
settings may be referred to as Private
settings. You may
change the LAN IP
address if needed.
The LAN IP address
is private to your internal network and cannot be seen on the
Internet.
DHCP stands for Dynamic Host Control Protocol. The DI-707P has a built-in DHCP
server. The DHCP Server will automatically assign an IP address to the computers on
the LAN/private network. Be sure to set your computers to be DHCP clients by setting
their TCP/IP settings to “Obtain an IP Address Automatically.” When you turn your
computers on, they will automatically load the proper TCP/IP settings provided by the
DI-707P. The DHCP Server will automatically allocate an unused IP address from the IP
address pool to the requesting computer. You must specify the starting and ending
address of the IP address pool.
IP Address-
Subnet Mask-
Domain Name-
The IP address of the LAN interface.
The default IP address is: 192.168.0.1.
The subnet mask of the LAN interface.
The default subnet mask is 255.255.255.0.
(Optional) The name of your local domain.
18
Using the Configuration Menu
Home > DHCP
DHCP stands for Dynamic Host Control Protocol. The DI-707P has a built-in DHCP
server. The DHCP Server will automatically assign an IP address to the computers on
the LAN/private network. Be sure to set your computers to be DHCP clients by setting
their TCP/IP settings to “Obtain an IP Address Automatically.” When you turn your
computers on, they will automatically load the proper TCP/IP settings provided by the
DI-707P . The DHCP Server will automatically allocate an unused IP address from the
IP address pool to the requesting computer . You must specify the starting and ending
address of the IP address pool.
19
Using the Configuration Menu
Advanced > Virtual Server
The DI-707P can be configured as a virtual server so that remote users accessing Web
or FTP services via the public IP address can be automatically redirected to local servers
in the LAN (Local Area Network).
The DI-707P firewall feature filters out unrecognized packets to protect your LAN network
so all computers networked with the DI-707P are invisible to the outside world. If you
wish, you can make some of the LAN computers accessible from the Internet by enabling
Virtual Server. Depending on the requested service, the DI-707P redirects the external
service request to the appropriate server within the LAN network.
Enable-
Select to activate the policy .
Name- Y ou can name the Virtual Server .
Private IP- The IP address of the internal computer that will be using the
virtual service.
Protocol Type- Select the protocol the Virtual Server will use.
Private/ Public
Ports-
Enter in the private and public port or ports to be used. A range
of ports can be specified with a hyphen. (e.g., 20-21)
Schedule- Select Always, or choose From and enter the time period dur-
ing which the virtual service will be available.
20
Using the Configuration Menu
Advanced > Application
Some applications require multiple connections, such as Internet gaming, video
conferencing, and Internet telephony . These applications have difficulties working through
NAT (Network Address Translation). Special Applications makes some of these
applications work with the DI-707P. If you need to run applications that require multiple
connections, specify the port normally associated with an application in the Trigger
field, then enter the public ports associated with the trigger port into the Incoming
Ports field.
At the bottom of the screen, there are already defined special applications. T o use them,
select one from the drop down list and select an ID number you want to use. Then click
the “Copy to” button and the router will fill in the appropriate information to the list. Y ou
will then need to enable the service. If the mechanism of Special Applications fails to
make an application work, try using DMZ host instead.
Note! Only one PC can use each Special Application tunnel.
EnableName-
Trigger PortTrigger Type-
Public Ports-
Public Type-
Select to activate the policy .
Y ou can name the defined special applications.
This is the port used to trigger the application. It can be either
a single port or a range of ports.
Select the trigger protocol you would like to initiate. To chage
the selection, use the drop down arrow and other choices will
be listed.
This is the port number on the WAN side that will be used to
access the application. Y ou may define a single port or a range
of ports. You can use a comma to add multiple ports or port
ranges.
Select the public type the special application will use.
21
Using the Configuration Menu
Advanced > IP Filter
Use IP (Internet Protocol) filters to allow or deny computers access to the Internet based
on their IP address.
Disabled IP FilterEnabled or Disabled- Click Enabled to apply the filter policy or click Disabled to
IP Address- Enter the IP address range of the computers that you want the
Port Range-
Protocol-
Schedule-
Select this option if you do not want to use IP filters.
enter an inactive filter policy. (You can reactivate the policy
later.)
policy to apply to. If it is only a single computer that you want
the policy applied to, then enter the IP address of the computer
in the Start Source IP and leave the End Source IP blank.
Enter in the port range of the TCP/UDP ports that you want the
policy to apply to. If it is only a single port that you want the
policy applied to, then enter the port number in the Start Port
field and leave the End Port field blank. If you want to use all the
ports, you can leave the port range empty .
Select the protocol the IP filter will use.
Select Always, or choose From and enter the time period dur-
ing which the IP filter policy will be in effect.
22
Using the Configuration Menu
Advanced > MAC Filters
MAC (Media Access Control) Filters are used to deny or allow LAN (Local Area Network)
computers from accessing the Internet and network by their MAC address.
At the bottom of the screen, there is a list of MAC addresses from the DHCP client
computers connected to the DI-707P. To use them, select one from the drop down list
and select an IP number you want to use. Then click the “Copy to” button and the
DI-707P will fill in the appropriate information in the list.
Disabled MAC Filter- Select this option if you do not want to use MAC filters.
Only allow computers with MAC address listed below to access the network-
Select this option to only allow computers that are in the list
to access the network and Internet. All other computers will
be denied access to the network and Internet.
Only deny computers with MAC address listed below to access the network-
Select this option to only deny computers that are in the list
to access the network and Internet. All other computers will
be allowed access to the network and Internet.
Name- Enter a name to create a profile for the associated
computer(s) on the network.
MAC AddressEnable-
Disabled MAC Filter-
Enter the MAC Address of the client that will be filtered.
Select this option for the specific IP filter policy to take effect.
Select from the DHCP Client list and click the Clone button to
automatically clone that computer’s MAC address to the MAC
address field.
23
Using the Configuration Menu
Advanced > URL Blocking
Use URL Blocking to deny LAN computers from accessing specific web sites by its
URL. A URL is a specially formatted text string that defines a location on the Internet.
If any part of the URL contains the blocked word, the site will not be accessible and
the web page will not display .
Disabled URL Blocking-
Select this option if you do not want to use URL Blocking.
24
Using the Configuration Menu
Advanced > Domain Filter
Use Domain filters to allow or deny computers access to specific Internet domains
whether it is through www, ftp, snmp, etc. Domain filters apply to both wired computers
connected to one of the four Ethernet LAN ports and to wireless clients connected
wirelessly to the DI-707P .
Disabled Domain Filter- Select this option if you do not want to use Domain filters.
Allow users to access the following domains and block all other domains-
Select this option to allow users to access the specified
Internet domains listed below. Users will be denied access
to all other Internet domains.
Deny users to access the following domains and permit all other domains-
Select this option to deny users access to the specified
Internet domains listed below. Users will be allowed access
to all other Internet domains.
Permitted/Blocked Domains-
This is a list of domain suffixes of the Internet domain you
want to permit or block. (Example: shopping.com,
sports.net.)
25
Using the Configuration Menu
Advanced > Firewall
Firewall Rules is an advance feature used to deny or allow traffic from passing through
the device. It works in the same way as IP Filters with additional settings. You can
create more detailed rules for the device.
Enabled or Disabled-
Click Enabled to apply the filter policy or click Disabled to enter an inactive filter policy
(Y ou can reactivate the policy later).
Name-
Enter the name of the Firewall Rule.
Action-
Select Allow or Deny to allow or deny traf fic to pass through the DI-804HV .
Interface Source -
Choose between a LAN or WAN source. An asterisk signifies the selection of both
sources.
Interface Destination-
Choose between a LAN or WAN destination. An asterisk signifies the selection of both
destinations.
IP Start-
The starting IP address for the filter policy . Leaving the field blank selects all IPs.
IP End-
The ending IP address for the filter policy . Leaving the field blank sleects all IPs.
26
Using the Configuration Menu
Advanced > Firewall Continued
Protocol-
Select one of the following protocols: TCP, UDP, or ICMP.
Port Range-
Enter in the port range of the TCP/UDP ports that you want the policy to apply to. If it is
only a single port that you want the policy applied to, then enter the port number in the
St art Port field and leave the End Port field blank. If you want to use all the ports, you
can leave the port range empty .
Schedule-
Select Always, or choose From and enter the time period during which the virtual ser-
vice will be available
27
Using the Configuration Menu
Advanced > SNMP
SNMP (Simple Network Management Protocol) is a widely used network monitoring and
control protocol that reports activity on each network device to the administrator of the
network. SNMP can be used to monitor traffic and statistics of the DI-707P. The DI707P supports SNMP v1.
Enable SNMP-
Local-
Remote-
Get Community-
Set Community-
(Simple Netwokkr Management Protocol)
LAN (Local Area Network)
WAN (Wide Area Network)
Enter the password public in this field to allow “Read only” access to the network administration using SNMP. You can view
the network, but no configuration is possible with this setting.
Enter the password private in this field to gain “Read and Write”
access to the network using SNMP software. The administrator
can configure the network with this setting.
28
Using the Configuration Menu
Advanced > DDNS
DDNS (Dynamic Domain Name System) keeps dynamic IP addresses (e.g., IP addresses assigned by a DHCP capable router or server) linked to a domain name. Users
who have a Dynamic DNS account may use this feature on the DI-707P.
DDNS-
Provider-
Host Name-
Username/Email-
Password/Key-
When an IP address is automatically assigned by a DHCP server ,
DDNS automatically updates the DNS server. Select Disabled
or Enabled.
Select from the pull-down menu.
Enter the Host name.
Enter the username/email address.
Enter the password/key .
29
Using the Configuration Menu
Advanced > Routing
Static routes can be added if you require specific routes within your internal network.
These routes will not apply to the WAN (Internet) network.
Destination- Enter in the IP of the specified network that you want to
access using the static route.
Subnet Mask- Enter in the subnet mask to be used for the specified net
work.
Gateway- Enter in the gateway IP address to the specified network.
Hop- Enter in the amount of hops it will take to the specified
network.
Enable- Select this option for the specified static route to take effect.
Hop Count - In a transmission path, each link is terminated at a network device
such as a router or gateway . The number of hops equals the number of routers or
gateways that data must pass through before reaching the destination.
30
Loading...