D-Link DI-707P User Manual

D-Link
Express Ethernetwork
Broadband Router
DI-707P
Manual
TM
Building Networks for People
Contents
Package Contents ................................................................................3
Introduction............................................................................................4
Getting Started ....................................................................................10
Using the Configuration Menu.............................................................. 11
Installing the Print Server Software ......................................................36
Networking Basics ..............................................................................40
Reset to Factory Default Settings ........................................................68
Technical Specifications ......................................................................69
Contacting Technical Support ..............................................................70
Warranty and Registration ................................................................... 71
2

Package Contents

Contents of Package:
D-Link DI-707P Express Ethernetwork Broadband Router
Power Adapter – 5V DC
Ethernet (CAT5-UTP/Straight-Through) Cable
Manual on CD
Quick Installation Guide
TM
Note: Using a power supply with a different voltage rating than the one included with the DI-707P will cause damage and void the warranty for this product.
If any of the above items are missing, please contact your reseller.
System Requirements For Configuration:
Ethernet-Based Cable or DSL Modem
Computer with Windows, Macintosh, or Linux-based
operating system with an installed Ethernet adapter
Internet Explorer version 6x or Netscape Navigator
version 6x and above, with JavaScript enabled
3

Introduction

The D-Link DI-707P Broadband Router includes 7 ports and a printer port. It provides a complete solution for Internet surfing and office resources sharing. It is an ideal way to extend the reach and number of computers connected to your network.
After completing the steps outlined in the Quick Installation Guide (included in your package) you will have the ability to share information and resources, as well as share a printer on your network.
The DI-707P is compatible with most popular operating systems, including Macintosh, Linux and Windows, and can be integrated into a large network.
4

Connections

Pressing the
Reset Button
restores the router to its original factory default settings.
All LAN ports auto-sense cable types to accomodate straight­through or cross-over cable.
WAN port is the connection for the Ethernet cable to the Cable or DSL modem
Receptor for the
Power Adapter
Printer Port. Most printers will work with
this bi-directional printer port. If you experience difficulties with a multi­functional printer, please confirm that your printer is compatible with a bi-directional port.
Features & Benefits
Broadband modem and IP sharing
Connects multiple computers to a broadband (cable or DSL) modem to surf the Internet
Auto-sensing Ethernet Switch
Equipped with a 7-port auto-sensing Ethernet switch
VPN Pass-Through supported
Supports pass-through PPTP sessions and allows you to setup VPN server and VPN clients
Printer sharing (Optional)
Embeds a print server to allow all of the networked computers to share one printer
Firewall
All unwanted packets from outside intruders are blocked to protect your network
LAN ports provide connections to Ethernet­enabled devices.
DHCP server supported
All of the networked computers can retrieve TCP/IP settings automatically from the DI-707P
Web-based configuration
Configurable through any networked computer’s web browser using Netscape or Internet Explorer
5
Features & Benefits continued
Access Control supported
Allows you to assign different access rights for different users
Packet filter supported
Packet Filter allows you to control access to a network by analyzing the incoming and outgoing packets and letting them pass or halting them based on the IP address of the source and destination.
Virtual Server supported
Enables you to expose WWW, FTP and other services on your LAN to be accessible to Internet users.
User-Definable Application Sensing Tunnel
User can define the attributes to support special applications requiring multiple connections, like Internet gaming, video conferencing, Internet telephony and so on. The DI-707P can sense the application type and open a multi-port tunnel for it.
DMZ Host supported
Allows a networked computer to be fully exposed to the Internet; this function is used when the special “application-sensing tunnel feature” is insufficient to allow an application to function correctly
Introduction to Broadband Router Technology
A router is a device that forwards data packets from a source to a destination. Routers forward data packets using IP addresses and not a MAC address. A router will forward data from the Internet to a particular computer on your LAN.
The information that makes up the Internet gets moved around using routers. When you click on a link on a web page, you send a request to a server to show you the next page. The information that is sent and received from your computer is moved from your computer to the server using routers. A router also determines the best route that your information should follow to ensure that the information is delivered properly.
A router controls the amount of data that is sent through your network by eliminating information that should not be there. This provides security for the computers con­nected to your router, because computers from the outside cannot access or send information directly to any computer on your network. The router determines which computer the information should be forwarded to and sends it. If the information is not intended for any computer on your network, the data is discarded. This keeps any unwanted or harmful information from accessing or damaging your network.
6
Introduction to Firewalls
A firewall is a device that sits between your computer and the Internet that prevents unauthorized access to or from your network. A firewall can be a computer using firewall software or a special piece of hardware built specifically to act as a firewall. In most circumstances, a firewall is used to prevent unauthorized Internet users from accessing private networks or corporate LAN's and Intranets.
A firewall watches all of the information moving to and from your network and analyzes each piece of data. Each piece of data is checked against a set of criteria that the administrator configures. If any data does not meet the criteria, that data is blocked and discarded. If the data meets the criteria, the data is passed through. This method is called packet filtering.
A firewall can also run specific security functions based on the type of application or type of port that is being used. For example, a firewall can be configured to work with an FTP or Telnet server. Or a firewall can be configured to work with specific UDP or TCP ports to allow certain applications or games to work properly over the Internet.
Introduction to Local Area Networking
Local Area Networking (LAN) is the term used when connecting several computers together over a small area such as a building or group of buildings. LAN's can be connected over large areas. A collection of LAN's connected over a large area is called a Wide Area Network (WAN).
A LAN consists of multiple computers connected to each other. There are many types of media that can connect computers together. The most common media is CAT5 cable (UTP or STP twisted pair wire.) On the other hand, wireless networks do not use wires; instead they communicate over radio waves. Each computer must have a Network Interface Card (NIC), which communicates the data between computers. A NIC is usually a 10Mbps network card, or 10/100Mbps network card, or a wireless network card.
Most networks use hardware devices such as hubs or switches that each cable can be connected to in order to continue the connection between computers. A hub simply takes any data arriving through each port and forwards the data to all other ports. A switch is more sophisticated, in that a switch can determine the destination port for a specific piece of data. A switch minimizes network traffic overhead and speeds up the communication over a network.
Networks take some time in order to plan and implement correctly. There are many ways to configure your network. You may want to take some time to determine the best network set-up for your needs.
7
Introduction to Virtual Private Networking
Virtual Private Networking (VPN) uses a publicly wired network (the Internet) to se­curely connect two different networks as if they were the same network. For example, an employee can access the corporate network from home using VPN, allowing the employee to access files and printers. Here are several different implementations of VPN that can be used.
Point-to-Point Tunneling Protocol (PPTP)
PPTP uses proprietary means of connecting two private networks over the Internet. PPTP is a way of securing the information that is communicated between networks. PPTP secures information by encrypting the data inside of a packet.
IP Security (IPSec)
IPSec provides a more secure network-to-network connection across the Internet or a Wide Area Network (WAN). IPSec encrypts all communication between the client and server whereas PPTP only encrypts the data packets.
Both of these VPN implementations are used because there is not a standard for VPN server software. Because of this, each ISP or business can implement its own VPN network making interoperability a challenge.
8

LEDS

LED stands for Light-Emitting Diode. The DI-707P has the following LEDs
as described below:
LED
Power
M1 LED
M2 LED
WAN
LAN
LOCAL NETWORK (Ports 1-7)
LED Activity
A steady light indicates a connection to a power sourcea power source
Flashes once per second to indicate an active system
Lights up when the device has an Internet connection
A solid light indicates connection on the WAN port. This LED blinks during data transmission
This LED blinks during data transmission
A solid light indicates a connection to an Ethernet-enabled computer on ports 1-7. This LED blinks during data transmission
9

Getting Started

With its default settings, the DI-707P, when activated, will connect with other D-Link Express Ethernetwork products, right out of the box.
1
Please refer to the following sections of this manual for additional information about setting up a network:
Networking Basics - learn how to check and assign your IP Address; share printers and files.
Using the Configuration Menu - learn the settings for
the DI-707P, using the web­based interface.
For a typical network setup at home (as shown above), please do the following:
You will need broadband Internet access (a Cable or DSL subscription line into your home or office)
Consult with your Cable or DSL provider for proper installation of the modem
Connect the Cable or DSL modem to the DI-707P wireless broadband router (see the Quick Installation Guide included with the DI-707P.)
2
4
3
6
5
If you are connecting a desktop computer to your network, you can install the D-Link DFE-530TX+ ethernet adapter into an available PCI slot. (See the Quick Installation Guide included with the DWL-530TX+.)
If you are connecting a laptop computer to your network, install the drivers for the Ethernet Cardbus adapter (e.g., D-Link DFE-690TXD) into a laptop computer.(See the Quick Installation Guide included with the DFE-690TXD.)
Connect your printer to the printer port on the DI-707P. Please refer to the quick installation guide for loading the print server software.
10

Using the Configuration Menu

Whenever you want to configure your network or the DI-707P, you can access the Configuration Menu by opening the web-browser and typing in the IP Address of the
DI-707P. The DI-707P default IP Address is shown below:
Open the web browser Type in the IP Address of
the DI-707P
Note: if you have changed the default IP Address assigned to the DI-707P, make sure to enter the correct IP Address.
The factory default User name is admin and the default Password is blank (empty). It is recommended that you
change the admin password for security purposes. Please refer to Tools>Admin to change the admin password.
Home > Wizard
The Home>Wizard screen will appear. Please refer to the Quick Installation Guide for more information regarding the Setup Wizard.
http://192.168.0.1
Apply
Cancel
Help
Restart
Clicking Apply will save changes made to the page
Clicking Cancel will clear changes made to the page
Clicking Help will bring up helpful information regarding the page
Clicking Restart will restart the router. (Necessary for some changes.)
11
Using the Configuration Menu
Home > WAN
Choose WAN Type
WAN stands for Wide Area Network. In this case WAN represents the mode in which
you connect to the Internet. If you are uncertain, please ask your ISP which of the following represents your connection mode to the Internet:
Dynamic IP Address-
Static IP Address-
PPP over Ethernet-
Others-
PPTP-
Big Pond Cable-
Obtain an IP address from your ISP automatically (mainly for Cable users)
Your ISP assigns you a Static IP Address
Some ISPs require the use of PPPoE to connect to their services (mainly for DSL users)
For use in Europe only
For use in Australia only
12
Using the Configuration Menu
Home > WAN > Dynamic IP Address
Most Cable modem users will select this option to obtain an IP from their ISP (Internet Service Provider).
Host Name-
Renew IP Forever-
MAC Address-
Clone MAC Address-
This is optional, but may be required by some ISPs. The host name is the device name of the Router.
Enable this feature to allow the router to automatically recon­nect to the ISP if the connection drops.
The default MAC Address is set to the WAN’s physical inter­face MAC address on the Router.
This feature will copy the MAC address of the Ethernet card, and replace the WAN MAC address of the Router with this Ethernet card MAC address. It is not recommended that you change the default MAC address unless required by your ISP.
Address automatically
13
Using the Configuration Menu
Home > WAN > Static IP Address
If you use a Static IP Address, you will input information here that your ISP has provided to you.
WAN IP Address-
WAN Subnet Mask-
WAN Gateway-
Primary DNS-
Secondary DNS-
Input the IP Address provided by your ISP
Input the Subnet Mask provided by your ISP
Input the Gateway address provided by your ISP
Input the primary DNS address provided by your ISP
(Optional) Input the Secondary DNS address provided by your ISP.
14
Using the Configuration Menu
Home > WAN > PPPoE
Most DSL users will select this option to obtain an IP address automatically from their ISP through the use of PPPoE.
PPPoE Account-
PPPoE Password-
Primary DNS-
Secondary DNS-
Maximum Idle Time-
PPPoE Service Name-
Assigned IP Address-
MTU-
Your PPPoE username is provided by your ISP
Your PPPoE password is provided by your ISP
You will get the DNS IP automatically from your ISP but you may enter a specific DNS address that you want to use instead.
(Optional) Input the secondary DNS address
Enter a maximum idle time during which Internet connection is maintained during inactivity. To disable this feature, enable Auto- reconnect.
(Optional) Check with your ISP for more information if they require the use of service name.
(Optional) Enter in the IP Address if you are assigned a static PPPoE address.
Maximum Transmission Unit; default is 1492; you may need to change the MTU to conform to your ISP.
15
Using the Configuration Menu
Home > WAN > PPTP
Point-to-Point Tunneling Protocol (PPTP) is a WAN connection used in Europe.
My IP Address-
My Subnet Mask-
Server IP Address-
PPTP Account-
PPTP Password-
Connection ID-
Maximum Idle Time-
Enter the IP Address
Enter the Subnet Mask
Enter the Server IP Address
Enter the PPTP account name
Enter the PPTP password
(Optional) Enter the connection ID if required by your ISP
Enter a maximum idle time during which Internet connection is maintained during inactivity. To disable this feature, enable Auto-
reconnect.
16
Using the Configuration Menu
Home > WAN > BigPond Cable
Dynamic IP Address for BigPond is a WAN connection used in Australia.
Account-
Password-
Login Server-
Renew IP forever-
Enter in the username for the BigPond account
Enter the password for the BigPond account
(Optional) enter the Login Server name if required
If enabled, the device will automatically connect to your ISP after your unit is restarted or when the connection is dropped.
17
Using the Configuration Menu
Home > LAN
LAN is short for Local
Area Network. This is considered your inter­nal network. These are the IP settings of the LAN interface for the DI-707P. These settings may be re­ferred to as Private settings. You may change the LAN IP address if needed. The LAN IP address is private to your inter­nal network and can­not be seen on the Internet.
DHCP stands for Dynamic Host Control Protocol. The DI-707P has a built-in DHCP server. The DHCP Server will automatically assign an IP address to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to “Obtain an IP Address Automatically.” When you turn your computers on, they will automatically load the proper TCP/IP settings provided by the DI-707P. The DHCP Server will automatically allocate an unused IP address from the IP address pool to the requesting computer. You must specify the starting and ending
address of the IP address pool.
IP Address-
Subnet Mask-
Domain Name-
The IP address of the LAN interface. The default IP address is: 192.168.0.1
The subnet mask of the LAN interface. The default subnet mask is 255.255.255.0
(Optional) The name of your local domain
DHCP Server-
IP Pool Starting Address-
IP Pool Ending Address-
Lease Time-
DHCP Clients List-
Enable or disable the DHCP service
The starting IP address for the DHCP server’s IP assignment
The ending IP address for the DHCP server’s IP assignment
The length of time for the DHCP lease
Lists the DHCP clients connected to the DI-707P. Click Refresh to update the list. The table will show the Host Name, IP Ad­dress, and MAC Address of the DHCP client computer.
18
Using the Configuration Menu
Advanced > Virtual Server
The DI-707P can be configured as a virtual server so that remote users accessing Web or FTP services via the public IP address can be automatically redirected to local servers in the LAN (Local Area Network). The DI-707P firewall feature filters out unrecognized packets to protect your LAN network so all computers networked with the DI-707P are invisible to the outside world. If you wish, you can make some of the LAN computers accessible from the Internet by enabling Virtual Server. Depending on the requested service, the DI-707P redirects the external
service request to the appropriate server within the LAN network.
ID- The ID number is automatically assigned
Enable-
Service Ports-
Well known services-
Select to activate the policy
Enter in the service port or ports to be used. A range of ports can be specified with a hyphen. (e.g., 20-21)
Use the pull-down menu to select from a list of well-known virtual services
Service IP- The IP address of the internal computer that will be using the
virtual service
Schedule- Select Always, or choose From and enter the time period dur-
ing which the virtual service will be available
19
Using the Configuration Menu
Advanced > Application
Some applications require multiple connections, such as Internet gaming, video conferencing, Internet telephony and others. These applications have difficulties working through NAT (Network Address Translation). Special Applications makes some of these applications work with the DI-707P. If you need to run applications that require multiple connections, specify the port normally associated with an application in the Trigger field, then enter the public ports associated with the trigger port into the Incoming Ports field.
At the bottom of the screen, there are already defined special applications. To use them, select one from the drop down list and select an ID number you want to use. Then click the “Copy to” button and the router will fill in the appropriate information to the list. You will then need to enable the service. If the mechanism of Special Applica­tions fails to make an application work, try using DMZ host instead.
Note! Only one PC can use each Special Application tunnel.
Trigger-
Incoming Ports-
Enable-
This is the port used to trigger the application. It can be either a single port or a range of ports.
This is the port number on the WAN side that will be used to access the application. You may define a single port or a range of ports. You can use a comma to add multiple ports or port ranges.
Select to activate the policy
20
Using the Configuration Menu
Advanced > MAC Filters
MAC (Media Access Control) Filters are used to deny or allow LAN (Local Area Network) computers from accessing the Internet and network by their MAC address.
At the bottom of the screen, there is a list of MAC addresses from the DHCP client computers connected to the DI-707P. To use them, select one from the drop down list and select an IP number you want to use. Then click the “Copy to” button and the DI-707P will fill in the appropriate information to the list.
Disabled MAC Filter- Select this option if you do not want to use MAC filters.
Only allow computers with MAC address listed below to access the network-
Select this option to only allow computers that are in the list to access the network and Internet. All other computers will be denied access to the network and Internet.
Only deny computers with MAC address listed below to access the network-
Select this option to only deny computers that are in the list to access the network and Internet. All other computers will be allowed access to the network and Internet.
MAC Address­Enable-
Enter the MAC Address of the client that will be filtered
Select this option for the specific IP filter policy to take effect.
21
Using the Configuration Menu
Advanced > IP Filter
Use IP (Internet Proto­col) filters to allow or deny computers ac­cess to the Internet based on their IP ad­dress.
Disabled IP Filter-
Select this option if you do not want to use IP filters.
Allow all computers to access the Internet except those listed below-
Those in the list will be denied access to the Internet; all other computers will be allowed access to the Internet.
Deny all computers access to the Internet except those listed below-
Select this option to deny all computers access to the Internet except those that are listed below. All other computers will be denied access to the Internet.
Enabled or Disabled-
Click Enabled to apply the filter policy or click Disabled to enter an inactive filter policy (You can reactivate the policy later.)
IP-
Enter in the IP address range of the computers that you want the policy to apply to. If it is only a single computer that you want the policy applied to, then enter the IP address of that computer in the Start Source IP and leave the End Source IP blank.
Port-
Enter in the port range of the TCP/UDP ports that you want the policy to apply to. If it is only a single port that you want the policy applied to, then enter the port number in the Start Port field and leave the End Port field blank. If you want to use all the ports, you can leave the port range empty.
Schedule-
Select Always, or choose From and enter the time period during which the IP filter policy will be in effect.
22
Loading...
+ 52 hidden pages