D Link IR653A1 User Manual

Preface

D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any person or organization of such revisions or changes.

Manual Revisions

Revision Date Description

1.0 July 18, 2011 • Initial release

Trademarks

D-Link and the D-Link logo are trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States or other countries. All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies.

iD-Link DIR-653 User Manual

Table of Contents

Preface ................................................................................................. i

Manual Revisions ...............................................................................................i

Trademarks ..........................................................................................................i

Product Overview .............................................................................. 1

Package Contents ........................................................................................... 1

System Requirements ....................................................................................2

Introduction ......................................................................................................3

Features ..................................................................................................... 4

Hardware Overview ........................................................................................6

Connections ............................................................................................. 6

Hardware Overview ........................................................................................7

Front View ................................................................................................. 7

LEDs ............................................................................................................8

Installation .........................................................................................9

Before you Begin .............................................................................................9

Wireless Installation Considerations ......................................................10

Getting Started ..............................................................................................11

Conguration ...................................................................................12

Quick Setup Wizard ......................................................................................12

Web-based Conguration Utility .............................................................18

Setup Wizard ..........................................................................................19

Internet Connection ......................................................................19

Wireless Settings .............................................................................19

Manual Conguration ........................................................................23

Dynamic (Cable) ..............................................................................24

Internet Setup .......................................................................................25

PPPoE (DSL) ......................................................................................25

PPTP ....................................................................................................26

L2TP .....................................................................................................27

Static (assigned by ISP) .................................................................28

DS-Lite ................................................................................................29

Wireless Settings ..................................................................................30

Network Settings..................................................................................31

DHCP Server Settings....................................................................32

DHCP Reservation ..........................................................................33

IPv6 Internet Connection ..................................................................34

IPv6 Internet Connection Setup Wizard .......................................35

IPv6 Manual Setup ...............................................................................40

Auto Detection ................................................................................40

Static IPv6 ..........................................................................................41

Autoconguration..........................................................................42

PPPoE ..................................................................................................43

IPv6 in IPv4 Tunneling...................................................................45

6 to 4 Tunneling ..............................................................................46

6rd ........................................................................................................47

Link-Local Connectivity ................................................................48

Virtual Server .........................................................................................49

Port Forwarding ....................................................................................51

Application Rules .................................................................................52

QoS Engine .............................................................................................53

iiD-Link DIR-653 User Manual

Table of Contents

Network Filters ......................................................................................55

Access Control .......................................................................................56

Access Control Wizard...................................................................56

Website Filters .......................................................................................59

Inbound Filters ......................................................................................60

Firewall Settings ...................................................................................61

Application Level Gateway Conguration ..................................62

Routing ....................................................................................................63

Advanced Wireless Settings .............................................................64

Wi-Fi Protected Setup (WPS) ............................................................65

Advanced Network Settings ............................................................66

UPnP ....................................................................................................66

Internet Ping Block.........................................................................66

Internet Port Speed .......................................................................66

Multicast Streams ...........................................................................66

Guest Zone .............................................................................................67

IPv6 Firewall ...........................................................................................68

IPv6 Routing ...........................................................................................69

Administrator Settings .......................................................................70

Time Settings .........................................................................................71

SysLog ......................................................................................................72

Stats ..........................................................................................................81

Active Sessions ......................................................................................81

Wireless ....................................................................................................82

IPv6 ............................................................................................................83

IPv6 Routing ...........................................................................................83

Support ....................................................................................................84

Wireless Security .............................................................................85

What is WPA? ...................................................................................................85

Wireless Security Setup Wizard ................................................................86

Congure WPA-Personal (PSK) .................................................................88

Congure WPA-Enterprise (RADIUS) ......................................................89

Using Windows

7 and WPS for Wireless Conguration ..................91

Connect to a Wireless Network ....................................................... 95

Using Windows® 7 .........................................................................................95

Using Windows Vista® ..................................................................................98

Congure Wireless Security ..............................................................99

Using Windows® XP ................................................................................... 101

Congure WPA-PSK .......................................................................... 102

Troubleshooting ............................................................................104

Email Settings ........................................................................................73

System Settings ....................................................................................74

Update Firmware ..................................................................................75

DDNS ........................................................................................................76

System Check ........................................................................................77

Schedules ................................................................................................78

Device Information ..............................................................................79

Log .............................................................................................................80

Wireless Basics ...............................................................................108

Tips .................................................................................................................. 110

Wireless Modes ........................................................................................... 111

Networking Basics .........................................................................112

Check your IP address ............................................................................... 112

Technical Specications ................................................................114

iiiD-Link DIR-653 User Manual

Section 1 - Product Overview

DIR-653 Wireless N 300 Gigabit Home Router

Ethernet Cable

Power Adapter

CD-ROM with Manual and Setup Wizard

Product Overview

Package Contents

If any of the above items are missing, please contact your reseller.

Note: Using a power supply with a dierent voltage rating than the one included with the DIR-653 will cause damage and void the warranty.

1D-Link DIR-653 User Manual

Section 1 - Product Overview

Network Requirements

Web-based Conguration

Utility Requirements

System Requirements

• An Ethernet-based Cable or DSL modem

• IEEE 802.11n or 802.11g wireless clients

• 10/100/1000 Ethernet

Computer with the following:

• Windows®, Macintosh, or Linux-based operating system

• An installed Ethernet adapter

Browser Requirements:

• Internet Explorer 6.0 or higher

• Chrome 2.0 or higher

• Firefox 3.0 or higher

• Safari 3.0 or higher (with Java 1.3.1 or higher)

CD Installation Wizard

Requirements

Windows® Users: Make sure you have the latest version of Java

installed. Visit www.java.com to download the latest version.

Computer with the following:

• Windows® 7, Vista®, or XP with Service Pack 2

• An installed Ethernet adapter

• CD-ROM drive

2D-Link DIR-653 User Manual

Section 1 - Product Overview

Introduction

TOTAL PERFORMANCE

Combines award winning router features and 802.11n wireless technology to provide the best wireless performance.

TOTAL SECURITY

The most complete set of security features including Active Firewall and WPA2™ to protect your network against outside intruders.

TOTAL COVERAGE

Provides greater wireless signal rates even at farther distances for best-in-class Whole Home Coverage.

ULTIMATE PERFORMANCE

The D-Link Wireless N 300 Gigabit Home Router (DIR-653) is a 802.11n compliant device that delivers real world performance of up to 650% faster than an 802.11g wireless connection (also faster than a 100Mbps wired Ethernet connection). Create a secure wireless network to share photos, les, music, video, printers, and network storage throughout your home. Connect the Wireless N 300 Gigabit Home Router to a cable or DSL modem and share your high-speed Internet access with everyone on the network. In addition, this Router includes a Quality of Service (QoS) engine that keeps digital phone calls (VoIP) and online gaming smooth and responsive, providing a better Internet experience.

EXTENDED WHOLE HOME COVERAGE

This high performance router provides superior Whole Home Coverage while reducing dead spots. The Wireless N 300 Gigabit Home Router is designed for use in bigger homes and for users who demand higher performance networking. Add a notebook or desktop adapter and stay connected to your network from virtually anywhere in your home.

TOTAL NETWORK SECURITY

The Wireless N 300 Gigabit Home Router supports all of the latest wireless security features to prevent unauthorized access, be it from over the wireless network or from the Internet. Support for WPA standards ensure that you’ll be able to use the best possible encryption method, regardless of your client devices. In addition, this Wireless N 300 Gigabit Home Router utilizes dual active rewalls (SPI and NAT) to prevent potential attacks from across the Internet.

* Maximum wireless signal rate derived from IEEE Standard 802.11g and 802.11n specications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.

3D-Link DIR-653 User Manual

Section 1 - Product Overview

•FasterWirelessNetworking - The DIR-653 provides up to 300Mbps* wireless connection with other 802.11n wireless clients. This capability allows users to participate in real-time activities online, such as video streaming, online gaming, and real-time audio. The performance of this 802.11n wireless router gives you the freedom of wireless networking at speeds 650% faster than 802.11g.

•Compatiblewith802.11gDevices - The DIR-653 is still fully compatible with the IEEE 802.11g standard, so it can connect with existing 802.11g PCI, USB and Cardbus adapters.

•Advanced Firewall Features - The Web-based user interface displays a number of advanced network management features including:

• Content Filtering - Easily applied content ltering based on MAC Address, URL, and/or Domain

Name.

Features

• Filter Scheduling - These lters can be scheduled to be active on certain days or for a duration of hours or minutes.

• Secure Multiple/Concurrent Sessions - The DIR-653 can pass through VPN sessions. It supports multiple and concurrent IPSec and PPTP sessions, so users behind the DIR-653 can securely access corporate networks.

•User-friendlySetupWizard - Through its easy-to-use Web-based user interface, the DIR-653 lets you control what information is accessible to those on the wireless network, whether from the Internet or from your company’s server. Congure your router to your specic settings within minutes.

4D-Link DIR-653 User Manual

Section 1 - Product Overview

•ShareMultifunctionPrinters-Through the SharePort™ Plus Utility, you can connect multifunction printers to the USB ports to share printing and scanning functions among family members.

•OtherFeaturesInclude-

• Wi-Fi Protected Setup (WPS) Push Button

• UPnP Support

• D-Link Green™

• Supports IPv6

5D-Link DIR-653 User Manual

Section 1 - Product Overview

Hardware Overview

Connections

1 2 3

1 LAN Ports (1-4) Connect Ethernet devices such as computers, switches, and hubs.

2 Internet Port

3 Power Receptor Receptor for the supplied power adapter.

4 Reset Press and hold the reset button to restore the router to its original factory settings.

The auto MDI/MDIX Internet port is the connection for the Ethernet cable to the cable

or DSL modem.

6D-Link DIR-653 User Manual

Section 1 - Product Overview

Hardware Overview

Front View

1 USB Connect a USB 1.1 or 2.0 ash drive to congure the wireless settings using WCN.

7D-Link DIR-653 User Manual

Section 1 - Product Overview

LEDs

1 2 3

1 Power LED A solid light indicates a proper connection to the power supply.

A solid light indicates connection on the Internet port. This LED blinks during data

2 Internet LED

3 WLAN LED

4 Local Network’s LED

transmission. A solid blue light indicates that there is an Internet connection, an orange light indicates that there is none.

A solid light indicates that the wireless segment is ready. This LED blinks during wireless data transmission.

A solid light indicates a connection to an Ethernet-enabled computer on ports 1-4. This LED blinks during data transmission.

8D-Link DIR-653 User Manual

Section 2 - Installation

Installation

This section will walk you through the installation process. Placement of the router is very important. Do not place the router in an enclosed area such as a closet, cabinet, or in the attic or garage.

Before you Begin

Please congure the router with the computer that was last connected directly to your modem. Also, you can only use the Ethernet port on your modem. If you were using the USB connection before using the router, then you must turn o your modem, disconnect the USB cable and connect an Ethernet cable to the Internet port on the router, and then turn the modem back on. In some cases, you may need to call your ISP to change connection types (USB to Ethernet).

If you have DSL and are connecting via PPPoE, make sure you disable or uninstall any PPPoE software such as WinPoet, Broadjump, or Enternet 300 from your computer or you will not be able to connect to the Internet.

9D-Link DIR-653 User Manual

Section 2 - Installation

Wireless Installation Considerations

The D-Link wireless router lets you access your network using a wireless connection from virtually anywhere within the operating range of your wireless network. Keep in mind that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to follow these basic guidelines:

1. Keep the number of walls and ceilings between the D-Link router and other network devices to a minimum - each wall or ceiling

can reduce your adapter’s range from 3-90 feet (1-30 meters.) Position your devices so that the number of walls or ceilings is minimized.

2. Be aware of the direct line between network devices. A wall that is 1.5 feet thick (.5 meters), at a 45-degree angle appears to be

almost 3 feet (1 meter) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better reception.

3. Building Materials make a dierence. A solid metal door or aluminum studs may have a negative eect on range. Try to position

access points, wireless routers, and computers so that the signal passes through drywall or open doorways. Materials and objects such as glass, steel, metal, walls with insulation, water (sh tanks), mirrors, le cabinets, brick, and concrete will degrade your wireless signal.

4. Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate RF noise.

5. If you are using 2.4GHz cordless phones or X-10 (wireless products such as ceiling fans, lights, and home security systems), your

wireless connection may degrade dramatically or drop completely. Make sure your 2.4GHz phone base is as far away from your wireless devices as possible. The base transmits a signal even if the phone in not in use.

10D-Link DIR-653 User Manual

Section 2 - Installation

Getting Started

The DIR-653 includes a Quick Router Setup Wizard CD. Follow the simple steps below to run the Setup Wizard to guide you quickly through the installation process.

Insert the Wizard CD in the CD-ROM drive. The step-by-step instructions that follow are shown in Windows® XP. The steps and screens are similar for the other Windows operating systems.

If the CD Autorun function does not automatically start on your computer, go to Start > Run. In the run box type “D:\DWizard.exe” (where D: represents the drive letter of your CD-ROM drive).

When the autorun screen appears, click START.

Note: It is recommended to write down the SSID and Security Key, followed by the login password on the provided CD holder.

11D-Link DIR-653 User Manual

Section 3 - Conguration

Conguration

This section will show you how to congure your new D-Link wireless router using the web-based conguration utility.

Note: If you have successfully completed the setup on your router with the CD, the Quick Setup Wizard will not appear. Please refer to page 18.

Quick Setup Wizard

To access the conguration utility, open a web-browser such as Internet Explorer and enter the IP address of the router (192.168.0.1).

12D-Link DIR-653 User Manual

Section 3 - Conguration

This wizard is designed to guide you through a step-by step process to congure your new D-Link router and connect to the Internet.

Click Next to continue.

In order to secure your new networking device, please enter a password and click Next.

13D-Link DIR-653 User Manual

Section 3 - Conguration

Select Enable Advanced DNS Services to allow this

function to improve your overall Internet experience.

Click Next to continue.

Please wait while your router detects your internet connection type.

14D-Link DIR-653 User Manual

Section 3 - Conguration

Select your Internet connection type and click Next to continue.

If you selected DHCP Connection, make suer that you are

connected to the D-Link router with the PC that was originally

connected to your broadband connection. Then, click the Clone

MAC button to copy your computer’s MAC address. Click Next to

continue.

15D-Link DIR-653 User Manual

Section 3 - Conguration

Please give your network a name using up to 32 characters.

It is highly recommended that you have a security key for your

network. If you would like the router to automatically assign a

security key, choose Automatically assign a network key or you

may choose Manually assign a network key and you may enter

your own Network key.

Click Next to continue.

Once this screen appears, your setup is complete. Click Save &

Connect to reboot the router.

16D-Link DIR-653 User Manual

Section 3 - Conguration

Before your router reboots, you will be asked if you want to

bookmark ‘D-Link Router Web Management,” click Ok to nish.

17D-Link DIR-653 User Manual

Section 3 - Conguration

Web-based Conguration Utility

To access the conguration utility, open a web-browser such as Internet Explorer and enter the IP address of the router (192.168.0.1).

You may also connect using the NetBIOS name in the address bar (http://dlinkrouter).

Select Admin from the drop-down menu and then enter your password. The password is left blank by default.

If you get a Page Cannot be Displayed error, please refer to the Troubleshooting section for assistance.

18D-Link DIR-653 User Manual

Section 3 - Conguration

Setup Wizard

Internet Connection

Click Internet Connection Setup Wizard to quickly congure your router. Skip to the next.

If you want to enter your settings without running the wizard, click Manual Conguration and skip to page 23.

Wireless Settings

Click Wireless Connection Setup Wizard to begin.

If you want to add your wireless clients to your router using WPS, click Add Wireless Device with WPS and skip to page 86.

If you want to configure your wireless settings manually, click Manual Wireless Connection Setup and skip to page 30.

19D-Link DIR-653 User Manual

Section 3 - Conguration

Click Next to continue.

Create a new password and then click Next to continue.

Select your time zone from the drop-down menu and then click Next to continue.

Select the type of Internet connection you use and then click Next to continue.

20D-Link DIR-653 User Manual

Section 3 - Conguration

If you selected Dynamic, you may need to enter the MAC address of the computer that was last connected directly to your modem. If you are currently using that computer, click Clone Your PC’s MAC Address and then click Next to continue.

The Host Name is optional but may be required by some ISPs. The default host name is the device name of the Router and may be changed.

If you selected PPPoE, enter your PPPoE username and password. Click Next to continue.

Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses.

Note: Make sure to remove your PPPoE software from your computer. The software is no longer needed and will not work through a router.

If you selected PPTP, enter your PPTP username and password. Click Next to continue.

21D-Link DIR-653 User Manual

Section 3 - Conguration

If you selected L2TP, enter your L2TP username and password. Click Next to continue.

If you selected Static, enter your network settings supplied by your Internet provider. Click Next to continue.

Click Connect to save your settings. Once the router is nished rebooting, click Continue. Please allow 1-2 minutes to connect.

Close your browser window and reopen it to test your Internet connection. It may take a few tries to initially connect to the Internet.

22D-Link DIR-653 User Manual

Section 3 - Conguration

Manual Conguration

My Internet

Connection is:

Enable

Advanced DNS

Service:

Enable True

Gigabit Routing

Connectivity:

Select the type of Internet connection you have. Select Dynamic IP (DHCP), PPPoE, PPTP, L2TP, Static, or DS-Lite. Refer to the next few pages for more information.

Advanced Domain Name System (DNS) services enhances your Internet performance by getting you the information and web pages you are looking for faster and more reliably. In addition, it improves your overall Internet experience by correcting many common typo mistakes automatically, taking you where you intended to go and saving you valuable time.

Disclaimer: D-Link makes no warranty as to the availability, reliability, functionality and operation of the Advanced DNS service or its features.

When this option is enabled, the router will speed up NAT performance by hardware acceleration mechanism.

Note: SPI and the QoS engine will be disabled automatically when hardware NAT is enabled.

23D-Link DIR-653 User Manual

Section 3 - Conguration

Dynamic (Cable)

My Internet

Connection:

Host Name:

Use Unicasting:

Primary/Secondary

DNS Server:

MTU:

MAC Address:

Select Dynamic IP (DHCP) to obtain IP Address information automatically from your ISP. Select this option if your ISP does not give you any IP numbers to use. This option is commonly used for cable modem services such as Comcast and Cox.

The Host Name is optional but may be required by some ISPs. Leave blank if you are not sure.

Check the box if you are having problems obtaining an IP address from your ISP.

Enter the Primary and secondary DNS server IP addresses assigned by your ISP. These addresses are usually obtained automatically from your ISP. Leave at 0.0.0.0 if you did not specically receive these from your ISP.

Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1500 is the default MTU.

The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It is not recommended that you change the default MAC address unless required by your ISP. You can use the Clone Your PC’s MAC Address button to replace the Internet port’s MAC address with the MAC address of your Ethernet card.

24D-Link DIR-653 User Manual

Section 3 - Conguration

Internet Setup

PPPoE (DSL)

Choose PPPoE (Point to Point Protocol over Ethernet) if your ISP uses a PPPoE connection. Your ISP will provide you with a username and password. This option is typically used for DSL services. Make sure to remove your PPPoE software from your computer. The software is no longer needed and will not work through a router.

My Internet

Connection:

Address Mode:

IP Address:

User Name:

Password:

Service Name:

Reconnection Mode:

Maximum Idle Time:

DNS Addresses:

MTU:

MAC Address:

Select PPPoE (Username/Password) from the drop-down menu.

Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. In most cases, select Dynamic.

Enter the IP address (Static PPPoE only).

Enter your PPPoE user name.

Enter your PPPoE password and then retype the password in the next box.

Enter the ISP Service Name (optional).

Select either Always-on, On-Demand, or Manual.

Enter a maximum idle time during which the Internet connection is maintained during inactivity. To disable this feature, enable Auto-reconnect.

Enter the Primary and Secondary DNS Server Addresses (Static PPPoE only).

Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1492 is the default MTU.

25D-Link DIR-653 User Manual

Section 3 - Conguration

PPTP

Choose PPTP (Point-to-Point-Tunneling Protocol ) if your ISP uses a PPTP connection. Your ISP will provide you with a username and password. This option is typically used for DSL services.

Address Mode:

PPTP IP Address:

PPTP Subnet Mask:

PPTP Gateway:

PPTP Server IP:

Username:

Password:

Reconnect Mode:

Maximum Idle Time:

DNS Servers:

MTU:

Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. In most cases, select Dynamic.

Enter the IP address (Static PPTP only).

Enter the Primary and Secondary DNS Server Addresses (Static PPTP only).

Enter the Gateway IP Address provided by your ISP.

Enter the Server IP provided by your ISP (optional).

Enter your PPTP username.

Enter your PPTP password and then retype the password in the next box.

Select either Always-on, On-Demand, or Manual.

Enter a maximum idle time during which the Internet connection is maintained during inactivity. To disable this feature, enable Auto-reconnect.

The DNS server information will be supplied by your ISP (Internet Service Provider.)

Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1400 is the default MTU.

MAC Address:

26D-Link DIR-653 User Manual

Section 3 - Conguration

L2TP

Choose L2TP (Layer 2 Tunneling Protocol) if your ISP uses a L2TP connection. Your ISP will provide you with a username and password. This option is typically used for DSL services.

Address Mode:

L2TP IP

Address:

L2TP Subnet

Mask:

L2TP Gateway:

L2TP Server IP:

Username:

Password:

Reconnect

Mode:

Maximum Idle

Time:

DNS Servers:

Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. In most cases, select Dynamic.

Enter the L2TP IP address supplied by your ISP (Static only).

Enter the Subnet Mask supplied by your ISP (Static only).

Enter the Gateway IP Address provided by your ISP.

Enter the Server IP provided by your ISP (optional).

Enter your L2TP username.

Enter your L2TP password and then retype the password in the next box.

Select either Always-on, On-Demand, or Manual.

Enter a maximum idle time during which the Internet connection is maintained during inactivity. To disable this feature, enable Auto-reconnect.

Enter the Primary and Secondary DNS Server Addresses (Static L2TP only).

MTU:

Clone MAC

Address:

Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1400 is the default MTU.

27D-Link DIR-653 User Manual

Section 3 - Conguration

Static (assigned by ISP)

Select Static IP Address if all the Internet port’s IP information is provided to you by your ISP. You will need to enter in the IP address, subnet mask, gateway address, and DNS address(es) provided to you by your ISP. Each IP address entered in the elds must be in the appropriate IP form, which are four octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format.

IP Address:

Subnet Mask:

Default Gateway:

DNS Servers:

MTU:

MAC Address:

Enter the IP address assigned by your ISP.

Enter the Subnet Mask assigned by your ISP.

Enter the Gateway assigned by your ISP.

The DNS server information will be supplied by your ISP (Internet Service Provider.)

Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1500 is the default MTU.

28D-Link DIR-653 User Manual

Section 3 - Software Conguration

Another Internet Connection type is DS-Lite.

DS-Lite

Conguration:

AFTR IPv6 Address: After selecting the Manual Conguration option above, the

B4 IPv4 Address: Enter the B4 IPv4 address value used here.

WAN IPv6 Address: Once connected, the WAN IPv6 address will be displayed

IPv6 WAN Default

Gateway

Select the DS-Lite DHCPv6 Option to let the router allocate the AFTR IPv6 address automatically. Select the Manual Conguration to enter the AFTR IPv6 address in manually.

user can enter the AFTR IPv6 address used here.

here.

Once connected, the IPv6 WAN Default Gateway address will be displayed here.

Click on the Save Settings button to accept the changes made. Click on the Don’t Save Settings button to discard the changes made.

29D-Link DIR-653 User Manual

Section 3 - Conguration

Wireless Settings

Enable Wireless:

Schedule:

Wireless Network

Name:

Enable Auto Channel

Scan:

Wireless Channel:

802.11 Mode:

Channel Width:

Check the box to enable the wireless function. If you do not want to use wireless, uncheck the box to disable all the wireless functions.

The schedule of time when the wireless settings rules will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.

Service Set Identifier (SSID) is the name of your wireless network. Create a name using up to 32 characters. The SSID is case-sensitive.

The Auto Channel Scan setting can be selected to allow the DIR-653 to choose the channel with the least amount of interference.

Indicates the channel setting for the DIR-653. By default the channel is set to 6. The Channel can be changed to t the channel setting for an existing wireless network or to customize the wireless network. If you enable Auto Channel Scan, this option will be greyed out.

Select one of the following:

802.11g Only - Select if all of your wireless clients are 802.11g.

802.11n Only - Select only if all of your wireless clients are 802.11n. Mixed 802.11n and 802.11g - Select if you are using a mix of 802.11n and 11g

wireless clients.

Select the Channel Width: Auto 20/40 - This is the default setting. Select if you are using both 802.11n and non-802.11n wireless devices.

20MHz - Select if you are not using any 802.11n wireless clients. 40MHz - Select if using only 802.11n wireless clients.

Transmission Rate:

Visibility Status:

Select the transmit rate. It is strongly suggested to select Best (Auto) for best performance.

Select Invisible if you do not want the SSID of your wireless network to be broadcasted by the DIR-653. If Invisible is selected, the SSID of the DIR-653 will not be seen by Site Survey utilities so your wireless clients will have to know the SSID of your DIR-653

30D-Link DIR-653 User Manual

Section 3 - Conguration

Network Settings

This section will allow you to change the local network settings of the router and to congure the DHCP settings.

IP Address:

Subnet Mask:

Local Domain:

Enable DNS Relay:

Enter the IP address of the router. The default IP address is

192.168.0.1.

If you change the IP address, once you click Apply, you will need to enter the new IP address in your browser to get back into the conguration utility.

Enter the Subnet Mask. The default subnet mask is 255.255.255.0.

Enter the Domain name (Optional).

Uncheck the box to transfer the DNS server information from your ISP to your computers. If checked, your computers will use the router for a DNS server.

31D-Link DIR-653 User Manual

Section 3 - Conguration

DHCP Server Settings

DHCP stands for Dynamic Host Control Protocol. The DIR-653 has a built-in DHCP server. The DHCP Server will automatically assign an IP address

to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to “Obtain an IP Address Automatically.” When you turn your computers on, they will automatically load the proper TCP/IP settings provided by the DIR-653. The

DHCP Server will automatically allocate an unused IP address from the IP address pool to the requesting computer. You must specify the starting and ending address of the IP address pool.

Enable DHCP

Server:

DHCP IP Address

Range:

DHCP Lease Time:

Always Broadcast:

NetBIOS

Announcement:

Learn NetBIOS

from WAN:

Check this box to enable the DHCP server on your router. Uncheck to disable this function.

Enter the starting and ending IP addresses for the DHCP server’s IP assignment.

Note: If you statically (manually) assign IP addresses to your computers or devices, make sure the IP addresses are outside of this range or you may have an IP conict.

The length of time for the IP address lease. Enter the Lease time in minutes.

Enable this feature to broadcast your networks DHCP server to

LAN/WLAN clients.

NetBIOS allows LAN hosts to discover all other computers within the network, enable this feature to allow the DHCP Server to oer NetBIOS conguration settings.

Enable this feature to allow WINS information to be learned from the WAN side, disable to allow manual conguration.

NetBIOS Scope:

NetBIOS Mode

Type:

Primary/Secondary

WINS IP Address:

This feature allows the conguration of a NetBIOS ‘domain’ name under which network hosts operates. This setting has no eect if the ‘Learn NetBIOS information from WAN’ is activated.”

Select the dierent type of NetBIOS node: Broadcast only, Point-to-Point, Mixed-mode, and Hybrid.

Enter your Primary (and Secondary) WINS IP address(es).

32D-Link DIR-653 User Manual

Section 3 - Conguration

DHCP Reservation

If you want a computer or device to always have the same IP address assigned, you can create a DHCP reservation. The router will assign the IP address only to that computer or device.

Note: This IP address must be within the DHCP IP Address Range.

Enable:

Computer Name:

IP Address:

MAC Address:

Copy Your PC’s

MAC Address:

Save:

Number of

Dynamic DHCP

Clients:

Revoke:

Check this box to enable the reservation.

Enter the computer name or select from the drop-down menu and click <<.

Enter the IP address you want to assign to the computer or device. This IP Address must be within the DHCP IP Address Range.

Enter the MAC address of the computer or device.

If you want to assign an IP address to the computer you are currently on, click this button to populate the elds.

Click Save to save your entry. You must click Save Settings at the top to activate your reservations.

In this section you can see what LAN devices are currently leasing IP addresses.

Click Revoke to cancel the lease for a specic LAN device and free an entry in the lease table. Do this only if the device no longer needs the leased IP address, because, for example, it has been removed from the network.

Reserve:

Note: The Revoke option will not disconnect a PC with a current network session from the network; you would need to use MAC Address Filter to do that. Revoke will only free up a DHCP Address for the very next requester. If the previous owner is still available, those two devices may both receive an IP Address Conict error, or the second device may still not receive an IP Address; in that case, you may still need to extend the “DHCP IP Address Range” to address the issue, it is located in the DHCP Server section.

The Reserve option converts this dynamic IP allocation into a DHCP Reservation and adds the corresponding entry to the DHCP Reservations List.

33D-Link DIR-653 User Manual

Section 3 - Conguration

IPv6 Internet Connection

Click IPv6 Internet Connection Setup Wizard to begin.

If you want to congure your IPv6 Internet Connection manually, click Manual IPv6 Internet Connection Setup and skip to page

41.

34D-Link DIR-653 User Manual

Section 3 - Software Conguration

IPv6 Internet Connection Setup Wizard

On this page, the user can congure the IPv6 Connection type. There are two ways to set up the IPv6 Internet connection. You can use the Webbased IPv6 Internet Connection Setup Wizard, or you can manually congure the connection.

IPv6 Internet Connection Setup Wizard For the beginner user that have not congured a router before, click on the IPv6 Internet Connection Setup Wizard button and the router will guide you through a

few simple steps to get your network up and running.

After clicking on the IPv6 Internet Connection Setup Wizard button, this page will appear.

Welcome to the D-Link IPv6 Internet Connection Setup Wizard

This wizard will guide you through a step-by-step process to congure your new D-Link router and connect to the IPv6 Internet.

Click Next to continue to the next page. Click Cancel to discard the changes made and return to the main page.

Step 1: Congure Your IPv6 Internet Connection

The router will try and detect whether its possible to obtain the IPv6 Internet Connection type automatically. If this succeeds then the user will be guided through the input of the appropriate parameters for the connection type found.

35D-Link DIR-653 User Manual

Section 3 - Software Conguration

However, if the automatic detection fails, the user will be prompt to either Try again or to click on the Guide me through the IPv6 settings button to initiate the manual continual of the wizard.

36D-Link DIR-653 User Manual

Section 3 - Software Conguration

Step 1: Congure Your IPv6 Internet Connection

There are several connection types to choose from. If you are unsure of your connection method, please contact your IPv6 Internet Service Provider.

Note: If using the PPPoE option, you will need to ensure that any PPPoE client software on your computers has been removed or disabled. The 3 options available on this page is IPv6 over PPPoE, Static IPv6 address and Route, and Tunneling Connection.

Choose the required IPv6 Internet Connection type and click on the Next button to continue. Click on the Prev button to return to the previous page. Click on the Cancel button to discard all the changes made and return to the main page.

Set Username and Password Connection (PPPoE)

After selecting the IPv6 over PPPoE option, the user will be able to congure the IPv6 Internet connection that requires a username and password to get online. Most DSL modems use this type of connection.

The following parameters will be available for conguration:

PPPoE Session: Select the PPPoE Session value used here. This option will

state that this connection shares it’s information with the already congured IPv6 PPPoE connection, or the user can create a new PPPoE connection here.

User Name: Enter the PPPoE username used here. This information is

obtainable from the ISP.

Password: Enter the PPPoE password used here. This information is

obtainable from the ISP.

Verify Password: Re-enter the PPPoE password used here.

Service Name: Enter the service name for this connection here. This option is optional.

Click on the Next button to continue. Click on the Prev button to return to the previous page. Click on the Cancel button to discard all the changes made and return to the main page.

37D-Link DIR-653 User Manual

Section 3 - Software Conguration

Set Static IPv6 Address Connection

This mode is used when your ISP provides you with a set IPv6 addresses that does not change. The IPv6 information is manually entered in your IPv6 conguration settings. You must enter the IPv6 address, Subnet Prex Length, Default Gateway, Primary DNS Server, and Secondary DNS Server. Your ISP provides you with all this information.

Use Link-Local

Address:

IPv6 Address:

Subnet Prex

Length:

Default Gateway:

Primary IPv6 DNS

Address:

Secondary IPv6 DNS

Address:

LAN IPv6 Address:

The Link-local address is used by nodes and routers when communicating with neighboring nodes on the same link. This mode enables IPv6capable devices to communicate with each other on the LAN side.

Enter the WAN IPv6 address for the router here.

Enter the WAN subnet prex length value used here.

Enter the WAN default gateway IPv6 address used here.

Enter the WAN primary DNS Server address used here.

Enter the WAN secondary DNS Server address used here.

These are the settings of the LAN (Local Area Network) IPv6 interface for the router. The router’s LAN IPv6 Address conguration is based on the IPv6

Address and Subnet assigned by your ISP. (A subnet with prex /64 is supported in LAN.)

Click on the Next button to continue. Click on the Prev button to return to the previous page. Click on the Cancel button to discard all the changes made and return to the main page.

38D-Link DIR-653 User Manual

Section 3 - Software Conguration

Tunneling Connection (6rd)

After selecting the Tunneling Connection (6rd) option, the user can congure the IPv6 6rd connection settings.

The following parameters will be available for conguration:

6rd IPv6 Prex: Enter the 6rd IPv6 address and prex value used here.

IPv4 Address: Enter the IPv4 address used here.

Mask Length: Enter the IPv4 mask length used here.

Assigned IPv6

Prex:

6rd Border Relay

IPv4 Address:

IPv6 DNS Server: Enter the primary DNS Server address used here.

Displays the IPv6 assigned prex value here.

Enter the 6rd border relay IPv4 address used here.

Click on the Next button to continue. Click on the Prev button to return to the previous page. Click on the Cancel button to discard all the changes made and return to the main page.

Setup Complete

The IPv6 Internet Connection Setup Wizard was completed.

Click on the Connect button to continue. Click on the Prev button to return to the previous page. Click on the Cancel button to discard all the changes made and return to the main page.

39D-Link DIR-653 User Manual

Section 3 - Conguration

IPv6 Manual Setup

There are several connection types to choose from: Auto Detection, Static IPv6, Autoconguration (SLAAC/DHCPv6), PPPoE, IPv6 in IPv4 Tunnel,

6to4, 6rd, and Link-local. If you are unsure of your connection method, please contact your IPv6 Internet Service Provider.

Note: If using the PPPoE option, you will need to ensure that any PPPoE client software on your computers has been removed or disabled.

Auto Detection

Select Auto Detection to have the router detect and automatically congure your IPv6 setting from your ISP.

40D-Link DIR-653 User Manual

Section 3 - Conguration

Static IPv6

My IPv6 Connection:

WAN IPv6 Address Settings:

LAN IPv6 Address:

LAN Link-Local Address:

Enable Autoconguration:

Autoconguration Type:

IPv6 Address Range Start:

IPv6 Address Range End:

IPv6 Address Lifetime:

Select Static IPv6 from the drop-down menu.

Enter the address settings supplied by your Internet provider (ISP).

Enter the LAN (local) IPv6 address for the router.

Displays the Router’s LAN Link-Local Address.

Check to enable the Autoconguration feature.

Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.

Enter the start IPv6 Address for the DHCPv6 range for your local computers.

Enter the end IPv6 Address for the DHCPv6 range for your local computers.

Enter the IPv6 Address Lifetime (in minutes).

41D-Link DIR-653 User Manual

Section 3 - Conguration

Autoconguration

My IPv6 Connection:

IPv6 DNS Settings:

Primary/Secondary DNS

Address:

LAN IPv6 Address:

LAN Link-Local Address:

Enable Autoconguration:

Autoconguration Type:

IPv6 Address Range Start:

IPv6 Address Range End:

IPv6 Address Lifetime:

Select Autoconguration (Stateless/DHCPv6) from the drop-down menu.

Select either Obtain DNS server address automatically or Use the following DNS Address.

Enter the primary and secondary DNS server addresses.

Enter the LAN (local) IPv6 address for the router.

Displays the Router’s LAN Link-Local Address.

Check to enable the Autoconguration feature.

Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.

Enter the start IPv6 Address for the DHCPv6 range for your local computers.

Enter the end IPv6 Address for the DHCPv6 range for your local computers.

Enter the IPv6 Address Lifetime (in minutes).

42D-Link DIR-653 User Manual

Section 3 - Conguration

PPPoE

My IPv6 Connection:

PPPoE:

Address Mode:

IP Address:

User Name:

Password:

Service Name:

Reconnection Mode:

Maximum Idle Time:

MTU:

IPv6 DNS Settings:

Select PPPoE from the drop-down menu.

Enter the PPPoE account settings supplied by your Internet provider (ISP).

Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. In most cases, select Dynamic.

Enter the IP address (Static PPPoE only).

Enter your PPPoE user name.

Enter your PPPoE password and then retype the password in the next box.

Enter the ISP Service Name (optional).

Select either Always-on, On-Demand, or Manual.

Enter a maximum idle time during which the Internet connection is maintained during inactivity. To disable this feature, enable Auto-reconnect.

Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1492 is the default MTU.

Select either Obtain DNS server address automatically or Use the following DNS Address.

Primary/Secondary DNS

Address:

LAN IPv6 Address:

LAN Link-Local Address:

Enable Autoconguration:

Enter the primary and secondary DNS server addresses.

Enter the LAN (local) IPv6 address for the router.

Displays the Router’s LAN Link-Local Address.

Check to enable the Autoconguration feature.

43D-Link DIR-653 User Manual

Section 3 - Conguration

Autoconguration Type:

IPv6 Address Range Start:

IPv6 Address Range End:

IPv6 Address Lifetime:

Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.

Enter the start IPv6 Address for the DHCPv6 range for your local computers.

Enter the end IPv6 Address for the DHCPv6 range for your local computers.

Enter the IPv6 Address Lifetime (in minutes).

44D-Link DIR-653 User Manual

Section 3 - Conguration

IPv6 in IPv4 Tunneling

My IPv6 Connection:

IPv6 in IPv4 Tunnel

Settings:

LAN IPv6 Address:

LAN Link-Local

Address:

Enable

Autoconguration:

Autoconguration

Type:

IPv6 Address Range

Start:

IPv6 Address Range

End:

Pv6 Address Lifetime:

Select IPv6 in IPv4 Tunnel from the drop-down menu.

Enter the settings supplied by your Internet provider (ISP).

Enter the LAN (local) IPv6 address for the router.

Displays the Router’s LAN Link-Local Address.

Check to enable the Autoconguration feature.

Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.

Enter the start IPv6 Address for the DHCPv6 range for your local computers.

Enter the end IPv6 Address for the DHCPv6 range for your local computers.

Enter the Router Advertisement Lifetime (in minutes).

45D-Link DIR-653 User Manual

Section 3 - Conguration

6 to 4 Tunneling

My IPv6 Connection:

6 to 4 Settings:

Primary/Secondary DNS

Address:

LAN IPv6 Address:

LAN Link-Local Address:

Enable

Autoconguration:

Autoconguration Type:

IPv6 Address Range

Start:

IPv6 Address Range

End:

IPv6 Address Lifetime:

Select 6 to 4 from the drop-down menu.

Enter the IPv6 settings supplied by your Internet provider (ISP).

Enter the primary and secondary DNS server addresses.

Enter the LAN (local) IPv6 address for the router.

Displays the Router’s LAN Link-Local Address.

Check to enable the Autoconguration feature.

Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.

Enter the start IPv6 Address for the DHCPv6 range for your local computers.

Enter the end IPv6 Address for the DHCPv6 range for your local computers.

Enter the IPv6 Address Lifetime (in minutes).

46D-Link DIR-653 User Manual

Section 3 - Conguration

6rd

My IPv6 Connection:

6RD Settings:

LAN IPv6 Address:

LAN Link-Local Address:

Enable Autoconguration:

Autoconguration Type:

Router Advertisement

Lifetime:

Select 6rd from the drop-down menu.

Enter the address settings supplied by your Internet provider (ISP).

Enter the LAN (local) IPv6 address for the router.

Displays the Router’s LAN Link-Local Address.

Check to enable the Autoconguration feature.

Select Stateful (DHCPv6), SLAAC+RDNSS or SLAAC + Stateless DHCPv6.

Enter the Router Advertisement Lifetime (in minutes).

47D-Link DIR-653 User Manual

Section 3 - Conguration

Link-Local Connectivity

My IPv6 Connection:

LAN IPv6 Address

Settings:

Select Link-Local Only from the drop-down menu.

Displays the IPv6 address of the router.

48D-Link DIR-653 User Manual

Section 3 - Conguration

Virtual Server

The DIR-653 can be congured as a virtual server so that remote users accessing Web or FTP services via the public IP address can be automatically redirected to local servers in the LAN (Local Area Network).

The DIR-653 rewall feature lters out unrecognized packets to protect your LAN network so all computers networked with the DIR-653 are invisible to the outside world. If you wish, you can make some of the LAN computers accessible from the Internet by enabling Virtual Server. Depending on the requested service, the DIR-653 redirects the external service request to the appropriate server within the LAN network.

The DIR-653 is also capable of port-redirection meaning incoming trac to a particular port may be redirected to a dierent port on the server computer.

Each virtual service that is created will be listed at the bottom of the screen in the Virtual Servers List. There are pre-dened virtual services already in the table. You may use them by enabling them and assigning the server IP to use that particular virtual service.

For a list of ports for common applications, please visit http://support.dlink.com/faq/view.asp?prod_id=1191.

49D-Link DIR-653 User Manual

Section 3 - Conguration

This will allow you to open a single port. If you would like to open a range of ports, refer to the next page.

Name:

IP Address:

Private Port/

Public Port:

Protocol Type:

Inbound Filter:

Schedule:

Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the elds.

Enter the IP address of the computer on your local network that you want to allow the incoming service to. If your computer is receiving an IP address automatically from the router (DHCP), you computer will be listed in the “Computer Name” drop-down menu. Select your computer and click <<.

Enter the port that you want to open next to Private Port and Public Port. The private and public ports are usually the same. The public port is the port seen from the Internet side, and the private port is the port being used by the application on the computer within your local network.

Select TCP, UDP, or Both from the drop-down menu.

Select Allow All (most common) or a created Inbound lter. You may create your own inbound lters in the Advanced > Inbound Filter page.

The schedule of time when the Virtual Server Rule will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.

50D-Link DIR-653 User Manual

Section 3 - Conguration

Port Forwarding

This will allow you to open a single port or a range of ports.

Name:

IP Address:

TCP/UDP:

Inbound Filter:

Schedule:

Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the elds.

Enter the TCP and/or UDP port or ports that you want to open.

You can enter a single port or a range of ports. Separate ports with a common.

Example: 24,1009,3000-4000

Select Allow All (most common) or a created Inbound lter. You may create your own inbound lters in the Advanced > Inbound Filter page.

51D-Link DIR-653 User Manual

Section 3 - Conguration

Application Rules

Some applications require multiple connections, such as Internet gaming, video conferencing, Internet telephony and others. These applications have diculties working through NAT (Network Address Translation). Special Applications makes some of these applications work with the DIR-653. If you need to run applications that require multiple connections, specify the port normally associated with an application in the “Trigger Port” eld, select the protocol type as TCP or UDP, then enter the rewall (public) ports associated with the trigger port to open them for inbound trac.

The DIR-653 provides some predened applications in the table on the bottom of the web page. Select the application you want to use and enable it.

Name:

Trigger:

Trac Type:

Firewall:

Trac Type:

Schedule:

Enter a name for the rule. You may select a pre-dened application from the drop-down menu and click <<.

This is the port used to trigger the application. It can be either a single port or a range of ports.

Select the protocol of the trigger port (TCP, UDP, or Both).

This is the port number on the Internet side that will be used to access the application. You may dene a single port or a range of ports. You can use a comma to add multiple ports or port ranges.

Select the protocol of the rewall port (TCP, UDP, or Both).

The schedule of time when the Application Rule will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.

52D-Link DIR-653 User Manual

Section 3 - Conguration

QoS Engine

The QoS Engine option helps improve your network gaming performance by prioritizing applications. By default the QoS Engine settings are disabled and application priority is not classied automatically.

Enable Trac

Shaping:

Automatic Uplink

Speed:

Measured Uplink

Speed:

Manual Uplink

Speed:

Enabled QoS Engine:

Automatic

Classication:

This option is disabled by default. Enable this option for better performance and experience with online games and other interactive applications, such as VoIP.

This option is enabled by default when the QoS Engine option is enabled. This option will allow your router to automatically determine the uplink speed of your Internet connection.

This displays the detected uplink speed.

The speed at which data can be transferred from the router to your ISP. This is determined by your ISP.

This option is enabled by default. This will allow your router to automatically determine the network priority of running programs.

This option is enabled by default so that your router will automatically determine which programs should have network priority. For best performance, use the Automatic Classication option to automatically set the priority for your applications.

Dynamic

Fragmentation:

This option should be enabled when you have a slow Internet uplink. It helps to reduce the impact that large low priority network packets can have on more urgent ones.

53D-Link DIR-653 User Manual

Section 3 - Conguration

QoS Engine Rules:

Name:

Priority:

Protocol:

Local IP Range:

Local Port Range:

Remote IP Range:

Remote Port Range:

A QoS Engine Rule identies a specic message ow and assigns a priority to that ow. For most applications, automatic classication will be adequate, and specic QoS Engine Rules will not be required.

The QoS Engine supports overlaps between rules, where more than one rule can match for a specic message ow. If more than one rule is found to match the rule with the highest priority will be used.

Create a name for the rule that is meaningful to you.

The priority of the message ow is entered here -- 1 receives the highest priority (most urgent) and 255 receives the lowest priority (least urgent).

The protocol used by the messages.

The rule applies to a ow of messages whose LAN-side IP address falls within the range set here.

The rule applies to a ow of messages whose LAN-side port number is within the range set here.

The rule applies to a ow of messages whose WAN-side IP address falls within the range set here.

The rule applies to a ow of messages whose WAN-side port number is within the range set here.

54D-Link DIR-653 User Manual

Section 3 - Conguration

Network Filters

Use MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network) computers by their MAC addresses from accessing the Network. You can either manually add a MAC address or select the MAC address from the list of clients that are currently connected to the Broadband Router.

Congure MAC

Filtering:

MAC Address:

DHCP Client:

Clear:

Select Turn MAC Filtering Off, Turn MAC Filtering ON and ALLOW computers listed to access the network, or Turn MAC Filtering ON and DENY computers listed to access the network from the drop-down menu.

Enter the MAC address you would like to lter. To nd the MAC address on a computer, please refer to the Networking Basics section in this manual.

Select a DHCP client from the drop-down menu and click << to copy that MAC Address.

Click to remove the MAC address.

55D-Link DIR-653 User Manual

Section 3 - Conguration

Access Control

The Access Control section allows you to control access in and out of your network. Use this feature as Parental Controls to only grant access to

approved sites, limit web access based on time or dates, and/or block access from applications like P2P utilities or games.

Add Policy:

Click Next to continue with the wizard.

Click the Add Policy button to start the Access Control Wizard.

Access Control Wizard

56D-Link DIR-653 User Manual

Section 3 - Conguration

Enter a name for the policy and then click Next to continue.

Select a schedule (I.E. Always) from the drop-down menu and then click Next to continue.

Enter the following information and then click Next to continue.

• Address Type - Select IP address, MAC address, or Other Machines.

• IP Address - Enter the IP address of the computer you want to apply the rule to.

57D-Link DIR-653 User Manual

Section 3 - Conguration

Select the ltering method and then click Next to continue.

If you selected Apply Advanced Port Filters, then enter the rule:

Enable - Check to enable the rule. Name - Enter a name for your rule. Dest IP Start - Enter the starting IP address. Dest IP End - Enter the ending IP address. Protocol - Select the protocol. Dest Port Start - Enter the starting port number. Dest Port End - Enter the ending port number.

To enable web logging, click Enable.

Click Save to save the access control rule.

58D-Link DIR-653 User Manual

Section 3 - Conguration

Website Filters

Website Filters are used to deny LAN computers from accessing specic web sites by the URL or domain. A URL is a specially formatted text string that denes a location on the Internet. If any part of the URL contains the blocked word, the site will not be accessible and the web page will not display. To use this feature, enter the text string to be blocked and click Save Settings. The text to be blocked will appear in the list. To delete the text, click Clear the List Below.

Congure Website

Filter Below:

Website URL/Domain:

Select Allow or Deny.

Enter the keywords or URLs that you want to allow or deny. Click Save Settings.

59D-Link DIR-653 User Manual

Section 3 - Conguration

Inbound Filters

The Inbound Filter option is an advanced method of controlling data received from the Internet. With this feature you can congure inbound data ltering rules that control data based on an IP address range. Inbound Filters can be used with Virtual Server, Port Forwarding, or Remote Administration features.

Name:

Action:

Enable:

Source IP Start:

Source IP End:

Add:

Inbound Filter

Rules List:

Enter a name for the inbound lter rule.

Select Allow or Deny.

Check to enable rule.

Enter the starting IP address. Enter 0.0.0.0 if you do not want to specify an IP range.

Enter the ending IP address. Enter 255.255.255.255 if you do not want to specify and IP range.

Click the Add button to add the rule. You must click Save Settings at the top to save the settings.

This section will list any rules that are created. You may click the Edit icon to change the settings or enable/disable the rule, or click the Delete icon to remove the rule.

60D-Link DIR-653 User Manual

Section 3 - Conguration

Firewall Settings

A rewall protects your network from the outside world. The D-Link DIR-653 oers a rewall type functionality. The SPI feature helps prevent cyber attacks. Sometimes you may want a computer exposed to the outside world for certain types of applications. If you choose to expose a computer, you cam enable DMZ. DMZ is short for Demilitarized Zone. This option will expose the chosen computer completely to the outside world.

Enable SPI:

NAT Endpoint

Filtering:

Enable DMZ Host:

SPI (Stateful Packet Inspection, also known as dynamic packet ltering) helps to prevent cyber attacks by tracking more state per session. It validates that the trac passing through the session conforms to the protocol.

Select one of the following for TCP and UDP ports: Endpoint Independent - Any incoming trac sent to an open port will be forwarded to the application that opened the port. The port will close if idle for 5 minutes.

Address Restricted - Incoming trac must match the IP address of the outgoing connection.

Address + Port Restriction - Incoming trac must match the IP address and port of the outgoing connection.

If an application has trouble working from behind the router, you can expose one computer to the Internet and run the application on that computer.

Note: Placing a computer in the DMZ may expose that computer to a variety of security risks. Use of this option is only recommended as a last resort.

IP Address:

Specify the IP address of the computer on the LAN that you want to have unrestricted Internet communication. If this computer obtains it’s IP address automatically using DHCP, be sure to make a static reservation on the Basic > DHCP page so that the IP address of the DMZ machine does not change.

61D-Link DIR-653 User Manual

Section 3 - Conguration

Application Level Gateway Conguration

Here you can enable or disable ALG’s. Some protocols and applications require special handling of the IP payload to make them work with network address translation (NAT). Each ALG provides special handling for a specic protocol or application. A number of ALGs for common applications are enabled by default.

Allows multiple machines on the LAN to connect to their corporate network using PPTP protocol.

PPTP:

IPSEC (VPN):

RTSP:

SIP:

Allows multiple VPN clients to connect to their corporate network using IPSec. Some VPN clients support traversal of IPSec through NAT. This ALG may interfere with the operation of such VPN clients. If you are having trouble connecting with your corporate network, try turning this ALG o. Please check with the system adminstrator of your corporate network whether your VPN client supports NAT traversal.

Allows applications that use Real Time Streaming Protocol to receive streaming media from the internet. QuickTime and Real Player are some of the common applications using this protocol.

Allows devices and applications using VoIP (Voice over IP) to communicate across NAT. Some VoIP applications and devices have the ability to discover NAT devices and work around them. This ALG may interfere with the operation of such devices. If you are having trouble making VoIP calls, try turning this ALG o.

62D-Link DIR-653 User Manual

Section 3 - Conguration

Routing

The Routing option is an advanced method of customizing specic routes of data through your network.

Destination IP:

Netmask:

Gateway:

Metric:

Interface:

Enter the IP address of packets that will take this route.

Enter the netmask of the route, please note that the octets must match your destination IP address.

Enter your next hop gateway to be taken if this route is used.

The route metric is a value from 1 to 16 that indicates the cost of using this route. A value 1 is the lowest cost and 15 is the highest cost.

Select the interface that the IP packet must use to transit out of the router when this route is used.

63D-Link DIR-653 User Manual

Section 3 - Conguration

Advanced Wireless Settings

Transmit Power:

Beacon Period:

RTS Threshold:

Fragmentation

Threshold:

DTIM Interval:

WMM Function:

Short GI:

Set the transmit power of the antennas.

Beacons are packets sent by an Access Point to synchronize a wireless network. Specify a value. 100 is the default setting and is recommended.

This value should remain at its default setting of 2432. If inconsistent data ow is a problem, only a minor modication should be made.

The fragmentation threshold, which is specied in bytes, determines whether packets will be fragmented. Packets exceeding the 2346 byte setting will be fragmented before transmission. 2346 is the default setting.

(Delivery Trac Indication Message) 3 is the default setting. A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages.

WMM is QoS for your wireless network. This will improve the quality of video and voice applications for your wireless clients.

Check this box to reduce the guard interval time therefore increasing the data capacity. However, it’s less reliable and may create higher data loss.

64D-Link DIR-653 User Manual

Section 3 - Conguration

Wi-Fi Protected Setup (WPS)

Wi-Fi Protected Setup (WPS) System is a simplied method for securing your wireless network during the “Initial setup” as well as the “Add New Device” processes. The Wi-Fi Alliance (WFA) has certied it across dierent products as well as manufactures. The process is just as easy, as depressing a button for the Push-Button Method or correctly entering the 8-digit code for the Pin-Code Method. The time reduction in setup and ease of use are quite benecial, while the highest wireless Security setting of WPA2 is automatically used.

Enable:

Lock Wireless

Security Settings:

PIN Settings:

Current PIN:

Reset PIN to

Default:

Generate New PIN:

Add Wireless

Station:

Enable the Wi-Fi Protected Setup feature.

Locking the wireless security settings prevents the settings from being changed by the Wi-Fi Protected Setup feature of the router. Devices can still be added to the network using Wi-Fi Protected Setup. However, the settings of the network will not change once this option is checked.

A PIN is a unique number that can be used to add the router to an existing network or to create a new network. The default PIN may be printed on the bottom of the router. For extra security, a new PIN can be generated. You can restore the default PIN at any time. Only the Administrator (“admin” account) can change or reset the PIN.

Shows the current value of the router’s PIN.

Restore the default PIN of the router.

Create a random number that is a valid PIN. This becomes the router’s PIN. You can then copy this PIN to the user interface of the registrar. This Wizard helps you add wireless devices to the wireless network.

The wizard will either display the wireless network settings to guide you through manual conguration, prompt you to enter the PIN for the device, or ask you to press the conguration button on the device. If the device supports Wi-Fi Protected Setup and has a conguration button, you can add it to the network by pressing the conguration button on the device and then the on the router within 60 seconds. The status LED on the router will ash three times if the device has been successfully added to the network.

Add Wireless

Device Wizard:

There are several ways to add a wireless device to your network. A “registrar” controls access to the wireless network. A registrar only allows devices onto the wireless network if you have entered the PIN, or pressed a special Wi-Fi Protected Setup button on the device. The router acts as a registrar for the network, although other devices may act as a registrar as well.

Start the wizard.

65D-Link DIR-653 User Manual

Section 3 - Conguration

Advanced Network Settings

UPnP Settings:

PPPoE Pass Through:

WAN Ping:

WAN Port Speed:

Multicast streams:

To use the Universal Plug and Play (UPnP™) feature click on Enabled. UPNP provides compatibility with networking equipment, software and peripherals.

Check PPPoe Pass Through to allow PPPoE authentication to the LAN Clients as an authenticating point.

Unchecking the box will not allow the DIR-653 to respond to pings. Blocking the Ping may provide some extra security from hackers. Check the box to allow the Internet port to be “pinged”.

You may set the port speed of the Internet port to 10Mbps, 100Mbps, 1000Mbps, or 10/100/1000Mbps Auto. Some older cable or DSL modems may require you to set the port speed to 10Mbps.

Check the box to allow multicast trac to pass through the router from the Internet.

Internet Ping Block Internet Port Speed Multicast Streams

UPnP

66D-Link DIR-653 User Manual

Section 3 - Conguration

Guest Zone

The Guest Zone feature will allow you to create temporary zones that can be used by guests to access the Internet. These zones will be separate from your main wireless network.

Enable Guest Zone:

Schedule:

Wireless Network

Name:

Enable Routing

Between Zones:

Security Mode:

Check to enable the Guest Zone feature.

The schedule of time when the Guest Zone will be active. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.

Enter a wireless network name (SSID) that is dierent from your main wireless network.

Check to allow network connectivity between the dierent zones created.

Select the type of security or encryption you would like to enable for the guest zone.

67D-Link DIR-653 User Manual

Section 3 - Conguration

IPv6 Firewall

This section may be used to allow or deny trac from passing through the device. It works the same way as IP Filters with additional settings. Users can create more detailed rules for the device.

68D-Link DIR-653 User Manual

Section 3 - Conguration

IPv6 Routing

This page allows you to specify custom routes that determine how data is moved around your network.

69D-Link DIR-653 User Manual

Section 3 - Conguration

Administrator Settings

This page will allow you to change the Administrator and User passwords. You can also enable Remote Management. There are two accounts that

can access the management interface through the web browser. The accounts are admin and user. Admin has read/write access while user has

read-only access. User can only view the settings but cannot make any changes. Only the admin account has the ability to change both admin and user account passwords.

Admin Password:

User Password:

Gateway Name:

Enable Graphical

Authentication:

Enable HTTPS

Server:

Enable Remote

Management:

Enter a new password for the Administrator Login Name. The administrator can make changes to the settings.

Enter the new password for the User login. If you login as the User, you cannot change the settings (you can only view them). Enter a name for the DIR-653 router.

Enter a name for the router.

Enables a challenge-response test to require users to type letters or numbers from a distorted image displayed on the screen to prevent online hackers and unauthorized users from gaining access to your router’s network settings.

Check to enable HTTPS to connect to the router securely.

Remote management allows the DIR-653 to be congured from the Internet by a web browser. A username and password is still required to access the Web-Management interface. In general, only a member of your network can browse the built-in web pages to perform Administrator tasks. This feature enables you to perform Administrator tasks from the remote (Internet) host. The port number used to access the DIR-653.

Example: http://x.x.x.x:8080 whereas x.x.x.x is the Internet IP

address of the DIR-653 and 8080 is the port used for the Web Management interface.

Remote Admin

Inbound Filter:

Details:

If you have enabled HTTPS Server and checked Use HTTPS, you must enter https:// as part of the URL to access the router remotely.

This section will list any rules that are created. You may click the

Edit icon to change the settings or enable/disable the rule, or

click the Delete icon to remove the rule.

70D-Link DIR-653 User Manual

Section 3 - Conguration

Time Settings

The Time Conguration option allows you to congure, update, and maintain the correct time on the internal system clock. From this section you can set the time zone that you are in and set the Time Server. Daylight Saving can also be congured to automatically adjust the time when needed.

Time Zone:

Daylight Saving:

Enable NTP

Server:

NTP Server Used:

Manual:

Select the Time Zone from the drop-down menu.

To select Daylight Saving time manually, select enabled or disabled, and enter a start date and an end date for daylight saving time.

NTP is short for Network Time Protocol. NTP synchronizes computer clock times in a network of computers. Check this box to use a NTP server. This will only connect to a server on the Internet, not a local server.

Enter the NTP server or select one from the drop-down menu.

To manually input the time, enter the values in these elds for the Year, Month, Day, Hour, Minute, and Second and then click Set Time. You can also click Copy Your Computer’s Time Settings.

71D-Link DIR-653 User Manual

Section 3 - Conguration

SysLog

The Broadband Router keeps a running log of events and activities occurring on the Router. You may send these logs to a SysLog server on your network.

Enable Logging to

SysLog Server:

SysLog Server IP

Address:

Check this box to send the router logs to a SysLog Server.

The address of the SysLog server that will be used to send the logs. You may also select your computer from the drop-down menu (only if receiving an IP address from the router via DHCP).

72D-Link DIR-653 User Manual

Section 3 - Conguration

Email Settings

The Email feature can be used to send the system log les, router alert messages, and rmware update notication to your email address.

Enable Email

Notication:

From Email Address:

To Email Address:

SMTP Server

Address:

Enable

Authentication:

Account Name:

Password:

On Log Full:

On Schedule:

When this option is enabled, router activity logs are e-mailed to a designated email address.

This email address will appear as the sender when you receive a log le or rmware upgrade notication via email.

Enter the email address where you want the email sent.

Enter the SMTP server address for sending email. If your SMTP server requires authentication, select this option.

Check this box if your SMTP server requires authentication.

Enter your account for sending email.

Enter the password associated with the account. Re-type the password associated with the account.

When this option is selected, logs will be sent via email when the log is full.

Selecting this option will send the logs via email according to schedule.

Schedule:

This option is enabled when On Schedule is selected. You can select a schedule from the list of dened schedules. To create a schedule, go to Tools > Schedules.

73D-Link DIR-653 User Manual

Section 3 - Conguration

System Settings

Save Settings to

Local Hard Drive:

Load Settings

from Local Hard

Drive:

Restore to Factory

Default Settings:

Reboot Device:

Use this option to save the current router conguration settings to a le on the hard disk of the computer you are using. First, click the Save button. You will then see a le dialog, where you can select a location and le name for the settings.

Use this option to load previously saved router conguration settings. First, click the Browse button to locate a previously saved conguration le and then click the Load button to transfer those settings to the router.

This option will restore all conguration settings back to the settings that were in eect at the time the router was shipped from the factory. Any settings that have not been saved will be lost, including any rules that you have created. If you want to save the current router conguration settings, use the Save button above.

Click to reboot the router.

74D-Link DIR-653 User Manual

Section 3 - Conguration

Update Firmware

You can upgrade the rmware of the Router here. Make sure the rmware you want to use is on the local hard drive of the computer. Click on Browse

to locate the rmware le to be used for the update. Please check the D-Link support site for rmware updates at http://support.dlink.com. You can

download rmware upgrades to your hard drive from the D-Link support site.

Firmware Upgrade:

Browse:

Notications

Options:

Click on Check Online Now for Latest Firmware Version to nd out if there is an updated rmware; if so, download the new rmware to your hard drive.

After you have downloaded the new rmware, click Browse to locate the rmware update on your hard drive. Click Upload to complete the rmware upgrade.

Check Automatically Check Online for Latest Firmware Version to have the router check automatically to see if there is a new rmware upgrade.

Check Email Notication of Newer Firmware Version to have the router send an email when there is a new rmware available.

75D-Link DIR-653 User Manual

Section 3 - Conguration

DDNS

The DDNS feature allows you to host a server (Web, FTP, Game Server, etc…) using a domain name that you have purchased (www.whateveryournameis. com) with your dynamically assigned IP address. Most broadband Internet Service Providers assign dynamic (changing) IP addresses. Using a DDNS service provider, your friends can enter in your domain name to connect to your server no matter what your IP address is.

DDNS:

Server Address:

Host Name:

Username or Key:

Password or Key:

Timeout:

Status:

Enable:

IPv6 Address:

Host Name:

Dynamic Domain Name System is a method of keeping a domain name linked to a changing IP Address. Check the box to enable DDNS.

Choose your DDNS provider from the drop-down menu.

Enter the Host Name that you registered with your DDNS service provider.

Enter the Username for your DDNS account.

Enter the Password for your DDNS account.

Enter a time (in hours).

Displays the status of your DDNS connection.

DDNS for IPv6 Hosts

Check the box to enable DDNS for IPv6 Hosts.

Enter the IPv6 address of your computer/server in your local network.

You can click the << button and select a computer/server from the drop-down list.

Enter the IPv6 Host Name that you registered with your DDNS service provider.

IPv6 DDNS List:

Enable:

Host Name:

IPv6 Address:

Edit/Delete:

Once you save your entry, the IPv6 DDNS host information will be displayed here.

Check to enable the entry.

Displays the name of your IPv6 DDNS host.

Displays the IPv6 address of your computer/server associated with the IPv6 DDNS host.

Click the edit icon to make changes to the entry or click the delete icon to remove the entry.

76D-Link DIR-653 User Manual

Section 3 - Conguration

System Check

Ping Test:

Ping Results:

The Ping Test is used to send Ping packets to test if a computer is on the Internet. Enter the IP Address that you wish to Ping, and click Ping.

The results of your ping attempts will be displayed here.

77D-Link DIR-653 User Manual

Section 3 - Conguration

Schedules

Name:

Days:

Time:

Save:

Schedule Rules List:

Enter a name for your new schedule.

Select a day, a range of days, or All Week to include every day.

Check All Day - 24hrs or enter a start and end time for your schedule.

Click Save to save your schedule. You must click Save Settings at the top for your schedules to go into eect.

The list of schedules will be listed here. Click the Edit icon to make changes or click the Delete icon to remove the schedule.

78D-Link DIR-653 User Manual

Section 3 - Conguration

Device Information

This page displays the current information for the DIR-653. It will display the LAN, WAN (Internet), and Wireless information.

If your Internet connection is set up for a Dynamic IP address then a Release button and a Renew button will be displayed. Use Release to disconnect from your ISP and use Renew to connect to your ISP.

If your Internet connection is set up for PPPoE, a Connect button and a Disconnect button will be displayed. Use Disconnect to drop the PPPoE connection and use Connect to establish the PPPoE connection.

General:

WAN:

LAN:

Wireless LAN:

LAN Computers:

IGMP Multicast

Memberships:

Displays the router’s time and rmware version.

Displays the MAC address and the public IP settings for the router.

Displays the MAC address and the private (local) IP settings for the router.

Displays the wireless MAC address and your wireless settings such as SSID and Channel.

Displays computers and devices that are connected to the router via Ethernet and that are receiving an IP address assigned by the router (DHCP).

Displays the Multicast Group IP Address.

79D-Link DIR-653 User Manual

Section 3 - Conguration

Log

The router automatically logs (records) events of possible interest in it’s internal memory. If there isn’t enough internal memory for all events, logs of older events are deleted but logs of the latest events are retained. The Logs option allows you to view the router logs. You can dene what types of events you want to view and the level of the events to view. This router also has external Syslog Server support so you can send the log les to a computer on your network that is running a Syslog utility.

What to View:

View Levels:

Apply Log Settings:

Refresh:

Clear:

Email Now:

Save Log:

You can select the types of messages that you want to display from the log. Firewall & Security, System, and Router Status messages can be selected.

There are three levels of message importance: Informational, Warning, and Critical. Select the levels that you want displayed in the log.

Will lter the log results so that only the selected options appear.

Updates the log details on the screen so it displays any recent activity.

Clears all of the log contents.

This option will send a copy of the router log to the email address congured in the Tools > Email screen.

This option will save the router to a log le on your computer.

80D-Link DIR-653 User Manual

Section 3 - Conguration

Stats

The screen below displays the Trac Statistics. Here you can view the amount of packets that pass through the DIR-653 on both the Internet and the LAN ports. The trac counter will reset if the device is rebooted.

Active Sessions

81D-Link DIR-653 User Manual

Section 3 - Conguration

Wireless

The wireless client table displays a list of current connected wireless clients. This table also displays the connection time and MAC address of the connected wireless clients.

82D-Link DIR-653 User Manual

Section 3 - Conguration

IPv6

The IPv6 page displays a summary of the Router’s IPv6 settings and lists the IPv6 address and host name of any IPv6 clients.

In the IPv6 Connection Information section, more information about the IPv6 connection will be displayed. Information like the connection type, gateway address, Link-Local address, DNS Servers, and more.

In the LAN IPv6 Computers section, a list of actively connected LAN IPv6 computers will be displayed.

IPv6 Routing

This page displays IPv6 routing details congured for your router.

83D-Link DIR-653 User Manual

Section 3 - Conguration

Support

84D-Link DIR-653 User Manual

Section 4 - Security

Wireless Security

This section will show you the dierent levels of security you can use to protect your data from intruders. The DIR-653 oers the following types of security:

• WPA2™ (Wi-Fi Protected Access 2) • WPA2-PSK (Pre-Shared Key)

™

• WPA

WPA, or Wi-Fi Protected Access, is a Wi-Fi standard that was designed to improve the security features of WEP (Wired Equivalent Privacy).

The 2 major improvements over WEP:

• Improved data encryption through the Temporal Key Integrity Protocol (TKIP). TKIP scrambles the keys using a hashing algorithm

(Wi-Fi Protected Access) • WPA-PSK (Pre-Shared Key)

What is WPA?

and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered with. WPA2 is based on 802.11i and uses Advanced Encryption Standard (AES) instead of TKIP.

• User authentication, which is generally missing in WEP, through the extensible authentication protocol (EAP). WEP regulates

access to a wireless network based on a computer’s hardware-specic MAC address, which is relatively simple to be snied out and stolen. EAP is built on a more secure public-key encryption system to ensure that only authorized network users can access the network.

WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wireless connection. The key is an alpha-numeric password between 8 and 63

characters long. The password can include symbols (!?*&_) and spaces. This key must be the exact same key entered on your wireless router or access point.

WPA/WPA2 incorporates user authentication through the Extensible Authentication Protocol (EAP). EAP is built on a more secure public key encryption

system to ensure that only authorized network users can access the network.

85D-Link DIR-653 User Manual

Section 4 - Security

Wireless Security Setup Wizard

To run the security wizard, click on Setup at the top and then click Launch Wireless Security Setup Wizard.

Click Next to continue.

86D-Link DIR-653 User Manual

Section 4 - Security

The following screen will show you your Pre-Shared Key to enter on your wireless clients.

Click Save to nish the Security Wizard.

If you selected WPA-Enterprise, the RADIUS information will be displayed. Click Save to nish the Security Wizard.

87D-Link DIR-653 User Manual

Section 4 - Security

Congure WPA-Personal (PSK)

It is recommended to enable encryption on your wireless router before your wireless network adapters. Please establish wireless connectivity before enabling encryption. Your wireless signal may degrade when enabling encryption due to the added overhead.

1. Log into the web-based conguration by opening a web browser and entering the IP address of the router (192.168.0.1). Click on Setup and then click Wireless Settings on the left side.

2. Next to Security Mode, select WPA-Personal.

3. Next to WPA Mode, select Auto, WPA2 Only, or WPA Only. Use Auto if you have wireless clients using both WPA and WPA2.

4. Next to Group Key Update Interval, enter the amount of time before the group key used for broadcast and multicast data is changed (3600 is default).

5. Next to Pre-Shared Key, enter a key (passphrase). The key is entered as a pass-phrase in ASCII format at both ends of the wireless connection. The pass-phrase must be between 8-63 characters.

6. Click Save Settings to save your settings. If you are conguring the router with a wireless adapter, you will lose connectivity until you enable WPA-PSK on your adapter and enter the same passphrase as you did on the router.

88D-Link DIR-653 User Manual

Section 4 - Security

Congure WPA-Enterprise (RADIUS)

1. Log into the web-based conguration by opening a web browser and entering the IP address of the router (192.168.0.1). Click on Setup and then click Wireless Settings on the left side.

2. Next to Security Mode, select WPA-Enterprise.

3. Next to WPA Mode, select Auto, WPA2 Only, or WPA Only. Use Auto if you have wireless clients using both WPA and WPA2.

4. Next to Group Key Update Interval, enter the amount of time before the group key used for broadcast and multicast data is changed (3600 is default).

5. Next to Authentication Timeout, enter the amount of time before a client is required to re-authenticate (60 minutes is default).

6. Next to RADIUS Server IP Address enter the IP Address of your RADIUS server.

7. Next to RADIUS Server Port, enter the port you are using with your RADIUS server. 1812 is the default port.

8. Next to RADIUS Server Shared Secret, enter the security key.

9. If the MAC Address Authentication box is selected then the user will need to connect from the same computer whenever logging into the wireless network.

89D-Link DIR-653 User Manual

Section 4 - Security

10. Click Advanced to enter settings for a secondary RADIUS Server.

11. Click Apply Settings to save your settings.

90D-Link DIR-653 User Manual

Section 4 - Security

Using Windows® 7 and WPS for Wireless Conguration

The following steps allow you to congure your DIR-653 wireless network settings using Windows® 7 through WPS.

1. Click the Start button and select Computer from the Start menu.

2. Click the Network option.

91D-Link DIR-653 User Manual

Section 4 - Security

3. Double-click the DIR-653 router.

4. Input the WPS PIN number (displayed in the Advanced > Wi-Fi Protected

Setup section in the Router’s Web UI) and click Next.

DIR-653

92D-Link DIR-653 User Manual

Section 4 - Security

5. Type a name for your wireless network.

6. To congure advanced settings, click the

Click Next to continue.

icon.

93D-Link DIR-653 User Manual

Section 4 - Security

7. The following window will appear while the Router is being congured.

Wait for the conguration to complete.

8. After conguration is complete, a window will appear that your wireless

network has been set up successfully.

Make a note of the security key as you may need to provide this security key

when adding an older wireless device to the network in the future.

Click Close to complete WPS setup.

94D-Link DIR-653 User Manual

Section 4 - Security

Connect to a Wireless Network

Using Windows® 7

It is recommended to enable wireless security (WPA/WPA2) on your wireless router or access point before conguring your wireless adapter. If you

are joining an existing network, you will need to know the security key or passphrase being used.

1. Click on the wireless icon in your system tray (lower-right corner).

2. The utility will display any available wireless networks in your area.

95D-Link DIR-653 User Manual

Section 4 - Security

3. Highlight the wireless network (SSID) you would like to connect to and click

the Connect button.

If you get a good signal but cannot access the Internet, check your TCP/IP

settings for your wireless adapter. Refer to the Networking Basics section in this manual for more information.

4. The following window appears while your computer tries to connect to the

router.

96D-Link DIR-653 User Manual

D Link IR653A1 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Preface

Manual Revisions

Trademarks

Product Overview

Package Contents

System Requirements

Introduction

Features

Hardware Overview

Connections

Hardware Overview

Front View

LEDs

Installation

Before you Begin

Wireless Installation Considerations

Getting Started

Quick Setup Wizard

Setup Wizard

Internet Connection

Wireless Settings

Dynamic (Cable)

Internet Setup

PPPoE (DSL)

PPTP

L2TP

Static (assigned by ISP)

DS-Lite

Wireless Settings

Network Settings

DHCP Server Settings

DHCP Reservation

IPv6 Internet Connection

IPv6 Internet Connection Setup Wizard

IPv6 Manual Setup

Auto Detection

Static IPv6

PPPoE

IPv6 in IPv4 Tunneling

6 to 4 Tunneling

Link-Local Connectivity

Virtual Server

Port Forwarding

Application Rules

QoS Engine

Network Filters

Access Control

Access Control Wizard

Website Filters

Inbound Filters

Firewall Settings

Routing

Advanced Wireless Settings

Wi-Fi Protected Setup (WPS)

Advanced Network Settings

UPnP

Guest Zone

IPv6 Firewall

IPv6 Routing

Administrator Settings

Time Settings

SysLog

Email Settings

System Settings

Update Firmware

DDNS

System Check

Schedules

Device Information

Stats

Active Sessions

Wireless

IPv6

IPv6 Routing

Support

Wireless Security