D-Link DI-784 User manual

11a/11g Dualband Wireless
Manual
Building Networks for People
D-Link Air Premier AG DI-784
108Mbps Router

2
Contents
PackageContents ................................................................................3
Introduction............................................................................................4
Connections..........................................................................................5
Features ...............................................................................................6
LEDs ....................................................................................................7
Wireless Basics....................................................................................8
GettingStarted....................................................................................10
UsingtheConfigurationMenu..............................................................11
NetworkingBasics ..............................................................................44
Troubleshooting...................................................................................59
TechnicalSpecifications ......................................................................65
FrequentlyAskedQuestions................................................................68
ContactingTechnicalSupport ..............................................................96
Warranty..............................................................................................97
Registration ......................................................................................100

3
Contents of Package:
D-Link Air Premier AG DI-784 11a/11g Wireless 108Mbps
Router
PowerAdapter – 5V DC, 3.0A
ManualonCD
QuickInstallationGuide
Ethernet Cable
Package Contents
Computer with Windows, Macintosh, or Linux-based
operating system with an installed Ethernet adapter
Note:Usingapowersupplywithadifferentvoltageratingthantheoneincludedwiththe
DI-784willcausedamage and void the warranty for this product.
If any of the above items are missing, please contact your reseller.
System Requirements For Configuration:







4
Introduction
At up to fifteen times the speed of previous wireless devices, you can work faster and
moreefficiently,increasingproductivity.WiththeDI-784,bandwidth-intensiveapplications
likegraphicsormultimedia will benefit significantly because large files are able tomove
across the network quickly. This versatile wireless router also features four times the
numberofnon-overlappingchannelsthanadevicethatsupportsonly 802.11g,somore
users can access the network.
Supportfor all three standards (802.11g; 802.11a;802.11b) means that youcan grow
yournetworkwithouthavingto worryaboutlegacywirelessequipmentbeingincompatible
with newer compliant devices from other manufacturers. This also allows network
administratorsto partition the usage of thedualband by segmentingusers and creating
specialaccessprivilege networks for classifieddocumenttransferandcommunications.
With the DI-784 you can securely connect to wireless clients on the network using
802.1x for wireless user authentication, as well as WPA (Wi-Fi Protected Access )
providingyou a much higher levelof securityfor yourdata andcommunications than
haspreviously been available.
Through its easy-to-use Web-based user interface, the DI-784 lets you control the
informationthat is accessibletothoseon the wirelessnetwork,whetherfrom the Internet
orfromyourcompany’s server:
Content Filtering –Easilyappliedcontentfiltering based on MACAddress, IPAddress,
URLand/orDomainName.
Filter Scheduling – Filters can be scheduled to be active on certain days or for a
durationof hours or minutes.
Network Address Translation – NAT protects the DI-784 and its users from outside
intrudersgaining access to your privatenetwork
VPN Multiple/Concurrent Sessions – Supports multiple and concurrent IPSec and
PPTP sessions, so multiple users behind the DI-784 can access corporate networks
throughvarious VPN clients more securely.
TM

5
Connections - Back Panel of Unit
All Ethernet Ports (WAN and LAN)
areautoMDI/MDIX,meaningyoucan
use either a straight-through or a
crossover Ethernet cable.
AutoMDI/MDIX
LAN ports
automatically
sense the cable
typewhen
connecting to
Ethernet-enabled
computers.
TheAuto MDI/MDIX
WAN port is the
connection for the
Ethernet cable to
the Cable or DSL
modem
Receptor
for the
Power
Adapter
Pressing the
Reset Button
restores the
router to its
original factory
default settings.

6
Features
TM
Connectsmultiple computers to aBroadband (Cableor DSL)modem to
sharetheInternet connection
IPFiltering
AdvancedFirewall features
DHCPserversupportedenables all networked computers to automatically
receiveIP addresses
Web-basedinterface forManagingandConfiguring
Access Control to manage users on the network

Supportsspecialapplicationsthatrequiremultiple connections
Equippedwith410/100 Ethernet ports,1 WANport,AutoMDI/MDIX
URLFiltering
DomainBlocking
Scheduling
SupportsNATwith VPN pass-through, providing added security
MACFiltering
Operatesin the 2.4GHz and 5GHz frequencyranges

User-friendlyconfiguration and diagnostic utilities
Utilizes OFDMtechnology (Orthogonal Frequency Division Multiplexing) to
ensurestrong wireless signals for both 802.11gand 802.11a
802.1xAuthentication inconjunctionwiththe RADIUS server verifies the
identity of would be clients

WPA (Wi Fi Protected Access ) authorizes and identifies users based on a
secret key that changes automatically at a regular interval, for example:
Backwardscompatiblewith the 802.11b standardto provide a wireless data
rate of up to 11Mbps

Fullycompatiblewith the 802.11aand802.11gstandardsto provide a wire-
less data rate of up to 54Mbps


TKIP (Temporal Key Integrity Protocol), in conjunction with a RADIUS
server,changesthetemporalkeyevery10,000packets,ensuringgreater
security
Pre-Shared Key mode means that the home user, without a RADIUS
server, can connect securelyvia a pre-shared key,vastlyimprovingthe
safety of communications on the network.

7
LEDs - Front Panel of Unit
LED stands for Light-Emitting Diode. The DI-784 has the following LEDs:
WLAN LEDs for11g
and11a wirelessnet-
worksegments.
A solid light indi-
cates that the
wireless segment is
ready.The LEDs
blinkduringwireless
datatransmission.
WAN LED
A solid light
indicatesconnec-
tion on the WAN
port.ThisLED
blinksduringdata
transmission.
Local
NetworkLEDs
A solid light indicates
a connection to an
Ethernet-enabled
computeronports1-
4. The LEDs blink
duringdatatransmis-
sion.
Status
Ablinking light
indicates that the
DI-784is ready.
Power
A solid light
indicatesaproper
connection to the
powersupply.

8
Wireless Basics
D-Link wireless products are based on industry standards to provide easy-to-use and
compatiblehigh-speedwirelessconnectivitywithinyourhome, businessorpublicaccess
wirelessnetworks. D-Link wireless products will allowyou access tothe datayou want,
whenandwhereyouwantit.Youwillbeabletoenjoythefreedomthatwirelessnetworking
brings.
A WLAN is a cellular computer network that transmits and receives data with radio
signals instead of wires. WLANs are used increasingly in both home and office
environments,andpublicareassuchasairports,coffeeshopsanduniversities.Innovative
ways to utilize WLAN technology are helping people to work and communicate more
efficiently. Increased mobility and the absence of cabling and other fixed infrastructure
haveproventobebeneficialformanyusers.
Wireless users can use the same applications they use on a wired network. Wireless
adapter cards used on laptop and desktop systems support the same protocols as
Ethernetadaptercards.
Peopleuse wireless LAN technology for manydifferent purposes:
Mobility - Productivity increases when people have access to data in any location
within the operating range of the WLAN. Management decisions based on real-time
informationcansignificantlyimproveworkerefficiency.
Low Implementation Costs –WLANs are easy to set up, manage, change and
relocate. Networks that frequently change can benefit from WLANs ease of
implementation. WLANs can operate in locations where installation of wiring may be
impractical.
Installation and Network Expansion - Installing a WLAN system can be fast
andeasy and can eliminatethe needto pull cablethrough wallsand ceilings.Wireless
technologyallows the network to go where wirescannot go -even outside thehome or
office.
Scalability –WLANs can be configured inavarietyoftopologiestomeettheneeds of
specific applications and installations. Configurations are easily changed and range
frompeer-to-peernetworkssuitablefor a small number of users to larger infrastructure
networksto accommodate hundreds or thousandsof users, dependingon the number
ofwirelessdevicesdeployed.
Inexpensive Solution - Wireless network devices are as competitively priced as
conventionalEthernet network devices.

9
Standards-Based Technology
The DI-784 Wireless Broadband Router utilizes the new 802.11g standard, in addition
tothe 802.11a and 802.11b standards.
The IEEE 802.11g standard is an extension of the 802.11b standard. It increases the
data rate up to 54 Mbps within the 2.4GHz band, utilizing OFDM technology.
Thismeansthatinmost environments, within the specified range of this device, you will
be able to transfer large files quickly or even watch a movie in MPEG format over your
network without noticeable delays. This technology works by transmitting high-speed
digitaldataoveraradiowaveutilizingOFDM(OrthogonalFrequencyDivisionMultiplexing)
technology. OFDM works by splitting the radio signal into multiple smaller sub-signals
thatare then transmitted simultaneously at differentfrequencies to the receiver. OFDM
reducesthe amount of crosstalk (interference) in signal transmissions.
.
Wireless Basics (continued)
Installation Considerations
The D-Link Air Premier AG DI-784 lets you access your network, using a wireless
connection, from virtually anywhere within its operating range. Keep in mind, however,
that the number, thickness and location of walls, ceilings, or other objects that the
wirelesssignalsmustpassthrough, may limit the range. Typicalrangesvarydepending
on the types of materials and background RF (radio frequency) noise in your home or
business. The key to maximizing wireless range is to follow these basic guidelines:
Keepthenumber of walls and ceilings betweentheDI-784andothernetwork
devices toa minimum - each wallor ceilingcan reduce yourD-Link wireless
product’s range from 3-90 feet (1-30 meters.) Position your devices so that
the number of walls or ceilings is minimized.
11
11
1
Be aware of the direct line between network devices. A wall that is 1.5 feet
thick (.5 meters), at a 45-degree angle appears to be almost 3 feet (1 meter)
thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position
devicesso that the signalwill travelstraight through awall orceiling (instead
ofat an angle) for betterreception.
22
22
2
Building Materials can impede the wireless signal - a solid metal door or
aluminumstuds mayhaveanegative effectonrange. Trytopositionwireless
devices and computers with wireless adapters so that the signal passes
throughdrywall or open doorways andnot other materials.
33
33
3
Keep your product away (at least 3-6 feet or 1-2 meters) from electrical
devicesor appliances that generate extremeRF noise.
44
44
4

10
Getting Started
Setting up a
Wireless
Infrastructure
Network
You will need broadband Internet access (a Cable or DSL-subscriber line into
yourhome or office)
Consultwithyour Cable or DSL provider forproperinstallationofthemodem
ConnecttheCable or DSL modem to theDI-784 Wireless Router (seethe
printedQuickInstallationGuideincludedwithyourrouter.)
If you are connecting a desktop computer to your network, install the D-Link Air
PremierAGDWL-AG530wirelessPCIadapterintoanavailablePCIsloton your
desktopcomputer.
(SeetheprintedQuick Installation Guide included with the network adapter.)
InstalltheD-LinkDWL-AG650SwirelessCardbusadapterintoalaptopcom-
puter. (See the printed Quick InstallationGuide included withthe DWL-AG660.)
InstalltheD-Link DFE-530TX+ wireless Cardbus adapter into adesktopcom-
puter.Thefour Ethernet LAN portsoftheDI-784 areAutoMDI/MDIXand will
workwith both Straight-throughandCrossover cable.
(Seethe printedQuick Installation Guide includedwith the DFE-530TX+.)
For a typical wireless setup at home (as shown above),
please do the following:
11
11
1
22
22
2
33
33
3
44
44
4
55
55
5
66
66
6

11
Whenever you want to configure your network or the DI-784, you can access the
Configuration Menu by opening the web-browser and typing in the IP Address of the
DI-784.TheDI-784defaultIPAddress is shown here:
Open the web browser
Type in the IP Address of
theRouter(http://192.168.0.1)
Type admin in the User
Name field
Leave the Password
blank
ClickOK

Using the Configuration Menu
Home > Wizard
The Home>Wizard screen will appear.
Please refer to the Quick Installation
Guidefor moreinformationregarding the
Setup Wizard.
Note: if you have changed the default IP Address
assigned to the DI-784, make sure to enter the
correct IP Address.

These buttons appear
onmostoftheconfigu-
ration screens in this
section.Pleaseclickon
the appropriate button
at the bottom of each
screen after you have
made a configuration
change.
http://192.168.0.1

12
Using the Configuration Menu (continued)
Home > Wireless > Open or Shared
SSID-
Wireless Settings-
Choose802.11aor 802.11g. Here,802.11ais selected.
802.11auses the 5GHz frequency range and cansupport speeds of upto 54Mbps.
802.11guses the 2.4GHz frequency range and can supportspeeds of up to 54Mbps.
802.11gis also backwards compatible with 802.11b.
“default” is the default setting.All devices on the network must share the same SSID. If
you change the default setting, the SSID may be up to 32 characters long.
52

13
Channel- 52 isthedefaultchannelfor802.11a.
6isthedefaultchannelfor 802.11g.
All devices on the network must share the same channel.
Authentication- Open System - communicates the key across the network
Hexadecimal digits consist of the numbers 0-9 and the letters A-F
ASCII (AmericanStandard Code for Information Interchange)is a codefor repre-
senting English letters as numbers from 0-127
Keys 1-4- Input up to 4 WEP keys; select the one you wish to use.
Key Type- Select HEX or ASCII
All the devices on your network must share the same wireless
settings in order to communicate.
WEP Encryption- Selectthelevelofencryption desired: 64, 128 or 152-bit
WEP- Select Enabled or Disabled. Disabled is the default setting.
Shared Key - devices must have identical WEP settings in or-
der to communicate in the network
WPA - Wi-Fi Protected Access authorizes and authenticates
users onto the wireless network. WPA uses stronger security
than WEP and is based on a key that changes automatically at
a regular interval. This mode requires a RADIUS server in the
network.
WPA-PSK - Pre-SharedKey mode means that the wireless cli-
ent and the router must have the same passphrase in order to
establish the wireless connection.A RADIUS server is not re-
quired with PSK.
Home > Wireless > Open or Shared (continued)
Using the Configuration Menu (continued)

14
Using the Configuration Menu (continued)
Home > Wireless > WPA
Authentication- WPA (Wi-Fi ProtectedAccess) is selected.
802.1x
Lifetime-
Wi-FiProtectedAccessauthorizesandauthenticatesusersonto
the wireless network. WPA uses stronger security than WEP
and is based on a key that changes automatically at a regular
interval.Thismoderequires the inclusion ofaRADIUSserverin
yournetwork.
802.1xAuthenticationisafirstline of defense against intrusion.
In theAuthentication process the server verifies the identity of
the client attempting to connect to the network. Unfamiliar cli-
ents are denied access.
Select5, 15,30minutes, or1or 8hours,or 1dayfortheauthen-
tication period. After this period expires, a new key will auto-
maticallybegenerated.
Radius Server 1- IP- Enter the IPAddress of the RADIUS server.
Port - Enter the port number that your RADIUS server uses for
Authentication.Thedefault setting of 1812 istheportsettingfor
manyRADIUSservers.
Shared Secret - Enter the Shared Secret. The Shared Secret
mustbe thesameas theSharedSecret onyourRADIUSserver.
Radius Server 2- Optional. If you have a second RADIUS server, you will
inputthesame information as shown above.
11
1

15
Using the Configuration Menu (continued)
Home > Wireless > WPA-PSK
Authentication-
Passphrase- Enter a passphrase for the router. The RADIUS server should
use the same passphrase (secret key) as the router.
WPA-PSK - Pre-SharedKey mode means that the wireless cli-
ent and the router must have the same passphrase in order to
establish the wireless connection.A RADIUS server is not re-
quired with PSK.
1

16
Using the Configuration Menu (continued)
Home > WAN > Dynamic IPAddress
Dynamic
IPAddress- Most Cable modem users will select this option to obtain an IP
Addressautomaticallyfrom their ISP (InternetServiceProvider).
Host Name- This is optional, but may be required by some ISPs. The host
name is the device name of the Router.
MACAddress- The default MAC Address is set to the WAN’s physical inter-
faceMAC address on theRouter.
Clone
MACAddress- Copy theMACaddress of theEthernetcardinstalledbyyourISP,
andreplacetheWANMACaddresswiththisEthernetcardMAC
address. Itisnotrecommendedthatyouchange thedefaultMAC
addressunlessrequiredbyyour ISP.
MTU- Enteran MTU value onlyif requiredby yourISP. Otherwise,
leave this section to its default setting of 1500. (MTU is short
forMaximum TransferUnit.Messages longer than the MTU
will be divided into smaller units for transmission).
Primary/Secondary
DNS- EnteraDNSAddress if you do not wish to use the one provided
by your ISP. (DNS is short for Domain Name System. It trans-
lates domain names into IP Addresses).

17
Using the Configuration Menu (continued)
Home > WAN > Static IP Address
Static IP Address-
IP Address-
Subnet Mask-
ISP
GatewayAddress-
Select this option to set static IP information provided to you
by your ISP.
InputtheIPAddress provided by your ISP
Input your Subnet mask. (All devices in the network must
havethesamesubnet mask.)
InputtheGatewayaddress
MTU- Enteran MTU value onlyif requiredby yourISP. Otherwise,
leave this section to its default setting of 1500. (MTU is short
forMaximum Transfer Unit. Messages longerthan the MTU
will be divided into smaller units for transmission).
Primary/
Secondary DNS- Enter a DNSAddress if you do not wish to use the one pro-
videdbyyourISP. (DNS is short for DomainNameSystem.It
translates domain names into IP Addresses).

18
Using the Configuration Menu (continued)
Home > WAN > PPPoE
User Name- YourPPPoEusernameprovidedbyyourISP.
Password- Your PPPoE passwordprovided by your ISP.
Retype Password- Re-enterthePPPoE password
Service Name- EntertheService Name provided byyourISP(optional).
IPAddress- This option is only available for Static PPPoE. Enter the static
IPAddress for the PPPoE connection.
PPPoE- Choose this option if your ISP uses PPPoE.
(Most DSL users
will select this option).
Dynamic PPPoE- receive an IP Address automaticsally from
yourISP.
Static PPPoE- you have an assigned (static) IPAddress.
Please
be sure
to remove any
existing PPPoE
client software
installed on your
computers.

19
Using the Configuration Menu (continued)
Home > WAN > PPPoE continued
Home > LAN
LAN is short for Lo-
cal Area Network.
This is considered
yourinternalnetwork.
Thesearethe IP set-
tingsoftheLANinter-
face for the DI-784.
These settings may
be referred to as Pri-
vate settings. You
maychange theLAN
IPAddressifneeded.
The LAN IPAddress
is private to your in-
ternal network and
cannot be seen on
theInternet.
Auto-reconnect- If enabled, the DI-784 will automatically connect to your ISP af-
ter your system is restarted or if the connection is dropped.
MTU- Maximum Transmission Unit-1472 is default-you may need to
change the MTU to conform with your ISP.
Subnet Mask- Thesubnetmask of the LAN interface.
Thedefaultsubnetmaskis255.255.255.0.
IPAddress- TheIPAddressof theLANinterface. The defaultIPAsddressis:
192.168.0.1.
Local Domain
Name- Thedomainnameassignedtothe router.
Maximum
Idle Time- Enter a maximum idle time during which Internet connection is
maintainedduring inactivity.Todisablethisfeature,enterzero
or enable Auto-reconnect.
Primary/Secondary
DNS- EnteraDNSAddress if you do not wish to use the one provided
by your ISP. (DNS is short for Domain Name System. It trans-
lates domain names into IP Addresses).

20
Using the Configuration Menu (continued)
Home > DHCP
DHCP standsfor
DynamicHost
ControlProtocol.The
DI-784hasabuilt-in
DHCPserver.The
DHCPServerwill
automaticallyassign
an IPAddress to the
computerson the
LAN/privatenetwork.
Be sure to set your
computers to be
DHCP clients by
settingtheirTCP/IP
settings to “Obtain
an IPAddress
Automatically.” When
you turn your
computers on, they
will automatically
loadtheproperTCP/
IPsettingsprovided
bytheDI-784.The
DHCPServerwill
automatically
allocatean unused IP
Address from the IP
Address pool to the
requestingcomputer.
You must specify the starting and ending address of the IPAddress pool.
Static & Dynamic
DHCP Client
Table- Displaysalist of StaticandDynamicDHCPclientsassigned by
therouter.
DHCP Server- Select Enabled or Disabled.
Starting
IPAddress- The startingIPAddress for the DHCPserver’sIPassignment.
Ending
IPAddress- The ending IPAddress for the DHCPserver’sIPassignment.
Lease Time- Thelengthoftime of the DHCP lease.
Static DHCP- Enable the Static DHCP server to assign the same IPAddress
toa MACAddressthat youspecifyhere.Thispreventstheprob-
lemssometimesencounteredwithchanging IPAddresses.