D-Link DI-804HV - Express ENwork Router User manual

Broadband Hardware
Manual
Building Networks forPeople
VPNRouter
DI-804HV
D-LinkTM
02212003

2
Contents
PackageContents................................................................................ 3
Introduction........................................................................................... 4
GettingStarted................................................................................... 10
UsingtheConfigurationMenu............................................................. 11
NetworkingBasics ............................................................................. 57
ResettoFactoryDefaultSettings........................................................ 83
TechnicalSpecifications..................................................................... 84
ContactingTechnicalSupport ............................................................. 85
WarrantyandRegistration................................................................... 86

3
ContentsofPackage:
D-LinkDI-804HVBroadband HardwareVPNRouter
PowerAdapter–5VDC
Ethernet(CAT5-UTP/Straight-Through)Cable
ManualonCD
Quick InstallationGuide
SystemRequirementsForConfiguration:
ComputerwithWindows,Macintosh,orLinux-based
operating systemwithan installed Ethernetadapter
n
InternetExplorerversion 6.xorNetscape Navigator
version 6.xand above,withJavaScriptenabled
n
Ethernet-Based CableorDSLModemn
n
PackageContents
Note:Usingapowersupplywithadifferentvoltage rating thanthe one includedwiththe
DI-804HVwillcausedamageand voidthewarrantyforthisproduct.
If anyofthe aboveitemsaremissing,pleasecontactyourreseller.
n
n
n
n

4
Introduction
The D-LinkDI-804HVisa4-portBroadband RouterwithVirtualPrivateNetwork
(VPN)functionality.It providesacompletesolutionforInternetsurfingandoffice
resourcessharing.It isan idealwaytoextend the reachand numberof
computersconnected toyournetwork.
Aftercompleting the stepsoutlined inthe Quick Installation Guide (included in
yourpackage)you will havethe abilitytoshareinformation and resources.
The DI-804HViscompatiblewithmostpopularoperating systems,including
Macintosh,Linuxand Windows,and can be integrated intoalarge network.

5
Connections
Features &Benefits
Receptor
forthe
Power
Adapter
LAN portsprovide
connectionstoEthernet-
enabled devices.
Broadband modemand IPsharing
Connectsmultiplecomputerstoabroadband(cableorDSL)modemtosurf
theInternet
n
Auto-sensingEthernetSwitch
Equippedwitha4-portauto-sensingEthernetswitch
n
n
n
n
n
VPNPass-Throughsupported
Supportspass-throughVPNsessionsandallowsyoutosetupVPNserver
andVPNclients
Firewall
Allunwanted packetsfromoutside intrudersareblockedtoprotectyour
network
DHCPserversupported
Allofthe networkedcomputerscanretrieveTCP/IPsettingsautomatically
fromtheDI-804HV
Web-basedconfiguration
Configurablethroughanynetworkedcomputer’s webbrowserusing
Netscape orInternetExplorer
Pressing the
ResetButton
restoresthe
routertoits
originalfactory
defaultsettings.
All Ethernetportsauto-sense
cabletypestoaccomodate
straight-through orcross-over
cable.
WAN portisthe
connection forthe
Ethernetcabletothe
CableorDSLmodem
COMportprovides
serialconnection for
dial-up analog modem.

6
Features &Benefitscontinued
nAccessControlsupported
Allowsyoutoassigndifferentaccessrightsfordifferentusers
nPacketfiltersupported
PacketFilterallowsyou tocontrolaccesstoanetworkbyanalyzing the
incoming andoutgoing packetsand lettingthempass orhaltingthembased
onthe IPaddressofthe sourceanddestination.
nVirtualServersupported
Enablesyou toexposeWWW,FTPand otherserviceson yourLANtobe
accessibletoInternetusers.
nUser-DefinableApplication Sensing Tunnel
Usercandefine the attributestosupportspecialapplicationsrequiring
multipleconnections,likeInternetgaming,video conferencing,Internet
telephonyandsoon.TheDI-804HVcan sensethe applicationtypeand
openamulti-porttunnelforit.
nDMZHostsupported
Allowsanetworked computertobe fullyexposedtothe Internet; this
functionisused whenthe special“application-sensing tunnelfeature”is
insufficienttoallowanapplicationtofunctioncorrectly
Introduction toBroadband
RouterTechnology
Arouterisadevicethatforwardsdatapacketsfromasourcetoadestination.Routers
forwarddatapacketsusingIPaddressesandnotaMACaddress.Arouterwillforward
datafromthe InternettoaparticularcomputeronyourLAN.
Theinformation thatmakesupthe Internetgetsmovedaroundusingrouters.When
youclickon alinkonawebpage,yousendarequesttoaservertoshowyouthe next
page.The informationthatissentandreceived fromyourcomputerismovedfromyour
computertothe serverusingrouters.Arouteralsodeterminesthe bestroutethatyour
informationshouldfollowtoensurethattheinformationisdeliveredproperly.
Aroutercontrolsthe amountofdatathatissentthroughyournetworkbyeliminating
informationthatshouldnotbe there.Thisprovidessecurityforthe computerscon-
nectedtoyourrouter,becausecomputersfromthe outside cannotaccess orsend
informationdirectlytoanycomputeron yournetwork.The routerdetermineswhich
computerthe informationshouldbeforwarded toandsendsit. If the information isnot
intendedforanycomputeronyournetwork,thedataisdiscarded.Thiskeepsany
unwantedorharmfulinformationfromaccessingordamagingyournetwork.

7
Introduction toFirewalls
Afirewallisadevicethatsitsbetweenyourcomputerandthe Internetthatprevents
unauthorizedaccess toorfromyournetwork.Afirewallcan beacomputerusing
firewallsoftwareoraspecialpieceofhardwarebuiltspecificallytoactasafirewall.In
mostcircumstances,afirewallisused topreventunauthorizedInternetusersfrom
accessingprivatenetworksorcorporateLAN'sandIntranets.
Afirewall watchesalloftheinformationmoving toandfromyournetworkandanalyzes
eachpieceofdata.Eachpieceofdataischeckedagainstasetofcriteriathatthe
administratorconfigures.If anydatadoesnotmeetthe criteria,thatdataisblocked
anddiscarded.Ifthe datameetsthecriteria,the dataispassedthrough.Thismethod
iscalled packetfiltering.
Afirewall canalsorunspecificsecurityfunctionsbasedonthe type ofapplicationor
type ofportthatisbeingused.Forexample,afirewall canbe configuredtoworkwith
anFTPorTelnetserver.OrafirewallcanbeconfiguredtoworkwithspecificUDPor
TCPportstoallowcertainapplicationsorgamestoworkproperlyoverthe Internet.
Introduction toLocalArea Networking
LocalArea Networking(LAN)isthe termusedwhenconnectingseveralcomputers
togetheroverasmall areasuchasabuilding orgroupofbuildings.LAN'scanbe
connectedoverlargeareas.AcollectionofLAN'sconnectedoveralargeareaiscalled
aWideArea Network(WAN).
ALANconsistsofmultiplecomputersconnectedtoeachother.Therearemanytypes
ofmediathatcanconnectcomputerstogether.The mostcommon mediaisCAT5
cable(UTPorSTPtwistedpairwire.)Onthe otherhand,wirelessnetworks do notuse
wires;insteadtheycommunicateoverradiowaves.Eachcomputermusthavea
NetworkInterfaceCard(NIC),whichcommunicatesthedatabetweencomputers.ANIC
isusuallya10Mbpsnetworkcard,or10/100Mbpsnetworkcard,orawirelessnetwork
card.
Mostnetworks usehardwaredevicessuchashubsorswitchesthateachcablecanbe
connectedtoinordertocontinue the connection betweencomputers.Ahub simply
takesanydataarrivingthrougheachportandforwardsthe datatoallotherports.A
switchismoresophisticated,inthataswitchcan determinethe destinationportfora
specificpieceofdata.Aswitchminimizesnetworktrafficoverheadandspeedsupthe
communicationoveranetwork.
Networks takesometimeinordertoplanand implementcorrectly.Therearemany
ways toconfigureyournetwork.You maywanttotakesometimetodetermine the
bestnetworkset-up foryourneeds.

8
Introduction toVirtualPrivateNetworking
VirtualPrivateNetworking(VPN)usesapubliclywired network(the Internet)tose-
curelyconnecttwodifferentnetworks asiftheywerethe samenetwork.Forexample,
anemployee canaccess thecorporatenetworkfromhomeusingVPN,allowingthe
employee toaccessfilesandprinters.Hereareseveraldifferentimplementationsof
VPNthatcanbe used.
Point-to-PointTunneling Protocol(PPTP)
PPTPusesproprietarymeansofconnectingtwoprivatenetworks overtheInternet.
PPTPisawayofsecuringthe informationthatiscommunicated betweennetworks.
PPTPsecuresinformationbyencryptingthe datainside ofapacket.
IPSecurity(IPSec)
IPSecprovidesamoresecurenetwork-to-networkconnectionacrosstheInternetora
WideArea Network(WAN).IPSecencryptsallcommunication betweenthe clientand
serverwhereasPPTPonlyencryptsthe datapackets.
BothoftheseVPNimplementationsareusedbecausethereisnotastandardforVPN
serversoftware.Becauseofthis,eachISPorbusiness canimplementitsownVPN
networkmakinginteroperabilityachallenge.

9
LEDS
LEDstandsforLight-Emitting Diode.The DI-804HVhasthe following LEDs
asdescribed below:
LEDLEDActivity
PowerAsteadylightindicates
aconnectiontoapowersourceapowersource
M2LEDLightsupwhenthe devicehasanInternet
connection
WANAsolidlightindicatesconnectiononthe WANport. ThisLEDblinks duringdata
transmission
COMAsolidlightindicatesaconnectiontoan
externaldial-up analogmodem
Flashesoncepersecond toindicatean
activesystem
LOCAL
NETWORK
(Ports1-4)
Asolidlightindicatesaconnectiontoan
Ethernet-enabledcomputeronports1-4.This
LEDblinks during datatransmission
M1LED

10
Foratypicalnetworksetup athome(as shownabove),please do the
following:
21
3
4
5
Getting Started
Pleaserefertothe following
sectionsofthismanualfor
additionalinformation about
setting upanetwork:
Networking Basics -learn
howtocheckandassignyour
IPAddress and sharefiles.
Using theConfiguration
Menu -learnthe settingsfor
theDI-804HV,using theweb-
basedinterface.
Withitsdefaultsettings,theDI-804HV,whenactivated,will connect
withotherD-LinkExpress Ethernetworkproducts,rightoutofthebox.
ConsultwithyourCableorDSLproviderforproperinstallationofthe modem
6
Youwillneed broadbandInternetaccess (aCableorDSLsubscriptionline into
yourhomeoroffice)
ConnecttheCableorDSLmodemtotheDI-804HVwireless broadbandrouter
(seetheQuick Installation GuideincludedwiththeDI-804HV.)
If you areconnecting adesktop computertoyournetwork,youcan installthe
D-LinkDFE-530TX+ethernetadapterintoanavailablePCIslot. (See the Quick
InstallationGuideincludedwiththeDWL-530TX+.)
Ifyou areconnectingalaptopcomputertoyournetwork,installthe driversfor
theEthernetCardbusadapter(e.g.,D-LinkDFE-690TXD)intoalaptop
computer.(SeetheQuickInstallationGuide includedwiththeDFE-690TXD.)
TheModemcanbeused asadialupbackupforxDSL/Cableconnection

11
Using theConfiguration Menu
WheneveryouwanttoconfigureyournetworkortheDI-804HV,youcanaccessthe
ConfigurationMenu byopeningthe web-browserandtypinginthe IPAddress ofthe
DI-804HV.The DI-804HVdefaultIPAddress isshownbelow:
nOpenthewebbrowser
nType inthe IPAddressof
theDI-804HV(http://192.168.0.1)
Home>Wizard
The Home>Wizardscreenwill
appear.Pleaserefertothe
Quick Installation Guidefor
moreinformationregardingthe
SetupWizard.
http://192.168.0.1
Note:If you havechangedthe defaultIPAddressassigned totheDI-804HV,makesureto
enterthe correctIPAddress.
The factorydefaultUsernameisadminandthe default
Passwordisblank(empty).It isrecommended thatyou
changethe adminpasswordforsecuritypurposes.Please
refertoTools>Admintochange theadminpassword.
Clicking Applywill savechangesmadetothepage
Apply
Clicking Cancelwillclearchangesmade tothe page
Clicking Helpwillbringup helpfulinformation regardingthe page
Help
Clicking Restartwillrestarttherouter.(Necessaryforsomechanges.)
Cancel
Restart

12
Using theConfiguration Menu
Setup Wizard
Thewelcomescreenoutlinesthe
stepstocompletethe setup
wizard.Click Nexttocontinue.
Onceyouhaveloggedin,the
Homescreenwillappear.
Click Run Wizard
Click Next

13
Using theConfiguration Menu
Setup Wizard>SetPassword
OldPassword-Thisinformation ismasked.
NewPassword-Typeinthe newpasswordforthe adminaccount.
Reconfirm-Typeinthe newpasswordagaintoconfirm.ClickNexttocon-
tinue withthe SetupWizard.
Click Next

14
SelectOthersonlyifyou usePPTPinEurope orBigPond
CableinAustralia.
Using theConfiguration Menu
Setup Wizard>TimeZone
Selecttheappropriatetimezoneforyourlocation-
Selectthe propertimezone.
Selectionscanbe made by
clicking on the drop downlist.
Click Nexttocontinue.
Click Next
Ifyou areunsureofwhichsetting toselect,please con-
tactyourInternetService Provider.
Setup Wizard>Connection Type(WAN)
SelectYourInternetConnection-
You will be prompted tose-
lectthetype ofinternetcon-
nection foryourrouter.
Choosethe appropriatese-
lectionandclickNexttocon-
tinue.
Click Next

15
Using theConfiguration Menu
Setup Wizard>SetDynamicIPAddress
HostName-Hostnameisthe section whereyou inputthe nameofyour
ISP.Thissection isoptionalandisnotrequiredtobe filled in.
MACAddress-EachnetworkadapterhasadiscreteMediaAccess Control
(MAC)address.Notethatsomecomputerandperipheralsmay
alreadyinclude built-innetworkadapter.
CloneMAC
Address-Byclicking on Clone MACAddress,the DI-804HVwill auto-
maticallycopythe MACaddress ofthe networkadapterinyour
computer.You can alsomanuallytype inthe MACaddress.
Click Nexttocontinue.
IfyourISP usesDynamicIPAddress,thisscreenwillappear:(UsedmainlyforCable
Internetservice.
Click Next

16
Using theConfiguration Menu
Setup Wizard>SetStaticIPAddress
WANIPAddress-If yourISP requiresaStaticIPAddress,and thisoption is
selected,thenthisscreenappear.Enterthe IPaddress infor-
mation originallyprovided toyou byyourISP.Youwillneed to
completeallthe requiredfields.
WAN SubnetMask-ThesubnetfortheDI-804HVispreconfiguredto255.255.255.0.
Configurationscan be made in,butnotrecommended.This
featureisforadvancedusers.
WANGateway-ThisinformationisprovidedbyyourISP.
PrimaryDNS-The PrimaryDNScanbe foundbycontactingthe ISP.
SecondaryDNS-The SecondayDNScan be foundbycontacting theISP.
If yourISP usesaStaticIPAddress,and thisoptionisselected,thenthisscreenwill
appear.
Click Next

17
Using theConfiguration Menu
Setup Wizard>PPPoE
PPPoEAccount- Enterinthe usernameprovided toyoubyyourISP.
If yourISP usesPPPoE(Point-to-PointProtocoloverEthernet),and thisoption is
selected,thenthisscreenwillappear:(UsedmainlyforDSLInternetservice.)
PPPoEPassword-Enterinthe passwordprovided toyoubyyourISP.
PPPoEService
Name-Enterinthenameofyourserviceprovider.Thisisanoptional
fieldand isnotnecessarytobe filledin.
Click Next

18
Using theConfiguration Menu
Setup Wizard
Configurethissection onlyifyouhaveananalogdial-upaccount. OtherwiseclickNext
toskip.
Dial-up
Telephone-Enterthe telephone numbertoconnecttoyourISP.
Dial-upAccount- ThisinformationisprovidedbyyourISP.TheDial-upAccountis
alsoknownasusername.
Dial-upPassword-Enterinthe passwordtologintoyourDial-upaccount.
PrimaryDNS-The PrimaryDNScanbe foundbycontactingthe ISP.
SecondaryDNS-The SecondayDNScan be foundbycontacting theISP.
Click Next

19
Using theConfiguration Menu
Setup Wizard
Back-Clickon Backbutton togo backtopreviouspage.
Restart- Clickon Restartbutton tofinalizethesettingsmade.
Exit- Click on Exitbutton toend the Setup Wizardwithoutsaving
anychanges.
ClickRestart

20
Using theConfiguration Menu
Home>WAN
Choose WAN Type
WAN standsforWideArea Network.InthiscaseWANrepresentsthe mode inwhich
you connecttothe Internet. If you areuncertain,pleaseask yourISP whichofthe
followingrepresentsyourconnectionmodetothe Internet:
StaticIPAddress-YourISP assignsyouaStaticIPAddress
Dynamic
IPAddress-Obtainan IPaddress fromyourISP automatically(mainlyfor Cableusers)
PPP over
Ethernet- SomeISPsrequirethe useofPPPoEtoconnecttotheir
services(mainlyforDSLusers)
ForuseinEuropeonly
Others-
ForuseinAustraliaonly
PPTP-
BigPond Cable-