D-Link DI-808HV User manual

Broadband VPN
Manual
Building Networks for People
DI-808HV
D-Link
10/11/04
Router

2
Contents
PackageContents ................................................................................3
Introduction............................................................................................4
GettingStarted....................................................................................10
UsingtheConfigurationMenu..............................................................11
NetworkingBasics ..............................................................................72
ResettoFactoryDefault Settings ........................................................98
TechnicalSpecifications ......................................................................99
FrequentlyAskedQuestions..............................................................100
ContactingTechnicalSupport ............................................................149
Warranty............................................................................................150
Registration ......................................................................................153

3
Contents of Package:
D-Link DI-808HV Broadband VPN Router
5V DC PowerAdapter
Ethernet (CAT5-UTP/Straight-Through) Cable
ManualonCD
QuickInstallationGuide
System Requirements For Configuration:
Computer with Windows-, Macintosh-, or Linux-based
operating system with an installed Ethernet adapter

Internet Explorer version 6.x or Netscape Navigator
version 6.x and above, with JavaScript enabled

Ethernet-based Cable or DSL Modem


Package Contents
Note:Usinga power supply witha different voltage ratingthanthe one included withthe
DI-808HVwillcausedamageand void the warranty for thisproduct.
If any of the above items are missing, please contact your reseller.





4
Introduction
TheD-LinkDI-808HV isa8-portBroadband Router withVirtualPrivate Network
(VPN)functionality.ItprovidesacompletesolutionforInternetandofficeresource
sharing, and secure access to remote corporate networks. It is an ideal way to
extend the number and reach of computers connected to your network.
After completing the steps outlined in the Quick Installation Guide (included in
your package) you will have the ability to share information and resources.
The DI-808HV is compatible with most popular operating systems, including
Macintosh, Linux, and Windows and can be integrated into a large network.

5
Broadband modem and IP sharing
Connectsmultiple computers to abroadband (cable orDSL) modem to surf
theInternet

Auto-sensing Ethernet Switch
Equippedwitha 8-port auto-sensing Ethernet switch





VPNPass-Through supported
Supports pass-through VPN sessions and allows you to setup VPN server
and VPN clients
Firewall
Unwanted packets from outside intruders can be blocked to protect your
network
DHCPserver supported
Allof the networked computerscan retrieve TCP/IP settingsautomatically
fromtheDI-808HV
Web-based configuration
Configurablethrough any networkedcomputer’swebbrowserusing
NetscapeorInternetExplorer
Hardware VPN Termination Device
Supportsup to 40 VPN Tunnels

Connections
Features & Benefits
Receptor
for the
Power
Adapter
LAN ports provide
connections to Ethernet-
enabled devices. Pressing the
Reset Button
restores the
router to its
original factory
default settings.
All Ethernet ports auto-sense
cable types to accommodate
straight-through or crossover
cable.
WAN port is the
connection for the
Ethernet cable to the
Cable or DSL modem
COM port provides
serial connection for
dial-up analog modem.

6
Features & Benefits continued
AccessControl supported
Allows you to assign different access rights for different users.
Packet Filter supported
Packet Filter allows you to control access to a network by analyzing the
incoming and outgoing packets and letting them pass or halting them
based on the IP address of the source and destination.
Virtual Server supported
Enables you to expose WWW, FTP, and other services on your LAN to be
accessible to Internet users.
User-DefinableApplication-Sensing Tunnel
You can define the attributes, for instance opening special ports to allow
packets to come through, to support special applications requiring multiple
connections,suchasInternetgaming,videoconferencing, and Internet
telephony.TheDI-808HV can sense the application type andopen a multi-
port tunnel for it.
DMZHostsupported
Allows a networked computer to be fully exposed to the Internet; this
functionisusedwhen the special “Application-SensingTunnelfeature” is
insufficient to allow an application to function correctly.
Introduction to Broadband
Router Technology
A router is a device that forwards data packets from a source to a destination. Routers
forwarddatapacketsusing IPaddresses and not a MACaddress.Arouter will forward
datafrom the Internet to a particular computer on yourLAN.
Theinformationthatresides on the Internet getsmovedaroundusing routers. When
you click on a link on a web page, you send a request to a server to show you the next
page.Theinformationthat is sent andreceivedfromyour computer is movedfromyour
computer to the server using routers.Arouter also determines the best route that your
informationshouldfollowtoensurethattheinformationisdelivered properly.
A router controls the amount of data that is sent through your network by eliminating
informationthat should not bethere. This provides securityfor the computerscon-
nected to your router, because computers from the outside cannot access or send
informationdirectlyto any computer onyour network. The routerdetermines which
computerthe information should beforwarded to andsends it. Ifthe information is not
intended for any computer on your network, the data is discarded. This keeps any
unwantedorharmfulinformationfromaccessingordamagingyournetwork.

7
Introduction to Firewalls
Afirewall is a device that sits betweenyour computer andthe Internet thatprevents
unauthorized access to or from your network.Afirewall can be a computer using
firewall software or a special piece of hardware built specifically to act as a firewall. In
mostcircumstances, a firewall isused to prevent unauthorized Internet users from
accessingprivatenetworksor corporate LANs and Intranets.
Afirewallwatches all of theinformationmoving to and fromyournetwork and analyzes
each piece of data. Each piece of data is checked against a set of criteria that the
administrator configures. If any data does not meet the criteria, that data is blocked
and discarded. If the data meets the criteria, the data is passed through. This method
is called packet filtering.
A firewall can also run specific security functions based on the type of application or
type of port that is being used. For example, a firewall can be configured to work with
anFTPorTelnet server. Or afirewall can be configured towork with specific UDPor
TCPports to allow certainapplications or games towork properly overthe Internet.
Introduction to Local Area Networking
LocalArea Network (LAN) istheterm used when severalcomputers are connected
together over a small area such as a building or a group of buildings. LANs can be
connectedoverlarge areas.Acollection of LANs connectedover a large areais called
a WideArea Network (WAN).
ALAN consists of multiple computers connected to each other. There are many types
of media that can connect computers together. The most common media is CAT5
cable(UTPor STP twisted pairwire). Each computer musthavea Network Interface
Card (NIC), which communicates the data between computers.ANIC is usually a
10Mbpsnetwork card, or 10/100Mbpsnetwork card, ora wireless networkcard.
Wireless LocalArea Networks (WLANs) do not use wires; instead they communicate
overradiowaves.
Most networks use hardware devices such as hubs or switches that each cable can be
connected to in order to continue the connection between computers.Ahub simply
takesany dataarriving through each port and forwards the datato allother ports.A
switch is more sophisticated, in that a switch can determine the destination port for a
specific piece of data. Aswitch minimizes network traffic overhead and speeds up the
communicationover a network.
Networks take some time in order to plan and implement correctly. There are many
ways to configure your network. You may want to take some time to determine the
bestnetwork set-up for yourneeds.

8
Introduction to Virtual Private Networking
VirtualPrivateNetworking (VPN) usesa publicly wired network(the Internet) to se-
curelyconnect two different networksthrough a secure “datatunnel.” For example, an
employee can access a corporate network from home using VPN, allowing the em-
ployeetoaccess files, databases,andother networked resources. Hereare several
differentimplementations of VPN thatcan be used.
Point-to-Point Tunneling Protocol (PPTP)
PPTPusesproprietarymeansof connecting two private networks overtheInternet.
PPTP is a way of securing the information that is communicated between networks.
PPTP secures information by encrypting the data inside of a packet.
IP Security (IPSec)
IPSecprovidesamore secure network-to-network connection acrosstheInternet or a
WideArea Network (WAN). IPSec encrypts all communication between the client and
serverwhereas PPTP only encrypts the data packets.
Both of these VPN implementations are used because there is not a standard for VPN
server software. Because of this, each ISP or business can implement its own VPN
networkmakinginteroperabilityachallenge.

9
LEDS
LED stands for Light-Emitting Diode. The DI-808HV has the following LEDs
as described below:
LED LED Activity
Power A steady light indicates a connection to a
powersourcea powersource
M2LED Lightsup when the device hasan Internet
connection
WAN A solid light indicates connection on the WAN port. This LED blinks during data
transmission
COM Asolid light indicates a connection to an
externaldial-up analog modem
Flashes once per second to indicate an
active system
LOCAL
NETWORK
(Ports1-8)
A solid light indicates a connection to an
Ethernet-enabledcomputeron ports 1-8.
ThisLED blinks during data transmission
M1LED

10
For a typical network setup in a home or small office (as shown above),
please do the following:
Getting Started
For additional information
about setting up a network,
see:
NetworkingBasics
Using the Configuration
Menu
ConsultwithyourCableor DSL provider for properinstallationofthemodem.
You will need broadband Internet access (a Cable or DSLsubscription line into
yourhomeoroffice).
ConnecttheCableorDSLmodemtotheDI-808HVwirelessbroadbandrouter(see
the Quick Installation Guide included with the DI-808HV.)
IfyouareconnectingadesktopcomputertoyournetworkandyouneedanEthernet
connection, you can install the D-Link DFE-530TX+ Ethernet adapter into an
availablePCIslot. (SeetheQuickInstallationGuideincludedwiththeDFE-530TX+.)
Ifyouare connecting alaptop computer to yournetwork, install the driversfor the
EthernetCardbusadapter(e.g.,D-LinkDFE-690TXD)intoalaptopcomputer.(See
theQuickInstallationGuideincludedwiththeDFE-690TXD.)
You may connect an analog modem (optional) to function as a backup to the DI-
808HV. To use a backup modem, you must havedial-up service.
44
44
4
55
55
5
11
11
1
33
33
3
22
22
2
66
66
6

11
Using the Configuration Menu
Whenever you want to configure your network or the DI-808HV, you can access the
ConfigurationMenu by openingthe Web browser (i.e., Internet Explorer or Netscape
Navigator)and typing in the IPAddressof the DI-808HV.TheDI-808HV default IP
Addressis shownbelow:
Open the Webbrowser
Type in the IPAddress of
theDI-808HV(http://192.168.0.1)
Home > Wizard
The Home>Wizard screen will
appear. Pleaserefer to the
Quick Installation Guide for
moreinformationregardingthe
Setup Wizard.
http://192.168.0.1
Note: If you have changed the default IP Address assigned to the DI-808HV, make sure to
enter the correct IP Address.
The factory default User name is admin and the default
Password is blank (empty). It is recommended that you
changetheadminpasswordforsecuritypurposes. Please
refer to Tools>Admin to change the admin password.
Clicking Apply will save changes made to the page
Apply
Clicking Cancel will clear changes made to the page
ClickingHelp willbring up helpful information regardingthepage
Help
ClickingRestart willrestart therouter. (Necessaryfor some changes.)
Cancel
Restart

12
Using the Configuration Menu
Setup Wizard
Thewelcomescreenoutlinesthe
steps to complete the setup
wizard. Click Next to continue.
Onceyou have logged in, the
Home screenwill appear.
Click Run Wizard
Click Next

13
Using the Configuration Menu
Setup Wizard > Set Password
Old Password- Thisinformationis masked.
New Password- Type in the new password for the admin account.
Reconfirm- Type in the new password again to confirm. Click Next to
continue with the Setup Wizard.
Click Next

14
Using the Configuration Menu
Setup Wizard > Time Zone
Select the appropriate time zone for your location-
Select the proper time zone.
Selections can be made by
clicking on the drop down list.
Click Next to continue.
Click Next
Pleasewaitamomentwhilethe
DI-808HV auto detects your
WAN.
Setup Wizard > Auto Detecting WAN

15
Using the Configuration Menu
Setup Wizard > Connection Type (WAN)
Select Your Internet Connection-
Youwill be prompted to select
thetypeofinternetconnection
foryourrouter. Choose the
appropriateselectionandclick
Next to continue.
Select Others only if you use PPTP in Europe or Big Pond
CableinAustralia.
If you are unsure of which setting to select, please contact
your Internet Service Provider.
Click Next

16
Using the Configuration Menu
Setup Wizard > Set Dynamic IP Address
Host Name Host name is the section where you input the name of your
ISP. This section is optional and is not required to be filled in.
MACAddress Each network adapter has a discrete Media Access Control
(MAC)address. Notethatsomecomputer andperipheralsmay
alreadyincludebuilt-innetworkadapter.
Clone MAC
Address By clicking on Clone MAC Address, the DI-808HV will auto-
maticallycopythe MAC address of the network adapter in your
computer. You can also manually type in the MAC address.
Click Next to continue.
If your ISP uses Dynamic IP Address, this screen will appear: (Used mainly for
Cable Internet service.)
Click Next

17
Using the Configuration Menu
Setup Wizard > Set Static IP Address
WAN IPAddress If your ISP requires a Static IPAddress, and this option is se-
lected,thenthis screen will appear. Enter the IPaddressinfor-
mation originally provided to you by your ISP.You will need to
completeallthe required fields.
WAN Subnet Mask ThesubnetfortheDI-808HVispreconfiguredto255.255.255.0.
Configurations can be made, but are not recommended. This
featureis for advanced users.
WAN Gateway Thisinformationisprovidedby your ISP.
Primary DNS The Primary DNS can be found by contacting the ISP.
Secondary DNS The Secondary DNS can be found by contacting the ISP.
If your ISP uses a Static IP Address, and this option is selected, then this screen will
appear.
Click Next

18
Using the Configuration Menu
Setup Wizard > PPPoE
Enter in the username provided to you by your ISP.
PPPoE Password Enter in the password provided to you by your ISP.
PPPoE Service
Name Enter in the name of your service provider. This is an optional
field and is not necessary to be filled in.
PPPoEAccount
If your ISP uses PPPoE (Point-to-Point Protocol over Ethernet), and this option is se-
lected,then this screen willappear: (Used mainlyfor DSL Internetservice.)
Click Next

19
Using the Configuration Menu
Setup Wizard > Dial-up Network
Configure thissection only ifyou have ananalog dial-up account.Otherwise click Next
to skip.
Dial-up
Telephone Enter the telephone number to connect to your ISP.
Dial-upAccount Thisinformation isprovidedbyyour ISP.TheDial-upAccountis
alsoknownas username.
Dial-up Password Enter in the password to log into your Dial-up account.
Primary DNS The Primary DNS can be found by contacting the ISP.
Secondary DNS The Secondary DNS can be found by contacting the ISP.
Click Next

20
Using the Configuration Menu
Setup Wizard > Others
Click Next
Selecttheconnectiontypetoconnectto your ISP.Choosetheappropriateselectionand
click Next to continue.
PPTP This is a WAN connection used in Europe.
BigPond Cable This is a WAN connection used inAustralia.