D-Link Express EtherNetwork DI-604 User manual

DI-604
Express EthernetworkTM Broadband Router
Manual
Rev. 070902
Building Networks for People

2
Contents
Package Contents .................................................................. 3
Introduction ................................................................................... 4
Using the Configuration Wizard .............................. 9
Using the Configuration Menu ................................ 13
Troubleshooting ...................................................................... 27
Networking Basics .............................................................. 33
Technical Specifications .............................................. 46
Contacting Technical Support ................................ 47
Warranty and Registration .......................................... 47

Package Contents
Contents of Package:
• D-Link DI-604 Express EthernetworkTM Broadband Router
• AC Power Adapter, 5V/2A
• Ethernet (CAT5-UTP/Straight-Through) Cable
• Manual on CD
• Quick Installation Guide
Note: Using a power supply with a different voltage rating than the one included with
the DI-604 will cause damage and void the warranty for this product.
If any of the above items are missing, please contact your reseller.
System Requirements:
• Computer with a Windows, Macintosh, or Unix based operating
system with an installed Ethernet adapter
• Internet Explorer or Netscape Navigator, version 4.0 or above, with
JavaScript enabled

4
Introduction
Congratulations on your purchase of this outstanding Broadband Router.
The DI-604 is specifically designed for Small Office and Home Office
needs. It provides a complete solution for Internet surfing and office
resources sharing, and it is easy to configure and operate for even non-
technical users. Instructions for installing and configuring the DI-604 can
be found in the enclosed Quick Install Guide. Before you install and use
the DI-604, please read this manual carefully for more detailed
information and to fully utilize its functions.
Features and Benefits
 Broadband modem and IP sharing
Connects multiple computers to a broadband (cable or DSL) modem
to surf the Internet.
 Auto-sensing Ethernet Switch
Equipped with a 4-port auto-sensing Ethernet switch.
 VPN Pass-Through supported
Supports pass-through PPTP sessions and allows you to setup VPN
server and VPN clients.
 Firewall
All unwanted packets from outside intruders are blocked to protect
your network.
 DHCP server supported
All of the networked computers can retrieve TCP/IP settings
automatically from the DI-604.
 Web-based configuration
Configurable through any networked computer’ s web browser using
Netscape or Internet Explorer.
 Access Control supported
Allows you to assign different access rights for different users.
 Packet filter supported
Packet Filter allows you to control access to a network by analyzing
the incoming and outgoing packets and letting them pass or halting
them based on the IP address of the source and destination.

 Virtual Server supported
Enables you to expose WWW, FTP and other services on your LAN
to be accessible to Internet users.
 User-Definable Application Sensing Tunnel
User can define the attributes to support special applications
requiring multiple connections, like Internet gaming, video
conferencing, Internet telephony and so on. The DI-604 can sense
the application type and open a multi-port tunnel for it.
 DMZ Host supported
Allows a networked computer to be fully exposed to the Internet; this
function is used when the special “ application-sensing tunnel
feature” is insufficient to allow an application to function correctly.
Introduction to Broadband Router
Technology
A router is a device that forwards data packets from a source to a
destination. Routers forward data packets using IP addresses and not a
MAC address. A router will forward data from the Internet to a particular
computer on your LAN.
The information that makes up the Internet gets moved around using
routers. When you click on a link on a web page, you send a request to a
server to show you the next page. The information that is sent and received
from your computer is moved from your computer to the server using routers.
A router also determines the best route that your information should follow to
ensure that the information is delivered properly.
A router controls the amount of data that is sent through your network
by eliminating information that should not be there. This provides security for
the computers connected to your router, because computers from the
outside cannot access or send information directly to any computer on your
network. The router determines which computer the information should be
forwarded to and sends it. If the information is not intended for any computer
on your network, the data is discarded. This keeps any unwanted or harmful
information from accessing or damaging your network.
Introduction to Firewalls
A firewall is a device that sits between your computer and the Internet
that prevents unauthorized access to or from your network. A firewall can be
a computer using firewall software or a special piece of hardware built
specifically to act as a firewall. In most circumstances, a firewall is used to

6
prevent unauthorized Internet users from accessing private networks or
corporate LAN’ s and Intranets.
A firewall watches all of the information moving to and from your
network and analyzes each piece of data. Each piece of data is checked
against a set of criteria that the administrator configures. If any data does not
meet the criteria, that data is blocked and discarded. If the data meets the
criteria, the data is passed through. This method is called packet filtering.
A firewall can also run specific security functions based on the type of
application or type of port that is being used. For example, a firewall can be
configured to work with an FTP or Telnet server. Or a firewall can be
configured to work with specific UDP or TCP ports to allow certain
applications or games to work properly over the Internet.
Introduction to Local Area Networking
Local Area Networking (LAN) is the term used when connecting
several computers together over a small area such as a building or group of
buildings. LAN’ s can be connected over large areas. A collection of LAN’ s
connected over a large area is called a Wide Area Network (WAN).
A LAN consists of multiple computers connected to each other. There
are many types of media that can connect computers together. The most
common media is CAT5 cable (UTP or STP twisted pair wire.) On the other
hand, wireless networks do not use wires; instead they communicate over
radio waves. Each computer must have a Network Interface Card (NIC),
which communicates the data between computers. A NIC is usually a
10Mbps network card, or 10/100Mbps network card, or a wireless network
card.
Most networks use hardware devices such as hubs or switches that
each cable can be connected to in order to continue the connection between
computers. A hub simply takes any data arriving through each port and
forwards the data to all other ports. A switch is more sophisticated, in that a
switch can determine the destination port for a specific piece of data. A
switch minimizes network traffic overhead and speeds up the communication
over a network.
Networks take some time in order to plan and implement correctly.
There are many ways to configure your network. You may want to take
some time to determine the best network set-up for your needs.
Introduction to Virtual Private Networking

Virtual Private Networking (VPN) uses a publicly wired network (the
Internet) to securely connect two different networks as if they were the same
network. For example, an employee can access the corporate network from
home using VPN, allowing the employee to access files and printers. Here
are several different implementations of VPN that can be used.
Point-to-Point Tunneling Protocol (PPTP)
PPTP uses proprietary means of connecting two private networks over the
Internet. PPTP is a way of securing the information that is communicated
between networks. PPTP secures information by encrypting the data inside
of a packet.
IP Security (IPSec)
IPSec provides a more secure network-to-network connection across the
Internet or a Wide Area Network (WAN). IPSec encrypts all communication
between the client and server whereas PPTP only encrypts the data packets.
Both of these VPN implementations are used because there is not a
standard for VPN server software. Because of this, each ISP or business
can implement its own VPN network making interoperability a challenge.
LEDS
WAN & LAN Ethernet port indicators, Green. The LED flickers when the
LAN or WAN port is sending or receiving data.
Link/Act. Link status indicators, Green. The LED flickers when the
corresponding port is sending or receiving data

8
CONNECTIONS
Reset
LAN ports (1-4) WAN port Power jack
Getting Started
The Infrastructure Network example shown contains the following D-Link
network devices:
Express EthernetworkTM Broadband Router - D-Link DI-604
A laptop computer with an Ethernet adapter - D-Link DFE-670TXD
A desktop computer with an Ethernet adapter - D-Link DFE-530TX+
A Cable modem - D-Link DCM-200

Using the Configuration Wizard
The DI-604 provides Web based configuration. You can configure your
DI-604 through your Netscape Communicator or Internet Explorer
browser in MS Windows, Macintosh or UNIX based platforms.
Activate your browser. Then type the IP address of the DI-604 into the
Location (for Netscape) or Address (for IE) field and press “Enter.” For
example: http://192.168.0.1.
(The IP Address shown in the example above is the default setting. If you have changed the
IP Address of the DI-604 to conform to a network, then input that IP Address in the web
browser, instead of the default IP Address shown.)
This screen will appear.
Click Run Wizard.
The Setup Wizard screen
will appear. Follow the
Wizard step by step to
quickly configure the
DI-604.
Click Next
•
Open the web browser
• Type in the IP Address of
the DI-604
• Type admin in the User Name field
(lower case)
• Leave the Password blank
• Click OK
http://192.168.0.1
admin

10
It is recommended that
you change the admin
password for security
purposes. Enter in your
new password. Enter it in
a second time for
verification.
Click Next
In the window below, select the method you use to connect to the Internet.
This is called the WAN connection or WAN Type.
Static IP Address:
Select this option to
manually input the IP
address that your ISP
assigned to you.
(Please see Assigning
a Static IP Address in
the Troubleshooting
section of this manual.)
Dynamic IP Address:
(e.g., Cable users)
Select this option to obtain an IP address automatically from your ISP.
Please see Dynamic IP Address section.
Dynamic IP Address with Road Runner Session Management: (e.g.,
Telstra BigPond users) Choose this option if it is required by your ISP
PPP over Ethernet (PPPoE):(e.g., DSL users) Select this option if your ISP
requires the use of PPPoE to connect to their services. Please see PPPoE
section.
PPTP: Select this option if your ISP requires it
Once you have made the appropriate selection, click Next.

Static IP Address
If you selected Static IP
Address, you will see the
following page.
Enter in the IP address
information provided to you
by your ISP. You will need
to enter in WAN IP Address,
WAN Subnet Mask, WAN
Gateway, and Primary
DNS.
Click Next
Dynamic IP
Address
If you selected Dynamic IP
Address, you will see the
following page.
If your ISP requires you to
enter a specific host name
or specific MAC address,
please enter it in. The
CLONE MAC Address
button is used to copy the
MAC address of your Ethernet adapter to the DI-604 WAN interface.
Click Next
Dynamic IP
Address for
BigPond Cable
If you selected Dynamic
IP Address with
RoadRunner Session
Management, you will
see the following page.
If your ISP requires you
to enter a specific host
name or specific MAC
address, please enter it in. The CLONE MAC Address button is used to copy
the MAC address of your Ethernet adapter to the DI-604 WAN interface.
Click Next

12
PPPoE
If you select PPP over Ethernet (PPPoE), you will see the following page.
Enter in the username and password provided to you by your ISP.
Enter in the Service Name if your ISP uses a Service Name for the PPPoE
connection.
Click Next
PPTP
If you selected PPTP, fill out the required information, provided to you by
your ISP.
Click Next

At this point, the Setup
Wizard has completed.
Click Restart to save the
settings and reboot the
DI-604.
The DI-604 will save the
changes and reboot.
You have completed the Setup Wizard.
You can now access the Internet.
Whenever you choose to make changes or additions to the configuration of
the DI-604, you can access the Configuration menu by typing the IP Address
of the DI-604 into the address line of your web browser and pressing “ enter.”
Read more about the Configuration menu in the following chapter.
Using the Configuration Menu
Setup Wizard
The Setup Wizard page is the first page that appears when logging into the web-based management
interface. The Setup Wizard is a utility used to quickly configure the DI-604. It will guide you through three
quick and basic steps to help you connect to your ISP. You will be connected to your ISP (Internet
Service Provider) and have Internet access within minutes.

14
WAN
WAN is short for Wide Area Network. The WAN settings can be referred to
as the Public settings. All IP information in the WAN settings are public IP
addresses which are accessible on the Internet.
The WAN settings consist of these options: Dynamic IP Address,Dynamic
IP (w/RoadRunner,) Static IP Address,PPPoE, and PPTP. Select the
appropriate option and fill in the information needed to connect to your ISP.
HOME > WAN > DYNAMIC IP ADDRESS
Choose Dynamic IP Address to obtain IP address information automatically
from your ISP. Select this option if your ISP does not give you any IP
numbers to use. This option is commonly used for Cable modem services.
Host Name: The Host Name field is optional but may be required by some
ISPs. The host name is the device name of the Broadband Router.
Click Apply if you have made changes.

HOME > WAN > STATIC IP ADDRESS
Choose Static IP Address if all WAN IP information is provided to you by
your ISP. You will need to enter in the IP address, subnet mask, gateway
address, and DNS address(es) provided to you by your ISP. Each IP
address entered in the fields must be in the appropriate IP form, which are
four IP octets separated by a dot (x.x.x.x). The Router will not accept the IP
address if it is not in this format.
WAN IP Address: Public IP address provided by your ISP.
WAN Subnet Mask: Subnet mask provided by your ISP.
WAN Gateway Address: Public IP address of your ISP that you are
connecting to.
Primary DNS Address: Primary DNS (Domain Name Server) IP provided
by your ISP
Secondary DNS Address: optional
Click Apply if you have made changes.

16
HOME > WAN > PPPOE
Choose PPPoE (Point to Point Protocol over Ethernet) if your ISP uses PPPoE
connection. Your ISP will provide you with a username and password. This option is
typically used for DSL services.
PPPoE Account: Your PPPoE account is provided by your ISP
PPPoE Password: Your PPPoE password is provided by your ISP
Primary DNS Address: Primary DNS IP Address is provided by your ISP
Secondary DNS Address: optional
Maximum Idle Time: The amount of time of inactivity before disconnecting
your PPPoE session. Enter a Maximum Idle Time (in minutes) to define a
maximum period of time for which the Internet connection is maintained
during inactivity. If the connection is inactive for longer than the defined
Maximum Idle Time, then the connection will be dropped. Either set this to
zero or enable Auto-reconnect to disable this feature.
PPPoE Service Name: Enter the Service Name provided by your ISP.
(optional)
Assigned IP Address: This option is only available for Static PPPoE. Enter
in the Static IP Address for the PPPoE connection.
Click Apply if you have made changes.

HOME > LAN
LAN is short for Local Area Network. This is considered your internal
network. These are the IP settings of the LAN interface for the DI-604. These
settings may be referred to as Private settings. You may change the LAN IP
address if needed. The LAN IP address is private to your internal network
and cannot be seen on the Internet.
LAN IP Address: The IP address of the LAN interface. The default IP
address is 192.168.0.1.
DHCP Server: Choose Enable or Disable
The range of the IP Address Pool: Whenever there is a request, the DHCP
server will automatically allocate an unused IP Address from the IP Address
Pool to the requesting computer. You must specify the starting and ending
address of the IP Address pool.
Domain Name: This field is optional. Enter in the your local domain name.
Click Apply if you have made any changes.
DHCP stands for Dynamic Host Control Protocol. The DI-604 has a built-in DHCP server. The DHCP
Server will automatically assign an IP address to the computers on the LAN/private network. Be sure
to set your computers to be DHCP clients by setting their TCP/IP settings to “ Obtain an IP Address
A
utomatically.” When you turn your computers on, they will automatically load the proper TCP/IP
settings provided by the DI-604. The DHCP Server will automatically allocate an unused IP address
from the IP address pool to the requesting computer. You must specify the starting and ending
address of the IP address pool.

18
ADVANCED > VIRTUAL SERVER
The firewall filters out unrecognized packets to protect your LAN (local area network);
so all computers networked with the DI-604 are invisible to the outside world. If you
wish, you can make some of them accessible by enabling the Virtual Server
Mapping.
A virtual server is defined as a Service Port, and all requests to this port will be
redirected to the computer specified by the Server IP.
For example, if you have an FTP server (port 21) at 192.168.0.1, a Web server (port
80) at 192.168.0.2, and a VPN server at 192.168.0.6, then you need to specify the
following virtual server-mapping table:
Service Port Server IP Enable
21 192.168.0.1 V
80 192.168.0.2 V
1723 192.168.0.6 V

Some applications require multiple connections, like Internet games, Video
conferencing, Internet telephony and so on. Due to the firewall function,
these applications cannot work without some intervention. Special
Applications makes some of these applications work with the DI-604. If
Special Applications is still insufficient to allow an application to function
correctly, try the DMZ Host in the Miscellaneous Items options.
Trigger: the outbound port number the application issued first.
Incoming Ports: when the trigger packet is detected, the inbound packets to
the specified port numbers are allowed to pass the firewall.
The DI-604 provides some predefined settings in the gray pad on the bottom
of the web page. Select your application in the Popular applications pull-
down menu and click Copy to in order to copy the predefined setting.
Note! At any time, only one PC can use each Special Application tunnel.
Click Apply if you have made any changes.
ADVANCED > APPLICATIONS

20
ADVANCED>FILTER
MAC Address Control allows you to assign different access rights for different
users and to assign a specific IP address to a certain MAC address.
MAC Address Control: Check Enable to enable the MAC Address Control. All of
the settings in this page will take effect only when Enable is checked.
Connection control: Check Connection control to control what wired and wireless
clients can connect to this device. If a client is denied connection to this device, it
means the client can't access the Internet either. Choose "allow" or "deny" to allow
or deny the clients, whose MAC addresses are not in the "Control table" (please see
below), to connect to this device.
MAC Address MAC address indicates a specific client.
IP Address Expected IP address of the corresponding
client. You may choose to leave this field
empty.
CWhen "Connection control" is checked,
check "C" to allow the corresponding client
to connect to this device.