728116

D-Link DI-304 Handleiding

74
Verklein
Vergroot
Pagina terug
1/96
Pagina verder
DI-304
ISDN/DSL Router
User’s Guide
Four Edition (Feb 2005)
DI304..…A3
Printed in Taiwan
RECYCLABLE
Copyright Statement
Copyright ©2002 D-Link Corporation
No part of this publication may be reproduced in any form or by any means or used
to make any derivative such as translation, transformation, or adaptation without
permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the
United States Copyright Act of 1976.
Trademarks
D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc.
All other trademarks belong to their respective owners.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in
a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful interference to radio communications.
However, there is no guarantee that interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be determined by turning the equipment
off and on, the user is encouraged to try to correct the interference by one or more of the following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
• Consult the dealer or an experienced radio/TV technician for help.
Shielded interface cables must be used in order to comply with emission limits.
You are cautioned that changes or modifications not expressly approved by the party responsible for compliance
could void your authority to operate the equipment.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1)
This device may not cause harmful interference, and (2) this device must accept any interference received,
including interference that may cause undesired operation.
CE Mark Warning
This is a Class B product. In a domestic environment, this product may cause radio interference in which case
the user may be required to take adequate measures.
Limited Warranty
Hardware:
D-Link warrants each of its hardware products to be free from defects in workmanship and materials under
normal use and service for a period commencing on the date of purchase from D-Link or its Authorized
Reseller and extending for the length of time stipulated by the Authorized Reseller or D-Link Branch Office
nearest to the place of purchase.
This Warranty applies on the condition that the product Registration Card is filled out and returned to a
D-Link office within ninety (90) days of purchase. A list of D-Link offices is provided at the back of this
manual, together with a copy of the Registration Card.
If the product proves defective within the applicable warranty period, D-Link will provide repair or
replacement of the product. D-Link shall have the sole discretion whether to repair or replace, and
replacement product may be new or reconditioned. Replacement product shall be of equivalent or better
specifications, relative to the defective product, but need not be identical. Any product or part repaired by
D-Link pursuant to this warranty shall have a warranty period of not less than 90 days, from date of such
repair, irrespective of any earlier expiration of original warranty period. When D-Link provides replacement,
then the defective product becomes the property of D-Link.
Warranty service may be obtained by contacting a D-Link office within the applicable warranty period, and
requesting a Return Material Authorization (RMA) number. If a Registration Card for the product in
question has not been returned to D-Link, then a proof of purchase (such as a copy of the dated purchase
invoice) must be provided. If Purchaser's circumstances require special handling of warranty correction, then
at the time of requesting RMA number, Purchaser may also propose special procedure as may be suitable to
the case.
After an RMA number is issued, the defective product must be packaged securely in the original or other
suitable shipping package to ensure that it will not be damaged in transit, and the RMA number must be
prominently marked on the outside of the package. The package must be mailed or otherwise shipped to
D-Link with all costs of mailing/shipping/insurance prepaid. D-Link shall never be responsible for any
software, firmware, information, or memory data of Purchaser contained in, stored on, or integrated with any
product returned to D-Link pursuant to this warranty.
Any package returned to D-Link without an RMA number will be rejected and shipped back to Purchaser at
Purchaser's expense, and D-Link reserves the right in such a case to levy a reasonable handling charge in
addition mailing or shipping costs.
Software:
Warranty service for software products may be obtained by contacting a D-Link office within the applicable
warranty period. A list of D-Link offices is provided at the back of this manual, together with a copy of the
Registration Card. If a Registration Card for the product in question has not been returned to a D-Link office,
then a proof of purchase (such as a copy of the dated purchase invoice) must be provided when requesting
warranty service. The term "purchase" in this software warranty refers to the purchase transaction and
resulting license to use such software.
D-Link warrants that its software products will perform in substantial conformance with the applicable
product documentation provided by D-Link with such software product, for a period of ninety (90) days from
the date of purchase from D-Link or its Authorized Reseller. D-Link warrants the magnetic media, on which
D-Link provides its software product, against failure during the same warranty period. This warranty applies
to purchased software, and to replacement software provided by D-Link pursuant to this warranty, but shall
not apply to any update or replacement which may be provided for download via the Internet, or to any update
which may otherwise be provided free of charge.
D-Link's sole obligation under this software warranty shall be to replace any defective software product with
product which substantially conforms to D-Link's applicable product documentation. Purchaser assumes
responsibility for the selection of appropriate application and system/platform software and associated
reference materials. D-Link makes no warranty that its software products will work in combination with any
hardware, or any application or system/platform software product provided by any third party, excepting only
such products as are expressly represented, in D-Link's applicable product documentation as being
compatible. D-Link's obligation under this warranty shall be a reasonable effort to provide compatibility, but
D-Link shall have no obligation to provide compatibility when there is fault in the third-party hardware or
software. D-Link makes no warranty that operation of its software products will be uninterrupted or
absolutely error-free, and no warranty that all defects in the software product, within or without the scope of
D-Link's applicable product documentation, will be corrected.
D-Link Offices for Registration and Warranty Service
The product's Registration Card, provided at the back of this manual, must be sent to a D-Link office. To
obtain an RMA number for warranty service as to a hardware product, or to obtain warranty service as to a
software product, contact the D-Link office nearest you. An address/telephone/fax/e-mail/Web site list of
D-Link offices is provided in the back of this manual.
Wichtige Sicherheitshinweise
1. Bitte lesen Sie sich diese Hinweise sorgfältig durch.
2. Heben Sie diese Anleitung für den spätern Gebrauch auf.
3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Vervenden Sie keine Flüssig- oder
Aerosolreiniger. Am besten dient ein angefeuchtetes Tuch zur Reinigung.
4. Um eine Beschädigung des Gerätes zu vermeiden sollten Sie nur Zubehörteile verwenden, die vom
Hersteller zugelassen sind.
5. Das Gerät is vor Feuchtigkeit zu schützen.
6. Bei der Aufstellung des Gerätes ist auf sichern Stand zu achten. Ein Kippen oder Fallen könnte
Verletzungen hervorrufen. Verwenden Sie nur sichere Standorte und beachten Sie die Aufstellhinweise
des Herstellers.
7. Die Belüftungsöffnungen dienen zur Luftzirkulation die das Gerät vor Überhitzung schützt. Sorgen Sie
dafür, daß diese Öffnungen nicht abgedeckt werden.
8. Beachten Sie beim Anschluß an das Stromnetz die Anschlußwerte.
9. Die Netzanschlußsteckdose muß aus Gründen der elektrischen Sicherheit einen Schutzleiterkontakt
haben.
10. Verlegen Sie die Netzanschlußleitung so, daß niemand darüber fallen kann. Es sollete auch nichts auf der
Leitung abgestellt werden.
11. Alle Hinweise und Warnungen die sich am Geräten befinden sind zu beachten.
12. Wird das Gerät über einen längeren Zeitraum nicht benutzt, sollten Sie es vom Stromnetz trennen.
Somit wird im Falle einer Überspannung eine Beschädigung vermieden.
13. Durch die Lüftungsöffnungen dürfen niemals Gegenstände oder Flüssigkeiten in das Gerät gelangen.
Dies könnte einen Brand bzw. Elektrischen Schlag auslösen.
14. Öffnen Sie niemals das Gerät. Das Gerät darf aus Gründen der elektrischen Sicherheit nur von
authorisiertem Servicepersonal geöffnet werden.
15. Wenn folgende Situationen auftreten ist das Gerät vom Stromnetz zu trennen und von einer qualifizierten
Servicestelle zu überprüfen:
a – Netzkabel oder Netzstecker sint beschädigt.
b – Flüssigkeit ist in das Gerät eingedrungen.
c – Das Gerät war Feuchtigkeit ausgesetzt.
d – Wenn das Gerät nicht der Bedienungsanleitung ensprechend funktioniert oder Sie mit Hilfe dieser
Anleitung keine Verbesserung erzielen.
e – Das Gerät ist gefallen und/oder das Gehäuse ist beschädigt.
f – Wenn das Gerät deutliche Anzeichen eines Defektes aufweist.
16. Bei Reparaturen dürfen nur Orginalersatzteile bzw. den Orginalteilen entsprechende Teile verwendet
werden. Der Einsatz von ungeeigneten Ersatzteilen kann eine weitere Beschädigung hervorrufen.
17. Wenden Sie sich mit allen Fragen die Service und Repartur betreffen an Ihren Servicepartner. Somit
stellen Sie die Betriebssicherheit des Gerätes sicher.
18. Zum Netzanschluß dieses Gerätes ist eine geprüfte Leitung zu verwenden, Für einen Nennstrom bis 6A
und einem Gerätegewicht grőßer 3kg ist eine Leitung nicht leichter als H05VV-F, 3G, 0.75mm2
einzusetzen
Table of Contents
INTRODUCTION .............................................................................................1
Product Features ................................................................................................ 1
Ease of Installation.................................................................1
Built-in Switch.......................................................................2
ISDN Basic Rate Interface (BRI) ..........................................2
Dial On Demand ....................................................................2
Bandwidth On Demand..........................................................2
Full Network Management ....................................................2
PPP Security ..........................................................................2
RIP-1/RIP-2 ...........................................................................2
DHCP Support (Dynamic Host Configuration Protocol) ......2
Networking Compatibility .....................................................3
Firmware Upgrade (TFTP) Server.........................................3
Web (HTTP) Server...............................................................3
Remote Access Server (RAS)................................................3
Domain Name Server (DNS) Proxy ......................................3
Telnet Terminal Server ..........................................................3
Built-in Flash ROM ...............................................................3
Point-to-Point over Ethernet (PPPoE) Client Support...........3
Point-to-Point Tunneling Protocol (PPTP) Client Support ...4
Firewall ..................................................................................4
Remote Management .............................................................4
Applications for your DI-304 ............................................................................. 4
Internet Access.......................................................................4
Network Address Translation (NAT) ....................................4
LAN-to-LAN Enterprise Connections...................................4
Remote Dial-In Server ...........................................................4
What This Manual Covers .................................................................................. 5
What This Manual Doesn’t Cover...................................................................... 6
Other Resources ................................................................................................. 6
Packing List ........................................................................................................ 6
Additional Installation Requirements................................................................. 6
INSTALLATION & SETUP ................................................................................7
Before You Start.................................................................................................. 7
Ordering Your ISDN Line........................................................7
The DI-304 Front Panel ..................................................................................... 8
The DI-304 Rear Panel....................................................................................... 9
Hardware Installation ...................................................................................... 10
Connecting the Power Adapter ............................................10
Connecting to the Ethernet ..................................................10
Connecting to an ISDN BRI Line........................................11
Connecting to a DSL/Cable Modem....................................11
Setting Up a Management PC..............................................12
Checking the Network IP Configuration .............................12
Configuring the TCP/IP Protocol ........................................13
Checking TCP/IP Settings ...................................................15
Using the Smart Start Wizard ..............................................16
Using the Web Configurator................................................20
BASIC CONFIGURATION AND INTERNET ACCESS............................................24
Changing the Administrator Password ................................24
Configuring Ethernet TCP/IP Address and DHCP Server ..24
Configuring the ISDN Interface ..........................................26
Internet Access Setup.............................................................26
ISDN Dial-up Internet Access ...............................................28
Dialing to Dual ISPs ............................................................29
DSL/Cable Modem Internet Access.......................................31
Using PPTP with a DSL Modem.........................................33
Using a Static IP with a DSL/Cable Modem .......................34
Configuring ISDN Dial Backup ..........................................36
REMOTE ACCESS........................................................................................ 37
Remote Dial-In Access...........................................................37
Creating an Access Account for a Dial-in User...................38
LAN-to-LAN Access .............................................................40
Activating the Dial-In Capability ........................................41
Creating a LAN-to-LAN Dialer Profile...............................42
ADVANCED SETUP ......................................................................................47
Enabling the Remote Activation Function.............................47
Call Control Setup ...............................................................48
PPP/MP Dial-Out Setup.......................................................48
Bandwidth On Demand (BOD) Setup .................................49
Call Schedule Setup ...............................................................50
NAT Setup..............................................................................50
Static Route Setup ..................................................................54
IP Filter/Firewall Setup ..........................................................55
SYSTEM MANAGEMENT ...............................................................................63
Online Status ..........................................................................63
Time Setup .............................................................................65
Management Setup.................................................................65
Diagnostic Tools ....................................................................67
Reboot System........................................................................73
Firmware Upgrade..................................................................74
A
PPENDIX A – TROUBLESHOOTING AND FAQS.............................................75
Using the Telnet Terminal Commands ..................................75
Viewing Call Logs .................................................................76
Viewing ISDN Logs ............................................................77
Viewing PPP Logs ...............................................................77
Viewing WAN Logs ............................................................77
FAQs................................................................................................................. 78
APPENDIX B – BASIC IP CONCEPTS ............................................................ 79
IP Addresses ..................................................................................................... 79
IP Network Classes ................................................................80
Subnet Mask...................................................................................................... 81
APPENDIX C – IP PROTOCOL AND PORT NUMBERS.......................................82
IP Protocol Numbers ........................................................................................ 82
IP Port Numbers............................................................................................... 82
APPENDIX D - TECHNICAL SPECIFICATIONS .................................................. 83
INDEX ........................................................................................................85
DI-304/DI-304M ISDN Remote Router
1
Introduction
Congratulations on your purchase of a D-Link DI-304 remote access router with
integrated Ethernet switch and ISDN TA. No larger than an ordinary modem, your
router offers inexpensive yet complete telecommunications and internetworking
solutions for your home or branch office. It is ideal for applications such as
Internet/intranet access, Wide Area Networking, Electronic Commerce, and Remote
Network Access.
This complete solution also includes remote dial-in user support, an Internet single-
user account (Network Address Translation) option, extensive network management
capabilities, and solid security features.
The DI-304 provides multiple users with efficient and reliable access over a single
ISDN BRI, DSL line, or Cable Modem (Dynamic IP is not supported) service to the
Internet and corporate LAN for using E-mail, sharing documents, Web surfing, file
transfers, etc. Moreover, the provision of a built-in four-port Fast Ethernet Switch
and one Uplink port may give cost-effective workgroup connectivity over Ethernet.
In addition to improving the productivity of employee, flexible telecommuting
access, and affordable management cost, the DI-304 accommodates room
for business growth from 4 computers or more.
The broadband access protocol supports PPPoE, PPTP, and Static IP. These
protocols comply with worldwide Ethernet-based DSL/Cable Modem standards.
The Router provides seamless migration from ISDN to a broadband connection for
multiple SOHO users and easy usage of ISDN for backup-dial and/or remote access
while concurrently using the DSL/Cable modem connection.
PPPoE/PPTP allows users on the LAN interface to setup a dial-on-demand DSL
connection sharing the same IP account, and paying for only one connection. The
idle-time out function prevents wasted connection charges by shutting down the
connection when it is idle. No PPPoE/PPTP client software is required for the
computers.
Product Features
The DI-304 router is packed with features that give it the flexibility to provide a
complete networking solution for almost any small to medium-sized office
environment.
Ease of Installation
Your DI-304 is a self-contained unit that is quick and easy to install. Physically, it
resembles an external modem; however, it is a combination ISDN router and
DI-304ISDN Remote Router
2
Ethernet switch, and it uses twisted-pair Ethernet cables to connect to the host
network.
Built-in Switch
A dual-speed NWay switch, the DI-304 provides four ports for connecting network
end nodes—single-user computers, servers, bridges, other routers, etc.—through
standard “straight-through” twisted-pair cables and one port for making an “uplink”
connection to another hub or switch through the same type of straight-through cable
used to connect end nodes.
ISDN Basic Rate Interface (BRI)
Using a standard S/T the DI-304 supports DSS1 ISDN switches. The two ISDN B-
channels can be used independently for two destinations, or they can be bundled
together for one high-bandwidth connection supporting bandwidth-on-demand.
Dial On Demand
The Dial On Demand feature allows a DI-304 to automatically place a call to a
Remote Node whenever there is traffic coming from any workstation on the LAN
(Local Area Network) to that remote site.
Bandwidth On Demand
Bandwidth-on-Demand (BOD) for ISDN Interface: As the ISDN BRI interface has
two independent B channels, the BOD mechanism allows you to automatically
add/drop a B channel according to data traffic throughput.
Full Network Management
The DI-304 incorporates SNMP (Simple Network Management Protocol) support
and menu-driven network management via a Telnet connection or an embedded
Web configuration program.
PPP Security
The DI-304 supports PAP (Password Authentication Protocol) and CHAP
(Challenge Handshake Authentication Protocol).
RIP-1/RIP-2
Routing Information Protocol (RIP) Support: Used in most LAN-to-LAN
applications. The RIP protocol exchanges routing information between routers.
DHCP Support (Dynamic Host Configuration Protocol)
DHCP (Dynamic Host Configuration Protocol) allows IP addresses to be
automatically and dynamically assigned to hosts on your network.
DI-304/DI-304M ISDN Remote Router
3
Networking Compatibility
The DI-304 is compatible with remote access products from other companies such
as Ascend, Cisco, and 3Com. Additionally, Microsoft Windows 95, 98, 2000, and
Windows NT remote access capability are all supported.
Firmware Upgrade (TFTP) Server
Using this server and the Firmware Upgrade Utility software, you may easily
upgrade to the latest firmware whenever enhanced features are added.
Web (HTTP) Server
A Web browser is the most common tool used to surf the Internet. You may use
Microsoft Internet Explorer or any Netscape browser to configure the Router. It’s as
easy as surfing a Website.
Remote Access Server (RAS)
RAS provides remote dial-in access services for home workers, branch offices, or
telecommuters. DI-304 routers offer 10 dial-in user profiles, including an
authentication mechanism through CHAP/PAP and Calling Line Identification
(CLID), secure callback functions, and 16 Lan-to-Lan Dialer Profiles.
Domain Name Server (DNS) Proxy
The DNS proxy maintains a DNS cache, including a mapping table between domain
names and IP addresses. The proxy also remembers DNS query packets sent through
the router and saves them into its own DNS cache. For enhanced speed, when a
DNS query packet enters the router, the proxy searches its local DNS cache. If
matched, the router sends an answer to the host that sent the DNS query packet.
Only unmatched DNS queries require querying a WAN Domain Name Server.
Telnet Terminal Server
The Telnet User Interface (TUI) is an efficient method of configuring and managing
routers. It utilizes a traditional command-line user interface and is mainly for
advanced configuration, management, and troubleshooting.
Built-in Flash ROM
The Flash ROM memory saves the router firmware and configurations, even after
power down.
Point-to-Point over Ethernet (PPPoE) Client Support
If you are a DSL user, the router has a built-in PPPoE client for establishing
a DSL link connection with the ISP. There is no need to install a further PPPoE
driver on your computers.
DI-304ISDN Remote Router
4
Point-to-Point Tunneling Protocol (PPTP) Client Support
Some DSL modems (e.g. Alcatel modems) only provide a PPTP local connection for
an end user computer. The DI-304 has a built-in PPTP client for establishing a DSL
link transport protocol for your entire local network. There is no need to install a
PPTP driver on your computers.
Firewall
In addition to the built-in NAT mechanism, the Router features another powerful
firewall to protect your local network or to deny specified local users access to
unauthorized network services.
Remote Management
The system manager can remotely manage the routers through an ISDN remote dial-
in, ISDN, or DSL WAN interface.
Applications for your DI-304
Some applications for the DI-304 include:
Internet Access
Your DI-304 supports TCP/IP protocol, which is the language used for the Internet.
It is also compatible with access servers manufactured by major vendors such as
Cisco and Ascend.
Network Address Translation (NAT)
For small office environments, the DI-304 allows multiple users on the LAN to
access the Internet concurrently through a single Internet account. This provides
Internet access to everyone in the office for the price of a single user.
NAT address mapping can also be used to link two IP domains via a LAN-to-LAN
connection.
LAN-to-LAN Enterprise Connections
The DI-304 can dial to or answer calls from another remote access router connected
to a different LAN. The DI-304 supports TCP/IP and has the capability to bridge
any Ethernet protocol.
Remote Dial-In Server
The DI-304 allows Remote Dial-in Users to dial in and gain access to your LAN.
This feature enables users that have workstations with remote access capabilities,
e.g., Windows 98, to dial in using an ISDN terminal adapter (TA) to access the
network resources without physically being in the office.
DI-304/DI-304M ISDN Remote Router
5
What This Manual Covers
This manual is divided into thirteen parts.
♦ Chapter One, “Introduction,” describes many of the
technologies implemented in the DI-304 as well as product
features, etc.
♦ Chapter Two, “Installation and Setup,” is designed as a step-
by-step guide to installing the router. In addition, descriptions
of the front panel and rear panel are provided.
♦ Chapter Three, “Basic Configuration and Internet Access,”
provides detailed explanations for basic setup and Internet
access setup. It also covers ISDN dial-up Internet access and
DSL/cable modem Internet access.
♦ Chapter Four, “Remote Access,” provides an introduction to
remote access, including remote dial-in access and LAN-to-
LAN access.
♦ Chapter Five, “Advanced Setup,” describes how to enable the
remote activation function, and configure the BOD
parameters, as well as information relating to NAT setup and
IP filter and firewall setup.
♦ Chapter Six, “System Management,” gives detailed
explanations of online status and management setup, as well
as information pertaining to diagnostic tools and rebooting the
system.
♦ Appendix A, “Troubleshooting and FAQ,” includes some of
the most Frequently Asked Questions.
♦ Appendix B, “Basic IP Concepts,” contains a brief of some
fundamental IP concepts.
♦ Appendix C, “IP Protocol and Port Numbers,” lists many
commonly used IP settings.
♦ Appendix D, “Technical Specifications,” lists specifications
about the DI-304 ISDN router.
Regardless of the application, it is important that you follow the steps outlined in
Chapters 2, “Installation and Setup,” to correctly connect your DI-304 to your LAN.
You can then refer to other chapters of the manual depending on your specific
installation requirements.
DI-304ISDN Remote Router
6
What This Manual Doesn’t Cover
This manual assumes that you know how to use your computer and are familiar with
your communications software. If you have questions about using either one, refer
to the manual for the product.
Other Resources
For more information about your DI-304 check the following sources:
♦ Quick Start Guide.
♦ Support disk containing Router Tools.
Packing List
Before proceeding further, check all items received with your DI-304 against this
list to make sure nothing is missing. The complete package should include:
♦ One DI-304 ISDN router.
♦ One power adapter.
♦ One Ethernet LAN cable.
♦ One ISDN cable with RJ-45 connectors.
♦ One hard copy of the Quick Installation Guide.
♦ One hard copy of the User’s Guide.
♦ One User’s Guide on CD-ROM
Additional Installation Requirements
In addition to the contents of your package, there are other hardware and software
requirements you need before you can install and use your router. These
requirements include:
♦ An ISDN line.
♦ Ethernet connection(s) to your computer(s).
After the router has been successfully connected to your network, you can make
future changes to the configuration using a Telnet client application.
DI-304/DI-304M ISDN Remote Router
7
Installation & Setup
Before You Start
♦ Use only the power adapter supplied by D-Link Corporation (17 VAC 1A).
Using an incorrectly rated power adapter will result in damage to the router.
♦ Know the type of interface provided by your ISP or telecom. The standard model
only supports the ISDN BRI S/T-interface. If you are an ISDN U-interface user,
you need to order a U-interface model. If you are an ISDN S/T-interface user,
you should have an NT-1 or NT-1 plus provided by your ISP or telecom. Also,
make sure the ISDN line is available.
♦ In case of emergency, unplug the power adapter first.
♦ Locate the device in a clean location. Do not block the ventilating slots on the
rear panel.
♦ Cables must be attached to the correct ports; to do otherwise may result in
damage to the router. Keep cables away from walkways.
♦ If you use S/T-interface, do not extend the ISDN line greater than 100 meters
from the NT-1 (NT-1 plus) box and the router.
♦ If you use DSL/Cable, check that your subscribed DSL/Cable modem supports
the Ethernet interface for connecting to your PC. If not, you will be unable to
connect it to the router.
Ordering Your ISDN Line
If you do not have an ISDN line installed already, we suggest that you order it from
your telephone company as soon as possible to avoid the long waiting period
common when ordering a new line. Use the information in this section to place the
order. If you have already installed your ISDN line, you can check the following
section to make sure that you can use all the features of your DI-304.
1. Contact your local telephone company’s ISDN Ordering Center.
2. Make sure DSS1 switches are available since these are the only switch types
currently supported by the DI-304.
3. When the telephone company installs your ISDN line, be sure to obtain the
following information:
◊ ISDN switch type.
◊ ISDN telephone number(s).
DI-304ISDN Remote Router
8
Before you set up the router, you need to know the default settings of the DI-304 as
shown below:
Factory Default Settings:
Default IP Network Settings:
IP Address: 192.168.0.1
Subnet Mask: 255.255.255.0
DHCP Server: Enabled
Start IP Address: 192.168.0.100
IP Pool Counts: 100
DNS Server IP Address
- Primary IP Address: empty
- Secondary IP Address: empty
Web Configurator:
Username: admin
- Password: <blank>
Note: Blank means no password required.
Telnet Console:
Password: <blank>
Note: Blank means no password required.
Management from the Internet: Not allowed
Remote Dial-In Server: Disable
IP: 192.168.0.200.
The following section outlines how to connect your DI-304 to your LAN and ISDN
line. Refer to the diagrams below to identify all of the ports on your device when
you make connections.
The DI-304 Front Panel
Names and descriptions of your router’s front panel LEDs are given below:
DI-304ISDN Remote Router
10
The DI-304 has a power jack, an uplink port, four RJ-45 ports, an ISDN port on the
rear panel, and a factory reset button. Please note that only the D-Link supplied
power adapter should be connected to the power jack.
♦ POWER — This socket is an 17 volt, 1000mA power input jack. If the
power adapter included with the router has been lost or misplaced,
please ensure that the replacement adapter meets both the voltage and
amperage requirements.
♦ ETHERNET – The Ethernet ports function as a normal, dual speed
NWay Ethernet switch.
♦ Uplink – This port is used to connect the router to another
switch or hub using a straight-through twisted-pair cable.
When the Uplink port is used, Port 1x is unavailable.
♦ Ports 1x to 4x – These four ports can be used to connect
end-stations to the router using straight-through cables.
♦ ISDN – This socket is used to connect the ISDN line to either an NT-1
or directly to the ISDN wall jack, depending on the type of service
delivered by your phone company.
♦ Factory Reset :
Press and hold the button. Then switch on your DI-304.
The Status LED flashes.
To reset the DI-304 to the factory settings: Press and hold the button for
5 seconds when the unit is switched on. The Status LED will flash more
quickly – at this moment, release the button and the router is reset to its
factory settings.
Hardware Installation
Connecting the Power Adapter
1. Connect the power adapter to the electrical outlet in the wall and to the power
jack on the rear panel of the router.
2. The Act LED should be blinking once every 2 seconds.
Connecting to the Ethernet
A. Connecting to PCs:
1. Attach the Ethernet cable to any P1 ~ P4 port.
DI-304/DI-304M ISDN Remote Router
11
2. Connect the other end of the Ethernet cable to your PCs' installed network
interface card (NIC).
3. The LED indicators at both the Ethernet port and the NIC should be ON.
Note: If the Ethernet cable is not long enough to reach your PCs, purchase a longer
straight-through Cat. 5 UTP or STP Ethernet cable.
B. Connecting to an External Ethernet Hub:
1. Attach the Ethernet cable to the Uplink port.
2. Connect the other end of the Ethernet cable to the external Ethernet hub or
switch.
3. The LED indicators on both the Uplink port and the external Ethernet hub
or switch should be ON.
Note: If the Ethernet cable is not long enough to reach the external hub/switch,
purchase a longer straight-through 10BASE-T Ethernet cable, or connect two
shorter cables to create a cable of sufficient length.
Connecting to an ISDN BRI Line
A. S/T-Interface Model
1. Locate the ISDN cable.
2. Plug one of the RJ-45 connectors on the cable into the ISDN port on the
rear panel of the router.
3. Plug the other end of the cable into any of the NT-1 (or NT1 plus) S/T-
interface ports.
B. U-Interface Model
1. Locate the ISDN cable.
2. Plug one of the RJ-45 connectors on the cable into the ISDN port on the
rear panel of the router.
3. Plug the other end of the cable into the ISDN wall outlet.
Connecting to a DSL/Cable Modem
The router supports connection of a DSL modem via an Ethernet interface only.
Non-Ethernet interface DSL modems, such as USB and ATMF-25, will not be
supported.
DI-304ISDN Remote Router
12
1. Attach the Ethernet cable to the Ethernet port of the DSL/Cable modem.
2. Plug the other end of the cable into the P1 to P4 port.
3. If the port’s LED is not bright, please change the direct cable to cross cable.
The hardware installation is now complete. The following sections will guide you
through setting up your management PC and connecting to the Web Configurator.
Setting Up a Management PC
The Router has a built-in HTTP (Web) server for configuration. Before you use the
router to access the Internet, you should set up a management PC to log into the
router for further configuration. The management PC may be configured with a
fixed or dynamically assigned IP address. For a fixed IP address, use an IP address
from a 192.168.0.0/24 network, such as 192.168.0.2. For the dynamic IP address,
you need to set the PC as a DHCP client, and then restart or renew the network
settings. The DHCP server embedded in the router is enabled by default so the PC
will then be assigned an IP address and related settings by the router. The following
examples are for a Microsoft Windows 95/98 machine set to use a dynamic IP
address. For other operating systems, please refer to the OS user manuals.
Checking the Network IP Configuration
The following explains how to setup the Transmission Control Protocol/ Internet
Protocol (TCP/IP) in Windows 95/98. For more detailed information on TCP/IP
setup, refer to the Windows 95/98 help files. For other operating systems refer to the
user manuals.
1. On the desktop, right-click Network Neighborhood. Click Properties. The
Network window will open:
DI-304/DI-304M ISDN Remote Router
13
Your particular system may differ from the window shown here. Check if you have
an Ethernet Network Interface card (NIC) installed. If not, refer to the installation
documentation from the NIC card manufacturer and install the card and drivers.
If you have installed the NIC card,
1. Click the Add button. The Select Network Component
Type dialog box will open. This box has four options: Client, Adapter,
Protocol, and Service.
2. Select Protocol and click the Add button. The Select Network Protocol
dialog box will open.
3. Select Microsoft in the left scrolling window, then select TCP/IP on the
right, and click OK. It will return to the Network dialog box.
Configuring the TCP/IP Protocol
1. On the Network dialog box Configuration card, select TCP/IP and then click
Properties. The TCP/IP Properties dialog box will open.
DI-304ISDN Remote Router
14
2. On the IP Address tab, click Obtain an IP address automatically. As the
DHCP (Dynamic Host Configuration Protocol) server built into the router is enabled
by default, your computer will get an IP address, subnet mask, and other related IP
network settings from the router.
3. On the DNS Configuration tab, click Disable DNS.
4. Click the Gateway tab.
DI-304/DI-304M ISDN Remote Router
15
5. Make the New gateway and Installed gateways fields blank and click OK. A
dialog box will pop up asking you to restart the PC. Click Yes.
Checking TCP/IP Settings
1. After completing the previous steps, click Start → Run. Click the Gateway tab
and type winipcfg. The IP Configuration window will open. If the PC does not
show an IP address in the 192.168.0.2 to 192.168.0.254 range, click the Release
button to release the current configuration. Wait a few seconds and click Renew to
get a new IP configuration from the router.
DI-304ISDN Remote Router
16
2. If the IP configuration is correct, you will be able to use the Ping diagnostic utility
built in Microsoft Windows to Ping the router. Click Start → Programs → MS-
DOS Prompt. A command mode window will open. Type ping 192.168.0.1 (default
IP of the router) to diagnose the network connectivity. If both hardware and
software are correct, your computer will receive a response from the router as shown
on the next page. If not, verify that the Ethernet cable is connected to the router
properly and the Ethernet port LED on the front panel is lit.
Using the Smart Start Wizard
The Smart Start Wizard will guide you to the Web Configurator or Telnet
Terminal (command-line based management). Also, if the network you currently
installed is not located in the 192.168.0.x IP range, the wizard will find the router
and change the router's default IP address and IP mask to match the current network.
If you are familiar with using a Web browser (Microsoft Internet Explorer, Netscape
Communicator, etc.) or Telnet client software, you may jump directly to the next
section. We suggest you use the most up-to-date version of your Web browser.
DI-304/DI-304M ISDN Remote Router
17
Installing the Router Tools
1. Insert the CD supplied with the router into the CD-ROM drive. The auto-run CD
will display the main menu.
Note: If auto-run fails to start the installation program, click autostart.exe on the
root directory of the CD to start the program.
2. Click Router Tools for install. The Router Tools utilities include Firmware
Upgrade Utility, Smart Start Wizard, and Uninstall Router Tools.
Using the Wizard
1. Click Start → Programs → Router Tools → Smart Start Wizard.
2.
The following screen will open.
2. Click Search to find the router on your network.
3. Click OK to go to the login password screen.
DI-304ISDN Remote Router
18
4. If this is the first time you setup the router, do not enter any password. Click OK
to go to the next screen.
The screen shows read-only IP and IP mask settings for the PC you are using, and
also the IP Address and IP Mask settings for the router. Here you may change the
settings of the router to match your current network environment, or keep the default
settings.
5. Click Next to update the settings of the router.
DI-304/DI-304M ISDN Remote Router
19
6. Wait for a few seconds. The Telnet and the Browser will be clear (see below).
If the IP address and IP Mask of your PC and the router are not located at the same
subnet, please renew your PC's IP address using winipcfg.exe on
Windows95/98/ME or ipconfig.exe on Windows NT/2000. As the browser has been
launched, the following pop-up window will ask for User Name and Password.
DI-304ISDN Remote Router
20
Enter admin as the User Name and leave the Password field blank. The Web
Configurator will open.
Using the Web Configurator
Connecting to the Web Configurator via a Web Browser
1. Launch the Web browser. Enter http://192.168.0.1 into the browser Address
window and press the Enter key.
2. An authentication dialog box will open.
DI-304/DI-304M ISDN Remote Router
21
3. If this is the first time you setup the router, type admin as the User Name and
leave the Password field blank. Click OK.
4. The Web Configurator Setup Main Menu will open. On the main page, Model,
Firmware Version, Build Date/Time, and LAN MAC (Hardware) Address
information will be displayed.
Overview of the Web Configurator
The Setup Main Menu (see above figure) consists of five groups: Home, Advanced,
Tools, Status, and Help. The following will describe the outline for each
configuration menu.
Home (Setup First):
1. Admin Setup:
Sets/changes the administrator password.
2. Ethernet Setup:
Modifies the router's IP address and DHCP server settings.
3. Internet Access Setup: (required for Internet access)
DI-304ISDN Remote Router
22
Usually the router functions as a border router for SOHO or home
networking so you must enter settings here to enable access to the Internet.
4. ISDN Setup:
ISDN users need to select a country code. Sets some ISDN
numbering settings, e.g. MSN numbers and Own (Calling) numbers.
5. Remote Dial-In Access Setup:
Remote access or LAN-to-LAN remote access settings are made here.
Advanced Setup:
The following settings are for advanced configurations only. These items do not
need to be configured for standard Internet access.
1. Dynamic DNS
Supports the Dynamic DNS function.
2. Call Control Setup:
Sets bandwidth-on-demand (BOD) parameters for the MP (Multiple link
PPP) protocol. Also, some call control parameters may be set here.
3. Call Schedule Setup:
Supports totals 15 profiles for call schedule usage.
4. NAT (Network Address Translation) Setup:
Sets NAT configurations, such as Port Redirection, etc.
5. Radius Client
This menu can be used to setup this router as a Radius client.
6. Static Route Setup:
This menu has 10 routing rules for static routing usage. Here you may
add/delete or activate/deactivate any static route.
7. Remote Dial-in User Setup:
This menu supports 10 remote dial-in accounts for remote access
applications. You can manage these dial-in accounts under the setup menu.
8. LAN-to-LAN Dialer Profile Setup
The LAN-to-LAN Dialer Profiles are different from last setup menu. Here up
to 16 LAN to LAN profiles can be set for access to up to 16 remote networks
via an ISDN line. These profiles have dial-out/dial-in/static route functions.
9. Firewall Setup
The router has a powerful built-in firewall. Up to 84 Call Filter and Data
Filter rules may be set.
System Management:
DI-304/DI-304M ISDN Remote Router
23
1. Syslog Setup
The router can be setup as a syslog client.
2. Time Setup:
Sets time information for the router.
3. Configuration Back/Restore
Router configuration can be saved in a single file for restoration later.
4. Management Setup
This allows you to grant or limit access rights to manage the router. Also,
you may set HTTP or Telnet ports to specific port numbers of your choice.
5. Reboot System
You can restart the router with the default configuration or with the current
running configuration.
6. Firmware Upgrade (TFTP Server)
Enables the TFTP server for firmware upgrades.
Status:
1. Online Status
Click this item to view the current online status and statistics of the system.
2. Diagnostic Tools.
Diagnostic tools offers useful tools to diagnose the router or your network,
e.g. view ARP table, routing table, NAT port map, DHCP server status, last
triggered packet, etc.
Help:
Help file can be accessed here.
Note: You should now have some basic concepts on how to setup and
configure the router. The following chapters will explain each setup menu
and related settings in more detail.
DI-304ISDN Remote Router
24
Basic Configuration and Internet Access
Basic Setup (Setup First)
This group includes Administrator Password Setup, Ethernet TCP/IP and
DHCP Setup, and ISDN Setup.
Changing the Administrator Password
On first setup the router requires no password. However, for security reasons, we
strongly recommend that you set an administrator password for the router. If you do
not set a password for the router, any user can access the setting of the router and
make changes randomly from local network or the Internet.
Click Administrator Password Setup, the following screen will open.
♦ Old Password – If this is the first time you enter this menu, leave this
field blank.
♦ New Password – Enter an administrator password.
♦ Retype New Password – Type the password again to confirm.
Configuring Ethernet TCP/IP Address and DHCP Server
The Router has four Ethernet ports for connecting to the local Ethernet network and
external broadband device (i.e. DSL modem/router or Cable modem). There are two
sets of IP address settings for the Ethernet. The first IP address/net mask is for
private users or NAT users, and the second IP address/subnet mask is for public
users or pure router (not NAT) user. To allow access of public users you need to
subscribe a globally reachable subnet from your ISP.
For example, for some ISDN dial-up access, the ISP will assign a few public IP
addresses for your local network usage. You could use one IP address for your
router; the second IP address/subnet mask should be configured using the public IP
DI-304/DI-304M ISDN Remote Router
25
address. Other local PCs should set the router IP address as the default gateway.
When the ISDN connection to the ISP has been established, each local PC will
directly route to the Internet. Also, you could use the first IP address/subnet mask to
connect to other private users (PCs). These user's IP addresses will be translated to
the second IP address by the router and sent out via ISDN.
Router IP Network Configuration:
For NAT Usage
♦ 1st IP Address – Private IP address for connecting to a local private
network (Default: 192.168.0.1).
♦ 1st Subnet Mask – Subnet mask for the local private network (Default:
255.255.255.0/24).
For IP Routing Usage – (Default: Disable)
♦ Enable – Enable the 2nd IP address settings.
♦ Disable – Disable the 2nd IP address settings.
♦ 2nd IP Address – Set a public IP address.
♦ 2nd Subnet Mask – Set a subnet mask for the public IP address.
DHCP Server Configuration:
Dynamic Host Configuration Protocol can automatically dispatch related IP settings
to any local user configured as a DHCP client. The DHCP server supports up to 253
users (PCs) on the local network.
♦ Activate – (Default: Yes)
♦ Yes – Enable the DHCP server.
♦ No – Disable the DHCP server.
♦ Start IP Address – Set the start IP address of the IP address pool.
♦ IP Pool Counts – Set the number of IPs in the IP address pool.
♦ Gateway IP Address – Set the Gateway IP address.
♦ DNS Server IP Address – (Default: None) DNS stands for Domain
Name System. Every Internet host must have a unique IP address. They
may also have an easy-to-remember name such as www.dlink.com.tw.
The DNS server converts this name into its equivalent IP address.
♦ Primary IP Address – Set the IP address of the primary DNS server.
DI-304ISDN Remote Router
26
♦ Secondary IP Address – Set the IP address of the secondary DNS server.
If you leave both Primary IP and Secondary IP Address fields blank, the router will
assign its own IP address to local users as a DNS proxy server and maintain a DNS
cache. If the IP address of a Domain Name is already in the DNS cache, the router
will resolve the Domain Name immediately. Otherwise, the router forwards the
DNS query packet to the external DNS server by establishing a WAN (e.g. ISDN or
DSL/Cable) connection.
Configuring the ISDN Interface
♦ Country Code – Set the correct country code for proper function on your
local ISDN network.
♦ Own Number – Set your ISDN number. The number you entered in this
field will be carried with every outgoing call to the users you called.
♦ MSN Numbers for the Router – "MSN Numbers" means that the router
is able to accept number-matched incoming calls. The router provides
three MSN number fields. Note that MSN services must be subscribed to
from your local telecom. By default, MSN function is disabled (i.e. leave
the MSN number fields blank) under which all incoming calls will be
accepted without number matching. Click OK to return to the Main
Setup Menu.
Internet Access Setup
For most users, Internet access is the primary application. The following sections
will explain more details of ISDN dial-up access and broadband access setup. When
you click Internet Access Setup within the Quick Setup group, the following setup
page will be shown.
DI-304/DI-304M ISDN Remote Router
27
Five methods are available for Internet Access:
♦ Dialing to Single ISP – If you want to access the Internet via a single
ISP, click here.
♦ Dialing to Dual ISP – If you have more than one ISP, click here to set up
two ISP dialup profiles. You will be able to dial to both ISPs at the same
time. This is mainly for those ISPs who do not support Multiple link PPP
(ML-PPP). In such cases dialing to two ISPs can increase the bandwidth
utilization of the ISDN line to 128kbps data speed.
♦ PPPoE – This is for most DSL modem users. All local users can share
one PPPoE connection to access the Internet.
♦ PPTP – Some DSL service providers supply a special DSL modem (e.g.
Alcatel's DSL modem). This kind of modem only supports the PPTP
tunnel method to access the Internet. In these cases, you create a PPTP
tunnel that carries a PPP session and terminates on the DSL modem. Once
the tunnel has been established, this kind of DSL modem will forward the
PPP session to the ISP. As long as the PPP session is connected, all the
local users will be able to share this PPP session to access to the Internet.
♦ Static IP – If you have obtained public IP address from DSL, Leased-
Line or Cable (static IP only) service provider, select Static IP to setup
your Internet Access mode.
DI-304ISDN Remote Router
28
ISDN Dial-up Internet Access
Dialing to a Single ISP
ISP Access Setup
♦ ISP Name – Enter your ISP name.
♦ Dial Number – Enter the ISDN access number provided by your ISP.
♦ Username – Enter the username provided by your ISP.
♦ Password – Enter the password provided by your ISP.
♦ Require ISP Callback (CBCP) – If your ISP supports the callback
function, check "Require ISP Callback (CBCP)" to enable the Callback
Control Protocol during PPP negotiations.
♦ Scheduler (1-15) – Enter up to 4 index numbers for calls that have been
previously configured on the Call Schedule Setup windows (under
Advanced Setup).
PPP/MP Setup
♦ Link Type – There are four link types:
◊ Link Disable - Disable the ISDN dial-out function.
◊ Dialup 64Kbps - Use one ISDN B channel for Internet access.
◊ Dialup 128Kbps - Use both ISDN B channels for Internet access.
◊ Dialup BOD -BOD stands for bandwidth-on-demand. The router
will use only one B channel under low traffic situations. Once the
single B channel bandwidth is filled, the other B channel will be
dialed automatically. For more detailed BOD parameter settings,
refer to the Advanced Setup group→ Call Control and PPP/MP
Setup.
◊ None not included.
♦ PPP Authentication – There are two types of authentication:
◊ PAP Only - Set the PPP session to use the PAP protocol to
negotiate the username and password with the ISP.
DI-304/DI-304M ISDN Remote Router
29
◊ PAP or CHAP - Set the PPP session to use the PAP or CHAP
protocols to negotiate the username and password with the ISP.
♦ Idle Timeout – Idle timeout means the router will disconnect after being
idle for a preset amount of time. The default is 180 seconds. If you set the
time to 0, the ISDN connection will remain always connected to the ISP.
IP Address Assignment Method (IPCP)
♦ Fixed IP and Fixed IP Address – In most environments you should not
change the default settings as most ISPs provide a dynamic IP address for
the router when it connects to the ISP. If your ISP provides a fixed IP
address, check Yes and enter the assigned IP address in the Fixed IP
Address field.
Dialing to Dual ISPs
Most configuration parameters are the same as last section. This page provides an
"Enable Dual ISPs Function" check box and adds a secondary ISP Setup section.
Check the box and enter the second ISP information.
ISP Access Setup
♦ ISP Name – Enter the Internet Service Provider Name.
♦ Username – Enter the username obtained from your ISP provider.
♦ Password – Enter the password obtained from your ISP provider.
PPP/MP Setup
♦ Link Type – You have three selections:
◊ Link Disable – Disables the ISDN dial-out function.
◊ Dialup 128Kbps – Uses both ISDN B channels for Internet access.
DI-304ISDN Remote Router
30
◊ Dialup BOD – BOD stands for bandwidth-on-demand. The router
will use only one B channel under low traffic situations. Once the
single B channel bandwidth is filled, the other B channel will be
dialed automatically. For more detailed BOD parameter settings,
refer to the Advanced Setup group > Call Control and PPP/MP
Setup.
♦ PPP Authentication – Two types of authentication
◊ PAP Only - Set the PPP session to use the PAP protocol to
negotiate the username and password with the ISP.
◊ PAP or CHAP - Sets the PPP session to use the PAP or CHAP
protocols to negotiate the username and password with the ISP.
IP Address Assignment Method (ICPC)
♦ Fixed IP and Fixed IP Address – In most environments you should not
change the default settings as most ISPs provide a dynamic IP address for
the router when it connects to the ISP. If your ISP provides a fixed IP
address, check Yes and enter the assigned IP address in the Fixed IP
Address field.
DI-304/DI-304M ISDN Remote Router
31
DSL/Cable Modem Internet Access
Before you connect a broadband access device, e.g. a DSL/Cable modem, to the
router, you need to know what kind of Internet access is provided by your ISP.
The following paragraphs deal with three widely used broadband access services.
These are PPPoE Client, PPTP Client, and Static IP for DSL/Cable Modem. In
most cases, you will get a DSL/Cable modem from the broadband access service
provider. The router is connected behind the broadband device and works as a NAT
or IP router for broadband and ISDN connections.
In addition to broadband access capabilities, the ISDN port can do dial backup, or
provide remote access and remote management functions to support more flexible
network connectivity. The following application scenario shows that the head office
is capable of getting on to the Internet through the DI-304 and a broadband device
and connecting to the branch office via an ISDN network simultaneously.
Using PPPoE with a DSL Modem
Click Internet Access Setup → PPPoE to enter the setup page.
DI-304ISDN Remote Router
32
PPPoE Setup
♦ PPPoE Link – Check Enable to enable the PPPoE client protocol.
ISP Access Setup
♦ ISP Name – Enter the ISP name.
♦ Username – Enter the ISP supplied username.
♦ Password – Enter the ISP supplied password.
♦ Scheduler (1-15) – Enter up to 4 index numbers for calls that have been
previously configured on the Call Schedule Setup windows (under
Advanced Setup).
ISDN Dial Backup Setup
♦ Dial Backup Mode –There are three options:
◊ None - Disable the backup function.
◊ Packet Trigger - The backup line is disconnected until a packet
from a local host triggers the router to establish a connection.
◊ Always On - If the broadband connection is no longer available,
the backup line will automatically connect and stay Always On
until the broadband connection is recovered.
PPP/MP Setup
♦ PPP Authentication – Select PAP or CHAP for widest compatibility.
♦ Always On - If the broadband connection is no longer available, the
backup line will automatically connect and stay Always On until the
broadband connection is recovered.
♦ Idle Timeout – Idle timeout means the router will disconnect after being
idle for a preset amount of time. The default is 180 seconds. If you set the
time to 0, the PPP session will not terminate itself.
♦ Fixed IP – Check No (Dynamic IP) unless your ISP has provided you
with a static IP address.
DI-304/DI-304M ISDN Remote Router
33
♦ Fixed IP Address – If your ISP has provided you with a static IP address
enter it here.
IP Address Assignment Method (IPCP)
♦ Fixed IP – Check No (Dynamic IP) unless your ISP has provided you
with a static IP address.
♦ Fixed IP Address – If you ISP has provided you with a static IP address
enter it here.
Click OK.
Using PPTP with a DSL Modem
PPTP Setup
♦ PPTP Link – Check Enable to enable a PPTP client to establish a tunnel
to a DSL/Cable modem.
♦ PPTP Server IP Address – Specify the IP address of the PPTP-enabled
DSL/Cable modem. Refer to the user manual of the PPTP-enabled
DSL/Cable modem.
Click Internet Access Setup → PPTP to enter the setup page. The following
setup page is just for example. Your DSL/Cable service should provide the
exact settings.
ISP Access Setup
♦ ISP Name – Enter the ISP name.
♦ Username – Enter the ISP supplied username.
♦ Password – Enter the ISP supplied password.
DI-304ISDN Remote Router
34
♦ Scheduler (1-15) – Enter up to 4 index numbers for calls that have been
previously configured on the Call Schedule Setup windows (under
Advanced Setup).
ISDN Dial Backup Setup
♦ Dial Backup Mode – Select None to disable this feature or select Packet
Trigger to activate this feature.
PPP Setup
♦ PPP Authentication – Select PAP or CHAP for widest compatibility.
♦ Idle Timeout – Idle timeout means the router will disconnect after being
idle for a preset amount of time. The default is 180 seconds. If you set the
time to 0, the PPP session will not terminate itself.
♦ Fixed IP – Check No (Dynamic IP) unless your ISP has provided you
with a static IP address.
♦ Fixed IP Address – If your ISP has provided you with a static IP address
enter it here.
Using a Static IP with a DSL/Cable Modem
Select this access mode if you receive a fixed public IP address or a public subnet
from your DSL or Cable ISP. In most cases, a Cable ISP will provide a fixed public
IP, while a DSL ISP will provide a public subnet. You must enable IP Routing
Usage, and enter the fixed public IP or choose one public IP from the public subnet
for Ethernet TCP/IP Setup.
DI-304/DI-304M ISDN Remote Router
35
Click Ethernet to enable the “For IP Routing Usage” and type in the IP
address/subnet mask:
Click Internet Access Setup → Static IP to enter the setup page.
Access Control
♦ Broadband Access – Select Enable to turn on the broadband access
capability.
♦ Gateway IP Address – Enter the IP address from DSL service provider
as Router IP address or the fixed IP gateway IP address.
ISDN Dial Backup Setup
♦ Dial Backup Mode – Select None to disable this feature or select Packet
Trigger to activate this feature, or select always on to recover connection.
Note: The router should be restarted to allow the settings to take effect.
DI-304ISDN Remote Router
36
Configuring ISDN Dial Backup
♦ ISDN Dial Backup Setup – There are three options:
◊ None - Disable the backup function.
◊ Packet Trigger - The backup line is disconnected until a packet
from a local host triggers the router to establish a connection.
◊ Always On - If the broadband connection is no longer available,
the backup line will automatically connect and stay Always On until
the broadband connection is recovered.
♦ Dial Backup Mode – There are three options:
◊ None - Disable the backup function.
◊ Packet Trigger - The backup line is disconnected until a packet
from a local host triggers the router to establish a connection.
◊ Always On - If the broadband connection is no longer available,
the backup line will automatically connect and stay Always On until
the broadband connection is recovered.
To start ISDN Dial Backup function, you must create a dial backup profile. Click
Internet Access Setup → Dialing to a Single ISP to setup the backup profile.
DI-304/DI-304M ISDN Remote Router
37
Remote Access
This chapter explains the capabilities of remote access of the Router. Use the
following setup links on the Setup Main Menu to setup remote access functions.
Quick Setup
>> Remote Dial-In Access Setup
Advanced Setup
>> Remote Dial-In User Setup
>> LAN-to-LAN Dialer Profile Setup
The term "Remote Access" covers two types of remote access. The first, "Remote
Dial-In Access" means the router allows normal ISDN TA users or NAT routers (IP
sharing routers) to dial into the router for sharing the network resources of the local
network, or to surf the Internet via a broadband device. The other remote access
function, "LAN-to-LAN Access," provides a solution to connect two independent
LANs for mutual sharing of network resources. For example, the head office
network can access the branch office network, and vice versa.
Remote Dial-In Access
Activating Remote Dial-In
In the Quick Setup group of the Setup Main Menu, click Remote Dial-In Access
Setup to enter the setup page.
Dial-In Access Control
♦ Dial-In Service – Click Enable to allow dial-in service. Note that if you
click Disable, the router will not accept any in-coming ISDN calls.
DI-304/DI-304M ISDN Remote Router
38
PPP/MP Setup
♦ Dial-In PPP Authentication – There are two choices:
◊ PAP - Selecting this option will force the router to authenticate
dial-in users with the PAP protocol.
◊ PAP or CHAP - Selecting this option means the router will
attempt to authenticate dial-in users with the CHAP protocol first. If
the dial-in user does not support this protocol, it will fall back to use
the PAP protocol for authentication.
♦ Mutual Authentication (PAP) – Enable this only if the connecting router
requires mutual authentication. By default, the option is set to No.
♦ Username – Enter the mutual Authentication username.
♦ Password – Enter the mutual Authentication password.
IP Address Assignment for Dial-In Users
♦ Start IP Address – Enter a start IP address to be assigned to the dial-in
PPP connection. You should choose an IP address from the local private
network. For example, if the local private network is
192.168.1.0/255.255.255.0, you can choose 192.168.1.200 to be the Start
IP Address. Because one ISDN BRI has two independent data channels
(B-channels), it is possible to allow two dial-in users at the same time.
The first dial-in user would be assigned the start IP address and the
second would be assigned the start IP address plus 1. Click OK.
Creating an Access Account for a Dial-in User
After activating the dial-in capability, you must create an access account for each
dial-in user. From the Advanced Setup menu, click Remote Dial-In User Setup to
open the page shown below. The router provides 10 access accounts for dial-in
users.
♦ Set to Factory Default – Clicking here will clear all dial-in user
accounts.
DI-304/DI-304M ISDN Remote Router
39
♦ Index: Click one of the index numbers to open an individual setup page
and enter the detail setting for each account.
♦ Dial-In Username – The “???” means the access account has not set up
yet. If an access account has been configured, the username will be
shown.
♦ Status – The symbol "v" means the account is active, "x" means inactive.
Click the index number of an account to open an individual setup page for
detail setting.
User Account and Authentication
♦ Check to enable the user account – Check this item to activate the
individual user account.
♦ Username – Specify a username for the specific dial-in user.
♦ Password – Specify a password for the specific dial-in user.
♦ Idle Timeout – Default setting is 300 seconds. When a dial-in connection
has been idled longer than the time limit, the router will drop the
connection.
♦ Check to enable CLID authentication – For extra security, enables the
option to allow the dial-in user to call only from a specific number. CLID
stands for Calling Line Identification.
♦ Peer ISDN Number – If CLID authentication has been enabled, enter the
dial-in user's ISDN number.
Callback Function
The callback function provides a callback service for the dial-in user. The router
owner will be charged the connection fee by the telecom.
♦ Check to enable the Callback function – Enable the callback function.
♦ Specify the callback number – This option is for extra security. Once
enabled, the router will only call back to the specified ISDN number
defined in the next parameter, Callback Number.
DI-304/DI-304M ISDN Remote Router
40
♦ Callback Number – If the previous option has been enabled, enter the
dial-in user's ISDN line number here.
♦ Check to enable Callback Budget Control – Enable the callback budget
control.
♦ Callback Budget (Unit: minutes) – By default, the callback function has
a 30-minute time restriction. The budget will be decreased automatically
per callback connection. Once the callback budget has been exhausted,
the callback mechanism will be disabled automatically.
LAN-to-LAN Access
The following sections are based on the network layout above to describe how to set
up a LAN-to-LAN profile to connect two private networks. In the above network
layout, the private network of the head office is 192.168.1.0/24 and the off-site
branch office network is 192.168.2.0/24.
Before you begin to setup a LAN-to-LAN profile for each network, you should
gather the information shown in the following table.
Head Office Branch Office
Network ID 192.168.1.0/24 192.168.2.0/24
Router IP /Subnet mask 192.168.1/24 192.168.2.1/24
Assigned IP for dial-in
connection
192.168.1.200 192.168.2.200
Access Account UN: head; PW: head UN: branch; PW: branch
ISDN line number 1000 2000
Callback function Disable Disable
DI-304/DI-304M ISDN Remote Router
41
Activating the Dial-In Capability
In the Quick Setup group of the Setup Main Menu, click Remote Dial-In
Access Setup to enter the setup page. See the Remote Dial-In Access section earlier
in this chapter for a full explanation of the fields on this page.
Head Office:
The IP range of the Head Office network is 192.168.1.0/24. The settings should be
as below:
♦ Dial-In Service – Enable
♦ Start IP Address – 192.168.1.200.
Branch Office:
DI-304/DI-304M ISDN Remote Router
42
The IP range of the Branch Office network is 192.168.2.0/24, the settings should be
as below:
♦ Dial-In Service – Enable
♦ Start IP Address – 192.168.2.200
Creating a LAN-to-LAN Dialer Profile
After enabling the Dial-in service, you must create a LAN-to-LAN profile
for each network. From the Advance Setup menu, click LAN-to-LAN
Dialer Profile to enter the setup page displayed below.
DI-304/DI-304M ISDN Remote Router
43
The router provides 16 LAN-to-LAN profiles for connecting to up to
16 different remote networks.
♦ Set to Factory Default – Clicking here will clear all the LAN-to-LAN
profiles.
♦ Index – Click a number in the Index to open a detailed settings page for
each profile.
♦ Name – Indicate the name of the LAN-to-LAN profile. The symbol "???"
means the profile is available.
♦ Status – Indicate the status of the individual profiles. The symbol "v"
means the profile is active and "x" means it is inactive.
Click an index number to open an individual LAN-to-LAN profile settings page.
Each LAN-to-LAN profile includes 4 subgroups: Common Settings, Dial-Out
Settings, Dial-In Settings, and TCP/IP Network Settings. The following will explain
every subgroup in detail.
DI-304/DI-304M ISDN Remote Router
44
Common Settings
♦ Profile Name – Specify a name for the remote network.
♦ Enable this profile – Check here to activate this profile.
♦ Call Direction – Specify the allowed call direction for this profile.
◊ Both - allow access of both outgoing and incoming calls.
◊ Dial-Out - allow access of outgoing calls only.
◊ Dial-In - allow access of incoming calls only.
♦ Idle Timeout – Default setting is 300 seconds. When a connection of a
profile has been idled longer than the time limit, the router will drop the
connection.
Dial-Out Settings
♦ Username – Specify a username for authentication by the remote router.
♦ Password – Specify a password for authentication by the remote router.
♦ Dial Number – Specify the destination ISDN number for dialup.
♦ Scheduler (1-15) – Enter up to 4 index numbers for calls that have been
previously configured on the Call Schedule Setup windows (under
Advanced Setup).
♦ Link Type – Indicate the dial-out link type.
◊ Disable: Deactivate the dial-out action.
◊ 64kbps: Specify the outgoing connection speed is restricted to
64kbps (one B-channel).
◊ 128k bps: Specify the outgoing connection speed is 128kbps (two
B-channels).
◊ BOD: Specify the link type to be dynamic bandwidth control
(Bandwidth-on-Demand).
♦ PPP Authentication – Specify the authentication method. Normally set
to PAP/CHAP for the widest compatibility.
♦ VJ Compression – VJ Compression means TCP/IP protocol header
compression. Normally set to "On" to improve band-width utilization.
♦ Callback Function (CBCP) – The callback function is implemented by
the CBCP protocol that is one of the PPP protocol suite.
◊ Require Remote to Callback - Inactive by default. When active,
the router exchanges connection information with the remote router
and requires the remote router to call back to make a connection.
◊ Provide ISDN Number to Remote - In some cases, the remote
router requires the ISDN number for calling back. Check here to
allow the local router to send the ISDN number to the remote router.
The remote router owner will be charged the connection fee by the
telecom.
Dial-In Settings
♦ Username – Specify an username to authenticate the dial-in router.
♦ Password – Specify a password to authenticate the dial-in router.
♦ Enable CLID Authentication – Limit the dial-in router to be called from
a specific ISDN number.
DI-304/DI-304M ISDN Remote Router
45
♦ Peer ISDN Number – If CLID Authentication is enabled, enter the
remote router's ISDN number in this field
♦ Link Type – Refer to Dial-Out Settings.
♦ PPP Authentication – Refer to Dial-Out Settings.
♦ VJ Compression – Refer to Dial-Out Settings.
♦ Callback Function (CBCP) – Checking here allows this router to accept
requests from a remote router for call back.
◊ Enable Callback Function - Checking here to enable this function.
The router owner will be charged the connection fee by the telecom.
◊ Use the Following Number to Callback:
- Callback Number: Check here and enter a callback number
for the router to call.
- Callback Budget: Specify a time budget for the callback
function. By default the budget is set to zero, which means no
call back attempt will work.
TCP/IP Network Settings
The following settings are required for proper LAN-to-LAN operation.
♦ My WAN IP – In most cases you may accept the default value (0.0.0.0)
in this field. The router will then get a WAN IP address from the remote
router during the IPCP negotiation phase. If the WAN IP address is fixed
by remote, specify the fixed IP address here.
♦ Remote Gateway IP –In most cases please accept the default value
(0.0.0.0) in this field.
♦ Remote Network IP – Specify the network identification of the remote
network. For example, 192.168.1.0 is a network identification of a class-C
subnet with subnet mask 255.255.255.0 (/24).
♦ Remote Network Mask – Specify the subnet mask of the remote
network.
♦ RIP Direction – The option specify the direction of RIP (Routing
Information Protocol) packets through the ISDN WAN connection.
♦ RIP Version – Select the RIP protocol version. Specify Ver. 2 for
greatest compatibility.
♦ For NAT operation, treat remote sub-net as – Toggle between Private
IP and Public IP.
For the example listed in this section, the LAN-to-LAN Dialer profile should be
configured as below:
Head Office:
DI-304/DI-304M ISDN Remote Router
46
Branch Office:
DI-304/DI-304M ISDN Remote Router
47
Advanced Setup
This chapter explains the remaining options available in Advanced Setup:
Advanced Setup
>> Call Control and PPP/MP Setup
>> Call Schedule Setup
>> NAT Setup
>> Static Route Setup
>> IP Filter/Firewall Setup
Click Call Control and PPP/MP Setup to open the setup page displayed below.
Enabling the Remote Activation Function
Some applications require the router to be remotely activated, or dial up to the ISP
using the ISDN interface. For instance, if you are a user who accesses the Internet
via ISDN from home, usually the dialup connection is idle when you are not at
home. You may want to get some files from home while you are working in the
office. This function allows you to make a phone call to the router and ask it to dial
up to the ISP. Then you can access your home network to retrieve the files. Of
course, you have to have a fixed IP address and expose some internal network
resources, such as FTP, WWW etc.
DI-304/DI-304M ISDN Remote Router
48
Click Call Control and PPP/MP Setup and specify a phone number in the Remote
Activation field.
Call Control Setup
Dial Retry and Dial Delay Interval
These two parameters set global settings for ISDN dialup access.
♦ Dial Retry – Specify the dial retry counts per triggered packet. A
triggered packet is any packet whose destination is outside the local
network. The default setting is no dial retry. If set to 5, for each triggered
packet, the router will dial 5 times until it is connected to the ISP or
remote access router.
♦ Dial Delay Interval – Specify the interval between dialup retries. By
default, the interval is 0 seconds.
Remote Activation
If the router accepts a call from the number 12345678, it will disconnect
immediately and dial to the ISP. Note that Internet Access Setup → Dialing to a
Single ISP should be preset properly.
PPP/MP Dial-Out Setup
Basic Setup
Select according to the ISP service type subscribed to and enter parameters
according to the setup you entered for Remote Access Setup in Chapter 4.
DI-304/DI-304M ISDN Remote Router
49
Bandwidth On Demand (BOD) Setup
BOD stands for bandwidth-on-demand for Multiple Link PPP (ML-PPP or MP).
Click Call Control and PPP/MP Setup to see the following settings.
These parameters are activated when you set the Link Type to Dialup BOD.
Usually the ISDN will use one B channel to access the Internet or remote network
when you use the Dialup BOD link type. The router will use the parameters here to
make a decision on when to activate/drop the additional B channel. Note that cps
(characters-per-second) measures the total link utilization.
♦ High Water Mark and High Water Time – These parameters specify
the conditions under which the second channel will be activated. When
the utilization of the first connected channel goes over the High Water
Mark and past the High Water Time, the additional channel will be
activated. The link speed will then be 128kbps (two B channels).
♦ Low Water Mark and Low Water Time – These parameters specify the
conditions under which the second channel will be dropped. When the
utilization of two B channels is under the Low Water Mark and past the
High Water Time, the additional channel will be dropped. The link speed
will be 64kbps (one B channel).
Note: If you are not familiar with the operation of ISDN and ML-PPP, be wary of
changing the default values.
DI-304/DI-304M ISDN Remote Router
50
Call Schedule Setup
Users are allowed to designate up to 15 scheduled calls, which the router will be
able to receive based on the information filled out in the page below. Please note,
however, that no more than 4 calls can be scheduled at one time (see the Scheduler
(1-15) parameter located under Quick Setup → Internet Access Setup for a Single
ISP among other places in the Setup Main Menu).
NAT Setup
Usually you will use the router as a NAT-enabled router. NAT stands for Network
Address Translation. It means the router gets one (in Single ISP, PPPoE, PPTP) or
two (in Dual ISPs mode) globally re-routable IP addresses from the ISP. Local hosts
will use private network IP addresses defined by RFC-1918 to communicate with
the router. The router translates the private network addresses to a globally routable
IP address that is then used to access the Internet. The following explains NAT
features for specific applications.
Click NAT Setup to open the setup page. On the page you will see the private IP
address definitions defined in RFC-1918. Usually we use the 192.168.1.0/24 subnet
for the router.
Configure Port Redirection Table
DI-304/DI-304M ISDN Remote Router
51
Exposing Internal Servers to the Public Domain
The Port Redirection Table may be used to expose internal servers to the public
domain or to directly assign a specific port number to internal hosts. External hosts
or domain can specify port numbers to access internal network services, such as
FTP, WWW, etc.
The following example shows how an internal FTP server is exposed to the public
domain. The internal FTP server is running on the local host addressed as
192.168.1.10.
DI-304/DI-304M ISDN Remote Router
52
As shown above, the Port Redirection Table provides 10 port-mapping entries for
internal hosts.
♦ Service Name – Specify the name for the specific network service.
♦ Protocol – Specify the transport layer protocol that supports TCP and
UDP options.
♦ Public Port – Specify which port should be redirected to the internal
host.
♦ Private IP – Specify the private IP address of the internal host offering
the service.
♦ Private Port – Specify the private port number of the service offered by
the internal host.
♦ Active – Check here to activate the port-mapping entry.
DMZ Host Setup
Click DMZ Host Setup to open the setup page. The DMZ Host settings allow a
defined internal user to be exposed to the Internet to use some special-purpose
applications such as Netmeeting, Internet games, etc.
♦ DMZ Enable – Check to enable the DMZ Host function.
♦ DMZ Host IP – Enter the IP address of DMZ host.
DI-304/DI-304M ISDN Remote Router
53
Open Ports Setup
Click Open Ports Setup to open the following setup page.
Fill in the appropriate information for each open port table entry and click OK to let
the changes take effect.
DI-304/DI-304M ISDN Remote Router
54
Well-known Port Number List
This page provides some well-known port numbers for your reference.
Static Route Setup
This menu contains 10 routing rules for static routing usage. You may add/delete or
activate/deactivate any static route.
DI-304/DI-304M ISDN Remote Router
55
Click on the desired index number from 1 to 10 on the window above.
IP Filter/Firewall Setup
The IP Filter/Firewall function helps to prevent your local network against attack
from outside. It also provides a method of restricting users on the local network
from accessing the Internet. Additionally, it can filter out specific packets to trigger
the router to place an outgoing connection.
An Overview of the Firewall
The IP Filter/Firewall includes two types of filter: Call Filter and Data Filter. The
former is designed to block or allow IP packets that will trigger the router to
establish an outgoing connection. The latter is designed to block or allow which
kind of IP packets are allowed to pass through the router when the WAN connection
has been established. It works like this: when an outgoing packet is routed to the
WAN, the IP Filter will decide if the packet should be forwarded to the Call Filter or
Data Filter. If the WAN connection has not been established, the packet will enter
the Call Filter. If the packet is not allowed to trigger router dialing, it will be
dropped. Otherwise, it will initiate a call to establish the WAN connection.
If the WAN connection of the router has been established, the packet will pass
through the Data Filter. Packets match the block rule will be dropped and the
contrary will be sent to the WAN interface. Alternatively, if an incoming packet
enters from the WAN interface, it will pass through the Data Filter directly. If the
packets match the block rule, it will be dropped. Otherwise, it will be sent to the
internal LAN. The filter architecture is shown as below.
DI-304/DI-304M ISDN Remote Router
56
The Following sections will explain more about IP Filter/Firewall Setup using Web
Configurator. The Filter has 12 filter sets with 7 filter rules for each set. There are a
total of 84 filter rules for the IP Filter/Firewall Setup. By default, the Call Filter
rules are defined in filter set 1 and the Data Filter rules are defined in filter set 2.
♦ General Setup – Some general settings are in the setup link.
♦ Filter Setup – Here there are 12 filter sets for IP Filter configurations.
♦ Set to Factory Default – Click here to restore the filter rules to default
values.
DI-304/DI-304M ISDN Remote Router
57
General Setup
On the General Setup page you can enable/disable the Call Filter or Data Filter and
assign a Start Filter Set for each, configure the log settings, and set the MAC
address for duplicate packets.
♦ Call Filter – Check Enable to activate the Call Filter function. Assign a
start filter set for Call Filter.
♦ Data Filter – Check Enable to activate the Data Filter function. Assign a
start filter set for Data Filter.
♦ Log Flag – For troubleshooting purpose, you need to specify the filter log
here.
◊ None - The log function is inactive.
◊ Block - All blocked packets will be logged.
◊ Pass - All passed packets will be logged.
◊ No Match - The log function will record all packets that are
unmatched.
Note: The filter log will be displayed on the Telnet terminal when you type the "log
-f" command.
♦ MAC Address for Packet Duplication – Logged packets may also be
logged to another location via Ethernet. If you want to duplicate logged
packets from the router to another network device, you must enter the
MAC address (HEX Format) of the other devices. Enter "0" to disable the
feature. It will be helpful under Ethernet switch environment.
DI-304/DI-304M ISDN Remote Router
58
Editing the Filter Sets
♦ Comments – Enter filter set comments/description. Its maximum length
is 22 characters.
♦ Filter Rule – Click a button numbered "1" ~ "7" to edit the filter rule.
♦ Active – Enable or disable the filter rule.
♦ Next Filter Set – Specify the next filter set to link to after the current
filter set. Be aware of the sequence of the link and avoid any possible
loop among the filter sets.
The following setup pages show the default settings for Call Filter and Data Filter.
You will see the Call Filter set is assigned to Set 1 and the Data Filter set to Set 2.
DI-304/DI-304M ISDN Remote Router
59
Editing the Filter Rules
Click the Filter Rule index button to enter the Filter Rule setup page for each filter.
The following explains each configurable item in detail.
DI-304/DI-304M ISDN Remote Router
60
♦ Comments – Enter filter set comment/description. Its maximum length is
14 characters.
♦ Check to enable the Filter Rule – Enable the filter rule.
♦ Pass or Block – Specify the action to be taken when packets match the
rule.
◊ Block Immediately - Packets matching the rule will be dropped
immediately.
◊ Pass Immediately - Packets matching the rule will be passed
immediately.
◊ Block If No Further Match - A packet matching the rule and that
does not match further rules, will be dropped.
◊ Pass If No Further Match - A packet matching the rule,
and that does not match further rules, will pass through.
♦ Branch to Other Filter Set – If the packet matches the filter rule, the
next filter rule will branch to the specified filter set.
♦ Duplicate to LAN – If you want to log the matched packets to another
network device, check this box to enable it. The MAC Address is defined
in General Setup → MAC Address for Packet Duplication.
♦ Log – Check this box to enable the log function. Use the Telnet command
"log -f" to view the logs.
♦ Direction – Set the direction of packet flow. For the Call Filter, this
setting is irrelevant.
IN: Specify the rule for filtering incoming packets.
OUT: Specify the rule for filtering outgoing packets.
♦ Protocol – Specify the protocol(s) this filter rule will apply to.
DI-304/DI-304M ISDN Remote Router
61
♦ IP Address – Specify a source and destination IP address for this filter
rule to apply to. Placing the symbol "!" before a particular IP Address will
prevent this rule from being applied to that IP address. It is equal to the
logical NOT operator.
♦ Subnet Mask – Specify the Subnet Mask for the IP Address column for
this filter rule to apply to.
♦ Operator – The operator column specifies the port number settings. If the
Start Port is empty, the Start Port and the End Port column will be
ignored. The filter rule will filter out any port number.
= : If the End Port is empty, the filter rule will set the port
number to be the value of the Start Port. Otherwise, the
port number ranges between the Start Port and the End
Port (including the Start Port and the End Port).
!= : If the End Port is empty, the port number is not equal
to the value of the Start Port. Otherwise, this port number
is not between the Start Port and the End Port (including
the Start Port and End Port).
> : Specify the port number is larger than the Start Port
(includes the Start Port).
< : Specify the port number is less than the Start Port
(includes the Start Port).
♦ Keep State – also may be quoted as SPI (stateful packets inspection), is a
mechanism used to drop the invalid incoming packets. When checked,
protocol information about the TCP/UDP/ICMP communication sessions
will be kept by the IP Filter/Firewall (the Firewall Protocol option
requires that TCP or UDP or TCP/UDP or ICMP be selected for this to
operate correctly).
♦ Source Route – When checked, the IP options of source routing will be
applied for the rule. In general please do not enable this option for higher
security policy.
♦ Fragments – Specify a fragmented packets action.
◊ Don't Care - Specify no fragment options in the filter rule.
◊ Unfragmented - Apply the rule to unfragmented packets.
◊ Fragmented - Apply the rule to fragmented packets.
◊ Too Short - Apply the rule only to packets that are too short to
contain a complete header.
Some fragmented packets are malicious so it may be necessary to
hinder the fragmented packets for higher security policies.
Restricting Unauthorized Internet Services
This section will show a simple example to restrict access of WWW from certain
locations. In this example, we assume the IP address of the access-restricted user is
192.168.1.10. The filter rule is created in the Data Filter set and is shown as below.
DI-304/DI-304M ISDN Remote Router
62
DI-304/DI-304M ISDN Remote Router
63
System Management
This chapter will show you how to manage your router using the System
Management tools shown below:
System Management
>> Online Status
>> Time Setup
>> Management Setup
>> Diagnostic Tools
>> Reboot System
>> Firmware Upgrade (TFTP Server)
Online Status
Click Online Status to open the Online Status page. The example shown in the next
page has both ISDN B1 and B2 channel active and also a Static IP connection.
The Online Status page contains three subgroups: ISDN Status, LAN Status, and
WAN Status.
ISDN Status
Shows the connection status of B1, B2, and D channel, including ISP dialup, active
remote dial-in user, or LAN-to-LAN connection.
♦ Active Connection – Shows the ISP, active remote dial-in user, or LAN-
to-LAN profile name and also the IP address for each B channel.
♦ TX Pkts – Total numbers of transmitted IP packets sent during this
connection session.
♦ TX Rate – Transmission rate for outgoing data. The unit is characters per
second (cps).
♦ RX Pkts – Total number of received IP packets received during this
connection session.
♦ RX Rate – Reception rate for ingoing data. The unit is characters per
second (cps).
♦ Up Time – Connection time. The format is HH:MM:SS where HH means
hours, MM means minutes, and SS means seconds.
♦ AOC – The Advice of Charge (AOC) service allows you to view
information concerning charges for a call.
♦ Drop B1 – Click to disconnect the B1 channel.
♦ Drop B2 – Click to disconnect the B2 channel.
LAN Status
♦ IP Address – IP address of the LAN interface.
♦ TX Packets – Total number of transmitted IP packets send since the
router was powered on.
♦ RX Packets – Total number of transmitted IP packets received since the
router was powered on.
WAN Status
♦ Mode – Indicates which broadband access mode is active. Depending
upon the broadband access mode, you may see Static IP, PPTP, or PPPoE.
♦ GW IP Address – Indicates the gateway IP address.
♦ IP Address – The 2nd IP Address of Ethernet or the IP address of WAN
interface that is from PPTP/PPPoE connection.
♦ TX Packets – Total number of transmitted IP packets sent during this
connection session.
♦ TX Rate – Transmission rate for outgoing data. The unit is characters per
second (cps).
♦ RX Packets – Total number of transmitted IP packets received during
this connection session.
♦ RX Rate – Reception rate for ingoing data. The unit is characters per
second (cps).
♦ Up Time – Connection time. The format is HH:MM:SS where HH means
hour, MM means minute, and SS means second.
♦ Drop PPPoE or PPTP – Click to disconnect the PPPoE or PPTP
connection.
Time Setup
Click Time Setup to open a page that allows you to make configuration changes to
the time setup.
Management Setup
By default, the router may be configured and managed with any Telnet client or
Web browser running on any operating system. There is no requirement for
additional software or utilities. However, for some specific environments, you may
want to change the server port numbers for the built-in Telnet or HTTP server,
create access lists to protect the router, or reject system administrator login from the
Internet.
Click Management Setup. The following setup page will display.
Management Access Control
♦ Allow management from the Internet – Check to allow system
administrators to login from the Internet. The default setting is "not
allowed".
♦ Disable PING from the Internet – Check to prevent Ping capability
from the Internet.
Access List
You may specify that the system administrator can only login from a specific host or
network defined in the list. A maximum of three IPs/subnet masks may be entered.
♦ List IP – Specifies an IP address allowed to login to the router.
♦ Subnet Mask – Specifies a subnet mask allowed to login to the router.
Management Port Setup
♦ Default Ports – Check to use standard port numbers for the Telnet and
HTTP servers.
♦ User Defined Ports – Check and enter user-defined port numbers for the
Telnet and HTTP servers.
SNMP Setup
♦ Enable SNMP Agent – Check to enable SNMP agent and then fill out
the appropriate information for the Get Community, Set Community,
Manager Host IP, Trap Community, Notification Host IP, and a Trap
Timeout.
… 74 …

Hulp nodig? Stel uw vraag in het forum

Spelregels

Misbruik melden

Gebruikershandleiding.com neemt misbruik van zijn services uitermate serieus. U kunt hieronder aangeven waarom deze vraag ongepast is. Wij controleren de vraag en zonodig wordt deze verwijderd.

Product:

Bijvoorbeeld antisemitische inhoud, racistische inhoud, of materiaal dat gewelddadige fysieke handelingen tot gevolg kan hebben.

Bijvoorbeeld een creditcardnummer, een persoonlijk identificatienummer, of een geheim adres. E-mailadressen en volledige namen worden niet als privégegevens beschouwd.

Spelregels forum

Om tot zinvolle vragen te komen hanteren wij de volgende spelregels:

Belangrijk! Als er een antwoord wordt gegeven op uw vraag, dan is het voor de gever van het antwoord nuttig om te weten als u er wel (of niet) mee geholpen bent! Wij vragen u dus ook te reageren op een antwoord.

Belangrijk! Antwoorden worden ook per e-mail naar abonnees gestuurd. Laat uw emailadres achter op deze site, zodat u op de hoogte blijft. U krijgt dan ook andere vragen en antwoorden te zien.

Abonneren

Abonneer u voor het ontvangen van emails voor uw D-Link DI-304 bij:


U ontvangt een email met instructies om u voor één of beide opties in te schrijven.


Ontvang uw handleiding per email

Vul uw emailadres in en ontvang de handleiding van D-Link DI-304 in de taal/talen: Engels als bijlage per email.

De handleiding is 10,62 mb groot.

 

U ontvangt de handleiding per email binnen enkele minuten. Als u geen email heeft ontvangen, dan heeft u waarschijnlijk een verkeerd emailadres ingevuld of is uw mailbox te vol. Daarnaast kan het zijn dat uw internetprovider een maximum heeft aan de grootte per email. Omdat hier een handleiding wordt meegestuurd, kan het voorkomen dat de email groter is dan toegestaan bij uw provider.

Stel vragen via chat aan uw handleiding

Stel uw vraag over deze PDF

Andere handleiding(en) van D-Link DI-304

D-Link DI-304 Installatiehandleiding - English - 5 pagina's


Uw handleiding is per email verstuurd. Controleer uw email

Als u niet binnen een kwartier uw email met handleiding ontvangen heeft, kan het zijn dat u een verkeerd emailadres heeft ingevuld of dat uw emailprovider een maximum grootte per email heeft ingesteld die kleiner is dan de grootte van de handleiding.

Er is een email naar u verstuurd om uw inschrijving definitief te maken.

Controleer uw email en volg de aanwijzingen op om uw inschrijving definitief te maken

U heeft geen emailadres opgegeven

Als u de handleiding per email wilt ontvangen, vul dan een geldig emailadres in.

Uw vraag is op deze pagina toegevoegd

Wilt u een email ontvangen bij een antwoord en/of nieuwe vragen? Vul dan hier uw emailadres in.



Info