D-Link DIR-410 User Manual

M2m 3g vpn router

Advertisement

Quick Links

User Manual
D-Link
DIR-410
M2M 3G VPN Router
1

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DIR-410

  • Page 1 User Manual D-Link DIR-410 M2M 3G VPN Router...
  • Page 2: Copyright

    Copyright The contents of this publication may not be reproduced in any part or as a whole, stored, transcribed in an information retrieval system, translated into any language, or transmitted in any form or by any means, mechanical, magnetic, electronic, optical, photocopying, manual, or otherwise, without the prior written permission.
  • Page 3: Table Of Contents

    TABLE OF CONTENTS COPYRIGHT ......................... 2 FCC INTERFERENCE STATEMENT ................... 2 CHAPTER 1. INTRODUCTION .................... 4 1.1 PACKAGE LIST ......................4 1.2 HARDWARE INSTALLATION ..................4 CHAPTER 2. GETTING STARTED ..................8 2.1 EASY SETUP BY WINDOWS UTILITY ................8 2.2 EASY SETUP BY CONFIGURING WEB PAGES ............
  • Page 4: Chapter 1. Introduction

    CHAPTER 1. Introduction Congratulations on your purchase of this outstanding product: DIR-410 M2M 3G VPN Router. This product is specifically designed for Office needs. It provides a complete solution for Internet surfing, 3G backup, and VPN tunneling. Instructions for installing and configuring this product can be found in this manual.
  • Page 5 1.2.1 Hardware configuration 1.2.2 LED indicators LED color Description It is connected to Internet. Green Green in flash Data access RJ45 cable is plugged, and Ethernet Green connection is established. Green in flash Data access WLAN Green WiFi is on. Green in flash Data access 3G USB...
  • Page 6 Step 1. Attach the antenna: Screw the antenna in a clockwise direction to the back panel of the unit. DO NOT connect M2M 3G VPN Router to power before performing the installation steps below. Step 2. Insert the 3G USB to the router: Plug your USB modem which is with activated SIM card provided by your 3G service provider.
  • Page 7 Step 6. Start to configure the device: You can start to configure the device via the Easy Setup. (see Easy Setup Utility)
  • Page 8: Chapter 2. Getting Started

    CHAPTER 2. Getting Started 2.1 Easy Setup by Windows Utility Step 1: Install the Easy Setup Utility from CD then follow the steps to configure it. Step 2: Select Language then click “Next” to continue. Step 3: Then click the “Wizard” to continue.
  • Page 9 Step 4: Click “Next” to continue. Step 5: Select time zone. It can help us to synchronize the system time with network time server.
  • Page 10 Step 6-1: Configure the schedule setting for Green function. You can set the schedule for turning on or turning off this device automatically. Step 6-2: Click SMART Schedule setting for Green function. The device would check the packet flow before the power is turned off.
  • Page 11 Step 7: Configure your wireless interface. Step 8: Insert SSID, Channel and Security options, and then click “Next” to continue.
  • Page 12 Step 9: Auto detect the WAN service, just click the [Next] button. Or you could select the WAN type by yourself via select the check box [Let me select WAN service by myself] jump to Step 10. Step 10: Select the WAN type by yourself.
  • Page 13 Step 11-1: Select “Auto-Detection”, and the Utility will try to detect and configure the required 3G service settings automatically. Click “Next” to continue. Default PIN Code is empty, if you have PIN Code, you must enter it. For example “0000”. If no, just Click “Next”...
  • Page 14 Step 12: The M2M 3G VPN Router is rebooted to make your entire configuration take effect. Step 13: Click “Next” to test the Internet connection.
  • Page 15 Step 14: Click “Next” to test WAN Networking service or you can ignore test. Step 15: Congratulations! Setup is completed. Now you have already connected to Internet successfully.
  • Page 16: Easy Setup By Configuring Web

    2.2 Easy Setup by Configuring Web Pages You can also browse UI of the web to configure the device. Browse to Activate the Setup Wizard Type in the IP Address (http://192.168.123.254 ) Type the default password ‘admin’ in the System Password and then click ‘login’...
  • Page 17 Configure with the Setup Wizard Step 1: Setup login password. Enter your system password. Step 2: Select Time Zone. Step 3: Setup Wan Type.
  • Page 18 Step 4: Select the WAN type you would like to use. If you select “3G Mobile Service, please jump to step 5-1. However, if you click “Fixed Network Service, please jump to step 5-2. Step 5-1: Set up 3G Dial-up profile. Step 5-2: Select WAN type by yourself.
  • Page 19 Step 6: Set up your Wireless Settings. Type your network ID in the blank of SSID. Step 7: You could choose whether to configure Sleep Mode. If you would like to trigger the sleep mode, please click “YES”. If not, please click “NO” and jump to step 8.
  • Page 20 Step 9: Confirm the information you set up in User Interface. If it is correct, please click ‘Apply settings’. Step 10: Click Finish to complete it. Step 11: The system is restarting to make sure your configuration take effect.
  • Page 21: Chapter 3. Making Configuration

    CHAPTER 3. Making Configuration Whenever you want to configure your network or this device, you can access the Configuration Menu by opening the web-browser and typing in the IP Address of the device. The default IP Address is: 192.168.123.254 Enter the default password “admin” in the System Password and then click ‘login’ button. Afterwards, select ‘Advanced’...
  • Page 22 3.1.1 Green Function 1. Standby mode: The device will be automatically switched into standby mode if there are no packets in ten minutes. 2. Sleep mode: End user can not use Internet when the device is in sleep mode. 3. Smart Schedule: The device would check the packet flow before the power is turned off.
  • Page 23 3.1.2 Primary Setup First of all, you are supposed to select the WAN type and then configure the setting. A. 3G For 3G WAN Networking. The WAN fields may not be necessary for your connection. The information on this page will only be used when your service provider requires you to enter a User Name and Password to connect with the 3G network.
  • Page 24 2. 3G Failover: When the 3G connection is interrupted, the connection of router would automatically shift to wired line. 3. WAN Type: WAN connection type of your ISP. You can click WAN Type combo button to choose a correct one from the following options: 4.
  • Page 25 B. Static IP Address 1. LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. 3G Failover: When the 3G connection is interrupted, the connection of router would automatically shift to wired line.
  • Page 26 C. Dynamic IP Address 1. LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. 3G Failover: When the 3G connection is interrupted, the connection of router would automatically shift to wired line.
  • Page 27 D. PPP over Ethernet 1. LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. 3G Failover: When the 3G connection is interrupted, the connection of router would automatically shift to wired line.
  • Page 28 packets. Auto Reconnect (Always-on): The device will link with ISP until the connection is established. Manually: The device will not make the link until someone clicks the connect-button in the Status-page. 8. Maximum Idle Time: The amount of time of inactivity before disconnecting your PPPoE session.
  • Page 29 use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. 3G Failover: When the 3G connection is interrupted, the connection of router would automatically shift to wired line. 3. IP Mode: Please check the IP mode your ISP assigned, and select “Static IP Address” or “Dynamic IP Address”.
  • Page 30 1. LAN IP Address: The local IP address of this device. The computer on your network must use the LAN IP address of this device as their Default Gateway. You can change it if necessary. 2. 3G Failover: When the 3G connection is interrupted, the connection of router would automatically shift to wired line.
  • Page 31 Auto Reconnect (Always-on): The device will link with ISP until the connection is established. Manually: The device will not make the link until someone clicks the connect-button in the Status-page. 9. Maximum Transmission Unit (MTU): Most ISP offers MTU value to users. The default MTU value is 0 (auto).
  • Page 32 Manually: The device will not make the link until someone clicks the connect-button in the Status-page. 6. Baud Rate: The rate of packet transmitting. 7. Primary DNS: This feature allows you to assign a Primary DNS Server, contact to your ISP to get it.
  • Page 33 Press “More>>” and you can find more settings. Primary DNS/Secondary DNS: Optional. This feature allows you to assign a DNS Servers Primary WINS/Secondary WINS: Optional. This feature allows you to assign a WINS Servers Gateway: Optional. Gateway Address would be the IP address of an alternate Gateway.
  • Page 34 3.1.4 Wireless Settings Wireless settings allow you to set the wireless configuration items. 1. Wireless Module: You can enable or disable wireless function. 2. Wireless Operation Mode: Choose appropriate wireless operation mode. 3. Wireless Schedule: Click ‘’enable” to apply schedule rule. 4.
  • Page 35 Regulatory Domain. The factory default setting is as the following: channel 6 for North America; channel 7 for European (ETSI); channel 7 for Japan. 7. Wireless Mode: Choose “B/G mixed”, “B only”, “N only”, or “B/G/N mixed”. The factory default setting is “B/G/N mixed”. 8.
  • Page 36 the key value in the RADIUS server. WPA2-PSK WPA2-PSK user AES and TKIP for Same the encryption, the others are same as the WPA2-PSK. WPA-PSK/WPA2-PSK Another encryption options for WPA-PSK-TKIP and WPA2-PSK-AES, the others are same as the WPA-PSK. WPA/WPA2 Another encryption options for WPA-TKIP and WPA2-AES, the others are same the WPA.
  • Page 37 Press “AP Client Setting” 1. AP Client mode: You could enable this function by selecting “Enable”. 2. Network ID(SSID): Network ID is used for identifying the Wireless LAN (WLAN). Client stations can roam freely over this device and other Access Points that have the same Network ID.
  • Page 38 Press “WPS Setup”, you can configure and enable the easy setup feature WPS (Wi-Fi Protection Setup) for your wireless network. WPS:.You can enable this function by selecting “Enable”. WPS offers a safe and easy way to allow the wireless clients connected to your wireless network. AP PIN: You can press Generate New Pin to get an AP PIN.
  • Page 39 3.1.5 Change Password You can change the System Password here. We strongly recommend you to change the system password for security reason. Click on “Save” to store your settings or click “Undo” to give up the changes.
  • Page 40: Forwarding Rules

    3.2 Forwarding Rules 3.2.1 Virtual Server This product’s NAT firewall filters out unrecognized packets to protect your Intranet, so all hosts behind this product are invisible to the outside world. If you wish, you can make some of them accessible by enabling the Virtual Server Mapping. A virtual server is defined as a Service Port, and all requests to this port will be redirected to the computer specified by the Server IP.
  • Page 41 For example, if you have an FTP server (port 21) at 192.168.123.1, a Web server (port 80) at 192.168.123.2, and a VPN server at 192.168.123.6, then you need to specify the following virtual server mapping table: Service Port Server IP Enable 192.168.123.1 192.168.123.2...
  • Page 42 Incoming Ports: When the trigger packet is detected, the inbound packets sent to the specified port numbers are allowed to pass through the firewall. Afterwards, Click on “Save” to store your settings or click “Undo” to give up the changes. 3.2.3 Miscellaneous 1.
  • Page 43: Security Setting

    3.3 Security Setting...
  • Page 44 3.3.1 Packet Filters Packet Filter includes both outbound filter and inbound filter. And they have same way to setting. It enables you to control what packets are allowed to pass the router. Outbound filter applies on all outbound packets. However, inbound filter applies on packets that destined to Virtual Servers or DMZ host only.
  • Page 45 For source or destination port, you can define a single port (80) or a range of ports (1000-1999). Add prefix "T" or "U" to specify TCP or UDP protocol. For example, T80, U53, U2000-2999, No prefix indicates both TCP and UDP are defined. An empty implies all port addresses.
  • Page 46 4. Domain Suffix: A suffix of URL can be restricted, for example, ".com", "xxx.com". 5. Action: When someone is accessing the URL met the domain-suffix, what kind of action you want. Check “Drop” to block the access. Check “Log” to log these access. 6.
  • Page 47 2. URL: If any part of the Website's URL matches the pre-defined word, the connection will be blocked. For example, you can use pre-defined word "sex" to block all websites if their URLs contain pre-defined word "sex". 3. Enable: Check to enable each rule. Afterwards, click on “Save”...
  • Page 48 below), to connect with this device. 3. Association control: Check "Association control" to enable the controlling of which wireless client can associate to the wireless LAN. If a client is denied to associate to the wireless LAN, it means the client can't send or receive any data via this device. Choose "allow"...
  • Page 49 3.3.6 VPN-IPSEC VPN Settings are used to create virtual private tunnels to remote VPN. 3.3.6.1 IPSEC Settings 1. VPN-IPSEC: You could trigger the function of VPN-IPSEC if you click “enable”. 2. Netbios over IPSEC: If you would like two LAN to receive the Netbios from Network Neighborhood, you have to click “enable”.
  • Page 50 3.3.6.2 VPN Settings-IKE 1. Tunnel Name: Indicate which tunnel that is focused now 2. Local subnet: The subnet of LAN site of local VPN router. It can be a host, a partial subnet, and the whole subnet of LAN site of local router. 3.
  • Page 51 both VPN router and client 8. Remote ID: The Type and the Value are the same as the Type and the Value of the Local ID of the remote VPN router. 9. Local ID: The Type and the Value are the same as the Type and the Value of the Remote ID of the remote VPN gateway.
  • Page 52 1. Tunnel Name: Indicate which tunnel that is focused now 2. Local subnet: The subnet of LAN site of local VPN router. It can be a host, a partial subnet, and the whole subnet of LAN site of local router. 3.
  • Page 53 packets transmitting, the VPN tunnel would disconnect. 10. Xauth: If you click “Xauth”. It means that it is without Extended Authentication(xAuth). If you. However, if you choose “Server”, it will verify the legality of user information from VPN client. The user information that is provided by VPN client needs to match to user information that is in local user database of VPN server.
  • Page 54 1. VPN-L2TP Client: Click “enable” to enable VPN-L2TP Client function. 2. Name: The name of tunnel. 3. Peer IP/Domain: Input the L2TP Server IP or domain name. 4. User Name: The account your ISP assigns to you. 5. Password: The password your ISP assigns to you. 6.
  • Page 55 1. VPN-L2TP Server: Click “enable” to enable the function of VPN-L2TP Server. 2. Server Virtual IP: The IP address of L2TP server. This IP address should be different from IP address of PPTP server and LAN subnet of VPN gateway. 3.
  • Page 56 9. Password: Input the password of L2TP password. Afterwards, click on “Save” to store your settings or click “Undo” to give up the changes. 3.3.9 VPN-PPTP Client It is different from L2TP. 1. VPN-PPTP Client: Click “enable” to enable the function of VPN-PPTP Client. 2.
  • Page 57 Manually: The device will not make the link until someone clicks the connect-button in the Status-page. 8. Option: MPPE: The MPPE encryption supports. NAT: The Nat Traversal supports. Afterwards, click on “Save” to store your settings or click “Undo” to give up the changes. 3.3.10 VPN-PPTP Server The configuration is the same as L2TP.
  • Page 58 5. MPPE Encryption Mode: Click ‘’enable” to enable MPPE Encryption Mode. Please note that MPPE needs to work with MSCHAP authentication method. 6. Encryption length: There are three kinds of encryption length, respectively 40 bits, 56 bits, and 128 bits. 7.
  • Page 59: Advanced Setting

    3.4 Advanced Setting 3.4.1 System Log This page supports two methods to export system logs to specific destination by means of...
  • Page 60 syslog (UDP) and SMTP(TCP). The items you have to setup include: 1. IP Address for Syslog: Host IP of destination where syslog will be sent to. Check Enable to enable this function. 2. Setting of Email alert: Check if you want to enable Email alert (send syslog via email). 3.
  • Page 61 Provider: The DDNS provider supports service for you to bind your IP(even private IP) with a certain Domain name. You could choose your favorite provider. Host Name: Register a domain name to the DDNS provider. The fully domain name is concatenated with hostname(you specify) and a suffix(DDNS provider specifies).
  • Page 62 3.4.4 SNMP In brief, SNMP, the Simple Network Management Protocol, is a protocol designed to give a user the capability to remotely manage a computer network by polling and setting terminal values and monitoring network events. 1. Enable SNMP: You must check “Local”, “Remote” or both to enable SNMP function. If “Local”...
  • Page 63 3.4.5 Routing If you have more than one routers and subnets, you will need to enable routing table to allow packets to find proper routing path and allow different subnets to communicate with each other. The routing table allows you to determine which physical interface addresses are utilized for outgoing IP data grams.
  • Page 64 1. Time Zone: Select a time zone where this device locates. 2. Auto-Synchronization: Check the “Enable” checkbox to enable this function. Besides, you can select a NTP time server to consult UTC time. 3. Sync with Time Server: Click on the button if you want to set Date and Time by NTP Protocol .
  • Page 65 2. Add New Rule: To create a schedule rule, click the “New Add” button. You can edit the Name of Rule, Policy, and set the schedule time (Week day, Start Time, and End Time). The following example configures “wake-up time“ everyday from 06:00 to 07:00. Afterwards, click save”...
  • Page 66: Tool Box

    3.5 Tool Box 3.5.1 System Info You can view the System Information and System log, and download/clear the System log, in this page.
  • Page 67 3.5.2 Firmware Upgrade You can upgrade firmware by clicking “Upgrade” button. 3.5.3 Backup Setting You can backup your settings by clicking the “Backup Setting” function item and save it as a bin file. Once you want to restore these settings, please click Firmware Upgrade button and use the bin file you saved.
  • Page 68 3.5.4 Reset to Default You can also reset this device to factory default settings by clicking the Reset to default function item. 3.5.5 Reboot You can also reboot this device by clicking the Reboot function item.
  • Page 69 3.5.6 Miscellaneous MAC Address for Wake-on-LAN: It enables you to power up a networked device remotely. If you would like to trigger this function, you have to know the MAC address of this device. For instance if the MAC address is 00-11-22-33-44-55, enter it into the blank of MAC Address for Wake-on-LAN.
  • Page 70: Chapter 4. Troubleshooting

    CHAPTER 4. Troubleshooting This Chapter provides solutions to problems for the installation and operation of the WiFi Combo VPN Router. You can refer to the following if you are having problems. 1 Why can’t I configure the router even the cable is plugged and the LED is lit? Do a Ping test to make sure that the WiFi Combo Note: It is recommended that you use...
  • Page 71 Select Properties to ensure that all drivers are installed properly. Look under Device Status to see if the device is working properly. Click “OK”. 2 What can I do if my Ethernet connection does not work properly? Make sure the RJ45 cable connects with the router. Ensure that the setting on your Network Interface Card adapter is “Enabled”.
  • Page 72 Why does my 3G connection keep dropping? Please check 3G signal strength from your ISP in your environment is above middle level. 4 Something wrong with the wireless connection? Can’t setup a wireless connection? Ensure that the SSID and the encryption settings are exactly the same to the Clients.
  • Page 73 microwaves, monitors, electric motors, etc. 5 What to do if I forgot my encryption key? 1. Go back to advanced setting to set up your Encryption key again. 2. Reset the WiFi Combo VPN Router to default setting...
  • Page 74: Appendix A. Spec Summary Table

    Appendix A. Spec Summary Table *Specifications are subject to change without notice.
  • Page 75: Appendix B. Licensing Information

    Appendix B. Licensing Information This product includes copyrighted third-party software licensed under the terms of the GNU General Public License. Please refer to the GNU General Public License below to check the detailed terms of this license. The following parts of this product are subject to the GNU GPL, and those software packages are copyright by their respective authors.
  • Page 76 GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it.
  • Page 77 GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program"...
  • Page 78 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium...
  • Page 79 It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices.

Table of Contents