FCC Warning This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this user’s guide, may cause harmful interference to radio communications.
TABLE OF CONTENTS ABOUT THIS USER’S GUIDE ..................I BEFORE YOU START ....................I INSTALLATION REQUIREMENTS ................I PACKING LIST ......................IV INTRODUCTION ......................1 Router Description and Operation........................1 Standards Compatibility and Compliance......................3 Packing List ............................4 Front Panel Display............................. 4 Rear Panel Connections ............................
Save Configuration Changes ......................39 ADVANCED ROUTER MANAGEMENT ..............41 UPnP ................................. 42 LAN Clients ..............................43 Port Forwarding ..............................44 Access Control ..............................48 Advanced Security ............................50 Bridge Filters ..............................51 Multicast Pass-through............................52 Static Routing..............................53 Dynamic Routing .............................. 54 Wireless Management.........................
DSL-G604T DSL Router User’s Guide About This User’s Guide This user’s guide provides instructions on how to install the DSL-G604T ADSL Router and use it to connect a computer or Ethernet LAN to the Internet. If you are using a computer with a functioning Ethernet port, the quickest and easiest way to set up the DSL- G604T is to insert the Installation CD into the CD-ROM drive of your computer and follow the instructions provided in the Quick Installation Guide.
DSL-G604T through the wireless interface. Security for wireless communication can be accomplished in a number of ways. The DSL-G604T supports WEP encryption, 802.1X authentication, and WPA (Wi-Fi Protected Access). Wireless access can also be controlled by selecting MAC addresses that are allowed to associate with the device.
For 802.1X and WPA security. Secret For 802.1X and WPA security. Information you will need about your DSL-G604T ADSL Router: Record info here This is the Username needed access the Modem’s management interface. When you attempt to connect to the...
ADSL connection in the future. Once you have the above information, you are ready to setup and configure your DSL-G604T ADSL Router. The Modem may be reset to its factory default settings by performing a Restore settings operation within the management interface (see System Commands).
ADSL connection technology, TCP/IP routing and 802.11g wireless connectivity in one compact unit. The Router is easy to install and use. The DSL-G604T connects to an Ethernet LAN via wireless and a standard Ethernet 10/100 BASE-T interface using RJ-45 connectors. The ADSL connection is made using ordinary twisted-pair telephone line with standard RJ-11 connectors.
Router Features The DSL-G604T ADSL Router utilizes the latest ADSL enhancements to provide a reliable Internet portal suitable for most small to medium sized offices. DSL-G604T advantages include: • PPP (Point-to-Point Protocol) Security – The DSL-G604T ADSL Router supports PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol) for PPP connections.
Standards Compatibility and Compliance The DSL-G604T complies with or is compatible with the following standards as recognized by their respective agencies. • ITU G.992.1 (G.DMT) compliant • ITU G.992.2 (G.lite “Splitterless ADSL”) compliant • ITU-T Rec. I.361 compliant • RFC 791 Internet Protocol compliant •...
Packing List Open the shipping carton and carefully remove all items. Make sure that you have the items listed here. 1. One DSL-G604T 802.11g Wireless ADSL Ethernet Router 2. One screw-on antenna 3. One CD-ROM containing the User’s Guide 4. One twisted-pair telephone cable used for ADSL connection 5.
Rear Panel Connections All cable connections to the Router are made at the rear panel. Connect the power adapter here to power on the Router. Use the Reset button to restore the settings to the factory default values in the next chapter for instructions on using the reset button).
It will allow access to the wireless network to devices using the correct SSID after a negotiation process takes place. The DSL-G604T broadcasts its SSID so that any wireless station in range can learn the SSID and ask permission to associate with it. Many wireless adapters are able to survey or scan the wireless environment for access points.
Hardware Installation The DSL-G604T functions on three separate networks: a wired Ethernet LAN, a wireless LAN and a wired ADSL WAN. Placement of the Router must take into account the fact that it is connected to these three networks with three types of media. Ethernet cables connect the Router to computers and network devices and the ADSL line connects it to a wall socket.
Power on Router CAUTION: The Router must be used with the power adapter included with the device. To power on the Router: 1. Insert the AC Power Adapter cord into the power receptacle located on the rear panel of the Router and plug the adapter into a suitable nearby power source.
Network Connections Network connections are provided through the ADSL port and the four Ethernet ports on the back of the Router. See the Rear Panel diagram above and the illustrations below for examples. Connect ADSL Line Use the ADSL cable included with the Router to connect it to a telephone wall socket or receptacle. Plug one end of the cable into the ADSL port (RJ-11 receptacle) on the rear panel of the Router and insert the other end into the RJ-11 wall socket.
Computer to Router Connection You can connect the Router directly to a 10/100BASE-TX Ethernet adapter card (NIC) installed on a PC using the Ethernet cable provided as shown in this diagram. Power On Router To power on the Router: 1. Insert the AC Power Adapter cord into the power receptacle located on the rear panel of the Router and plug the adapter into a suitable nearby power source.
Basic Router Configuration The first time you setup the Router it is recommended that you configure the WAN connection using a single computer making sure that both the computer and the Router are not connected to the LAN. Once the WAN connection is functioning properly, you may continue to make changes to Router configuration including IP settings and DHCP setup.
Configure Windows XP for DHCP Use the following steps to configure a computer running Windows XP to be a DHCP client. From the Start menu on your desktop, go to Settings, then click on Network Connections. In the Network Connections window, right-click on LAN (Local Area Connection), then click Properties.
3. In the General tab of the Local Area Connection Properties menu, highlight Internet Protocol (TCP/IP) under “This connection uses the following items:” by clicking on it once. Click on the Properties button. 4. Select “Obtain an IP address automatically” by clicking once in the circle. Click the OK button. Your computer is now ready to use the Router’s DHCP server.
2. Double-click the Network and Dial-up Connections icon. 3. In the Network and Dial-up Connections window, right-click the Local Area Connection icon, and then select Properties. 4. The Local Area Connection Properties dialog box displays with a list of currently installed network components.
Windows 95 and Windows 98 First, check for the IP protocol and, if necessary, install it: 1. In the Windows task bar, click the Start button, point to Settings, and then click Control Panel. Double-click the Network icon. 2. The Network dialog box displays with a list of currently installed network components. If the list includes TCP/IP, and then the protocol has already been enabled, skip to Configure IP Information Windows 95, 98.
Configure Windows 95 and Windows 98 for DHCP 1. Open the Control Panel window, and then click the Network icon. 2. Select the network component labeled TCP/IP, and then click Properties. 3. If you have multiple TCP/IP listings, select the listing associated with your network card or adapter. 4.
Access the Configuration Manager Now that your computer’s IP settings allow it to communicate with the Router, you can access the configuration software. Be sure that the web browser on your computer is not configured to use a proxy server in the Internet settings.
Use the default user name admin and password admin for first time setup. You should change the web-based manager access user name and password once you have verified that a connection can be established. The user name and password allows any PC within the same subnet as the Modem to access the web-based manger. Do not confuse the user name and password used to access the web-based manager with the ADSL account user name and password needed for PPP connections to access the service provider’s network.
Setup Menu The Setup window offers links to menus to configure settings for the LAN (Local Area Network) and for the WAN (Wide Area Network) setup. The first menu you see when clicking the Setup tab or the Go to setup wizard hyperlink is the Setup menu.
Wireless Settings Click the Enable AP box to allow the router to operate in the wireless environment. SSID: The SSID identifies members of Service Set. Accept the default name or change it to something else. If the default SSID is changed, all other devices on the wireless network must use the same SSID.
Wireless Security The DSL-G604T offers three types of network security: WEP, 802.1X, and WPA. WEP (Wireless Encryption Protocol) encryption can be enabled for security and privacy. WEP encrypts the data portion of each frame transmitted from the wireless adapter using one of the predefined keys.
802.1X Some network-security experts now recommend that wireless networks use 802.1X security measures to overcome some weaknesses in standard WEP applications. A RADIUS server is used to authenticate all potential users. Server IP Address: enter the IP address of the Radius server Port: enter a port number, or accept the default Secret: enter a password (1-63 character) Group Key Interval: time (in seconds) after which the Group Key is changed automatically (1-99999).
WPA (Wi-Fi Protected Access) Wi-Fi Protected Access was designed to provide improved data encryption, perceived as weak in WEP, and to provide user authentication, largely nonexistent in WEP. For most small networks, such as in a small business or home-based enterprise, WPA is the easiest way to obtain effective network security.
Modem Setup The Modem Setup menu is used to change the Modulation Type used for the ADSL connection. This setting should only be changed if your service provider has given explicit instructions to change it. Do not change the (ADSL) Modulation type used unless you have been instructed to do so.
Figure 3- 9. PPPoA Connection 1 Setup menu To configure the default connection type (PPPoA) for Connection 1, follow the steps listed below. To change the connection type of Connection 1 to an alternative type follow the instructions according to the desired type as described below in Change the Connection Type.
Change the Connection Type The default connection protocol used for the Router is Point-to-Point Protocol over ATM (PPPoA). The menu used to configure a PPPoA connection is the first menu to appear when you click on the Connection 1 button in the Setup menu.
5. If you are told to change the VPI or VCI values, type in the values given to you by your service provider. Many users will be able to use the default settings. 6. Leave the default QoS values if you are unsure or the ISP did not provide this information. 7.
Configure Connection 1 for Bridge “Bridge” means a pure bridged connection with no IP address assigned to the Router. This connection method makes the Router act as a bridge, and just passes packets across the DSL port. When the device is used in this manner, it is necessary to install additional connection software on any computer or server used to access the Internet.
9. To save the changes made to Connection 1, click the Tools tab and then click on the System Commands button. Click on the Save All button to store the configuration settings. Click on Back button to return to the System Commands menu. 10.
7. The Encapsulation values LLC (SNAP) and VC (MUX) are two different methods of encapsulating the PPP packet. Contact your ISP to make sure which encapsulation is being supported. 8. Based on the information provided by your ISP, enter the IP Address, Subnet Mask, Default Gateway (if provided), and Domain Name Services (DNS) values (if provided).
Configure Connection 1 for DHCP for WAN Dynamic Host Configuration Protocol (DHCP) allows the gateway to automatically obtain the IP address from a DHCP server on the service provider’s network. The service provider assigns a global IP address from a pool of addresses available to the service provider.
10. Check the WAN connection status. Click the Status tab and then the Connection Status button. Look under WAN to view the State of Connection 1, it should read Connected. If the WAN connection state does not appear to Connected after a few minutes, go back to the Connection 1 Setup menu, check the settings and make sure they are correct.
9. Click the Apply button when you have entered all the information. The web browser will briefly go blank. You are now finished changing setting for the primary WAN connection known as Connection 1. It is now necessary to save the changes you just made and restart the Router. 10.
New Connection Example 2 - Create a New Bridge Connection You may create new connections to suit different purposes. For example, let’s create a new Bridge connection used to connect directly to a server acting as a firewall and proxy. 1.
DHCP Configuration for LAN The Router supports three DHCP modes for the LAN. By default, DHCP service is provided using an IP pool of 192.168.1.2 – 192.168.1.254 for a total of 253 IP addresses available. The Router can also relay DHCP service from another server through the WAN port.
Enable DHCP Relay Some service providers provide DHCP service for private networks from their own servers. To enable DHCP service form outside your LAN select the DHCP Relay option and type in the server IP address in the Relay IP field.
Management IP The IP address of the Router can be changed to suit the requirements of your LAN. Remember, if you are using DHCP from the Router, the IP address must be consistent with the DHCP IP settings. Figure 3- 19. Configure Management IP Change IP settings as desired and click the Apply button to change the DHCP Relay settings.
Save Configuration Changes Any changes made to the Router’s configuration must be saved to non-volitile memory or they will be lost if the Router is restarted or powered off. When you are finished making changes to the Router settings, follow the instructions here to save the new settings.
To save the new settings, click on the Save All button. It will take a second or two to perform the save. After the save is completed, a message appears in a new menu (see below). Figure 3-22. Changes permanently saved message To return to the System Commands menu you can click the Back button in the new menu or use the back function of the web browser.
Advanced Router Management Click the Advanced tab to access menus used to configure UPnP, Port Forwarding, Access Control, Advanced Security (including NAT, Firewall and DMZ setup), LAN Clients, Bridge Filters, Multicast pass- through, Static Routing and Dynamic Routing (RIP setup) and Wireless Management and Wireless Performance.
UPnP UPnP supports zero-configuration networking and automatic discovery for many types of networked devices. When enabled, it allows other devices that support UPnP to dynamically join a network, obtain an IP address, convey its capabilities, and learn about the presence and capabilities of other devices. DHCP and DNS service can also be used if available on the network.
LAN Clients The LAN Clients menu is used when establishing Port Forwarding, Access Control and Advanced Security rules for IP addresses on the LAN. This menu can be accessed directly by clicking on the LAN Clients button or hyperlink in the Advanced setup menu. You can also click on the New IP button located in the Port Forwarding, Access Control and Advanced Security menus to access this menu.
Port Forwarding Port Forwarding allows specific functions to bypass NAT protection that would otherwise not allow them to function. To use Port Forwarding, you must have specific client IP addresses available for configuration. Use the LAN Clients menu to establish client IP addresses available for port forwarding. In order to use Port Forwarding, Firewall support must be enabled.
You may also create customized rules to manage TCP/UDP ports. The pre-configured rules include those listed in the table here: Category Available Rules Games: Alien vs. Predator, Asheron’s Call, Dark Rein, Delta Force, Doom, Dune, DirectX Games, EliteForce, EverQuest, Fighter Ace II, Half Life, Heretic II, Hexen II, Kali, Motorhead, MSN Gaming Zone, Myth: The Fallen Lords, Need for Speed Porsche, Need for Speed 3, Outlaws, Rainbow 6, Starcraft, Tiberian Sun, Ultima, Unreal Tournament.
The User category for port forwarding is used to set up customized port forwarding rules. Figure 4- 5. Set up Custom Port Forwarding Rules To set up custom TCP or UDP port forwarding rules, follow these steps: 1. Select the User category and click the Add button located below the Available Rules list. This will change the menu to look like the example below.
2. Type a Rule Name in the space provided. 3. Select the port Protocol from the pull-down menu - you may select TCP, UDP or both (TCP/UDP). 4. Configure a range of ports for forwarding. Type the lowest numbered port in the range in the Port Start space.
Access Control Access Control settings are used to block various services and protocols for specific client IP addresses. The configuration process is similar setting up port forwarding, except access control will deny specific functions to client IP addresses. There are pre-configured rules for specific functions that may be blocked or you can block specific UDP or TCP ports.
Access Control pre-configured rules are the same as for port forwarding: Category Available Rules Games: Alien vs. Predator, Asheron’s Call, Dark Rein, Delta Force, Doom, Dune, DirectX Games, EliteForce, EverQuest, Fighter Ace II, Half Life, Heretic II, Hexen II, Kali, Motorhead, MSN Gaming Zone, Myth: The Fallen Lords, Need for Speed Porsche, Need for Speed 3, Outlaws, Rainbow 6, Starcraft, Tiberian Sun, Ultima, Unreal Tournament.
Advanced Security Use the Advanced Security features of the Router to globally enable or disable NAT and Firewall protection for any WAN connection, enable or disable DMZ IP addresses, enable or disable remote Telnet or web management from specified IP addresses, and enable/disable ICMP ping packets from the WAN. Figure 4-8.
Setup Remote Management Telnet and web management through the WAN port can be enabled for specified IP addresses. To enable remote management, click to check the selection box for Remote Telnet or Remote Web and type in an IP address and net mask of a trusted host.
Multicast Pass-through Multicast pass-through can be enabled or disabled for any WAN connection. When enabled it allows IGMP packets to pass through the WAN interface. IGMP packets are used to control multicasts and discontinue multicasts to individual IP addresses when they are no longer needed. Figure 4-10.
Static Routing Use Static Routing to specify a route used for data traffic within your Ethernet LAN or to route data on the WAN. This is used to specify that all packets destined for a particular network or subnet use a predetermined gateway. Figure 4-11.
Dynamic Routing The Router supports RIP v1 and RIP v2 used to share routing tables with other Layer 3 routing devices. It also supports use of password protection which requires password verification for RIP requests. Use the Dynamic Routing menu to enable RIP and if desired to configure password protection. Figure 4-12.
Wireless Management For added security you can opt to use Access Control based on the MAC address. This feature lets you create a list of MAC addresses that are allowed or denied association with the Router through the wireless interface. When it is enabled, the access point is instructed to forward packets only from wireless devices only if the MAC address of the device is granted association.
The remaining connection types (Bridge, Static, DHCP and CLIP) connect upon saving the settings and restarting the Router. These connections can be disconnected only if the connection set is deleted. To delete any WAN connection set, click on the Delete button in the menu for the connection.
Tools and Utility Menus The menus lited under the Tools tab are used for System Commands to save settings, restart and reset the Router; to set up Remote Log information; for User Management; to update firmware and load saved configuraiton files (in the Update Gateway menu); to perform a Ping test; and to test the DSL network connectivitiy in the Modem Test menu.
User Management It is a good idea to change the management user information used for the Router before or immediately after establishing a link to the WAN. Figure 4-14. User Management menu To change the user name and password used for management access to the Router: 1.
Click to restart the Wireless AP (Access Point). The Wireless AP must be Restart AP restarted any time wireless configuration is changed. The DSL-G604T can be reset to the default configuration for all settings using Restore the Restore option. This will also change the both the LAN and WAN IP address of the device, so these will need to be reconfigured accordingly.
Remote Log Us the Remote Log menu to set up logging to servers or computers that are located outside the LAN or subnet of the Router. Figure 4-16. Remote Log menu Select the Log Level from the pull-down menu. The levels available are: Alert, Critical, Debug, Error, Info, Notice, Panic and Warning.
Use the Update Gateway feature to load the latest firmware for the device. You can obtain the latest version of the DSL-G604T firmware by logging onto the D-Link web site at www.dlink.com. Save the latest firmware version to a file on your computer or an accessible TFTP server.
Ping Test The Ping Test menu allows you to ping any IP address from the Router to test connectivity to the address. Figure 4-18. Tools – Ping Test window To Ping a device, first enter the IP address of the device that you wish to Ping into the first field, the Packet Size (in bytes) in the second field, and finally, enter the number of times you wish the Ping function to attempt a connection to the desired device into the third field.
Modem Test The Modem Test menu is used for trouble shooting connection problems on the WAN interface. You can test for connectivity on the service provider’s network for any WAN connection. Test for F5 or F4 connection on the near segment or end-to-end. Figure 4-19.
Technical Specifications GENERAL ITU G.992.1 (G.dmt) RFC 1661 (PPP) ITU G.992.2 (G.lite) RFC 1994 (CHAP) ITU G.994.1 (G.Hs) RFC 1334 (PAP) ITU-T Rec. I.361 RFC 2364 (PPP over ATM) ITU-T Rec. I.610 RFC 1631 (NAT) IEEE 802.3 RFC 1877 (Automatic IP assignment) IEEE 802.3u RFC 2516 (PPP over Ethernet)
Physical and Environmental AC Inputs: Input: 120V AC, 60 Hz Power Adapter: Output: 12V AC, 1.2A Power 12 Watts (max) Consumption: Operating 0° to 40° C (32° - 104° F) Temperature: Humidity: 5 to 95% (non-condensing) Dimensions: 180 x 141 x 30 cm (device only) 380 grams (device only ) Weight: EMI:...
IP Address Setup The DSL-G604T is designed to provide network administrators maximum flexibility for IP addressing on the Ethernet LAN. The easiest IP setup choice in most cases is to let the Router do it using DHCP, which is enabled by default.
Router). Notice that the subnet mask is the same for all machines and the default gateway address is the LAN IP address of the Router. It is a good idea to make a note of each device’s IP address for reference during troubleshooting or when adding new stations or devices.
IP Concepts This appendix describes some basic IP concepts, the TCP/IP addressing scheme and shows how to assign IP Addresses. When setting up the Router, you must make sure it has a valid IP address. Even if you will not use the WAN port (ADSL port), you should, at the very least, make sure the Ethernet LAN port is assigned a valid IP address.
IP Network Classes Class Maximum Number Network Addresses (Host Maximum Number of of Networks in Portion in Parenthesis) Hosts per Network Class 1(.0.0.0) to 126(.0.0.0) 16,777,214 16,382 128.1(.0.0) to 191.254(.0.0) 65,534 2,097,150 192.0.1(.0) to 223.255.254(.0) Note: All network addresses outside of these ranges (Class D and E) are either reserved or set aside for experimental networks or multicasting.
IP Class Subnet Mask Class A 255.0.0.0 Class B 255.255.0.0 Class C 255.255.255.0 Subnet mask settings other than those listed above add significance to the interpretation of bits in the IP address. The bits of the subnet mask correspond directly to the bits of the IP address. Any bit an a subnet mask that is to correspond to a net ID bit in the IP address must be set to 1.
Microfilters and Splitters Most ADSL clients will be required to install a simple device that prevents the ADSL line from interfering with regular telephone services. These devices are commonly referred to as microfilters or sometimes called (inaccurately) line splitters. They are easy to install and use standard telephone connectors and cable. Some ADSL service providers will send a telecommunications technician to modify the telephone line, usually at the point where the telephone line enters the building.
Line Splitter If you are instructed to use a “line splitter”, you must install the device between the Modem and the phone jack. Use standard telephone cable with standard RJ-11 connectors. The splitter has three RJ-11 ports used to connect to the wall jack, the Modem and if desired, a telephone or telephone device.