D Link DI524D1 AirPlus G 802.11g/2.4GHz Wireless Router User Manual DI 624 071003

D Link Corporation AirPlus G 802.11g/2.4GHz Wireless Router DI 624 071003

Contents

Manual 1

802.11g/2.4GHzManualBuilding Networks for PeopleWireless RouterD-Link AirPlus GDI-524DI-524DI-524DI-524DI-524TM
2ContentsPackage Contents ................................................................................3Introduction............................................................................................4Wireless Basics ....................................................................................8Getting Started ....................................................................................11Using the Configuration Menu..............................................................12Networking Basics ..............................................................................39Troubleshooting...................................................................................54Technical Specifications ......................................................................61Frequently Asked Questions ................................................................64Contacting Technical Support ..............................................................92Warranty..............................................................................................93Registration ........................................................................................96
3 Internet Explorer Version 6.0 or Netscape NavigatorVersion 6.0 and AboveContents of Package: D-Link AirPlus G DI-524 802.11g/2.4GHz Wireless Router Power Adapter-DC 5V, 2.5A Manual and Warranty on CD Quick Installation Guide Ethernet Cable (All the DI-524’s Ethernet ports are Auto-MDIX) Computers with Windows, Macintosh, or Linux-based operating systems with an installed Ethernet adapterPackage ContentsNote: Using a power supply with a different voltage rating than the one included with theDI-524 will cause damage and void the warranty for this product.If any of the above items are missing, please contact your reseller.System Requirements for Configuration: Ethernet-Based Cable or DSL Modem
4IntroductionThe D-Link AirPlus G DI-524 802.11g/2.4 Ghz Wireless Router is an 802.11g high-performance, wireless router that supports high-speed wireless networking at home, atwork or in public places.Unlike most routers, the DI-524 provides data transfers at up to 54 Mbps (compared tothe standard 11 Mbps) when used with other D-Link AirPlus G products. The 802.11gstandard is backwards compatible with 802.11b products. This means that you do notneed to change your entire network to maintain connectivity. You may sacrifice some of802.11g’s speed when you mix 802.11b and 802.11g devices, but you will not lose theability to communicate when you incorporate the 802.11g standard into your 802.11bnetwork. You may choose to slowly change your network by gradually replacing the802.11b devices with 802.11g devices .In addition to offering faster data transfer speeds when used with other 802.11g products,the DI-524 has the newest, strongest, most advanced security features available today.When used with other 802.11g WPA (WiFi Protected Access) and 802.1x compatibleproducts in a network with a RADIUS server, the security features include:WPA: Wi-Fi Protected Access authorizes and identifies users based on a secret keythat changes automatically at a regular interval. WPA uses TKIP (TemporalKey Integrity Protocol) to change the temporal key every 10,000 packets (apacket is a kind of message transmitted over a network.) This insures muchgreater security than the standard WEP security. (By contrast, the older WEPencryption required the keys to be changed manually.)802.1x: Authentication is a first line of defense against intrusion. In the Authenticationprocess the server verifies the identity of the client attempting to connect to thenetwork. Unfamiliar clients would be denied access.For home users that will not incorporate a RADIUS server in their network, the securityfor the DI-524, used in conjunction with other 802.11g products, will still be much strongerthan ever before. Utilizing the Pre Shared Key mode of WPA, the DI-524 will obtain anew security key every time it connects to the 802.11g network. You only need to inputyour encryption information once in the configuration menu. No longer will you have tomanually input a new WEP key frequently to ensure security, with the DI-524, you willautomatically receive a new key every time you connect, vastly increasing the safety ofyour communications.
5ConnectionsAll Ethernet Ports (WAN and LAN)are auto MDI/MDIX, meaning you canuse either a straight-through or acrossover Ethernet cable.The Auto MDI/MDIX WAN port isthe connection forthe Ethernet cableto the Cable orDSL modem.Auto MDI/MDIXLAN portsautomatically sensethe cable type whenconnecting toEthernet-enabledcomputers.Receptorfor thePowerAdapter.Pressing theReset Buttonrestores therouter to itsoriginal factorydefault settings.
6LEDsWLAN LEDA solid lightindicates that thewireless segmentis ready. This LEDblinks duringwireless datatransmission.POWER LEDA solid lightindicates a properconnection to thepower supply.STATUSA blinking lightindicates that theDI-524 is ready.WAN LEDA solid light indi-cates connectionon the WAN port.This LED blinksduring data trans-mission.LOCALNETWORK LEDA solid light indicatesa connection to anEthernet-enabledcomputer on ports 1-4. This LED blinksduring data trans-mission.
7FeaturesWPA (Wi Fi Protected Access) authorizes and identifies users based on asecret key that changes automatically at a regular interval, for example:802.1x Authentication in conjunction with the RADIUS server verifies theidentity of would be clients.TKIP (Temporal Key Integrity Protocol), in conjunction with a RADIUSserver, changes the temporal key every 10,000 packets, ensuring greatersecurity.Pre Shared Key mode means that the home user, without a RADIUSserver, can connect securely via a pre-shared key, vastly improving thesafety of communications on the network.Backwards compatible with the 802.11b standard to provide a wireless datarate of up to 11Mbps.Fully compatible with the 802.11g standard to provide a wireless data rate ofup to 54Mbps.Utilizes OFDM technology (Orthogonal Frequency Division Multiplexing).User-friendly configuration and diagnostic utilities.Operates in the 2.4GHz frequency range.Connects multiple computers to a Broadband (Cable or DSL) modem toshare the Internet connection.IP FilteringAdvanced Firewall featuresDHCP server enables all networked computers to automatically receive IPaddresses.Web-based interface for Managing and Configuring.Access Control to manage users on the network.Supports special applications that require multiple connections.Equipped with 4 10/100 Ethernet ports, 1 WAN port, Auto MDI/MDIX.URL FilteringDomain BlockingSchedulingSupports NAT with VPN pass-through, providing added securityMAC Filtering
8Wireless BasicsD-Link wireless products are based on industry standards to provide easy-to-use andcompatible high-speed wireless connectivity within your home, business or public accesswireless networks. D-Link wireless products will allow you access to the data you want,when and where you want it. You will be able to enjoy the freedom that wireless networkingbrings.A WLAN is a cellular computer network that transmits and receives data with radiosignals instead of wires. WLANs are used increasingly in both home and officeenvironments, and public areas such as airports, coffee shops and universities. Innovativeways to utilize WLAN technology are helping people to work and communicate moreefficiently. Increased mobility and the absence of cabling and other fixed infrastructurehave proven to be beneficial for many users.Wireless users can use the same applications they use on a wired network. Wirelessadapter cards used on laptop and desktop systems support the same protocols asEthernet adapter cards.People use wireless LAN technology for many different purposes:Mobility - Productivity increases when people have access to data in any locationwithin the operating range of the WLAN. Management decisions based on real-timeinformation can significantly improve worker efficiency.Low Implementation Costs – WLANs are easy to set up, manage, change andrelocate. Networks that frequently change can benefit from WLANs ease ofimplementation. WLANs can operate in locations where installation of wiring may beimpractical.Installation and Network Expansion - Installing a WLAN system can be fastand easy and can eliminate the need to pull cable through walls and ceilings. Wirelesstechnology allows the network to go where wires cannot go - even outside the home oroffice.Scalability – WLANs can be configured in a variety of topologies to meet the needs ofspecific applications and installations. Configurations are easily changed and rangefrom peer-to-peer networks suitable for a small number of users to larger infrastructurenetworks to accommodate hundreds or thousands of users, depending on the numberof wireless devices deployed.Inexpensive Solution - Wireless network devices are as competitively priced asconventional Ethernet network devices.
9Standards-Based TechnologyThe DI-524 Wireless Broadband Router utilizes the new 802.11g standard.The IEEE 802.11g standard is an extension of the 802.11b standard. It increases thedata rate up to 54 Mbps within the 2.4GHz band, utilizing OFDM technology.This means that in most environments, within the specified range of this device, you willbe able to transfer large files quickly or even watch a movie in MPEG format over yournetwork without noticeable delays. This technology works by transmitting high-speeddigital data over a radio wave utilizing OFDM (Orthogonal Frequency Division Multiplexing)technology. OFDM works by splitting the radio signal into multiple smaller sub-signalsthat are then transmitted simultaneously at different frequencies to the receiver. OFDMreduces the amount of crosstalk (interference) in signal transmissions.The DI-524 is backwards compatible with 802.11b devices. This means that if you havean existing 802.11b network, the devices in that network will be compatible with 802.11gdevices at speeds of up to 11Mbps in the 2.4GHz range.Wireless Basics (continued)
10Wireless Basics (continued)Installation ConsiderationsThe D-Link AirPlus G DI-524 lets you access your network, using a wireless connection,from virtually anywhere within its operating range. Keep in mind, however, that the number,thickness and location of walls, ceilings, or other objects that the wireless signals mustpass through, may limit the range. Typical ranges vary depending on the types of materialsand background RF (radio frequency) noise in your home or business. The key tomaximizing wireless range is to follow these basic guidelines:Keep the number of walls and ceilings between the DI-524 and other networkdevices to a minimum - each wall or ceiling can reduce your D-Link wirelessproduct’s range from 3-90 feet (1-30 meters). Position your devices so thatthe number of walls or ceilings is minimized.Be aware of the direct line between network devices. A wall that is 1.5 feetthick (.5 meters), at a 45-degree angle appears to be almost 3 feet (1 meter)thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Positiondevices so that the signal will travel straight through a wall or ceiling (insteadof at an angle) for better reception.Keep your product away (at least 3-6 feet or 1-2 meters) from electricaldevices or appliances that generate extreme RF noise.Building Materials can impede the wireless signal - a solid metal door oraluminum studs may have a negative effect on range. Try to position wirelessdevices and computers with wireless adapters so that the signal passesthrough drywall or open doorways and not other materials.11111222223333344444
11Please remember that D-Link AirPlus G wireless devices are pre-configured toconnect together, right out of the box, with their default settings.You will need broadband Internet access (a Cable or DSL-subscriber line intoyour home or office).Consult with your Cable or DSL provider for proper installation of the modem.Connect the Cable or DSL modem to the DI-524 Wireless Broadband Router(see the printed Quick Installation Guide included with your router).If you are connecting a desktop computer to your network, install the D-LinkAirPlus G DWL-G510 wireless PCI adapter into an available PCI slot on yourdesktop computer. You may also install the DWL-G520, or the DWL-520.(See the printed Quick Installation Guide included with the network adapter.)Install the D-Link DWL-G630 wireless Cardbus adapter into a laptop computer.(See the printed Quick Installation Guide included with the DWL-G630.)Getting StartedFor a typical wireless setup at home (as shown above),please do the following:Setting up aWirelessInfrastructureNetwork11111222223333344444Install the D-Link DFE-530TX+ adapter into a desktop computer. The fourEthernet LAN ports of the DI-524 are Auto MDI/MDIX and will work with bothStraight-Through and Cross-Over cable.(See the printed Quick Installation Guide included with the DFE-530TX+.)6666655555
12Type admin in the UserName field Leave the Password blank Click OKWhenever you want to configure your network or theDI-524, you can access the Configuration Menu byopening the web-browser and typing in the IP Addressof the DI-524. The DI-524 default IP Address is shownat right: Open the web browser Type in the IP Address ofthe Router (http://192.168.0.1)Using the Configuration MenuHome > WizardThe Home>Wizardscreen will appear.Please refer to theQuick InstallationGuide for more infor-mation regarding theSetup Wizard.Note: if you have changed the default IP Address assignedto the DI-524, make sure to enter the correct IP Address.These buttons appearon most of the configu-ration screens in thissection. Please click onthe appropriate buttonat the bottom of eachscreen after you havemade a configurationchange.http://192.168.0.1...
13Using the Configuration Menu (continued)Home > WirelessKeys 1-4- Input up to 4 WEP keys; select the one you wish to use.Key Type- Select HEX or ASCII.WEP Encryption- Select the level of encryption desired: 64-bit, or 128-bit.SSID- Service Set Identifier (SSID) is the name designated for a spe-cific wireless local area network (WLAN). The SSID’s factorydefault setting is default. The SSID can be easily changed toconnect to an existing wireless network or to establish a newwireless network.WEP- Wired Equivalent Privacy (WEP) is a wireless security protocolfor Wireless Local Area Networks (WLAN). WEP provides secu-rity by encrypting the data that is sent over the WLAN. SelectEnabled or Disabled. Disabled is the default setting. (Note: Ifyou enable encryption on the DI-524 make sure to also enableencryption on all the wireless clients or wireless connection willnot be established.)Channel- 6 is the default channel. All devices on the network must sharethe same channel. (Note: The wireless adapters will automati-cally scan and match the wireless setting.)
14Using the Configuration Menu (continued)Home > WAN > Dynamic IP AddressDI-754Host Name- The Host Name is optional but may be required by some ISPs.The default host name is the device name of the Router and maybe changed.MAC Address- The default MAC Address is set to the WAN’s physical inter-face MAC address on the Broadband Router. It is not recom-mended that you change the default MAC address unless re-quired by your ISP.CloneMAC Address- The default MAC address is set to the WAN’s physical interfaceMAC address on the Broadband Router. You can use the “CloneMAC Address” button to copy the MAC address of the EthernetCard installed by your ISP and replace the WAN MAC addresswith the MAC address of the router. It is not recommended thatyou change the default MAC address unless required by yourISP.DynamicIP Address- Choose Dynamic IP Address to obtain IP Address informationautomatically from your ISP. Select this option if your ISP doesnot give you any IP numbers to use. This option is commonlyused for Cable modem services.
15Using the Configuration Menu (continued)Home > WAN > Static IP AddressStatic IP Address- IP Address-Subnet Mask-ISPGateway Address-PrimaryDNS Address-SecondaryDNS Address-Choose Static IP Address if all WAN IP information is provided toyou by your ISP. You will need to enter in the IP address, subnetmask, gateway address, and DNS address(es) provided to youby your ISP. Each IP address entered in the fields must be in theappropriate IP form, which are four octets separated by a dot(x.x.x.x). The Router will not accept the IP address if it is not inthis format. Input the public IP Address provided by your ISP.Input your Subnet mask. (All devices in the network must havethe same subnet mask.)Input the public IP address of the ISP to which you areconnecting.Input the primary DNS (Domain Name Server) IP addressprovided by your ISP.This is optional.
16Using the Configuration Menu (continued)Home > WAN > PPPoEIP Address- This option is only available for Static PPPoE. Enter the static IPAddress for the PPPoE connection. (Continued on the next page)User Name- Your PPPoE username provided by your ISP.Service Name- Enter the Service Name provided by your ISP (optional).Retype Password- Re-enter the PPPoE passwordPPPoE-Static PPPoE-you have an assigned (static) IP Address.Choose this option if your ISP uses PPPoE. (Most DSL userswill select this option.)Dynamic PPPoE- receive an IP Address automatically from your ISP.Primary DNSAddress- Primary DNS IP address provided by our ISPSecondary DNSAddress- This option is only available for Static PPPoE. Enter the static IPAddress for the PPPoE connection.Choose PPPoE (Pointto Point Protocol overEthernet) if your ISPuses a PPPoE con-nection. Your ISP willprovide you with ausername and pass-word. This option istypically used for DSLservices. Select Dy-namic PPPoE to ob-tain an IP address au-tomatically for yourPPPoE connection.Select Static PPPoEto use a static IP ad-dress for your PPPoEconnection.Please be sure toremove anyexistingPPPoE clientsoftwareinstalled on yourcomputers.
17Using the Configuration Menu (continued)Home > WAN > PPPoE continuedHome > LANLAN is short for Local Area Network. This is considered your internal network. These arethe IP settings of the LAN interface for the DI-524. These settings may be referred to asPrivate settings. You may change the LAN IP address if needed. The LAN IP address isprivate to your internal network and cannot be seen on the Internet.Auto-reconnect- If enabled, the DI-524 will automatically connect to your ISP af-ter your system is restarted or if the PPPoE connection is dropped.MTU- Maximum Transmission Unit-1492 is the default setting-you mayneed to change the MTU for optimal performance with yourspecific ISP.Local Domain- This field is optional. Enter in the local domain name.Subnet Mask- The subnet mask of the LAN interface.The default subnet mask is 255.255.255.0.IP Address- The IP address of the LAN interface. The default IP address is:192.168.0.1.MaximumIdle Time- Enter a maximum idle time during which Internet connection ismaintained during inactivity. To disable this feature, enable Auto-reconnect.
18Using the Configuration Menu (continued)Home > DHCPDHCP stands for Dynamic Host Control Protocol. The DI-524 has a built-in DHCP server.The DHCP Server will automatically assign an IP address to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to “Obtain an IP Address Automatically.” When you turn your computers on,they will automatically load the proper TCP/IP settings provided by the DI-524. TheDHCP Server will automatically allocate an unused IP address from the IP address poolto the requesting computer. You must specify the starting and ending address of the IPaddress pool.DHCP Server- Select Enabled or Disabled. The default setting is Enabled.StartingIP Address- The starting IP address for the DHCP server’s IP assignment.EndingIP Address- The ending IP address for the DHCP server’s IP assignment.Lease Time- The length of time for the IP address lease. Enter the Leasetime. The default setting is one hour.
19Advanced > Virtual ServerUsing the Configuration Menu (continued)The DI-524 can be configured as a virtual server so that remote users accessing Webor FTP services via the public IP address can be automatically redirected to localservers in the LAN (Local Area Network).The DI-524 firewall feature filters out unrecognized packets to protect your LANnetwork so all computers networked with the DI-524 are invisible to the outside world.If you wish, you can make some of the LAN computers accessible from the Internetby enabling Virtual Server. Depending on the requested service, the DI-524 redirectsthe external service request to the appropriate server within the LAN network.The DI-524 is also capable of port-redirection meaning incoming traffic to a particularport may be redirected to a different port on the server computer.Each virtual service that is created will be listed at the bottom of the screen in theVirtual Servers List. There are pre-defined virtual services already in the table. Youmay use them by enabling them and assigning the server IP to use that particularvirtual service.
20Advanced > Virtual Server continuedUsing the Configuration Menu (continued)Example #1:Protocol Type- The protocol used for the virtual service.Public Port- The port number on the WAN (Wide Area Network) side that willbe used to access the virtual service.Private Port- The port number of the service used by the Private IP computer.Schedule- The schedule of time when the virtual service will be enabled.The schedule may be set to Always, which will allow theparticular service to always be enabled. If it is set to Time,select the time frame for the service to be enabled. If thesystem time is outside of the scheduled time, the service willbe disabled.Virtual Server- Select Enabled or Disabled.Name- Enter the name referencing the virtual service.Private IP- The server computer in the LAN (Local Area Network) that will beproviding the virtual services.If you have a Web server that you wanted Internet users toaccess at all times, you would need to enable it. Web(HTTP) server is on LAN (Local Area Network) computer192.168.0.25. HTTP uses port 80, TCP.Name: Web ServerPrivate IP: 192.168.0.25Protocol Type: TCPPrivate Port: 80Public Port: 80Schedule: always
21 Example #2:If you have an FTP server that you wanted Internet users to access by WAN port2100 and only during the weekends, you would need to enable it as such. FTPserver is on LAN computer 192.168.0.30. FTP uses port 21, TCP.Name: FTP ServerPrivate IP: 192.168.0.30Protocol Type: TCPPrivate Port: 21Public Port: 2100Schedule: From: 01:00AM to 01:00AM, Sat to SunUsing the Configuration Menu (continued)Advanced > Virtual Server continuedClick on this icon to edit the virtual serviceClick on this icon to delete the virtual serviceAll Internet users who want to access this FTP Servermust connect to it from port 2100. This is an example ofport redirection and can be useful in cases where thereare many of the same servers on the LAN network.
22Using the Configuration Menu (continued)Advanced > ApplicationsSome applications require multiple connections, such as Internet gaming, videoconferencing, Internet telephony and others. These applications have difficulties workingthrough NAT (Network Address Translation). Special Applications makes some of theseapplications work with the DI-524. If you need to run applications that require multipleconnections, specify the port normally associated with an application in the “TriggerPort” field, select the protocol type as TCP or UDP, then enter the public ports associatedwith the trigger port to open them for inbound traffic.The DI-524 provides some predefined applications in the table on the bottom of the webpage. Select the application you want to use and enable it.Note! Only one PC can use each Special Application tunnel.Name- This is the name referencing the special application.Trigger Port- This is the port used to trigger the application. It can be eithera single port or a range of ports.Trigger Type- This is the protocol used to trigger the special application.Public Port- This is the port number on the WAN side that will be used toaccess the application. You may define a single port or a rangeof ports. You can use a comma to add multiple ports or portranges.Public Type- This is the protocol used for the special application.
23Using the Configuration Menu (continued)Advanced > Filters > IP FiltersFilters are used to deny or allow LAN (Local Area Network) computers from accessingthe Internet. The DI-524 can be setup to deny internal computers by their IP or MACaddresses. The DI-524 can also block users from accessing restricted web sites.This is the schedule of time when the IP Filter will be enabled.Schedule-Select the protocol type.Protocol Type-Use IP Filters to deny LAN IP addresses from accessing theInternet. You can deny specific port numbers or all ports forthe specific IP address.IP Filters-The single port or port range that will be denied access to theInternet.Port-The IP address of the LAN computer that will be deniedaccess to the Internet.IP-
24Using the Configuration Menu (continued)Advanced > Filters > URL BlockingFilters-URL Blocking is used to deny LAN computers from accessing specific web sites by theURL. A URL is a specially formatted text string that defines a location on the Internet. Ifany part of the URL contains the blocked word, the site will not be accessible and theweb page will not display. To use this feature, enter the text string to be blocked andclick Apply. The text to be blocked will appear in the list. To delete the text, justhighlight it and click Delete.Select the filter you wish to use; in this case, URL Blockingwas chosen.Keywords- Block URLs which contain keywords listed below.Enter the keywords in this space.URL Blocking- Select Enabled or Disabled.
25Using the Configuration MenuAdvanced > Filters > MAC FiltersUse MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network)computers by their MAC addresses from accessing the Network. You can either manuallyadd a MAC address or select the MAC address from the list of clients that are currentlyconnected to the Broadband Router.MAC Filters- Choose Disable MAC filters; allow MAC addresses listed be-low; or deny MAC addresses listed below.Filters-Name- Enter the name here.MAC Address- Enter the MAC Address.DHCP Client- Select a DHCP client from the pull-down list; click Clone tocopy that MAC Address.Select the filter you wish to use; in this case, MAC filters waschosen.(continued)

Navigation menu