D-Link D Link 500 B Manual

							DSL-500 ADSL Router User’s Guide
56
Advanced Filtering and Firewall (Screen #2)
In the second Advanced Filtering window you can supply a comment or name of
up to 15 characters for the set in the Set Comments
 field. Click the OK
 button
to save the comments, then click on the number of the subset you want to
configure to proceed to the next window. 
						

							DSL-500 ADSL Router User’s Guide
57
Advanced Filtering and Firewall (Screen #3)
In the third Advanced Filtering window you will define the rule applied for the
chosen subset. Again you can supply a name for the subset in the Comment
 field
and click the box on the right to enable the
 Filter Rule
.
In the Pass or Block 
field select the action to be performed on the IP packets,
the default is Pass Immediately
. All blocked packets will be dropped.
In the Direction
 field choose either In
 or Out 
from the pull down menu. You can
block IP packets from coming into the network, by selecting In
, blocking packets
from a specific IP address for example. Or you can block packets from a specific
IP address or subnet from leaving the LAN by selecting Out
, for example, to block
Internet access for a specific host.
The Protocol 
field allows you to block packets based on the protocol used. You
may choose to block ICMP, TCP or UDP transmissions from the pull-down menu.
You must next specify the Source
 and Destination IP Addresses
 as well as
their Subnet Mask
. This will block the packets from or destined to any specified
IP address from passing through the Router.
Finally you can specify individual protocol ports or an entire range of protocol
ports to be blocked for the Source
 or Destination
.  Type the Start Port
 number 
						

							DSL-500 ADSL Router User’s Guide
58
in either the Source or Destination row. If there is no port specified in the Start
Port column, the filter rule will be ignored. Use the <
, >
, =
 or ≠
≠≠ ≠
 in the pull down
menu to specify the port or range of ports to be filtered. Use the following guide
to define the port or port range:
<
 : specifies the port numbers less than and equal to the Start Port number
> 
: specifies the port numbers greater than and equal to the Start Port number
= 
: sets the port number equal to the Start Port if there is no End Port
specified; if an End Port number is specified, this defines a range of ports to
filter. The range is defined as the port numbers between the Start Port and
End Port, including the Start and End Port numbers.
≠
≠≠ ≠ 
: the port number does not equal to the Start Port if there is no End Port
specified; if an End Port number is specified, this defines a range of ports not
to filter. The range is defined as the port numbers between the Start Port and
End Port, including the Start and End Port numbers.
Port Redirection
Port Redirection Window
The Port Redirection feature of the Router is used in conjunction with NAT to
improve security and efficiency. Port redirection can be used to direct potentially
hazardous packets to a proxy server outside your firewall. For example, it is
common practice to direct HTTP packets to a designated HTTP server in the
DMZ. Other common applications might include directing incoming SMTP
packets to an Email server for data scrutiny and improved network efficiency.
Click the Add
 button in the Port Redirection window to access the Redirect Port
menu. 
						

							DSL-500 ADSL Router User’s Guide
59
Redirect Port Window
The Redirect Port window presents five entry fields. The first field, Comment
can be used to assign an appropriate name to the new route, for our example we
will use the name HTTP Server
. In the Internet Port 
field enter the designated
TCP or UDP protocol port number for the particular protocol packet you wish to
redirect. In our example an incoming HTTP packets use port 80. The local port is
the port used by the designated host on the LAN. In this case an HTTP server,
conventionally port 8080 is used for this purpose. Choose the protocol either TCP
or UDP from the pull-down Protocol
 menu, HTTP is defined within TCP. In the
Local Computer 
field supply the IP address of the local designated host
computer or device. Using our example you would enter the IP address of the
HTTP server.
Router Utility Functions
Once the Router configurations have been set, it is necessary to save the new
settings to memory. You may also upgrade the Router to use the latest firmware.
The procedures for saving settings and upgrading firmware are discussed here. 
						

							DSL-500 ADSL Router User’s Guide
60
Save Changes
In order to save the configuration changes that have been made to the Router you
must save them to the Router’s non-volatile RAM. You can change any or all of
the configurable settings in one session before you initiate the saving procedure.
If you experience a power loss or reboot the Router before saving, all changes will
have to be reset.
Save Changes Window
When you are ready to save the settings, click the Save Configuration
 button.
A pop-up message window informs you that the Router must be restarted. Do not
turn off the power to the Router while the settings are being saved.
When the Restart System
 window appears, click the Restart
 button.
After restarting the Router, the Login to web-based management module
 page
will again appear. 
						

							DSL-500 ADSL Router User’s Guide
61
Update Firmware
In order to keep pace with changes in ADSL standards and technology the
DSL-500 allows you to easily update the embedded firmware. You may obtain the
latest version of the DSL-500 firmware by logging onto the D-Link web site at
www.dlink.com. If you are connected to the Internet, you can access the D-Link
web site by clicking on the blue URL in the Update Firmware window.
Update Firmware Window
The Update Firmware window lists the version of the firmware the Router is
currently using. If you would like to update, follow the instructions given on the
D-Link web site firmware update page to download the new firmware. You can
then use the DSL-500 Firmware Upgrade Utility included with the Router to
transfer the new firmware to the Router. For instructions on using the Upgrade
Utility software please read Appendix C.
The Installation CD-ROM included with the Router contains an installation file
for the DSL-500 Firmware Upgrade Utility. You should install this on the
computer you will use to make the occasional upgrades. Click on the setup.exe
file and the utility will be automatically installed. 
						

							DSL-500 ADSL Router User’s Guide
62
Summary Statistics
Click on the Summary button for a concise presentation of various Router
statistics.
Summary
This page provides summary statistics of the various features of the Router. The
list includes: PPPoE Login
, PPPoE Information
 (when using PPPoE
connection method), PVC
, Connection Method
, DHCP Configuration
 and
NAT Configuration
. 
						

							DSL-500 ADSL Router User’s Guide
63
6
LAN Setup
The Router allows many possibilities for network layout. This gives the network
administrator much flexibility to decide how best to use it. One of the most
important decisions for the network administrator involves IP addressing on the
LAN. The easiest choice in most cases is to let the Router take care of it for you
using DHCP, which is done by default. This chapter discusses the various
alternatives for IP address assignment using the Router.
Assigning Network IP Addresses
The IP address settings, which include the IP address, subnet mask and gateway
IP address are the first and most important internal network settings that need
to be configured. The Router is assigned a default LAN IP address and subnet
mask.  If you do not have a preexisting IP network and are setting one up now,
using the factory default IP address settings can greatly ease the setup process. If
you already have a preexisting IP network, you can adjust the IP settings for the
Router to fit within your existing scheme.
Using the Default IP Address
The Router comes with a preset default IP address setting of 192.168.0.1 for the
LAN port.  There are two ways to use this default IP address, you can manually
assign an IP address and subnet mask for each PC on the LAN or you can
instruct the Router to automatically assign them using DHCP. The simplest
method is to use DHCP. The DHCP function is active by default.
Manual IP Address Assignment
You can manually set the IP address, subnet mask and default gateway on each
computer by performing the following steps for each PC on the network:
1. 
In Windows 95/98, click on the START
 button, go to Settings
 and choose
Control Panel
.
2. 
In the window that opens, double-click on the Network
 icon.
3. 
Under the Configuration tab, select the TCP/IP
 component and click
Properties
.
4. 
Choose the Specify an IP address
 option and edit the address settings
accordingly. Consult the table below for IP settings on a Class C network. 
						

							DSL-500 ADSL Router User’s Guide
64
 Default Addressing Example
HostIP Address Subnet Mask Gateway IP
Router192.168.0.1 255.255.255.0
Computer #1192.168.0.2 255.255.255.0 192.168.0.1
Computer #2192.168.0.3 255.255.255.0 192.168.0.1
Computer #3192.168.0.4 255.255.255.0 192.168.0.1
Please note that when using the default IP address as in the above example, the
first three numbers in the IP address must always be the same with only the
fourth number changing (for a Class C network). This is because the first three
numbers define the network IP address (all machines must belong to the same IP
network), while the last number denotes the host IP address (each computer
must have a unique address to distinguish it on the network). Also note that the
subnet mask is the same for all machines and the default gateway address is the
LAN IP address of the Router.
It is a good idea to make a note of each device’s IP address for reference during
troubleshooting or when adding new stations or devices.
Using DHCP
The second way to use the default settings is to allow the Router to automatically
assign IP addresses to your computers using DHCP. To do this, simply make sure
your computers’ IP addresses are set to 0.0.0.0 (under Windows, choose the
option Obtain an IP address automatically in the TCP/IP network component
described above). When the computers are restarted, their IP settings will
automatically be assigned by the Router.  The Router is set by default to use
DHCP. See the discussion in Chapter 5 for information on how to use configure
the Router for DHCP.
Changing the IP Address of the Router
If you choose to change the IP address of the Router you will need to access the
device directly via the RS-232 connection using a terminal emulation interface
(such as Microsoft HyperTerminal used in the sample screen captures). Your
terminal parameters will need to be set to:
VT-100/ANSI compatible
Terminal keys enabled
9,600 baud
8 data bits
No parity
One stop bit 
						

							DSL-500 ADSL Router User’s Guide
65
Connect a standard RS-232 (DB-9 to DB-9) cable to the Router’s RS-232 port on
the rear panel, connect the other end to a PC with a terminal emulation program
already installed. Power on the Router and launch the emulation program. The
terminal emulator will display system information while the unit undergoes self-
testing. When 192.168.0.1>
 appears on the screen the unit has completed its
self-test. In this mode, the default IP address 192.168.0.1 and an angle bracket
(“greater than”) will appear each time the Enter key is depressed.
HyperTerminal Interface (Boot Up)
To change the IP address of the Router type ip 
after the command prompt and
hit Enter. Be sure to type commands using all lower case letters as the console
interface is case sensitive. A new command prompt 192.168.0.1 ip>
 will
appear indicating that the unit is now ready to accept ip commands.
Type the following command series after the ip prompt: enable ethernet
followed by the new IP address
 to be assigned to the device as seen in the
example below.