Preface D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any person or organization of such revisions or changes. Manual Revisions Revision Date Description 1.0 March 26, 2008 DIR-628 Revision A1 with Firmware version 1.00 Trademarks D-Link and the D-Link logo are trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States or other countries.
Table of Contents Table of Contents Preface........................................................................... 2 Manual Revisions..................................................... 2 Trademarks............................................................... 2 Product Overview......................................................... 5 Package Contents.................................................... 5 System Requirements.............................................. 6 Introduction...............
Table of Contents Advanced Wireless Settings............................. 51 RTS Threshold.............................................. 51 DTIM Interval................................................. 51 WMM Function.............................................. 51 Wi-Fi Protected Setup....................................... 52 Advanced Network Settings.............................. 54 UPnP............................................................. 54 WAN Ping Block.....................................
Section 1 - Product Overview Product PackageOverview Contents D-Link DIR-628 Rangebooster N™ Dual Band Router Power Adapter Ethernet Cable CD-ROM Stand Note: Using a power supply with a different voltage rating than the one included with the DIR-628 will cause damage and void the warranty for this product.
Section 1 - Product Overview System Requirements Network Requirements • An Ethernet-based Cable or DSL modem • IEEE 802.11n-draft or 802.11g wireless clients • IEEE 802.11a wireless clients • 10/100/1000 Ethernet Computer with the following: • Windows®, Macintosh, or Linux-based operating system • An installed Ethernet adapter Web-based Configuration Utility Requirements Browser Requirements: • Internet Explorer 6.0 or higher • Mozilla 1.7.12 or higher • Firefox 1.5 or higher • Safari 1.
Section 1 - Product Overview Introduction TOTAL PERFORMANCE Combines award winning router features and IEEE 802.11a and Draft 802.11n wireless technology to provide the best wireless performance TOTAL SECURITY The most complete set of security features including Active Firewall and WPA2 to protect your network against outside intruders TOTAL COVERAGE Provides greater wireless signal rates even at farther distances for best-in-class Whole Home Coverage.
Section 1 - Product Overview Features • Faster Wireless Networking - The DIR-628 provides up to 300Mbps* wireless connection with other 802.11n wireless clients. This capability allows users to participate in real-time activities online, such as video streaming, online gaming, and real-time audio. The performance of this 802.11n wireless router gives you the freedom of wireless networking at speeds 14x faster than 802.11g. • Compatible with 802.11a and 802.
Section 1 - Product Overview Hardware Overview Connections USB Connect a USB 1.1 or 2.0 flash drive to configure the wireless settings using WCN. LAN Ports (1-4) Connect Ethernet devices such as computers, switches, and hubs. D-Link DIR-628 User Manual Reset Pressing the Reset button restores the router to its original factory default settings. Internet Port The auto MDI/MDIX Internet port is the connection for the Ethernet cable to the cable or DSL modem.
Section 1 - Product Overview Hardware Overview LEDs Internet LED A solid light indicates connection on the Internet port. This LED blinks during data transmission. Status LED A blinking light indicates that the DIR-628 is ready. Power LED A solid light indicates a proper connection to the power supply. D-Link DIR-628 User Manual WCN LED Insert a USB flash drive with WCN information. The LED will blink 3 times if it successfully transfers the wireless settings.
Section 2 - Installation Installation This section will walk you through the installation process. Placement of the router is very important. Do not place the router in an enclosed area such as a closet, cabinet, or in the attic or garage. Before you Begin • Please configure the router with the computer that was last connected directly to your modem. • You can only use the Ethernet port on your modem.
Section 2 - Installation Wireless Installation Considerations The D-Link wireless router lets you access your network using a wireless connection from virtually anywhere within the operating range of your wireless network. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range.
Section 2 - Installation Connect to Cable/DSL/Satellite Modem If you are connecting the router to a cable/DSL/satellite modem, please follow the steps below: 1. Place the router in an open and central location. Do not plug the power adapter into the router. 2. Turn the power off on your modem. If there is no on/off switch, then unplug the modem’s power adapter. Shut down your computer. 3.
Section 2 - Installation Connect to Another Router If you are connecting the D-Link router to another router to use as a wireless access point and/or switch, you will have to do the following before connecting the router to your network: • Disable UPnP™ • Disable DHCP • Change the LAN IP address to an available address on your network. The LAN ports on the router cannot accept a DHCP address from your other router. To connect to another router, please follow the steps below: 1.
Section 2 - Installation 6. Disconnect the Ethernet cable from the router and reconnect your computer to your network. 7. Connect an Ethernet cable in one of the LAN ports of the router and connect it to your other router. Do not plug anything into the Internet port of the D-Link router. 8. You may now use the other 3 LAN ports to connect other Ethernet devices and computers. To configure your wireless network, open a web browser and enter the IP address you assigned to the router.
Section 2 - Installation Getting Started The DIR-628 includes a Quick Router Setup Wizard CD. Follow the simple steps below to run the Setup Wizard to guide you quickly through the installation process. Insert the Quick Router Setup Wizard CD in the CD-ROM drive. The step-by-step instructions that follow are shown in Windows XP. The steps and screens are similar for the other Windows operating systems. If the CD Autorun function does not automatically start on your computer.go to Start > Run.
Section 3 - Configuration Configuration This section will show you how to configure your new D-Link wireless router using the web-based configuration utility. Web-based Configuration Utility To access the configuration utility, open a web-browser such as Internet Explorer and enter the IP address of the router (192.168.0.1). Select Admin from the drop-down menu and then enter your password. Leave the password blank by default.
Section 3 - Configuration Setup Wizard You may click Setup Wizard to quickly configure your router. If you want to enter your settings without running the wizard, click Manual Configuration and skip to page 20. Click Internet Connection Setup Wizard to begin. If you want to configure your wireless settings, click Launch Wireless Security Setup Wizard and skip to page 63.
Section 3 - Configuration Click Next to continue. Create a new password and then click Next to continue. Select your time zone from the drop-down menu and then click Next to continue. Select the type of Internet connection you use and then click Next to continue.
Section 3 - Configuration If you selected Dynamic, you may need to enter the MAC address of the computer that was last connected directly to your modem. If you are currently using that computer, click Clone Your PC’s MAC Address and then click Next to continue. The Host Name is optional but may be required by some ISPs. The default host name is the device name of the Router and may be changed. If you selected PPPoE, enter your PPPoE username and password. Click Next to continue.
Section 3 - Configuration If you selected L2TP, enter your L2TP username and password. Click Next to continue. If you selected Static, enter your network settings supplied by your Internet provider. Click Next to continue. Click Connect to save your settings. Once the router is finished rebooting, click Continue. Please allow 1-2 minutes to connect. Close your browser window and reopen it to test your Internet connection. It may take a few tries to initially connect to the Internet.
Section 3 - Configuration Manual Configuration Dynamic (Cable) My Internet Select Dynamic IP (DHCP) to obtain IP Address Connection: information automatically from your ISP. Select this option if your ISP does not give you any IP numbers to use. This option is commonly used for Cable modem services. Host Name: The Host Name is optional but may be required by some ISPs. Use Unicasting: Check the box if you are having problems obtaining an IP address from your ISP.
Section 3 - Configuration Internet Setup PPPoE (DSL) Choose PPPoE (Point to Point Protocol over Ethernet) if your ISP uses a PPPoE connection. Your ISP will provide you with a username and password. This option is typically used for DSL services. Make sure to remove your PPPoE software from your computer. The software is no longer needed and will not work through a router. My Internet Select PPPoE (Username/Password) from the drop-down menu.
Section 3 - Configuration Internet Setup PPTP Choose PPTP (Point-to-Point-Tunneling Protocol ) if your ISP uses a PPTP connection. Your ISP will provide you with a username and password. This option is typically used for DSL services. Address Mode: Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. In most cases, select Dynamic. PPTP IP Address: Enter the IP address (Static PPTP only).
Section 3 - Configuration MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specific ISP. 1400 is the default MTU. MAC Address: The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It is not recommended that you change the default MAC address unless required by your ISP.
Section 3 - Configuration Internet Setup L2TP Choose L2TP (Layer 2 Tunneling Protocol) if your ISP uses a L2TP connection. Your ISP will provide you with a username and password. This option is typically used for DSL services. Address Mode: Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. In most cases, select Dynamic. L2TP IP Address: Enter the L2TP IP address supplied by your ISP (Static only).
Section 3 - Configuration MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specific ISP. 1400 is the default MTU. Clone MAC The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It is not Address: recommended that you change the default MAC address unless required by your ISP.
Section 3 - Configuration Internet Setup Static (assigned by ISP) Select Static IP Address if all the Internet port’s IP information is provided to you by your ISP. You will need to enter in the IP address, subnet mask, gateway address, and DNS address(es) provided to you by your ISP. Each IP address entered in the fields must be in the appropriate IP form, which are four octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format.
Section 3 - Configuration Wireless Settings Enable Wireless: Check the box to enable the wireless function. If you do not want to use wireless, uncheck the box to disable all the wireless functions. Click Add New to create your own time schedule to enable the wireless function. Wireless Network Service Set Identifier (SSID) is the name of your wireless network. Name: Create a name using up to 32 characters. The SSID is casesensitive. 802.11 Band: Select 2.4GHz if you want to use the 2.
Section 3 - Configuration Enable Auto The Auto Channel Scan setting can be selected to allow the DIR-628 to choose the channel with the least amount of Channel Scan: interference. Wireless Channel: Indicates the channel setting for the DIR-628. By default the channel is set to 6. The Channel can be changed to fit the channel setting for an existing wireless network or to customize the wireless network. If you enable Auto Channel Scan, this option will be greyed out.
Section 3 - Configuration Network Settings This section will allow you to change the local network settings of the router and to configure the DHCP settings. IP Address: Enter the IP address of the router. The default IP address is 192.168.0.1. If you change the IP address, once you click Apply, you will need to enter the new IP address in your browser to get back into the configuration utility. Subnet Mask: Enter the Subnet Mask. The default subnet mask is 255.255.255.0.
Section 3 - Configuration DHCP Server Settings DHCP stands for Dynamic Host Control Protocol. The DIR-628 has a built-in DHCP server. The DHCP Server will automatically assign an IP address to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to “Obtain an IP Address Automatically.” When you turn your computers on, they will automatically load the proper TCP/IP settings provided by the DIR-628.
Section 3 - Configuration NetBIOS Scope: This feature allows the configuration of a NetBIOS ‘domain’ name under which network hosts operates. This setting has no effect if the ‘Learn NetBIOS information from WAN’ is activated.” NetBIOS Mode Select the different type of NetBIOS node: Broadcast only, Point-to-Point, Mixed-mode, and Hybrid. Type: Primary/ Enter your Primary (and Secondary) WINS IP address(es).
Section 3 - Configuration DHCP Reservation If you want a computer or device to always have the same IP address assigned, you can create a DHCP reservation. The router will assign the IP address only to that computer or device. Note: This IP address must be within the DHCP IP Address Range. Enable: Check this box to enable the reservation. Computer Name: Enter the computer name or select from the drop-down menu and click <<. IP Address: Enter the IP address you want to assign to the computer or device.
Section 3 - Configuration Note: The Revoke option will not disconnect a PC with a current network session from the network; you would need to use MAC Address Filter to do that. Revoke will only free up a DHCP Address for the very next requester.
Section 3 - Configuration Virtual Server The DIR-628 can be configured as a virtual server so that remote users accessing Web or FTP services via the public IP address can be automatically redirected to local servers in the LAN (Local Area Network). The DIR-628 firewall feature filters out unrecognized packets to protect your LAN network so all computers networked with the DIR-628 are invisible to the outside world.
Section 3 - Configuration This will allow you to open a single port. If you would like to open a range of ports, refer to page 35. Name: Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the fields. IP Address: Enter the IP address of the computer on your local network that you want to allow the incoming service to.
Section 3 - Configuration Port Forwarding This will allow you to open a single port or a range of ports. Name: Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the fields. IP Address: Enter the IP address of the computer on your local network that you want to allow the incoming service to.
Section 3 - Configuration Application Rules Some applications require multiple connections, such as Internet gaming, video conferencing, Internet telephony and others. These applications have difficulties working through NAT (Network Address Translation). Special Applications makes some of these applications work with the DIR-628.
Section 3 - Configuration QoS Engine The QoS Engine option helps improve your network gaming performance by prioritizing applications. By default the QoS Engine settings are disabled and application priority is not classified automatically. Enable Traffic Traffic Shaping Shaping: Automatic Uplink This option is enabled by default when the Traffic Speed: Shaping option is enabled. This option will allow your router to automatically determine the uplink speed of your Internet connection.
Section 3 - Configuration Detected xDSL: When Connection Type is set to automatic, the automatically detected connection type is displayed here. Enable QoS This option is disabled by default. Enable this option for better performance and experience with online games and other Engine: interactive applications, such as VoIP. Automatic This option is enabled by default. This will allow your router to automatically determine the network priority of running Classification: programs.
Section 3 - Configuration Network Filters Use MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network) computers by their MAC addresses from accessing the Network. You can either manually add a MAC address or select the MAC address from the list of clients that are currently connected to the Broadband Router. Configure MAC Select Turn MAC Filtering Off, allow MAC Filtering: addresses listed below, or deny MAC addresses listed below from the drop-down menu.
Section 3 - Configuration Access Control The Access Control section allows you to control access in and out of your network. Use this feature as Parental Controls to only grant access to approved sites, limit web access based on time or dates, and/or block access from applications like P2P utilities or games. Add Policy: Click the Add Policy button to start the Access Control Wizard. Access Control Wizard Click Next to continue with the wizard.
Section 3 - Configuration Access Control Wizard (continued) Enter a name for the policy and then click Next to continue. Select a schedule (I.E. Always) from the drop-down menu and then click Next to continue. Enter the following information and then click Next to continue. • Address Type - Select IP address, MAC address, or Other Machines. • IP Address - Enter the IP address of the computer you want to apply the rule to.
Section 3 - Configuration Access Control Wizard (continued) Select the filtering method and then click Next to continue. Enter the rule: Enable - Check to enable the rule. Name - Enter a name for your rule. Dest IP Start - Enter the starting IP address. Dest IP End - Enter the ending IP address. Protocol - Select the protocol. Dest Port Start - Enter the starting port number. Dest Port End - Enter the ending port number. To enable web logging, click Enable. Click Save to save the access control rule.
Section 3 - Configuration Website Filters Website Filters are used to allow you to set up a list of allowed Web sites that can be used by multiple users through the network. To use this feature select to Allow or Deny, enter the domain or website and click Save Settings. You must also select Apply Web Filter under the Access Control section (page 43). Add Website Select Allow or Deny. Filtering Rule: Website URL/ Enter the keywords or URLs that you want to Domain: allow or block. Click Save Settings.
Section 3 - Configuration Inbound Filters The Inbound Filter option is an advanced method of controlling data received from the Internet. With this feature you can configure inbound data filtering rules that control data based on an IP address range. Inbound Filters can be used with Virtual Server, Port Forwarding, or Remote Administration features. Name: Enter a name for the inbound filter rule. Action: Select Allow or Deny. Enable: Check to enable rule. Remote IP Start: Enter the starting IP address.
Section 3 - Configuration Firewall Settings A firewall protects your network from the outside world. The D-Link DIR-628 offers a firewall type functionality. The SPI feature helps prevent cyber attacks. Sometimes you may want a computer exposed to the outside world for certain types of applications. If you choose to expose a computer, you cam enable DMZ. DMZ is short for Demilitarized Zone. This option will expose the chosen computer completely to the outside world.
Section 3 - Configuration Application Level Gateway Configuration Here you can enable or disable ALG’s. Some protocols and applications require special handling of the IP payload to make them work with network address translation (NAT). Each ALG provides special handling for a specific protocol or application. A number of ALGs for common applications are enabled by default. PPTP: Allows multiple machines on the LAN to connect to their corporate network using PPTP protocol.
Section 3 - Configuration Routing The Routing option is an advanced method of customizing specific routes of data through your network. Destination IP: Enter the IP address of packets that will take this route. Netmask: Enter the netmask of the route, please note that the octets must match your destination IP address. Gateway: Enter your next hop gateway to be taken if this route is used. Metric: The route metric is a value from 1 to 16 that indicates the cost of using this route.