Product Page: DIR-330 Firmware Version: 1.12
Setup Advanced Maintenance Status Help

Internet

There are two ways that you can configure your new D-Link router. You can either use the Setup Wizard or configure the settings manually. If you are new to networking and have never configured a router before, click on Setup Wizard and the router will guide you through a few simple steps to get your network up and running. If you consider yourself an advanced user and have configured a router before, click Manual Configure to input all the settings manually.

Setup Wizard
The Setup Wizard section contains two useful wizards to help setup the DIR-330, quickly connect to your ISP (Internet Service Provider) and configure its Wireless settings.
Launch Internet Connection Setup Wizard
Click this button to have the router walk you through a few simple steps to help you connect your router to the Internet.
Launch Wireless Security Setup Wizard
Click this button to have the router walk you through configuring the settings of your wireless network, including security.

 
Manual Configure
Chose this option if you would like to input the settings needed to connect your router to the Internet manually.

Internet Connection Type
The Internet Connection Settings are used to connect the DIR-330 to the Internet. Any information that needs to be entered on this page will be provided to you by your ISP and is often referred to as "public settings". Please select the appropriate option for your specific ISP. If you are unsure of which option to select, please contact your ISP.

WAN

Static IP Address
Select this option if your ISP (Internet Service Provider) has provided you with an IP address, Subnet Mask, Default Gateway, and a DNS(Domain Name Service) server address. Enter this information in the appropriate fields. If you are unsure of what to enter in these fields, please contact your ISP.

 

Dynamic IP Address
Select this option if your ISP automatically provides you an IP address. Cable modem providers typically use dynamic assignment of IP Addresses.

Host Name (optional) - The Host Name field is optional but may be required by some ISPs. The default host name is the model number of the router.
MAC Address (optional) - The MAC (Media Access Control) Address field is required by some ISPs. The default MAC address is set to the MAC address of the WAN interface on the DIR-330. You can use the "Clone MAC Address" button to automatically copy the MAC address of the Ethernet Card that's installed in the computer being used to configure the DIR-330. It is only necessary to fill in this field if required by your ISP.
Primary DNS Address - Enter the Primary DNS server IP address provided by your ISP.
Secondary DNS Address (optional) - If you were given a secondary DNS server IP address from your ISP, enter it in this field.
MTU - MTU (Maximum Transmission/Transfer Unit) is the largest packet size that can be sent over a network. Messages larger than the MTU are divided into smaller packets. 1500 is the default value for this option. Changing this number may adversely affect the performance of your router. Only change this number if instructed to by one of our Technical Support Representatives or by your ISP.

 

PPPoE
Select this option if your ISP requires you to use a PPPoE (Point to Point Protocol over Ethernet) connection. DSL providers typically use this option. Select Dynamic PPPoE to obtain an IP address automatically for your PPPoE connection (used by majority of PPPoE connections). Select Static PPPoE to use a static IP address for your PPPoE connection.

User Name - Enter your PPPoE username.
Password - Enter your PPPoE password.
Service Name (optional) - If your ISP uses a service name for the PPPoE connection, enter the service name here.
IP Address - This option is only available for Static PPPoE. Enter in the static IP address for the PPPoE connection.
MAC Address (optional) - The MAC (Media Access Control) Address field is required by some ISPs. The default MAC address is set to the MAC address of the WAN interface on the DIR-330. You can use the "Clone MAC Address" button to automatically copy the MAC address of the Ethernet Card installed in the computer used to configure the DIR-330. It is only necessary to fill in this field if required by your ISP.
Primary DNS Address - The Primary DNS (Domain Name System) server IP address may be provided by your ISP. You should only need to enter this information if you selected Static PPPoE. If Dynamic PPPoE is chosen, leave this field at its default value as your ISP will automatically provide you this information.
Secondary DNS Address (optional) - If you were given a secondary DNS server IP address from your ISP, enter it in this field.
Maximum Idle time - The amount of time of inactivity before the router will disconnect your PPPoE session. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then the connection will be dropped. This option only applies to the Connect-on-demand Connect mode.
MTU - MTU (Maximum Transmission/Transfer Unit) is the largest packet size that can be sent over a network. Messages larger than the MTU are divided into smaller packets. 1492 is the default value for this option. Changing this number may adversely affect the performance of your router. Only change this number if instructed to by one of our Technical Support Representatives or by your ISP.
Connect mode select - Select Always-on if you would like the router to never disconnect the PPPoE session. Select Manual if you would like to control when the router is connected and disconnected from the Internet. The Connect-on-demand option allows the router to establish a connection to the Internet only when a device on your network tries to access a resource on the Internet.

 

PPTP
Select this option if your ISP uses a PPTP (Point to Point Tunneling Protocol) connection and has assigned you a username and password in order to access the Internet. Select Dynamic PPTP to obtain an IP address automatically for your PPTP connection. Select Static PPTP to use static IP address for your PPTP connection.

IP Address - Enter the IP address that your ISP has assigned to you.
Subnet Mask - Enter the Subnet Mask that your ISP has assigned to you.
Gateway - Enter the Gateway IP address that your ISP has assigned to you.
DNS - Enter the DNS address that your ISP has assigned to you.
Server IP - Enter the server IP address of the server that your ISP has assigned to you.
Account - Enter your PPTP Username.
Password - Enter your PPTP Password.
Maximum Idle time - The amount of time of inactivity before the device will disconnect your PPTP session. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then the connection will be dropped. This option only applies to the Connect-on-demand Connect mode.
MTU - MTU (Maximum Transmission/Transfer Unit) is the largest packet size that can be sent over a network. Messages larger than the MTU are divided into smaller packets. 1400 is the default value for this option. Changing this number may adversely affect the performance of your router. Only change this number if instructed to by one of our Technical Support Representatives or by your ISP.
Connect mode select - Select Always-on if you would like the router to never disconnect the PPTP session. Select Manual if you would like to control when the router is connected and disconnected from the Internet. The Connect-on-demand option allows the router to establish a connection to the Internet only when a device on your network tries to access a resource on the Internet.

 

L2TP
Select this option if your ISP uses a L2TP (Layer 2 Tunneling Protocol) connection and has assigned you a username and password in order to access the Internet. Select Dynamic L2TP to automatically obtain an IP address for your L2TP connection. Select Static L2TP to use a static IP address for your L2TP connection.

IP Address - Enter the IP address that your ISP has assigned to you.
Subnet Mask - Enter the Subnet Mask that your ISP has assigned to you.
Gateway - Enter the Gateway IP address that your ISP has assigned to you.
DNS - Enter the DNS address that your ISP has assigned to you.
Server IP - Enter the server IP address of the server that your ISP has assigned to you.
L2TP Account - Enter your L2TP Username.
L2TP Password - Enter your L2TP Password.
Maximum Idle time - The amount of time of inactivity before the device will disconnect your L2TP session. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then the connection will be dropped. This option only applies to the Connect-on-demand Connect mode.
MTU - MTU (Maximum Transmission/Transfer Unit) is the largest packet size that can be sent over a network. Messages larger than the MTU are divided into smaller packets. 1400 is the default value for this option. Changing this number may adversely affect the performance of your router. Only change this number if instructed to by one of our Technical Support Representatives or by your ISP.
Connect mode select - Select Always-on if you would like the router to never disconnect the L2TP session. Select Manual if you would like to control when the router is connected and disconnected from the Internet. The Connect-on-demand option allows the router to establish a connection to the Internet only when a device on your network tries to access a resource on the Internet.

 

BigPond
Select this option if your ISP is BigPond(Australia).

Username - Enter your BigPond Username.
Password - Enter your BigPond Password.
Auth Server - Select either sm-server or dce-server.
Login Server IP (optional) - Enter the IP address of Login Server you have been assigned.
MAC Address (optional) - The MAC (Media Access Control) Address field is required by some ISPs. The default MAC address is set to the MAC address of the WAN interface on the DIR-330. You can use the "Clone MAC Address" button to automatically copy the MAC address of the Ethernet Card installed in the computer used to configure the device. It is only necessary to fill in the field if required by your ISP.

 

Russian PPPoE
Select this option if you live in Russia and your ISP requires you to use a PPPoE (Point to Point Protocol over Ethernet) connection. DSL providers typically use this option. Select Dynamic PPPoE to obtain an IP address automatically for your PPPoE connection (used by majority of PPPoE connections). Select Static PPPoE to use a static IP address for your PPPoE connection.

Username - Enter your PPPoE username.
Password - Enter your PPPoE password.
Service Name (optional) - If your ISP uses a service name for the PPPoE connection, enter the service name here.
IP Address - This option is only available for Static PPPoE. Enter in the static IP address for the PPPoE connection.
MAC Address (optional) - The MAC (Media Access Control) Address field is required by some Internet Service Providers (ISP). The default MAC address is set to the MAC address of the WAN interface on the DIR-330. You can use the "Clone MAC Address" button to automatically copy the MAC address of the Ethernet Card installed in the computer used to configure the device. It is only necessary to fill in the field if required by your ISP.
Maximum Idle time - The amount of time of inactivity before the device will disconnect your PPPoE session. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then the connection will be dropped. This option only applies to the Connect-on-demand Connect mode.
MTU - MTU (Maximum Transmission/Transfer Unit) is the largest packet size that can be sent over a network. Messages larger than the MTU are divided into smaller packets. 1492 is the default value for this option. Changing this number may adversely affect the performance of your router. Only change this number if instructed to by one of our Technical Support Representatives or by your ISP.
Connect mode select - Select Always-on if you would like the router to never disconnect the PPPoE session. Select Manual if you would like to control when the router is connected and disconnected from the Internet. The Connect-on-demand option allows the router to establish a connection to the Internet only when a device on your network tries to access a resource on the Internet.
WAN Physical Setting - Select Dynamic IP or Static IP.
IP Address - Enter the IP address that your ISP has assigned to you.
Subnet Mask - Enter the Subnet Mask that your ISP has assigned to you.
Gateway - Enter the Gateway IP address assigned to you by your ISP.
Primary DNS Address - Enter the Primary DNS address assigned to you by your ISP.
Secondary DNS Address (optional)- Enter the Secondary DNS address assigned to you by your ISP.

 

Russian PPTP
Select this option if you live in Russia and your ISP uses a PPTP (Point to Point Tunneling Protocol) connection and has assigned you a username and password in order to access the Internet.

Server IP/Name - Enter the IP address of the server, which will be provided by your ISP that you will be connecting to.
Account - Enter your PPTP Username.
Password - Enter your PPTP Password.
Maximum Idle time - The amount of time of inactivity before the device will disconnect your PPTP session. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then the connection will be dropped. This option only applies to the Connect-on-demand Connect mode.
Connect mode select - Select Always-on if you would like the router to never disconnect the PPTP session. Select Manual if you would like to control when the router is connected and disconnected from the Internet. The Connect-on-demand option allows the router to establish a connection to the Internet only when a device on your network tries to access a resource on the Internet.
WAN Physical Setting - Select Dynamic IP or Static IP.
Address - Enter the IP address that your ISP has assigned to you.
Subnet Mask - Enter the Subnet Mask that your ISP has assigned to you.
Gateway - Enter the Gateway IP address assigned to you by your ISP.
Primary DNS Address - Enter the Primary DNS address assigned to you by your ISP.
Secondary DNS Address (optional) - Enter the Secondary DNS address assigned to you by your ISP.

Wireless

Wireless Settings
The wireless section is used to configure the wireless settings for your D-Link router. Note that changes made in this section may also need to be duplicated on wireless clients that you want to connect to your wireless network.

You can configure wireless security features to protect your privacy. This device supports three wireless security modes WEP, WPA-Personal and WPA-Enterprise. WEP is the original wireless encryption standard. WPA provides a high level of security. WPA-Personal does not require an authentication server. The WPA-Enterprise option requires an external RADIUS authentication server.

 

WI-FI Protected Setup (Also called WCN 2.0 in Windows Vista)
WI-FI Protected Setup (WPS) provides an easy way to quickly setup your wireless network. Enable – Tick the checkbox to enable WPS.
Current PIN – WPS uses this PIN (Personal Identification Number) to establish the wireless network. You can generate a new PIN or reset the PIN to its default setting.
Reset to Unconfigured – Click this button if you don’t want to further configure the settings of WPS and only need to use one PIN.
Add Wireless Device With WPS – Click this button if you want to add a wireless device with WPS. In the screen that follows, you can enter the wireless device’s PIN or click a virtual push button to add a wireless device.

 
Wireless Network Settings

Enable Wireless
This option turns on and off the wireless connection feature of the router. When you set this option, the following parameters are in effect:

 

Wireless Network Name
Also known as the SSID (Service Set Identifier), this is the name of your Wireless Local Area Network (WLAN). By default the SSID of the DIR-330 is "dlink". This can be easily changed to establish a new wireless network or to add the DIR-330 to an existing wireless network.

 

Wireless Channel
Indicates which channel the DIR-330 is operating on. By default the channel is set to 6. This can be changed to fit the channel setting for an existing wireless network or to customize your new wireless network. Click the Enable Auto Scan checkbox to have the DIR-330 automatically select the channel that it will operate on. This option is recommended because the router will choose the channel with the least amount of interference.

 

Enable Auto Channel Scan
This option is selected by default. The router automatically finds the channel with the least amount of interference and uses that channel for wireless networking. If you disable this option, the router uses the channel that you specify with the Wireless Channel option.

 

802.11 Mode
Choose one of the modes from the dropdown menu that best matches the wireless standards used by the devices on your wireless network.

802.11b only - Select this mode if you only have 802.11b wireless devices connecting to your router. This will ensure the greatest performance for pure 802.11b wireless networks.

802.11b/g mixed – Select this mode if you have 802.11b and 802.11g wireless devices connecting to your router. This will ensure the greatest amount of interoperability between 802.11b and 802.11g devices.

802.11g only – Select this mode if you only have 802.11g wireless devices connecting to your router. This will ensure the greatest performance for pure 802.11g wireless networks.

 

Enable Hidden Wireless
Select Enabled if you would not like the SSID of your wireless network to be broadcasted by the DIR-330. If this option is Enabled, the SSID of the DIR-330 will not be seen by Site Survey utilities, so when setting up your wireless clients, you will have to know the SSID of your DIR-330 and enter it manually in order to connect to the router. This option is enabled by default.

 

Wireless Security Mode
Securing your wireless network is important as it is used to protect the integrity of the information being transmitted over your wireless network. The DIR-330 is capable of 4 types of wireless security; WEP, WPA only, WPA2 only, and WPA/WPA2 (auto-detect)

 

WEP
Wired Equivalent Protocol (WEP) is a wireless security protocol for Wireless Local Area Networks (WLAN). WEP provides security by encrypting the data that is sent over the WLAN. The DIR-330 supports 2 levels of WEP Encryption: 64-bit and 128-bit. WEP is disabled by default. The WEP setting can be changed to fit an existing wireless network or to customize your wireless network.

Authentication - Authentication is a process by which the DIR-330 verifies the identity of a network device that is attempting to join the wireless network. There are two types authentication for this device when using WEP.
Open System - Select this option to allow all wireless devices to communicate with the DIR-330 before they are required to provide the encryption key needed to gain access to the network.
Shared Key - Select this option to require any wireless device attempting to communicate with the DIR-330 to provide the encryption key needed to access the network before they are allowed to communicate with the DIR-330.
WEP Encryption - Select the level of WEP Encryption that you would like to use on your network. The two supported levels of WEP encryption are 64-bit and 128-bit.
Key Type - The Key Types that are supported by the DIR-330 are HEX (Hexadecimal) and ASCII (American Standard Code for Information Interchange.) The Key Type can be changed to fit an existing wireless network or to customize your wireless network.
Keys - Keys 1-4 allow you to easily change wireless encryption settings to maintain a secure network. Simply select the specific key to be used for encrypting wireless data on the network.
 

WPA -Personal
Wi-Fi Protected Access authorizes and authenticates users onto the wireless network. WPA uses stronger security than WEP and is based on a key that changes automatically at a regular interval.

Cipher Type - The DIR-330 only supports mandatory cipher type in WPA and WPA2. They are: WPA only supports TKIP, WPA2 only supports AES.
PSK/EAP - When PSK is selected, your wireless clients will need to provide a Passphrase for authentication. When EAP is selected, you will need to have a RADIUS server on your network which will handle the authentication of all your wireless clients.
Passphrase - This is what your wireless clients will need in order to communicate with your DIR-330, when PSK is selected. Enter 8-63 alphanumeric characters. Be sure to write this Passphrase down as you will need to enter it on any other wireless devices you are trying to add to your network.
802.1X - This means of WPA authentication is used in conjunction with a RADIUS server that must be present on your network. Enter the IP address, port, and Shared Secret that you RADIUS is configured for. You also have the option to enter information for a second RADIUS server in the even that there are two on your network which you are using to authenticate wireless clients.
 

WPA2
Wi-Fi Protected Access 2 authorizes and authenticates users onto the wireless network. WPA2 uses stronger security than WEP and is based on a key that changes automatically at a regular interval.

Cipher Type - The DIR-330 only supports mandatory cipher type in WPA and WPA2. They are: WPA only supports TKIP, WPA2 only supports AES.
PSK/EAP - When PSK is selected, your wireless clients will need to provide a Passphrase for authentication. When EAP is selected, you will need to have a RADIUS server on your network which will handle the authentication of all your wireless clients.
Passphrase - This is what your wireless clients will need in order to communicate with your DIR-330, when PSK is selected. Enter 8-63 alphanumeric characters. Be sure to write this Passphrase down as you will need to enter it on any other wireless devices you are trying to add to your network.
802.1X - This means of WPA authentication is used in conjunction with a RADIUS server that must be present on your network. Enter the IP address, port, and Shared Secret that you RADIUS is configured for. You also have the option to enter information for a second RADIUS server in the even that there are two on your network which you are using to authenticate wireless clients.
 

WPA2-Auto
This option allows the DIR-330 to have both WPA2 and WPA clients connected to it simultaneously.

Network Settings

Network Settings
These are the settings of the LAN (Local Area Network) interface for the device. These settings may be referred to as "private settings". You may change the LAN IP address if needed. The LAN IP address is private to your internal network and cannot be seen on the Internet. The default IP address is 192.168.0.1 with a subnet mask of 255.255.255.0.

IP Address - IP address of the DIR-330, default is 192.168.0.1.
Subnet Mask - Subnet Mask of DIR-330, default is 255.255.255.0.
Local Domain Name (optional) - Enter in the local domain name for your network.

 

DNS Relay - When DNS Relay is enabled, DHCP clients of the router will be assigned the router's LAN IP address as their DNS server. All DNS requests that the router receives will be forwarded to your ISP's DNS servers. When DNS relay is disabled, all DHCP clients of the router will be assigned the ISP DNS server.

 

DHCP Server
DHCP stands for Dynamic Host Control Protocol. The DHCP server assigns IP addresses to devices on the network that request them. These devices must be set to "Obtain the IP address automatically". By default, the DHCP Server is enabled on the DIR-330. The DHCP address pool contains a range of IP addresses that will automatically be assigned to the clients on the network.

Starting IP address - The starting IP address for the DHCP server's IP assignment.
Ending IP address - The ending IP address for the DHCP server's IP assignment.
Lease Time - The length of time in minutes for the IP lease.

Dynamic DHCP client computers connected to the unit will have their information displayed in the Dynamic DHCP Client Table. The table will show the Host Name, IP Address, MAC Address, and Expired Time of the DHCP lease for each client computer.

 

DHCP Reservation
DHCP Reservations allow the router to assign the same IP address to a specific device on your network. The specified device will get the same DHCP IP address information every time it is turned on or requests an IP address. No other computer on your network will receive the specified static DHCP address. DHCP Reservations are very helpful when used for server computers on your network that are hosting applications such as Web and FTP.

Select Enabled to configure a DHCP Reservation. If you wish to disable this DHCP Reservation at a later date, click the edit icon next to the entry in the DHCP Reservation List, select the Disabled radio button, and then click Save Settings.

Computer Name - The Hostname of the network device you are configuring DHCP Reservation for. If the network device you would like to configure already has obtained an IP address from the router, you can select that computer from the drop down menu, click the arrow button and the Name, MAC Address and IP fields will automatically fill in with the network device's information, including the IP address it was assigned by the router.
IP Address - Enter the last octet of the IP address that you are configuring the network device to always obtain.
MAC Address - Enter the MAC address of the network device you are configuring a DHCP Reservation for.
Add - Click on the Add button to add the current DHCP reservation and click on Save Settings.
Clear - Click on the Clear button to clear the current DHCP the settings.

Client computers with DHCP Reservations will have their information displayed in the DHCP Reservations List. The table will show the Host Name, IP Address, MAC Address, and Expired Time of the DHCP lease for each client computer.

VPN Settings

VPN Setting
The DIR-330 supports IPSec, PPTP, and L2TP VPN as the Server Endpoint.

IPSec (Internet Protocol Security) is a set of protocols defined by the IETF (Internet Engineering Task Force) to provide IP security at the network layer.

An IPSec based VPN, such as that of the DIR-330, is made up of two basic parts:

• Internet Key Exchange security protocol (IKE)
• IPSec protocol (AH/ESP/both)

The first part, IKE, is the initial negotiation phase, where the two endpoints agree on which methods will be used to provide security for the underlying IP traffic. Furthermore, IKE is used to manage connections. Each Security Association(SA) is unidirectional, so there will be at least two SA per IPSec connection. The other part is the actual IP data being transferred, using the encryption and authentication methods agreed upon in the IKE negotiation. This can be accomplished in a number of ways by using the IPSec protocol ESP.

Enable - Check the box to enable
Name - Fill in the VPN name as desired
Encapsulation Mode - Tunnel
Remote IP - Select Site to Site for LAN-to-LAN configuration, enter the destination gateway IP address in the box
Remote Local LAN Net/Mask - For LAN-to-LAN configuration, enter the destination Subnet and Mask
Authentication - Enter the pre-shared key. The VPN Servers Endpoint from both ends must use the same pre-shared keys

Phase 1: Select Main mode or Aggressive mode
(The difference between the two is that aggressive mode will pass more information in fewer packets, with the benefit of slightly faster connection establishment, at the cost of transmitting the identities of the security firewall in the clear. When using aggressive mode, some configuration parameters such as Diffie-Hellman groups, and PFS can not be negotiated, resulting in a greater importance of having "compatible" configuration on both ends)

IKE Proposal List:
Cipher:
#1- Select 3DES or AES
#2- Select 3DES or AES
#3- Select 3DES or AES
#4- Select 3DES or AES

Hash:
#1- Select SHA1 or MD5
#2- Select SHA1 or MD5
#3- Select SHA1 or MD5
#4- Select SHA1 or MD5

IPSec Proposal List:

Phase 2: Select PFS if both ends supported
Cipher:
#1- Select 3DES or AES
#2- Select 3DES or AES
#3- Select 3DES or AES
#4- Select 3DES or AES

Hash:
#1- Select SHA1 or MD5
#2- Select SHA1 or MD5
#3- Select SHA1 or MD5
#4- Select SHA1 or MD5

PPTP/L2TP
PPTP uses TCP port 1723 for its control connection and uses GRE (IP protocol 47) for the PPP data. PPTP supports data encryption by using MPPE.

L2TP uses UDP to transport the PPP data, which is often encapsulated in IPSec for encryption instead of using MPPE.

Enable Settings - Check box to enable
Name - Fill in VPN name as desired
Connection type - Select PPTP or L2TP
VPN Server IP - Enter the VPN Server IP which is the LAN IP of the DIR-330
Remote IP Range - Assign a range of IP addresses. The assigned IP range should include a range of IP addresses on the LAN network. Make sure there are no conflicts with the DHCP range of the LAN interface.
Authentication Protocol - Select desired authentication protocol (PAP/CHAP/MSCHAP v2)
MPPE Encryption Mode - Select desired level of encryption ( 40 bit/128 bit)
Authentication Sources - Local
User Name 1 - Enter desired username
Password 1 - Enter desired password



Copyright 2004-2005 D-Link Systems, Inc.