D-Link DI-704UP

Express EtherNetwork Broadband Router with USB Print Server

Manual

Building Networks for People

Contents

Package Contents...3 Introduction....4 Features and Benefits...5 LEDs....6 Connections...7 Introduction to Broadband Router Technology..8 Sample Scenario...10 Network Setup... 11 Using the Setup Wizard...12 Using the Configuration Menu..17 Installing the Print Server Software..58 Networking Basics...62 Resetting the DI-704UP to the Factory Default Settings..82 Technical Specifications...83 Frequently Asked Questions...84 Contacting Technical Support.. 112 Warranty and Registration... 113 2

Package Contents

Contents of Package:
D-Link DI-704UP Express EtherNetwork Broadband Router with USB Print Server Manual, Warranty and Print Server Software on CD Quick Installation Guide Power Adapter - AC 5V, 2A CAT5 Ethernet Cable If any of the above items are missing, please contact your reseller.
WARNING! Using a power supply with a different voltage rating than the one included with the DI-704UP will cause damage and void the warranty for this product.
System Requirements for Configuration:
Computer with Windows, Macintosh, or Linux-based Operating System with an installed Ethernet adapter Internet Explorer version 6.x, Netscape Navigator version 6.x and above, or another Internet Browser application with Javascript enabled

Introduction

Thank you for purchasing the DI-704UP Express EtherNetwork Broadband Router with USB Print Server. The DI-704UP is an Ethernet Broadband Router with a built-in 4-port switch. It also features a USB port to share a USB printer on the home or office network and includes a print server application for Windows. As many as four computers can be connected directly to the routers integrated switch, using its four 10/100Mbps AutoMDIX Ethernet ports. More computers can be added to the network by connecting additional switches to the DI-704UP. The DI-704UP package even includes an Ethernet cable to get you started. The DI-704UP is ideal if you are creating your first home or small business network, or if you are a more advanced user looking for additional management settings. The DI-704UP includes a new, easy-to-use D-Link web-based graphical user interface (GUI) to configure the router. To prevent unwanted Internet intruders from accessing your private network, the DI-704UP also serves as a featurerich firewall. So, whether you are a college student who wants to network with friends and roommates, an executive working at home or in a small office, or a concerned parent who just wants to have more control over how your children access the Internet, then the D-Link DI-704UP Express EtherNetwork Broadband Router with USB Print Server is the networking solution for you.

Features & Benefits

Firewall Features Filtering - Easily applied filtering based on Media Access Control (MAC) Addresses, IP Addresses, Port Addresses, and time schedule allows or denies computer on the network access to the Internet. Network Address Translation - NAT allows your private network to share a single public IP address. All your computer connected to the DI-704UP will be on a private network shielded from Internet intruders. Built-In 4-Port Switch - Allows you to quickly and easily share an Internet connection with multiple computers and devices. Each 10/100 Ethernet Port automatically senses and accepts the type of Category (CAT) 5 cable you attach - whether straight through or cross-over. Connect additional switches to allow more computer to access the Internet. Built-In Print Server - Includes a USB port to connect to a USB printer and includes a Windows-based print server software application, so users on the network can share the printer. The print server is also capable of TCP/IP printing. Ethernet Cable Included - One Ethernet cable is included with the DI704UP to get you started. Simple Setup Wizard for Easy Installation - The D-Link setup wizard simplifies the installation process, getting you up and running in just a few clicks.

Introduction to Local Area Networking
A Local Area Network (LAN) is typically an Ethernet-based network that connects several computers together over a small area such as a building or group of buildings. LANs can also be connected over large areas. A collection of LANs connected over a large area is called a Wide Area Network (WAN). There are many types of media that can connect computers together. The most common media is CAT5 cable; UTP or STP twisted pair wire. Each computer must have a Network Interface Card (NIC), which transfers the data between computers. A NIC is usually a 10/100Mbps Fast Ethernet adapter. Most networks use hardware devices such as hubs or switches to transfer data between computers. A hub receives data arriving through each port and forwards the data to all other ports. A switch is more sophisticated, in that a switch can determine the port (or corresponding computer) that each packet of data is supposed to be delivered to. A switch minimizes network traffic and speeds up communication over a network. There are many types of scenarios to consider which could affect the operability of a network. Some of these issues are discussed in the manual under the Networking Basics section.

Sample Scenario

A typical network setup in a home or small office (as shown above) might contain the following devices. For specific information on setting up your network with the DI-704UP please see the Network Setup section on the following page. You will need broadband Internet access (a Cable or DSL subscription line into your home or office) Consult with your Cable or DSL provider for proper installation of the modem
Connect the Cable or DSL modem to the DI-704UP wireless broadband router (see the Quick Installation Guide included with the DI-704UP.) If you are connecting a desktop computer that does not already have an available Ethernet port to your network, you can install the D-Link DFE-530TX+ Ethernet adapter into an available PCI slot. (See the Quick Installation Guide included with the DWL-530TX+.) If you are connecting a laptop computer without an available Ethernet port to your network, install an Ethernet Cardbus adapter (e.g., D-Link DFE-690TXD) and its drivers into the laptop computer.(See the Quick Installation Guide included with the DFE-690TXD.) Connect your USB printer to the USB printer port on the DI-704UP. Please refer to the Quick Installation Guide for loading the Windows print server software if on a Windows-based computer.

MAC Address:

The default MAC address is set to the WANs physical interface MAC address on the Broadband Router. You can use the Clone MAC Address button to copy the MAC address of the Ethernet Card installed by your ISP and replace the WAN MAC address with this MAC address. It is not recommended that you change the default MAC address unless required by your ISP.
Primary/Secondary DNS Address:
Enter a DNS Address if you do not wish to use the one provided by your ISP.
Only enter the MTU if it is required by your ISP. Otherwise, leave it at the default setting of 1500.

Auto-reconnect:

If enabled, the Broadband Router will automatically connect to your ISP after your system is restarted or if the connection is dropped.
Home > WAN > Static IP Address
Choose Static IP Address if all WAN IP information is provided to you by your ISP. You will need to enter in the IP Address, subnet mask, gateway address, and DNS address(es) provided to you by your ISP. Each IP address entered in the fields must be in the appropriate IP form, which are four IP octets separated by a dot (x.x.x.x). The Router will not accept the IP Address if it is not in this format.

IP Address:

Public IP address provided by your ISP.

Subnet Mask:

Subnet mask provided by your ISP.

ISP Gateway Address:

Public IP address of your ISP that you are connecting to.
Enter an MTU value only if required by your ISP. Otherwise, leave it at the default setting of 1500.

Home > WAN > PPPoE

Please be sure to remove any Client Software program on your computer before you start your configuration of the DI-704UP Router. Choose PPPoE (Point to Point Protocol over Ethernet) if your ISP uses PPPoE connection. Your ISP will provide you with a username and password. This option is typically used for DSL services. Select Dynamic PPPoE to obtain an IP address automatically for your PPPoE connection. Select Static PPPoE to use a static IP address for your PPPoE connection.
Home > WAN > PPPoE (continued)

Dynamic PPPoE:

PPPoE connection where you will receive an IP address automatically from your ISP.

Static PPPoE:

PPPoE connection where you have an assigned (static) IP address.

User Name:

Your PPPoE username provided by your ISP.

Password:

Your PPPoE password provided by your ISP.

Retype Password:

Re-enter PPPoE password.

Service Name:

Enter the service name provided by your ISP. (optional)
This option is only available for Static PPPoE. Enter in the static IP address for the PPPoE connection.

Primary DNS Address:

Primary DNS IP provided by your ISP.

Secondary DNS Address:

Optional.

Maximum Idle time:

The amount of time of inactivity before disconnecting your PPPoE session. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then the connection will be dropped. Either set this to zero or enable Auto-reconnect to disable this feature.
MTU stands for Maximum Transmission Unit. For PPPoE connections, you may need to change the MTU settings in order to work correctly with your ISP.

Home > WAN > PPTP

Dynamic IP Address for PPTP is a WAN connection used in Europe.

My IP Address:

Enter in the IP address for the PPTP connection.

My Subnet Mask:

Enter the subnet mask information.

Server IP:

Enter the Server IP address. By default, its set to 192.168.0.1
Home > WAN > PPTP (continued)

PPTP Account:

Enter in the username for the PPTP account.

PPTP Password:

Enter the password for the PPTP account. Retype in Password to confirm.

Connection ID:

(Optional) Enter the Connection ID if required.

Maximum Idle Time:

The amount of time of inactivity before disconnecting your PPTP session. Enter a Maximum Idle Time (in minutes) to define a maximum period of time for which the Internet connection is maintained during inactivity. If the connection is inactive for longer than the defined Maximum Idle Time, then the connection will be dropped. Either set this to zero or enable Auto-reconnect to disable this feature.
If enabled, the device will automatically connect to your ISP after your unit is restarted or when the connection is dropped.
Home > WAN > BigPond Cable
Dynamic IP Address for BigPond is a WAN connection used in Australia.

Account:

Enable / Disable:

Select to activate the policy. To disable the virtual server feature, select disable.

Trigger Port:

This is the port used to trigger the application. It can be either a single port or a range of ports.

Trigger Type:

Select the trigger protocol you would like to initiate. To change the selection, use the drop down arrow and other choices will be listed.

Public Ports:

Enter in the public port or ports to be used. A range of ports can be specified with a hyphen.

Public Type:

Enter in the protocol type for public ports to access. To change the selection, use the drop down arrow and other choices will be listed.
Special Application List:
In the Special Application List, it will list some of the popular services with its trigger ports. This is the port number on the WAN side that will be used to access the application. You may define a single port or a range of ports. You can use a comma to add multiple ports or port ranges.

Advanced > IP Filter

Use IP (Internet Protocol) filters to allow or deny computers access to the Internet based on their IP address.

Enabled / Disabled:

Click Enabled to apply the filter policy or click Disabled to enter an inactive filter policy (You can reactivate the policy later.)
Enter in the IP address range of the computers that you want the policy to apply to. If it is only a single computer that you want the policy applied to, then enter the IP address of that computer in the Start Source IP and leave the End Source IP blank.

Port Ranges:

Enter in the port range of the TCP/UDP ports that you want the policy to apply to. If it is only a single port that you want the policy applied to, then enter the port number in the Start Port field and leave the End Port field blank. If you want to use all the ports, you can leave the port range empty.

Protocol:

Select the protocol type to block certain IP addresses.

Schedule:

Select Always, or choose From and enter the time period during which the IP filter policy will be in effect.
Advanced > MAC Filters
MAC (Media Access Control) Filters are used to allow or deny LAN (Local Area Network) computers from accessing the Internet and network by their MAC address. At the bottom of the screen, there is a list of MAC addresses from the DHCP client computers connected to the DI-704UP. To use them, select one from the drop down list and select an IP number you want to use. Then click the Copy to button and the DI704UP will fill in the appropriate information to the list.

Disabled MAC Filter:

Select this option if you do not want to use MAC filters on your Local Area Network (LAN).
Only allow computers with MAC address listed below to access the network:
Select this option to allow only computers that are in the list access to the network and Internet. All other computers will be denied access to the network and Internet.
Only deny computers with MAC address listed below to access the network:
Select this option to deny only computers that are in the list access to the network and Internet. All other computers will be allowed access to the network and Internet.
Enter the Name to create a profile for the associated computer(s) on the network.
MAC Address: DHCP Client:
Enter the MAC Address of the client that will be filtered.
Select from the DHCP Client list and click the Clone button to automatically clone that computers MAC address to the MAC address field.
Advanced > URL Blocking
Use URL Blocking filters to disallow computer(s) to access Internet with the following URL keywords entered into the list. The URL Blocking filters are useful features that are similar to parental control. Users can enter keywords that may have adult content, hack, or other materials to prevent computers connected to the Local Area Network (LAN) from accessing those web sites.
Advanced > Domain Filter
Use Domain filters to allow or deny computers access to specific Internet domains whether it is through www, ftp, snmp, etc. Domain filters apply to wired computers connected to one of the four Ethernet LAN ports to the DI-704UP.

Disabled Domain Filter:

Select this option if you do not want to use Domain filters.
Allow users to access the following domains and block all other domains:
Select this option to allow users to access the specified Internet domains listed below. Users will be denied access to all other Internet domains.
Deny users to access the following domains and permit all other domains:
Select this option to deny users to access the specified Internet domains listed below. Users will be allowed access to all other Internet domains.

Permitted Domains:

Enter in the domain suffix of the Internet domain you want to use. (Example: shopping.com, sports.net.)

Blocked Domains:

Enter in the domain suffix of the Internet domain you want to block. (Example: shopping.com, sports.net.)

Delete:

Select this option to remove the domain suffix from the Permitted Domains or Blocked Domains list.

Advanced > Firewall

Firewall Rules is an advanced feature used to allow or deny traffic from passing through the Broadband Router. It works in the same way as IP Filters with additional settings. You can create more detailed access rules for the DI-704UP. When virtual services are created and enabled, it will also display in Firewall Rules. Firewall Rules contains all network firewall rules pertaining to IP (Internet Protocol). In the Firewall Rules List at the bottom of the screen, the priorities of the rules are from top (highest priority) to bottom (lowest priority.) Note: The DI-704UP MAC Address filtering rules have precedence over the Firewall Rules.

You can upgrade the firmware by using this tool. First, check the D-Link support site for firmware updates at http://support.dlink.com. Make sure that the firmware you want to use is saved on the local hard drive of your computer. Click on Browse to search the local hard drive for the firmware that you downloaded from the D-Link website to be used for the update. Upgrading the firmware will not change any of your system settings but it is recommended that you save your system settings before doing a firmware upgrade.

Browse:

After you have downloaded the new firmware, click Browse in this window to locate the firmware update on your hard drive. Click Apply to complete the firmware upgrade.
Note! Do not power off the unit when it is being upgraded. When the upgrade is complete, the unit will be restarted automatically.

Tools > Misc

Ping Test:
This diagnostic utility can be used to check if a computer is on the Internet. It sends ping packets and listens for replies from the specific host.

Reboot:

Click Reboot to restart the unit.

Block WAN Ping:

Click Enable to block the WAN ping. Computers on the Internet will not get a reply back from the DI-704UP when it is being pinged. This may help to increase security.

SPI Mode:

Stateful Packet Inspection is a form of firewall protection that will inspect all of the packets transmitted through the DI-704UP. It carefully inspects all incoming packets and if the packets contain suspicious information, it will automatically drop those packets.

UPnP Setting:

Universal Plug and Play is a feature that is preset to allow certain popular applications such as MSN messenger to be functional using the router without making any configurations. By default, theUPnP Setting is set to enable. It is recommended to keep the UPnP Setting on enable.

VPN Pass Through:

For users who telecommute or use Virtual Private Network (VPN), you can select PPTP or IPSec to be used with this router.

Non-standard FTP port:

If an FTP server you want to access is not using the standard port 21, then enter in the port number that the FTP server is using instead.

Frequently Asked Questions (continued)
Why cant I access the web based configuration? (continued)
What type of cable should I be using? (continued)
Whats the difference between a crossover cable and a straight-through cable? The wiring in crossover and straight-through cables are different. The two types of cable have different purposes for different LAN configurations. EIA/TIA 568A/568B define the wiring standards and allow for two different wiring color codes as illustrated in the following diagram. *The wires with colored backgrounds may have white stripes and may be denoted that way in diagrams found elsewhere. How to tell straight-through cable from a crossover cable: The main way to tell the difference between the two cable types is to compare the wiring order on the ends of the cable. If the wiring is the same on both sides, it is straight-through cable. If one side has opposite wiring, it is a crossover cable. All you need to remember to properly configure the cables is the pinout order of the two cable ends and the following rules: A straight-through cable has identical ends A crossover cable has different ends It makes no functional difference which standard you follow for straight-through cable ends, as long as both ends are the same. You can start a crossover cable with either standard as long as the other end is the other standard. It makes no functional difference which end is which. The order in which you pin the cable is important. Using a pattern other than what is specified in the above diagram could cause connection problems. When to use a crossover cable and when to use a straight-through cable: Computer to Computer Crossover Computer to an normal port on a Hub/Switch Straight-through Computer to an uplink port on a Hub/Switch - Crossover Hub/Switch uplink port to another Hub/Switch uplink port Crossover Hub/Switch uplink port to another Hub/Switch normal port - Straight-through
Step 2 Disable any Internet security software running on the computer. Software firewalls like Zone Alarm, Black Ice, Sygate, Norton Personal Firewall, etc. might block access to the configuration pages. Check the help files included with your firewall software for more information on disabling or configuring it. Step 3 Configure your Internet settings. Go to Start>Settings>Control Panel. Double click the Internet Options Icon. From the Security tab, click the Default Level button to restore the settings to their defaults.
Click to the Connection tab and set the dialup option to Never Dial a Connection. Click the LAN Settings button
Nothing should be checked. Click OK
Go to the Advanced tab and click the Restore Defaults button to restore these settings to their defaults.
Click OK. Go to the desktop and close any open windows
Step 4 Check your IP Address. Your computer must have an IP Address in the same range of the device you are attempting to configure. Most D-Link devices use the 192.168.0.X range.

How can I assign a Static IP Address in Windows 98/Me?
Step 1 From the desktop, right-click on the Network Neigborhood icon (Win ME - My Network Places) and select Properties Highlight TCP/IP and click the Properties button. If you have more than 1 adapter, then there will be a TCP/IP Binding for each adapter. Highlight TCP/IP > (your network adapter) and then click Properties.
How can I assign a Static IP Address in Windows 98/Me? (continued)
Step 2 Click Specify an IP Address. Enter in an IP Address that is on the same subnet as the LAN IP Address on your router. Example: If the routers LAN IP Address is 192.168.0.1, make your IP Address 192.168.0.X where X is between 2-99. Make sure that the number you choose is not in use on the network. Step 3 Click on the Gateway tab. Enter the LAN IP Address of your router here (192.168.0.1). Click Add when finished. Step 4 Click on the DNS Configuration tab. Click Enable DNS. Type in a Host (can be any word). Under DNS server search order, enter the LAN IP Address of your router (192.168.0.1). Click Add. Step 5 Click OK twice. When prompted to reboot your computer, click Yes. After you reboot, the computer will now have a static, private IP Address. Step 5 Access the web management. Open your web browser and enter the IP Address of your D-Link device in the address bar. This should open the login page for the web management. Follow instructions to login and complete the configuration.
How can I setup my router to work with a Cable modem connection?

Dynamic Cable connection

(i.e. Cox, Adelphia, Rogers, Roadrunner, Charter, and Comcast). Note: Please configure the router with the computer that was last connected directly to the cable modem. Step 1 Log into the web based configuration by typing in the IP Address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (empty).
Step 2 Click the Home tab and click the WAN button. By default, Dynamic IP Address is the selected option. Click Clone Mac Address. Click on Apply and then Continue to save the changes.
How can I setup my router to work with a Cable modem connection? (continued)
Step 3 Power cycle the cable modem and router: First turn the cable modem off. Next, turn the router off Leave them off for 2 minutes**. After 2 minutes**, turn the cable modem on. Wait until you get a solid cable light on the cable modem, and then turn the router on. Wait 30 seconds. ** If you have a Motorola (Surf Board) modem, leave off for at least 5 minutes. Step 4 Follow step 1 again and log back into the web configuration. Click the Status tab and click the Device Info button. If you do not already have a public IP Address under the WAN heading, click on the DHCP Renew and Continue buttons. Step 1 Log into the web based configuration by typing in the IP Address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (empty). Step 2 Click the Home tab and click the WAN button. Select Static IP Address and enter your static settings obtained from the ISP in the fields provided. If you do not know your settings, you must contact your ISP. Step 3 Click on Apply and then click Continue to save the changes. Step 4 Click the Status tab and click the Device Info button. Your IP Address information will be displayed under the WAN heading.

How do I configure the DMZ Host?
The DMZ feature allows you to forward all incoming ports to one computer on the local network. The DMZ, or Demilitarized Zone, will allow the specified computer to be exposed to the Internet. DMZ is useful when a certain application or game does not work through the firewall. The computer that is configured for DMZ will be completely vulnerable on the Internet, so it is suggested that you try opening ports from the Virtual Server or Firewall settings before using DMZ. Step 1 Find the IP address of the computer you want to use as the DMZ host. To find out how to locate the IP Address of the computer in Windows XP/2000/ME/9x or Macintosh operating systems please refer to Step 4 of the first question in this section (Frequently Asked Questions).
How do I configure the DMZ Host? (continued)
Step 2 Log into the web based configuration of the router by typing in the IP Address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (empty).
Step 3 Click the Advanced tab and then click on the DMZ button. Select Enable and type in the IP Address from Step 1.
Step 4 Click Apply and then Continue to save the changes. Note: When DMZ is enabled, Virtual Server settings will still be effective. Remember, you cannot forward the same port to multiple IP Addresses, so the Virtual Server settings will take priority over DMZ settings.
How do I open a range of ports on my DI-704UP using Firewall rules?
Step 1 Log into the web based configuration by typing in the IP Address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (empty). If you are having difficulty accessing web management, please see the first question in this section. Step 2 From the web management Home page, click the Advanced tab then click the Firewall button. Step 3 Click on Enabled and type in a name for the new rule. Step 4 Choose WAN as the Source and enter a range of IP Addresses out on the internet that you would like this rule applied to. If you would like this rule to allow all internet users to be able to access these ports, then put an Asterisk (*) in the first box and leave the second box empty. Step 5 Select LAN as the Destination and enter the IP Address of the computer on your local network that you want to allow the incoming service to. This will not work with a range of IP Addresses. Step 6 Enter the port or range of ports that are required to be open for the incoming service. Step 7 Click Apply and then click Continue. Note: Make sure DMZ host is disabled. Because our routers use NAT (Network Address Translation), you can only open a specific port to one computer at a time. For example: If you have 2 web servers on your network, you cannot open port 80 to both computers. You will need to configure 1 of the web servers to use port 81. Now you can open port 80 to the first computer and then open port 81 to the other computer.

Step 2 Click on Advanced and then click Firewall. Step 3 Create a new firewall rule: Click Enabled. Enter a name (edonkey). Click Allow. Next to Source, select WAN under interface. In the first box, enter an *. Leave the second box empty. Next to Destination, select LAN under interface. Enter the IP Address of the computer you are running eDonkey from. Leave the second box empty. Under Protocol, select *. In the port range boxes, enter 4661 in the first box and then 4665 in the second box. Click Always or set a schedule.
WAN LAN 192.168.0.4665 edonkey
Step 4 Click Apply and then Continue.
How do I set up my router for SOCOM on my Playstation 2?
To play SOCOM and hear audio, you must download the latest firmware for the router (if needed), enable Game Mode, and open port 6869 to the IP Address of your Playstation. Step 1 Upgrade the firmware. Step 2 Log into the web based configuration by typing in the IP Address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (empty). Step 3 Click on the Advanced tab and then click on Virtual Server on the left side. Step 4 You will now create a new Virtual Server entry. Click Enabled and enter a name (socom). Enter the IP Address of your Playstation for Private IP. Step 5 For Protocol Type select Both. Enter 6869 for both the Private Port and Public Port. Click Always. Click Apply to save changes and then Continue

socom 100

Both 6869 6869
Step 6 Click on the Tools tab and then Misc on the left side. Step 7 Make sure Gaming Mode is Enabled. If not, click Enabled. Click Apply and then Continue.
How can I use Gamespy behind my D-Link router?
Step 1 Log into the web based configuration by typing in the IP Address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (empty). Step 2 Click on the Advanced tab and then click Virtual Server on the left side. Step 3 You will create 2 entries. Step 4 Click Enabled and enter settings:

gamespy1

NAME - Gamespy1 PRIVATE IP - The IP Address of your computer that you are running Gamespy from. PROTOCOL TYPE - Both PRIVATE PORT - 3783 PUBLIC PORT - 3783 SCHEDULE - Always. Click Apply and then Continue Step 5 Click Enabled and enter settings:

100 Both 3783 3783

gamespy2
NAME - Gamespy2 PRIVATE IP - The IP Address of your computer that you are running Gamespy from. PROTOCOL TYPE - Both PRIVATE PORT - 6500 PUBLIC PORT - 6500 SCHEDULE - Always. Click Apply and then Continue.

How do I set up my router to use iChat? -for Macintosh usersYou must open ports on your router to allow incoming traffic while using iChat. iChat uses the following ports: 5060 (UDP) 5190 (TCP) File Sharing 16384-16403 (UDP) to video conference with other clients Step 1 Log into the web based configuration by typing in the IP Address of the router (default:192.168.0.1) in your web browser. The username is admin (all lowercase) and the password is blank (empty). Step 2 Click on Advanced and then click Firewall.
How do I set up my router to use iChat? -for Macintosh users(continued)
Step 3 Create a new firewall rule: Click Enabled. Enter a name (ichat1). Click Allow. Next to Source, select WAN under interface. In the first box, enter an *. Leave the second box empty. Next to Destination, select LAN under interface. Enter the IP Address of the computer you are running iChat from. Leave the second box empty. Under Protocol, select UDP. In the port range boxes, enter 5060 in the first box and leave the second box empty. Click Always or set a schedule.

ichat1

WAN LAN 192.168.0.100 UDP 5060

ichat2 WAN

Step 5 Repeat steps 3 and 4 enter ichat2 and open ports 1638416403 (UDP).

192.168.0.100

For File Sharing: Step 1 Click on Advanced and then Virtual Server. Step 2 Check Enabled to activate entry. Step 3 Enter a name for your virtual server entry (ichat3). Step 4 Next to Private IP, enter the IP Address of the computer on your local network that you want to allow the incoming service to. Step 5 Select TCP for Protocol Type. Step 6 Enter 5190 next to Private Port and Public Port.

ichat3 100

Step 7 Click Always or configure a schedule. Step 8 Click Apply and then Continue. If using Mac OS X Firewall, you may need to temporarily turn off the firewall in the Sharing preference pane on both computers. To use the Mac OS X Firewall, you must open the same ports as in the router: Step 1 Choose Apple menu > System Preferences. Step 2 Choose View > Sharing. Step 3 Click the Firewall tab. Step 4 Click New. Step 5 Choose Other from the Port Name pop-up menu. Step 6 In the Port Number, Range or Series field, type in: 5060, 16384-16403. Step 7 In the Description field type in: iChat AV Step 8 Click OK.
How do I send or receive a file via iChat when the Mac OSX firewall is active? -for Macintosh users- Mac OS X 10.2 and later
The following information is from the online Macintosh AppleCare knowledge base: iChat cannot send or receive a file when the Mac OS X firewall is active in its default state. If you have opened the AIM port, you may be able to receive a file but not send them. In its default state, the Mac OS X firewall blocks file transfers using iChat or America Online AIM software. If either the sender or receiver has turned on the Mac OS X firewall, the transfer may be blocked. The simplest workaround is to temporarily turn off the firewall in the Sharing preference pane on both computers. This is required for the sender. However, the receiver may keep the firewall on if the AIM port is open. To open the AIM port: Step 1 Choose Apple menu > System Preferences. Step 2 Choose View > Sharing. Step 3 Click the Firewall tab. Step 4 Click New. Step 5 Choose AOL IM from the Port Name pop-up menu. The number 5190 should already be filled in for you. Step 6 Click OK. If you do not want to turn off the firewall at the sending computer, a different file sharing service may be used instead of iChat. The types of file sharing available in Mac OS X are outlined in technical document 106461, "Mac OS X: File Sharing" in the AppleCare Knowledge base online. Note: If you use a file sharing service when the firewall is turned on, be sure to click the Firewall tab and select the service you have chosen in the "Allow" list. If you do not do this, the firewall will also block the file sharing service.

Limitation of Liability: TO THE MAXIMUM EXTENT PERMITTED BY LAW, D-LINK IS NOT LIABLE UNDER ANY CONTRACT, NEGLIGENCE, STRICT LIABILITY OR OTHER LEGAL OR EQUITABLE THEORY FOR ANY LOSS OF USE OF THE PRODUCT, INCONVENIENCE OR DAMAGES OF ANY CHARACTER, WHETHER DIRECT, SPECIAL, INCIDENTAL OR CONSEQUENTIAL (INCLUDING, BUT NOT LIMITED TO, DAMAGES FOR LOSS OF GOODWILL, LOSS OF REVENUE OR PROFIT, WORK STOPPAGE, COMPUTER FAILURE OR MALFUNCTION, FAILURE OF OTHER EQUIPMENT OR COMPUTER PROGRAMS TO WHICH DLINKS PRODUCT IS CONNECTED WITH, LOSS OF INFORMATION OR DATA CONTAINED IN, STORED ON, OR INTEGRATED WITH ANY PRODUCT RETURNED TO D-LINK FOR WARRANTY SERVICE) RESULTING FROM THE USE OF THE PRODUCT, RELATING TO WARRANTY SERVICE, OR ARISING OUT OF ANY BREACH OF THIS LIMITED WARRANTY, EVEN IF D-LINK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE SOLE REMEDY FOR A BREACH OF THE FOREGOING LIMITED WARRANTY IS REPAIR, REPLACEMENT OR REFUND OF THE DEFECTIVE OR NON-CONFORMING PRODUCT. THE MAXIMUM LIABILITY OF D-LINK UNDER THIS WARRANTY IS LIMITED TO THE PURCHASE PRICE OF THE PRODUCT COVERED BY THE WARRANTY. THE FOREGOING EXPRESS WRITTEN WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ANY OTHER WARRANTIES OR REMEDIES, EXPRESS, IMPLIED OR STATUTORY Governing Law: This Limited Warranty shall be governed by the laws of the State of California. Some states do not allow exclusion or limitation of incidental or consequential damages, or limitations on how long an implied warranty lasts, so the foregoing limitations and exclusions may not apply. This limited warranty provides specific legal rights and the product owner may also have other rights which vary from state to state. Trademarks: D-Link is a registered trademark of D-Link Systems, Inc. Other trademarks or registered trademarks are the property of their respective manufacturers or owners. Copyright Statement: No part of this publication or documentation accompanying this Product may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems, Inc., as stipulated by the United States Copyright Act of 1976. Contents are subject to change without prior notice. Copyright 2002 by D-Link Corporation/D-Link Systems, Inc. All rights reserved. CE Mark Warning: This is a Class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. FCC Statement: This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communication. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help.