Package Contents Contents of Package: • D-Link DFL-600 Firewall/VPN Router • Manual • Quick Installation Guide • Power Adapter, 5V DC, 2.5A* • CAT-5 UTP Cable If any of the above items are missing, please contact your reseller. *Using a power supply with a different voltage rating will damage the product and void the warranty.
“connected” environment. Connect the WAN port on the DFL-600 to the Cable/DSL modem using an Ethernet cable. Your entire LAN can now access the Internet using just one Internet account.
With Firewall Protection, Hacker-attack logging, and Virtual Private Networking, the DFL-600 provides a level of security suitable for many businesses. This manual provides a quick introduction to network technology. Please take a moment to read through this manual and get acquainted with your DFL-600.
Page 6
The DFL-600 can connect any Cable or DSL modem to the network. DHCP The DFL-600 is a DHCP-capable router. It automatically assigns unique IP Addresses to each network users that is connected to the DFL-600, for the price of one Internet account.
Page 7
Upgradeable New Features Allows new features to be added in the future High Performance 64 bit RISC CPU Engine With the most advanced 64 bit RISC CPU Engine, DFL-600 guarantees full compatibility with future DSL/Cable technologies. IPSec Security (DES, 3DES, MD5, SHA-1)
It is recommended that you allow your PC’s IP settings be automatically assigned by a DHCP server. By default, your new DFL-600 VPN Firewall functions as a DHCP server, and it will give your PC the necessary IP settings, every time you boot your...
IP address range between 192.168.0.2 to 192.168.0.254. So computers and other devices connected to these three ports either allow the DFL-600’s DHCP server to assign them IP addresses from this range, or you can manually assign devices connected to these ports an IP address from this range.
Page 10
LAN (such as a printer or scanner). The network information (including the IP address) required by the WAN side of the DFL-600 is either obtained automatically from your ISP (or other network device on the WAN side) or is entered manually. The DFL-600 allows three methods for this information to be obtained, as follows: Dynamic −...
Page 11
(on the same subnet) as the three LAN ports, or you will not be able to access the DFL-600 from your LAN. The many other features of the DFL-600 are described in subsequent sections.
Note: Please make sure that the computer you will use to connect to and configure the DFL-600 is assigned an IP address that is in the same range as the DFL-600. The IP address of the DFL-600 is 192.168.0.1. All computers on your network must be within that range, for instance, the computer IP address could be any IP address from the range 192.168.0.2 to 192.168.0.254,...
Page 13
The Setup Wizard will guide you the most basic setup tasks, such as setting an administrative password, selecting the type of WAN connection you have, entering your computer’s host name (if required by your ISP), saving the configuration and restarting the router. All other setup tasks can be accomplished using the configuration utility from your web browser.
Setup Wizard The Setup Wizard will guide you through the most basic setup tasks for the DFL-600. All other configuration tasks can be accomplished through the web-based manager. The Home menu contains a Run Setup Wizard link. Click on this button to run the Setup Wizard.
Page 15
Enter a password in the Password field, and again in the Verify Password field. This will become the logon password for the DFL-600. This password is case-sensitive, so remember to use capital letters when logging on to the DFL-600’s web-based manager − if you enter a password with capital letters here.
Page 16
(and is therefore, a dynamic IP address). DHCP is referred to as Dynamic IP address on the DFL-600. The Setup Wizard will open a page with the appropriate fields for the entry of your ISP contact information, depending upon which of the three options you choose.
Page 17
Some ISPs require you to use an assigned host name for your Internet connection. If your ISP requires this, you can enter the assigned host name in the Host Name field. If you selected Static IP Address on the Select Internet Connection Type (WAN) wizard screen above, the following screen will open: This screen will allow you to enter the static IP address information, if your ISP has assigned a static IP address to your Internet account.
Page 18
This screen will allow you to enter the PPPoE information, if your ISP uses the PPPoE protocol for your Internet account. Your ISP must provide this information. Click Next to continue.
Page 19
You have completed the basic setup Wizard. The configuration now needs to be entered into the DFL-600’s non-volatile RAM. Clicking Restart will save the configuration to non-volatile RAM and restart the router.
WAN network settings. The settings listed under WAN Settings are the network settings currently in use by the DFL-600. The fields where you will enter the WAN Settings will change depending upon the choice you make in the IP Settings Mode drop-...
Page 22
The page shown above is in Dynamic mode. Dynamic allows the DFL-600 to get its IP address information from your ISP using the Dynamic Host Configuration Protocol (DHCP). Use this setting if your ISP instructs you to use DHCP or to automatically obtain an IP address.
Page 23
Primary DNS Server. A secondary DNS server IP address is optional. The ISP Settings page allows you to modify the way that the DFL-600 obtains its network settings from your Internet Service Provider (ISP). The entry fields on the page will change depending upon which of the following options you choose: Dynamic IP Address, Static IP Address, and PPPoE.
Page 24
Static IP Address − If your ISP has assigned you an IP address that will never change, choose this option. When this option is chosen, the following fields appear to allow you to enter the network address information:...
Page 25
PPPoE − If your ISP uses Point-to-Point Protocol over Ethernet (PPPoE), choose this option. When this option is chosen, the following fields appear to allow you to enter the network address information: Connect on Demand − allows the PPPoE WAN connection to be active only when a computer on your LAN makes a connection request.
DFL-600 here. If you choose this option, you will have to reboot the PCs on the LAN side of the DFL-600 in order for them to get their new IP address settings (or you can enter the “C:\>ipconfig /renew”...
Page 27
DFL-600, that you configure the DFL-600’s DHCP server with the appropriate IP address range and subnet mask first, and then assign an IP address from the same range to the DFL-600. That way, a computer on the LAN side of your network can always get the proper network addressing...
DHCP (Dynamic Host Configuration Protocol) is a method of automatically assigning IP addresses, subnet masks, default gateway and DNS server IP address to computers on the LAN side of the DFL-600. The DFL-600 can be a DHCP server for your LAN, assigning IP addresses, etc. to computers on your network from a range of addresses you specify below.
Page 29
IP address is 192.168.0.1. This is the last IP address in a range that the Ending IP Address DFL-600 will assign to a computer on your network. In this case, the range of IP addresses between 192.168.0.2 to 192.168.0.100 gives 99 different IP addresses that the DFL-600 can assign to the computers on your network.
Page 30
Domain Name The DFL-600 can provide a domain name to computers on your network. This domain name suffix can be provided automatically by your ISP, or you can enter it statically here. This suffix will then be automatically added to URL requests for access to your ISP’s servers.
NAT is automatically applied between the IP addresses assigned to the DFL- 600’s WAN port (the IP address or addresses assigned to you by your ISP) and the IP addresses assigned to the DFL-600’s LAN ports (the 192.168.0.x subnet). NAT is not used between the WAN port and the DMZ port.
NAT and the firewall features of your DFL-600 may conflict with certain interactive applications such as video conferencing or playing Internet video games. For these applications, a bypass can be set up using the DMZ port and a corresponding DMZ IP address. The DMZ IP address is “visible” to the Internet (or WAN) and does not benefit from the full protection of the NAT function.
The DMZ Settings screen allows you to Enable and Disable the DMZ port on the DFL-600 and to specify the IP address and Subnet Mask that the DMZ port will use. The default DMZ IP address is 192.168.1.1 with a subnet mask of 255.255.255.0.
Page 34
Global IP address This is the IP address assigned to the WAN side of the DFL-600 by your ISP. If a range of IP addresses have been assigned by your ISP, you will have to pick one IP address that will be used to connect to your PC that is connected to the DFL-600’s DMZ port (on the LAN side).
Time Settings The DFL-600 can be set to obtain and distribute the correct time to computers on your LAN using the Simple Network Time Protocol (SNTP). Click on the Time button to open the following page: System Date Time Displays the current system date and time.
Page 36
Set Type This drop-down menu allows you to select either the IP address of an SNTP server, or the Domain Name (URL) of an SNTP server that the DFL- 600 will contact to obtain the correct date and time. IP address Enter the IP address of an SNTP server here.
Page 37
Clicking the Enable click box, opposite the User Control table entry, will open the rest of the User Management page, including the Bandwidth control and Management Type table entries.
Page 38
This allows you to enable or disable the bandwidth control feature of your DFL-600. Use the drop-down menu to set the maximum data rate that the DFL-600 will allow between PCs on your LAN and the WAN (the Internet). Management Type...
Page 39
ISP’s facility. Choosing POP3 will allow the DFL-600 to connect PCs on your LAN to the POP3 e-mail server on the WAN to view and retrieve e-mail.
Page 40
RADIUS server on the WAN and PCs on your LAN. Choosing RADIUS will allow the DFL-600 to connect PCs on your LAN to a RADIUS server on the WAN. If RADIUS user authentication...
Page 41
IP Address and IP (subnet) Mask entered on the 802.1x Device Configuration page will be allowed to access the WAN (Internet) by the DFL-600 without any RADIUS user authentication, effectively bypassing the RADIUS user authentication step.
Page 42
RADIUS server on the WAN and PCs on your LAN. Choosing RADIUS will allow the DFL-600 to connect PCs on your LAN to a RADIUS server on the WAN. 802.1X 802.1x is a standard for passing the Extensible...
Page 43
Clicking the 802.1x Enable click-box, and then Edit link will open the following page: 802.1x is a standard for passing the Extensible Authentication Protocol (EAP) packets over a LAN. You should enable this if there are any 802.1x devices between the DFL-600 and the RADIUS server on the WAN.
Page 44
Clicking on the Edit link (which appears when you enable 802.1x) will open the 802.1x Device Configuration page, as shown below. If you have PCs on your LAN that do not require RADIUS user authentication to access the Internet (or other networks through your ISP), you can use Enable 802.1x, and then click the Edit link.
Page 45
802.1x is a standard for passing the Extensible Authentication Protocol (EAP) over a LAN. You should enable this only if there are 802.1x devices between the DFL-600 and the RADIUS server on the WAN. Clicking on the Edit link (which appears when you enable 802.1x) will open the 802.1x Device Configuration page, as...
Page 46
Clicking the LDAP click box will open the following page: LDAP Server IP Enter the IP address of your LDAP server here. Your ISP should provide you with this address. Server Port This is the TCP port number that the LDAP server will use to communicate with PCs on your LAN.
Virtual Servers Virtual Servers allow remote users to access services on your LAN such as FTP for file transfers or SMTP and POP3 for e-mail. The DFL-600 will accept remote requests for these services at a Global IP Address you specify,...
Page 48
Private IP This is the IP address of the server on your LAN that will provide the service to remote users. You can select the transport protocol (TCP or Transport Type UDP) that the application on the virtual server will use for its connections. The choice of this protocol is dependent on the application that is providing the service.
Page 49
These applications often conflict with NAT, and therefore require special handling. The Special Applications page allows you to configure your DFL-600 to allow computers on your LAN to access servers on the WAN that require multiple TCP or UDP connections.
Page 50
TCP/UDP packet. When a TCP or UDP packet is received by the DFL-600, the IP address in this packet will be translated between the WAN and LAN side of the DFL-600, if this option is enabled. Replacement Format...
Static Routing Your DFL-600 can automatically discover routes to destinations on both your LAN and the WAN (Internet). In addition, you can add entries to the DFL- 600’s routing table that will be saved to flash RAM. These routes will not age out, and are therefore static.
DFL-600 and servers on the remote network. Dynamic Routing Your DFL-600 can automatically discover routes to destinations on both your LAN and the WAN (Internet). You can choose either RIP1, RIP2 or None. RIP2 (Routing Information Protocol version 2) adds support for variable- length subnet masks, and is generally the best choice.
Page 53
600 will update its routing table. The default is 30 seconds. Timeout Timer This allows you to specify how long a route discovered by the DFL-600 will remain in its memory without being used. The default is 180 seconds. Garbage Collection...
Policy (Firewall Settings) Policy Rules The DFL-600 allows you to establish a period of time that a policy rule will be active or enforced. In addition, you can enable or disable a policy rule without changing that rule’s configuration. This is useful when you need to troubleshoot access problems for a PC on your LAN.
These times and dates are relative System Date Time displayed in the System Date Time field. The system date and time can be set in the DFL-600 using the page displayed by clicking on the Time button on the Home page, as described above.
Page 56
The Port Filter allows you to specify transport protocols and TCP/UDP port ranges that the DFL-600 will allow computers on the WAN side to use to make connections to PCs on the LAN side. You can choose to block Java programs from being downloaded from the Internet and executed by PCs on your LAN by clicking the Block Java Enabled click-box and then the Apply button.
Page 57
FTP, SSH, TELNET, SMTP, POP3, or LDAP tocols. • en remo te access to the DFL-600 from the WAN (Internet) The following fields can be configured for the current In policy. This drop-down menu allows you to specify the Transport Type transport protocol that will be filtered by the DFL-600.
Page 58
In policy page. Then clicking on the Key Words link will open the following page. Enter a key word that you want the DFL-600 to scan for and prevent PCs on websites that contain that word in their URLs from accessing PCs on your LAN.
Page 59
The Port Filter allows you to specify transport protocols and TCP/UDP port ranges that the DFL-600 will prevent computers on the LAN side from using to make connections to PCs on the WAN side of the router. Clicking on the...
Page 60
The default firewall port filter rules on the DFL-600 are: • Allow all outbound packets to pass through the router to the WAN (Int ernet). • Allow inbound packets only for a virtual server on your LAN ning the FTP, SSH, TELNET, SMTP, POP3, or LDAP tocols.
Page 61
PCs on the WAN side of the router. Clicking on the “Untrusted Domain” link will open the following page. nter a Domain Name that you want the DFL-600 to scan for and prevent PCs on websites that contain that word in their URLs from accessing PCs o your LAN.
Page 62
Enter a Domain Name that you want the DFL-600 to scan for and prevent PCs on websites that contain that word in their URLs from accessing PCs on your LAN. Blocked MAC Addresses The DFL-600 will allow you to make a list of MAC addresses for which outgoing packets will be filtered.
Page 63
Enter a MAC Address that you want the DFL-600 to scan for and filter packets that have that MAC address as their destination address.
Click Enable to allow IPSec packets to pass through the router to the destination computer on your LAN. When IPSec Pass-through is enabled, the DFL-600 will allow IPSec packets to reach their destination computer on your LAN. Click Enable to make the IPSec settings active.
Page 65
IPSEC Tunnel Mode The IPSEC Tunnel Mode page allows you to setup a secure tunnel between your DFL-600 and a remote gateway.
Page 66
Aggressive mode, there is no encryption in the Phase 1 negotiation. DH Group The DH algorithm allows the DFL-600 to generate secret keys for encryption for the Phase 1 negotiation. Group 1 generates a 768- bit key and Group 2 generates a 1024-bit key.
Page 67
IKE Life Duration This is the duration (in seconds) the phase 1 key after the tunnel is established. When this duration has past, the two peers will trigger a restart of the phase 1 negotiation to set up a new phase 1 key.
Page 68
Phase 2 Proposal The following entries will establish the setup for the negotiation between the two endpoints for the encryption of messages once the VPN tunnel has been initiated. This drop-down menu allows you to specify the PFS Mode mode that will be used for IPSec Perfect Forward Security (PFS).
Page 69
ESP Transform This drop-down menu allows you to select the encryption algorithm that will be used when ESP is selected in the IPSec Operation drop- down menu above. You can choose between Null − no encryption, DES − using DES encryption, and 3DES − using triple DES encryption.
Page 70
addresses of computers on the remote LAN (the remote endpoint of the VPN tunnel) that will be allowed to access the VPN. Type This drop-down menu allows you to select the type of network definition for the range of IP addresses on the remote LAN that will be allowed to access the VPN.
Page 71
IPSec Status Click on the IPSec Status link to display the current IPSec status table, as shown below.
Page 72
VPN-PPTP Settings The Point-to-Point Tunneling Protocol (PPTP) is another method of establishing a secure tunnel between the DFL-600 and a remote gateway. The PPTP Settings page allows you to enable or disable PPTP on the DFL- 600. PPTP Pass Through...
The PPTP Account settings page allows you to enter a username and password for a PPTP account. A combined maximum of 64 PPTP and L2TP user accounts can be configured on the DFL-600. Username Enter the appropriate username for your PPTP account here.
Page 74
The Layer 2 Tunneling Protocol (L2TP) is another method of establishing a secure tunnel between your DFL-600 and a remote gateway. The L2TP Status page allows you to enable or disable L2TP on the DFL-600. L2TP Pass Through Click Enable to allow L2TP packets to pass through the router to the destination computer on your LAN.
DFL-600, as shown below. DDNS The DFL-600 can be configured to use Dynamic DNS (DDNS). If you choose to use DDNS you must fist setup a user account with either Dynamic DNS Network Services (www.dyndns.org) or PeanutHull(China) − a service...
Page 76
Clicking on the DDNS button from the Advanced page will open the following page. DDNS This allows you to enable or disable DDNS on the DFL-600 Provider Select either Dyndns.org or PeanutHull(China) Host Name Enter the appropriate host name here.
Page 77
Tools − Administration The Admin Settings page allows you to add or edit the Username and Password list to control access to the configuration of the DFL-600. A default user account is configured with the username admin, and a password of admin. You can change the password at any time.
WAN (Internet) that will be allowed to access the configuration utility. If you do not enter any IP addresses on this page, then no IP address on the WAN side of the DFL-600 (no computer from the Internet) will be allowed to access the DFL-600’s configuration utility.
Page 79
The Firmware Upgrade page allows you to upgrade the DFL-600’s firmware from a new firmware file stored on your local hard drive. In addition, you can choose to load the DFL-600’s current VPN or Firewall settings to a hard drive on a local computer. Clicking on the OK button will initiate a download of either the VPN settings (as a text file named DFL600_vpn.txt) or the Firewall settings (as a text file named...
Page 80
Update File Enter the full DOS path and filename to the new firmware file on your local hard drive. For example, if the file is in the root directory of your C drive, enter C:\newfile.had and click the OK button to begin the file transfer. Browse If you are unsure about the location of the new firmware file on your local hard drive, click the...
Page 82
Status − Device Info The Device Information page displays the current network settings and allows you to view the IP address assigned to the DFL-600 by your ISP using DHCP (Dynamic Host Configuration Protocol − the Dynamic IP Address setting on the WAN Settings page under the Home page).
Page 83
WAN Status MAC Address This is the MAC address of the DFL-600 on the WAN. Connection Type This displays the current connection type between the DFL-600 and your ISP. IP Address This is the IP address of the DFL-600 on the WAN.
DFL-600 Status − Log Info Your DFL-600 can keep logs of the various functions it supports. The Log Status page allows you to enable or disable each of these logs using a series of drop-down menus.
Certain sessions between computers on your LAN and the WAN have the potential to cause a disruption in the function of your computers and are blocked by the DFL-600’s firewall. Some of these session types are defined by you under on the Port Filter Policy page, under Policy Settings from the Advanced Settings tab.
A brief statement of why the connection attempt was blocked is displayed here Session Log Session events (when a computer on your LAN accesses an application of service on the WAN), are logged by the DFL-600 and are displayed on the Session Log, as shown below:...
DFL-600’s Intruder Blacklist. Once the intruder’s information is entered, the DFL-600’s firewall will block packets from this location from crossing the DFL-600 (from the WAN to the LAN, from two computers on the LAN, or from the LAN to the WAN).
Page 88
IP address will remain in the Intruder Blacklist for an additional amount of time. While the intruder’s IP address is on the DFL-600’s Intruder Blacklist, that IP address is blocked from sending packets through the DFL- 600. Source IP...
Page 89
IPSec Log The DFL-600 maintains a table containing statistics concerning the IPSec protocol connection between the WAN and the LAN. These statistics can be viewed on the IPSEC Statistics table, as shown below: Index This displays the sequence of the IPSec log.
Page 90
Sys Log The DFL-600 can save or transmit Syslog messages to aid in network administration. You must have a Syslog application on one of the computers on your LAN to take advantage of this feature. Clicking on the Sys Log link will open the Sys Log configuration page, as shown below.
Page 91
LAN that is running the Sys log application. Sys Log Level This drop-down menu allows you to select the level of Sys log information that the DFL-600 will send to the Sys log server. Mail Alert This allows you to send syslog messages to an e- mail address you specify below.
Page 92
Status − Traffic Log Your DFL-600 keeps a log of the total number of bytes received and transmitted on to and from the LAN and WAN. This information can be displayed by clicking on the Traffic button to display the Traffic Statistics...
Connecting PCs to the DFL-600 Router If you do not wish to set the static IP address on your PC, you will need to configure your PC to request an IP address from the gateway. Click the Start button, select Settings then select Control Panel.
Page 94
Click the Properties button, then choose the IP Address tab. Select Obtain an IP address automatically. After clicking OK, windows might ask you to restart the PC. Click Yes. CONFIRM YOUR PC’S IP CONFIGURATION There are two tools which are great for finding out a computer’s IP configuration: MAC address and default gateway.
Page 95
• IPCONFIG (for Windows 2000/NT/XP) In the DOS command prompt type IPCONFIG and press Enter. Your PC IP information will be displayed as shown below.
Networking Basics Using the Network Setup Wizard in Windows XP In this section you will learn how to establish a network at home or work, using Microsoft Windows XP. Note: Please refer to websites such as http://www.homenethelp.com http://www.microsoft.com/windows2000 for information about networking computers using Windows 2000, ME or 98.
Page 97
Please follow all the instructions in this window: Click Next In the following window, select the best description of your computer. If your computer connects to the Internet through a gateway/router, select the second option as shown.
Page 98
Click Next Enter a Computer description and a Computer name (optional.) Click Next...
Page 99
Enter a Workgroup name. All computers on your network should have the same Workgroup name. Click Next Please wait while the wizard applies the changes.
Page 100
When the changes are complete, Click Next. Please wait while the wizard configures the computer. This may take a few minutes.
Page 101
In the window below, select the best option. In this example, “Create a Network Setup Disk” has been selected. You will run this disk on each of the computers on your network. Click Next. Insert a disk into the Floppy Disk Drive, in this case drive “A:”...
Page 102
Format the disk if you wish, and Click Next. Please wait while the wizard copies the files. Please read the information under Here’s how in the screen below. After you complete the Network Setup Wizard you will use the Network Setup Disk to run the Network Setup Wizard once on each of the computers on your network.
Page 103
The new settings will take effect when you restart the computer. Click Yes to restart the computer. You have completed configuring this computer. Next, you will need to run the Network Setup Disk on all the other computers on your network. After running the Network Setup Disk on all your computers, your new wireless network will be ready to use.
Page 104
Naming your Computer Naming your computer is optional. If you would like to name your computer please follow these directions: In Windows XP: Click START (in the lower left corner of the screen) Right-click on My Computer Select Properties • Select the Computer Name Tab in the System Properties window.
Page 105
• In this window, enter the Computer name. • Select Workgroup and enter the name of the Workgroup. • All computers on your network must have the same Workgroup name. • Click OK...
Page 106
Assigning a Static IP Address Note: Residential Gateways/Broadband Routers will automatically assign IP Addresses to the computers on the network, using DHCP (Dynamic Host Configuration Protocol) technology. If you are using a DHCP-capable Gateway/Router you will not need to assign Static IP Addresses. If you are not using a DHCP capable Gateway/Router, or you need to assign a Static IP Address, please follow these instructions: Go to START...
Page 107
Right-click on Local Area Connections. Double-click Properties Highlight Internet Protocol (TCP/IP) Click Properties...
Page 108
Select Use the following IP address in the Internet Protocol (TCP/IP) Properties window. Input your IP address and subnet mask. (The IP Addresses on your network must be within the same range. For example, if one computer has an IP Address of 192.168.0.2, the other computers should have IP Addresses that are sequential, like 192.168.0.3 and 192.168.0.4.
Page 109
You have completed the assignment of a Static IP Address. (You do not need to assign a Static IP Address if you have a DHCP-capable Gateway/Router.)
Contacting Technical Support You can find the most recent software and user documentation on the D-Link website. D-Link provides free technical support for customers within the United States for the duration of the warranty period on this product. U.S. customers can contact D-Link technical support through our web site, or by phone.
Such repair or replacement will be rendered by D-Link at an Authorized D-Link Service Office. The replacement Hardware need not be new or of an identical make, model or part; D-Link may in its discretion replace the defective Hardware (or any part thereof) with any reconditioned product that D-Link reasonably determines is substantially equivalent (or superior) in all material respects to the defective Hardware.
Page 112
D-Link Systems Inc., 53 Discovery Drive, Irvine CA 92618. D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package. The product owner agrees to pay D-Link’s reasonable handling and return shipping charges for any product that is not packaged and...
Page 113
Increase the separation between the equipment and receiver. • Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. • Consult the dealer or an experienced radio/TV technician for help. Register Your D-Link Product Online at http://www.dlink.com/sales/reg...