252
edits
Router - DLINK 320B: Difference between revisions
→Notes: added security warning about LAN-side access
m (typo) |
(→Notes: added security warning about LAN-side access) |
||
|
*If you reset them to factory settings using the pin-in-hole technique, then with their factory defaults they <b>will not work at all</b> as straight PPPoE ethernet modems. Their configuration <b>must</b> be altered before use. Ask [https://www.aaisp.net.uk/support.html AA support] for help with this or see [[#post-factory-reset|post-factory reset configuration]] instructions below.
*No per-user or per-line login or password configuration is required. ISP account or line login and password info is configured in your <i>router</i>, the DLink modem doesn’t need these values.
*They do support 1500 byte MTU (unlike the [[Router - ZyXEL_P660R-D1]]). (Your router will also have to support 1500+8=1508 byte MTU too though for this to be effective.)
*Their web interface is quite insecure and in ‘router’ mode they have various critical security bugs, which is why we do strongly suggest that customers never use them configured in 'router' mode. They are sold by AAISP as bridge-only. Older modems, the now obsolete pre-Z (-D1)
*It is vital that you not expose the LAN-side ethernet interface to users on the LAN unless all possible users and devices on the LAN are trusted because of various critical security bugs in this respect. Because of such bugs, setting passwords on the modem’s admin web UI etc is not enough. If your router happens to prevent LAN-internal users from accessing the modem then so much the better, otherwise your main router’s facilities / internal firewalling and access controls should be explored.
*Chipset: The currently shipping DSL-320B-Z1 units (at the time of writing, December 2017), and those shipped from approx 2015 onwards, use an old but capable MediaTek/TrendChip chipset. The older -D1 routers were Broadcom-based.
*Incorrect manufacturer’s defaults: The default settings shown in the router’s web admin user interface show defaults that are quite unsuitable. It is important to enable the ‘bitswap’ option for best reliability and performance in most cases. (See [http://forum.kitz.co.uk/index.php?topic=13296.0 discussion of bitswap].) This default seems so odd that perhaps this is just a bug in the DLink software and the bitswap feature really defaults to ‘enabled’. (Needs a volunteer to do reliability testing to compare the two cases.)
| |||