D-Link Router AC1750 User Manual

							77
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Enter the ru\fe:
  Enab\be - Check to enab\fe the ru\fe.
  Name - Enter a name for your ru\fe.
  Dest.IP.Start - Enter the startin\b IP address.
  Dest.IP.End - Enter the endin\b IP add\uress.
  Protoco\b - Se\fect the protoco\f.
  Dest.Port.Start - Enter the startin\b port number.
  Dest.Port.End - Enter the endin\b port number.
To enab\fe web \fo\b\bin\b, c\fick Enab\be.
C\fick Save to save the access contro\f ru\fe.
Your new\fy created po\ficy wi\f\f now show up under  Po\bicy.Tab\be .  
						

							78
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Config\fre Website  Filter:
Website U\bL/ Domain:
Website Filters
Se\fect  either  DENY.computers. access.to.\fNLY. these. sites 
or ALL\fW.computers.access.to.\fNLY.these.sites.
Enter the keywords or URLs that you want to a\f\fow or b\fock. 
C\fick Save.Settings.
Website Fi\fters are used to a\f\fow you to set up a \fist of Web sites that can be viewed by mu\ftip\fe users throu\bh the network. 
To use this feature se\fect to  A\b\bow or Deny, enter the domain or website and c\fick  Save.Settings. You must a\fso se\fect  App\by.
Web.Fi\bter under the Access Control section.  
						

							79
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Enter a name for the inbound fi\fter ru\fe.
Se\fect A\b\bow or Deny.
Check to enab\fe ru\fe.
Enter the startin\b IP address. Enter 0.0.0.0 if you do not want 
to specify an IP ran\be.
Enter the endin\b IP address. Enter 255.255.255.255 if you do 
not want to specify and IP r\uan\be.
C\fick  the Add  button  to  app\fy  your  settin\bs. You  must  c\fick 
Save.Settings at the top to save the settin\bs.
This section wi\f\f \fist any ru\fes that are created. You may c\fick 
the  Edit  icon to chan\be the settin\bs or enab\fe/disab\fe the ru\fe, 
or c\fick the De\bete icon to remove the ru\fe.
Name:
Action:
Enable:
\bemote IP Start:
\bemote IP End: Add:
Inbo\fnd Filter  \b\fles List:
The  Inbound  Fi\fter  option  is  an  advanced  method  of  contro\f\fin\b  data  received  from  the  Internet. With  this  feature  you  can 
confi\bure inbound data fi\fterin\b ru\fes that contro\f data based on an IP address ran\be. Inbound Fi\fters can be used with Virtua\f 
Server, Port Forwardin\b, or Remote Administration features.
Inbo\fnd Filter  
						

							80
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
SPI (Statefu\f Packet Inspection, a\fso known as dynamic packet 
fi\fterin\b) he\fps to prevent cyber attacks by trackin\b more state 
per  session.  It  va\fidates  that  the  traffic  passin\b  throu\bh  the 
session conforms to the protoco\f.
Enab\fe this feature to protect your network from certain kinds 
of “spoofin\b” attacks. 
If an app\fication has troub\fe workin\b from behind the router, 
you  can  expose  one  computer  to  the  Internet  and  run  the 
app\fication on that computer.
Note: Placing a computer in the DMZ may expose that computer 
to a \fariety of security risks. Use of this option is only recommended 
as a last resort.
Specify  the  IP  address  of  the  computer  on  the  LAN  that  you 
want  to  have  unrestricted  Internet  communication.  If  this 
computer  obtains  it’s  IP  address  automatica\f\fy  usin\b  DHCP, 
be sure to make a static reservation on the  Setup > Network.
Settings   pa\be  so  that  the  IP  address  of  the  DMZ  machine 
does not chan\be.
A\f\fows  mu\ftip\fe  machines  on  the  LAN  to  connect  to  their 
corporate network usin\b PPTP protoco\f.
A\f\fows  mu\ftip\fe  VPN  c\fients  to  connect  to  their  corporate 
network  usin\b  IPSec.  Some  VPN  c\fients  support  traversa\f  of 
IPSec throu\bh
Enable SPI:
Anti-Spoof Check: Enable DMZ:
DMZ IP Address: PPTP:
IPSEC (VPN):
Firewall Settings
A firewa\f\f protects your network from the outside wor\fd. The DIR-865L offers a firewa\f\f type functiona\fity. The SPI feature he\fps 
prevent cyber attacks. Sometimes you may want a computer exposed to the outside wor\fd for certain types of app\fications. 
If you choose to expose a computer, you can enab\fe DMZ. DMZ is short for Demi\fitarized Zone. This option wi\f\f expose the 
chosen computer comp\fete\fy to the outside wor\fd.  
						

							81
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
\bTSP:SIP: NAT. This ALG may interfere with the operation of such VPN c\fients. If you are havin\b troub\fe connectin\b with your corporate network, 
try turnin\b this ALG off. P\fease check with the s\uystem administrator of your corporate network whether your VPN c\fient supports
NAT traversa\f.
A\f\fows app\fication that uses Rea\f Time Streamin\b Protoco\f to receive streamin\b media from the Internet. QuickTime and Rea\f P\fayer 
are some of the common app\fications usin\b this protoco\f.
A\f\fows devices and app\fications usin\b VoIP (Voice over IP) to communicate across NAT. Some VoIP app\fications and devices have 
the abi\fity to discover NAT devices and work around them. This ALG may interfere with the operation of such devices. If you are 
havin\b troub\fe makin\b VoIP ca\f\fs, try turnin\b this ALG off.  
						

							82
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Enter a name for your route.
Enter the IP address of packets that wi\f\f take this route.
Enter the netmask of the route, p\fease note that the octets 
must match your destination IP address.
Enter your next hop \bateway to be taken if this route is used.
The  route  metric  is  a  va\fue  from  1  to  16  that  indicates  the 
cost of usin\b this route. A va\fue 1 is the \fowest cost and 15 
is the hi\bhest cost. 
Se\fect the interface that the IP packet must use to transit out 
of the router when this route is used. 
Name:
Destination IP: Netmask:
Gateway: Metric:
Interface:
\bo\fting
The Routin\b option is an \uadvanced method of customizin\b specific routes of data throu\bh your network.  
						

							83
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Advanced Wireless
This wi\f\f disp\fay which radio band the fo\f\fowin\b 
settin\bs wi\f\f be ued f\uor. This top box wi\f\f be 
the settin\bs for the 2.4 GHz band.
Set the transmit power of the antennas 
for the 2.4 GHz band.
This enab\fes 802.11d operation. 802.11d is a wire\fess 
specification deve\foped to a\f\fow imp\fementation 
of wire\fess networks in countries that cannot use 
the 802.11 standard. This feature shou\fd on\fy be 
enab\fed if you are in a country that requires it.
WMM is QoS for your wire\fess network. This 
wi\f\f improve the qua\fity of video and voice 
app\fications for your wire\fess c\fients.
Enab\fe this option to reduce interference from other 
wire\fess networks in your area. If the channe\f width 
is operatin\b at 40MHz and there is another wire\fess 
network’s channe\f over-\fappin\b and causin\b interference, 
the router wi\f\f automatica\f\fy chan\be to 20MHz. 
This wi\f\f disp\fay which radio band settin\bs wi\u\f\f be used. This top box wi\f\f be the settin\bs \ufor the 5 GHz band.
Set the transmit power of the antennas for the 5 GHz band.
This enab\fes 802.11d operation. 802.11d is a wire\fess specification deve\foped to a\f\fow imp\fementation of wire\fess networks 
in countries that cannot use the 802.11 standard. This feature shou\fd on\fy be enab\fed if you are in a country that requires it.
WMM is QoS for your wire\fess network. This wi\f\f improve the qua\fity of video and voice app\fications for your wire\fess c\fients.
Wireless Band:
Transmit Power: WLAN Partition:
WMM Enable: HT20/40 
Coexistence:
Wireless Band:
Transmit Power: WLAN Partition:
WMM Enable:
This pa\be a\f\fows you to chan\be some of the advanced wire\fess settin\bs of the DIR-865L. It is recommended that you on\fy chan\be these settin\bs if 
you are fami\fiar with their \ufunctions and proper settin\bs, or are instructed to do so.  
						

							84
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Wi-Fi Protected Set\fp
Enab\fe the Wi-Fi Protected Setup feature. 
Note: if this option is\ff unchecked, the WPS button 
on the side of the\ff router will be disabled.
Check to disab\fe the option\u of 
confi\burin\b the WPS PIN options.
A PIN is a unique n\uumber that can be used to 
add the router to an existin\b network or to 
create a new network. On\fy the Administrator 
(“admin” account) can chan\be or reset the PIN. 
Shows the current PIN. 
Create a random number that is a va\fid PIN. This 
becomes the router’s PIN. You can then copy this 
PIN to the user interface of the wire\fess c\fient.
Restore the defau\ft PIN of \uthe router. 
Enable:
Lock WPS-PIN  Set\fp:
PIN Settings:
C\frrent PIN:
Generate New  PIN:
\beset PIN to  Defa\flt:
Wi-Fi Protected Setup (WPS) System is a simp\fified method for securin\b your wire\fess network durin\b the “Initia\f setup” as we\f\f as the “Add New 
Device” processes. The Wi-Fi A\f\fiance (WFA) has certified it across different products as we\f\f as manufacturers. The process is just as easy as pressin\b 
a button for the Push-Button Method or correct\fy enterin\b the 8-di\bit code for the PIN Code Method. The time reduction in setup and ea\use of use 
are quite beneficia\f, and the hi\bhest wire\fess security settin\b of WPA2 is automatica\f\fy used.  
						

							85
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
This Wizard he\fps you add wire\fess devices to the wire\fess network.
The wizard wi\f\f either disp\fay the wire\fess network settin\bs to \buide you throu\bh manua\f confi\buration, prompt you to enter the 
PIN for the device, or ask you to press the confi\buration button on the device. If the device supports Wi-Fi Protected Setup and has a 
confi\buration button, you can add it to the network by pressin\b the confi\buration button on the device and then the on the router 
within 60 seconds. The status LED on the router wi\f\f flash three times if the devi\uce has been successfu\f\fy added to the network.
There are severa\f ways to add a wire\fess device to your network. A “re\bistrar” contro\fs access to the wire\fess network. A re\bistrar 
on\fy a\f\fows devices onto the wire\fess network if you have entered the PIN, or pressed a specia\f Wi-Fi Protected Setup button on the 
device. The router acts as a re\bistrar for the network, a\fthou\bh other devic\ues may act as a re\bistrar as we\f\f.
C\fick to start the wizard and turn to pa\be 40.
Add Wireless 
Station:
You  can  a\fso  simp\fy  press  the WPS  button  on  the  side  of  the  router,  and  then  press  the 
WPS button on your wire\fess c\fient within 120 seconds to automatica\f\fy connect without 
\fo\b\bin\b into the router. 
Refer to pa\be 108 for more information.
WPS B\ftton
WPS Button  
						

							86
D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
To use the Universa\f P\fu\b and P\fay (UPnP
™) feature c\fick on 
Enab\bed.  UPnP  provides  compatibi\fity  with  networkin\b 
equipment, software and periphera\fs.
Checkin\b  the  box  wi\f\f  a\f\fow  the  DIR-865L  to  respond 
to  pin\bs.  Uncheckin\b  the  box  may  provide  some  extra 
security from hackers.
Se\fect from the drop-down menu if you wou\fd \fike to app\fy 
the Inbound Fi\fter to the WAN pin\b. Refer to the Inbound 
Fi\fters section for more information.
You may set the port speed of the Internet port to 10Mbps, 
100Mbps, 1000Mbps, or Auto (recommended). 
Check  the  box  to  a\f\fow  mu\fticast  traffic  to  pass  throu\bh 
the router from the Internet (IPv4).
Check  the  box  to  a\f\fow  mu\fticast  traffic  to  pass  throu\bh 
the router from the Internet (IPv6).
Enable UPnP:
WAN Ping:
WAN Ping Inbo\fnd  Filter:
WAN Port Speed: Enable IPV4 
M\flticast Streams:
Enable IPV6 
M\flticast Streams:
Advanced Network
This pa\be a\f\fows you to chan\be some of the advanced network settin\bs of the DIR-865L. It is recommended that you on\fy chan\be these settin\bs if 
you are fami\fiar with their \ufunctions and proper settin\bs, or are instructed to do so.