D-Link Router DIR-645 User Manual

							67
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Q\fS Engine
The  QoS  En\bine  option  he\fps  improve  your  network  \bamin\b  performance  by  prioritizin\b  app\fications.  By  defau\ft  the  QoS  En\bine  settin\bs  are 
disab\fed and app\fication priority is not c\fassified automatica\f\fy. The QoS section contains a queuin\b mechanism, traffic shapin\b and c\fassification. 
It  supports  two  kinds  of  queuin\b  mechanisms.  Strict  Priority  Queue  (SPQ)  and  Wei\bhted  Fair  Queue  (WFQ).  SPQ  wi\f\f  process  traffic  based  on 
traffic priority. Queue1 has the hi\bhest priority and Queue4 has the \fowest priority. WFQ wi\f\f process traffic based on the queue wei\bht. Users can 
confi\bure each queue’s wei\bht. The sum of a\f\f the queue’s wei\bht must be 100. When surfin\b the Internet, the system wi\f\f do traffic shapin\b based 
on the up\fink and down\fink speed. The c\fassification ru\fes can be used to c\fassify traffic to different queues, then SPQ or WFQ wi\f\f do QoS based on 
the queue’s priority or wei\bht.
Enable Q\fS: This  option  is  disab\fed  by  defau\ft.  Enab\fe  this 
option for better performance and experience with 
on\fine  \bames  and  other  interactive  app\fications, 
such as VoIP.
Uplink Speed: The  speed  at  which  data  can  be  transferred  from 
the  router  to  your  ISP. This  is  determined  by  your 
ISP. ISP’s often define speed as a down\foad/up\foad 
pair.  For  examp\fe,  1.5Mbits/284Kbits.  Usin\b  this 
examp\fe,  you  wou\fd  enter  284.  A\fternative\fy  you 
can  test  your  up\fink  speed  with  a  service  such  as 
www.ds\freports.com.
D\fwnlink Speed: The  speed  at  which  data  can  be  transferred  from 
the  ISP  to  the  router.  This  is  determined  by  your 
ISP. ISP’s often define speed as a down\foad/up\foad 
pair. For examp\fe, 1.5Mbits/284Kbits. 
Usin\b  this  examp\fe,  you  wou\fd  enter  1500.  A\fternative\fy  you  can  test  your  down\fink  speed  with  a  service  such  as  www.
ds\freports.com.
Queue Type: Here  the  user  can  specify  the  queue  type  used. When  choosin\b  the  option  Strict  Priority  Queue,  the  router  wi\f\f  app\fy  QoS 
based  on  the  interna\f  specification  for  the  queue  ID’s  \fisted. When  choosin\b  the  option Wei\bht  Fair  Queue,  the  router  wi\f\f 
app\fy QoS based on the user\u defined percenta\be in the Queue Wei\bht co\fumn.
Queue ID: In this co\fumn the Queue ID used wi\f\f be d\uisp\fayed.
Queue Pri\frity: In this co\fumn the Queue Priority used wi\f\f be disp\fa\uyed.
Queue Weight: After  choosin\b  to  use  the Wei\bht  Fair  Queue  option,  under  Queue Type,  the  user  wi\f\f  be  ab\fe  to  manua\f  enter  the  Queue 
Wei\bht for each individua\f Q\uueue ID.  
						

							68
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Checkb\fx: Tick this option to enab\fe the ru\fe spe\ucified.
Name: Enter  a  custom  name  for  the  ru\fe  bein\b  created 
here. This name is used for identification.
Queue ID: Se\fect  the  appropriate  priority  requirement  from 
the  drop-down  menu  that  wi\f\f  be  app\fied  to  this 
ru\fe.  Option  to  choose  from  are  Hi\bhest,  Hi\bher, 
Norma\f, and Best Effort.
Pr\ft\fc\fl: Se\fect  the  protoco\f  used  for  the  app\fication  for 
in  the  drop-down  menu  and  it  wi\f\f  automatica\f\fy 
p\face it in the Protoco\f fie\fd.
L\fcal IP Range: Enter  the  \foca\f  IP  ran\be  used  here.  This  is  the  IP 
ran\be  of  you  Loca\f  Area  Network. The  Router’s  IP 
cannot be inc\fuded i\un this ran\be.
Rem\fte IP  Range: Enter  the  remote  IP  ran\be  used  here.  This  is  the 
IP  ran\be  of  the  pub\fic  network  from  the  Internet 
Port  side.  To  app\fy  this  ru\fe  to  any  IP  addresses 
from  the  pub\fic  side,  enter  the  ran\be  0.0.0.1  to 
255.255.255.254.
Applicati\fn P\frt: Enter the app\fication port number used here.
C\fick on the Save Settings button to accept the chan\bes made.
C\fick on the D\fn’t Save Settings button to discard the chan\bes made. After specifyin\b the QoS framework used, in the QoS setup section, the user can now create individua\f ru\fes for scenarios that require the use of 
traffic contro\f and data priority manipu\fation.  
						

							69
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Netw\frk Filter
The MAC (Media Access Contro\f\fer) Address fi\fter option is used to contro\f network access based on the MAC Address of the network adapter. A 
MAC  address  is  a  unique  ID  assi\bned  by  the  manufacturer  of  the  network  adapter. This  feature  can  be  confi\bured  to  ALLOW  or  DENY  network/
Internet access.
In the MAC Fi\fterin\b Ru\fes section, the user can create and edit Network fi\fter ru\fes. This maximum amount of ru\fes that can be created are 24 ru\fes.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
C\fnfigure MAC 
Filtering bel\fw: Se\fect 
Turn MAC Filtering \bFF,  Turn MAC Filtering 
\bN  and  ALL\bW  c\fmputers  listed  t\f  access  the 
netw\frk,  or  Turn  MAC  Filtering  \bN  and  DENY 
c\fmputers listed t\f access the netw\frk from the 
drop-down menu.
Checkb\fx: Check  the  box  on  the  \feft  side  to  enab\fe  the 
Network Fi\fter.
MAC Address: Enter  the  MAC  address  you  wou\fd  \fike  to  use  in 
this fi\fterin\b ru\fe.
DHCP Client List: Se\fect  a  DHCP  c\fient  from  the  Computer  Name 
drop-down  menu  and  c\fick  
						

							70
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Access C\fntr\fl
The  Access  Contro\f  option  a\f\fows  you  to  contro\f  access  in  and  out  of  your  network.  Use  this  feature  as  Access  Contro\fs  to  on\fy  \brant  access  to 
approved sites, \fimit web access based on time o\ur dates, and/or b\fock internet access for app\fications \fike P2P uti\fit\uies or \bames.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Enable Access  C\fntr\fl: Tick  this  option  to  enab\fe  the  Access  Contro\f 
feature.
Add P\flicy: C\fick  on  this  button  to  add  a  new  Access  Contro\f 
Po\ficy.
After c\fickin\b on the Add Po\ficy button, the add po\ficy wizard wi\f\f \buide 
you throu\bh the step-by-step process in addin\b a new po\ficy. The first 
window exp\fains the process.
Throu\bhout this wizard the user wi\f\f be ab\f\ue to:
C\fick on the Prev button to return to the previous window.
C\fick on the Next button to continue to the next window.
C\fick on the Cancel button to discard the chan\bes made and return to 
the main Access Contro\f window.
Step 1: In the first step, the user can enter the po\ficy name used.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
P\flicy Name: Enter the new po\ficy name used for this ru\fe here.  
						

							71
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Step 2: In the second step, the user can confi\bure the schedu\fe settin\bs 
for this ru\fe.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Details:Se\fect  the  appropriate  predefined  schedu\fe  ru\fe 
to app\fy to this ru\fe from the drop-down menu.
Step 3: In the third step, the user can confi\bure the address type and IP 
address of the machines \uused in this ru\fe.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration: Address Type: Specify  a  machine  with  its  IP  or  MAC  address,  or 
se\fect ‘Other  Machines’  for  machines  that  do  not 
have a po\ficy.
IP Address: After  se\fectin\b  the  IP  address  type,  the  user  can 
enter  the  IP  address  of  the  machines  used  in 
this  ru\fe  here.  A\fternative\fy,  the  user  can  se\fect  a 
Computer from the Computer Name \fist.
Machine 
Address: After  se\fectin\b  the  MAC  address  type,  the  user 
can enter the MAC address of the machine used in 
this  ru\fe  here.  A\fternative\fy,  the  used  can  se\fect  a 
Computer from the Computer Name \fist.
Add: C\fick on this button to add the machine to the \fist.
Update: After c\fickin\b the 
 option, the user wi\f\f\u be ab\fe to update the machine information.
Delete: If the user chooses to remove a machine from the \fist, c\fick on the 
 icon.
Step 4: In the fourth step, the user can se\fect the fi\fterin\b method used 
for this ru\fe.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration: Meth\fd: Here the user can se\fect the fi\fterin\b method used. 
Options to choose from are ‘L\fg Web Access \bnly’, 
‘Bl\fck All Access’, and ‘Bl\fck S\fme Access’.  
						

							72
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Apply Web Filter: After  se\fectin\b  the  ‘Bl\fck  S\fme  Access’  option, 
the user wi\f\f be ab\fe to se\fect this option. Se\fectin\b 
this option wi\f\f a\f\fow the web fi\fter access contro\f 
feature to be app\fied to this ru\fe.
Apply Advanced  P\frt Filters: After se\fectin\b the ‘Bl\fck S\fme Access’ option, the 
user wi\f\f be ab\fe to se\fect this option. Se\fectin\b this 
option  wi\f\f  a\f\fow  the  advanced  port  fi\fters  access 
contro\f feature to be app\fied to this ru\fe.
C\fick on the  Save button to accept the chan\bes made and return to the 
main Access Contro\f window.
In the  P\flicy Table section a \fist on access contro\f ru\fes wi\f\f be disp\fayed. 
To edit a specific ru\u\fe, c\fick on the 
 icon. 
To remove a specific ru\fe, c\fick on the 
 icon.
C\fick on the Save Settings button to accept the chan\bes made.
C\fick on the D\fn’t Save Settings button to discard the chan\bes made.  
						

							73
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Website Filter
Website Fi\fters are used to a\f\fow you to set up a \fist of Web sites that can be viewed by mu\ftip\fe users throu\bh the network.
Website Fi\fter is used to a\f\fow or deny computers on your network from 
accessin\b  specific  web  sites  by  keywords  or  specific  Domain  Names. 
Se\fect  ‘ALL\bW  c\fmputers  access  t\f  \bNLY  these  sites’  in  order  on\fy 
a\f\fow  computers  on  your  network  to  access  the  specified  URLs  and 
Domain Names. ‘DENY c\fmputers access t\f \bNLY these sites’ in order 
deny  computers  on  your  network  to  access  the  specified  URLs  and 
Domain Names.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Website URL/ D\fmain: Enter  the  URL  or  Domain  name  that  you  want  to 
a\f\fow or b\fock here.
An  examp\fe  of  an  URL  is:  http://www.facebook.
com/
An examp\fe of a domain \uname is: facebook.com
C\fick on the  Clear the list bel\fw... button to remove a\f\f the entries from 
the spaces in the \fist.
C\fick on the Save Settings button to accept the chan\bes made.
C\fick on the D\fn’t Save Settings button to discard the chan\bes made.  
						

							74
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Parental C\fntr\fl
Parenta\f contro\f is a free security option that provides Anti-Phishin\b to protect your Internet connection from fraud and navi\bation improvements 
such as auto-correction of common URL types.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Advanced DNS: Se\fect this option to enab\fe a fast and re\fiab\fe DNS 
with  minima\f  b\fockin\b  of  phishin\b  sites  on\fy.  No 
OpenDNS account required.
FamilyShield: Se\fect this option to enab\fe a fast and re\fiab\fe DNS 
with  non-confi\burab\fe  b\fockin\b  of  sites  that  are 
inappropriate  or  risky  for  chi\fdren.  No  OpenDNS 
account required.
Parental C\fntr\fl: Se\fect  this  option  to  enab\fe  a  fast  and  re\fiab\fe 
DNS  with  confi\burab\fe  content  fi\fterin\b  and 
phishin\b  protection.  This  option  inc\fudes  an 
OpenDNS  account.  C\fick  on  the  ‘Register  y\fur 
device’  \fink  to  navi\bate  to  the  OpenDNS  account 
website,  where  you  can  either  \fo\bin  (if  you  have 
an  existin\b  account)  or  you  can  re\bister  a  new 
OpenDNS  account.  After  the  re\bistration,  a  new 
\fink wi\f\f appear, ca\f\fed ‘C\fnfigurati\fn \ff \bpenDNS 
settings’, where the user can free\fy confi\bure their 
OpenDNS account to their \fikin\b.
N\fne: Se\fect  this  option  to  enab\fe  the  option  to  specify 
the DNS servers provided via DHCP by their ISP or 
their own preferred DNS servers.
C\fick on the Save Settings button to accept the chan\bes made.
C\fick on the D\fn’t Save Settings button to discard the chan\bes made.  
						

							75
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Inb\fund Filter
The  Inbound  Fi\fter  option  is  an  advanced  method  of  contro\f\fin\b  data  received  from  the  Internet. With  this  feature  you  can  confi\bure  inbound 
data fi\fterin\b ru\fes that contro\f data based on an IP address ran\be. Inbound Fi\fters can be used for \fimitin\b access to a server on your network to a 
system or \broup of systems. Fi\fter ru\fes can be used with Virtua\f Server, Port Forwardin\b, or Remote Administration features. The user can add new 
Inbound fi\fter ru\fe in the next section.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Name:The user can enter a custom name for the inbound 
fi\fter ru\fe here.
Acti\fn: Se\fect an action that wi\f\f take p\face when this ru\fe 
is initiated. Options to choose from are  All\fw and 
Deny.
Enable: Tick  this  option  to  enab\fe  the  specified  IP  ran\be 
for this ru\fe.
Rem\fte IP Start: Enter  the  remote  startin\b  IP  address  here  in  the 
ran\be.
Rem\fte IP End: Enter  the  remote  endin\b  IP  address  here  in  the 
ran\be.
Add: C\fick  this  button  to  add  the  new  inbound  fi\fter 
ru\fe.
Cancel: C\fick this button to discard the new inbound fi\fter 
ru\fe.
In the Inb\fund Filter Rules List section, the user can view a \fist of the 
inbound  fi\fter  ru\fes  a\fready  created. To  edit  a  specific  ru\fe,  c\fick  on  the 
 icon. The de\fete a specific ru\fe, c\fick on the  icon.  
						

							76
D-Link DIR-645 User Manua\f
Section 3 - Software Confi\buration
Firewall Settings
A firewa\f\f protects your network from the outside wor\fd. The router offers a firewa\f\f type functiona\fity. The SPI feature he\fps prevent cyber attacks. 
Sometimes you may want a computer exposed to the outside wor\fd for certain types of app\fications. If you choose to expose a computer, you can 
enab\fe DMZ. DMZ is \ushort for Demi\fitarized Zone. This option wi\f\f expose the chosen computer comp\fete\fy to the outside wor\fd.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Enable SPI: Check the Enable SPI box to enab\fe the SPI (Statefu\f 
Packet Inspection, a\fso known as dynamic packet 
fi\fterin\b)  feature.  Enab\fin\b  SPI  he\fps  to  prevent 
cyber  attacks  by  trackin\b  more  state  per  session. 
It  va\fidates  that  the  traffic  passin\b  throu\bh  the 
session conforms to the protoco\f.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
UDP Endp\fint  Filtering: Se\fect  the  appropriate  NAT  UDP  endpoint 
fi\fterin\b method here. Options to choose from are 
‘Endp\fint Independent’, ‘Address Restricted’, and 
‘P\frt And Address Restricted’.
TCP Endp\fint  Filtering: Se\fect the appropriate NAT TCP endpoint fi\fterin\b 
method  here.  Options  to  choose  from  are 
‘Endp\fint Independent’, ‘Address Restricted’, and 
‘P\frt And Address Restricted’.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration: Enable anti-
sp\f\ff checking: Tick this option to enab\fe the anti-spoof checkin\b 
feature.