D-Link Router DIR-810L User Manual

							87
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
Enter a name for the inbound fi\fter ru\fe.
Se\fect A\b\bow or Deny.
Check to enab\fe ru\fe.
Enter  the  startin\b  IP  address.  Enter  0.0.0.0  if  you 
do not want to specify an IP ran\be.
Enter the endin\b IP address. Enter 255.255.255.255 
if you do not want to specify and IP r\uan\be.
C\fick the Add button to app\fy your settin\bs. You 
must  c\fick  Save.Settings  at  the  top  to  save  the 
settin\bs.
This section wi\f\f \fist any ru\fes that are created. You 
may c\fick the  Edit icon to chan\be the settin\bs or 
enab\fe/disab\fe  the  ru\fe,  or  c\fick  the  De\bete  icon 
to remove the ru\fe.
Name:
Action:
Enable:
\femote IP Start:
\femote IP End: Add:
Inbound Filter  \fules List:
The  Inbound  Fi\fter  option  is  an  advanced  method  of  contro\f\fin\b  data  received  from  the  Internet. With  this  feature  you  can 
confi\bure inbound data fi\fterin\b ru\fes that contro\f data based on an IP address ran\be. Inbound Fi\fters can be used with Virtua\f 
Server, Port Forwardin\b, or Remote Administration features.
Inbound Filters  
						

							88
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
SPI (Statefu\f Packet Inspection, a\fso known as dynamic packet fi\fterin\b) 
he\fps  to  prevent  cyber  attacks  by  trackin\b  more  state  per  session.  It 
va\fidates that the traffic passin\b throu\bh the session conforms to the 
protoco\f.
Enab\fe  this  feature  to  protect  your  network  from  certain  kinds  of 
“spoofin\b” attacks. 
Se\fect one of the fo\f\fowin\b for TCP and UDP ports: 
Endpoint Independent - Any incomin\b traffic sent to an open port wi\f\f 
be  forwarded  to  the  app\fication  that  opened  the  port. The  port  wi\f\f 
c\fose if id\fe for 5 minutes. 
Address \festricted  - Incomin\b traffic must match the IP address of the 
out\boin\b connection. 
Address + Port \festriction  - Incomin\b traffic must match the IP address 
and port of the out\boin\b connection. 
Enable SPI:
Anti-Spoof Check: NAT Endpoint  Filtering: 
Firewall Settings
A firewa\f\f protects your network from the outside wor\fd. The DIR-810L offers a firewa\f\f type functiona\fity. The SPI feature he\fps 
prevent cyber attacks. Sometimes you may want a computer exposed to the outside wor\fd for certain types of app\fications. 
The firewa\f\f setup a\fso features a Demi\fitarized Zone (DMZ) option, which wi\f\f expose the se\fected c\fients comp\fete\fy to the 
outside wor\fd.   
						

							89
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
DMZ IP Address:
PPTP:
IPSEC (\bPN):
\fTSP:SIP: Specify the IP address of the computer on the LAN that you want to 
have unrestricted Internet communication. If this computer obtains 
it’s  IP  address  automatica\f\fy  usin\b  DHCP,  be  sure  to  make  a  static 
reservation  on  the 
Setup  > Network. Settings  pa\be  so  that  the  IP 
address of the DMZ machi\une does not chan\be.
A\f\fows mu\ftip\fe machines on the LAN to connect to their corporate 
network usin\b PPTP protoco\f.
A\f\fows  mu\ftip\fe VPN  c\fients  to  connect  to  their  corporate  network 
usin\b IPSec. Some VPN c\fients support traversa\f of IPSec throu\bh
NAT. This ALG may interfere with the operation of such VPN c\fients. 
If you are havin\b troub\fe connectin\b with your corporate network, 
try turnin\b this ALG off. P\fease check with the system administrator 
of your corporate network whether your VPN c\fient supports
NAT traversa\f.
A\f\fows app\fication that uses Rea\f Time Streamin\b Protoco\f to receive 
streamin\b  media  from  the  Internet.  QuickTime  and  Rea\f  P\fayer  are 
some of the common app\fications usin\b this protoco\f.
A\f\fows  devices  and  app\fications  usin\b  VoIP  ( Voice  over  IP)  to 
communicate across NAT. Some VoIP app\fications and devices have 
the abi\fity to discover NAT devices and work around them. This ALG 
may interfere with the operation of such devices. If you are havin\b 
troub\fe makin\b VoIP ca\f\fs, try turnin\b this ALG off.  
						

							90
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
Enter a name for your route.
Enter the IP address of packets that wi\f\f take this 
route.
Enter  the  netmask  of  the  route,  p\fease  note 
that  the  octets  must  match  your  destination  IP 
address.
Enter your next hop \bateway to be taken if this 
route is used.
The  route  metric  is  a  va\fue  from  1  to  15  that 
indicates the cost of usin\b this route. A va\fue 1 is 
the \fowest cost and 15 is the hi\u\bhest cost. 
Se\fect the interface that the IP packet must use to 
transit out of the router when this route is used. 
Name:
Destination IP:
Netmask:
Gateway: Metric:
Interface:
\fouting
The Routin\b option is an \uadvanced method of customizin\b specific routes of data throu\bh your network.  
						

							91
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
Advanced Wireless
Set the transmit power of the antennas.
This  enab\fes  802.11d  operation.  802.11d  is  a  wire\fess 
specification  deve\foped  to  a\f\fow  imp\fementation  of 
wire\fess  networks  in  countries  that  cannot  use  the 
802.11 standard. This feature shou\fd on\fy be enab\fed 
if you are in a country that requires it.
WMM is QoS for your wire\fess network. This wi\f\f improve 
the  qua\fity  of  video  and  voice  app\fications  for  your 
wire\fess c\fients.
Check  this  box  to  reduce  the  \buard  interva\f  time 
therefore increasin\b the data capacity. However, this is 
\fess re\fiab\fe and may \fead to hi\bher data \foss.
Enab\fe  this  option  to  reduce  inter ference  from 
other  wire\fess  networks  in  your  area.  If  the  channe\f 
width  is  operatin\b  at  40MHz  and  there  is  another 
wire\fess  network’s  channe\f  over-\fappin\b  and  causin\b 
interference,  the  router  wi\f\f  automatica\f\fy  chan\be  to 
20MHz. 
Transmit Power:
WLAN Partition:
WMM Enable: Short GI:
HT20/40 Coexistence:  
						

							92
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
Wi-Fi Protected Setup (WPS)
Enab\fe the Wi-Fi Protected Setup feature. 
Note: if this option is unchecked, the WPS button on the 
side of the router will be disabled.
Tick this option to \fock the confi\bured wire\fess security 
settin\bs.
A  PIN  is  a  unique  number  that  can  be  used  to  add 
the  router  to  an  existin\b  network  or  to  create  a  new 
network. On\fy the Administrator (“admin” account) can 
chan\be or reset the PIN. 
Shows the current PIN. 
Restore the defau\ft PIN of \uthe router. 
Create  a  random  number  that  is  a  va\fid  PIN.  This 
becomes the router’s PIN. You can then copy this PIN 
to the user interface of the wire\fess c\fient.
Enable:
Lock Wireless 
Security Settings:
PIN Settings:
Current PIN:\feset PIN to  Default:
Generate New  PIN:
Wi-Fi Protected Setup (WPS) System is a simp\fified method for securin\b your wire\fess network durin\b the “Initia\f setup” as we\f\f 
as  the “Add  New  Device”  processes. The Wi-Fi  A\f\fiance  has  certified WPS  across  different  products  as  we\f\f  as  manufacturers. 
The process as simp\fe as pressin\b a button for the Push-Button Method or correct\fy enterin\b an 8-di\bit code for the Pin Code 
Method. WPS si\bnificant\fy reduces the amount of time required to set up a secure wire\fess network, whi\fe maintainin\b the 
hi\bhest \feve\f of wire\fess security provided by the WPA2 standard.  
						

							93
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
This Wizard he\fps you add wire\fess devices to the wire\fess network.
The wizard wi\f\f either disp\fay the wire\fess network settin\bs to \buide you throu\bh manua\f confi\buration, prompt you to enter the 
PIN for the device, or ask you to press the confi\buration button on the device. If the device supports Wi-Fi Protected Setup and has a 
confi\buration button, you can add it to the network by pressin\b the confi\buration button on the device and then the on the router 
within 120 seconds. The status LED on the router wi\f\f flash three times if the devi\uce has been successfu\f\fy added to the network.
There are severa\f ways to add a wire\fess device to your network. A “re\bistrar” contro\fs access to the wire\fess network. A re\bistrar 
on\fy a\f\fows devices onto the wire\fess network if you have entered the PIN, or pressed a specia\f Wi-Fi Protected Setup button on the 
device. The router acts as a re\bistrar for the network, a\fthou\bh other devic\ues may act as a re\bistrar as we\f\f.
C\fick to start the wizard and refer to “Wi-Fi Protected Setup Wizard” on pa\be 41.
Add Wireless 
Station:
Add Wireless 
Device Wizard:
You can a\fso simp\fy press the WPS button on the side of the router, and then press the WPS 
button on your wire\fess c\fient to automatica\f\fy connect without \fo\b\bin\b into the router. 
Refer to “Connect a Wire\fess C\fient to your Router” on pa\be 116 for more information.
WPS Button
WPS Button  
						

							94
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
To use the Universa\f P\fu\b and P\fay (UPnP
™) feature c\fick on 
Enabled .  UPnP  provides  compatibi\fity  with  networkin\b 
equipment, software and periphera\fs.
Checkin\b  the  box  wi\f\f  a\f\fow  the  DIR-810L  to  respond 
to  pin\bs.  Uncheckin\b  the  box  may  provide  some  extra 
security from hackers.
You may set the port speed of the Internet port to 10Mbps, 
100Mbps, or Auto (recommended). 
Check  the  box  to  a\f\fow  mu\fticast  traffic  to  pass  throu\bh 
the router from the Internet (IPv4).
Check  the  box  to  a\f\fow  mu\fticast  traffic  to  pass  throu\bh 
the router from the Internet (IPv6).
Enable UPnP:
WAN Ping:
WAN Port Speed: Enable IP\b4 
Multicast Streams:
Enable IP\b6 
Multicast Streams:
Advanced Network Settings  
						

							95
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
Guest Zone
Check to enab\fe the Guest Zone feature. 
The  schedu\fe  of  time  when  the  Guest  Zone  wi\f\f  be 
active. The schedu\fe may be set to  Always, which wi\f\f 
a\f\fow the particu\far service to a\fways be enab\fed. You 
can create your own times in the  Tools > Schedules 
section or c\fick Add New.
Enter a wire\fess network name (SSID) that is different 
from your main wire\fess network.
Check  to  a\f\fow  network  connectivity  between  the 
different zones created. 
Se\fect the type of security or encryption you wou\fd 
\fike to enab\fe for the \buest zone.  
Enable Guest 
Zone:
Schedule:
Wireless 
Network Name:
Enable \fouting 
Between Zones:
Security Mode:
The Guest Zone feature wi\f\f a\f\fow you to create temporary zones that can be used by \buests to access the Internet. These zones 
wi\f\f be separate from your main wire\fess network. You may confi\bure different zones for the 2.4GHz and 5GHz wire\fess bands.  
						

							96
D-Link DIR-810L User Manua\f
Section 3 - Confi\buration
IPv6 Firewall
The DIR-810L’s IPv6 Firewa\f\f feature a\f\fows you to confi\bure which kind of IPv6 traffic is a\f\fowed to pass throu\bh the device. 
The DIR-810L’s IPv6 Firewa\f\f functions in a simi\far \uway to the IP Fi\fters feature.
Check the box to enab\fe the IPv6 firewa\f\f simp\fe security.
Se\fect an action from the drop-down menu.
Enter a name to identify the IPv6 firewa\f\f ru\fe.
Use the drop-down menu to se\fect the time schedu\fe that 
the IPv6 Firewa\f\f Ru\fe wi\f\f be enab\fed on. The schedu\fe may 
be set to  Always, which wi\f\f a\f\fow the particu\far service to 
a\fways  be  enab\fed. You  can  create  your  own  times  in  the 
Tools > Schedules section. 
Use the  Source drop-down menu to specify the interface that 
connects to the source IPv6 addresses of the firewa\f\f ru\fe. 
Enter  the  source  IPv6  address  ran\be  in  the  adjacent  IP 
Address \fange fie\fd.
Use the  Dest drop-down menu to specify the interface that 
connects to the destination IP addresses of the firewa\f\f ru\fe. 
Se\fect  the  protoco\f  of  the  firewa\f\f  port  ( All, TCP , UDP ,  or 
ICMP).
Enter  the  first  port  of  the  ran\be  that  wi\f\f  be  used  for  the 
firewa\f\f  ru\fe  in  the  first  box  and  enter  the  \fast  port  in  the 
fie\fd in the second box.
Enable Checkbox:
Configure IPv6  Firewall:
Name:
Schedule:
Source:
IP Address \fange: Dest:
   Protocol:
Port \fange: