D-Link Router DIR-855 User Manual

							37D-Link DIR-855 User Manual
Section 3 - Configuration
This will allow you to open a single port or a range of ports.
Port Forwarding
Enter a name for the rule or select an application from 
the  drop-down  menu.  Select  an  application  and  click 

						

							38D-Link DIR-855 User Manual
Section 3 - Configuration
E n t e r   a   n a m e   f o r   t h e   r u l e .   Y o u   m a y   s e l e c t   a  
pre-defined  application  from  the  drop-down  menu 
and click 
						

							39D-Link DIR-855 User Manual
Section 3 - Configuration
QoS Engine
This option is disabled by default. Enable this option for 
better performance and experience with online games 
and other interactive applications, such as VoIP.
This option should be enabled when you have a slow 
Internet  uplink.  It  helps  to  reduce  the  impact  that 
large low priority network packets can have on more 
urgent ones.
This option is enabled by default when the QoS Engine 
option  is  enabled.  This  option  will  allow  your  router 
to  automatically  determine  the  uplink  speed  of  your 
Internet connection.
This displays the detected uplink speed.
The speed at which data can be transferred from the 
router to your ISP. This is determined by your ISP. ISP’s often speed as a download/upload pair. For example, 1.5Mbits/284Kbits. Using 
this example, you would enter 284. Alternatively you can test your uplin\
k speed with a service such as www.dslreports.com.
By default, the router automatically determines whether the underlying connection is an xDSL/Frame-relay network or some other connection 
type (such as cable modem or Ethernet), and it displays the result as Detected xDSL or Frame Relay Network. If you have an unusual network 
connection in which you are actually connected via xDSL but for which you configure either “Static” or “DHCP” in the Internet settings, setting 
this option to xDSL or Other Frame Relay Network ensures that the router will recognize that it needs to shape traffic slightly differently in 
order to give the best performance. Choosing xDSL or Other Frame Relay Network causes the measured uplink speed to be reported slightly 
lower than before on such connections, but gives much better results. 
When Connection Type is set to automatic, the automatically detected con\
nection type is displayed here.
Enable 
StreamEngine:
Dynamic 
Fragmentation:
Automatic Uplink 
Speed:
Measured Uplink 
Speed:
Manual Uplink 
Speed:
Connection Type:
Detected xDSL:
The  QoS  Engine  option  helps  improve  your  network  gaming  performance  by  prioritizing  applications.  By  default  the  QoS  Engine 
settings are disabled and application priority is not classified automatically. 
						

							40D-Link DIR-855 User Manual
Section 3 - Configuration
Network Filters
Select  Turn  MAC  Filtering  Off, A l l o w   M A C 
addresses listed below, or Deny MAC addresses 
listed below from the drop-down menu. 
Enter the MAC address you would like to filter.
To find the MAC address on a computer, please refer 
to the Networking Basics section in this manual. 
Select a DHCP client from the drop-down menu and 
click 
						

							41D-Link DIR-855 User Manual
Section 3 - Configuration
Access Control
Click the Add Policy button to start the Access Control 
Wizard. 
Add Policy:
The Access Control section allows you to control access in and out of your network. Use this feature as Parental Controls to only 
grant access to approved sites, limit web access based on time or dates, and/or block access from applications like P2P utilities or 
games.
Click Next to continue with the wizard.
Access Control Wizard 
						

							42D-Link DIR-855 User Manual
Section 3 - Configuration
Enter  a  name  for  the  policy  and  then  click Next  to 
continue.
Select a schedule (I.E. Always) from the drop-down menu 
and then click Next to continue.
Enter  the  following  information  and  then  click Next  to 
continue.
• Address Type - Select IP address, MAC address, or Other 
Machines.
• IP Address - Enter the IP address of the computer you want 
to apply the rule to. 
						

							43D-Link DIR-855 User Manual
Section 3 - Configuration
Select  the  filtering  method  and  then  click Next  to 
continue.
Enter the rule:
 Enable - Check to enable the rule.
 Name - Enter a name for your rule.
 Dest IP Start - Enter the starting IP address.
 Dest IP End - Enter the ending IP address.
 Protocol - Select the protocol.
 Dest Port Start - Enter the starting port number.
 Dest Port End - Enter the ending port number.
To enable web logging, click Enable.
Click Save to save the access control rule. 
						

							44D-Link DIR-855 User Manual
Section 3 - Configuration
Add Website 
Filtering Rule:
Website URL/
Domain:
Website Filters
Select Allow or Deny.
Enter the keywords or URLs that you want to allow 
or block. Click Save Settings.
Website Filters are used to allow you to set up a list of allowed Web sites that can be used by multiple users through the network. 
To use this feature select to Allow or Deny, enter the domain or website and click Save Settings. You must also select Apply Web 
Filter under the Access Control section (page 40). 
						

							45D-Link DIR-855 User Manual
Section 3 - Configuration
Enter a name for the inbound filter rule.
Select Allow or Deny.
Check to enable rule.
Enter the starting IP address. Enter 0.0.0.0 if you 
do not want to specify an IP range.
Enter the ending IP address. Enter 255.255.255.255 
if you do not want to specify and IP range.
Click the Add button to apply your settings. You 
must  click Save  Settings  at  the  top  to  save  the 
settings.
This section will list any rules that are created. You 
may click the Edit icon to change the settings or 
enable/disable  the  rule,  or  click  the Delete  icon 
to remove the rule.
Name:
Action:
Enable:
Remote IP Start:
Remote IP End:
Add:
Inbound Filter 
Rules List:
The Inbound Filter option is an advanced method of controlling data received from the Internet. With this feature you can configure 
inbound data filtering rules that control data based on an IP address range.  Inbound Filters can be used with Virtual Server, Port 
Forwarding, or Remote Administration features.
Inbound Filters 
						

							46D-Link DIR-855 User Manual
Section 3 - Configuration
SPI  (Stateful  Packet  Inspection,  also  known  as  dynamic  packet  filtering) 
helps to prevent cyber attacks by tracking more state per session. It validates 
that the traffic passing through the session conforms to the protocol.
Select one of the following for TCP and UDP ports:
Endpoint Independent - Any incoming traffic sent to an open port will be 
forwarded to the application that opened the port. The port will close if idle 
for 5 minutes.
Address  Restricted  -  Incoming  traffic  must  match  the  IP  address  of  the 
outgoing connection.
Address + Port Restriction - Incoming traffic must match the IP address 
and port of the outgoing connection.
Enable this feature to protect your network from certain kinds of “spoofing” 
attacks. 
If an application has trouble working from behind the router, you can expose 
one computer to the Internet and run the application on that computer.
Note: Placing a computer in the DMZ may expose that computer to a variety 
of security risks. Use of this option is only recommended as a last reso\
rt.
Specify the IP address of the computer on the LAN that you want to have 
unrestricted Internet communication. If this computer obtains it’s IP address 
automatically using DHCP, be sure to make a static reservation on the Basic > DHCP page so that the IP address of the DMZ machine 
does not change.
Enable SPI:
NAT Endpoint 
Filtering:
Anti-Spoof Check:
Enable DMZ:
DMZ IP Address:
Firewall Settings
A firewall protects your network from the outside world. The DIR-855 offers a firewall type functionality. The SPI feature helps prevent 
cyber attacks. Sometimes you may want a computer exposed to the outside world for certain types of applications. If you choose 
to  expose  a  computer,  you  can  enable  DMZ.  DMZ  is  short  for  Demilitarized  Zone.  This  option  will  expose  the  chosen  computer 
completely to the outside world.