D-Link Dir825 B1 Manual

							76D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
Enter a name for the inbound fi\fter ru\fe.
Se\fect A\b\bow or Deny.
Check to enab\fe ru\fe.
Enter  the  startin\b  IP  address.  Enter  0.0.0.0  if  you 
do not want to specify an IP ran\be.
Enter the endin\b IP address. Enter 255.255.255.255 
if you do not want to specify and IP r\uan\be.
C\fick the Add button to app\fy your settin\bs. You 
must  c\fick Save.Settings  at  the  top  to  save  the 
settin\bs.
This section wi\f\f \fist any ru\fes that are created. You 
may c\fick the Edit icon to chan\be the settin\bs or 
enab\fe/disab\fe  the  ru\fe,  or  c\fick  the De\bete  icon 
to remove the ru\fe.
Name:
A\ftion:
Enable:
Remote IP Start:
Remote IP End:
Add:
Inbound Filter 
Rules List:
The  Inbound  Fi\fter  option  is  an  advanced  method  of  contro\f\fin\b  data  received  from  the  Internet. With  this  feature  you  can 
confi\bure inbound data fi\fterin\b ru\fes that contro\f data based on an IP address ran\be. Inbound Fi\fters can be used with Virtua\f 
Server, Port Forwardin\b, or Remote Administration features.
Inbound Filters  
						

							77D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
SPI (Statefu\f Packet Inspection, a\fso known as dynamic packet fi\fterin\b) 
he\fps  to  prevent  cyber  attacks  by  trackin\b  more  state  per  session.  It 
va\fidates that the traffic passin\b throu\bh the session conforms to the 
protoco\f.
Enab\fe  this  feature  to  protect  your  network  from  certain  kinds  of 
“spoofin\b” attacks. 
If an app\fication has troub\fe workin\b from behind the router, you can 
expose one computer to the Internet and run the app\fication on that 
computer.
Note: Placing  a  computer  in  the  DMZ  may  expose  that  computer  to  a 
\fariety of security risks. Use of this option is only recommended as a last 
resort.
Specify the IP address of the computer on the LAN that you want to have 
unrestricted  Internet  communication.  If  this  computer  obtains  it’s  IP 
address automatica\f\fy usin\b DHCP, be sure to make a static reservation 
on the Setup > Network.Settings pa\be so that the IP address of the 
DMZ machine does no\ut chan\be.
A\f\fows mu\ftip\fe machines o\un the LAN to connect to their corporate network usin\b PPTP protoco\f.
A\f\fows mu\ftip\fe VPN c\fients to connect to their corporate network usin\b IPSec. Some VPN c\fients support traversa\f of IPSec throu\bh
NAT. This ALG may interfere with the operation of such VPN c\fients. If you are havin\b troub\fe connectin\b with your corporate network, 
try turnin\b this ALG off. P\fease check with the s\uystem administrator of your corporate network whether your VPN c\fient supports
NAT traversa\f.
Enable SPI:
Anti-Spoof Che\fk:
Enable DMZ:
DMZ IP Address:
PPTP:
IPSEC (VPN):
Firewall Settings
A firewa\f\f protects your network from the outside wor\fd. The DIR-825 offers a firewa\f\f type functiona\fity. The SPI feature he\fps 
prevent cyber attacks. Sometimes you may want a computer exposed to the outside wor\fd for certain types of app\fications. 
If you choose to expose a computer, you can enab\fe DMZ. DMZ is short for Demi\fitarized Zone. This option wi\f\f expose the 
chosen computer comp\fete\fy to the outside wor\fd.  
						

							78D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
RTSP:
SIP:
A\f\fows app\fication that uses Rea\f Time Streamin\b Protoco\f to receive streamin\b media from the Internet. QuickTime and Rea\f P\fayer 
are some of the common app\fications usin\b this protoco\f.
A\f\fows devices and app\fications usin\b VoIP (Voice over IP) to communicate across NAT. Some VoIP app\fications and devices have 
the abi\fity to discover NAT devices and work around them. This ALG may interfere with the operation of such devices. If you are 
havin\b troub\fe makin\b VoIP ca\f\fs, try turnin\b this ALG off.  
						

							79D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
Enter the IP address of packets that wi\f\f take this 
route.
Enter  the  netmask  of  the  route,  p\fease  note 
that  the  octets  must  match  your  destination  IP 
address.
Enter your next hop \bateway to be taken if this 
route is used.
The  route  metric  is  a  va\fue  from  1  to  16  that 
indicates the cost of usin\b this route. A va\fue 1 is 
the \fowest cost and 15 is the hi\u\bhest cost. 
Se\fect the interface that the IP packet must use to 
transit out of the router when this route is used. 
Destination IP:
Netmask:
Gateway:
Metri\f:
Interfa\fe:
Routing
The Routin\b option is an \uadvanced method of customizin\b specific routes of data throu\bh your network.  
						

							80D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
Advan\fed Wireless
Set the transmit power of the antennas.
This enab\fes 802.11d operation. 802.11d is a wire\fess 
specification  deve\foped  to  a\f\fow  imp\fementation  of 
wire\fess  networks  in  countries  that  cannot  use  the 
802.11 standard. This feature shou\fd on\fy be enab\fed 
if you are in a country that requires it.
WMM  is  QoS  for  your  wire\fess  network.  This  wi\f\f 
improve  the  qua\fity  of  video  and  voice  app\fications 
for your wire\fess c\fients.
Check  this  box  to  reduce  the  \buard  interva\f  time 
therefore increasin\b the data capacity.  However, it’s 
\fess re\fiab\fe and may create hi\bher data \foss.
Se\fect to Enab\fe or Disab\fe\u this feature. 
Transmit Power:
WLAN Partition:
WMM Enable:
Short GI:
HT20/40 Coexisten\fe 
(2.4GHz only):  
						

							81D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
Wi-Fi Prote\fted Setup (WPS)
Enab\fe the Wi-Fi Protected Setup feature. 
Note: if this option is unchecked, the WPS button on the 
side of the router will be disabled.
Lockin\b  the  wire\fess  security  settin\bs  prevents  the 
settin\bs  from  bein\b  chan\bed  by  the  Wi-Fi  Protected 
Setup feature of the router. Devices can sti\f\f be added 
to the network usin\b Wi-Fi Protected Setup. However, 
the  settin\bs  of  the  network  wi\f\f  not  chan\be  once  this 
option is checked.
A  PIN  is  a  unique  number  that  can  be  used  to  add 
the  router  to  an  existin\b  network  or  to  create  a  new 
network. On\fy the Administrator (“admin” account) can 
chan\be or reset the PIN. 
Shows the current PIN. 
Restore the defau\ft PIN of \uthe router. 
Create  a  random  number  that  is  a  va\fid  PIN.  This 
becomes  the  router’s  PIN. You  can  then  copy  this  PIN 
to the user interface of the wire\fess c\fient.
Enable:
Lo\fk Wireless 
Se\furity 
Settings:
PIN Settings:
Current PIN:
Reset PIN to 
Default:
Generate New 
PIN:
Wi-Fi Protected Setup (WPS) System is a simp\fified method for securin\b your wire\fess network durin\b the “Initia\f setup” as we\f\f 
as the “Add New Device” processes. The Wi-Fi A\f\fiance (WFA) has certified it across different products as we\f\f as manufactures. 
The process is just as easy as pressin\b a button for the Push-Button Method or correct\fy enterin\b the 8-di\bit code for the Pin 
Code Method. The time reduction in setup and ease of use are quite beneficia\f, whi\fe the hi\bhest wire\fess Security settin\b of 
WPA2 is automatica\f\fy used.  
						

							82D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
This Wizard he\fps you add wire\fess devices to the wire\fess network.
The wizard wi\f\f either disp\fay the wire\fess network settin\bs to \buide you throu\bh manua\f confi\buration, prompt you to enter the 
PIN for the device, or ask you to press the confi\buration button on the device. If the device supports Wi-Fi Protected Setup and has a 
confi\buration button, you can add it to the network by pressin\b the confi\buration button on the device and then the on the router 
within 60 seconds. The status LED on the router wi\f\f flash three times if the devi\uce has been successfu\f\fy added to the network.
There are severa\f ways to add a wire\fess device to your network. A “re\bistrar” contro\fs access to the wire\fess network. A re\bistrar 
on\fy a\f\fows devices onto the wire\fess network if you have entered the PIN, or pressed a specia\f Wi-Fi Protected Setup button on the 
device. The router acts as a re\bistrar for the network, a\fthou\bh other devic\ues may act as a re\bistrar as we\f\f.
C\fick to start the wizard and skip to pa\be 41.
Add Wireless 
Station:
Add Wireless 
Devi\fe Wizard:
You can a\fso simp\fy press the WPS button on the side of the router, and then press the WPS 
button on your wire\fess c\fient to automatica\f\fy connect without \fo\b\bin\b into the router. 
Refer to pa\be 106 for more information.
WPS Button  
						

							83D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
To use the Universa\f P\fu\b and P\fay (UPnP™) feature c\fick on 
Enab\bed.  UPnP  provides  compatibi\fity  with  networkin\b 
equipment, software and periphera\fs.
Checkin\b  the  box  wi\f\f  a\f\fow  the  DIR-825  to  respond  to 
pin\bs.  Uncheckin\b  the  box  may  provide  some  extra 
security from hackers.
Se\fect from the drop-down menu if you wou\fd \fike to app\fy 
the Inbound Fi\fter to the WAN pin\b. Refer to the Inbound 
Fi\fters section for more information.
You may set the port speed of the Internet port to 10Mbps, 
100Mbps, 1000Mbps, or Auto (recommended). 
Check  the  box  to  a\f\fow  mu\fticast  traffic  to  pass  throu\bh 
the router from the Internet (IPv4).
Check  the  box  to  a\f\fow  mu\fticast  traffic  to  pass  throu\bh 
the router from the Internet (IPv6).
Enable UPnP:
WAN Ping:
WAN Ping Inbound 
Filter:
WAN Port Speed:
Enable IPV4 
Multi\fast Streams:
Enable IPV6 
Multi\fast Streams:
Advan\fed Network Settings  
						

							84D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
Guest Zone
Check to enab\fe the Guest Zone feature. 
The  schedu\fe  of  time  when  the  Guest  Zone  wi\f\f  be 
active. The schedu\fe may be set to A\fways, which wi\f\f 
a\f\fow the particu\far service to a\fways be enab\fed. You 
can create your own times in the Too\bs > Schedu\bes 
section.
Enter a wire\fess network name (SSID) that is different 
from your main wire\fess network.
Check  to  a\f\fow  network  connectivity  between  the 
different zones created. 
Se\fect the type of security or encryption you wou\fd 
\fike to enab\fe for the \buest zone.  
Enable Guest 
Zone:
S\fhedule:
Wireless 
Network Name:
Enable Routing 
Between Zones:
Se\furity Mode:
The Guest Zone feature wi\f\f a\f\fow you to create temporary zones that can be used by \buests to access the Internet. These zones 
wi\f\f be separate from your main wire\fess network. You may confi\bure different zones for the 2.4GHz and 5GHz wire\fess bands.  
						

							85D-Link DIR-825 User Manua\f
Section 3 - Confi\buration
IPv6 Firewall
The DIR-825’s IPv6 Firewa\f\f feature a\f\fows you to confi\bure which kind of IPv6 traffic is a\f\fowed to pass throu\bh the device. The 
DIR-825’s IPv6 Firewa\f\f functions in a simi\far \uway to the IP Fi\fters feature.
Check the box to enab\fe the IPv6 firewa\f\f simp\fe security.
Se\fect an action from the drop-down menu.
Enter a name to identify the IPv6 firewa\f\f ru\fe.
Use the drop-down menu to se\fect the time schedu\fe that 
the IPv6 Firewa\f\f Ru\fe wi\f\f be enab\fed on. The schedu\fe may 
be set to A\bways, which wi\f\f a\f\fow the particu\far service to 
a\fways  be  enab\fed. You  can  create  your  own  times  in  the 
Tools > S\fhedules section. 
Use  the Sour\fe  drop-down  menu  to  specify  the  interface 
that  connects  to  the  source  IPv6  addresses  of  the  firewa\f\f 
ru\fe. 
Enter  the  source  IPv6  address  ran\be  in  the  adjacent IP 
Address Range fie\fd.
Use the Dest drop-down menu to specify the interface that connects to the destination IP addresses of the firewa\f\f ru\fe. 
Se\fect the protoco\f of the firewa\f\f port (A\b\b, TCP, UDP, or ICMP).
Enter the first port of the ran\be that wi\f\f be used for the firewa\f\f ru\fe in the first box and enter the \fast port in the fie\fd in the second 
box.
Enable Che\fkbox:
Configure IPv6 
Firewall:
Name:
S\fhedule:
Sour\fe:
IP Address Range:
Dest:
   Proto\fol:
Port Range: