D-Link Router AC1200 User Manual

							87
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
Enter  a  name  for  the  ru\fe.  You  may  se\fec t  a   
pre-defined app\fication from the drop-down menu 
and c\fick 
						

							88
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
QoS Engine
The QoS En\bine option he\fps imp\urove your network \bamin\b performance by 
prioritizin\b app\fications. By defau\ft the QoS En\bine settin\bs are disab\fed and 
app\fication priority is not c\fassified \uautomatica\f\fy. The QoS section contains a 
queuin\b mechanism, tr\uaffic shapin\b and c\fas\usification. It supports two kinds 
of queuin\b mechanism\us. Strict Priority Queue (SPQ) and Wei\bhted Fair Queue 
(WFQ). SPQ wi\f\f process traffic based on traffic priority. Queue1 has the hi\bhest 
priority and Queue4 has the \fowest priority. WFQ wi\f\f process traffic based on 
the queue wei\bht. Users can confi\bure each queue’s wei\bht. The sum of a\f\f the queu\ue’s wei\bht must be 100. When surfin\b the Internet, the system wi\f\f do 
traffic shapin\b based o\un the up\fink and down\fink speed. The c\fassification ru\fes can be us\ued to c\fassify traffic to different queues, then SPQ or WFQ wi\f\f 
do QoS based on the queu\ue’s priority or wei\bht.
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
Enable QoS: This option is disab\u\fed by defau\ft. Enab\fe this option\u for 
better performance and experience with on\fine \bames a\und 
other interactive app\fications, such as VoIP.
Uplink Speed: The speed at which data can be transferred from the 
router to your ISP. This is determined by your ISP. ISP’s often 
define speed as a d\uown\foad/up\foad pair. For examp\fe, 
1.5Mbits/284Kbits. Usin\b this examp\fe, you wou\fd enter 
284. A\fternative\fy you can test your up\fink speed with \ua 
service such as www.ds\freports.com.
Downlink Speed: The speed at which data can be transferred from the ISP 
to the router. This is determined by your ISP. ISP’s often 
define speed as a d\uown\foad/up\foad pair. For examp\fe, 
1.5Mbits/284Kbits. 
Usin\b this examp\fe, you wou\fd enter 1500. A\fternative\fy 
you can test your down\fink speed with a s\uervice such as 
www.ds\freports.com.
Queue Type: Here the user can speci\ufy the queue type used. When choosin\b the opti\uon Strict Priority Queue, the router wi\f\f app\fy QoS based on the 
interna\f specification for the queue ID’s \fisted. When choosin\b the opti\uon Wei\bht Fair Queue, the router wi\f\f app\fy QoS based on the user\u 
defined percenta\be in the Queue Wei\bht co\fumn.
Queue ID:In this co\fumn the Queue ID used wi\f\f be d\uisp\fayed.  
						

							89
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
The fo\f\fowin\b parameters wi\f\f be avai\fab\fe for confi\buration:
\fheckbox: Tick this option to enab\fe the ru\fe spe\ucified.
Name: Enter a custom name for the ru\fe bein\b created here. 
This name is used for identification.
Queue ID: Se\fect the appropriate priority requirement from the 
drop-down menu that wi\f\f be app\fied to this ru\fe. Op -
tion to choose from are Hi\bhest, Hi\bher, Norma\f, and 
Best Effort.
Protocol: Se\fect the protoco\f used for the app\fication for in the 
drop-down menu and it wi\f\f au\utomatica\f\fy p\face it in 
the Protoco\f fie\fd.
Local IP Range: Enter the \foca\f IP ran\be used here. This is the IP ran\be 
of you Loca\f Area Network. The Router’s IP cannot be 
inc\fuded in this ran\be.
Remote IP 
Range: Enter the remote IP ran\be used here. This is the IP 
ran\be of the pub\fic ne\utwork from the Internet Port 
side. To app\fy this ru\fe to any IP addresses from the 
pub\fic side, enter the ran\be 0.0.0.1 to 255.255.255.254.\u
Application 
Port:Enter the app\fication port number used here.
C\fick on the Save Settings button to accept the chan\bes made.
C\fick on the Don’t Save Settings button to discard the chan\bes made. After specifyin\b the QoS framework used, in the QoS setup section, the user can n\uow create individua\f ru\fes f\uor scenarios that require the use of 
traffic contro\f and data priority manipu\fation.
Queue Priority: In this co\fumn the Queue Priority used wi\f\f be disp\fa\uyed.
Queue Weight: After choosin\b to use the Wei\bht Fair Queue option, under Q\uueue Type, the user wi\f\f be ab\f\ue to manua\f enter 
the Queue Wei\bht for each individua\f Q\uueue ID.  
						

							90
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
Network Filters
Se\fect .Turn .MAC .Fi\btering .\fff , A\b\bow .MAC .addresses.
\bisted .be\bow , or Deny .MAC .addresses .\bisted .be\bow 
from the drop-down menu. 
Enter the MAC address you wou\fd \fike to fi\fter.
To find the MAC address on a computer, p\fease refer 
to the  Networking Basics  section in this manua\f. 
Se\fect a DHCP c\fient from the drop-down menu and 
c\fick  
						

							91
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
Access \fontrol
C\fick  the  Add.Po\bicy   button  to  start  the  Access 
Contro\f Wizard. 
Add Policy:
The Access Contro\f section a\f\fows you to contro\f access in and out of your network. Use this feature as Parenta\f Contro\fs to 
on\fy \brant access to approved sites, \fimit web access based on time or dates, and/or b\fock access from app\fications \fike P2P 
uti\fities or \bames.
C\fick Next to continue with the wizard.
Access \fontrol Wizard
DIR-850L  
						

							92
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
Enter a name for the po\ficy and then c\fick Next to continue.
Se\fect a schedu\fe (I.E. A\fways) from the drop-down menu and 
then c\fick Next to continue.
Enter the fo\f\fowin\b information and then c\fick  Next to continue.
• Address .Type   -  Se\fect  IP  address,  MAC  address,  or  O ther 
Machines.
•  IP. Address - Enter the IP address of the computer you want to 
app\fy the ru\fe to.
•  Machine .Address  - Enter the PC MAC address (i.e. 00:00.00.00.00).
Se\fect the fi\fterin\b method and then c\u\fick Next to continue.  
						

							93
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
Enter the ru\fe:
  Enab\be - Check to enab\fe the ru\fe.
  Name - Enter a name for your ru\fe.
  Dest.IP.Start - Enter the startin\b IP address.
  Dest.IP.End - Enter the endin\b IP add\uress.
  Protoco\b - Se\fect the protoco\f.
  Dest.Port.Start - Enter the startin\b port number.
  Dest.Port.End - Enter the endin\b port number.
To enab\fe web \fo\b\bin\b, c\fick Enab\be.
C\fick Save to save the access contro\f ru\fe.
Your new\fy created po\ficy wi\f\f now show up under  Po\bicy.Tab\be .  
						

							94
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
Add Website 
Filtering Rule:
Website URL/ Domain:
Website Filters
Se\fect  either  DENY.computers. access.to.\fNLY.
these .sites  or ALL\fW .computers .access .to .\fNLY.
these.sites.
Enter the keywords or URLs that you want to a\f\fow 
or b\fock. C\fick Save.Settings.
Website Fi\fters are used to a\f\fow you to set up a \fist of Web sites that can be viewed by mu\ftip\fe users throu\bh the network. 
To use this feature se\fect to  A\b\bow or Deny, enter the domain or website and c\fick  Save.Settings. You must a\fso se\fect  App\by.
Web.Fi\bter under the Access Control section.  
						

							95
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
Enter a name for the inbound fi\fter ru\fe.
Se\fect A\b\bow or Deny.
Check to enab\fe ru\fe.
Enter  the  startin\b  IP  address.  Enter  0.0.0.0  if  you 
do not want to specify an IP ran\be.
Enter the endin\b IP address. Enter 255.255.255.255 
if you do not want to specify and IP r\uan\be.
C\fick the Add button to app\fy your settin\bs. You 
must  c\fick  Save.Settings  at  the  top  to  save  the 
settin\bs.
This section wi\f\f \fist any ru\fes that are created. You 
may c\fick the  Edit icon to chan\be the settin\bs or 
enab\fe/disab\fe  the  ru\fe,  or  c\fick  the  De\bete  icon 
to remove the ru\fe.
Name:
Action:
Enable:
Remote IP Start:
Remote IP End: Add:
Inbound Filter  Rules List:
The  Inbound  Fi\fter  option  is  an  advanced  method  of  contro\f\fin\b  data  received  from  the  Internet. With  this  feature  you  can 
confi\bure inbound data fi\fterin\b ru\fes that contro\f data based on an IP address ran\be. Inbound Fi\fters can be used with Virtua\f 
Server, Port Forwardin\b, or Remote Administration features.
Inbound Filters  
						

							96
D-Link DIR-850L User Manua\f
Section 3 - Confi\buration
SPI (Statefu\f Packet Inspection, a\fso known as dynamic packet fi\fterin\b) 
he\fps  to  prevent  cyber  attacks  by  trackin\b  more  state  per  session.  It 
va\fidates that the traffic passin\b throu\bh the session conforms to the 
protoco\f.
Enab\fe  this  feature  to  protect  your  network  from  certain  kinds  of 
“spoofin\b” attacks. 
Enable SPI:
Anti-Spoof \fheck:
Firewall Settings
A firewa\f\f protects your network from the outside wor\fd. The DIR-850L offers a firewa\f\f type functiona\fity. The SPI feature he\fps 
prevent cyber attacks. Sometimes you may want a computer exposed to the outside wor\fd for certain types of app\fications. 
If you choose to expose a computer, you can enab\fe DMZ. DMZ is short for Demi\fitarized Zone. This option wi\f\f expose the 
chosen computer comp\fete\fy to the outside wor\fd.
DIR-850L