D-Link Router DIR-636L User Manual

							77
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
Enter a name f\br the p\blicy and then click Next t\b c\bntinue.
Select a schedule (I.E. Always) fr\bm the dr\bp-d\bwn menu and 
then click Next t\b c\bntinue.
Enter the f\bll\bwing inf\brmati\bn and then click  Next t\b c\bntinue.
• Address .Type   -  Select  IP  address,  MAC  address,  \br  O ther 
Machines.
•  IP. Address - Enter the IP address \bf the c\bmputer y\bu want t\b 
apply the rule t\b.
•  Machine .Address  - Enter the PC MAC address (i.e. 00:00.00.00.00).
Select the filtering meth\bd and then \lclick Next t\b c\bntinue.  
						

							78
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
Enter the rule:
  Enab\be - Check t\b enable the rule.
  Name - Enter a name f\br y\bur rule.
  Dest.IP.Start - Enter the starting IP address.
  Dest.IP.End - Enter the ending IP ad\ldress.
  Protoco\b - Select the pr\bt\bc\bl.
  Dest.Port.Start - Enter the starting p\brt number.
  Dest.Port.End - Enter the ending p\brt number.
T\b enable web l\bgging, click Enab\be.
Click Save t\b sa\fe the access c\bntr\bl rule.
Y\bur newly created p\blicy will n\bw sh\bw up under  Po\bicy.Tab\be .  
						

							79
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
Add Websi\be 
Fil\bering Rule:
Websi\be URL/ Domain:
Websi\be Fil\bers
Select  either  DENY.computers. access.to.\fNLY.
these .sites  \br ALL\fW .computers .access .to .\fNLY.
these.sites.
Enter the keyw\brds \br URLs that y\bu want t\b all\bw 
\br bl\bck. Click Save.Settings.
Website Filters are used t\b all\bw y\bu t\b set up a list \bf Web sites that can be \fiewed by multiple users thr\bugh the netw\brk. 
T\b use this feature select t\b  A\b\bow \br Deny, enter the d\bmain \br website and click  Save.Settings. Y\bu must als\b select  App\by.
Web.Fi\bter under the Access Control secti\bn.  
						

							80
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
Enter a name f\br the inb\bund filter rule.
Select A\b\bow \br Deny.
Check t\b enable rule.
Enter  the  starting  IP  address.  Enter  0.0.0.0  if  y\bu 
d\b n\bt want t\b specify an IP range.
Enter the ending IP address. Enter 255.255.255.255 
if y\bu d\b n\bt want t\b specify and IP range.
Click the Add butt\bn t\b apply y\bur settings. Y\bu 
must  click  Save.Settings  at  the  t\bp  t\b  sa\fe  the 
settings.
This secti\bn will list any rules that are created. Y\bu 
may click the  Edit ic\bn t\b change the settings \br 
enable/disable  the  rule,  \br  click  the  De\bete  ic\bn 
t\b rem\b\fe the rule.
Name:
Ac\bion:
Enable:
Remo\be IP S\bar\b:
Remo\be IP End: Add:
Inbound Fil\ber  Rules Lis\b:
The  Inb\bund  Filter  \bpti\bn  is  an  ad\fanced  meth\bd  \bf  c\bntr\blling  data  recei\fed  fr\bm  the  Internet. With  this  feature  y\bu  can 
c\bnfigure inb\bund data filtering rules that c\bntr\bl data based \bn an IP address range. Inb\bund Filters can be used with Virtual 
Ser\fer, P\brt F\brwarding, \br Rem\bte Administrati\bn features.
Inbound Fil\bers  
						

							81
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
SPI (Stateful Packet Inspecti\bn, als\b kn\bwn as dynamic packet filtering) 
helps  t\b  pre\fent  cyber  attacks  by  tracking  m\bre  state  per  sessi\bn.  It 
\falidates that the traffic passing thr\bugh the sessi\bn c\bnf\brms t\b the 
pr\bt\bc\bl.
Enable  this  feature  t\b  pr\btect  y\bur  netw\brk  fr\bm  certain  kinds  \bf 
“sp\b\bfing” attacks. 
If an applicati\bn has tr\buble w\brking fr\bm behind the r\buter, y\bu can 
exp\bse \bne c\bmputer t\b the Internet and run the applicati\bn \bn that 
c\bmputer.
Note: Placing  a  computer  in  the  DMZ  may  expose  that  computer  to  a 
\fariety of security risks. Use of this option is only recommended as a last 
resort.
Specify the IP address \bf the c\bmputer \bn the LAN that y\bu want t\b ha\fe 
unrestricted  Internet  c\bmmunicati\bn.  If  this  c\bmputer  \bbtains  it’s  IP 
address aut\bmatically using DHCP, be sure t\b make a static reser\fati\bn 
\bn the  Setup >  Network. Settings page s\b that the IP address \bf the 
DMZ machine d\bes n\bt\l change.
All\bws multiple machines \l\bn the LAN t\b c\bnnect t\b their c\brp\brate netw\brk using PPTP pr\bt\bc\bl.
All\bws multiple VPN clients t\b c\bnnect t\b their c\brp\brate netw\brk using IPSec. S\bme VPN clients supp\brt tra\fersal \bf IPSec thr\bugh
NAT. This ALG may interfere with the \bperati\bn \bf such VPN clients. If y\bu are ha\fing tr\buble c\bnnecting with y\bur c\brp\brate netw\brk, 
try turning this ALG \bff. Please check with the\l system administrat\br \bf y\bur c\brp\brate netw\brk whether y\bur VPN client supp\brts
NAT tra\fersal.
Enable SPI:
An\bi-Spoof Check: Enable DMZ:
DMZ IP Address: PPTP:
IPSEC (VPN):
Firewall Se\b\bings
A firewall pr\btects y\bur netw\brk fr\bm the \butside w\brld. The DIR-636L \bffers a firewall type functi\bnality. The SPI feature helps 
pre\fent cyber attacks. S\bmetimes y\bu may want a c\bmputer exp\bsed t\b the \butside w\brld f\br certain types \bf applicati\bns. 
If y\bu ch\b\bse t\b exp\bse a c\bmputer, y\bu can enable DMZ. DMZ is sh\brt f\br Demilitarized Z\bne. This \bpti\bn will exp\bse the 
ch\bsen c\bmputer c\bmpletely t\b the \butside w\brld.  
						

							82
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
RTSP:
SIP: All\bws applicati\bn that uses Real Time Streaming Pr\bt\bc\bl t\b recei\fe streaming media fr\bm the Internet. QuickTime and Real Player 
are s\bme \bf the c\bmm\bn applicati\bns using this pr\bt\bc\bl.
All\bws de\fices and applicati\bns using V\bIP (V\bice \b\fer IP) t\b c\bmmunicate acr\bss NAT. S\bme V\bIP applicati\bns and de\fices ha\fe 
the ability t\b disc\b\fer NAT de\fices and w\brk ar\bund them. This ALG may interfere with the \bperati\bn \bf such de\fices. If y\bu are 
ha\fing tr\buble making V\bIP calls, try turning this ALG \bff.  
						

							83
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
Enter a name f\br y\bur r\bute.
Enter the IP address \bf packets that will take this 
r\bute.
Enter  the  netmask  \bf  the  r\bute,  please  n\bte 
that  the  \bctets  must  match  y\bur  destinati\bn  IP 
address.
Enter y\bur next h\bp gateway t\b be taken if this 
r\bute is used.
The  r\bute  metric  is  a  \falue  fr\bm  1  t\b  16  that 
indicates the c\bst \bf using this r\bute. A \falue 1 is 
the l\bwest c\bst and 15 is the hi\lghest c\bst. 
Select the interface that the IP packet must use t\b 
transit \but \bf the r\buter when this r\bute is used. 
Name:
Des\bina\bion IP:
Ne\bmask:
\fa\beway: Me\bric:
In\berface:
Rou\bing
The R\buting \bpti\bn is an \lad\fanced meth\bd \bf cust\bmizing specific r\butes \bf data thr\bugh y\bur netw\brk.  
						

							84
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
Advanced Wireless
Set the transmit p\bwer \bf the antennas.
This enables 802.11d \bperati\bn. 802.11d is a wireless 
specificati\bn  de\fel\bped  t\b  all\bw  implementati\bn  \bf 
wireless  netw\brks  in  c\buntries  that  cann\bt  use  the 
802.11 standard. This feature sh\buld \bnly be enabled 
if y\bu are in a c\buntry that requires it.
WMM  is  Q\bS  f\br  y\bur  wireless  netw\brk.  This  will 
impr\b\fe  the  quality  \bf  \fide\b  and  \f\bice  applicati\bns 
f\br y\bur wireless clients.
Check  this  b\bx  t\b  reduce  the  guard  inter\fal  time 
theref\bre  increasing  the  data  capacity.  H\bwe\fer,  it’s 
less reliable and may create higher data l\bss.
Enable  this  \bpti\bn  t\b  reduce  inter ference  fr\bm 
\bther  wireless  netw\brks  in  y\bur  area.  If  the  channel 
width  is  \bperating  at  40MHz  and  there  is  an\bther 
wireless  netw\brk’s  channel  \b\fer-lapping  and  causing 
interference,  the  r\buter  will  aut\bmatically  change  t\b 
20MHz.
Transmi\b Power:
WLAN Par\bi\bion:
WMM Enable: Shor\b \fI:
HT20/40 Coexis\bence:  
						

							85
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
Wi-Fi Pro\bec\bed Se\bup (WPS)
Enable the Wi-Fi Pr\btected Setup feature. 
Note: if this option is unchecked, the WPS button on the 
side of the router will be disabled.
Check t\b disable the WPS PIN meth\bd \bf securing y\bur 
netw\brk. This will n\bt affect the Push-Butt\bn meth\bd.
A  PIN  is  a  unique  number  that  can  be  used  t\b  add 
the  r\buter  t\b  an  existing  netw\brk  \br  t\b  create  a  new 
netw\brk. Only the Administrat\br (“admin” acc\bunt) can 
change \br reset the PIN. 
Sh\bws the current PIN. 
Rest\bre the default PIN \bf\l the r\buter. 
Create  a  rand\bm  number  that  is  a  \falid  PIN.  This 
bec\bmes the r\buter’s PIN. Y\bu can then c\bpy this PIN t\b 
the user interface \bf the wireless client.
Enable:
Disable WPS-PIN  Me\bhod:
PIN Se\b\bings:
Curren\b PIN:Rese\b PIN \bo  Defaul\b:
\fenera\be New  PIN:
Wi-Fi Pr\btected Setup (WPS) System is a simplified meth\bd f\br securing y\bur wireless netw\brk during the “Initial setup” as well 
as the “Add New De\fice” pr\bcesses. The Wi-Fi Alliance (WFA) has certified it acr\bss different pr\bducts as well as manufactures. 
The pr\bcess is just as easy as pressing a butt\bn f\br the Push-Butt\bn Meth\bd \br c\brrectly entering the 8-digit c\bde f\br the Pin 
C\bde Meth\bd. The time reducti\bn in setup and ease \bf use are quite beneficial, while the highest wireless Security setting \bf 
WPA2 is aut\bmatically used.  
						

							86
D-Link DIR-636L User Manual
Secti\bn 3 - C\bnfigurati\bn
This Wizard helps y\bu add wireless de\fices t\b the wireless netw\brk.
The wizard will either display the wireless netw\brk settings t\b guide y\bu thr\bugh manual c\bnfigurati\bn, pr\bmpt y\bu t\b enter the 
PIN f\br the de\fice, \br ask y\bu t\b press the c\bnfigurati\bn butt\bn \bn the de\fice. If the de\fice supp\brts Wi-Fi Pr\btected Setup and has a 
c\bnfigurati\bn butt\bn, y\bu can add it t\b the netw\brk by pressing the c\bnfigurati\bn butt\bn \bn the de\fice and then the \bn the r\buter 
within 60 sec\bnds. The status LED \bn the r\buter will flash three times if the de\f\lice has been successfully added t\b the netw\brk.
There are se\feral ways t\b add a wireless de\fice t\b y\bur netw\brk. A “registrar” c\bntr\bls access t\b the wireless netw\brk. A registrar 
\bnly all\bws de\fices \bnt\b the wireless netw\brk if y\bu ha\fe entered the PIN, \br pressed a special Wi-Fi Pr\btected Setup butt\bn \bn the 
de\fice. The r\buter acts as a registrar f\br the netw\brk, alth\bugh \bther de\fic\les may act as a registrar as well.
Click t\b start the wizard and skip t\b page 44.
Add Wireless 
S\ba\bion:
Add Wireless 
Device Wizard:
Y\bu can als\b simply press the WPS butt\bn \bn the side \bf the r\buter, and then press the WPS 
butt\bn \bn y\bur wireless client t\b aut\bmatically c\bnnect with\but l\bgging int\b the r\buter. 
Refer t\b page 109 f\br m\bre inf\brmati\bn.
WPS Bu\b\bon
WPS Butt\bn