D-Link Router DIR-865L User Manual

							46D-Link DIR-865L User Manua\f
Section 4 - Security
Wireless Se\furity
This  section  wi\f\f  show  you  the  different  \feve\fs  of  security  you  can  use  to  protect  your  data  from  intruders.  The  DIR-865L  offers  the 
fo\f\fowin\b types of security:
 • WPA2 (Wi-Fi Protected Access 2)       • WPA2-PSK (Pre-Shared Key)
 • WPA (Wi-Fi Protected Access)        • WPA-PSK (Pre-Shared Key)
What is WPA?
WPA (Wi-Fi Protected Access), is a Wi-Fi standard that was desi\bned to improve the security features of WEP (Wired Equiva\fent Privacy).  
The 2 major improvements over WEP: 
• Improved data encryption throu\bh the Tempora\f Key Inte\brity Protoco\f (TKIP). TKIP scramb\fes the keys usin\b a hashin\b 
a\f\borithm  and,  by  addin\b  an  inte\brity-checkin\b  feature,  ensures  that  the  keys  haven’t  been  tampered  with. WPA2  is 
based on 802.11i a\und uses Advanced Encryption Standard (AES) instead of TKIP.
• User  authentication,  which  is  \benera\f\fy  missin\b  in  WEP,  throu\bh  the  extensib\fe  authentication  protoco\f  (EAP).  WEP 
re\bu\fates access to a wire\fess network based on a computer’s hardware-specific MAC address, which is re\fative\fy simp\fe 
to be sniffed out and sto\fen. EAP is bui\ft on a more secure pub\fic-key encryption system to ensure that on\fy authorized 
network users can access the network.
WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wire\fess connection. The key is an a\fpha-numeric password between 
8 and 63 characters \fon\b. The password can inc\fude symbo\fs (!?*&_) and spaces. This key must be the exact same key entered on your 
wire\fess router or access point.
WPA/WPA2 incorporates user authentication throu\bh the Extensib\fe Authentication Protoco\f (EAP). EAP is bui\ft on a more secure pub\fic 
key encryption system to ensure that on\fy authorized network users can access the network.  
						

							47D-Link DIR-865L User Manua\f
Section 4 - Security
WPA/WPA2-Personal (PSK)
It  is  recommended  to  enab\fe  encryption  on  your  wire\fess  router  before  your  wire\fess  network  adapters.  P\fease  estab\fish 
wire\fess  connectivity  before  enab\fin\b  encryption. Your  wire\fess  si\bna\f  may  de\brade  when  enab\fin\b  encryption  due  to  the 
added overhead.
1. Lo\b into the web-based confi\buration by openin\b a web browser and 
enterin\b the IP address of the router (192.168.0.1). C\fick on.Setup .and 
then c\fick.Wire\bess.Settings on the \feft side.
2. Next to Security Mode, se\fect WPA-Persona\b.
3.  Next to WPA Mode, se\fect Auto, WPA2. \fn\by, or.WPA. \fn\by. Use Auto 
if you have wire\fess c\fients usin\b both WPA and WPA2.
4. Next to Cypher Type, se\fect TKIP.and.AES, TKIP, or AES.
5.  Next  to Group  Key  Update  Inter\fal,  enter  the  amount  of  time  before 
the \broup key used for broadcast and mu\fticast data is chan\bed (3600 
is defau\ft).
6. Next to Pre-Shared Key, enter a key (passphrase). The key is entered as 
a pass-phrase in ASCII format at both ends of the wire\fess connection. 
The pass-phrase must be between 8-63 characters. 
7. C\fick Save. Settings to save your settin\bs. If you are confi\burin\b the router with a wire\fess adapter, you wi\f\f \fose connectivity 
unti\f you enab\fe WPA-PSK on your adapter and enter the same passphrase as you did on the router.  
						

							48D-Link DIR-865L User Manua\f
Section 4 - Security
It  is  recommended  to  enab\fe  encryption  on  your  wire\fess  router  before  your  wire\fess  network  adapters.  P\fease  estab\fish 
wire\fess  connectivity  before  enab\fin\b  encryption. Your  wire\fess  si\bna\f  may  de\brade  when  enab\fin\b  encryption  due  to  the 
added overhead.
1. Lo\b into the web-based confi\buration by openin\b a web browser and 
enterin\b the IP address of the router (192.168.0.1). C\fick on.Setup.
and then c\fick.Wire\bess.Settings on the \feft side.
2.  Next to Security Mode, se\fect WPA-Enterprise.
3. Next to WPA Mode, se\fect Auto, WPA2 .\fn\by, or.WPA .\fn\by. Use Auto 
if you have wire\fess c\fients usin\b both WPA and WPA2.
4.  Next to Cypher Type, se\fect TKIP.and.AES, TKIP, or AES.
5. Next to Group Key Update Inter\fal, enter the amount of time before 
the  \broup  key  used  for  broadcast  and  mu\fticast  data  is  chan\bed 
(3600 is defau\ft).
6. Next to Authentication Timeout, enter the amount of time before a 
c\fient is required to re-authenticate (60 minutes is defau\ft). 
7. Next to \bADIUS Ser\fer IP Address enter the IP Address of your RADIUS 
server.
Configure WPA/WPA2-Enterprise (RADIUS)  
						

							49D-Link DIR-865L User Manua\f
Section 4 - Security
8. Next  to \bADIUS  Ser\fer  Port,  enter  the  port  you  are  usin\b  with 
your RADIUS server. 1812 is the defau\f\ut port.
9. Next to \bADIUS Ser\fer Shared Secret, enter the security key.
10. If the MAC Address Authentication box is se\fected then the user 
wi\f\f need to connect from the same computer whenever \fo\b\bin\b 
into the wire\fess network.
11. C\fick Advanced to enter settin\bs for a secondary RADIUS Server.
12. C\fick App\by.Settings to save your settin\bs.  
						

							50D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
This section wi\f\f a\f\fow you to chan\be the \foca\f ne\utwork settin\bs of the router and to confi\bure the DHCP settin\bs.
Network Settings
Enter the IP address of the router. The defau\ft IP address 
is 192.168.0.1.
If you chan\be the IP address, once you c\fick Save.Settings, 
you wi\f\f need to enter the new IP address in your browser 
to \bet back into the confi\buration uti\fity.
Enter  the  Subnet  Mask.  The  defau\ft  subnet  mask  is 
255.255.255.0.
Enter a name for the router.
Enter the Domain name (Optiona\f).
Uncheck the box to transfer the DNS server information 
from  your  ISP  to  your  computers.  I f  checked,  your 
computers wi\f\f use the router for a DNS server.
Router IP Address:
Subnet Mask:
Devi\fe Name:
Lo\fal Domain:
Enable DNS Relay:
Router Settings  
						

							51D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
DHCP Server Settings
DHCP stands for Dynamic Host Contro\f Protoco\f. The DIR-865L has a bui\ft-in DHCP server. The DHCP Server wi\f\f automatica\f\fy 
assi\bn an IP address to the computers on the LAN/private network. Be sure to set your computers to be DHCP c\fients by settin\b 
their TCP/IP settin\bs to “Obtain an IP Address Automatica\f\fy.” When you turn your computers on, they wi\f\f automatica\f\fy \foad 
the proper TCP/IP settin\bs provided by the DIR-865L. The DHCP Server wi\f\f automatica\f\fy a\f\focate an unused IP address from 
the IP address poo\f to the requestin\b computer. You must specify the s\utartin\b and endin\b addr\uess of the IP address poo\f.
Check  this  box  to  enab\fe  the  DHCP  server  on  your  router. 
Uncheck to disab\fe this function.
Enter the startin\b and endin\b IP addresses for the DHCP server’s 
IP assi\bnment.
Note: If  you  statically  (manually)  assign  IP  addresses  to  your 
computers  or  de\fices,  make  sure  the  IP  addresses  are  outside  of 
this range or you may ha\fe an IP conflict. 
The \fen\bth of time for the IP address \fease. Enter the Lease time 
in minutes.
Enab\fe this feature to broadcast your networks DHCP server to 
LAN/WLAN c\fients.
NetBIOS a\f\fows LAN hosts to discover a\f\f other computers within 
the  network,  enab\fe  this  feature  to  a\f\fow  the  DHCP  Server  to 
offer NetBIOS confi\buration settin\bs.
Enab\fe this feature to a\f\fow WINS information to be \fearned from the WAN side, disab\fe to a\f\fow manua\f confi\buration.
This feature a\f\fows the confi\buration of a NetBIOS ‘domain’ name under which network hosts operates. This settin\b has no effect if 
the ‘Learn NetBIOS information from WAN’ is activated.
Enable DHCP 
Server:
DHCP IP Address 
Range:
DHCP Lease Time:
Always 
Broad\fast:
NetBI\bS 
Announ\fement:
Learn NetBI\bS 
from WAN:
NetBI\bS S\fope:  
						

							52D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
NetBI\bS Node:
WINS IP 
Address:
Se\fect the different type of NetBIOS node\u; Broadcast.on\by, Point-to-Point, Mixed-mode, and Hybrid.
Enter your WINS Server IP address(es).  
						

							53D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
DHCP Reservation
If you want a computer or device to a\fways have the same IP address assi\bned, you can create a DHCP reservation. The router wi\f\f assi\bn the IP 
address on\fy to that computer or device. 
Note: This IP address must be within the DHCP I\ffP Address \bange.
Check this box to enab\fe the reservation.
Enter the computer name or se\fect from the drop-down 
menu and c\fick 
						

							54D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Parental Control
Advan\fed DNS:
FamilyShield:
Parental Controls:
None:
Faster, more re\fiab\fe Internet browsin\b.
Inc\fudes Advanced DNS and automatic protection 
from ma\fware, phishin\b, and adu\ft websites. This 
option uses OpenDNS\u.
I n c \f u d e s   Ad v a n c e d   D N S ,   Fa m i \f y S h i e \f d,   a n d 
customizab\fe  b\fockin\b  of  ma\fware  and  phishin\b 
sites.  You  may  a\fso  customize  fi\fterin\b  of  web 
content by cate\bory. This option uses Open\uDNS.
DNS servers wi\f\f be provided via DHCP by your ISP 
or you may manua\f\fy enter DNS servers. 
Advanced DNS Service is a free security option that provides anti-phishin\b protection to your network and offers navi\bation improvements such 
as auto-correction of common URL typos.  
						

							55D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Storage
This pa\be wi\f\f a\f\fow you to access fi\fes from a USB externa\f hard drive or thumb drive that is p\fu\b\bed into the router from your 
\foca\f network or from the Internet usin\b either a web browser or an app for your smartphone or tab\fet. You can create users 
to be a\f\fowed to access these fi\fes.
Check  to  enab\fe  sharin\b  fi\fes  on  your  USB  stora\be  device 
that is p\fu\b\bed in your router.
Enter a port (8181 is defau\ft). You wi\f\f have to enter this port 
in the URL when connectin\b to the shared fi\fes. For examp\fe: 
(http://192.168.0.1:81\u81).
Enter a port (4433 is defau\ft). You wi\f\f have to enter this port 
in the URL when connectin\b to the shared fi\fes. For examp\fe: 
(https://192.168.0.1:44\u33).
Check this option the\u a\f\fow remote access to this router.
To create a new user, enter a user name.
Enter a password for this account.
Re-enter the password. C\fick Add/Edit to create the user.
Disp\fays  the  accounts. The  Admin  and  Guest  accounts  are 
bui\ft-in to the router.
Disp\fays the USB device p\fu\b\bed into the router.
Enable SharePort 
Web A\f\fess:
HTTP A\f\fess Port:
HTTPS A\feess 
Port:
Allow Remote 
A\f\fess:
User Name:
Password:
Verify Password:
User List:
Number of 
Devi\fes: