D-Link Router DIR-865L User Manual

							76D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
QoS Engine
This option is disab\fed by defau\ft. Enab\fe this option for better 
performance  and  experience  with  on\fine  \bames  and  other 
interactive app\fications, such as VoIP.
The speed at which data can be transferred from the router to 
your ISP. This is determined by your ISP.
The speed at which data can be transferred from the Internet to 
your router. This is determined by your ISP.
Se\fect either Strict.Priority .Queue (rank in order) or Weighted.
Fair .Queue .(percenta\be).
The Queue ID used wi\f\f be disp\fayed.
The Queue Priority used wi\f\f be disp\fayed.
After se\fectin\b the Wei\bht Fair Queue option, under Queue Type, 
you  wi\f\f  be  ab\fe  to  manua\f\fy  enter  the  Queue Wei\bht  for  each 
individua\f Queue ID.
A  C\fassification  Ru\fe  identifies  a  specific  messa\be  f\fow  and 
assi\bns a priority to that flow. For most app\fications, automatic 
c\fassification  wi\f\f  be  adequate,  and  specific  QoS  En\bine  Ru\fes 
wi\f\f not be required.
Enable QoS:
Uplink Speed:
Downlink Speed:
Queue Type:
Queue ID:
Queue Priority:
Queue Weight:
Queue Type:
The QoS En\bine option he\fps improve your network \bamin\b performance by prioritizin\b app\fications. By defau\ft the QoS En\bine settin\bs are disab\fed 
and app\fication priority is not automatica\f\fy c\fassified. The QoS section contains a queuin\b mechanism, traffic shapin\b and c\fassification. It supports 
two kinds of queuin\b mechanisms. Strict Priority Queue (SPQ) and Wei\bhted Fair Queue (WFQ). SPQ wi\f\f process traffic based on traffic priority. 
Queue1 has the hi\bhest priority and Queue4 has the \fowest priority. WFQ wi\f\f process traffic based on the queue wei\bht. Users can confi\bure each 
queue’s wei\bht. The sum of a\f\f the queue’s wei\bht must be 100. When surfin\b the Internet, the system wi\f\f do traffic shapin\b based on the up\fink 
and down\fink speed. The c\fassification ru\fes can be used to c\fassify traffic to different queues, then SPQ or WFQ wi\f\f do QoS based on the queue’s 
priority or wei\bht.  
						

							77D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
The QoS En\bine supports over\faps between ru\fes, where more than one ru\fe can match for a specific messa\be flow. If more than one 
ru\fe is found to match the ru\fe with the hi\bhest priority wi\f\f be used.
Create a name for the ru\fe that is meanin\bfu\f to you.
The priority of the messa\be flow is entered here -- 1 receives the hi\bhest priority (most ur\bent) and 255 receives the \fowest priority 
(\feast ur\bent).
The protoco\f used by the messa\bes.
The ru\fe app\fies to a flow of messa\bes whose LAN-side IP address fa\f\fs within the ran\be set here.
The ru\fe app\fies to a flow of messa\bes whose LAN-side port number is within the ran\be set here.
The ru\fe app\fies to a flow of messa\bes whose WAN-side IP address fa\f\fs within the ran\be set here.
The ru\fe app\fies to a flow of messa\bes whose WAN-side port number is within the ran\be set here.
Se\fect a service or port you want to assi\bn to this ru\fe.
Classifi\fation 
Rules:
Name:
Queue ID:
Proto\fol:
Lo\fal IP Range:
Lo\fal Port 
Range:
Remote IP 
Range:
Remote Port 
Range:
Appli\fation Port:
After specifyin\b the QoS framework used, in the QoS setup section, the user can now create individua\f ru\fes for scenarios that 
require the use of traffic contro\f and data priority manipu\fation.
C\fick  on  the Save.Settings  button  to  accept  the  chan\bes  made  or  c\fick  on  the Don’t. Save.Settings  button  to  discard  the 
chan\bes made.  
						

							78D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Network Filters
Se\fect.Turn .MAC .Fi\btering .\fff, A\b\bow .MAC .addresses.
\bisted .be\bow, or Deny .MAC .addresses .\bisted .be\bow 
from the drop-down menu. 
Enter the MAC address you wou\fd \fike to fi\fter.
To find the MAC address on a computer, p\fease refer 
to the Networking Basics section in this manua\f. 
Se\fect a DHCP c\fient from the drop-down menu and 
c\fick 
						

							79D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
A\f\fess Control
C\fick  the Add.Po\bicy  button  to  start  the  Access 
Contro\f Wizard. 
Add Poli\fy:
The Access Contro\f section a\f\fows you to contro\f access in and out of your network. Use this feature as Parenta\f Contro\fs to 
on\fy \brant access to approved sites, \fimit web access based on time or dates, and/or b\fock access from app\fications \fike P2P 
uti\fities or \bames.
C\fick Next to continue with the wizard.
A\f\fess Control Wizard  
						

							80D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Enter a name for the po\ficy and then c\fick Next to continue.
Se\fect a schedu\fe (I.E. A\fways) from the drop-down menu and 
then c\fick Next to continue.
Enter the fo\f\fowin\b information and then c\fick Next to continue.
• Address.Type - Se\fect IP address, MAC address, or Other 
Machines.
• IP. Address - Enter the IP address of the computer you 
want to app\fy the ru\fe to.
• Machine .Address  -  Enter  the  PC  MAC  address  (i.e. 
00:00.00.00.00).
Se\fect the fi\fterin\b method and then c\u\fick Next to continue.  
						

							81D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Enter the ru\fe:
 Enab\be - Check to enab\fe the ru\fe.
 Name - Enter a name for your ru\fe.
 Dest.IP.Start - Enter the startin\b IP address.
 Dest.IP.End - Enter the endin\b IP add\uress.
 Protoco\b - Se\fect the protoco\f.
 Dest.Port.Start - Enter the startin\b port number.
 Dest.Port.End - Enter the endin\b port number.
To enab\fe web \fo\b\bin\b, c\fick Enab\be.
C\fick Save to save the access contro\f ru\fe.
Your new\fy created po\ficy wi\f\f now show up under Po\bicy.Tab\be.  
						

							82D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Add Website 
Filtering Rule:
Website URL/
Domain:
Website Filters
Se\fect  either DENY.computers .access .to.
\fNLY .these .sites  or ALL\fW .computers.
access .to .\fNLY .these .sites.
Enter the keywords or URLs that you want 
to a\f\fow or b\fock. C\fick Save .Settings.
Website Fi\fters are used to a\f\fow you to set up a \fist of Web sites that can be viewed by mu\ftip\fe users throu\bh the network. 
To use this feature se\fect to A\b\bow or Deny, enter the domain or website and c\fick Save. Settings. You must a\fso se\fect App\by.
Web.Fi\bter under the Access Control section (pa\be 79).  
						

							83D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
Enter a name for the inbound fi\fter ru\fe.
Se\fect A\b\bow or Deny.
Check to enab\fe ru\fe.
Enter the startin\b IP address. Enter 0.0.0.0 
if you do not want to specify an IP ran\be.
E n t e r   t h e   e n d i n \b   I P   a d d r e s s .   E n t e r 
255.255.255.255  if  you  do  not  want  to 
specify and IP ran\be.
C\fick the Add button to app\fy your settin\bs. 
You must c\fick Save.Settings at the top to 
save the settin\bs.
This  section  wi\f\f  \fist  any  ru\fes  that  are 
created.  You  may  c\fick  the Edit  icon  to 
chan\be the settin\bs or enab\fe/disab\fe the 
ru\fe,  or  c\fick  the De\bete  icon  to  remove 
the ru\fe.
Name:
A\ftion:
Enable:
Remote IP Start:
Remote IP End:
Add:
Inbound Filter 
Rules List:
The  Inbound  Fi\fter  option  is  an  advanced  method  of  contro\f\fin\b  data  received  from  the  Internet. With  this  feature  you  can 
confi\bure inbound data fi\fterin\b ru\fes that contro\f data based on an IP address ran\be. Inbound Fi\fters can be used with Virtua\f 
Server, Port Forwardin\b, or Remote Administration features.
Inbound Filters  
						

							84D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
SPI (Statefu\f Packet Inspection, a\fso known as dynamic packet fi\fterin\b) 
he\fps  to  prevent  cyber  attacks  by  trackin\b  more  state  per  session.  It 
va\fidates that the traffic passin\b throu\bh the session conforms to the 
protoco\f.
Se\fect one of the fo\f\fowin\b for TCP and UDP ports:
Endpoint.Independent .- Any incomin\b traffic sent to an open port wi\f\f 
be forwarded to the app\fication that opened the port.
The port wi\f\f c\fose if id\fe f\uor 5 minutes. 
Address.Restricted.- Incomin\b traffic must match the IP address
of the out\boin\b connection.
Address.+.Port.Restriction - Incomin\b traffic must match the
IP address and port of the out\boin\b connection.
Enab\fe  this  feature  to  protect  your  network  from  certain  kinds  of 
“spoofin\b” attacks. 
If an app\fication has troub\fe workin\b from behind the router, you can 
expose one computer to the Internet and run the app\fication on that 
computer.
Note: Placing a computer in the DMZ may expose that computer to a \fariety 
of security risks. Use of this optio\ffn is only recommended as a last\ff resort.
Specify the IP address of the computer on the LAN that you want to have unrestricted Internet communication. If this computer 
obtains it’s IP address automatica\f\fy usin\b DHCP, be sure to make a static reservation on the Setup > Network.Settings pa\be so 
that the IP address of the DMZ machi\une does not chan\be.
Enable SPI:
NAT Endpoint
Filtering:
Anti-Spoof Che\fk:
Enable DMZ:
DMZ IP Address:
Firewall Settings
A firewa\f\f protects your network from the outside wor\fd. The DIR-865L offers a firewa\f\f type functiona\fity. The SPI feature he\fps 
prevent cyber attacks. Sometimes you may want a computer exposed to the outside wor\fd for certain types of app\fications. 
If you choose to expose a computer, you can enab\fe DMZ. DMZ is short for Demi\fitarized Zone. This option wi\f\f expose the 
chosen computer comp\fete\fy to the outside wor\fd.  
						

							85D-Link DIR-865L User Manua\f
Section 3 - Confi\buration
PPTP:
IPSEC (VPN):
RTSP:
SIP:
A\f\fows mu\ftip\fe machines o\un the LAN to connect to their corporate network usin\b PPTP protoco\f.
A\f\fows mu\ftip\fe VPN c\fients to connect to their corporate network usin\b IPSec. Some VPN c\fients support traversa\f of IPSec throu\bh 
NAT. This ALG may interfere with the operation of such VPN c\fients. If you are havin\b troub\fe connectin\b with your corporate network, 
try turnin\b this ALG off. P\fease check with the s\uystem administrator of your corporate network whether your VPN c\fient supports
NAT traversa\f.
A\f\fows app\fication that uses Rea\f Time Streamin\b Protoco\f to receive streamin\b media from the Internet. QuickTime and Rea\f P\fayer 
are some of the common app\fications usin\b this protoco\f.
A\f\fows devices and app\fications usin\b VoIP (Voice over IP) to communicate across NAT. Some VoIP app\fications and devices have 
the abi\fity to discover NAT devices and work around them. This ALG may interfere with the operation of such devices. If you are 
havin\b troub\fe makin\b VoIP ca\f\fs, try turnin\b this ALG off.