Dir 822
Dir 822
DIR-822
AC1200 Wi-Fi Router
July 2016
Contents
Chapter 1. Introduction..........................................5
Contents and Audience.......................................................5
Conventions.................................................................5
Document Structure..........................................................5
Chapter 2. Overview..............................................6
General Information.........................................................6
Specifications*.............................................................7
Product Appearance.........................................................12
Upper Panel..............................................................12
Back and Bottom Panels...................................................14
Delivery Package...........................................................15
Chapter 3. Installation and Connection..........................16
Before You Begin...........................................................16
Connecting to PC...........................................................17
PC with Ethernet Adapter.................................................17
Obtaining IP Address Automatically in OS Windows XP......................17
Obtaining IP Address Automatically in OS Windows 7.......................20
PC with Wi-Fi Adapter....................................................25
Configuring Wi-Fi Adapter in OS Windows XP...............................26
Configuring Wi-Fi Adapter in OS Windows 7................................27
Connecting to Web-based Interface..........................................29
Web-based Interface Structure..............................................30
General Information Page.................................................30
Menu Sections............................................................32
Notifications and System Drop-down Menu..................................33
Chapter 4. Configuring via Web-based Interface..................36
Monitoring.................................................................36
Click'n'Connect............................................................40
Creating WAN Connection..................................................42
PPPoE Connection.......................................................42
IPv6 PPPoE or PPPoE Dual Stack Connection..............................43
Static IP Connection...................................................44
Dynamic IP Connection..................................................45
Static IPv6 Connection.................................................46
Dynamic IPv6 Connection................................................47
PPPoE + Static IP Connection...........................................48
PPPoE + Dynamic IP Connection..........................................50
PPTP + Static IP or L2TP + Static IP Connection........................52
PPTP + Dynamic IP or L2TP + Dynamic IP Connection......................54
Checking Internet Availability...........................................56
Configuring Yandex.DNS Service...........................................57
Configuring Wireless Connection..........................................58
Configuring IPTV.........................................................64
Wireless Network Settings Wizard...........................................65
Access Point Mode........................................................66
Client Mode..............................................................71
Virtual Server Settings Wizard.............................................74
IPTV Settings Wizard.......................................................76
Page 2 of 212
Status.....................................................................77
Network Statistics.......................................................77
DHCP.....................................................................78
Routing Table............................................................79
Clients..................................................................80
Port Statistics..........................................................81
Active Sessions..........................................................82
Multicast groups.........................................................83
Net........................................................................84
WAN......................................................................84
Creating PPPoE WAN Connection..........................................85
Creating IPv6 PPPoE or PPPoE Dual Stack WAN Connection.................89
Creating Static IP or Dynamic IP WAN Connection........................95
Creating Static IPv6 or Dynamic IPv6 WAN Connection...................100
Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection.......104
Creating PPTP/L2TP + Static IP or
PPTP/L2TP + Dynamic IP WAN Connection.................................111
LAN.....................................................................118
Wi-Fi.....................................................................122
Basic Settings..........................................................122
2.4GHz Band...........................................................122
5GHz Band.............................................................125
Security Settings.......................................................128
MAC Filter..............................................................134
List of Wi-Fi Clients...................................................136
WPS.....................................................................137
Using WPS Function via Web-based Interface............................139
Using WPS Function without Web-based Interface........................140
Additional Settings.....................................................141
Smart Adjustment of Wi-Fi Clients.......................................144
WMM.....................................................................146
Client..................................................................148
Advanced..................................................................151
VLAN....................................................................152
UPnP IGD................................................................155
Port Settings...........................................................156
Bandwidth Control.......................................................159
Redirect................................................................161
DDNS....................................................................162
DNS.....................................................................164
Routing.................................................................165
IPv6 Routing............................................................166
Remote Access to Device.................................................167
Miscellaneous...........................................................169
TR-069 Client...........................................................171
IPsec...................................................................173
Firewall..................................................................179
IP Filters..............................................................179
Virtual Servers.........................................................182
DMZ.....................................................................185
MAC Filter..............................................................186
Control...................................................................188
URL Filter..............................................................188
Page 3 of 212
Yandex.DNS................................................................190
Internet Protection Settings............................................190
System....................................................................193
Administrator Password..................................................194
Configuration...........................................................195
System Log..............................................................197
Firmware Upgrade........................................................199
Local Update..........................................................200
Remote Update.........................................................201
System Time.............................................................202
Ping....................................................................204
Traceroute..............................................................205
Telnet..................................................................206
Interface settings......................................................207
Chapter 5. Operation Guidelines................................208
Safety Instructions.......................................................208
Wireless Installation Considerations......................................209
Connecting to Cable or DSL Modem..........................................210
Chapter 6. Abbreviations and Acronyms..........................211
Page 4 of 212
CHAPTER 1. INTRODUCTION
Conventions
Example Description
“Quick Installation
A reference to a document.
Guide”
Document Structure
Chapter 1 describes the purpose and structure of the document.
Chapter 2 gives an overview of the router's hardware and software features, describes its
appearance and the package contents.
Chapter 3 explains how to install the router DIR-822 and configure a PC in order to access its web-
based interface.
Chapter 4 describes all pages of the web-based interface in detail.
Chapter 5 includes safety instructions and tips for networking and connecting additional equipment.
Chapter 6 introduces abbreviations and acronyms used in this manual.
Page 5 of 212
CHAPTER 2. OVERVIEW
General Information
The DIR-822 device is a wireless dual band router a built-in 4-port switch. It provides a fast and
simple way to create a wireless and wired network at home or in an office.
You are able to connect the wireless router DIR-822 to a cable or DSL modem or to a private
Ethernet line and use a high-speed Internet connection to successfully fulfill a wide range of
professional tasks. The built-in 4-port switch enables you to connect Ethernet-enabled computers,
game consoles, and other devices to your network.
Using the DIR-822 device, you are able to quickly create a wireless network at home or in your
office, which lets computers and mobile devices access the Internet virtually anywhere (within the
operational range of your wireless network). Simultaneous activity of 2.4GHz band and 5GHz band
allows performing a wide range of tasks. The router can operate as a base station for connecting
wireless devices of the standards 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac (at the rate up
to 1167Mbps1).
The router supports multiple functions for the wireless interface: several security standards (WEP,
WPA/WPA2), MAC address filtering, WPS, WMM.
In addition, the device is equipped with a button for switching the Wi-Fi network off/on. If needed,
for example, when you leave home, you can easily switch the router’s WLAN by pressing the
button, and devices connected to the LAN ports of the router will stay online.
Support of guest Wi-Fi network allows you to create a separate wireless network with individual
security settings and maximum rate limitation. Devices connected to the guest network will be able
to access the Internet, but will be isolated from the devices and resources of the router's LAN.
Smart adjustment of Wi-Fi clients is useful for networks based on several D-Link access points or
routers – when the smart adjustment function is configured on each of them, a client always
connects to the access point (router) with the highest signal level.
The wireless router DIR-822 includes a built-in firewall. The advanced security functions minimize
threats of hacker attacks, prevent unwanted intrusions to your network, and block access to
unwanted websites for users of your LAN.
Built-in Yandex.DNS service protects against malicious and fraudulent web sites and helps to block
access to adult content on children's devices.
You can configure the settings of the wireless router DIR-822 via the user-friendly web-based
interface (the interface is available in several languages).
Now you can simply update the firmware: the router itself finds approved firmware on D-Link
update server and notifies when ready to install it.
Page 6 of 212
Specifications*
Hardware
Interfaces · 10/100BASE-TX WAN port
· 4 10/100BASE-TX LAN ports
LEDs · POWER
· INTERNET
· WPS
· WLAN
· 4 LAN LEDs
Buttons · POWER button to power on/power off
· RESET button to restore factory default settings
· WPS button to set up secure wireless connection and enable/disable wireless
network
Antenna · Four external non-detachable antennas (5dBi gain)
MIMO · 2x2
Software
WAN connection types · PPPoE
· IPv6 PPPoE
· PPPoE Dual Stack
· Static IP / Dynamic IP
· Static IPv6 / Dynamic IPv6
· PPPoE + Static IP / Dynamic IP
· PPTP/L2TP + Static IP
· PPTP/L2TP + Dynamic IP
Network functions · Support of IEEE 802.1X for Internet connection
· DHCP server/relay
· DHCPv6 server (Stateful/Stateless), IPv6 prefix delegation
· DNS relay
· Support of DNSv6 AAAA records
· Dynamic DNS
· Static IP routing
· Static IPv6 routing
· IGMP Proxy
· RIP
· Support of UPnP IGD
· Support of VLAN
· WAN ping respond
· Support of SIP ALG
· Support of RTSP
· Autonegotiation of speed, duplex mode, and flow control/Manual speed and
duplex mode setup for each Ethernet port
Firewall functions · Network Address Translation (NAT)
· Stateful Packet Inspection (SPI)
· IP filter
· IPv6 filter
· MAC filter
· URL filter
· DMZ
· Prevention of ARP and DDoS attacks
· Virtual servers
· Built-in Yandex.DNS web content filtering service
* The device features are subject to change without notice. For the latest versions of the firmware and relevant
documentation, visit www.dlink.ru.
Page 7 of 212
Software
VPN · IPSec/PPTP/L2TP/PPPoE pass-through
· IPSec tunnels
Management · Local and remote access to settings through TELNET/WEB (HTTP/HTTPS)
· Multilingual web-based interface for configuration and management
· Notification on connection problems and auto redirect to settings
· Firmware update via web-based interface
· Automatic notification on new firmware version
· Saving/restoring configuration to/from file
· Support of remote logging
· Automatic synchronization of system time with NTP server and manual
time/date setup
· Ping utility
· Traceroute utility
· TR-069 client
Page 8 of 212
Page 9 of 212
Page 10 of 212
Physical Parameters
Dimensions (L x W x H) · 190 x 133 x 38 mm (7.5 x 5.2 x 1.5 in)
Operating Environment
Power · Output: 12V DC, 0.5A
Page 11 of 212
Product Appearance
Upper Panel
Page 12 of 212
Page 13 of 212
Port Description
Page 14 of 212
Delivery Package
The following should be included:
• Router DIR-822
• Power adapter DC 12V/0.5A
• Ethernet cable
• “Quick Installation Guide” (brochure).
The “User Manual” and “Quick Installation Guide” documents are available on D-Link website
(see www.dlink.ru).
!
Using a power supply with a different voltage rating than the one included will cause
damage and void the warranty for this product.
Page 15 of 212
Page 16 of 212
Connecting to PC
1. Click the Start button and proceed to the Control Panel > Network and Internet
Connections > Network Connections window.
2. In the Network Connections window, right-click the relevant Local Area Connection
icon and select the Properties line in the menu displayed.
Page 17 of 212
3. In the Local Area Connection Properties window, on the General tab, select the
Internet Protocol (TCP/IP) line. Click the Properties button.
Page 18 of 212
4. Select the Obtain an IP address automatically and Obtain DNS server address
automatically radio buttons. Click the OK button.
Page 19 of 212
Page 20 of 212
3. In the menu located on the left part of the window, select the Change adapter settings
line.
Page 21 of 212
4. In the opened window, right-click the relevant Local Area Connection icon and select
the Properties line in the menu displayed.
Page 22 of 212
5. In the Local Area Connection Properties window, on the Networking tab, select the
Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.
Page 23 of 212
6. Select the Obtain an IP address automatically and Obtain DNS server address
automatically radio buttons. Click the OK button.
Page 24 of 212
Page 25 of 212
If you perform initial configuration of the router via Wi-Fi connection, note that
! immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.
2 See the field Wi-Fi Name (SSID) 2.4GHz on the bottom panel of the device. For the models of the hardware
version /RU the default network name is DIR_822C1A.
3 See the field Wi-Fi Name (SSID) 5GHz on the bottom panel of the device. For the models of the hardware version
/RU the default network name is DIR_822C1A-5G.
4 For the models of the hardware version /RU the default network key is WPS PIN.
Page 26 of 212
Page 27 of 212
6. In the opened Wireless Network Connection window, select the wireless network
dlink-XXXX5 (for operating in the 2.4GHz band) or dlink-XXXX-5GHz6 (for operating
in the 5GHz band) and click the Connect button.
If you perform initial configuration of the router via Wi-Fi connection, note that
! immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.
5 See the field Wi-Fi Name (SSID) 2.4GHz on the bottom panel of the device. For the models of the hardware
version /RU the default network name is DIR_822C1A.
6 See the field Wi-Fi Name (SSID) 5GHz on the bottom panel of the device. For the models of the hardware version
/RU the default network name is DIR_822C1A-5G.
7 For the models of the hardware version /RU the default network key is WPS PIN.
Page 28 of 212
For security reasons, DIR-822 with default settings cannot connect to the Internet. To get
! started, please set your own password used to access the web-based interface and, if
needed, configure other settings recommended by your ISP.
Start a web browser (see the Before You Begin section, page 16). In the address bar of the web
browser, enter the IP address of the router (by default, the following IP address is specified:
192.168.0.1). Press the Enter key.
If the error “The page cannot be displayed” (or “Unable to display the page”/“Could not
! connect to remote server”) occurs upon connecting to the web-based interface of the router,
make sure that you have properly connected the router to your computer.
After the first access to the web-based interface you need to change the default administrator
password8. Enter the new password in the Password and Confirmation fields. You may set any
password except admin. Use digits, Latin letters (uppercase and/or lowercase), and characters
available on the keyboard. Then click the Apply button.
Figure 16. The page for changing the default administrator password.
Remember or write down the new password for the administrator account. In case of losing
!
the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.
8 For the hardware version /RU you should also change SSID.
Page 29 of 212
When the web-based interface is accessed the next time and after, the login page opens. Enter the
username (admin) in the Login field and the password you specified in the Password field, then
click the Enter button.
Page 30 of 212
The web-based interface of the router is multilingual. If you need to select another language for the
web-based interface, place the mouse pointer over the English caption in the top part of the page
and select a language from the menu displayed.
The Home / Information page displays general information on the router and its software. From
the page you can quickly get to some pages of the web-based interface.
To upgrade the firmware of the router, left-click the current firmware version (the right column of
the Firmware version line) and follow the dialog box appeared.
To contact the technical support group (to send an e-mail), left-click the support e-mail address (the
right column of the Support line). After clicking the line, the e-mail client window for sending a
new letter to the specified address opens.
To edit the router's local interface parameters, left-click the IPv4, IPv6, or MAC address of the local
interface (the right column of the lines LAN IPv4, LAN IPv6, or LAN MAC correspondingly).
After clicking the line, the page for editing the LAN interface opens (for the detailed description of
the page, see the LAN section, page 118).
To configure the router's WLAN parameters, left-click the SSID of the WLAN (the right column of
the 2.4GHz Network name (SSID) or 5GHz Network name (SSID) line). After clicking the
line, the Wi-Fi / Basic settings page for the relevant band opens (for the detailed description of
the page, see the Basic Settings section, page 122).
To configure security settings of the WLAN, left-click the network authentication type (the right
column of the 2.4GHz security or 5GHz security line). After clicking the line, the Wi-Fi /
Security settings page for the relevant band opens (for the detailed description of the page, see
the Security Settings section, page 128).
To proceed to the page for configuring the Yandex.DNS web content filtering service, left-click the
name of the Internet protection by Yandex section. Also you can enable/disable the service or
change the default mode directly from the general information page.
Page 31 of 212
Menu Sections
To configure the router use the menu in the left part of the page.
The Monitoring section provides an interactive scheme which illustrates the router's settings and
the LAN structure.
In the Home section you can run the needed Wizard.
To configure connection to the Internet, go to the Click'n'Connect page (for the detailed
description of the Wizard, see the Click'n'Connect section, page 40).
To configure the router's wireless network, go to the Wireless network settings wizard page
(for the detailed description of the Wizard, see the Wireless Network Settings Wizard section, page
65).
To configure access from the Internet to a web server located in your LAN, go to the Virtual
server settings wizard page (for the detailed description of the Wizard, see the Virtual Server
Settings Wizard section, page 74).
To configure the router to use an IPTV set-top box, go to the IPTV settings wizard page (for the
detailed description of the Wizard, see the IPTV Settings Wizard section, page 76).
The pages of the Status section display data on the current state of the router (for the description of
the pages, see the Status section, page 77).
The pages of the Net section are designed for configuring basic parameters of the LAN interface of
the router and creating a connection to the Internet (for the description of the pages, see the Net
section, page 84).
The pages of the Wi-Fi section are designed for specifying all needed settings of the router's
wireless network (for the description of the pages, see the Wi-Fi section, page 122).
The pages of the Advanced section are designed for configuring additional parameters of the
router (for the description of the pages, see the Advanced section, page 151).
The pages of the Firewall section are designed for configuring the firewall of the router (for the
description of the pages, see the Firewall section, page 179).
The pages of the Control section are designed for creating restrictions on access to the Internet (for
the description of the page, see the Control section, page 188).
The pages of the Yandex.DNS section are designed for configuring the Yandex.DNS web content
filtering service (for the description of the pages, see the Yandex.DNS section, page 190).
The pages of the System section provide functions for managing the internal system of the router
(for the description of the pages, see the System section, page 193).
Also you can find a specific page via search. To do this, enter the name of the page, wholly or
partly, in the search bar in the top part of the web-based interface page, and then select a needed
link in the search results.
Page 32 of 212
!
Note that you should regularly save the changes of the router's settings to the non-
volatile memory.
You can save the router's settings via the menu displayed when the mouse pointer is over the
System caption in the top left part of the page. Also the System menu allows you to reboot the
device, create and load the configuration backup, restore the factory defaults, update the firmware,
disable/enable the WLAN.
Figure 21. The System menu in the top part of the page.
Page 33 of 212
Control Description
Click the icon to reboot the device. All unsaved changes will be lost
after the device's reboot.
Reboot device
Click the icon to save the configuration (all settings of the router) to
your PC. The configuration backup will be stored in the download
location of your web browser.
Get config backup Also you can create the configuration backup via the Backup
button on the System / Configuration page.
Click the icon to restore the factory default settings. Also you can
restore the factory defaults via the Factory button on the System /
Configuration page.
Also you can restore the factory default settings via the hardware
Reset to factory RESET button. The button is located on the bottom panel of the
router next to the power connector. Push the button (with the router
powered on) and hold for 10 seconds. Then release the button.
Click the icon to disable or enable the device's WLAN in the 5GHz
band.
Also you can disable/enable the router's WLAN in the 5GHz band
Wi-Fi 5 GHz on the Wi-Fi / Basic settings / 5 GHz page.
Page 34 of 212
Control Description
Page 35 of 212
Monitoring
The page displays an interactive scheme which illustrates the router's settings and the LAN
structure.
Also you can modify the basic parameters of the router on the Monitoring page. To access the
router's advanced settings, click the Editing device settings link in the bottom left corner of the
page. For the detailed description of all the router's functions, see the relevant section of this
manual.
Page 36 of 212
Control Description
The Device element displays the layout of your device. Place the
mouse pointer over the top right corner of this icon to display the
system menu which helps you to reboot the device, save the
Device configuration, restore the factory default settings, update the
firmware, exit the web-based interface.
Page 37 of 212
Control Description
The DHCP element is a scale where the range of the DHCP server
addresses is placed. Dynamic clients receive IP addresses from this
range.
Page 38 of 212
Control Description
Page 39 of 212
Click'n'Connect
To configure connection to the Internet, click the Click'n'Connect link in the Home section.
Connect the Ethernet cable provided by your ISP to the WAN port of the router. Verify the relevant
LED (the INTERNET LED should be on).
Click the Next button to continue.
Page 40 of 212
On the opened page, select the needed choice of the radio button and click the Next button.
Page 41 of 212
PPPoE Connection
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating PPPoE WAN Connection section, page 85).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 42 of 212
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
If you need to specify the gateway address manually, deselect the SLAAC checkbox and fill in the
Static IPv6 gateway address field.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating IPv6 PPPoE or PPPoE Dual Stack WAN Connection section, page 89).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 43 of 212
Static IP Connection
In the Connection name field, specify a name for the connection for easier identification.
Fill in the IP Address and Netmask fields.
In the Gateway IP address field, enter the IP address of the gateway used by this WAN
connection.
In the Primary DNS server field, enter the address of the primary DNS server.
If your wired ISP uses authorization via the 802.1x protocol, in the Authorization via 802.1x
protocol section, select the Authorization in the ISP's network via 802.1x protocol
checkbox and fill in the fields of the section in accordance with data provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IP or Dynamic IP WAN Connection section, page 95).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 44 of 212
Dynamic IP Connection
In the Connection name field, specify a name for the connection for easier identification.
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Primary DNS server field.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IP or Dynamic IP WAN Connection section, page 95).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 45 of 212
In the Connection name field, specify a name for the connection for easier identification.
Fill in the IPv6 address and Gateway IPv6 address fields.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IPv6 or Dynamic IPv6 WAN Connection section, page 100).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 46 of 212
In the Connection name field, specify a name for the connection for easier identification.
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Static primary DNS server field.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating Static IPv6 or Dynamic IPv6 WAN Connection section, page 100).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 47 of 212
Page 48 of 212
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection section, page 104).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 49 of 212
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Primary DNS server field.
As a rule, the specified settings are enough at this step to configure a connection of the selected
type. If you need to specify additional settings, open the expert settings mode. To do this, use the
switch in the bottom left corner of the page (for a detailed description of all the connection's
parameters, see the Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection
section, page 104).
Click the Next button to continue.
Page 50 of 212
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
As a rule, the specified settings are enough to configure a connection of the selected type. If you
need to specify additional settings, open the expert settings mode. To do this, use the switch in the
bottom left corner of the page (for a detailed description of all the connection's parameters, see the
Creating PPPoE + Static IP or PPPoE + Dynamic IP WAN Connection section, page 104).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 51 of 212
Page 52 of 212
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
As a rule, the specified settings are enough to configure a protected connection (the VPN tunnel). If
you need to specify additional settings, open the expert settings mode. To do this, use the switch in
the bottom left corner of the page (for a detailed description of all the connection's parameters, see
the Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN Connection section,
page 111).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 53 of 212
If your ISP has provided the addresses of the DNS servers, deselect the Obtain DNS server
addresses automatically checkbox and fill in the Primary DNS server field.
As a rule, the specified settings are enough to configure a non-protected connection of the selected
type. If you need to specify additional settings, open the expert settings mode. To do this, use the
switch in the bottom left corner of the page (for a detailed description of all the connection's
parameters, see the Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN
Connection section, page 111).
Click the Next button to continue.
Page 54 of 212
In the Connection name field, specify a name for the connection for easier identification.
In the Username field, enter your login, and in the Password and Password confirmation
fields – the password provided by your ISP.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
As a rule, the specified settings are enough to configure a protected connection (the VPN tunnel). If
you need to specify additional settings, open the expert settings mode. To do this, use the switch in
the bottom left corner of the page (for a detailed description of all the connection's parameters, see
the Creating PPTP/L2TP + Static IP or PPTP/L2TP + Dynamic IP WAN Connection section,
page 111).
Click the Next button to continue.
After that the page displaying all specified settings opens. Click the Apply button to create the
connection or the Back button to specify other settings.
After clicking the Apply button, the page for checking the Internet availability opens (see the
Checking Internet Availability section, page 56).
Page 55 of 212
In the Result section, the status of the WAN connection and possible causes of malfunctions are
displayed. To recheck the status of the WAN connection, enter the IP address or name of a host in
the Address field or leave the value specified by default (google.com for IPv4 connections,
ipv6.google.com for IPv6 connections). Then click the Recheck button.
Click the Back button to specify other settings.
Click the Next button to continue.
After clicking the Next button, the page for configuring the Yandex.DNS service opens (see the
Configuring Yandex.DNS Service section, page 57).
Page 56 of 212
To enable the Yandex.DNS service, select the Enable Yandex.DNS checkbox. Then select the
needed choice of the radio button to configure filtering for all devices of the router's network:
• Safe mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites;
• Child mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites and blocks access to adult content;
• Protection off: when this value is selected, the service provides the DNS server with no
restrictions on access to unsafe web sites.
If you are not going to use the service, leave the Enable Yandex.DNS checkbox unselected.
Click the Next button to continue.
After clicking the Next button, the page for configuring wireless connection opens (see the
Configuring Wireless Connection section, page 58).
Page 57 of 212
Figure 41. Selecting the operating mode for the wireless network.
If you want to disable one or both bands of the wireless network, select the Turn off choice of the
Mode radio button and click the Next button. On the opened page, select the checkbox
corresponding to the band that should be disabled, and click the Next button. Then click the Apply
button. After clicking the button, the page for configuring the router to use an IPTV set-top box
opens (see the Configuring IPTV section, page 64).
If you want to connect portable devices to the Internet via wireless connection, select the Access
point choice of the Mode radio button. Click the Next button.
Page 58 of 212
On the opened page, in the Network name (SSID) field, specify a new name for the network in
the 2.4GHz band (use digits and Latin characters).
Figure 42. Changing the name of the wireless LAN in the 2.4GHz band.
Page 59 of 212
On the next page, you can modify security settings of the WLAN in the 2.4GHz band.
Select the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your wireless network) in the Network key field. Use digits
and Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed
authentication type is specified for the router's WLAN in the 2.4GHz band.
When the Open value is selected, the Network key field is unavailable. After applying this
setting, the Open authentication type with no encryption is specified for the router's WLAN in the
2.4GHz band.
Figure 43. Selecting a security mode for the wireless network in the 2.4GHz band.
Page 60 of 212
On the opened page, you can configure a guest wireless network in the 2.4GHz band.
If you are not going to use the guest wireless network, or you have configured all needed settings
for the guest wireless network before starting the wizard, select the Do not configure a guest
network choice of the Select the action radio button and click the Next button on the current
page and on the next page.
After that the page displaying all specified settings opens. Make sure that they are correct, and then
click the Apply button, or the Back button to specify other settings. After clicking the button, the
page for configuring the router to use an IPTV set-top box opens (see the Configuring IPTV
section, page 64).
If you want to create a guest wireless network or you need to change the existing settings of the
guest network, select the Set up a new guest network choice or the To configure an
existing guest network choice of the Select the action radio button correspondingly and
click the Next button.
Page 61 of 212
Page 62 of 212
On the opened page, modify security settings of the guest network in the 2.4GHz band.
Select the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your guest network) in the Network key field. Use digits and
Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed authentication
type is specified for the router's guest network in the 2.4GHz band.
When the Open value is selected, the Network key field is unavailable. After applying this
setting, the Open authentication type with no encryption is specified for the router's guest network
in the 2.4GHz band.
Figure 46. Selecting a security mode for the guest network in the 2.4GHz band.
Click the Next button to continue.
On the next pages, specify a new name and configure security settings for the guest network in the
5GHz band. Then click the Next button.
After that the page displaying all specified settings opens. Make sure that they are correct, and then
click the Apply button, or the Back button to specify other settings. After clicking the button, the
page for configuring the router to use an IPTV set-top box opens (see the Configuring IPTV
section, page 64).
Page 63 of 212
Configuring IPTV
On the page, you can configure the router to use an IPTV set-top box.
On the opened page, select the LAN port of the router to which you will connect your IPTV set-top
box.
If in the future you need to disconnect your IPTV set-top box from the specified LAN port and
connect a computer to it, start the IPTV settings wizard (for the detailed description of the
Wizard, see the IPTV Settings Wizard section, page 76).
If for accessing the Internet and IPTV services your ISP uses virtual local area networks with
identifiers (VLAN ID), to configure access to the IPTV service, proceed to the Advanced / VLAN
page, create a group of ports with the required value of the VLAN ID parameter, the Bridge type,
and the port to which the set-top box will be connected (see the VLAN section, page 152, for a
detailed description of the elements from the page).
Click the Next button to continue.
Click the Skip to next button in order not to apply the IPTV settings.
Click the Apply button to save the specified settings.
After clicking the Apply button, the Home / Information page opens.
Page 64 of 212
Figure 48. The page for selecting the operating mode for the wireless network.
If you want to disable one or both bands of the wireless network, select the Turn off choice of the
Mode radio button and click the Next button. On the opened page, select the checkbox
corresponding to the band that should be disabled, and click the Next button. Then click the Apply
button. After clicking the button, the Home / Information page opens.
If you want to connect portable devices to the Internet via wireless connection, select the Access
point choice of the Mode radio button. Click the Next button.
If you want to configure the router as a client to connect to a wireless access point, select the Client
choice of the Mode radio button. Click the Next button.
Page 65 of 212
Figure 49. The page for changing the name of the wireless LAN in the 2.4GHz band.
Page 66 of 212
On the next page, you can modify security settings of your wireless network in the 2.4GHz band.
Select the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your wireless network) in the Network key field. Use digits
and Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed
authentication type is specified for the router's WLAN in the 2.4GHz band.
When the Open value is selected, the Network key field is unavailable. After applying this
setting, the Open authentication type with no encryption is specified for the router's WLAN in the
2.4GHz band.
Figure 50. The page for selecting a security mode for the wireless network in the 2.4GHz band.
Page 67 of 212
On the opened page, you can configure a guest wireless network in the 2.4GHz band.
Figure 51. The page for creating a guest network in the 2.4GHz band.
If you are not going to use the guest wireless network, or you have configured all needed settings
for the guest wireless network before starting the wizard, select the Do not configure a guest
network choice of the Select the action radio button and click the Next button on the current
page and on the next page.
After that the page displaying all specified settings opens. Make sure that they are correct, and then
click the Apply button, or the Back button to specify other settings. After clicking the Apply
button, the Home / Information page opens.
If you want to create a guest wireless network or you need to change the existing settings of the
guest network, select the Set up a new guest network choice or the To configure an
existing guest network choice of the Select the action radio button correspondingly and
click the Next button.
Page 68 of 212
Figure 52. The page for configuring a guest network in the 2.4GHz band.
On the opened page, in the Network name (SSID) field, specify a new name for the guest
network. Use digits and Latin characters.
In the Max Associated clients field, specify the maximum number of devices that will be able to
connect to the guest network in the 2.4GHz band, or leave the value 0 not to limit the number of
clients.
In the Shaping field, specify the maximum bandwidth of the guest network in the 2.4GHz band or
leave the value 0 not to limit bandwidth of the network.
Click the Next button.
Page 69 of 212
On the opened page, modify security settings of the guest network in the 2.4GHz band.
Select the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your guest network) in the Network key field. Use digits and
Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed authentication
type is specified for the router's guest network in the 2.4GHz band.
When the Open value is selected, the Network key field is unavailable. After applying this
setting, the Open authentication type with no encryption is specified for the router's guest network
in the 2.4GHz band.
Figure 53. The page for selecting a security mode for the guest network in the 2.4GHz band.
Click the Next button to continue.
On the next pages, specify a new name and configure security settings for the guest network in the
5GHz band. Then click the Next button.
After that the page displaying all specified settings opens. Make sure that they are correct, and then
click the Apply button, or the Back button to specify other settings. After clicking the Apply
button, the Home / Information page opens.
Page 70 of 212
Client Mode
On the opened page, select the band of the network to which you want to connect from the
Wireless network range drop-down list and click the Search button.
Select the network to which you want to connect and click the Next button.
Page 71 of 212
Figure 55. The page for entering the password for connection to the wireless network.
If you need a password to connect to the selected network, enter the password in the Network key
field and click the Next button.
On the next page, you can specify an individual name (SSID) and security settings for the router or
disable the router's wireless network broadcast.
Page 72 of 212
Figure 56. The page for changing the settings of the wireless local area network.
If you want to use the router's wireless network in the 2.4GHz or 5GHz band to connect devices,
leave the corresponding checkbox (Enable broadcasting network 2,4GHz or Enable
broadcasting network 5GHz) selected. Then, if needed, specify another name in the Network
name (SSID) field of the relevant section. Use digits and Latin characters.
It is strongly recommended to configure the secure wireless network of DIR-822. To do this, select
the Protected value from the Network Authentication drop-down list and enter a key (a
password that will be used to access your wireless network) in the Network key field. Use digits
and Latin characters. After applying this setting, the WPA-PSK/WPA2-PSK mixed
authentication type is specified for the router's WLAN. Click the Next button.
On the next page, the parameters of the network to which you want to connect, the entered
password, and the settings of the wireless network of the router are displayed. Make sure that the
specified settings are correct and then click the Next button or the Back button to specify other
settings. Then click the Apply button. After that, the wireless channel of DIR-822 will switch to the
channel of the wireless access point to which you have connected.
After configuring the device as a client, you need to create a WAN connection with relevant
parameters for the WiFiClient interface.
After clicking the Apply button, the Home / Information page opens.
Page 73 of 212
Parameter Description
Page 74 of 212
Parameter Description
Remote IP Enter the IP address of the server from the external network.
Select the checkbox in order to let the users of the router's LAN
access the local server using the external IP address of the router or
Enable NAT Loopback its DDNS name (if a DDNS service is configured). Users from the
external network access the router using the same address (or DDNS
name).
When needed settings are configured, click the Apply button.
After clicking the Apply button, a dialog box appears.
If you are going to create a new virtual server, click the OK button. After clicking the button, the
Firewall / Virtual servers page opens (see the Virtual Servers section, page 182, for a detailed
description of the elements from the page).
If you are not going to create a new virtual server, click the Cancel button. After clicking the
button, the Home / Information page opens.
Page 75 of 212
Figure 58. The page for selecting a LAN port to connect an IPTV set-top box.
On the opened page, select the LAN port of the router to which you will connect your IPTV set-top
box and click the Save button.
If in the future you need to disconnect your IPTV set-top box from the specified LAN port and
connect a computer to it, on the current page deselect the LAN port and click the Save button.
If for accessing the Internet and IPTV services your ISP uses virtual local area networks with
identifiers (VLAN ID), to configure access to the IPTV service, proceed to the Advanced / VLAN
page, create a group of ports with the required value of the VLAN ID parameter, the Bridge type,
and the port to which the set-top box will be connected (see the VLAN section, page 152, for a
detailed description of the elements from the page).
Page 76 of 212
Status
The pages of this section display data on the current state of the router:
• network statistics
• IP addresses leased by the DHCP server
• the routing table
• data on devices connected to the router's network and its web-based interface
• statistics for traffic passing through ports of the router
• active sessions
• addresses of active multicast groups.
Network Statistics
On the Status / Network statistics page, you can view statistics for all connections existing in
the system (WAN connections, LAN, WLAN). For each connection the following data are
displayed: name and state (when the connection is on, its name is highlighted in green, when the
connection is off, its name is highlighted in red), IP address and subnet mask, gateway (if the
connection is established), MAC address, MTU value, and volume of data received and transmitted
(with increase of the volume the units of measurement are changed automatically: byte, Kbyte,
Mbyte, Gbyte).
Page 77 of 212
DHCP
The Status / DHCP page displays the information on computers that have been identified by
hostnames and MAC addresses and have got IP addresses from the DHCP server of the device, as
well as the IP address expiration periods (the lease time).
Page 78 of 212
Routing Table
The Status / Routing table page displays the information on routes. The table contains
destination IP addresses, gateways, subnet masks, and other data.
Page 79 of 212
Clients
On the Status / Clients page, you can view the list of devices connected to the router and devices
accessing its web-based interface.
For each device the following data are displayed: the IP address, the MAC address, and the
interface to which the device is connected.
Page 80 of 212
Port Statistics
On the Status / Port statistics page, you can view statistics for traffic passing through ports of
the router. To view full list of counter for a port, click the icon (More info) in the line
corresponding to this port. The information shown on the page can be used for diagnosing
connection problems.
Page 81 of 212
Active Sessions
On the Status / Active sessions page, you can view information on current sessions in the
router's network. For each session the following data are displayed: a protocol for network packet
transmission, a source IP address and port, a destination IP address and port.
To view the latest data on current sessions in the router's network, click the Refresh button.
Page 82 of 212
Multicast groups
The Status / Multicast groups page displays addresses of active multicast groups (including
IPTV channels and groups for transferring service information) to which the device is subscribed,
and the interface through which the device is subscribed.
Page 83 of 212
Net
In this menu you can configure basic parameters of the router's local area network and configure
connection to the Internet (a WAN connection).
WAN
On the Net / WAN page, you can create and edit connections used by the router.
By default, a Dynamic IP connection is configured in the system. It is assigned to the WAN port of
the router. You can edit this connection or delete it.
To create a new connection, click the Add button. On the page displayed, specify the relevant
values.
To edit an existing connection, left-click the relevant line in the table. On the page displayed,
change the parameters and click the Apply button.
To remove a connection, select the checkbox located to the left of the relevant line in the table and
click the Delete button. Also you can remove a connection on the editing page.
To use one of existing WAN connections as a default IPv4 gateway, select the choice of the Default
gateway radio button located in the line corresponding to this connection.
To use one of existing WAN connections as a default IPv6 gateway, select the choice of the Default
IPv6 gateway radio button located in the line corresponding to this connection.
Page 84 of 212
Figure 67. The page for creating a new PPPoE connection. The General settings section.
Parameter Description
General settings
Page 85 of 212
Figure 68. The page for creating a new PPPoE connection. The Ethernet section.
Parameter Description
Ethernet
( ) to set the MAC address of the network interface card (of the
MAC computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
Page 86 of 212
Figure 69. The page for creating a new PPPoE connection. The PPP section.
Parameter Description
PPP
Password confirmation The confirmation of the entered password (to avoid mistypes).
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
Keep Alive
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
Page 87 of 212
Parameter Description
This option is used by some ISPs. Contact your ISP to clarify if this
PPP IP extension
checkbox needs to be enabled.
Fill in the field if you want to use a static IP address to access the
Static IP Address
Internet.
Select the checkbox if you want to log all data on PPP connection
PPP debug
debugging.
Figure 70. The page for creating a new PPPoE connection. The Miscellaneous section.
Parameter Description
Miscellaneous
Enable RIP Select the checkbox to allow using RIP for this connection.
Select the checkbox if you want one WAN IP address to be used for
NAT
all computers of your LAN.
Select the checkbox to allow the router to answer ping requests from
Ping the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 88 of 212
Figure 71. The page for creating a new IPv6 PPPoE connection. The General settings section.
Parameter Description
General settings
Page 89 of 212
Figure 72. The page for creating a new IPv6 PPPoE connection. The Ethernet section.
Parameter Description
Ethernet
( ) to set the MAC address of the network interface card (of the
MAC computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
Page 90 of 212
Figure 73. The page for creating a new IPv6 PPPoE connection. The PPP section.
Parameter Description
PPP
Password confirmation The confirmation of the entered password (to avoid mistypes).
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
Keep Alive
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
This option is used by some ISPs. Contact your ISP to clarify if this
PPP IP extension
checkbox needs to be enabled.
Page 91 of 212
Parameter Description
Figure 74. The page for creating a new Pv6 PPPoE connection. The IPv6 section.
Parameter Description
IPv6
Figure 75. The page for creating a new Pv6 PPPoE connection. The IPv6 gateway section.
Parameter Description
IPv6 gateway
Static IPv6 gateway The static address of the IPv6 gateway. The field is available for
address editing, if the SLAAC checkbox is not selected.
Page 92 of 212
Figure 76. The page for creating a new Pv6 PPPoE connection. The IPv6 DNS addresses section.
Parameter Description
Select the checkbox if you want to log all data on PPP connection
PPP debug
debugging.
Page 93 of 212
Figure 77. The page for creating a new Pv6 PPPoE connection. The Miscellaneous section.
Parameter Description
Miscellaneous
Enable RIP Select the checkbox to allow using RIP for this connection.
Select the checkbox to allow the router to answer ping requests from
Ping the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Page 94 of 212
Figure 78. The page for creating a new Static IP connection. The General settings section.
Parameter Description
General settings
Page 95 of 212
Figure 79. The page for creating a new Static IP connection. The Ethernet section.
Parameter Description
Ethernet
( ) to set the MAC address of the network interface card (of the
MAC computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
Page 96 of 212
Figure 80. The page for creating a new Static IP connection. The IP section.
Parameter Description
IP
Gateway IP address Enter an IP address of the gateway used by this WAN connection.
Primary DNS server/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS server relevant fields.
Obtain DNS server Select the checkbox to configure automatic assignment of DNS
addresses server addresses. If the checkbox is selected, the Primary DNS
automatically server and Secondary DNS server fields are not displayed.
Primary DNS server/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS server relevant fields.
Page 97 of 212
Figure 81. The page for creating a new Static IP connection. The Authorization via 802.1x protocol
section.
Parameter Description
Authorization in the
Select the checkbox to allow authorization in the ISP's network via
ISP’s network via
the 802.1x protocol.
802.1x protocol
Authentication
Select a needed authentication method from the drop-down list.
method
Page 98 of 212
Figure 82. The page for creating a new Static IP connection. The Miscellaneous section.
Parameter Description
Miscellaneous
Enable RIP Select the checkbox to allow using RIP for this connection.
Select the checkbox if you want one WAN IP address to be used for
NAT
all computers of your LAN.
Page 99 of 212
Figure 83. The page for creating a new Static IPv6 connection. The General settings section.
Parameter Description
General settings
Figure 84. The page for creating a new Static IPv6 connection. The Ethernet section.
Parameter Description
Ethernet
( ) to set the MAC address of the network interface card (of the
MAC computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
Figure 85. The page for creating a new Static IPv6 connection. The IP section.
Parameter Description
IP
Gateway IPv6 address Enter an IPv6 address of the gateway used by this WAN connection.
Static IPv6 gateway The static address of the IPv6 gateway. The field is available for
address editing, if the Gateway by SLAAC checkbox is not selected.
Figure 86. The page for creating a new Static IPv6 connection. The Miscellaneous section.
Parameter Description
Miscellaneous
Enable RIP Select the checkbox to allow using RIP for this connection.
Figure 87. The page for creating a new PPPoE + Static IP connection. The General settings section.
Parameter Description
General settings
Figure 88. The page for creating a new PPPoE + Static IP connection. The Ethernet section.
Parameter Description
Ethernet
( ) to set the MAC address of the network interface card (of the
MAC computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
Figure 89. The page for creating a new PPPoE + Static IP connection. The IP section.
Parameter Description
IP
Gateway IP address Enter an IP address of the gateway used by this WAN connection.
Primary DNS server/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS server relevant fields.
Obtain DNS server Select the checkbox to configure automatic assignment of DNS
addresses server addresses. If the checkbox is selected, the Primary DNS
automatically server and Secondary DNS server fields are not displayed.
Primary DNS server/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS server relevant fields.
Figure 90. The page for creating a new PPPoE + Static IP connection. The Authorization via 802.1x
protocol section.
Parameter Description
Authorization in the
Select the checkbox to allow authorization in the ISP's network via
ISP’s network via
the 802.1x protocol.
802.1x protocol
Authentication
Select a needed authentication method from the drop-down list.
method
Figure 91. The page for creating a new PPPoE + Static IP connection. The Miscellaneous section.
Parameter Description
Enable RIP Select the checkbox to allow using RIP for this connection.
Select the checkbox if you want one WAN IP address to be used for
NAT
all computers of your LAN.
Figure 92. The page for creating a new PPPoE + Static IP connection. The PPP section.
Parameter Description
PPP
Password confirmation The confirmation of the entered password (to avoid mistypes).
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
Keep Alive
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
Parameter Description
This option is used by some ISPs. Contact your ISP to clarify if this
PPP IP extension
checkbox needs to be enabled.
Fill in the field if you want to use a static IP address to access the
Static IP Address
Internet.
Select the checkbox if you want to log all data on PPP connection
PPP debug
debugging.
Figure 93. The page for creating a new PPPoE + Static IP connection. The Miscellaneous section.
Parameter Description
Enable RIP Select the checkbox to allow using RIP for this connection.
Select the checkbox if you want one WAN IP address to be used for
NAT
all computers of your LAN.
Select the checkbox to allow the router to answer ping requests from
Ping the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
Figure 94. The page for creating a new PPTP + Static IP connection. The General settings section.
Parameter Description
General settings
Figure 95. The page for creating a new PPTP + Static IP connection. The Ethernet section.
Parameter Description
Ethernet
( ) to set the MAC address of the network interface card (of the
MAC computer that is being used to configure the router at the moment)
as the MAC address of the WAN interface.
Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
Figure 96. The page for creating a new PPTP + Static IP connection. The IP section.
Parameter Description
IP
Gateway IP address Enter an IP address of the gateway used by this WAN connection.
Primary DNS server/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS server relevant fields.
Obtain DNS server Select the checkbox to configure automatic assignment of DNS
addresses server addresses. If the checkbox is selected, the Primary DNS
automatically server and Secondary DNS server fields are not displayed.
Primary DNS server/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS server relevant fields.
Figure 97. The page for creating a new PPTP + Static IP connection. The Authorization via 802.1x
protocol section.
Parameter Description
Authorization in the
Select the checkbox to allow authorization in the ISP's network via
ISP’s network via
the 802.1x protocol.
802.1x protocol
Authentication
Select a needed authentication method from the drop-down list.
method
Enable RIP Select the checkbox to allow using RIP for this connection.
Select the checkbox if you want one WAN IP address to be used for
NAT
all computers of your LAN.
Figure 98. The page for creating a new PPTP + Static IP connection. The VPN section.
Parameter Description
VPN
Password confirmation The confirmation of the entered password (to avoid mistypes).
VPN server address The IP or URL address of the PPTP or L2TP authentication server.
Parameter Description
Select the checkbox if you want the router to keep you connected to
your ISP even when the connection has been inactive for a specified
Keep Alive
period of time. When the checkbox is selected, the LCP interval
and LCP fails fields are available. Specify the required values.
Fill in the field if you want to use a static IP address to access the
Static IP Address
Internet.
Select the checkbox if you want to log all data on PPP connection
PPP debug
debugging.
Enable RIP Select the checkbox to allow using RIP for this connection.
Parameter Description
Select the checkbox if you want one WAN IP address to be used for
NAT
all computers of your LAN.
Select the checkbox to allow the router to answer ping requests from
Ping the external network through this connection. For security reasons,
it is recommended not to select this checkbox.
When all needed settings are configured, click the Apply button.
LAN
To configure the router's local interface, proceed to the Net / LAN page.
Parameter Description
Parameter Description
Parameter Description
In the IPv6 address assignment section, you can configure how clients from the LAN should
obtain IPv6 addresses.
Parameter Description
In the Static DHCP section, you can specify MAC address and IP address pairs (set a fixed IPv4
address in the local area network for a device with a certain MAC address). The router assigns IP
addresses in accordance with the specified pairs only when the DHCP server is enabled (in the
DHCP server section, in the Mode drop-down list, the Enable value is selected).
To create a MAC-IP pair, click the Add button. In the IP field, enter an IPv4 address which will be
assigned to the device from the LAN, then in the MAC field, enter the MAC address of this device.
In the Host field, specify a network name of the device for easier identification (optional).
Also you can create a MAC-IP pair for a device connected to the router's LAN at the moment. To do
this, select the relevant value from the Known IP/MAC addresses drop-down list (the IP and
MAC fields will be filled in automatically).
When all needed MAC-IP pairs are specified, click the Apply button.
Existing MAC-IP pairs are displayed in the table of the Static DHCP section. To remove a pair,
select the checkbox in the relevant line in the table and click the Remove button. Then click the
Apply button.
Wi-Fi
In this menu you can specify all needed settings for your wireless network.
Basic Settings
On pages of the Wi-Fi / Basic settings section, you can enable your wireless local area network
(WLAN) and configure its basic parameters. To configure the 2.4GHz band or 5GHz band, proceed
to the relevant page.
2.4GHz Band
Figure 103. Basic settings of the wireless LAN in the 2.4GHz band.
Parameter Description
MBSSID For every part of the WLAN you can specify a name (SSID),
security settings, and rules for MAC filtering. To specify these
values, select the needed part from the BSSID drop-down list and
click the Apply button. Then proceed to the relevant page of the
Wi-Fi menu section.
The unique identifier for your Wi-Fi network (for the 2.4GHz and
5GHz band). You cannot change the value of this parameter, it is
determined in the device's internal settings.
BSSID
If you have split your WLAN into parts, the drop-down list contains
two values. Each identifier corresponds to a single part of the
WLAN.
The field is available for the additional part of the network. Select
the checkbox if you want the devices connected to the additional
Enable guest network
part of the WLAN to be isolated from the devices and resources of
the router's LAN.
If the checkbox is selected, other users cannot see your Wi-Fi
network (or the selected part of the network). It is recommended not
Hide Access Point
to select this checkbox in order to simplify initial configuration of
your WLAN.
A name for the WLAN (or the selected part of the network). The
Network name (SSID)
name can consist of digits and Latin characters.
Country The country you are in. Select a value from the drop-down list.
The wireless channel number. When the auto value is selected, the
Channel
router itself chooses the channel with the least interference.
Operating mode of the wireless network of the router. This
parameter defines standards of the devices that will be able to use
Wireless mode
this band of your wireless network. Select a value from the drop-
down list.
Parameter Description
5GHz Band
Figure 104. Basic settings of the wireless LAN in the 5GHz band.
Parameter Description
Parameter Description
To split the network into two parts in the 5GHz band, select the
value 2 from the drop-down list. By default, the wireless network is
not split (the Disabled value is selected from the list).
MBSSID For every part of the WLAN you can specify a name (SSID),
security settings, and rules for MAC filtering. To specify these
values, select the needed part from the BSSID drop-down list and
click the Apply button. Then proceed to the relevant page of the
Wi-Fi menu section.
The unique identifier for your Wi-Fi network (for the 2.4GHz and
5GHz band). You cannot change the value of this parameter, it is
determined in the device's internal settings.
BSSID
If you have split your WLAN into parts, the drop-down list contains
two values. Each identifier corresponds to a single part of the
WLAN.
The field is available for the additional part of the network. Select
the checkbox if you want the devices connected to the additional
Enable guest network
part of the WLAN to be isolated from the devices and resources of
the router's LAN.
If the checkbox is selected, other users cannot see your Wi-Fi
network (or the selected part of the network). It is recommended not
Hide Access Point
to select this checkbox in order to simplify initial configuration of
your WLAN.
A name for the WLAN (or the selected part of the network). The
Network name (SSID)
name can consist of digits and Latin characters.
Country The country you are in. Select a value from the drop-down list.
The wireless channel number. When the auto value is selected, the
Channel
router itself chooses the channel with the least interference.
Operating mode of the wireless network of the router. This
parameter defines standards of the devices that will be able to use
Wireless mode
this band of your wireless network. Select a value from the drop-
down list.
The maximum number of devices connected to the wireless network
(or the selected part of the network) of the router. When the value 0
Max Associated Clients
is specified, the device does not limit the number of connected
clients.
Parameter Description
Security Settings
On pages of the Wi-Fi / Security settings section, you can modify security settings of the
WLAN. To configure the 2.4GHz band or 5GHz band, proceed to the relevant page.
By default, the WPA2-PSK network authentication type is specified for both bands of the WLAN.
The value of the Password field from the barcode label is used as the network key9.
In the BSSID drop-down list, the unique identifier of the Wi-Fi network is displayed. If your
network is split into parts, in the BSSID list, select the part for which the security settings should be
changed.
When you split the network into parts, an additional wireless network with the Open network
authentication type with no encryption is specified. It is strongly recommended to specify individual
security settings for your network.
9 For the models of the hardware version /RU the default network key is WPS PIN.
!
The WPA, WPA2, and WPA/WPA2 mixed authentication types require a RADIUS
server.
When the Open or Shared value is selected, the WEP Encryption settings section is displayed
(the section is unavailable for the wireless network operating modes which support the standard
802.11n):
Figure 107. The Open value is selected from the Network Authentication drop-down list.
Parameter Description
Encryption Key Keys for WEP encryption. The router uses the key selected from the
Default Key ID drop-down list. It is required to specify all the
WEP (1-4) fields.
Figure 108. The WPA2-PSK value is selected from the Network Authentication drop-down list.
Parameter Description
A key for WPA encryption. The key can contain digits and/or Latin
Encryption Key PSK
characters.
The time period (in seconds), at the end of which a new key for WPA
WPA renewal encryption is generated. When the value 0 is specified for this field,
the key is not renewed.
When the WPA, WPA2, or WPA/WPA2 mixed value is selected, the RADIUS settings and
WPA Encryption settings sections are available:
Figure 109. The WPA2 value is selected from the Network Authentication drop-down list.
Parameter Description
The password which the router uses for communication with the
RADIUS encryption key RADIUS server (the value of this parameter is specified in the
RADIUS server settings).
The time period (in seconds), at the end of which a new key for WPA
WPA renewal encryption is generated. When the value 0 is specified for this field,
the key is not renewed.
When you have configured the parameters, click the Apply button.
MAC Filter
On pages of the Wi-Fi / MAC Filter section, you can define a set of MAC addresses of devices
which will be allowed to access the WLAN, or define MAC addresses of devices which will not be
allowed to access the WLAN. To configure the 2.4GHz band or 5GHz band, proceed to the relevant
page.
Figure 110. The page for configuring the MAC filter for the wireless network.
In the BSSID drop-down list, the unique identifier of the Wi-Fi network is displayed. If your
network is split into parts, in the BSSID list, select the part for which MAC filter should be
configured
By default, MAC filtering is not active (the Disabled value is selected from the MAC filter
restrict mode drop-down list on the Wi-Fi / MAC Filter page of the corresponding band).
To open your wireless network for the devices which MAC addresses are specified on this page and
to close the wireless network for all other devices, select the Allow value from the MAC filter
restrict mode drop-down list and click the Apply button.
To close your wireless network for the devices which MAC addresses are specified on this page,
select the Deny value from the MAC filter restrict mode drop-down list and click the Apply
button.
Click the Add button to specify a MAC address to which the selected filtering mode will be
applied.
Parameter Description
In the field, enter the MAC address to which the selected filtering
mode will be applied.
MAC address Also you can set the address of a device connected to the router's
LAN at the moment. To do this, select the relevant value from the
drop-down list (the field will be filled in automatically).
The name of the device for easier identification. You can specify any
Hostname
name.
Select the checkbox to enable the selected filtering mode of the
Enable
device.
When you have configured the parameters, click the Apply button.
To remove a MAC address from the list of MAC addresses, select the checkbox located to the left
of the relevant MAC address and click the Delete button.
If you want to disconnect a wireless device from your WLAN, select the checkbox in the line
containing the relevant MAC address, and click the Disconnect button.
To view the latest data on the devices connected to the WLAN, click the Refresh button.
WPS
On pages of the Wi-Fi / WPS section, you can enable the function for secure configuration of the
WLAN and select a method used to easily add wireless devices to the WLAN.
The WPS function helps to configure the protected wireless network automatically. Devices
connecting to the wireless network via the WPS function must support the WPS function.
If the router's WLAN is split into parts (the value 2 is selected from the MBSSID drop-
! down list on the Wi-Fi / Basic settings page), the WPS function can be used only for the
first part of the WLAN (the first value from the BSSID drop-down list).
Before using the function you need to configure one of the following authentication types:
Open with no encryption, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed with the
! AES encryption method (on the relevant band page of the Wi-Fi / Security settings
section). When other security settings are specified for the band of the WLAN, controls of
the Wi-Fi / WPS page of the relevant band are not available.
To activate the WPS function, select the WPS Enable checkbox on the Wi-Fi / WPS/ 2.4 GHz or
Wi-Fi / WPS / 5 GHz page and click the Apply button. When the checkbox is selected, the
Information and Connection sections are available on the page.
Parameter Description
The PIN code of the router. This parameter is used when connecting
Default PIN code
the router to a registrar to set the parameters of the WPS function.
The state of the WPS function:
• Configured (all needed settings are specified; these settings
will be used upon establishing the wireless connection)
WPS Status
• Unconfigured (after activating the WPS function, the SSID
and the encryption key will be configured automatically, the
network authentication type will be changed to WPA2-PSK).
Network Authentication The network authentication type specified for the WLAN.
Reset to unconfigured Click the button to reset the parameters of the WPS function.
4. Save the settings and close the web-based interface (click the icon (Save) in the
menu displayed when the mouse pointer is over the System caption in the top left part of
Additional Settings
On pages of the Wi-Fi / Additional settings section, you can define additional parameters for the
WLAN of the router. To configure the 2.4GHz band or 5GHz band, proceed to the relevant page.
! Changing parameters presented on this page may negatively affect your WLAN!
Parameter Description
The time interval (in seconds) between keep alive checks of wireless
Station Keep Alive devices from your WLAN. When the value 0 is specified, the
checking is disabled.
The time interval (in milliseconds) between packets sent to
Beacon Period
synchronize the wireless network.
The minimum size (in bites) of a packet for which an RTS frame is
RTS Threshold
transmitted.
The maximum size (in bites) of a non-fragmented packet. Larger
Frag Threshold
packets are fragmented (divided).
The time period (in seconds) between sending a DTIM (a message
DTIM Period notifying on broadcast or multicast transmission) and data
transmission.
Parameter Description
Parameter Description
To enable the function, select the Enable checkbox. When the checkbox is selected, the Settings
section is available on the page.
Parameter Description
Maximum time of The maximum time period (in seconds) during which the access
storing data on point (router) stores data on the signal strength of the client located
adjacent clients on its coverage area.
The number of the port used for data exchange between access
Port number
points (routers).
Minimum level of The threshold value of the signal strength upon which the access
connection quality point (router) starts scanning other devices.
This parameter is used for calculation of the signal strength upon
which the smart adjustment function goes off. If the signal strength
provided by the device is less than the sum of the Minimum level
Dead zone of connection quality field value and the Dead zone field
value, then the client disconnects from the access point (router) and
connects to another device. You can specify the values from -50% to
+50%.
Parameter Description
Select the checkbox in order to use multicast traffic for service data
exchange between access points (routers). This setting is needed if
the devices which support the smart adjustment function are located
Use multicast for in different subnets. If the checkbox is selected, the Multicast TTL
service data exchange and Multicast group address fields are displayed on the page.
If the checkbox is not selected, broadcast traffic is used for service
data exchange.
Specify the TTL (Time to live) parameter value. The recommended
Multicast TTL
value is 4.
Multicast group Specify the address of the multicast group (from the subnet
address 239.255.0.0/16).
After specifying the needed parameters, click the Apply button.
To disable the function of smart adjustment of Wi-Fi clients, deselect the Enable checkbox.
WMM
On the Wi-Fi / WMM page, you can enable the Wi-Fi Multimedia function.
The WMM function implements the QoS features for Wi-Fi networks. It helps to improve the
quality of data transfer over Wi-Fi networks by prioritizing different types of traffic.
To enable the function, select the WMM checkbox and click the Apply button.
!
All needed settings for the WMM function are specified in the device's system. It is
recommended not to change the default values.
The WMM function allows assigning priorities for four Access Categories (AC):
• AC_BK (Background), low priority traffic (print jobs, file downloads, etc.).
• AC_BE (Best Effort), traffic from legacy devices or devices/applications that do not support
QoS.
• AC_VI (Video).
• AC_VO (Voice).
Parameters of the Access Categories are defined for both the router itself (in the Parameters of
Access Point section) and wireless devices connected to it (in the Parameters of Station
section).
Parameter Description
Client
On the Wi-Fi / Client page, you can configure the router as a client to connect to a wireless access
point.
As a rule, the client mode is used to connect to a WISP network. All parameters specified on this
page should be provided by your WISP.
To configure the router as a client, select the Enable client checkbox. When the checkbox is
selected, the following fields are displayed on the page:
Parameter Description
Broadcast wireless
If the checkbox is not selected, devices cannot connect to the
network 2.4GHz /
relevant band of the router's WLAN. Upon that the router can
Broadcast wireless
connect to another access point as a wireless client.
network 5GHz
Network name (SSID) The name of the network to which the router connects.
BSSID The unique identifier of the network to which the router connects.
Network Authentication The authentication type of the network to which the router connects.
When the Open or Shared authentication type is selected, the following fields are available:
Parameter Description
Encryption Key WEP Keys for WEP encryption. The router uses the key selected from the
Default Key ID drop-down list. It is required to specify all the
(1-4) fields.
Parameter Description
A key for WPA encryption. The key can contain digits and/or Latin
Encryption Key PSK
characters.
Advanced
In this menu you can configure advanced settings of the router:
• create groups of ports for VLANs
• enable the UPnP IGD protocol
• configure autonegotiation or manually configure speed and duplex mode for each Ethernet
port of the router
• setup the rate limit for traffic transmitted from every port of the router
• configure notifications on the reason of the Internet connection failure
• configure a DDNS service
• add name servers
• define static routes
• create rules for remote access to the web-based interface
• allow the router to use IGMP, RTSP, enable the SIP ALG function,
PPPoE/PPTP/L2TP/IPSec pass through functions
• configure TR-069 client
• configure VPN tunnels based on IPsec protocol.
VLAN
On the Advanced / VLAN page, you can create and edit groups of ports for virtual networks
(VLANs).
By default, 2 groups are created in the router's system:
• lan: it includes ports 1-4. You cannot delete this group.
• wan: for the WAN interface; it includes the INTERNET port. You can edit or delete this
group.
If you want to create a group including LAN ports of the router, first delete relevant records from
the lan group on this page. To do this, select the lan group, deselect the needed checkbox located to
the left of the relevant port, and click the Apply button.
To create a new group for VLAN, click the Add button.
Figure 119. The page for adding a group of ports for VLAN.
Parameter Description
Tagged port From the list, select an available value to assign it to this group.
Parameter Description
The section includes the ports that can be added to the group.
To add a port to the group, select the needed checkbox located to the
Untagged ports left of the relevant port.
To remove a port from the group, deselect the needed checkbox
located to the left of the relevant port.
Click the Apply button.
To edit or remove an existing group, select the relevant group on the Advanced / VLAN page. On
the page displayed, change the parameters and click the Apply button, or click the Delete button.
UPnP IGD
On the Advanced / UPnP IGD page, you can enable the UPnP IGD protocol. The router uses the
UPnP IGD protocol for automatic configuration of its parameters for network applications requiring
an incoming connection to the router.
If you want to manually specify all parameters needed for network applications, deselect the
Enabled checkbox and click the Apply button.
If you want to enable the UPnP IGD protocol in the router, select the Enabled checkbox and click
the Apply button.
When the protocol is enabled, the router's parameters configured automatically are displayed on the
page:
Parameter Description
Port Settings
On the Advanced / Port settings page, you can configure or disable autonegotiation of speed
and duplex mode or manually configure speed and duplex mode for each Ethernet port of the router.
Also you can enable or disable data flow control in the autonegotiation mode. This function is used
for equal load balancing in ISPs' networks. Contact your ISP to clarify if this function needs to be
enabled.
By default, autonegotiation of speed, duplex mode, and data flow control is configured for each
Ethernet port of the router. If you need to specify speed and duplex mode manually or change
autonegotiation settings (speed, duplex mode, or enable/disable data flow control) for a port, select
the relevant port in the table.
!
When autonegotiation is disabled, speed and duplex mode settings for both devices
connected to each other should be the same.
Figure 122. The page for changing the settings of the router's port.
Parameter Description
Parameter Description
Autonegotiation modes
Flow control
Symmetric flow control Select the checkbox to enable the flow control function for the port.
After specifying the needed parameters, click the Apply button.
If in the future you need to edit the parameters of the router's port, select the port in the table. On
the opened page, change the needed parameters and click the Apply button.
Bandwidth Control
On the Advanced / Bandwidth control page you can setup the rate limit for traffic transmitted
from every port of the router.
By default, the rate is not limited. If you want to limit the rate for traffic transmitted from a port,
select the line corresponding to this port in the table.
On the opened page, select the Limit TX rate checkbox and enter the maximum value of the
transmitted traffic rate for this port in the Maximum rate field. Then click the Apply button.
If you want to remove the rate limit for this port, deselect the Limit TX rate checkbox and click the
Apply button.
Redirect
On the Advanced / Redirect page, you can enable notifications on the reason of the Internet
connection failure. Notifications will be displayed in the browser window when a user is attempting
to open a web site on the Internet.
To configure notifications, select the Enable checkbox. Then select needed checkboxes in the
Reasons for redirect section.
Parameter Description
DDNS
On the Advanced / DDNS page, you can define parameters of the DDNS service, which allows
associating a domain name with dynamic IP addresses.
Parameter Description
The domain name registered at your DDNS provider. The field will
Full host name
be filled in automatically.
DNS
On the Advanced / DNS page, you can add DNS servers to the system.
DNS servers are used to determine the IP address from the name of a server in Intranets or the
Internet (as a rule, they are specified by an ISP or assigned by a network administrator).
You can specify the addresses of DNS servers manually on this page, or configure the router to
obtain DNS servers addresses automatically from your ISP upon installing a connection.
!
When you use the built-in DHCP server, the network parameters (including DNS servers)
are distributed to clients automatically.
From the Protocol type drop-down list, select an IP version for which DNS servers should be
configured.
If you want to configure automatic obtainment of DNS servers addresses, deselect the Manual
checkbox, select a WAN connection which will be used to obtain addresses of DNS servers
automatically from the Interface drop-down list or select the Default route checkbox, so that the
router could use the connection set as the default gateway (on the Net / WAN page) to obtain DNS
server addresses, and click the Apply button.
If you want to specify the DNS server manually, select the Manual checkbox and enter a DNS
server address in the Name servers list. To specify several addresses, press the Enter key and
enter a needed address in the next line. Then click the Apply button.
To remove a DNS server from the system, remove the relevant line from the Name servers field
and click the Apply button.
Routing
On the Advanced / Routing page, you can add static routes into the system.
To create a new route, click the Add button. In the line displayed, you can specify the following
parameters:
Parameter Description
A metric for the route. The lower the value, the higher is the route
Metric
priority. Optional.
After specifying the needed parameters, click the Apply button.
To edit an existing route, select a needed field in the relevant line of the table, change its value, and
click the Apply button.
To remove an existing route, select the checkbox located to the left of the relevant line in the table
and click the Delete button. Then click the Apply button.
IPv6 Routing
On the Advanced / IPv6 routing page, you can add static routes into the system.
To create a new route, click the Add button. In the line displayed, you can specify the following
parameters:
Parameter Description
A metric for the route. The lower the value, the higher is the route
Metric
priority. Optional.
After specifying the needed parameters, click the Apply button.
To edit an existing route, select a needed field in the relevant line of the table, change its value, and
click the Apply button.
To remove an existing route, select the checkbox located to the left of the relevant line in the table
and click the Delete button. Then click the Apply button.
Figure 132. The page for adding a rule for remote management.
Parameter Description
Select the checkbox to allow access to the router for any host. When
Open access from any the checkbox is selected, the IP version drop-down list is
external host displayed on the page, and the IP address and Mask fields are not
available for editing.
Miscellaneous
On the Advanced / Miscellaneous page, you can allow the router to use IGMP and RTSP,
enable the SIP ALG function and the PPPoE/PPTP/L2TP/IPSec pass through functions.
IGMP is used for managing multicast traffic (transferring data to a group of destinations). This
protocol allows using network resources for some applications, e.g., for streaming video, more
efficiently.
SIP is used for creating, modifying, and terminating communication sessions. This protocol allows
telephone calls via the Internet.
RTSP is used for real-time streaming multimedia data delivery. This protocol allows some
applications to receive streaming audio/video from the Internet.
The PPPoE pass through function allows PPPoE clients of computers from your LAN to connect to
the Internet through PPPoE connections of the router.
The PPTP pass through, L2TP pass through and IPSec pass through functions allow VPN PPTP,
L2TP and IPSec traffic to pass through the router so that clients from your LAN can establish
relevant connections with remote networks.
Parameter Description
PPPoE pass through Select the checkbox to enable the PPPoE pass through function.
PPTP pass through Select the checkbox to enable the PPTP pass through function.
L2TP pass through Select the checkbox to enable the L2TP pass through function.
IPSec pass through Select the checkbox to enable the IPSec pass through function.
After specifying the needed parameters, click the Apply button.
10 On the Net / WAN page, create a WAN connection, on the Advanced / Miscellaneous page, select the SIP
checkbox, connect the phone cable between a LAN port of the router and the IP phone. Specify SIP parameters on
the IP phone and configure it to obtain an IP address automatically (as DHCP client).
TR-069 Client
On the Advanced / TR-069 Client page, you can configure the router for communication with a
remote Auto Configuration Server (ACS).
The TR-069 client is used for remote monitoring and management of the device.
Parameter Description
The interface which the router uses for communication with the
ACS. Leave the automatic value to let the device select the
Interface
interface basing on the routing table or select another value if
required by your ISP.
Enable TR-069 Client Select the checkbox to enable the TR-069 client.
Parameter Description
Inform settings
Select the checkbox so the router may send reports (data on the
Enable
device and network statistics) to the ACS.
Interval Specify the time period (in seconds) between sending reports.
URL address The URL address of the ACS provided by the ISP.
ConnectionRequest Settings
The password used by the ACS. The password can contain digits,
Password Latin letters (uppercase and/or lowercase), and characters available
on the keyboard.
Request port The port used by the ACS. By default, the port 8999 is specified.
IPsec
On the Advanced / IPsec page, you can configure VPN tunnels based on IPsec protocol.
IPsec is a protocol suite for securing IP communications.
To allow IPsec tunnels, select the Enabled checkbox. Then click the Add button to create a new
tunnel.
! Setting for both devices which establish the tunnel should be the same.
Parameter Description
Select the checkbox to allow a remote host with any public IP address
to connect to the router via IPsec protocol. The checkbox can be
Dynamic IPsec
selected for one tunnel only. Connection requests via the tunnel, for
which this checkbox is selected, can be sent by a remote host only.
Parameter Description
Select a WAN connection through which the tunnel will pass. When
Interface the <auto> value is selected, the router uses the connection set as the
default gateway.
The NAT Traversal function allows VPN traffic to pass through the
NAT-enabled router.
Select the Disabled value to disable the function.
NAT Traversal Select the Enabled value to enable the function if it is supported by a
remote host.
Select the Force value to make the function be always on even if it is
not supported by a remote host.
Select the checkbox to enable using DPD protocol for this tunnel.
Such a setting allows to check the status of a remote host: if encrypted
packets exchange between the router and the remote host breaks down,
Enable DPD the router starts sending DPD messages to the remote host. If the
checkbox is not selected, the Dead Peer Detection delay and
Dead Peer Detection maximum fail fields are not available for
editing.
Dead Peer Detection A time period (in seconds) between attempts to check the status of a
delay remote host. By default, the value 5 is specified.
Parameter Description
Allow traffic between Select the checkbox to allow data exchange between subnets with
tunneled networks which IPsec tunnels have been created.
Figure 137. The page for adding an IPsec tunnel.The first phase / The second phase sections.
Parameter Description
First phase
Select encryption algorithm from the drop-down list.
encryption algorithm
Parameter Description
First phase DHgroup A Diffie-Hellman key group for Phase 1. Select a value from the drop-
type down list.
Second phase
Select encryption algorithm from the drop-down list.
encryption algorithm
Authentication
Select authentication algorithm from the drop-down list.
algorithm
A Diffie-Hellman key group for Phase 2. Select a value from the drop-
Second phase
down list. The field is available, if the Enable PFS checkbox is
PFSgroup type
selected.
Figure 138. The page for adding an IPsec tunnel. The Tunneled networks section.
Parameter Description
To edit fields in the Tunneled networks section, select a needed field in the relevant line of the
table and change its value.
To remove IP addresses of subnets, select the checkbox located to the left of the relevant line in the
table and click the Delete button.
Click the Apply button.
After clicking the Apply button, the page with the sections IPsec and Status opens.
To edit the parameters of an existing tunnel, in the IPsec section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the Apply button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the Delete button.
In the Status section, the current state of an existing tunnel is displayed.
To disable VPN tunnels based on IPsec protocol, deselect the Enabled checkbox.
Firewall
In this menu you can configure the firewall of the router:
• add rules for IP filtering
• create virtual servers
• define a DMZ
• configure the MAC filter.
IP Filters
On the Firewall / IP filters page, you can create new rules for filtering IP packets and edit or
remove existing rules.
Parameter Description
General
Parameter Description
IP Addresses
Ports
A port of the source IP address. You can specify one port, several
Source port
ports separated by a comma, or a range of ports separated by a colon.
A port of the destination IP address. You can specify one port,
Destination port several ports separated by a comma, or a range of ports separated by
a colon.
Click the Apply button.
To edit a rule for IP filtering, click the link to the relevant rule. On the opened page, change the
needed parameters and click the Apply button.
To remove a rule, select the checkbox located to the left of the relevant line in the table and click
the Delete button. Also you can remove a rule on the editing page.
Virtual Servers
On the Firewall / Virtual servers page, you can create virtual servers for redirecting incoming
Internet traffic to a specified IP address in the local area network.
Parameter Description
A protocol that will be used by the new virtual server. Select a value
Protocol
from the drop-down list.
A port of the router from which traffic is directed to the IP address
Public port (begin)/ specified in the Private IP field. Specify the start and the end value
for the port range. If you need to specify one port, enter the needed
Public port (end) value in the Public port (begin) field and leave the Public port
(end) field blank.
A port of the IP address specified in the Private IP field to which
Private port (begin)/ traffic is directed from the Public port. Specify the start and the
end value for the port range. If you need to specify one port, enter
Private port (end) the needed value in the Private port (begin) field and leave the
Private port (end) field blank.
The IP address of the server from the local area network. To choose
a device connected to the router's LAN at the moment, select the
Private IP
relevant value from the drop-down list (the field will be filled in
automatically).
Select the checkbox in order to let the users of the router's LAN
access the local server using the external IP address of the router or
Enable NAT Loopback its DDNS name (if a DDNS service is configured). Users from the
external network access the router using the same address (or DDNS
name).
Click the Apply button.
To edit the parameters of an existing server, select the relevant server in the table. On the opened
page, change the needed parameters and click the Apply button.
To remove a server, select the checkbox located to the left of the relevant line in the table and click
the Delete button. Also you can remove a server on the editing page.
To remove all servers from this page, click the Clear all button.
In the Remote access configuration section, rules created on the Advanced / Remote
access to device page are displayed. If after creating virtual servers you need to edit rules for
remote access, you can quickly get to the Advanced / Remote access to device page by
clicking the link to the relevant rule.
DMZ
A DMZ is a host or network segment located “between” internal (local) and external (global)
networks. In the router, the DMZ implements the capability to transfer a request coming to a port of
the router from the external network to a specified host of the internal network.
On the Firewall / DMZ page you can specify the IP address of the DMZ host.
MAC Filter
On the Firewall / MAC filter page, you can configure MAC-address-based filtering for computers
of the router's LAN.
Select the needed action from the drop-down list to configure filtering for all devices of the router's
network:
• Allow: Allows access to the router's network and to the Internet for devices (the value is
specified by default);
• Deny: Blocks access to the router's network for devices.
If you need to specify a filtering mode for each device separately, create relevant rules. To do this,
click the Add button.
Figure 145. The page for adding a rule for the MAC filter.
Parameter Description
The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
MAC address
moment. To do this, select the relevant device from the drop-down
list (the field will be filled in automatically).
Control
This menu is designed to create restrictions on access to certain web sites.
URL Filter
On the pages of the Control / URL filter section, you can specify restrictions on access to certain
web sites.
To enable the URL filter, select the Enable/Disable URL filter checkbox on the Control / URL
filter / Configuration page, then select a needed mode from the URL filter type drop-down list:
• Block listed URLs: when this value is selected, the router blocks access to all addresses
specified on the Control / URL filter / Configuration page;
• Block all URLs except listed: when this value is selected, the router allows access to
addresses specified on the Control / URL filter / Configuration page and blocks access
to all other web sites.
Click the Apply button.
To specify URL addresses to which the selected filtering will be applied, go to the Control / URL
filter / URL addresses page.
Click the Add button and enter an address in the field displayed. Then click the Apply button.
To remove an address from the list of URL addresses, select the checkbox located to the left of the
relevant URL address and click the Delete button. Then click the Apply button.
Yandex.DNS
This menu is designed to configure the Yandex.DNS service.
Yandex.DNS is a web content filtering service which provides the DNS server, protect a computer
against malicious web sites, and block access to adult web sites. Click the About yandex.DNS
link in the Yandex.DNS section to get detailed information on the service.
To enable the Yandex.DNS service, select the Enabled checkbox on the Yandex.DNS / Internet
protection settings / Settings page.
When the checkbox is selected, the Default mode selection section is displayed on the page.
Select the needed choice of the radio button to configure filtering for all devices of the router's
network:
• Safe mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites;
• Child mode: when this value is selected, the service blocks access to malicious and
fraudulent web sites and blocks access to adult content;
• Protection off: when this value is selected, the service provides the DNS server with no
restrictions on access to unsafe web sites.
Also the selected filtering mode will be applied to all devices newly connected to the router's
network.
If you need to specify a filtering mode for each device separately, create relevant rules. To do this,
go to the Yandex.DNS / Internet protection settings / Devices page.
On the opened page, in the Clients without rules section, the devices which filtering mode is
specified on the Yandex.DNS / Internet protection settings / Settings page are displayed.
The name of the mode is displayed in the Default mode section.
To create11 a new filtering rule for a device, click the Add button in the Rules section. In the line
displayed, you can specify the following parameters:
Parameter Description
The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
MAC addresses moment. To do this, select the relevant device from the Known
IP/MAC addresses drop-down list (the field will be filled in
automatically).
The IP address of a device from the router's LAN. You can enter the
IP address of a device connected to the router's LAN at the moment.
IP address To do this, select the relevant device from the Known IP/MAC
addresses drop-down list (the field will be filled in
automatically).
Enter a name for the rule for easier identification. You can specify
Set the name
any name.
11 When a new rule for filtering is created, a MAC address and IP address pair is displayed on the Net / LAN page.
The created pair will be deleted with the relevant rule.
System
In this menu you can do the following:
• change the password used to access the router's settings
• save the current settings to the non-volatile memory
• reboot the router
• create a backup of the router's configuration
• restore the router's configuration from a previously saved file
• restore the factory default settings
• view the system log
• update the firmware of the router
• configure automatic notification on new firmware version
• configure automatic synchronization of the system time or manually configure the date and
time for the router
• check availability of a host on the Internet through the web-based interface of the router
• trace the route to a host
• allow or forbid access to the router via TELNET
• configure the interface parameters.
Administrator Password
On the System / Administrator password page, you can change the password for the
administrator account used to access the web-based interface of the router and to access the device
settings via TELNET.
!
For security reasons, it is strongly recommended to change the administrator password
upon initial configuration of the router.
Enter the new password in the Password and Confirmation fields and click the Apply button.
Configuration
On the System / Configuration page, you can reboot the device, save the changed settings to the
non-volatile memory, restore the factory defaults, backup the current configuration, or restore the
router's configuration from a previously created file.
Control Description
Click the button to reboot the device. All unsaved changes will be
Reboot
lost after the device's reboot.
Click the button to restore the factory default settings. Also you can
Factory restore the factory defaults via the hardware RESET button (see the
Back and Bottom Panels section, page 14).
Click the button to save the configuration (all settings of the router)
Backup to your PC. The configuration backup will be stored in the
download location of your web browser.
Control Description
Click the button and follow the dialog box appeared to select a
Browse previously saved configuration file (all settings of the router)
located on your PC and upload it.
System Log
On the System / System log / Configuration page, you can set the system log options and
configure sending the system log to a remote host.
To enable logging of the system events, select the Logging checkbox. Then specify the needed
parameters.
Control Description
The IP or URL address of the host from the local or global network,
Server
to which the system log will be sent.
Control Description
A port of the host specified in the Server field. By default, the value
Port
514 is specified.
After specifying the needed parameters, click the Apply button.
To disable logging of the system events, deselect the Logging checkbox and click the Apply
button.
On the System / System log / Log page, the events specified in the Logging level list are
displayed.
Firmware Upgrade
On the System / Firmware upgrade page, you can upgrade the firmware of the router and
configure the automatic check for updates of the router's firmware.
!
Upgrade the firmware only when the router is connected to your PC via a wired
connection.
The current version of the router's firmware is displayed next the D-Link logo in the top left corner
of the page.
By default, the automatic check for the router's firmware updates is enabled. If a firmware update is
available, a notification will be displayed in the top right corner of the page.
To disable the automatic check for firmware updates, in the Remote update section, deselect the
Check for updates automatically checkbox and click the Apply settings button.
To enable the automatic check for firmware updates, in the Remote update section, select the
Check for updates automatically checkbox and click the Apply settings button. By default,
in the Remote server URL field, the D-Link update server address (fwupdate.dlink.ru) is
specified.
You can upgrade the firmware of the router locally (from the hard drive of your PC) or remotely
(from the update server).
Local Update
!
Attention! Do not turn off the router before the firmware upgrade is completed. This may
cause the device breakdown.
To update the firmware of the router locally, follow the next steps:
1. Download a new version of the firmware from www.dlink.ru.
2. Click the Browse button on the System / Firmware upgrade page to locate the new
firmware file.
3. Click the Update button to upgrade the firmware of the router.
4. Wait until the router is rebooted (about one and a half or two minutes).
5. Log into the web-based interface using the login (admin) and the current password.
After the upgrade is completed, the new version of the firmware will be displayed in the top left
corner of the page.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, place the mouse pointer over the System caption in the top left corner of the
page and click the (Reset to factory) icon. Wait until the router is rebooted.
Remote Update
!
Attention! Do not turn off the router before the firmware upgrade is completed. This may
cause the device breakdown.
To update the firmware of the router remotely, follow the next steps:
1. On the System / Firmware upgrade page, in the Remote update section, click the
Check for updates button to check if a newer firmware version exists.
2. Click the OK button in the window displayed to upgrade the firmware of the router. Also
you can upgrade the firmware of the router by clicking the Remote update button (the
button is displayed if a newer version of the firmware is available).
3. Wait until the router is rebooted (about one and a half or two minutes).
4. Log into the web-based interface using the login (admin) and the current password.
After the upgrade is completed, the new version of the firmware will be displayed in the top left
corner of the page.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, place the mouse pointer over the System caption in the top left corner of the
page and click the (Reset to factory) icon. Wait until the router is rebooted.
System Time
On the System / System time page, you can manually set the time and date of the router or
configure automatic synchronization of the system time with a time server on the Internet.
To set the system time manually, select the Manual value from the Mode drop-down list and set
the time and date in the fields displayed. Then click the Apply button.
To enable automatic synchronization with a time server, follow the next steps:
1. Select the NTP value from the Mode drop-down list.
2. Select your time zone from the drop-down list. To set the time zone in accordance with the
settings of your operating system, click the Determine timezone button in the bottom
right corner of the page.
3. Specify the needed NTP server in the NTP servers field or leave the server specified by
default.
4. Click the Apply button.
To enable automatic adjustment for daylight saving time of the router, select the Daylight saving
time checkbox.
In some cases NTP servers addresses are provided by your ISP. In this case, you need to select the
Get NTP server addresses using DHCP checkbox. Contact your ISP to clarify if this
checkbox needs to be enabled. If the Get NTP server addresses using DHCP checkbox is
selected, the NTP servers field is not available.
After clicking the Apply button, the date and time set for the router will be displayed in the
System date and System time fields.
When the router is powered off or rebooted, the system time is reset to the default value.
!
If you have set automatic synchronization for the system time, the internal clock of the
device will be configured after connecting to the Inter net. If you have set the system time
manually, you need to set the time and date again (see above).
Ping
On the System / Ping page, you can check availability of a host from the local or global network
via the Ping utility.
The Ping utility sends echo requests to a specified host and receives echo replies.
To check availability of a host, enter the IP address or name of this host in the Host field, and select
a number of requests that will be sent in order to check its availability from the Count of packets
drop-down list. If availability check should be performed with IPv6, select the relevant checkbox.
Click the Start button. After a while, the results will be displayed on the page.
Traceroute
On the System / Traceroute page, you can determine the route of data transfer to a host via the
traceroute utility.
To determine the route, enter the name or IP address of a host in the Host field. If the route should
be determined using IPv6, select the relevant checkbox. Click the Start button. After a while, the
results will be displayed on the page.
Telnet
On the System / Telnet page, you can enable or disable access to the device settings via TELNET
from your LAN. By default, access is enabled.
To disable access via TELNET, deselect the On checkbox and click the Apply button.
To enable access via TELNET again, select the On checkbox. In the Port field, enter the number of
the router's port through which access will be allowed (by default, the port 23 is specified). Then
click the Apply button.
Interface settings
On the System / Interface settings page, you can configure the interface language and specify
an idle period at the end of which the session with the interface is completed.
Safety Instructions
Place your router on a flat horizontal surface or mount the router on the wall (the mounting holes
are located on the bottom panel of the device). Make sure that the router is provided with sufficient
ventilation.
To prevent overheating, do not obstruct the ventilation openings of the router.
Plug the router into a surge protector to reduce the risk of damage from power surges and lightning
strikes.
Operate the router only from an electrical outlet with the correct power source as indicated on the
adapter.
Do not open the cover of the router. Otherwise any warranty will be invalidated.
Unplug the equipment before dusting and cleaning. Use a damp cloth to clean the equipment. Do
not use liquid/aerosol cleaners or magnetic/static cleaning devices.