Using the Configuration Interface

36

D-Link Systems, Inc.

Routing

Add/Edit Route

Adds a new route to the IP routing table or edits an existing route.

Specifies whether the entry will be enabled or disabled.

The IP address or network that the packets will be attempting to access

Note: 192.168.1.0 with a Netmask of 255.255.255.0 means traffic will be

routed to the entire 192.168.1.x network.

Used to specify which portion of the Destination IP signifies the network

trying to be accessed and which part signifies the host that the packets

will be routed to

Note: 255.255.255.255 is used to signify only the host that was entered in

the Destination IP field.

Specifies the next hop to be taken if this route is used. A gateway of

0.0.0.0 implies there is no next hop, and the IP address matched is directly

connected to the router on the interface specified: LAN or WAN.

Specifies the interface, LAN or WAN, that the IP packet must use to transit

out of the router when this route is used.

The amount of hops it will take to reach the Destination IP or network.

A

hop is considered to be traffic passing through a router from one network to

another.

If there is only one router between your network and the Destination

network, then the Metric value would be 1.

Saves the new rule or modified existing rule to the Rules list. When you are

done editing the settings, you must click the Save Settings button at the top

of the page to make the changes effective and permanent.

Route List

This section shows the current routing table entries. Certain required routes are predefined and

cannot be changed. Entries on this list that can modified can be enabled/disabled by toggling the

Enable checkbox. Editable entries can be modified by clicking on the paper and pencil icon. To delete

an editable entry, click on the trash can icon. After you’ve completed all modifications or deletions,

you must click the

Save Settings

button at the top of the page to save your changes. The router

must reboot before new settings will take effect. You will be prompted to

Reboot the Device

or

Continue

. If you need to make additional settings changes, click

Continue

. If you are finished with

your configuration settings, click the

Reboot the Device

button.

Enable:

Destination IP:

Netmask:

Gateway:

Interface:

Metric:

Save:

Advanced > Routing

Using the Configuration Interface

37

D-Link Systems, Inc.

Access Control

The Access Control section allows you to control access in and out of your network. Use this feature

as Parental Controls to only grant access to approved sites, limit web access based on time or dates,

and/or block access from applications like P2P utilities or games.

Enabled

By default the Access Control feature is disabled. If you enable Access Control, every device on the

LAN must either have a static IP address (that is one that is not in the DHCP range) or must be in

the Static DHCP Client List (see Basic > DHCP).

When Access Control is disabled, every device on the LAN is permitted to access the Internet.

However, if you enable Access Control, every device on the LAN that needs to access the Internet

must have an Access Control rule that explicitly permits it to access the Internet. Devices that do

not have an Access Control Rule cannot access the Internet. When Access Control is enabled, the

options below will appear:

Add/Edit Access Control Rule

Create a name for this access control policy that is meaningful to you.

Typically this would be a system name or user name such as Rob’s PC.

Select IP, MAC, or Others to apply this rule to the corresponding address

type.

The local network IP address of the machine that you want the access

control rule to apply to. Example: 192.168.0.50. Make sure that this is a

static IP address or the system is in the static DHCP Client list (See Basic

> DHCP).

The MAC address of the machine that you want the access control rule to

apply to.

Select a schedule of times when you want the policy to apply. If you do

not see the schedule you need in the list of schedules, go to the Tools >

Schedules screen and create a new schedule.

With this option enabled, the specified system will only have access to the

Web sites listed in the Web filter section.

If this option is enabled, all of the Web sites visited by the specified machine

will be logged.

By clicking the Filter Ports >> button you can specify that the rule enables

access only to specific IP addresses and ports.

Saves the new or edited access control rule in the Access Control Rules

List. Repeat the process, creating an Access Control Rule for each of the

devices on your LAN that needs access to the Internet. When finished

updating Access Control Rules, you must still click the Save Settings button

at the top of the page to make changes effective and permanent.

Policy Name:

Address Type:

IP Address:

Machine Address:

Schedule:

Apply Web Filter:

Log Internet Access:

Filter Ports:

Save:

Advanced > Access Control

Using the Configuration Interface

38

D-Link Systems, Inc.

Access Control Rules List

This section shows the current Access Control rules. Any device that does not have a rule, cannot

access the Internet. Entries can be modified by clicking on the paper and pencil icon. To delete an

entry, click on the trash can icon. After you’ve completed all modifications or deletions, you must

click the

Save Settings

button at the top of the page to save your changes. The router must reboot

before new settings will take effect. You will be prompted to

Reboot the Device

or

Continue

. If you

need to make additional settings changes, click

Continue

. If you are finished with your configuration

settings, click the

Reboot the Device

button.

Web Filter

The Web Filter section is where you add the Web site to be used for Access Control.

Add/Edit Web Site

This field is where you can add Web sites to the Allowed Web List. The Allowed Web List is used for

systems that have the Web filter option enabled in Access Control.

Entries in the Allowed Web Site List can be activated or deactivated with

this checkbox. New entries are activated by default.

Enter the URL (address) of the web site that you want to allow (such as

google.com

). Enter the most inclusive domain name. For instance, entering

dlink.com will give you access to www.dlink.com and support.dlink.com.

Do

not enter

the

http://

preceding the URL.

Note: Many web sites construct pages with images and content from other

web sites. Access will be forbidden if you do not enable all of the web sites

used to construct a page. For example, to access my.yahoo.com, you must

enable access to yahoo.com, yimg.com, and doubleclick.net.

Saves the new or modified Allowed Web Site in the Allowed Web Site

List. When you are done editing the settings, you must click the Save

Settings button at the top of the page to make the changes effective and

permanent.

Allowed Web Site List

This section lists the currently allowed web sites. Entries can be modified by clicking on the paper and

pencil icon. To delete an entry, click on the trash can icon. After you’ve completed all modifications or

deletions, you must click the

Save Settings

button at the top of the page to save your changes. The

router must reboot before new settings will take effect. You will be prompted to

Reboot the Device

or

Continue

. If you need to make additional settings changes, click

Continue

. If you are finished

with your configuration settings, click the

Reboot the Device

button.

Enable:

Web Site:

Save:

Advanced > Web Filter

Using the Configuration Interface

39

D-Link Systems, Inc.

Mac Address Filters

The MAC (Media Access Controller) Address filter section is used to control network access

based on the MAC Address of the network adapter. A MAC address is a unique ID assigned by the

manufacturer of a networking device. This feature can be configured to ALLOW or DENY network/

Internet access.

Filter Settings

When this is enabled, depending on the mode selected, computers are

granted or denied network access based on their MAC address.

When Allow is selected, only computers with MAC addresses listed in the

MAC Address List are granted network access. When Deny is selected, any

computer with a MAC address listed in the MAC Address List

When this is selected, the MAC address filters will be applied to wireless

network clients.

When this is selected, the MAC address filters will be applied to wired

network clients.

Add MAC Address

MAC address entries are activated or deactivated with this checkbox.

Enter the MAC address of the desired computer or connect to the router from

the desired computer and click Copy Your PC’s MAC Address button.

Saves the new or modified MAC address in the MAC Address List. When

you are done editing the settings, you must click the Save Settings button

at the top of the page to make the changes effective and permanent.

MAC Address List

This section lists the current MAC address filters. Entries can be modified by clicking on the paper and

pencil icon. To delete an entry, click on the trash can icon. After you’ve completed all modifications or

deletions, you must click the

Save Settings

button at the top of the page to save your changes. The

router must reboot before new settings will take effect. You will be prompted to

Reboot the Device

or

Continue

. If you need to make additional settings changes, click

Continue

. If you are finished

with your configuration settings, click the

Reboot the Device

button.

Enable MAC Address

Filter:

Mode:

Filter Wireless Clients:

Filter Wired Clients:

Enable:

MAC Address:

Save:

Advanced > MAC Address Filter

Using the Configuration Interface

40

D-Link Systems, Inc.

Firewall

A firewall protects your network from the outside world. The D-Link Gaming Router offers a firewall

type functionality. The SPI feature helps prevent cyber attacks. Sometimes you may want a computer

exposed to the outside world for certain types of applications. If you choose to expose a computer,

you cam enable DMZ. DMZ is short for Demilitarized Zone. This option will expose the chosen

computer completely to the outside world.

Firewall Settings

SPI (Stateful Packet Inspection, also known as dynamic packet filtering)

helps to prevent cyber attacks by tracking more state per session. It validates

that the traffic passing through the session conforms to the protocol. When

SPI is enabled, the extra state information will be reported on the Status >

Active sessions page.

If an application has trouble working from behind the router, you can expose

one computer to the Internet and run the application on that computer.

Note: Placing a computer in the DMZ may expose that computer to a variety

of security risks. Use of this option is only recommended as a last resort.

Specify the IP address of the computer on the LAN that you want to have

unrestricted Internet communication. If this computer obtains it’s IP address

automatically using DHCP, be sure to make a static reservation on the

Basic > DHCP page so that the IP address of the DMZ machine does not

change.

After you’ve completed all modifications or deletions, you must click the

Save Settings

button at the

top of the page to save your changes. The router must reboot before new settings will take effect.

You will be prompted to

Reboot the Device

or

Continue

. If you need to make additional settings

changes, click

Continue

. If you are finished with your configuration settings, click the

Reboot the

Device

button.

Enable SPI:

Enable DMZ:

DMZ IP Address:

Advanced > Firewall