41

Advanced > Virtual Server

Using the Configuration Menu

The DI-824VUP+ can be configured as a virtual server so that remote users accessing

Web or FTP services via the public IP address can be automatically redirected to local

servers in the LAN (Local Area Network).

The DI-824VUP+ firewall feature filters out unrecognized packets to protect your LAN

network so all computers networked with the DI-824VUP+ are invisible to the outside

world. If you wish, you can make some of the LAN computers accessible from the

Internet by enabling

Virtual Server.

Depending on the requested service, the DI-824VUP+

redirects the external service request to the appropriate server within the LAN network.

Protocol Type

The protocol used for the virtual service.

Public Port

The port number on the WAN side that will be used to access

the virtual service.

Private IP

The server computer in the LAN network that will be providing

the virtual services.

Name

The name referencing the virtual service.

Private Port

The port number of the service used by the Private IP computer.

Schedule

Select

Always

, or choose

From

and enter the time period dur-

ing which the virtual service will be available.

42

Using the Configuration Menu

Advanced > Application

Some applications require multiple connections, such as Internet gaming, video

conferencing, Internet telephony, and others. These applications have difficulties working

through NAT (Network Address Translation).

Special Applications

makes some of these

applications work with the DI-824VUP+. If you need to run applications that require multiple

connections, specify the port normally associated with an application in the

Trigger

field, then enter the public ports associated with the trigger port into the

Incoming Ports

field.

At the bottom of the screen, there are already defined special applications. To use them,

select one from the drop down list and select an ID number you want to use. Then click

the “Copy to” button and the router will fill in the appropriate information to the list. You

will then need to enable the service. If the mechanism of Special Applications fails to

make an application work, try using DMZ host instead.

Note!

Only one PC can use each Special Application tunnel.

Trigger Port

This is the port used to trigger the application. It can be

either a single port or a range of ports.

Public Ports

This is the port number on the WAN side that will be used to

access the application. You may define a single port or a range

of ports. You can use a comma to add multiple ports or port

ranges.

Enabled

Select to activate the policy.

43

Using the Configuration Menu

Advanced > Filter > IP Filter

IP Filter

Use IP Filters to deny LAN IP addresses access to the internet.

Protocol

IP Address

Enter in the IP address range of the computers that you want the policy to apply to.

If it

is only a single computer that you want the policy applied to, then enter the IP address of

that computer in the Start Source IP and leave the End Source IP blank.

Use IP (Internet Protocol)

filters to allow or deny

computers access to the

Internet based on their IP

address.

Port Range

Enter in the port range of the TCP/UDP ports that you want the policy to apply to.

If it is

only a single port

that you want the policy applied to, then enter the port number in the

Start Port

field and leave the End Port field blank.

If you want to use all the ports, you can

leave the port range empty.

Enabled or Disabled

Click

Enabled

to apply the filter policy or click

Disabled

to enter an inactive filter policy.

(You can reactivate the policy later.)

Select the protocol type to allow or deny certain types of IP addresses.

Schedule

Select

Always

, or choose

From

and enter the time period during which the IP filter policy

will be in effect.

44

Using the Configuration Menu

Advanced > Filter > MAC Filters

MAC (Media Access Control) Filters are used to allow or deny LAN (Local Area Network)

computers from accessing the Internet and network by their MAC address.

At the bottom of the screen, there is a list of MAC addresses from the DHCP client

computers connected to the DI-824VUP+. To use them, select one from the drop down

list. Then click the “Apply” button and the DI-824VUP+ will fill in the appropriate information

to the list.

Disabled MAC Filter

Select this option if you do not want to use MAC filters.

Only allow computers with MAC address listed below to access the network

Select this option to only allow computers that are in the list to access the network

and Internet. All other computers will

be denied access to the network and

Internet.

Only deny computers with MAC address listed below to access the network

Select this option to only deny computers that are in the list to access the network

and Internet. All other computers will be allowed access to the network and Internet.

Enter the

MAC Address

of the client that will be filtered.

MAC Address

45

Using the Configuration Menu

Advanced > Filter > URL Blocking

Use URL Blocking to deny LAN computers from accessing specific web sites by its

URL. A URL is a specially formatted text string that defines a location on the Internet.

If any part of the URL contains the blocked word, the site will not be accessible and

the web page will not display.

Disabled URL Blocking

Select this option if you do not want to use URL Blocking.