Page 26 / 92
Scroll up to view Page 21 - 25
26
DI-LB604 User’s Manual
D-Link Systems, Inc.
Using the Configuration Menu
WAN:
The WAN port applied for current DMZ entry.
Name:
To identify current DMZ entry.
PPPoE Sess:
The PPPoE session that current DMZ entry is bound to.
Private IP (LAN):
The IP address of the server in DMZ.
Access Group:
To specify which Access Group will be applied. Each Access Group
has its own access rules.
Direction:
To specify that the Access Group will be applied in which way.
Filters
Advanced > Filters
URL Blocking
URL Blocking:
If the URL, IP address or keyword entered here is found in the web
page access packet from LAN users, the web page access will be
blocked. You can have different restrictions for different groups. (Use
the Host IP screen to assign Hosts to groups.)
Access Filters:
To control the Internet access by LAN users.
Access Filters
Page 27 / 92
27
DI-LB604 User’s Manual
D-Link Systems, Inc.
Using the Configuration Menu
Select One Group:
The Group that current rule is applied to.
No Filtering:
To allow all Internet access to LAN users.
Block All Access:
To prohibit all Internet access to LAN users.
Block Selected
Items:
To apply the rules defined in User-Defined Ports To Block.
ICMP Filters
ICMP Filters:
To limit the ICMP activities initialized from LAN.
Block Selected
Packet Types:
To prohibit the selected types of ICMP packets from the LAN to be
passed through the device.
Packet Types:
The types of the ICMP packets that could be blocked.
User-defined Ports To Filter
User-defined Ports
To Block:
This lets you define custom ports to be filtered.
Enable:
To activate or deactivate current rule.
Name:
A unique name to identify current rule.
Protocol Type:
The protocol to be blocked.
Port No. Range:
The port number range to be blocked. (for TCP and UDP only ) If
only one port number is used, enter the same port number in both
fields.
Allow Selected
Access only:
To apply the rules defined in User-Defined Ports To Filter.
Page 28 / 92
28
DI-LB604 User’s Manual
D-Link Systems, Inc.
Using the Configuration Menu
QoS
Advanced > QoS
QoS Setup
Enable QoS:
Users can choose to Enable QoS (Quality of Service). If
set to
“enable” QoS, the QoS will allow higher priority packets to pass
through the device.
Queuing Method:
The methods for managing your queue. “Priority Queuing” is one
of the first queuing variations to be widely implemented. This is
based on the concept that certain types of traffic can be identified
and shuffled to the front of the output queue so that some traffic is
always transmitted ahead of other types of traffic.
Process TOS Field:
An 8 bits field in the IP packet header designed to contain values
indicating how each packet should be handled in the network. If
you choose “enable” then it will enable this function to process the
IP Type of Service field.
Overwrite Policy
Priority:
Choose “Yes” to enable the IP packet TOS field priority to overwrite
the priority defined in the policy configuration.
Page 29 / 92
29
DI-LB604 User’s Manual
D-Link Systems, Inc.
Using the Configuration Menu
QoS Set Policy
Advanced > QoS > Set Policy
QoS Policy
Policy Name:
The friendly name of a policy which is used to classify the received
packets based on the following rules.
Setting the QoS policy can assign received packets a higher/lower priority (based on
your configuration) to pass through this device. You can define some policies which
classify received packets based on local/remote IP addresses, ports and protocol type.
This feature is useful when the WAN link is very busy or congested or when using
special applications that need real time services such as Internet phone, video
conference...etc.
Local/Remote
Address:
Specify a packet based on local/remote IP address. By default,
the address is 0.0.0.0 which represents all IP Addresses. Port and
Protocol Type define all packets for special applications.
Protocol Type:
This field is defined for which type of packet. It has some values
such as IP, TCP and UDP.
Source/
Destination Port:
Specify the port number ranges if TCP or UDP protocol is
selected.
Priority Queue:
This device supports four queues. When a packet meets a policy
rule requirement, it will be put into the responding queue. Otherwise
it is assigned the lowest priority to pass through.
Page 30 / 92
30
DI-LB604 User’s Manual
D-Link Systems, Inc.
Using the Configuration Menu
NAT
Advanced > Nat
NAT Configuration:
NAT Routing:
To enable or disable NAT routing by checking or unchecking the
checkbox. If you disable NAT routing, this device will act as a
Bridge or Static Router. Most features, including Load Balance,
will be unavailable. If some packets whose port number cannot
be translated for special applications, you must input value in port
range for Disable Port Translation.
TCP Timeout:
During the time that TCP expects to receive the acknowledgement
from the destination.
UDP Timeout:
During the time that UDP expects to receive the acknowledgement
from the destination.
TCP Window Limit:
The maxmimum number of outstanding packets before TCP
receiving an acknowledgement.
TCP MSS Limit:
The largest amount of data that can be transmitted in one TCP
packet.
19216811.live