52

D-Link DIR-842 User Manual

Section 4 - Configuration

Features

QoS Engine

This section will allow you to prioritize particular clients over others, so that those

clients receive higher bandwidth. For example, if one client is streaming a movie

and another is downloading a non-urgent file, you might wish to assign the former

device a higher priority than the latter so that the movie streaming is not disrupted

by the traffic of the other devices on the network.

In the Features menu on the bar on the top of the page, click

QoS Engine

.

Under All Devices, you will see device cards representing each connected client. If

some are off-screen, you can use the

<

and

>

buttons to scroll through the cards.

A maximum of

one

device can be assigned

Highest

priority.

A maximum of

two

devices can be assigned

High

priority.

A maximum of

eight

devices can be assigned

Medium

priority.

If no devices are explicitly assigned a priority, they will all be treated with equal

priority. If some devices are not assigned a priority and others are, the unassigned

devices will be treated with the lowest priority.

To assign a priority level to a device, drag the device card from the All Devices list

over an empty slot and release the mouse button. The card will remain in the slot.

If you want to remove a priority assignment from a device and return it to the All

Devices list, click the cross icon in the top right of the device card.

Click

Save

when you are done.

53

D-Link DIR-842 User Manual

Section 4 - Configuration

Firewall Settings

Enable or disable Demilitarized Zone (DMZ). This completely exposes

the client to threats over the Internet, and is not recommended in

ordinary situations.

If you enabled DMZ, enter the IP address of the client you wish to

expose, or use the drop-down menu to quickly select it.

Enabling Stateful Packet Inspection (SPI) helps to prevent cyber

attacks by validating that the traffic passing through the session

conforms to the protocol.

Enable this feature to protect your network from certain kinds of

“spoofing” attacks.

Enable or disable IPv6 simple security.

Enable or disable IPv6 ingress filtering.

Enable DMZ:

DMZ IP

Address:

Enable SPI IPv4:

Enable

Anti-Spoof

Checking:

IPv6 Simple

Security:

IPv6 Ingress

Filtering:

The router’s firewall protects your network from malicious attacks over the Internet.

In the Features menu on the bar on the top of the page, click

Firewall Settings

. Click

Advanced Settings...

to expand the list and see all of the options.

54

D-Link DIR-842 User Manual

Section 4 - Configuration

Allows multiple machines on the LAN to connect to their corporate

network using the PPTP protocol.

Allows multiple VPN clients to connect to their corporate network

using IPSec. Some VPN clients support traversal of IPSec through

NAT. This Application Level Gateway (ALG) may interfere with the

operation of such VPN clients. If you are having trouble connecting

with your corporate network, try turning this ALG off. Please check

with the system administrator of your corporate network whether

your VPN client supports NAT traversal.

Allows applications that uses Real Time Streaming Protocol (RTSP)

to receive streaming media from the Internet.

Allows devices and applications using VoIP (Voice over IP) to

communicate across NAT. Some VoIP applications and devices have

the ability to discover NAT devices and work around them. This ALG

may interfere with the operation of such devices. If you are having

trouble making VoIP calls, try turning this ALG off.

Click

Save

when you are done.

PPTP:

IPSec (VPN):

RTSP:

SIP:

55

D-Link DIR-842 User Manual

Section 4 - Configuration

IPv4/IPv6 Rules

Enter a name for the rule.

Enter the source IP address range that the rule will apply to, and using

the drop-down menu, specify whether it is a

WAN

or

LAN

IP address.

Enter the destination IP address range that the rule will apply to, and

using the drop-down menu, specify whether it is a

WAN

or

LAN

IP

address.

Select the protocol of the traffic to allow or deny (

Any

,

TCP

, or

UDP

)

and then enter the range of ports that the rule will apply to.

Use the drop-down menu to select the time schedule that the rule

will be enabled on. The schedule may be set to

Always Enable

, or

you can create your own schedules in the

Schedules

section (refer

to

Schedule

on page 64).

Click

Apply

when you are done.

The IPv4/IPv6 Rules section is an advanced option that lets you configure what kind

of traffic is allowed to pass through the network. To configure the IPv4 rules, from

the Firewall Settings page click

IPv4 Rules

. To configure IPv6 rules, from the Firewall

Settings page click

IPv6

Rules

. To return to the main Firewall Settings page, click

Advanced

.

To begin, use the drop-down menu to select whether you want to

ALLOW

or

DENY

the rules you create. You can also choose to turn filtering

OFF

.

If you wish to remove a rule, click on its trash can icon in the Delete column. If you

wish to edit a rule, click on its pencil icon in the Edit column. If you wish to create a

new rule, click the

Add Rules

button

.

Click

Save

when you are done. If you edit or

create a rule, the following options will appear:

Name:

Source IP

Address Range:

Destination IP

Address Range:

Port Range:

Schedule:

56

D-Link DIR-842 User Manual

Section 4 - Configuration

Port Forwarding

Enter a name for the rule.

Enter the IP address of the computer on your local network that you

want to allow the incoming service to. Alternatively, select the device

from the drop-down menu.

Enter the TCP ports that you want to open. You can enter a single

port or a range of ports. Separate ports with a comma (for example:

24, 1009, 3000-4000).

Enter the UDP ports that you want to open. You can enter a single

port or a range of ports. Separate ports with a comma (for example:

24, 1009, 3000-4000).

Use the drop-down menu to select the time schedule that the rule

will be enabled on. The schedule may be set to

Always Enable

, or

you can create your own schedules in the

Schedules

section (refer

to

Schedule

on page 64).

Click

Apply

when you are done.

Name:

Local IP:

TCP Port:

UDP Port:

Schedule:

Port forwarding allows you to specify a port or range of ports to open for specific

devices on the network. This might be necessary for certain applications to connect

through the router. In the Features menu on the bar on the top of the page, click

Port Forwarding

.

If you wish to remove a rule, click on its trash can icon in the Delete column. If you

wish to edit a rule, click on its pencil icon in the Edit column. If you wish to create a

new rule, click the

Add Rules

button

.

Click

Save

when you are done. If you edit or

create a rule, the following options will appear: