DIR-825 - AC - G1 - User Manual - v.3.0.4 - 24.10.18 - EN

User Manual
DIR-825/AC
Wireless AC1200 Dual Band Gigabit Router
with 3G/LTE Support and USB Port
October 2018
DIR-825/AC Wireless AC1200 Dual Band Gigabit Router
User Manual
Contents
Chapter 1. Introduction..........................................5
Contents and Audience.......................................................5
Conventions.................................................................5
Document Structure..........................................................5
Chapter 2. Overview..............................................6
General Information.........................................................6
Specifications*.............................................................8
Product Appearance.........................................................15
Upper Panel..............................................................15
Back Panel...............................................................17
Delivery Package...........................................................19
Chapter 3. Installation and Connection..........................20
Before You Begin...........................................................20
Connecting to PC...........................................................22
PC with Ethernet Adapter.................................................22
Obtaining IP Address Automatically in OS Windows 7.......................23
PC with Wi-Fi Adapter....................................................28
Obtaining IP Address Automatically and Connecting to Wireless Network
(OS Windows 7)...........................................................29
Connecting to Web-based Interface..........................................32
Web-based Interface Structure..............................................34
Summary Page.............................................................34
Home Page................................................................36
Menu Sections............................................................37
Notifications............................................................38
Chapter 4. Configuring via Web-based Interface..................39
Initial Configuration Wizard...............................................39
Selecting Operation Mode.................................................41
Creating 3G/LTE WAN Connection...........................................44
Changing LAN IPv4 Address................................................45
Wi-Fi Client.............................................................46
Creating Wired WAN Connection............................................48
Static IPv4 Connection.................................................49
Static IPv6 Connection.................................................50
PPPoE, IPv6 PPPoE, PPPoE Dual Stack,
PPPoE + Dynamic IP (PPPoE Dual Access) Connections.....................51
PPPoE + Static IP (PPPoE Dual Access) Connection.......................52
PPTP + Dynamic IP or L2TP + Dynamic IP Connection......................53
PPTP + Static IP or L2TP + Static IP Connection........................54
Configuring Wireless Network.............................................55
Configuring LAN Ports for IPTV/VoIP......................................57
Changing Web-based Interface Password....................................59
Connection of Multimedia Devices...........................................61
Page 2 of 231
User Manual
Statistics.................................................................64
Network Statistics.......................................................64
DHCP.....................................................................65
Routing Table............................................................66
Clients..................................................................67
Port Statistics..........................................................68
Multicast Groups.........................................................69
Clients and Session......................................................70
Connections Setup..........................................................71
WAN......................................................................71
Creating Dynamic IPv4 or Static IPv4 WAN Connection....................73
Creating Dynamic IPv6 or Static IPv6 WAN Connection....................78
Creating PPPoE WAN Connection..........................................82
Creating PPTP or L2TP WAN Connection...................................87
Creating PPPoE IPv6 or PPPoE Dual Stack WAN Connection.................91
Creating 3G WAN Connection.............................................97
Creating LTE WAN Connection...........................................101
LAN.....................................................................105
IPv4..................................................................105
IPv6..................................................................108
WAN Reservation.........................................................111
Wi-Fi.....................................................................113
Basic Settings..........................................................113
Client Management.......................................................121
WPS.....................................................................122
Using WPS Function via Web-based Interface............................124
Using WPS Function without Web-based Interface........................125
WMM.....................................................................126
Client..................................................................129
Client Shaping..........................................................132
Additional..............................................................134
MAC Filter..............................................................137
Roaming.................................................................139
Print Server..............................................................141
USB Storage...............................................................142
Information.............................................................142
USB Users...............................................................143
Samba...................................................................144
FTP.....................................................................146
Filebrowser.............................................................148
DLNA....................................................................149
Torrent Client..........................................................151
XUPNPD..................................................................155
USB Modem.................................................................156
Basic Settings..........................................................157
PIN.....................................................................158
Page 3 of 231
User Manual
Advanced..................................................................160
VLAN....................................................................161
DNS.....................................................................163
DDNS....................................................................165
Port Settings...........................................................167
Bandwidth Control.......................................................170
Traffic Segmentation....................................................171
Redirect................................................................172
Routing.................................................................173
TR-069 Client...........................................................175
Remote Access...........................................................177
UPnP IGD................................................................179
UDPXY...................................................................180
IGMP/MLD................................................................182
ALG/Passthrough.........................................................184
IPsec...................................................................186
Firewall..................................................................192
IP Filter...............................................................192
Virtual Servers.........................................................196
DMZ.....................................................................199
MAC Filter..............................................................200
URL Filter..............................................................202
DoS Protection..........................................................204
System....................................................................207
Configuration...........................................................208
Firmware Update.........................................................210
Local Update..........................................................211
Remote Update.........................................................212
Log.....................................................................213
Ping....................................................................216
Traceroute..............................................................218
Telnet..................................................................220
System Time.............................................................221
Yandex.DNS................................................................223
Settings................................................................223
Devices and Rules.......................................................225
Chapter 5. Operation Guidelines................................227
Safety Rules and Conditions...............................................227
Wireless Installation Considerations......................................228
Chapter 6. Abbreviations and Acronyms..........................229
Page 4 of 231
with 3G/LTE Support and USB Port Introduction
User Manual
CHAPTER 1. INTRODUCTION
Contents and Audience
This manual describes the router DIR-825/AC and explains how to configure and operate it.
This manual is intended for users familiar with basic networking concepts, who create an in-home
local area network, and system administrators, who install and configure networks in offices.
Conventions
Example Description
text The body text of the manual.
Before You Begin A reference to a chapter or section of this manual.
“Quick Installation
A reference to a document.
Guide”
A name of a menu, menu item, control (field, checkbox, drop-down

Change
list, button, etc.).
192.168.0.1 Data that you should enter in the specified field.
! Information An important note.
Document Structure
Chapter 1 describes the purpose and structure of the document.
Chapter 2 gives an overview of the router's hardware and software features, describes its
appearance and the package contents.
Chapter 3 explains how to install the router DIR-825/AC and configure a PC in order to access its
web-based interface.
Chapter 4 describes all pages of the web-based interface in detail.
Chapter 5 includes safety instructions and tips for networking.
Chapter 6 introduces abbreviations and acronyms used in this manual.
Page 5 of 231
with 3G/LTE Support and USB Port Overview
User Manual
CHAPTER 2. OVERVIEW
General Information
The DIR-825/AC device is a wireless dual band gigabit router with 3G/LTE support. It provides a
fast and simple way to create a wireless and wired network at home or in an office.
The router is equipped with a USB port for connecting a USB modem 1, which can be used to
establish connection to the Internet. In addition, to the USB port of the router you can connect a
USB storage device, which will be used as a network drive, or a printer.
Also you are able to connect the wireless router DIR-825/AC to a cable or DSL modem or to a
private Ethernet line and use a high-speed Internet connection to successfully fulfill a wide range of
professional tasks. The built-in 4-port switch enables you to connect Ethernet-enabled computers,
game consoles, and other devices to your network.
Using the DIR-825/AC device, you are able to quickly create a high-speed wireless network at
home or in your office, which lets computers and mobile devices access the Internet virtually
anywhere (within the operational range of your wireless network). Simultaneous activity of 2.4GHz
band and 5GHz band allows performing a wide range of tasks. The router can operate as a base
station for connecting wireless devices of the standards 802.11a, 802.11b, 802.11g, 802.11n, and
802.11ac (at the wireless connection rate up to 1167Mbps2).
The router supports multiple functions for the wireless interface: several security standards (WEP,
WPA/WPA2), MAC address filtering, WPS, WMM.
In addition, the device is equipped with a button for switching the Wi-Fi network off/on. If needed,
for example, when you leave home, you can easily switch the router’s WLAN by pressing the
button, and devices connected to the LAN ports of the router will stay online.
Support of guest Wi-Fi network allows you to create a separate wireless network with individual
security settings and maximum rate limitation. Devices connected to the guest network will be able
to access the Internet, but will be isolated from the devices and resources of the router's LAN.
Transmit Beamforming technology allows to flexibly change the antennas' radiation pattern and to
redistribute the signal directly to wireless devices connected to the router.
Smart adjustment of Wi-Fi clients is useful for networks based on several D-Link access points or
routers – when the smart adjustment function is configured on each of them, a client always
connects to the access point (router) with the highest signal level.
Support of guest Wi-Fi network allows you to create a separate wireless network with individual
security settings and maximum rate limitation. Devices connected to the guest network will be able
to access the Internet, but will be isolated from the devices and resources of the router's LAN.
The wireless router DIR-825/AC includes a built-in firewall. The advanced security functions
minimize threats of hacker attacks, prevent unwanted intrusions to your network, and block access
to unwanted websites for users of your LAN.
In addition, the router supports IPsec and allows to create secure VPN tunnels.
1 Not included in the delivery package. D-Link does not guarantee compatibility with all USB modems. For the list of
supported USB modems, see the Specifications* section, page 8.
2 Up to 300Mbps for 2.4GHz and up to 867Mbps for 5GHz.
Page 6 of 231
User Manual
Built-in Yandex.DNS service protects against malicious and fraudulent web sites and helps to block
access to adult content on children's devices.
You can configure the settings of the wireless router DIR-825/AC via the user-friendly web-based
interface (the interface is available in two languages – in Russian and in English).
The configuration wizard allows you to quickly switch DIR-825/AC to one of the following modes:
router (for connection to a wired or wireless ISP), access point, repeater, or client, and then
configure all needed setting for operation in the selected mode in several simple steps.
Also DIR-825/AC supports configuration and management via mobile application for Android
smartphones.
You can simply update the firmware: the router itself finds approved firmware on D-Link update
server and notifies when ready to install it.
Page 7 of 231
User Manual
Specifications*
Hardware
Processor · RTL8197DN (660MHz)
RAM · 64MB, DDR2
Flash · 8MB, SPI
Interfaces · 10/100/1000BASE-T WAN port

· 4 10/100/1000BASE-T LAN ports
· USB 2.0 port
LEDs · POWER
· INTERNET
· WPS
· 2.4G WLAN
· 5G WLAN
· 4 LAN LEDs
· USB
Buttons · POWER button to power on/power off
· RESET button to restore factory default settings
· WPS button to set up wireless connection
· WIFI button to enable/disable wireless network
Antenna · Four external non-detachable antennas (5dBi gain)
MIMO · 2x2
Power connector · Power input connector (DC)
Software
WAN connection types · LTE
· 3G
· PPPoE
· IPv6 PPPoE
· PPPoE Dual Stack
· Static IP / Dynamic IP
· Static IPv6 / Dynamic IPv6
· PPPoE + Static IP
· PPPoE + Dynamic IP
· PPTP/L2TP + Static IP
· PPTP/L2TP + Dynamic IP
* The device features are subject to change without notice. For the latest versions of the firmware and relevant
documentation, visit www.dlink.ru.
Page 8 of 231
User Manual
Software
Network functions · Support of IEEE 802.1X for Internet connection
· DHCP server/relay
· Stateful/Stateless mode for IPv6 address assignment, IPv6 prefix delegation
· Automatic obtainment of LAN IP address (for access point/repeater/client
modes)
· DNS relay
· Dynamic DNS
· Static IP routing
· Static IPv6 routing
· IGMP Proxy
· MLD Proxy
· RIP
· Support of UPnP IGD
· Support of VLAN
· WAN ping respond
· Support of SIP ALG
· Support of RTSP
· WAN reservation
· Autonegotiation of speed, duplex mode, and flow control/Manual speed and
duplex mode setup for each Ethernet port
· Setup of maximum TX rate for each port of the router
· Built-in UDPXY application
· XUPNPD plug-in
· Segmentation of traffic between LAN ports
Firewall functions · Network Address Translation (NAT)
· Stateful Packet Inspection (SPI)
· IP filter
· IPv6 filter
· MAC filter
· URL filter
· DMZ
· Prevention of ARP and DDoS attacks
· Virtual servers
· Built-in Yandex.DNS web content filtering service
VPN · IPsec/PPTP/L2TP/PPPoE pass-through
· IPsec tunnels
USB interface functions · USB modem
Auto connection to available type of supported network (4G/3G/2G)
Auto configuration of connection upon plugging in USB modem
Enabling/disabling PIN code check, changing PIN code 3
· USB storage
File browser
Print server
Access to storage via accounts
Built-in Samba/FTP/DLNA server
Built-in Transmission torrent client; uploading/downloading files from/to USB
storage
3 For some models of USB modems.
Page 9 of 231
User Manual
Software
Management · Local and remote access to settings through TELNET/WEB (HTTP/HTTPS)
· Bilingual web-based interface for configuration and management
(Russian/English)
· Support of mobile application for Android smartphones
· Notification on connection problems and auto redirect to settings
· Firmware update via web-based interface
· Automatic notification on new firmware version
· Saving/restoring configuration to/from file
· Support of logging to remote host/connected USB storage
· Automatic synchronization of system time with NTP server and manual
time/date setup
· Ping utility
· Traceroute utility
· TR-069 client
Wireless Module Parameters

Standards · IEEE 802.11a/n/ac
· IEEE 802.11b/g/n
Frequency range · 2400 ~ 2483.5MHz
· 5150 ~ 5350MHz
· 5650 ~ 5725MHz
Wireless connection security · WEP
· WPA/WPA2 (Personal/Enterprise)
· МАС filter
· WPS (PBC/PIN)
Advanced functions · Support of client mode
· WMM (Wi-Fi QoS)
· Information on connected Wi-Fi clients
· Advanced settings
· Smart adjustment of Wi-Fi clients
· Guest Wi-Fi / support of MBSSID
· Rate limitation for wireless network/separate MAC addresses
· Periodic scan of channels, automatic switch to least loaded channel
· Support of 802.11ac (5GHz) and 802.11n (2.4GHz) TX Beamforming
· Autonegotiation of channel bandwidth in accordance with environment
conditions (20/40 Coexistence)
Wireless connection rate · IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
· IEEE 802.11b: 1, 2, 5.5, and 11Mbps
· IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
· IEEE 802.11n (2.4GHz/5GHz): from 6.5 to 300Mbps (from MCS0 to MCS15)
· IEEE 802.11ac (5GHz): from 6.5 to 867Mbps (from MCS0 to MSC9)
Page 10 of 231
User Manual

Transmitter output power · 802.11a (typical at room temperature 25 °C)
15dBm at 6, 9, 12, 18, 24, 36, 48Mbps
14dBm at 54Mbps
The maximum value of the transmitter
output power depends upon the radio
· 802.11b (typical at room temperature 25 °C)
frequency regulations applied in your
15dBm at 1, 2, 5.5, 11Mbps
country
· 802.11g (typical at room temperature 25 °C)
15dBm at 6, 9, 12, 18, 24, 36, 48, 54Mbps
· 802.11n (typical at room temperature 25 °C)

2.4GHz, HT20
15dBm at MCS0/1/2/3/4/5/6/8/9/10/11/12/13/14
14dBm at MCS7/15
2.4GHz, HT40
15dBm at MCS0/1/2/3/4/5/6/8/9/10/11/12/13/14
14dBm at MCS7/15
5GHz, HT20
15dBm at MCS0/1/2/3/4/5/8/9/10/11/12/13
14dBm at MCS6/14
13dBm at MCS7/15
5GHz, HT40
15dBm at MCS0/1/2/3/4/5/8/9/10/11/12/13
14dBm at MCS6/14
13dBm at MCS7/15
· 802.11ac (typical at room temperature 25 °C)

VHT20
15dBm at MCS0/1/2/3/4/5
14dBm at MCS6
13dBm at MCS7
VHT40
15dBm at MCS0/1/2/3/4/5
14dBm at MCS6
13dBm at MCS7
VHT80
15dBm at MCS0/1/2/3
14dBm at MCS4/5
13dBm at MCS6
12dBm at MCS7
11dBm at MCS8/9
Receiver sensitivity · 802.11a (typical at PER = 10% (1000-byte PDUs) at room temperature 25 °C)
-85dBm at 6Mbps
-84dBm at 9Mbps
-82dBm at 12Mbps
-80dBm at 18Mbps
-77dBm at 24Mbps
-73dBm at 36Mbps
-69dBm at 48Mbps
-68dBm at 54Mbps
· 802.11b (typical at PER = 8% (1000-byte PDUs) at room temperature 25 °C)

-83dBm at 1Mbps
-80dBm at 2Mbps
-79dBm at 5.5Mbps
-76dBm at 11Mbps
Page 11 of 231
User Manual

· 802.11g (typical at PER = 10% (1000-byte PDUs) at room temperature 25 °C)
-82dBm at 6Mbps
-81dBm at 9Mbps
-79dBm at 12Mbps
-77dBm at 18Mbps
-74dBm at 24Mbps
-70dBm at 36Mbps
-66dBm at 48Mbps
-65dBm at 54Mbps
· 802.11n (typical at PER = 10% (1000-byte PDUs))

HT20
-82dBm at MCS0/8
-79dBm at MCS1/9
-77dBm at MCS2/10
-74dBm at MCS3/11
-70dBm at MCS4/12
-66dBm at MCS5/13
-65dBm at MCS6/14
-64dBm at MCS7/15
HT40
-79dBm at MCS0/8
-76dBm at MCS1/9
-74dBm at MCS2/10
-71dBm at MCS3/11
-67dBm at MCS4/12
-63dBm at MCS5/13
-62dBm at MCS6/14
-61dBm at MCS7/15
· 802.11ac (typical at PER = 10% (1000-byte PDUs))

HT20
-82dBm at MCS0
-79dBm at MCS1
-77dBm at MCS2
-74dBm at MCS3
-70dBm at MCS4
-66dBm at MCS5
-65dBm at MCS6
-64dBm at MCS7
-59dBm at MCS8
-57dBm at MCS9
HT40
-79dBm at MCS0
-76dBm at MCS1
-74dBm at MCS2
-71dBm at MCS3
-67dBm at MCS4
-63dBm at MCS5
-62dBm at MCS6
-61dBm at MCS7
-56dBm at MCS8
-54dBm at MCS9
HT80
-76dBm at MCS0
-73dBm at MCS1
-71dBm at MCS2
-68dBm at MCS3
-64dBm at MCS4
-60dBm at MCS5
-59dBm at MCS6
-58dBm at MCS7
-53dBm at MCS8
-51dBm at MCS9
Page 12 of 231
User Manual

Modulation schemes · 802.11a: BPSK, QPSK, 16QAM, 64QAM with OFDM
· 802.11b: DQPSK, DBPSK, DSSS, CCK
· 802.11g: BPSK, QPSK, 16QAM, 64QAM with OFDM
· 802.11n: BPSK, QPSK, 16QAM, 64QAM with OFDM
· 802.11ac: BPSK, QPSK, 16QAM, 64QAM, 256QAM with OFDM
Physical Parameters
Dimensions (L x W x H) · 200 x 132 x 50 mm (7.9 x 5.2 x 2 in)
Weight · 360 g (0.8 lb)
Operating Environment
Power · Output: 12V DC, 1.5A
Temperature · Operating: from 0 to 40 °C

· Storage: from -20 to 65 °C
Humidity · Operating: from 10% to 90% (non-condensing)
· Storage: from 5% to 95% (non-condensing)
Supported USB modems4

GSM · Alcatel X500
· D-Link DWM-152C1
· D-Link DWM-156A6
· D-Link DWM-156A7
· D-Link DWM-156C1
· D-Link DWM-157B1
· D-Link DWM-157B1 (Velcom)
· D-Link DWM-158D1
· D-Link DWR-710
· Huawei E150
· Huawei E1550
· Huawei E156G
· Huawei E160G
· Huawei E169G
· Huawei E171
· Huawei E173 (Megafon)
· Huawei E220
· Huawei E3131 (MTS 420S)
· Huawei E352 (Megafon)
· Prolink PHS600
· Prolink PHS901
· ZTE MF112
· ZTE MF192
· ZTE MF626
· ZTE MF627
· ZTE MF652
· ZTE MF667
· ZTE MF668
· ZTE MF752
4 The manufacturer does not guarantee proper operation of the router with every modification of the firmware of USB modems.
Page 13 of 231
User Manual
Supported USB modems

LTE · D-Link DWM-222
· Huawei E3131
· Huawei E3272
· Huawei E3351
· Huawei E3372
· Huawei E367
· Huawei E392
· Megafon M100-1
· Megafon M100-2
· Megafon M100-3
· Megafon M100-4
· Megafon M150-1
· Megafon M150-2
· Quanta 1K6E (Beeline 1K6E)
· MTS 824F
· MTS 827F
· Yota LU-150
· Yota WLTUBA-107
· ZTE MF823
· ZTE MF827
Smartphones in USB tethering mode · Some models of Android smartphones
Page 14 of 231
User Manual
Product Appearance
Upper Panel
Figure 1. Upper panel view.
LED Mode Description

Solid blue The router is powered on.
POWER
No light The router is powered off.
Solid blue The cable is connected.
Attempting to establish WAN connection; after
INTERNET Blinking blue connection establishment – data transfer through the
WAN port.
No light The cable is not connected.
Attempting to add a wireless device via the WPS
Blinking blue
WPS function.
No light The WPS function is not in use.
Solid blue The router's WLAN of the relevant band is on.
2.4G WLAN Data transfer through the Wi-Fi network of the relevant
Blinking blue
5G WLAN band.
No light The router's WLAN of the relevant band is off.
Page 15 of 231
User Manual
LED Mode Description

A device (computer) is connected to the relevant port,
Solid blue
the connection is on.
Data transfer through the relevant LAN port.
When the router is being loaded, the LEDs are blinking
LAN 1-4
Blinking blue one at a time.
When the firmware is being upgraded, the LEDs are
blinking two at a time.
No light The cable is not connected to the relevant port.
Solid blue A USB device is connected to the router's USB port.
USB
No light No USB device.
Page 16 of 231
User Manual
Back Panel
Figure 2. Back panel view.
Port Description
A button to set up wireless connection (the WPS function).
WPS To use the WPS function: with the device turned on, push the button,
hold it for 2 seconds, and release. The WPS LED should start
blinking.
A button to enable/disable wireless network.
WIFI To disable the router's wireless network: with the device turned on,
press the button and release. The 2.4G WLAN and 5G WLAN LEDs
should turn off.
LAN 1-4 4 Ethernet ports to connect computers or network devices.
A port to connect to a cable or DSL modem or to a private Ethernet

INTERNET line (it is recommended to use the cable included in the delivery
package).
USB A port for connecting a USB device (modem, storage, printer).
12V DC IN Power connector.
POWER A button to turn the router on/off.
Page 17 of 231
User Manual
The RESET button located on the bottom panel of the router is designed to restore the factory
default settings. To restore the factory defaults, push the button (with the device turned on), hold it
for 10 seconds, and then release the button.
The device is also equipped with four external non-detachable Wi-Fi antennas.
Page 18 of 231
User Manual
Delivery Package
The following should be included:
• Router DIR-825/AC
• Power adapter DC 12V/1.5A
• Ethernet cable (CAT 5E)
• “Quick Installation Guide” (brochure).
The “User Manual” and “Quick Installation Guide” documents are available on D-Link website
(see www.dlink.ru).
!
Using a power supply with a different voltage rating than the one included will cause
damage and void the warranty for this product.
Page 19 of 231
with 3G/LTE Support and USB Port Installation and Connection
User Manual
CHAPTER 3. INSTALLATION AND CONNECTION

Before You Begin
Please, read this manual prior to installing the device. Make sure that you have all the necessary
information and equipment.
Operating System
Configuration of the wireless dual band gigabit router with 3G/LTE support DIR-825/AC
(hereinafter referred to as “the router”) is performed via the built-in web-based interface. The web-
based interface is available from any operating system that supports a web browser.
Web Browser
The following web browsers are recommended:
• Apple Safari 8 and later
• Google Chrome 48 and later
• Microsoft Internet Explorer 10 and later
• Microsoft Edge 20.10240 and later
• Mozilla Firefox 44 and later
• Opera 35 and later.
For successful operation, JavaScript should be enabled on the web browser. Make sure that
JavaScript has not been disabled by other software (such as virus protection or web user security
packages) running on your computer.
Wired or Wireless NIC (Ethernet or Wi-Fi Adapter)
Any computer that uses the router should be equipped with an Ethernet or Wi-Fi adapter (NIC). If
your computer is not equipped with such a device, install an Ethernet or Wi-Fi adapter prior to using
the router.
Wireless Connection
Wireless workstations from your network should be equipped with a wireless 802.11a, b, g, n, or ac
NIC (Wi-Fi adapter). In addition, you should specify the values of SSID, channel number and
security settings defined in the web-based interface of the router for all these wireless workstations.
Page 20 of 231
User Manual
USB Modem
To connect to an LTE or 3G network, you should use a USB modem. Connect it to the USB port of
the router, then access the web-based interface of the router, and you will be able to configure a
connection to the Internet5.
Your USB modem should be equipped with an active SIM card of your operator.
Some operators require subscribers to activate their USB modems prior to using them.
!
Please, refer to connection guidelines provided by your operator when concluding the
agreement or placed on its website.
For some models of USB modems, it is required to disable the PIN code check on the SIM
card prior to connecting the USB modem to the router.
5 Contact your operator to get information on the service coverage and fees.
Page 21 of 231
User Manual
Connecting to PC
PC with Ethernet Adapter
1. Connect an Ethernet cable between any of LAN ports located on the back panel of the router
and the Ethernet port of your PC.
2. To connect via USB modem: connect your USB modem to the USB port6 located on the
back panel of the router.
! In some cases you will need to reboot the router after connection of the USB modem.
3. Connect the power cord to the power connector port on the back panel of the router, then
plug the power adapter into an electrical outlet or power strip.
4. Turn on the router by pressing the POWER button on its back panel.
Then make sure that your PC is configured to obtain an IP address automatically (as DHCP client).
6 It is recommended to use a USB extension cable to connect a USB modem to the router.
Page 22 of 231
User Manual
Obtaining IP Address Automatically in OS Windows 7

1. Click the Start button and proceed to the Control Panel window.
2. Select the Network and Sharing Center section. (If the Control Panel has the category
view (the Category value is selected from the View by drop-down list in the top right
corner of the window), choose the View network status and tasks line under the
Network and Internet section.)
Figure 3. The Control Panel window.
Page 23 of 231
User Manual
3. In the menu located on the left part of the window, select the Change adapter settings
line.
Figure 4. The Network and Sharing Center window.
Page 24 of 231
User Manual
4. In the opened window, right-click the relevant Local Area Connection icon and select
the Properties line in the menu displayed.
Figure 5. The Network Connections window.
Page 25 of 231
User Manual
5. In the Local Area Connection Properties window, on the Networking tab, select the
Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.
Figure 6. The Local Area Connection Properties window.
Page 26 of 231
User Manual
6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.
Figure 7. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the OK button in the connection properties window.
Page 27 of 231
User Manual
PC with Wi-Fi Adapter

1. To connect via USB modem: connect your USB modem to the USB port7 located on the
back panel of the router.
! In some cases you will need to reboot the router after connection of the USB modem.
2. Connect the power cord to the power connector port on the back panel of the router, then
plug the power adapter into an electrical outlet or power strip.
3. Turn on the router by pressing the POWER button on its back panel.
4. Make sure that the Wi-Fi adapter of your PC is on. As a rule, modern notebooks with built-
in wireless NICs are equipped with a button or switch that turns on/off the wireless adapter
(refer to your PC documents). If your PC is equipped with a pluggable wireless NIC, install
the software provided with your Wi-Fi adapter.
Then make sure that your Wi-Fi adapter is configured to obtain an IP address automatically (as
DHCP client).
7 It is recommended to use a USB extension cable to connect a USB modem to the router.
Page 28 of 231
User Manual
Obtaining IP Address Automatically and Connecting

to Wireless Network (OS Windows 7)
1. Click the Start button and proceed to the Control Panel window.
2. Select the Network and Sharing Center section. (If the Control Panel has the category
view (the Category value is selected from the View by drop-down list in the top right
corner of the window), choose the View network status and tasks line under the
Network and Internet section.)
Figure 8. The Control Panel window.

3. In the menu located on the left part of the window, select the Change adapter settings
line.
4. In the opened window, right-click the relevant Wireless Network Connection icon.
Make sure that your Wi-Fi adapter is on, then select the Properties line in the menu
displayed.
5. In the Wireless Network Connection Properties window, on the Networking tab,
select the Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.
Page 29 of 231
User Manual
6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.
Figure 9. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the OK button in the connection properties window.
8. To open the list of available wireless networks, select the icon of the wireless network
connection and click the Connect To button or left-click the network icon in the
notification area located on the right side of the taskbar.
Figure 10. The notification area of the taskbar.
Page 30 of 231
User Manual
9. In the opened Wireless Network Connection window, select the wireless network DIR-
825 (for operating in the 2.4GHz band) or DIR-825-5G (for operating in the 5GHz band)
and click the Connect button.
Figure 11. The list of available networks.

10. In the opened window, enter the network key (see WPS PIN on the barcode label on the
bottom panel of the device) in the Security key field and click the OK button.
11. Wait for about 20-30 seconds. After the connection is established, the network icon will be
displayed as the signal level scale.
If you perform initial configuration of the router via Wi-Fi connection, note that
! immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.
Page 31 of 231
User Manual
Connecting to Web-based Interface

When you have configured your computer, you can access the web-based interface and configure
needed parameters (create a WAN connection, change the parameters of the wireless network,
specify the settings of the firewall, etc.).
For security reasons, DIR-825/AC with default settings cannot connect to the Internet. To
! get started, please set your own password used to access the web-based interface and, if
needed, configure other settings recommended by your ISP.
Start a web browser (see the Before You Begin section, page 20). In the address bar of the web
browser, enter the domain name of the router (by default, dlinkrouter.local) with a dot at
the end and press the Enter key. Also you can enter the IP address of the device (by default,
192.168.0.1).
Figure 12. Connecting to the web-based interface of the DIR-825/AC device.
If the error “The page cannot be displayed” (or “Unable to display the page”/“Could not
! connect to remote server”) occurs upon connecting to the web-based interface of the router,
make sure that you have properly connected the router to your computer.
If the device has not been configured previously or the default settings have been restored, after
access to the web-based interface the Initial Configuration Wizard opens (see the Initial
Configuration Wizard section, page 39).
Figure 13. The page for running the Initial Configuration Wizard.
Page 32 of 231
User Manual
If you configured the device previously, after access to the web-based interface the login page
opens. Enter the username (admin) in the Username field and the password you specified in the
Password field, then click the LOGIN button.
Figure 14. The login page.
Page 33 of 231
User Manual
Web-based Interface Structure

Summary Page
On the Summary page, detailed information on the device state is displayed.
Figure 15. The summary page.
Page 34 of 231
User Manual
The Device Information section displays the model and hardware version of the router, the
firmware version, and other data.
To contact the technical support group (to send an e-mail), left-click the support e-mail address.
After clicking the line, the e-mail client window for sending a new letter to the specified address
opens.
To change the operation mode of the device, left-click the name of the mode in the Device mode
line. In the opened window, click the initial setup wizard link (for the detailed description of the
Wizard, see the Initial Configuration Wizard section, page 39).
If needed, you can disable the LEDs of the device (except the POWER LED). To do this, move the
Enable LEDs switch to the left. In order to enable the LEDs, move the switch to the right and
reboot the device.
The Wi-Fi 2.4 GHz and Wi-Fi 5 GHz sections display data on the state of the device's wireless
network, its name and the authentication type.
In the WAN section, data on the type and status of the existing WAN connection are displayed.
In the LAN section, the IPv4 and IPv6 address of the router and the number of wired and wireless
clients of the device are displayed.
The LAN Ports section displays the state of the device's LAN ports and data transfer mode of
active ports.
The USB Devices section displays the device connected to the USB port of the router.
The Yandex.DNS section displays the Yandex.DNS service state and operation mode. To enable
the Yandex.DNS service, move the Enable switch to the right. If needed, change the operation
mode of the service.
Page 35 of 231
User Manual
Home Page
The Home page displays links to the most frequently used pages with device's settings.
Figure 16. The Home page.
Other settings of the router are available in the menu in the left part of the page.
Page 36 of 231
User Manual
Menu Sections
To configure the router use the menu in the left part of the page.
In the Initial Configuration section you can run the Initial Configuration Wizard. The Wizard
allows you to configure the router for operation in the needed mode and specify all parameters
necessary for getting started (for the description of the Wizard, see the Initial Configuration
Wizard section, page 39).
The pages of the Statistics section display data on the current state of the router (for the
description of the pages, see the Statistics section, page 64).
The pages of the Connections Setup section are designed for configuring basic parameters of
the LAN interface of the router and creating a connection to the Internet (for the description of the
pages, see the Connections Setup section, page 71).
The pages of the Wi-Fi section are designed for specifying all needed settings of the router's
wireless network (for the description of the pages, see the Wi-Fi section, page 113).
The Print Server section is designed for configuring the router as a print server (see the Print
Server section, page 141).
The pages of the USB Storage section are designed for operating the connected USB storage (for
the description of the pages, see the USB Storage section, page 142).
The pages of the USB Modem section are designed for operating the connected 3G or LTE USB
modem (for the description of the pages, see the USB Modem section, page 156).
The pages of the Advanced section are designed for configuring additional parameters of the
router (for the description of the pages, see the Advanced section, page 160).
The pages of the Firewall section are designed for configuring the firewall of the router (for the
description of the pages, see the Firewall section, page 192).
The pages of the System section provide functions for managing the internal system of the router
(for the description of the pages, see the System section, page 207).
The pages of the Yandex.DNS section are designed for configuring the Yandex.DNS web content
filtering service (for the description of the pages, see the Yandex.DNS section, page 223).
To exit the web-based interface, click the Logout line of the menu.
Page 37 of 231
User Manual
Notifications
The router's web-based interface displays notifications in the top right part of the page.
Figure 17. The web-based interface notifications.

Click the icon displaying the number of notifications to view the complete list and click the relevant
button.
Page 38 of 231
with 3G/LTE Support and USB Port Configuring via Web-based Interface
User Manual
CHAPTER 4. CONFIGURING VIA WEB-BASED

INTERFACE
Initial Configuration Wizard
To start the Initial Configuration Wizard, go to the Initial Configuration section. On the opened
page, click the OK button and wait until the factory default settings are restored.
Figure 18. Restoring the default settings in the Wizard.

If you perform initial configuration of the router via Wi-Fi connection, please make sure that you
are connected to the wireless network of DIR-825/AC (see the WLAN name (SSID) on the barcode
label on the bottom panel of the device) and click the NEXT button.
Figure 19. Checking connection to the wireless network.
Click the START button.
Figure 20. Starting the Wizard.
Page 39 of 231
User Manual
On the opened page, click YES in order to leave the current language of the web-based interface or
click NO to select the other language.
Figure 21. Selecting a language.

You can finish the wizard earlier and go to the menu of the web-based interface. To do this, click the
ADVANCED SETTINGS button. On the opened page, change the default settings: specify the
administrator password in the Admin password field and the name of the wireless network in the
2.4GHz and 5GHz bands in the Network name 2.4GHz (SSID) and Network name 5GHz
(SSID) fields correspondingly. Then click the APPLY button.
Figure 22. Changing the default settings.

To continue the configuration of the router via the Wizard, click the CONTINUE button.
Page 40 of 231
User Manual
Selecting Operation Mode

In order to connect your device to a wired ISP, on the Device mode page, from the Connection
method list, select the Wired connection value. Then from the Work mode list select the
Router value. In this mode you can configure a WAN connection, set your own settings for the
wireless network, configure LAN ports to connect an STB or VoIP phone, and set your own
password for access to the web-based interface of the device.
Figure 23. Selecting an operation mode. The Router mode.

In order to connect your device to the network of a 3G or LTE operator, on the Device mode
page, from the Connection method list, select the 3G/LTE modem value. In this mode you can
configure a 3G/LTE WAN connection, set your own settings for the wireless network, and set your
own password for access to the web-based interface of the device.
Figure 24. Selecting an operation mode. The 3G/LTE modem mode.
Page 41 of 231
User Manual
In order to connect your device to a wireless ISP (WISP), on the Device mode page, from the
Connection method list, select the Wi-Fi value. Then from the Work mode list select the
WISP Repeater value. In this mode you can connect your device to another access point,
configure a WAN connection, set your own settings for the wireless network, configure LAN ports
to connect an STB or VoIP phone, and set your own password for access to the web-based interface
of the device.
Figure 25. Selecting an operation mode. The WISP Repeater mode.

In order to connect your device to a wired router for adding a wireless network to the existing local
network, on the Device mode page, from the Connection method list, select the Wired
connection value. Then from the Work mode list select the Access point value. In this mode
you can change the LAN IP address, set your own settings for the wireless network and set your
own password for access to the web-based interface of the device.
Figure 26. Selecting an operation mode. The Access point mode.
Page 42 of 231
User Manual
In order to connect your device to a wireless router for extending the range of the existing wireless
network, on the Device mode page, from the Connection method list, select the Wi-Fi value.
Then from the Work mode list select the Repeater value. In this mode you can change the LAN
IP address, connect your device to another access point, set your own settings for the wireless
network, and set your own password for access to the web-based interface of the device.
Figure 27. Selecting an operation mode. The Repeater mode.

In order to let wired PCs connected to your device access the network of a wireless router, on the
Device mode page, from the Connection method list, select the Wi-Fi value. Then from the
Work mode list select the Client value. In this mode you can change the LAN IP address, connect
your device to another access point and set your own password for access to the web-based
interface of the device.
Figure 28. Selecting an operation mode. The Client mode.

When the operation mode is selected, click the NEXT button.
Page 43 of 231
User Manual
Creating 3G/LTE WAN Connection

This configuration step is available for the 3G/LTE modem mode.
1. If the PIN code check is enabled for the SIM card inserted into your USB modem, enter the
PIN code in the PIN field and click the APPLY button.
Figure 29. The page for entering the PIN code.

2. Please wait while the router automatically creates a WAN connection for your mobile
operator.
Figure 30. The page for creating 3G/LTE connection.
3. Click the NEXT button to continue or click the BACK button to return to the previous page.
If the router failed to create a WAN connection automatically, click the CONFIGURE
MANUALLY button. On the Internet connection type page, configure all needed settings and
click the NEXT button.
Page 44 of 231
User Manual
Changing LAN IPv4 Address

This configuration step is available for the Access point, Repeater, and Client modes.
1. Select the Automatic obtainment of IPv4 address to let DIR-825/AC automatically
obtain the LAN IPv4 address.
If the router obtains the LAN IPv4 address automatically, then after finishing the Wizard
! you can access the web-based interface using the domain name (by default,
dlinkrouter.local) with a dot at the end.
If you want to manually assign the LAN IPv4 address for DIR-825/AC, do not select the
Automatic obtainment of IPv4 address checkbox and fill in the IP address and Netmask
fields and, if needed, the Gateway IP address field. Make sure that the assigned address does not
coincide with the LAN IPv4 address of the router to which your device connects.
Figure 31. The page for changing the LAN IPv4 address.
Page 45 of 231
User Manual
Wi-Fi Client
This configuration step is available for the WISP Repeater, Repeater, and Client modes.
1. On the Wi-Fi client page, in the Wireless Networks section, select the network to which
you want to connect. When you select a network, the Network name (SSID) and BSSID
fields are filled in automatically.
If you cannot find the needed network in the list, click the UPDATE LIST button.
2. If a password is needed to connect to the selected network, fill in the relevant field.
Figure 32. The page for configuring the Wi-Fi client.
Page 46 of 231
User Manual
If you connect to a hidden network, from the Connecting to network list select the Connect to
hidden network value. Then select the band where the hidden network operates from the
Frequency band list and enter the network name in the Network name (SSID) field. Then
select a needed value from the Network authentication list and then, if needed, enter the
password in the relevant field.
Figure 33. The page for configuring connection to a hidden network.

Page 47 of 231
User Manual
Creating Wired WAN Connection

This configuration step is available for the Router and WISP Repeater modes.
You should configure your WAN connection in accordance with data provided by your
! Internet service provider (ISP). Make sure that you have obtained all necessary information
prior to configuring your connection. Otherwise contact your ISP.
1. On the Internet connection type page, from the Connection type list, select the
connection type used by your ISP and fill in the fields displayed on the page.
2. Specify the settings necessary for the connection of the selected type.
3. If your ISP uses MAC address binding, select the Clone MAC address of your device
checkbox.
4. If the Internet access is provided via a VLAN channel, select the Use VLAN checkbox and
fill in the VLAN ID field.
Page 48 of 231
User Manual
Static IPv4 Connection
Figure 34. The page for configuring Static IPv4 WAN connection.
Fill in the following fields: IP address, Netmask, Gateway IP address, and DNS IP
address.
Page 49 of 231
User Manual
Static IPv6 Connection
Figure 35. The page for configuring Static IPv6 WAN connection.
Fill in the following fields: IP address, Prefix, and Gateway IP address.
Page 50 of 231
User Manual
PPPoE, IPv6 PPPoE, PPPoE Dual Stack, PPPoE + Dynamic IP (PPPoE Dual
Access) Connections
Figure 36. The page for configuring PPPoE WAN connection.

In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.
Page 51 of 231
User Manual
PPPoE + Static IP (PPPoE Dual Access) Connection
Figure 37. The page for configuring PPPoE + Static IP (PPPoE Dual Access) WAN connection.
Also fill in the following fields: IP address, Netmask, Gateway IP address, and DNS IP
address.
Page 52 of 231
User Manual
PPTP + Dynamic IP or L2TP + Dynamic IP Connection
Figure 38. The page for configuring PPTP + Dynamic IP WAN connection.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
Page 53 of 231
User Manual
PPTP + Static IP or L2TP + Static IP Connection
Figure 39. The page for configuring PPTP + Static IP WAN connection.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
Also fill in the following fields: IP address, Netmask, Gateway IP address, and DNS IP
address.
Page 54 of 231
User Manual
Configuring Wireless Network

This configuration step is available for the 3G/LTE modem, Router, Access point, WISP
Repeater, and Repeater modes.
1. On the Wireless Network 2.4 GHz page, in the Network name field, specify your own
name for the wireless network or leave the value suggested by the router.
2. In the Password field, specify your own password for access to the wireless network or
leave the value suggested by the router (WPS PIN of the device, see the barcode label).
3. You can restore the parameters of the wireless network specified before resetting to factory
defaults. To do this, click the RESTORE button.
Figure 40. The page for configuring the wireless network.

4. If you want to create an additional wireless network isolated from your LAN, select the
Enable guest network checkbox (available for the 3G/LTE modem, Router, and
WISP Repeater modes only).
Figure 41. The page for configuring the wireless network.
5. In the Network name field, specify your own name for the guest wireless network or leave
the value suggested by the router.
Page 55 of 231
User Manual
6. If you want to create a password for access to the guest wireless network, deselect the Open
network checkbox and fill in the Password field.
7. If you want to limit the bandwidth of the guest wireless network, select the Enable
shaping checkbox and fill in the Shaping field.
8. Click the NEXT button to continue or click the BACK button to specify other settings.
9. On the Wireless Network 5GHz page, specify needed settings for the wireless network in
the 5GHz band and click the NEXT button.
Page 56 of 231
User Manual
Configuring LAN Ports for IPTV/VoIP

This configuration step is available for the Router and WISP Repeater modes.
1. On the IPTV page, select the Is an STB connected to the device checkbox.
Figure 42. The page for selecting a LAN port to connect an IPTV set-top box.
2. Select a free LAN port for connecting your set-top box.
3. If the IPTV service is provided via a VLAN channel, select the Use VLAN ID checkbox
and fill in the VLAN ID field.
Page 57 of 231
User Manual
5. On the VoIP page, select the In an IP phone connected to the device checkbox.
Figure 43. The page for selecting a LAN port to connect an VoIP phone.
6. Select a free LAN port for connecting your IP phone.
7. If the VoIP services provided via a VLAN channel, select the Use VLAN ID checkbox and
fill in the VLAN ID field.
Page 58 of 231
User Manual
Changing Web-based Interface Password

On this page, you should change the default administrator password. You may set any password
except admin. Use digits, Latin letters (uppercase and/or lowercase), and other characters available
in the US keyboard layout.8
Figure 44. The page for changing the web-based interface password.
Remember or write down the new password for the administrator account. In case of losing
! the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.
Click the NEXT button to continue or click the BACK button to return to the previous page.
On the next page, check all specified settings.
Also you can save a text file with parameters set by the Wizard to your PC. To do this, click the
SAVE CONFIGURATION FILE button and follow the dialog box appeared.
To finish the Wizard, click the APPLY button. The router will apply settings and reboot. Click the
BACK button to specify other settings.
8 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.
Page 59 of 231
User Manual
If the Wizard has configured a WAN connection, after clicking the APPLY button, the page for
checking the Internet availability opens.
Figure 45. Checking the Internet availability.

If the router has been successfully connected to the Internet, click the FINISH button.
If problems appeared when connecting to the Internet, click the CHECK AGAIN button to recheck
the state of the WAN connection.
If problems of connection have not been solved, contact the technical support of your ISP (as a rule,
the technical support phone is provided with the agreement) or the D-Link technical support (the
phone number will be displayed on the page after several attempts of checking the connection).
To specify other settings, click the ADVANCED SETTINGS button. After clicking the
ADVANCED SETTINGS button, the Summary page opens (see the Summary Page section,
page 34).
Page 60 of 231
User Manual
Connection of Multimedia Devices

The Multimedia Devices Connection Wizard helps to configure LAN ports or available wireless
interfaces of the router for connecting additional devices, for example, an IPTV set-top box or IP
phone. Contact your ISP to clarify if you need to configure DIR-825/AC in order to use these
devices.
To start the Wizard, on the Home page, select the Connection of Multimedia Devices section.
If you need to select a port or wireless interface in order to use an additional device, left-click the
relevant element in the LAN section (the selected element will be marked with a frame). Then click
the APPLY button.
Figure 46. The Multimedia Devices Connection Wizard. The simple mode.
Page 61 of 231
User Manual
If you need to configure a connection via VLAN, click the ADVANCED MODE button.
Figure 47. The Multimedia Devices Connection Wizard. The advanced mode.
In the WAN section, click the Add icon ( ).
Figure 48. Adding a connection.

In the opened window, specify a name of the connection for easier identification in the Name field
(you can specify any name). Specify the VLAN ID provided by your ISP and click the SAVE
button.
Page 62 of 231
User Manual
Then in the LAN section, from the Bridged with drop-down list of the element corresponding to
the LAN port or wireless interface to which the additional device is connected, select the created
connection. Click the APPLY button.
!
The selected port or wireless interface cannot use the default connection to access the
Internet.
To deselect the port or wireless interface in the simple mode, left-click the selected element (the
frame will disappear) and click the APPLY button.
To deselect the port or wireless interface in the advanced mode, select the No value from the
Bridged with drop-down list of the element corresponding to the needed LAN port or interface.
Then in the WAN section, select the connection via VLAN which will not be used any longer and
click the REMOVE button. Then click the APPLY button.
Page 63 of 231
User Manual
Statistics
The pages of this section display data on the current state of the router:
• network statistics
• IP addresses leased by the DHCP server
• the routing table
• data on devices connected to the router's network and its web-based interface
• statistics for traffic passing through ports of the router
• addresses of active multicast groups
• active sessions.
Network Statistics
On the Statistics / Network Statistics page, you can view statistics for all connections existing
in the system (WAN connections, LAN, WLAN). For each connection the following data are
displayed: name and state (when the connection is on, its name is highlighted in green, when the
connection is off, its name is highlighted in red), IP address and subnet mask, gateway (if the
connection is established), MAC address, and volume of data received and transmitted (with
increase of the volume the units of measurement are changed automatically: byte, Kbyte, Mbyte,
Gbyte).
Figure 49. The Statistics / Network Statistics page.

To view data on a connection, click the line corresponding to this connection.
Page 64 of 231
User Manual
DHCP
The Statistics / DHCP page displays the information on computers that have been identified by
hostnames and MAC addresses and have got IP addresses from the DHCP server of the device, as
well as the IP address expiration periods (the lease time).
Figure 50. The Statistics / DHCP page.
Page 65 of 231
User Manual
Routing Table
The Statistics / Routing Table page displays the information on routes. The table contains
destination IP addresses, gateways, subnet masks, and other data.
Figure 51. The Statistics / Routing Table page.
Page 66 of 231
User Manual
Clients
On the Statistics / Clients page, you can view the list of devices connected to the local network
of the router.
Figure 52. The Statistics / Clients page.

For each device the following data are displayed: the IP address, the MAC address, and the network
interface to which the device is connected.
Page 67 of 231
User Manual
Port Statistics
On the Statistics / Port statistics page, you can view statistics for traffic passing through ports
of the router. The information shown on the page can be used for diagnosing connection problems.
Figure 53. The Statistics / Port Statistics page.

To view the full list of counters for a port, click the line corresponding to this port.
Page 68 of 231
User Manual
Multicast Groups
The Statistics / Multicast Groups page displays addresses of active multicast groups (including
IPTV channels and groups for transferring service information) to which the device is subscribed,
and the interface through which the device is subscribed.
Figure 54. The Statistics / Multicast Groups page.
Page 69 of 231
User Manual
Clients and Session

On the Statistics / Clients and Session page, you can view information on current sessions in
the router's network. For each session the following data are displayed: the protocol for network
packet transmission, the source IP address and port, and the destination IP address and port.
Figure 55. The Statistics / Clients and Session page.

To view the latest data on current sessions in the router's network, click the REFRESH button.
Page 70 of 231
User Manual
Connections Setup
In this menu you can configure basic parameters of the router's local area network and configure
connection to the Internet (a WAN connection).
WAN
On the Connections Setup / WAN page, you can create and edit connections used by the router.
By default, a Dynamic IPv4 connection is configured in the system. It is assigned to the WAN
port of the router.
Figure 56. The Connections Setup / WAN page. The simplified mode.
To edit an existing connection, click the EDIT button. On the opened page, on the Basic tab, the
mandatory settings of this connection will be displayed. To view all available settings of the WAN
connection, go to the All Settings tab. Change the needed parameters and click the APPLY
button.
To disconnect a connection and establish it again, click the RECONNECT button.
To remove an existing connection and create a new one, click the CHANGE CONFIGURATION
button. Upon that the connection creation page opens.
To create several WAN connections, go to the advanced mode. To do this, click the ADVANCED
MODE button.
!
When connections of some types are created, the Connections Setup / WAN page is
automatically displayed in the advanced mode.
Page 71 of 231
User Manual
Figure 57. The Connections Setup / WAN page. The advanced mode.
To create a new connection, click the ADD button in the Connections List section. Upon that the
connection creation page opens.
To edit an existing connection, in the Connections List section, left-click the relevant line in the
table. On the opened page, on the Basic tab, the mandatory settings of this WAN connection will
be displayed. To view all available settings of the WAN connection, go to the All Settings tab.
Change the needed parameters and click the APPLY button.
To disconnect a connection and establish it again, select the checkbox located to the left of the
relevant line in the table and click the RECONNECT button.
To remove a connection, in the Connections List section, select the checkbox located to the left
of the relevant line in the table and click the DELETE button. Also you can remove a connection on
the editing page.
To allow multicast traffic (e.g. streaming video) for a connection, click the IGMP/MLD link (for the
description of the page, see the IGMP/MLD section, page 182).
To use one of existing WAN connections as the default IPv4 or IPv6 connection, in the Default
gateway section, select the choice of the radio button which corresponds to this connection.
To return to the simplified mode, click the SIMPLIFIED MODE button (the button is unavailable if
several WAN connections are created).
Page 72 of 231
User Manual
Creating Dynamic IPv4 or Static IPv4 WAN Connection

On the connection creation page, go to the All Settings tab. Then select the relevant value from
the Connection Type drop-down list and specify the needed values.
Figure 58. The page for creating a new Static IPv4 connection. Selecting a connection type.
Parameter Description
Move the switch to the right to enable the connection.

Enable connection
Move the switch to the left to disable the connection.
Available for the advanced mode only.

Connection name
A name for the connection for easier identification.
Page 73 of 231
User Manual
Figure 59. The page for creating a new Static IPv4 connection. The Ethernet section.
Ethernet
A MAC address assigned to the interface. This parameter is

mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
To set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
MAC address
as the MAC address of the WAN interface, move the Clone MAC
address of your NIC switch to the right. When the switch is
moved to the right, the field is unavailable for editing.
To set the router's MAC address, click the RESTORE DEFAULT
MAC ADDRESS button (the button is available when the switch is
moved to the right).
MTU The maximum size of units transmitted by the interface.
Page 74 of 231
User Manual
Figure 60. The page for creating a new Static IPv4 connection. The Authorization via 802.1x Protocol
section.
Authorization via 802.1x Protocol
Enable authorization Move the switch to the right to allow authorization in the ISP's
via 802.1x protocol network via the 802.1x protocol.
Authentication
Select a needed authentication method from the drop-down list.
method
Login Enter the username provided by your ISP.
Enter the password provided by your ISP. Click the Show

Password
icon ( ) to display the entered password.
Page 75 of 231
User Manual
Figure 61. The page for creating a new Static IPv4 connection. The IPv4 section.
IPv4
For Static IPv4 type
IP address Enter an IP address for this WAN connection.
Netmask Enter a subnet mask for this WAN connection.
Gateway IP address Enter an IP address of the gateway used by this WAN connection.
Primary DNS server/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS server relevant fields.
For Dynamic IPv4 type
Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS server and
automatically Secondary DNS server fields are not available for editing.
Vendor ID The identifier of your ISP. Optional.
Hostname A name of the router specified by your ISP. Optional.
Page 76 of 231
User Manual
Figure 62. The page for creating a new Static IPv4 connection. The Miscellaneous section.
Miscellaneous
If the switch is moved to the right, the network address translation

NAT function is enabled. Do not disable the function unless your ISP
requires this.
If the switch is moved to the right, protection against external

connections for the LAN devices is enabled (for example, against
Firewall attempts to get information about the LAN devices or to hack a
device from the LAN). For security reasons, it is recommended not
to disable this function.
RIP Move the switch to the right to allow using RIP for this connection.
If the switch is moved to the right, the router responds to ping

Ping requests from the external network through this connection. For
security reasons, it is recommended to disable this function.
If the switch is moved to the right, the router uses an alternate

Isolate connection routing table for this connection. Enable this function only when
your ISP requires this.
When all needed settings are configured, click the APPLY button.
Page 77 of 231
User Manual
Creating Dynamic IPv6 or Static IPv6 WAN Connection

Figure 63. The page for creating a new Static IPv6 connection. Selecting a connection type.

Enable connection

Connection name
Page 78 of 231
User Manual
Figure 64. The page for creating a new Static IPv6 connection. The Ethernet section.
Ethernet

agreement.
MAC address
Page 79 of 231
User Manual
Figure 65. The page for creating a new Static IPv6 connection. The IPv6 section.
IPv6
For Static IPv6 type
IPv6 Address Enter an IPv6 address for this WAN connection.
Prefix The length of the subnet prefix. The value 64 is used usually.
Gateway IPv6 address Enter an IPv6 address of the gateway used by this WAN connection.
Primary IPv6 DNS

Enter addresses of the primary and secondary IPv6 DNS servers in
server/Secondary IPv6
the relevant fields.
DNS server
For Dynamic IPv6 type
Select a method for IPv6 address assignment from the drop-down

Get IPv6
list or leave the Automatically value.
Move the switch to the right to automatically assign the IPv6

Gateway by SLAAC gateway address with help of SLAAC (Stateless Address
Autoconfiguration).
The address of the IPv6 gateway. The field is available for editing if
Gateway IPv6 address
the Gateway by SLAAC switch is moved to the left.
Move the switch to the right to configure automatic assignment of

Obtain DNS server
IPv6 DNS server addresses. Upon that the Primary IPv6 DNS
addresses
server and Secondary IPv6 DNS server fields are not available
automatically
for editing.
Page 80 of 231
User Manual
Primary IPv6 DNS

DNS server
Figure 66. The page for creating a new Static IPv6 connection. The Miscellaneous section.
Miscellaneous



Page 81 of 231
User Manual
Creating PPPoE WAN Connection

Figure 67. The page for creating a new PPPoE connection. Selecting a connection type.

Enable connection

Connection name
Page 82 of 231
User Manual
Figure 68. The page for creating a new PPPoE connection. The Ethernet section.
Ethernet

agreement.
MAC address
Page 83 of 231
User Manual
Figure 69. The page for creating a new PPPoE connection. The PPP section.
PPP
Move the switch to the right if you don't need to enter a username
Without authorization
and password to access the Internet.
Username A username (login) to access the Internet.
A password to access the Internet. Click the Show icon ( ) to

Password
display the entered password.
Service name The name of the PPPoE authentication server.
Authentication Select a required authentication method from the drop-down list or

protocol leave the AUTO value.
Page 84 of 231
User Manual
Move the switch to the right if you want the router to keep you
connected to your ISP even when the connection has been inactive
Keep Alive for a specified period of time. If the switch is moved to the right, the
LCP interval and LCP fails fields are available. Specify the
required values.
Move the switch to the right if you want the router to establish
connection to the Internet on demand. In the Maximum idle time
Dial on demand
field, specify a period of inactivity (in seconds) after which the
connection should be terminated.
Fill in the field if you want to use a static IP address to access the
Static IP address
Internet.
This option is used by some ISPs. Contact your ISP to clarify if this
PPP IP extension option needs to be enabled. If it is required, move the switch to the
right.
Move the switch to the right if you want to log all data on PPP
PPP debug
connection debugging.
Page 85 of 231
User Manual
Figure 70. The page for creating a new PPPoE connection. The Miscellaneous section.
Miscellaneous

requires this.



After clicking the button, the window for creating an additional connection opens.
If your ISP offers access to local services (e.g. audio and video resources), select the existing
connection or select the create a new connection choice of the radio button. Then click the OK
button. On the page displayed, specify the parameters for the connection of the Dynamic IPv4 or
Static IPv4 type and click the APPLY button. Click the BACK button to specify other settings for
the connection of the PPPoE type.
If you do not need to create an additional connection, click the SKIP button. In this case, the
Connections Setup / WAN page opens.
Page 86 of 231
User Manual
Creating PPTP or L2TP WAN Connection

Figure 71. The page for creating a new PPTP connection. Selecting a connection type.

Enable connection

Connection name
Page 87 of 231
User Manual
Figure 72. The page for creating a new PPTP connection. The PPP section.
PPP

Password
VPN server address The IP or URL address of the PPTP or L2TP authentication server.
Select a required authentication method from the drop-down list or

Authentication protocol
leave the AUTO value.
Page 88 of 231
User Manual
Select a method of MPPE encryption.

• No encryption: MPPE encryption is not applied.
• MPPE 40/128 bit: MPPE encryption with a 40-bit or 128-
bit key is applied.
• MPPE 40 bit: MPPE encryption with a 40-bit key is applied.
Encryption protocol
• MPPE 128 bit: MPPE encryption with a 128-bit key is
applied.
MPPE encryption can be applied only if the MS-CHAP, MS-
CHAPV2, or AUTO value is selected from the Authentication
protocol drop-down list.
required values.
Dial on demand
Advanced options of the pppd daemon which need to be specified

Extra options
for this connection. Optional.
Fill in the field if you want to use a static IP address to access the
Static IP Address
Internet.
PPP debug
(Microsoft Point-to-Point Compression)

For the PPTP type only.
Enable MPPC Move the switch to the right if it is necessary to use the data
compression function in order to configure the connection.
Move the switch to the left to disable the function.
Page 89 of 231
User Manual
Figure 73. The page for creating a new PPTP connection. The Miscellaneous section.
Miscellaneous

requires this.



After clicking the button, the window for additional configuration of the connection opens.
If you want to use this WAN connection to access the Internet, select the to the Internet choice of
the radio button. Then select the existing connection which will be used to access the PPTP/L2TP
server or select the create a new connection choice of the radio button.
If you have already configured the connection to the Internet and you want to use this WAN
connection only to connect to the virtual private network, select the to the virtual private
network choice of the radio button.
Click the OK button.
Page 90 of 231
User Manual
Creating PPPoE IPv6 or PPPoE Dual Stack WAN Connection

Figure 74. The page for creating a new PPPoE IPv6 connection. Selecting a connection type.

Enable connection

Connection name
Page 91 of 231
User Manual
Figure 75. The page for creating a new PPPoE IPv6 connection. The Ethernet section.
Ethernet

agreement.
MAC address
Page 92 of 231
User Manual
Figure 76. The page for creating a new PPPoE IPv6 connection. The PPP section.
PPP

Password
Service name The name of the PPPoE authentication server.

Page 93 of 231
User Manual
required values.
Dial on demand
For the PPPoE Dual Stack type only.

Static IP Address Fill in the field if you want to use a static IP address to access the
Internet.
This option is used by some ISPs. Contact your ISP to clarify if this
PPP IP extension option needs to be enabled. If it is required, move the switch to the
right.
PPP debug
Page 94 of 231
User Manual
Figure 77. The page for creating a new PPPoE Pv6 connection. The IP section.
IP
Select a method for IPv6 address assignment from the drop-down

Get IPv6
list or leave the Automatically value.
Move the switch to the right to automatically assign the IPv6

Gateway by SLAAC gateway address with help of SLAAC (Stateless Address
Autoconfiguration).
The address of the IPv6 gateway. The field is available for editing if
Gateway IPv6 address
the Gateway by SLAAC switch is moved to the left.
Move the switch to the right to configure automatic assignment of

Obtain DNS server
IPv6 DNS server addresses. Upon that the Primary IPv6 DNS
addresses
server and Secondary IPv6 DNS server fields are not available
automatically
for editing.
Primary IPv6 DNS

DNS server
Page 95 of 231
User Manual
Figure 78. The page for creating a new PPPoE IPv6 connection. The Miscellaneous section.
Miscellaneous
For the PPPoE Dual Stack type only.

NAT
function is enabled. Do not disable the function unless your ISP
requires this.



Page 96 of 231
User Manual
Creating 3G WAN Connection

If the PIN code check is enabled for the SIM card inserted into your USB modem, then prior to
creating a 3G WAN connection, go to the USB modem menu and enter the PIN code9 on the page
displayed (see the USB Modem section, page 156). Then on the connection creation page, go to the
All Settings tab, select the relevant value from the Connection Type drop-down list, and
specify the needed values.
Figure 79. The page for creating a new 3G connection. Selecting a connection type.

Enable connection
Connection name A name for the connection for easier identification.
9 For some models of 3G USB modems it is required to disable the PIN code check on the SIM card prior to
connecting the USB modem to the router.
Page 97 of 231
User Manual
Figure 80. The page for creating a new 3G connection. The USB Modem section.
USB Modem
The value of the field specifies the type of the network to which the
router connects. Leave the Auto value to let the router connect
Mode
automatically to an available type of network, or select a needed
value from the drop-down list.
APN An access point name.
A number dialed to connect to the authorization server of the

Dial number
operator.
Page 98 of 231
User Manual
Figure 81. The page for creating a new 3G connection. The PPP section.
PPP
Move the switch to the right if your operator does not require
authorization.
Username A username (login) to connect to the network of the operator.
A password to connect to the network of the operator. Click the

Password
Show icon ( ) to display the entered password.

connected to the network of your operator even when the
Keep Alive connection has been inactive for a specified period of time. When
the checkbox is selected, the LCP interval and LCP fails fields
are available. Specify the required values.
Page 99 of 231
User Manual
Dial on demand
PPP debug
Figure 82. The page for creating a new 3G connection. The Miscellaneous section.
Miscellaneous

requires this.



Page 100 of 231

User Manual
Creating LTE WAN Connection
!
For the USB modem Megafon M100-1, please reboot the router after creating the WAN
connection.
If the PIN code check is enabled for the SIM card inserted into your USB modem, then prior to
creating an LTE WAN connection, go to the USB modem menu and enter the PIN code10 on the
page displayed (see the USB Modem section, page 156). Then on the connection creation page, go
to the All Settings tab, select the relevant value from the Connection Type drop-down list, and
specify the needed values.
Figure 83. The page for creating a new LTE connection. Selecting a connection type.

Enable connection
Connection name A name for the connection for easier identification.
10 For some models of LTE USB modems it is required to disable the PIN code check on the SIM card prior to
connecting the USB modem to the router.
Page 101 of 231

User Manual
Figure 84. The page for creating a new LTE connection. The USB Modem section.
USB Modem
The value of the field specifies the type of the network to which the
router connects. Leave the Auto value to let the router connect
Mode
automatically to an available type of network, or select a needed
value from the drop-down list.11
APN An access point name.
Move the switch to the right if your operator does not require
authorization.
Authentication
Select a required authentication method from the drop-down list.
protocol
Username A username (login) to connect to the network of the operator.
A password to connect to the network of the operator. Click the

Password
11 Some LTE USB modems do not support network type selection and work in the Auto mode regardless of the value
selected from the drop-down list.
Page 102 of 231

User Manual
Figure 85. The page for creating a new LTE connection. The IPv4 section.
IPv4
Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS server and
automatically Secondary DNS server fields are not available for editing.
Vendor ID The identifier of your ISP. Optional.
Hostname A name of the router specified by your ISP. Optional.
Page 103 of 231

User Manual
Figure 86. The page for creating a new LTE connection. The Miscellaneous section.
Miscellaneous

requires this.



Page 104 of 231

User Manual
LAN
To configure the router's local interface, go to the Connections Setup / LAN page.
IPv4
Go to the IPv4 tab to change IPv4 address, configure the built-in DHCP server, or specify MAC
address and IP address pairs.
Figure 87. Configuring the local interface. The IPv4 tab. The Local IP Address section.
Local IP Address
The IP address of the router in the local subnet. By default, the

IP address
following value is specified: 192.168.0.1.
The mask of the local subnet. By default, the following value is
Subnet mask
specified: 255.255.255.0.
Device domain name The name of the device attached to its IP address in the local subnet.
Page 105 of 231

User Manual
Figure 88. Configuring the local interface. The IPv4 tab. The Dynamic IP Addresses section.
Dynamic IP Addresses
An operating mode of the router's DHCP server.

Disable: the router's DHCP server is disabled, clients' IP addresses
are assigned manually.
DHCP server: the router assigns IP addresses to clients
Mode of dynamic IP automatically in accordance with the specified parameters. When
address assignment this value is selected, the Start IP, End IP, Lease time fields and
the DNS relay switch are displayed on the tab.
DHCP relay: an external DHCP server is used to assign IP
addresses to clients. When this value is selected, the External
DHCP server IP field is displayed on the tab.
The start IP address of the address pool used by the DHCP server to
Start IP
distribute IP addresses to clients.
The end IP address of the address pool used by the DHCP server to
End IP
distribute IP addresses to clients.
The lifetime of IP addresses leased by the DHCP server. At the end
of this period the leased IP address is revoked and can be distributed
Lease time
to another device, unless the previous device has confirmed the need
to keep the address.
Move the switch to the right so that the devices connected to the
router obtain the address of the router as the DNS server address.
DNS relay Move the switch to the left so that the devices connected to the
router obtain the address transmitted by the ISP or specified on the
Advanced / DNS page as the DNS server address.
Page 106 of 231

User Manual
The IP address of the external DHCP server which assigns IP

External DHCP server IP
addresses to the router's clients.
In the Static IP Addresses section, you can specify MAC address and IPv4 address pairs (set a
fixed IPv4 address in the local area network for a device with a certain MAC address). The router
assigns IPv4 addresses in accordance with the specified pairs only when the DHCP server is
enabled (in the Dynamic IP Addresses section, the DHCP server value is selected from the
Mode of dynamic IP address assignment drop-down list).
Figure 89. The section for creating MAC-IPv4 pairs.

To create a MAC-IPv4 pair, click the ADD button. In the opened window, in the IP address field,
enter an IPv4 address which will be assigned to the device from the LAN, then in the MAC
address field, enter the MAC address of this device. In the Hostname field, specify a network
name of the device for easier identification (optional). Click the APPLY button.
Also you can create a MAC-IPv4 pair for a device connected to the router's LAN at the moment. To
do this, click the CLIENTS LIST button. In the opened window, select the relevant device and
click the OK button. To view the latest list of the connected devices, click the REFRESH button.
To edit the settings for the existing MAC-IPv4 pair, left-click the relevant line in the table. In the
opened window, change the needed parameters and click the APPLY button.
To remove a MAC-IPv4 pair, select the checkbox located to the left of the relevant line in the table
and click the DELETE button. Then click the APPLY button. Also you can remove a MAC-IPv4
pair in the editing window.
Page 107 of 231

User Manual
IPv6
Go to the IPv6 tab to change IPv6 address of the router and configure IPv6 addresses assignment
settings.
Figure 90. Configuring the local interface. The IPv6 tab. The Local IPv6 Address section.
Local IPv6 Address
Select the needed value from the drop-down list.

Mode of local IPv6 Static: an IPv6 address and a prefix are specified manually.
address assignment Prefix delegation: the router requests a prefix to configure an
IPv6 address from a delegating router.
The IPv6 address of the router in the local subnet. By default, the
following value is specified: fd01::1. The field is available for
IPv6 address
editing if the Static value is selected from the Mode of local IPv6
address assignment drop-down list.
The length of the prefix subnet. By default, the value 64 is
specified. The field is available for editing if the Static value is
Prefix
selected from the Mode of local IPv6 address assignment
drop-down list.
Page 108 of 231

User Manual
Figure 91. Configuring the local interface. The IPv6 tab. The Dynamic IPv6 Addresses section.
Dynamic IPv6 Addresses
Select the needed value from the drop-down list.

Disable: clients' IPv6 addresses are assigned manually.
Stateful: the built-in DHCPv6 server of the router allocates
Mode of dynamic IPv6
addresses from the range specified in the Start IPv6 and End IPv6
address assignment
fields.
Stateless: clients themselves configure IPv6 addresses using the
prefix.
The start IPv6 address of the address pool used by the DHCPv6
Start IPv6
server to distribute addresses to clients.
The end IPv6 address of the address pool used by the DHCPv6
End IPv6
server to distribute addresses to clients.
The lifetime of IPv6 addresses provided to clients. The field is
available for editing if the Static value is selected from the Mode
Lease time
of local IPv6 address assignment list in the Local IPv6
Address section.
Page 109 of 231

User Manual
In the Static IP Addresses section, you can specify MAC address and IPv6 address pairs (set a
fixed IPv6 address in the local area network for a device with a certain MAC address). The router
assigns IPv6 addresses in accordance with the specified pairs only when the Stateful value is
selected from the Mode of dynamic IPv6 address assignment drop-down list in the
Dynamic IPv6 Addresses section.
Figure 92. The section for creating MAC-IPv6 pairs.

To create a MAC-IPv6 pair, click the ADD button. In the opened window, in the IP address field,
enter an IPv6 address which will be assigned to the device from the LAN, then in the MAC
address field, enter the MAC address of this device. In the Hostname field, specify a network
name of the device for easier identification (optional). Click the APPLY button.
Also you can create a MAC-IPv6 pair for a device connected to the router's LAN at the moment. To
do this, click the CLIENTS LIST button. In the opened window, select the relevant device and
click the OK button. To view the latest list of the connected devices, click the REFRESH button.
To edit the settings for the existing MAC-IPv6 pair, left-click the relevant line in the table. In the
opened window, change the needed parameters and click the APPLY button.
To remove a MAC-IPv6 pair, select the checkbox located to the left of the relevant line in the table
and click the DELETE button. Then click the APPLY button. Also you can remove a MAC-IPv6
pair in the editing window.
Page 110 of 231

User Manual
WAN Reservation
On the Connections Setup / WAN Reservation page, you can enable the WAN backup
function, which provides you with uninterrupted access to the Internet. When your main connection
breaks down, the router activates the backup connection; and when the main channel is recovered,
the router switches to it and disconnects the reserve one.
Figure 93. The Connections Setup / WAN Reservation page.

To activate the backup function, create the main and the reserve WAN connections. After that go to
the Connections Setup / WAN Reservation page, move the Enable switch to the right, and
specify the needed values in the fields displayed on the page.
From the drop-down list, select a WAN connection which will be

Basic connection
used as the main one.
From the drop-down list, select a WAN connection which will be
Backup connection
used as the reserve one.
An IP address that the router will check for availability via ICMP
Test host
ping mechanism.
A time period (in seconds) between attempts to check the status of
Check interval
the main connection. By default, the value 10 is specified.
A time period (in seconds) for an attempt to check the status of the
main connection. At the end of this period the router's internal
Timeout check
system makes a decision to enable/disable the reserve channel. By
default, the value 3 is specified.
Page 111 of 231

User Manual
A number of requests that will be sent in order to analyze the status

Number of inspections
of the main connection when the connection is active (the router
of active connection
uses the main connection as a default gateway).
A number of requests that will be sent in order to analyze the status
Number of inspections
of the main connection when the connection is inactive (the router
of inactive connection
uses the reserve connection as a default gateway).
Page 112 of 231

User Manual
Wi-Fi
In this menu you can specify all needed settings for your wireless network.
Basic Settings
In the Wi-Fi / Basic settings section, you can change basic parameters for the wireless interface
of the router and configure the basic and additional wireless networks. To configure the 2.4GHz
band or 5GHz band, go to the relevant tab.
Figure 94. Basic settings of the wireless LAN in the 2.4GHz band.
Page 113 of 231

User Manual
In the General Settings section, the following parameters are available:
To enable Wi-Fi connection, move the switch to the right.

Enable Wireless
To disable Wi-Fi connection, move the switch to the left.
Country The country you are in. Select a value from the drop-down list.
Operating mode of the wireless network of the router. This

Wireless mode parameter defines standards of the devices that will be able to use
your wireless network. Select a value from the drop-down list.
Select channel Move the switch to the right to let the router itself choose the
automatically channel with the least interference.
Available on the 5GHz tab.
If the switch is moved to the left, the device automatically selects
Enable additional
one of available standard channels (below the 100th). To use
channels
additional channels (the 100th and higher), move the switch to the
right.
The wireless channel number. Left-click to open the window for
Channel selecting a channel (the action is available, when the Select
channel automatically switch is moved to the left).
Move the switch to the right to let the router search for a free
Enable periodic
channel in certain periods of time. When the switch is moved to the
scanning
right, the Scanning period field is available for editing.
Specify a period of time (in seconds) after which the router rescans
Scanning period
channels.
When you have configured the parameters, click the APPLY button.
Page 114 of 231

User Manual
To edit the settings of the basic wireless network, in the Wi-Fi Network section, change the needed
parameters and click the APPLY button.
Also you can create an additional wireless network. To do this, click the ADD WI-FI NETWORK
button. On the opened page, specify the relevant parameters.
Figure 95. Creating a wireless network.
Page 115 of 231

User Manual
Wi-Fi Network
A name for the wireless network. The name can consist of digits and
Network name (SSID)
Latin characters.
If the switch is moved to the right, other users cannot see your Wi-Fi
Hide SSID network. It is recommended not to hide the network in order to
simplify initial configuration of the wireless network.
The unique identifier for this wireless network. You cannot change
the value of this parameter, it is determined in the device's internal
BSSID
settings. The field is displayed in the settings of the existing wireless
network.
The maximum number of devices connected to the wireless network.
Max associated clients When the value 0 is specified, the device does not limit the number
of connected clients.
Move the switch to the right to limit the maximum bandwidth of the
wireless network. In the Shaping field displayed, specify the
Enable shaping
maximum value of speed (Kbit/s).
Move the switch to the left not to limit the maximum bandwidth.
If the switch is moved to the left, devices cannot connect to the
Broadcast wireless
wireless network. Upon that the router can connect to another access
network
point as a wireless client.
Move the switch to the right to forbid wireless clients of this
Clients isolation
wireless network to communicate to each other.
This function is available for the additional network. Move the
switch to the right if you want the devices connected to the
Enable guest network
additional network to be isolated from the devices and resources of
the router's LAN.
Page 116 of 231

User Manual
In the Security Settings section, you can change security settings of the wireless network.
By default, the WPA2-PSK network authentication type of both bands of the wireless network is
specified. WPS PIN from the barcode label is used as the network key.
Figure 96. Network authentication types supported by the router.

The router supports the following authentication types:
Authentication type Description
Open authentication (with WEP encryption for wireless network

Open
modes not supporting 802.11n or 802.11ac devices).
Authentication with a shared key with WEP encryption. This
authentication type is not available when a mode supporting
WEP
802.11n or 802.11ac devices is selected from the Wireless mode
drop-down list on the Wi-Fi / Basic Settings page.
WPA WPA-based authentication using a RADIUS server.
WPA-PSK WPA-based authentication using a PSK.
WPA2 WPA2-based authentication using a RADIUS server.
WPA2-PSK WPA2-based authentication using a PSK.
A mixed type of authentication. When this value is selected, devices

WPA/WPA2 mixed using the WPA authentication type and devices using the WPA2
authentication type can connect to the wireless network.
A mixed type of authentication. When this value is selected, devices
WPA-PSK/WPA2-PSK using the WPA-PSK authentication type and devices using the
mixed WPA2-PSK authentication type can connect to the wireless
network.
!
The WPA, WPA2, and WPA/WPA2 mixed authentication types require a RADIUS
server.
Page 117 of 231

User Manual
When the Open or WEP value is selected, the following settings are displayed on the page
(unavailable for the wireless network operating modes which support the standard 802.11n or
802.11ac):
Figure 97. The Open value is selected from the Network authentication drop-down list.
For Open authentication type only.

To activate WEP encryption, move the switch to the right. Upon that
Enable encryption WEP the Default key ID drop-down list, the Encryption key WEP as
HEX switch, and four Encryption key fields are displayed on the
page.
The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.
Encryption key WEP as Move the switch to the right to set a hexadecimal number as a key
HEX for encryption.
Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
Page 118 of 231

User Manual
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed value is selected, the

following fields are displayed on the page:
Figure 98. The WPA2-PSK value is selected from the Network authentication drop-down list.
A password for WPA encryption. The password can contain digits,

Latin letters (uppercase and/or lowercase), and other characters
Password PSK
available in the US keyboard layout.12 Click the Show icon ( ) to
Encryption type An encryption method: TKIP, AES, or TKIP+AES.
The time period (in seconds), at the end of which a new key for WPA
Group key update
encryption is generated. When the value 0 is specified for this field,
interval
the key is not renewed.
12 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.
Page 119 of 231

User Manual
When the WPA, WPA2, or WPA/WPA2 mixed value is selected, the following settings are
displayed on the page:
Figure 99. The WPA2 value is selected from the Network authentication drop-down list.
Move the switch to the right to activate preliminary authentication

WPA2 Pre-
(displayed only for the WPA2 and WPA/WPA2 mixed
authentication
authentication types).
IP address RADIUS
The IP address of the RADIUS server.
server
RADIUS server port A port of the RADIUS server.
The password which the router uses for communication with the
RADIUS encryption key RADIUS server (the value of this parameter is specified in the
RADIUS server settings).
The time period (in seconds), at the end of which a new key for WPA
Group key update
encryption is generated. When the value 0 is specified for this field,
interval
the key is not renewed.
To edit the basic or additional wireless network, left-click the relevant line in the table. On the
opened page, change the needed parameters and click the APPLY button.
To remove the additional network, select the checkbox located to the left of the relevant line in the
table and click the DELETE button. Then click the APPLY button.
Page 120 of 231

User Manual
Client Management
On the Wi-Fi / Client Management page, you can view the list of wireless clients connected to
the router.
Figure 100. The page for managing the wireless clients.

If you want to disconnect a wireless device from your WLAN, select the checkbox in the line
containing the MAC address of this device and click the DISCONNECT button.
To view the latest data on the devices connected to the WLAN, click the REFRESH button.
To view the latest data on a connected device, left-click the line containing the MAC address of this
device.
Page 121 of 231

User Manual
WPS
On the Wi-Fi / WPS page, you can enable the function for configuration of the WLAN and select a
method for connection to the WLAN.
The WPS function helps to configure the wireless network automatically. Devices connecting to the
wireless network via the WPS function must support the WPS function.
! The WPS function allows adding devices only to the basic wireless network of the router.
Before using the function you need to configure one of the following authentication types:
!
Open with no encryption, WPA2-PSK or WPA-PSK/WPA2-PSK mixed with the AES
encryption method. When other security settings are specified, controls of the WPS page
on the tab of the relevant band are not available.
Figure 101. The page for configuring the WPS function.

To activate the WPS function, on the tab of the relevant band, click the ENABLE WPS button.
Page 122 of 231

User Manual
When the WPS function is enabled, the Information section is available on the page.
The state of the WPS function:

• Configured (all needed settings are specified; these settings
will be used upon establishing the wireless connection)
WPS state
• Unconfigured (after activating the WPS function, the SSID
and the encryption key will be configured automatically, the
network authentication type will be changed to WPA2-PSK).
The PIN code of the router. This parameter is used when connecting
Default PIN code
the router to a registrar to set the parameters of the WPS function.
Network name (SSID) The name of the router's wireless network.
Network Authentication The network authentication type specified for the wireless network.
Encryption The encryption type specified for the wireless network.
Password PSK The encryption password specified for the wireless network.
UPDATE Click the button to update the data on the page.
RESET TO
Click the button to reset the parameters of the WPS function.
UNCONFIGURED
Page 123 of 231

User Manual
Using WPS Function via Web-based Interface

To connect to the basic wireless network via the PIN method of the WPS function, follow the next
steps:
1. Click the ENABLE WPS button.
2. In the WPS Control section, click the ESTABLISH CONNECTION button.
3. In the opened window, select the PIN value from the WPS method drop-down list.
4. Select the PIN method in the software of the wireless device that you want to connect to the
router's WLAN.
5. Click the relevant button in the software of the wireless device that you want to connect to
the WLAN.
6. Right after that, enter the PIN code specified on the cover of the wireless device or in its
software in the PIN code field.
7. Click the CONNECT button in the web-based interface of the router.
To connect to the basic wireless network via the PBC method of the WPS function, follow the next
steps:
2. In the WPS Control section, click the ESTABLISH CONNECTION button.
3. In the opened window, select the PBC value from the WPS method drop-down list.
4. Select the PBC method in the software of the wireless device that you want to connect to the
router's WLAN.
5. Click the relevant button in the software or press the WPS button on the cover of the
wireless device that you want to connect to the WLAN.
6. Right after that, click the CONNECT button in the web-based interface of the router.
Page 124 of 231

User Manual
Using WPS Function without Web-based Interface

You can use the WPS function without accessing the web-based interface of the router. To do this,
you need to configure the following router's settings:
1. Specify relevant security settings for the wireless network of the router.
3. Close the web-based interface (click the Logout line of the menu).
Later you will be able to add wireless devices to the WLAN by pressing the WPS button of the
router.
1. Select the PBC method in the software of the wireless device that you want to connect to the
router's WLAN.
2. Click the relevant button in the software or press the WPS button on the cover of the
wireless device that you want to connect to the WLAN.
3. Press the WPS button of the router and release. The WPS LED will start blinking.
Page 125 of 231

User Manual
WMM
On the Wi-Fi / WMM page, you can enable the Wi-Fi Multimedia function.
The WMM function implements the QoS features for Wi-Fi networks. It helps to improve the
quality of data transfer over Wi-Fi networks by prioritizing different types of traffic.
Select the needed action from the drop-down list in the Work mode section to configure the
WMM function:
• Auto: the settings of the WMM function are configured automatically (the value is
specified by default).
• Manual: the settings of the WMM function are configured manually. When this value is
selected, the Access Point and Station sections are displayed on the page.
• Disabled: the WMM function is disabled.
Figure 102. The page for configuring the WMM function.
!
All needed settings for the WMM function are specified in the device's system. Changing
parameters manually may negatively affect your WLAN!
Page 126 of 231

User Manual
The WMM function allows assigning priorities for four Access Categories (AC):
• BK (Background), low priority traffic (print jobs, file downloads, etc.).
• BE (Best Effort), traffic from legacy devices or devices/applications that do not support
QoS.
• VI (Video).
• VO (Voice).
Parameters of the Access Categories are defined for both the router itself (in the Access Point
section) and wireless devices connected to it (in the Station section).
To edit the parameters of an Access Category, left-click the relevant line. In the opened window,
change the needed parameters.
Figure 103. The window for changing parameters of the WMM function.
Arbitrary Inter-Frame Space Number. This parameter influences

AIFSN time delays for the relevant Access Category. The lower the value,
the higher is the Access Category priority.
Contention Window Minimum/Contention Window Maximum. Both

fields influence time delays for the relevant Access Category. The
CWMax field value should not be lower, than the CWMin field
CWMin/CWMax
value. The lower the difference between the CWMax field value
and the CWMin field value, the higher is the Access Category
priority.
Transmission Opportunity. The higher the value, the higher is the

TXOP
Access Category priority.
Page 127 of 231

User Manual
Admission Control Mandatory.

ACM If the switch is moved to the right, the device cannot use the
relevant Access Category.
Acknowledgment. Answering response requests while transmitting.

Displayed only in the Access Point section.
ACK If the switch is moved to the left, the router answers requests.
If the switch is moved to the right, the router does not answer
requests.
Click the SAVE button.
Page 128 of 231

User Manual
Client
On the Wi-Fi / Client page, you can configure the router as a client to connect to a wireless access
point or to a WISP.
Figure 104. The page for configuring the client mode.

To configure the router as a client, move the Enable switch to the right. Upon that the following
fields are displayed on the page:
Broadcast wireless
If the switch is moved to the left, devices cannot connect to the
network 2.4 GHz /
router's WLAN. Upon that the router can connect to another access
Broadcast wireless
point as a wireless client.
network 5 GHz
Connecting to network A method for connecting to another access point.
Page 129 of 231

User Manual
In the Wireless Networks section, the list of available wireless networks is displayed. To view
the latest data on available wireless networks, click the UPDATE LIST button.
To connect to a wireless network from the list, select the needed network. Move the Network
options switch to the right to view more detailed information on the network to which the router
connects. If a password is required, enter it in the relevant field. Click the CONNECT button.
To connect to a hidden network, select the Connect to hidden network value from the
Connecting to network drop-down list. Then select the band where the hidden network operates
from the Frequency band list and enter the network name in the Network name (SSID) field.
If needed, fill in the BSSID field. Then select the needed type of authentication from the Network
authentication drop-down list.
When the Open or WEP authentication type is selected, the following settings are displayed on the
page:
For Open authentication type only.

To activate WEP encryption, move the switch to the right. Upon that
Enable encryption WEP the Default key ID drop-down list, the Encryption key WEP as
HEX switch, and four Encryption key fields are displayed on the
page.
The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.
Encryption key WEP as Move the switch to the right to set a hexadecimal number as a key
HEX for encryption.
Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed authentication type is
selected, the following fields are displayed:
A password for WPA encryption. Click the Show icon ( ) to

Password PSK
Page 130 of 231

User Manual
When the WPA, WPA2, or WPA/WPA2 mixed authentication type is selected, the following
fields are displayed:
RADIUS server login The username of the account on the RADIUS server.
RADIUS server
The password of the account on the RADIUS server.
password

When connecting to a wireless access point, the wireless channel of DIR-825/AC will switch to the
channel of the access point to which you have connected.
In addition, the Connection Information section in which you can view the connection status
and the network basic parameters is displayed.
If you want to connect to the WISP network, after configuring the device as a client, you need to
create a WAN connection with relevant parameters for the WLAN interface.
Page 131 of 231

User Manual
Client Shaping
On the Wi-Fi / Client Shaping page, you can limit the maximum bandwidth of upstream and
downstream traffic for each wireless client of the router by its MAC address.
Figure 105. The Wi-Fi / Client Shaping page.

If you want to limit the maximum bandwidth of traffic for the router’s wireless client, create a
relevant rule. To do this, click the ADD button.
Figure 106. The window for setting up rate limit.
Page 132 of 231

User Manual
In the opened window, you can specify the following parameters:
If the switch is moved to the right, the rule is active.

Enabled
Move the switch to the left to disable the rule.
In the field, enter the MAC address to which the rule will be
MAC address
applied.
Upload
Specify the maximum value of the upstream traffic rate (Mbps) or

Maximum rate move the Not limited switch to the right not to limit the maximum
bandwidth of upstream traffic.
Download
Specify the maximum value of the downstream traffic rate (Mbps)

Maximum rate or move the Not limited switch to the right not to limit the
maximum bandwidth of downstream traffic.
After specifying the needed parameters, click the SAVE button.
To edit a rule, left-click the relevant rule. In the opened window, change the needed parameters and
click the SAVE button.
To remove a rule, select the checkbox located to the left of the relevant line in the table and click
the DELETE button.
Page 133 of 231

User Manual
Additional
On page of the Wi-Fi / Additional section, you can define additional parameters for the WLAN of
the router. To configure the 2.4GHz band or 5GHz band, go to the relevant tab.
! Changing parameters presented on this page may negatively affect your WLAN!
Figure 107. Additional settings of the WLAN.
Page 134 of 231

User Manual
The following fields are available on the page:
The channel bandwidth for 802.11n standard in the 2.4GHz band

(the 2.4GHz tab).
20MHz: 802.11n clients operate at 20MHz channels.
20/40MHz: 802.11n clients operate at 20MHz or 40MHz channels.
The channel bandwidth for 802.11n and 802.11ac standards in 5GHz
Bandwidth band (the 5GHz tab).
20MHz: 802.11n and 802.11ac clients operate at 20MHz channels.
20/40MHz: 802.11n and 802.11ac clients operate at 20MHz or
40MHz channels.
20/40/80MHz: 802.11ac clients operate at 20MHz, 40MHz, or
80MHz channels.
Available on the 2.4GHz tab.
Move the switch to the right to let the router to automatically choose
Autonegotiation
the most suitable channel bandwidth (20MHz or 40MHz) for the
20/40 (Coexistence)
connected devices (this setting can substantially lower the data
transfer rate of your wireless network).
TX Power The transmit power (in percentage terms) of the router.
Available on the 2.4GHz tab.

The 802.11b and 802.11g protection function is used to minimize
collisions between devices of your wireless network.
Select a value from the drop-down list.
Auto: The protection function is enabled and disabled automatically
B/G protection depending on the state of the network (this value is recommended if
your wireless local area network consists of both 802.11b and
802.11g devices).
Always On: The protection function is always enabled (this setting
can substantially lower the efficiency of your wireless network).
Always Off: The protection function is always disabled.
Guard interval (in nanoseconds). This parameter defines the interval
between symbols transmitted when the router is communicating to
wireless devices.
Enable: the router uses the 400 ns short guard interval. Only for the
Short GI
wireless network operating modes which support 802.11n and
802.11ac standards (see the value of the Wireless mode drop-
down list on the Wi-Fi / Basic Settings page).
Disable: the router uses the 800 ns standard guard interval.
Page 135 of 231

User Manual
Move the switch to the right to disable multicasting for the router's
Drop multicast WLAN. Move the switch to the left to enable multicasting from the
WAN connection selected on the Advanced / IGMP/MLD page.
TX Beamforming is the signal processing/directing technique which
Enable TX helps to support a high enough transfer rate in the areas with difficult
Beamforming conditions for the signal propagation.
Move the switch to the right to improve the signal quality.
Move the switch to the right to prevent your wireless network from
Adaptivity mode interfering with radars and other mobile or stationary radio systems.
Such a setting can slow down the router's WLAN.
The time interval (in milliseconds) between packets sent to
Beacon Period
synchronize the wireless network.
The minimum size (in bytes) of a packet for which an RTS frame is
RTS threshold
transmitted.
The maximum size (in bytes) of a non-fragmented packet. Larger
Frag threshold
packets are fragmented (divided).
The number of beacon frames between sending DTIM messages
DTIM period
(messages notifying on broadcast or multicast transmission).
The time interval (in seconds) between keep alive checks of wireless
Station Keep Alive devices from your WLAN. When the value 0 is specified, the
checking is disabled.
Page 136 of 231

User Manual
MAC Filter
On the Wi-Fi / MAC Filter page, you can define a set of MAC addresses of devices which will be
allowed to access the WLAN, or define MAC addresses of devices which will not be allowed to
access the WLAN.
!
It is recommended to configure the Wi-Fi MAC filter through a wired connection to DIR-
825/AC.
Figure 108. The page for configuring the MAC filter for the wireless network.
By default, the Wi-Fi MAC filter is disabled.
To configure the MAC filter, first you need to create rules (specify MAC addresses of devices for
which the specified filtering modes will be applied). To do this, click the ADD button.
Figure 109. The window for adding a rule for the MAC filter.
Page 137 of 231

User Manual
You can specify the following parameters:
Frequency band From the drop-down list, select a band of the wireless network.
A wireless network to which the rule will be applied. Select the

SSID
needed value from the drop-down list.
In the field, enter the MAC address to which the selected filtering
MAC address
mode will be applied.
The name of the device for easier identification. You can specify any
Hostname
name.
If the switch is moved to the right, the rule is active.
Enable
When you have configured the parameters, click the SAVE button.
To edit the parameters of the existing rule, in the Filters section, left-click the needed rule. In the
opened window, change the settings and click the SAVE button.
To remove the rule from the page, in the Filters section, select the checkbox located to the left of
the relevant rule and click the DELETE button.
After creating the rules you need to configure the filtering modes.
To open the basic or additional wireless network for the devices which MAC addresses are
specified on this page and to close the wireless network for all other devices, in the section
corresponding to the band (2.4 GHz or 5 GHz), left-click the line of the wireless network. In the
opened window, move the Enable MAC filter switch to the right. Upon that the MAC filter
restrict mode drop-down list will be displayed. Select the Allow value from the drop-down list
and click the SAVE button.
To close the wireless network for the devices which MAC addresses are specified on this page,
select the Deny value from the MAC filter restrict mode drop-down list and click the SAVE
button.
Page 138 of 231

User Manual
Roaming
On the Wi-Fi / Roaming page, you can enable the function of smart adjustment of Wi-Fi clients.
This function is designed for wireless networks based on several access points or routers. If the
function is enabled for all access points (routers) which establish a wireless network, then wireless
clients will always connect to the device with the highest signal level.
Figure 110. The Wi-Fi / Roaming page.
Page 139 of 231

User Manual
To enable the function, click the ENABLE button. Upon that the following settings are available on
the page.
The number of the port used for data exchange between access
Port
points (routers).
Move the switch to the right in order to use multicast traffic for
service data exchange between access points (routers). This setting is
needed if the devices which support the smart adjustment function
Use multicast for are located in different subnets. If the switch is moved to the right,
service data exchange the Multicast TTL and Multicast group address fields are
displayed on the page.
If the switch is moved to the left, broadcast traffic is used for service
data exchange.
Specify the TTL (Time to live) parameter value. The recommended
Multicast TTL
value is 4.
Multicast group Specify the address of the multicast group (from the subnet
address 239.255.0.0/16).
2.4 GHz / 5 GHz
The maximum time period (in seconds) during which the access
Maximum time of
point (router) stores data on the signal strength of the client located
storing data
on its coverage area.
Minimum level of The threshold value of the signal strength upon which the access
connection quality point (router) starts scanning other devices.
This parameter is used for calculation of the signal strength upon
which the smart adjustment function goes off. If the signal strength
provided by the device is less than the sum of the Minimum level
Dead zone of connection quality field value and the Dead zone field
value, then the client disconnects from the access point (router) and
connects to another device. You can specify the values from -50% to
+50%.
After specifying the needed parameters, click the APPLY button.
To disable the function of smart adjustment of Wi-Fi clients, click the DISABLE button.
Page 140 of 231

User Manual
Print Server
On the Print Server page, you can configure the router as a print server. Being configured in this
way, the router will allow your LAN users to share the printer connected to the USB port of the
router.
To connect a printer to the router, power off both devices. Connect the printer to the USB port of the
router, power on the printer, then power on the router.
Figure 111. The Print Server page.

To configure the router as a print server, move the Enable print server switch to the right and
click the APPLY button.
If you don't want to use the router as a print server, move the Enable print server switch to the
left and click the APPLY button.
Page 141 of 231

User Manual
USB Storage
This menu is designed to operate USB storages. Here you can do the following:
• view data on the connected USB storage
• create accounts for users to allow access to the content of the USB storage
• enable the built-in Samba server of the router
• enable the built-in FTP server of the router
• view content of the connected USB storage
• enable the built-in DLNA server of the router
• configure the built-in Transmission torrent client and manage distributing and downloading
processes
• enable the XUPNPD plug-in.
Information
On the USB Storage / Information page, you can view data on the USB storage connected to the
router.
Figure 112. The USB Storage / Information page.

The following data are presented on the page: the name, total and free space of the storage, and the
type of its file system (supported file systems: FAT16/32, NTFS, and ext2/3).
If the USB storage is divided into volumes, a section for every volume (partition) of the USB
storage is displayed on the page.
To safely disconnect the USB storage or a volume of the USB storage, click the UNMOUNT button
in the relevant section and wait for several seconds.
To disconnect all volumes of the USB storage, click the UNMOUNT ALL STORAGES button.
Page 142 of 231

User Manual
USB Users
On the USB Storage / USB Users page, you can create user accounts to provide access to data
on the USB storage connected to the router.
Figure 113. The USB Storage / USB users page.

To create a new user account, click the ADD button.
Figure 114. The window for adding a user.

In the opened window, in the Login field, specify a username, and in the Password field – the
password for the account. Use digits, Latin letters (uppercase and/or lowercase), and other
characters available in the US keyboard layout.13
!
You cannot create accounts with the following usernames: admin, support, user,
nobody.
For ext2, ext3, or FAT storages or storage partitions, it is possible to create users with limited rights.
Move the Read only switch to the right not to let the user create, change, or delete files.
To change the password of an account, select the relevant line in the table. In the opened window,
enter a new value in the Password field, and then click the SAVE button.
To remove an account, select the checkbox located to the left of the relevant line in the table and
click the Delete button.
13 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.
Page 143 of 231

User Manual
Samba
On the USB Storage / Samba page, you can enable the built-in Samba server of the router to
provide access to the USB storage for users of your LAN.
Figure 115. The USB Storage / Samba page.

To enable the Samba server, move the Enable Samba server switch to the right.
The Anonymous login switch (by default, the switch is moved to the right) allows anonymous
access to the content of the USB storage for users of your LAN.
If you want to provide authorized access to the content of the USB storage for users of your LAN,
move the switch to the left. After applying the parameters on this page, go to the USB Storage /
USB Users page and create needed accounts.
In the Work group field, leave the value specified by default (WORKGROUP) or specify a new
name of a workgroup which participants will have access to the content of the USB storage.
In the Short description field, you can specify an additional description for the USB storage.
This value will be displayed in some operating systems. Use digits and/or Latin characters.
In the NetBIOS field, specify a name of the USB storage which will be displayed for users of your
LAN. Use digits and/or Latin characters.
To allow access only to a certain folder of the USB storage, click the ADD button in the
Directories section.
Page 144 of 231

User Manual
Figure 116. Specifying a folder.
In the opened window, locate a folder containing files. To do this, click the Search icon ( ) in
the Path field. Then go to the needed folder and click the SELECT button.
In the Name field, specify a name of the selected folder which will be displayed for users of your
LAN. Use digits and/or Latin characters.
To remove a folder from the list in the Directories section, select the checkbox located to the left
of the relevant line in the table and click the DELETE button.
To disable the built-in Samba server of the router, move the Enable Samba server switch to the
left and click the APPLY button.
Page 145 of 231

User Manual
FTP
На странице USB-накопитель / FTP Вы можете включить встроенный FTP-сервер
маршрутизатора для организации доступа к USB-накопителю для пользователей Вашей
локальной сети.
Рисунок 117. Страница USB-накопитель / FTP.

Чтобы включить FTP-сервер, сдвиньте переключатель Включить сервер FTP вправо.
Сдвиньте переключатель Анонимный вход вправо, чтобы разрешить анонимный доступ к
содержимому USB-накопителя пользователям Вашей локальной сети. Если Вы хотите
организовать авторизованный доступ к содержимому USB-накопителя пользователям Вашей
локальной сети, сдвиньте переключатель влево. После применения параметров, задаваемых
на данной странице, перейдите на страницу USB-накопитель / Пользователи USB и
создайте необходимые учетные записи.
Если необходимо, измените порт маршрутизатора, который будет использовать FTP-сервер, в
поле Порт (по умолчанию задан стандартный порт 21).
Чтобы разрешить доступ только к определенной папке USB-накопителя пользователям
Вашей локальной сети, определите местоположение папки с файлами. Для этого нажмите на
значок Поиск ( ) в поле Директория. Затем перейдите в нужную папку и нажмите
кнопку ВЫБРАТЬ.
После задания необходимых параметров нажмите кнопку ПРИМЕНИТЬ.
Page 146 of 231

User Manual
Чтобы снова разрешить доступ ко всему содержимому USB-накопителя пользователям

Вашей локальной сети, удалите значение поля Директория и нажмите кнопку
ПРИМЕНИТЬ.
Чтобы отключить встроенный FTP-сервер маршрутизатора, сдвиньте переключатель
Включить сервер FTP влево и нажмите кнопку ПРИМЕНИТЬ.
Page 147 of 231

User Manual
Filebrowser
On the USB Storage / Filebrowser page, you can view the content of your USB storage
connected to the router and remove separate folders and files from the USB storage.
Figure 118. The USB Storage / Filebrowser page.

To view the content of the USB storage, click the icon of the storage or storage partition. The list of
folders and files will be displayed on the page.
To go to a folder, click the line corresponding to this folder.
To refresh the folder contents, click the Actions icon ( ) in the line corresponding to this folder
and select the Refresh value.
To remove a folder or file, click the Actions icon ( ) in the line corresponding to this folder or
file and select the Delete value.
Page 148 of 231

User Manual
DLNA
On the USB Storage / DLNA page, you can enable the built-in DLNA server of the router to
provide access to the USB storage for users of your LAN.
The built-in media server allows DLNA certified devices of your LAN to play multimedia content
of the USB storage. Multimedia content can be played only when a USB storage is connected to the
router.
Figure 119. The USB Storage / DLNA page.

To enable the DLNA server, move the Enable switch to the right.
In the Update interval field, specify the time period (in seconds), at the end of which the media
server updates the file list of the USB storage, or leave the value specified by default (900).
In the DLNA server name field, specify a name of the DLNA server which will be displayed for
users of your LAN or leave the value specified by default (D-Link DLNA Server). Use digits
and/or Latin characters.
To allow access to the content of the USB storage for users of your LAN, click the ADD button in
the Media Folders section.
Page 149 of 231

User Manual
Figure 120. Specifying a media folder.
In the opened window, locate a folder containing files. To do this, click the Search icon ( ) in
the Path field. Then go to the needed folder and click the SELECT button.
For each folder you can define the type of files which will be available for users of your LAN. To
do this, select the needed type of files from the Type drop-down list. To share all files of a folder,
select the All value from the Type drop-down list.
To remove a folder from the list in the Media Folders section, select the checkbox located to the
left of the relevant line in the table and click the DELETE button.
After specifying all needed settings on the USB Storage / DLNA page, click the APPLY button.
To disable the built-in DLNA server of the router, move the Enable switch to the left and click the
APPLY button.
Page 150 of 231

User Manual
Torrent Client
On the USB Storage / Torrent Client page, you can configure all needed settings for the built-in
Transmission client.
Figure 121. The USB Storage / Torrent Client page.
Page 151 of 231

User Manual
Transmission
Enable Move the switch to the right to activate the Transmission client.
Main Settings
Port The router's port which will be used by the Transmission client.
Locate data of the Transmission client. To do this, click the Search

Path
icon ( ), select the needed value, and click the SELECT button.
The folder on the USB storage where data of the Transmission client
Directory
will be stored.
Move the switch to the right if you want to limit the number of
simultaneous downloads. Upon that the Download queue size
Enable download queue field will be displayed.
Move the switch to the left not to limit the number of simultaneous
downloads.
The maximum number of simultaneous downloads. By default, the
Download queue size
value 1 is specified.
The maximum number of the service users from which you can
Peer limit
download files.
The port on which the web-based interface of the Transmission
Web interface port
client is available.
Authorization
Move the switch to the right if you want the Transmission client to
Enable request for username and password when accessing its web-based
interface. Then fill in the Username and Password fields.
The username to access the web-based interface of the Transmission
Username
client.
The password to access the web-based interface of the Transmission
Password
client.
In the Web-interface page field, the address of the web-based interface of the Transmission
client is displayed. To access the web-based interface of the Transmission client, click the link.
Page 152 of 231

User Manual
Figure 122. The web-based interface of the Transmission torrent client.

Using the web-based interface of the built-in Transmission torrent client you can manage the
process of downloading files to the USB storage connected to the router.
The following buttons are available on the page:
Click the button to add a new torrent file (a metadata file according
to which the Transmission client downloads files) to the download
queue. In the dialog box appeared, select a file stored on your PC
Open Torrent and click the Upload button.
Select the torrent file which you want to remove from the download
Remove Selected queue and click the button.
Torrents
Select the torrent file corresponding to the download which should

be restarted and click the button.
Start Selected Torrents
Page 153 of 231

User Manual
Click the button to restart all downloads. If you limited the

maximum number of simultaneous downloads, the Transmission
client starts processing of the specified number of torrent files; after
Start All Torrents completing download of the first one, the client proceeds to the next
file in the queue.
Select the torrent file corresponding to the download which should

Pause Selected be stopped and click the button.
Torrents
Click the button to stop all downloads.

Pause All Torrents
Select a torrent file and click the button to view its data.
Toggle Inspector
Page 154 of 231

User Manual
XUPNPD
On the USB Storage / XUPNPD page, you can enable the XUPNPD plug-in. It allows to
broadcast media content received from the Internet sources or IPTV service to DLNA-certified
devices of your LAN.
Figure 123. The USB Storage / XUPNPD page.

To use the XUPNPD plug-in, connect a USB storage to the router and move the Enable switch to
the right.
! To let IPTV services operate using the XUPNPD plug-in, enable the UDPXY application.
In the Service field, the address of the web-based interface of the XUPNPD plug-in is displayed.
To access the page of the XUPNPD plug-in and configure all needed settings, click the link.
Figure 124. The XUPNPD plug-in page.
Page 155 of 231

User Manual
USB Modem
This menu is designed to operate USB modems.
If the PIN code check for the SIM card inserted into your USB modem is not disabled, the relevant
notification will be displayed in the top right corner of the page.
Figure 125. The notification on the PIN code check.

Click the ENTER button. When the USB Modem / PIN page opens, enter the PIN code in the
Authorization section14. Click the Show icon ( ) to display the entered code. Then click the
APPLY button.
Figure 126. Entering the PIN code.

Some USB modems in the router mode and Android smartphones in the modem mode have an IP
address from the subnet which coincides with the router's local subnet. In this case, the router's
web-based interface can be unavailable. For correct operation, disconnect the device from the USB
port and reboot the router. Then access the web-based interface, go to the Connections Setup /
LAN page, and change the value of the IP address field on the IPv4 tab (for example, specify the
value 192.168.2.1). Wait until the router is rebooted.
14 For some models of USB modems it is required to disable the PIN code check on the SIM card prior to connecting
the USB modem to the router.
Page 156 of 231

User Manual
Basic Settings
On the USB modem / Basic Settings page, you can view data on the USB modem connected to
the router and enable/disable the function for automatic creation of 3G/LTE WAN connection upon
plugging a USB modem into the router.
Figure 127. The USB modem / Basic Settings page.

If the Automatic creation of connection switch is moved to the right and the PIN code check
for the SIM card inserted into your USB modem is disabled, then an active WAN connection with
default settings (for LTE modems) or the operator's settings (for GSM modems) will be
automatically created when plugging the USB modem into the router. The connection will be
displayed on the Connections Setup / WAN page.
If you don't want to use this function, move the Automatic creation of connection switch to
the right and click the APPLY button.
When a USB modem is connected to the router, the following data are displayed in the
Information section:
Vendor The manufacturer of your USB modem.
Model The alphanumeric code of the model of your USB modem.
Revision The revision of the firmware of your USB modem.
IMSI The code stored in the SIM card inserted to your USB modem.
IMEI The code stored in the memory of the USB modem.
Page 157 of 231

User Manual
The signal level at the input of the modem's receiver. The zero
Signal level signal level shows that you are out of the coverage area of the
selected operator's network.
When the needed network is available, the name of the operator is

Operator name
displayed in this field.
Mode A type of the network to which the USB modem is connected.
PIN
On the USB modem / PIN page, you can change the PIN code of the SIM card inserted into your
USB modem, disable or enable the check of the PIN code.
! The operations presented on this page are unavailable for some models of USB modems.
The current state of the SIM card inserted into your USB modem is displayed in the Status field. If
the PIN code is entered incorrectly or the PIN code is not entered when the PIN code check is
enabled, the Device is locked value is displayed in the Status field. If the PIN code is entered
correctly or the PIN check is disabled, the Device is unlocked value is displayed in the Status
field.
If the PIN code check for the SIM card inserted into your USB modem is not disabled, the Yes
value is displayed in the PIN code request field. If the PIN check is disabled, the No value is
displayed in the PIN code request field.
Figure 128. The USB modem / PIN page.

To disable the PIN code check, in the PIN Code Request section, enter the current PIN code in
the PIN code field and click the DISABLE button (the button is displayed if the PIN code check is
enabled).
Page 158 of 231

User Manual
To enable the PIN code check, in the PIN Code Request section, enter the PIN code used before
disabling the check in the PIN code field and click the ENABLE button (the button is displayed if
the PIN code check is disabled).
To change the PIN code, in the Changing PIN Code section, enter the current code in the PIN
code field, then enter a new code in the New PIN code and New PIN code confirmation
fields and click the SAVE button.
If upon one of the operations described above you have entered an incorrect value in the PIN code
field three times (the number of remaining attempts is displayed on the page), the SIM card inserted
into your USB modem is blocked.
Figure 129. The USB modem / PIN page. The PUK code request.
For further use of the card, in the Authorization section, enter the PUK code in the relevant field,
and then specify a new PIN code for your SIM card in the New PIN code and New PIN code
confirmation field. Click the APPLY button.
Page 159 of 231

User Manual
Advanced
In this menu you can configure advanced settings of the router:
• create groups of ports for VLANs
• add name servers
• configure a DDNS service
• configure autonegotiation or manually configure speed and duplex mode for each Ethernet
port of the router
• setup the rate limit for traffic transmitted from every port of the router
• limit traffic between LAN ports
• configure notifications on the reason of the Internet connection failure
• define static routes
• configure TR-069 client
• create rules for remote access to the web-based interface
• enable the UPnP IGD protocol
• enable the built-in UDPXY application for the router
• allow the router to use IGMP/MLD
• allow the router to use RTSP, enable the SIP ALG, the PPPoE/PPTP/L2TP/IPsec pass
through functions for the router
• configure VPN tunnels based on IPsec protocol.
Page 160 of 231

User Manual
VLAN
On the Advanced / VLAN page, you can create and edit groups of ports for virtual networks
(VLANs).
By default, 2 groups are created in the router's system:
• lan: it includes ports 1-4. You cannot delete this group.
• wan: for the WAN interface; it includes the INTERNET port. You can edit or delete this
group.
Figure 130. The Advanced / VLAN page.

If you want to create a group including LAN ports of the router, first delete relevant records from
the lan group on this page. To do this, select the lan group. On the opened page, in the Untagged
ports section, deselect the checkbox located to the left of the relevant port, and click the APPLY
button.
To create a new group for VLAN, click the ADD button.
Figure 131. The page for adding a group of ports for VLAN.
Page 161 of 231

User Manual
Name A name for the port for easier identification.
Enable Move the switch to the right to allow using this group of ports.
The type of the VLAN.

Untagged NAT. The group of this type is an external connection
with address translation. It is mostly used to transmit untagged
traffic. When this value is selected, the VLAN ID field and the
Tagged ports section are not displayed. Only one group of this
type can exist in the system.
Tagged NAT. The group of this type is an external connection with
Type address translation. It is mostly used to connect to the Internet. Later
the VLAN which identifier is specified in the VLAN ID field is used
to create a WAN connection (on the Connections Setup / WAN
page). When this value is selected, the Untagged ports section is
not displayed.
Bridge. The group of this type is a transparent connection between
an internal port and an external connection. It is mostly used to
connect IPTV set-top boxes.
An identifier of the VLAN to which this group of ports will be

VLAN ID
assigned.
The section includes the ports that can be added to the group.
To add a port to the group, select the checkbox located to the left of
Untagged ports the relevant port.
To remove a port from the group, deselect the checkbox located to
the left of the relevant port.
Select an available value to assign it to this group. To do this, select

Tagged ports
the checkbox located to the left of the relevant port.
Click the APPLY button.
To edit an existing group, select the relevant group in the table. On the page displayed, change the
parameters and click the APPLY button.
To remove an existing group, select the checkbox located to the left of the relevant line in the table
and click the DELETE button.
Page 162 of 231

User Manual
DNS
On the Advanced / DNS page, you can add DNS servers to the system.
Figure 132. The Advanced / DNS page.

DNS servers are used to determine the IP address from the name of a server in Intranets or the
Internet (as a rule, they are specified by an ISP or assigned by a network administrator).
You can specify the addresses of DNS servers manually on this page or configure the router to
obtain DNS servers addresses automatically from your ISP upon installing a connection.
!
When you use the built-in DHCP server, the network parameters (including DNS servers)
are distributed to clients automatically.
If you want to configure automatic obtainment of DNS servers addresses, move the Manual switch
to the left (use the DNS IPv4 section for IPv4 and the DNS IPv6 section for IPv6). Then move the
Default gateway switch to the left and from the Interface drop-down list select a WAN
connection which will be used to obtain addresses of DNS servers automatically. If you want the
router to use the default WAN connection to obtain addresses of DNS servers, move the Default
gateway switch to the right. Then click the APPLY button.
To specify a DNS server manually, move the Manual switch to the right (use the DNS IPv4
section for IPv4 and the DNS IPv6 section for IPv6). In the Name Servers IPv4 or Name
Servers IPv6 section, click the ADD SERVER button, and in the line displayed, enter an IP
address of the DNS server. Then click the APPLY button.
To remove a DNS server from the page, click the Delete icon ( ) in the line of the address and
then click the APPLY button.
Page 163 of 231

User Manual
If needed, you can add your own address resource record. To do this, click the ADD button.
Figure 133. The window for adding a DNS record.

In the IP address field, specify a host from the internal or external network. You can choose a
device connected to the router's LAN at the moment. To do this, select the relevant IP address from
the drop-down list (the field will be filled in automatically). In the Name field, specify the domain
name to which the specified IP address will correspond. Click the SAVE button.
To edit an existing record, select the relevant line in the table. In the opened window, change the
needed parameters and click the SAVE button.
To remove a record, select the checkbox located to the left of the relevant line in the table and click
the DELETE button.
After completing the work with records, click the APPLY button.
Page 164 of 231

User Manual
DDNS
On the Advanced / DDNS page, you can define parameters of the DDNS service, which allows
associating a domain name with dynamic IP addresses.
Figure 134. The Advanced / DDNS page.

To add a new DDNS service, click the ADD button.
Figure 135. The window for adding a DDNS service.
Page 165 of 231

User Manual
Host name The full domain name registered at your DDNS provider.
DDNS service Select a DDNS provider from the drop-down list.
Username The username to authorize for your DDNS provider.
The password to authorize for your DDNS provider. Click the

Password
An interval (in minutes) between sending data on the router's

Update period
external IP address to the relevant DDNS service.
To edit parameters of the existing DDNS service, select the relevant line in the table. In the opened
window, change the needed parameters and click the SAVE button.
To remove an existing DDNS service, select the checkbox located to the left of the relevant line in
the table and click the DELETE button.
Page 166 of 231

User Manual
Port Settings
On the Advanced / Ports Settings page, you can configure or disable autonegotiation of speed
and duplex mode or manually configure speed and duplex mode for each Ethernet port of the router.
Also you can enable or disable data flow control in the autonegotiation mode. This function is used
for equal load balancing in ISPs' networks. Contact your ISP to clarify if this function needs to be
enabled.
Figure 136. The Advanced / Ports Settings page.

In order to configure autonegotiation or configure speed and duplex mode manually for an Ethernet
port, select it in the table.
! Autonegotiation should be enabled for both devices connected to each other.
!
When autonegotiation is disabled, speed and duplex mode settings for both devices
connected to each other should be the same.
Page 167 of 231

User Manual
Figure 137. The window for changing the settings of the router's port.
In the opened window, specify the needed parameters:
Data transfer mode.

Select the auto value to enable autonegotiation. When this value is
selected, the Autonegotiation Modes and Flow Control
sections are displayed.
Select the 10M-Half, 10M-Full, 100M-Half, or 100M-Full value
to manually configure speed and duplex mode for the selected port:
• 10M-Half: Data transfer in just one direction at a time (data
can be either sent or received) at the maximum possible rate
of up to 10Mbps.
Speed
• 10M-Full: Data transfer in two directions simultaneously
(data can be sent and received at the same time) at the
maximum possible rate of up to 10Mbps.
• 100M-Half: Data transfer in just one direction at a time (data
can be either sent or received) at the maximum possible rate
of up to 100Mbps.
• 100M-Full: Data transfer in two directions simultaneously
(data can be sent and received at the same time) at the
maximum possible rate of up to 100Mbps.
Page 168 of 231

User Manual
Autonegotiation modes
To enable the needed data transfer modes, move relevant switches to the right.
Flow control
Move the switch to the right to enable the flow control function for
the port.
Symmetric flow control
Move the switch to the left to disable the flow control function for
the port.
If in the future you need to edit the parameters of the router's port, select the port in the table. In the
opened window, change the needed parameters and click the SAVE button.
Page 169 of 231

User Manual
Bandwidth Control
On the Advanced / Bandwidth Control page, you can setup the rate limit for traffic transmitted
from every port of the router.
Figure 138. The Advanced / Bandwidth control page.

By default, the rate is not limited. If you want to limit the rate for traffic transmitted from a port,
select the line corresponding to this port.
Figure 139. The window for setting up rate limit.

In the opened window, move the Enable switch to the right and enter the maximum value of the
transmitted traffic rate for this port in the Maximum rate field. Then click the SAVE button.
If you want to remove the rate limit for this port, move the Enable switch to the left and click the
SAVE button.
Page 170 of 231

User Manual
Traffic Segmentation
On the Advanced / Traffic segmentation page, you can setup limits for traffic transfer between
LAN ports of the device.
Figure 140. The Advanced / Traffic segmentation page.

To forbid traffic transfer from a port, in the section corresponding to this port, deselect checkboxes
of the ports to which traffic transfer should be forbidden. Then click the APPLY button.
Page 171 of 231

User Manual
Redirect
On the Advanced / Redirect page, you can enable notifications on the reason of the Internet
connection failure. Notifications will be displayed in the browser window when a user is attempting
to open a web site on the Internet.
Figure 141. The Advanced / Redirect page.

To configure notifications, in the Common Settings section, move the Enable redirect switch
to the right. Then, in the Reasons for Redirect section, move the needed switches to the right.
Reasons for Redirect
Notifications in case of physical connection problems (the ISP's

Physical connection
cable is not connected, an additional device needed to access the
error
Internet is not connected).
The device is not
Notifications in case when the device works with default settings.
configured
Notifications in case of problems of the default WAN connection
No connection
(authorization error, the IPS's server does not respond, etc.).
To disable notifications, move the Enable redirect switch to the left and click the APPLY button.
Page 172 of 231

User Manual
Routing
On the Advanced / Routing page, you can specify static (fixed) routes.
Figure 142. The Advanced / Routing page.

To specify a new route, click the ADD button.
Figure 143. The window for adding a new route.
Page 173 of 231

User Manual
Protocol An IP version.
From the drop-down list, select an interface (connection) through

which the device will communicate with the remote network. If you
Interface
have selected the Auto value, the router itself sets the interface
according to the data on the existing dynamic routes.
A remote network which can be accessed with help of this route. You
can specify an IPv4 or IPv6 address.
Destination network
The format of a host IPv6 address is 2001:db8:1234::1, the
format of a subnet IPv6 address is 2001:db8:1234::/64.
For IPv4 protocol only.
Destination netmask
The remote network mask.
Gateway An IP address through which the destination network can be accessed.
A metric for the route. The lower the value, the higher is the route
Metric
priority. Optional.
To edit an existing route, select a relevant line of the table. In the opened window, change the
To remove an existing route, select the checkbox located to the left of the relevant line in the table
and click the DELETE button.
Page 174 of 231

User Manual
TR-069 Client
On the Advanced / TR-069 Client page, you can configure the router for communication with a
remote Auto Configuration Server (ACS).
The TR-069 client is used for remote monitoring and management of the device.
Figure 144. The page for configuring the TR-069 client.

TR-069 Client
The interface which the router uses for communication with the
ACS. Leave the Automatic value to let the device select the
Interface
interface basing on the routing table or select another value if
required by your ISP.
Enable TR-069 Client Move the switch to the right to enable the TR-069 client.
Page 175 of 231

User Manual
Inform settings
Move the switch to the right so the router may send reports (data on
Enable
the device and network statistics) to the ACS.
Interval Specify the time period (in seconds) between sending reports.
Auto Configuration Server Settings
URL address The URL address of the ACS provided by the ISP.
Username The username to connect to the ACS.
The password to connect to the ACS. Click the Show icon ( ) to

Password
Connection Request Settings
The username used by the ACS to transfer a connection request to

Username
the router.
The password used by the ACS. Click the Show icon ( ) to

Password
Request port The port used by the ACS. By default, the port 8999 is specified.
Request path The path used by the ACS.

Page 176 of 231

User Manual
Remote Access
On the Advanced / Remote Access page, you can configure access to the web-based interface
of the router. By default, the access from external networks to the router is closed. If you need to
allow access to the router from the external network, create relevant rules.
Figure 145. The Advanced / Remote Access page.

To create a new rule, click the ADD button.
Figure 146. The window for adding a rule for remote management.
An IP version to which the rule will be applied. Select the relevant

IP version
Open access from any Move the switch to the right to allow access to the router for any
external host host. Upon that the IP address and Mask fields are not displayed.
Page 177 of 231

User Manual
A host or a subnet to which the rule is applied. You can specify an

IP address
IPv4 or IPv6 address.
For the IPv4-based network only.

Mask
The mask of the subnet.
For the IPv4-based network only.

Public port
An external port of the router. You can specify only one port.
Protocol The protocol available for remote management of the router.

To edit a rule for remote access, left-click the relevant rule. In the opened window, change the
To remove a rule for remote access, select the checkbox located to the left of the relevant line in the
table and click the DELETE button.
Page 178 of 231

User Manual
UPnP IGD
On the Advanced / UPnP IGD page, you can enable the UPnP IGD protocol. The router uses the
UPnP IGD protocol for automatic configuration of its parameters for network applications requiring
an incoming connection to the router.
Figure 147. The Advanced / UPnP IGD page.

If you want to manually specify all parameters needed for network applications, move the Enable
switch to the left. Then go to the Firewall / Virtual Servers page and specify needed settings.
If you want to enable the UPnP IGD protocol in the router, move the Enable switch to the right.
When the protocol is enabled, the router's parameters configured automatically are displayed on the
page:
Protocol A protocol for network packet transmission.
IP The IP address of a client from the local area network.
A port of a client's IP address to which traffic is directed from a

Private port
public port of the router.
A public port of the router from which traffic is directed to a client's
Public port
IP address.
Description Information transmitted by a client's network application.
Page 179 of 231

User Manual
UDPXY
On the Advanced / UDPXY page, you can allow the router to use the built-in UDPXY
application. The UDPXY application transforms UDP traffic into HTTP traffic. This application
allows devices which cannot receive UDP streams to access stream video.
Figure 148. The Advanced / UDPXY page.

To enable the application, move the Enable switch to the right. When the application is enabled,
the IGMP Proxy function is automatically disabled.
Upon that the following fields are displayed on the page:
Port The port of the router which the UDPXY application uses.
Maximum number of devices from the router's LAN which will be

Maximum client number
served by the application.
Buffer size for incoming Size of intermediate buffer for received data.
data By default, the minimum acceptable value is specified.
Buffer size for data Size of intermediate buffer for transmitted data.
transferred to client By default, the minimum acceptable value is specified.
To access the status page of the application, click the status link.
Page 180 of 231

User Manual
Figure 149. The UDPXY application status page.
Page 181 of 231

User Manual
IGMP/MLD
On the Advanced / IGMP/MLD page, you can allow the router to use IGMP and MLD and
specify needed settings.
IGMP and MLD are used for managing multicast traffic (transferring data to a group of
destinations) in IPv4 and IPv6 networks correspondingly. These protocols allow using network
resources for some applications, e.g., for streaming video, more efficiently.
Figure 150. The Advanced / IGMP/MLD page.

The following elements are available on the page:
IGMP
Enable Move the switch to the right to enable IGMP.
IGMP version Select a version of IGMP from the drop-down list.
From the drop-down list, select a connection of the Dynamic IPv4 or

Interface Static IPv4 type for which you need to allow multicast traffic (e.g.
streaming video).
Set the address of
Move the switch to the right if you want all outgoing IGMP packets
outgoing IGMP packets
to have the IP address 0.0.0.0.
equal to 0.0.0.0
Page 182 of 231

User Manual
MLD
Enable Move the switch to the right to enable MLD.
MLD version Select a version of MLD from the drop-down list.
From the drop-down list, select a connection of the Dynamic IPv6 or

Interface Static IPv6 type for which you need to allow multicast traffic (e.g.
streaming video).
Page 183 of 231

User Manual
ALG/Passthrough
On the Advanced / ALG/Passthrough page, you can allow the router to use RTSP, enable the
SIP ALG and PPPoE/PPTP/L2TP/IPsec pass through functions, and assign a higher priority for a
specific type of traffic.
Assigning a higher priority for a specific type of traffic allows you to allocate the router's resources
for online games or IPTV services, service packet transmission, or management of the router.
SIP is used for creating, modifying, and terminating communication sessions. This protocol allows
telephone calls via the Internet.
RTSP is used for real-time streaming multimedia data delivery. This protocol allows some
applications to receive streaming audio/video from the Internet.
The PPPoE pass through function allows PPPoE clients of computers from your LAN to connect to
the Internet through connections of the router.
The PPTP pass through, L2TP pass through and IPsec pass through functions allow VPN PPTP,
L2TP and IPsec traffic to pass through the router so that clients from your LAN can establish
relevant connections with remote networks.
Figure 151. The Advanced / ALG/Passthrough page.
Page 184 of 231

User Manual
The following elements are available on the page:
Move the switch to the right to assign a higher priority for IPTV
High priority for IPTV traffic. Move the switch to the left so that online games traffic could
have a higher priority.
Move the switch to the right to assign a higher priority for passing
High priority for service LCP and DHCP packets. Such a setting allows keeping a persistent
traffic Internet connection at high load. It can lead to a small loss of
performance.
Move the switch to the right to assign a higher priority for packets
High priority for Web
related to Telnet and web-based management of the router at high
interface and Telnet
load. It can lead to a small loss of performance.
Move the switch to the right to enable SIP. Such a setting allows
SIP using the SIP ALG function. This function allows VoIP traffic to
pass through the NAT-enabled router.15
Move the switch to the right to enable RTSP. Such a setting allows
RTSP managing media stream: fast forward streaming audio/video, pause
and start it.
Move the switch to the right to enable the PPPoE pass through
PPPoE pass through
function.
Move the switch to the right to enable the IPsec pass through
IPsec pass through
function.
Move the switch to the right to enable the L2TP pass through
L2TP pass through
function.
Move the switch to the right to enable the PPTP pass through
PPTP pass through
function.
15 On the Connections Setup / WAN page, create a WAN connection, move the SIP switch to the right on the
Advanced / ALG/Passthrough page, connect an Ethernet cable between a LAN port of the router and the IP
phone. Specify SIP parameters on the IP phone and configure it to obtain an IP address automatically (as DHCP
client).
Page 185 of 231

User Manual
IPsec
On the Advanced / IPsec page, you can configure VPN tunnels based on IPsec protocol.
IPsec is a protocol suite for securing IP communications.
Figure 152. The Advanced / IPsec page.

To allow IPsec tunnels, move the Enable switch to the right. Upon that the Tunnels and Status
sections are displayed on the page.
In the Status section, the current state of an existing tunnel is displayed.
Page 186 of 231

User Manual
To create a new tunnel, click the ADD button in the Tunnels section.
! Setting for both devices which establish the tunnel should be the same.
Figure 153. The page for adding an IPsec tunnel. The General Settings section.
General Settings
Move the switch to the right to allow a remote host with any public IP
address to connect to the router via IPsec protocol. Such a setting can
Dynamic IPsec
be specified for one tunnel only. Connection requests via this tunnel
can be sent by a remote host only.
A remote subnet VPN gateway IP address. The field is available, if the

Remote host
Dynamic IPsec switch is moved to the left.
Page 187 of 231

User Manual
Select an identification method for the local host (router) from the
drop-down list:
Address: The local host is identified by its IP address.
Identifier
FQDN: The local host is identified by its domain name. The value is
unavailable, if the Main value is selected from the Exchange mode
list.
Local identifier value Specify the local host identifier.
Pre-shared key A key for mutual authentication of the parties.
Select a WAN connection through which the tunnel will pass. When
Interface the Automatic value is selected, the router uses the default WAN
connection.
The NAT Traversal function allows VPN traffic to pass through the
NAT-enabled router.
Select the Disabled value to disable the function.
NAT Traversal Select the Enabled value to enable the function if it is supported by a
remote host.
Select the Force value to make the function be always on, even if it is
not supported by a remote host.
Select the mode of negotiation from the drop-down list:

Main: The mode provides the most secure communication between
the parties in the course of negotiation of the authentication
procedures.
Exchange mode
Base: The draft negotiation mode with preliminary authentication of
a host.
Aggressive: The mode provides faster operation as it skips several
stages of negotiation of the authentication procedures.
Move the switch to the right to enable using DPD protocol for this
tunnel. Such a setting allows to check the status of a remote host: if
encrypted packets exchange between the router and the remote host
Enable DPD breaks down, the router starts sending DPD messages to the remote
host. If the switch is moved to the left, the DPD delay and The
maximum number of failures DPD fields are not available for
editing.
A time period (in seconds) between attempts to check the status of a

DPD delay
remote host. By default, the value 5 is specified.
Page 188 of 231

User Manual
A number of DPD messages that were sent to check the status of a

The maximum remote host and left unanswered. By default, the value 3 is specified.
number of failures If a remote host does not answer the specified number of messages,
DPD the router breaks down the tunnel connection, removes the encryption
keys, and tries to activate the connection.
Maximum Segment Size of a TCP packet. This parameter influences

the size of a TCP packet which will be sent from a remote host to the
router.
TCP MSS If the Manual value is selected, you can specify the parameter in the
TCP MSS Value field.
If the Path MTU discovery value is selected, the parameter will be
configured automatically.
The maximum size (in bytes) of a non-fragmented packet. The field is

TCP MSS Value available for editing when the Manual value is selected from the TCP
MSS drop-down list.
Allow traffic between Move the switch to the right to allow data exchange between subnets
tunneled networks with which IPsec tunnels have been created.
Page 189 of 231

User Manual
Figure 154. The page for adding an IPsec tunnel. The First Phase / The Second Phase sections.
The First Phase
First phase
Select encryption algorithm from the drop-down list.
encryption algorithm
Hashing algorithm Select hashing algorithm from the drop-down list.
First phase DHgroup A Diffie-Hellman key group for Phase 1. Select a value from the drop-
type down list.
The lifetime of IKE-SA keys in seconds. After the specified period it is

required to renegotiate the keys. The value specified in this field
IKE-SA lifetime
should exceed the value specified in the IPsec-SA lifetime field.
Specify 0 if you don't want to limit the lifetime of the keys.
The Second Phase
Second phase
Select encryption algorithm from the drop-down list.
encryption algorithm
Authentication
Select authentication algorithm from the drop-down list.
algorithm
Move the switch to the right to enable the PFS option (Perfect
Forward Secrecy). If the switch is moved to the right, a new
Enable PFS
encryption key exchange will be used for Phase 2. This option
increases the security level of data transfer.
A Diffie-Hellman key group for Phase 2. Select a value from the drop-
Second phase
down list. The field is available, if the Enable PFS switch is moved
PFSgroup type
to the right.
Page 190 of 231

User Manual
The lifetime of IPsec-SA keys in seconds. After the specified period it

IPsec-SA lifetime is required to renegotiate the keys. Specify 0 if you don't want to limit
the lifetime of the keys.
If you need to specify IP addresses of local and remote subnets for creating a tunnel, click the ADD
button in the Tunneled Networks section.
Figure 155. The page for adding an IPsec tunnel. The window for adding a tunneled network.
Local network A local subnet IP address and mask.
Remote subnet A remote subnet IP address and mask.

To edit fields in the Tunneled Networks section, select the relevant line in the table. In the
opened window, change the needed parameters and click the SAVE button.
To remove a subnet, select the checkbox located to the left of the relevant line in the table and click
the DELETE button. Also you can remove a subnet in the editing window.
After configuring all needed settings for the IPsec tunnel, click the APPLY button.
To edit the parameters of an existing tunnel, in the Tunnels section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the APPLY button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the DELETE button. Also you can remove a tunnel on the editing page.
To disable VPN tunnels based on IPsec protocol, move the Enable switch to the left.
Page 191 of 231

User Manual
Firewall
In this menu you can configure the firewall of the router:
• add rules for IP filtering
• create virtual servers
• define a DMZ
• configure the MAC filter
• specify restrictions on access to certain web sites
• configure protection against DoS attacks.
IP Filter
On the Firewall / IP Filter page, you can create new rules for filtering IP packets and edit or
remove existing rules.
Figure 156. The Firewall / IP Filter page.

To create a new rule, click the ADD button.
Page 192 of 231

User Manual
Figure 157. The page for adding a rule for IP filtering.

General Settings
Move the switch to the right to enable the rule.

Enable rule
A name for the rule for easier identification. You can specify any
Name
name.
Select an action for the rule.
Allow: Allows packet transmission in accordance with the criteria
Action specified by the rule.
Deny: Denies packet transmission in accordance with the criteria
specified by the rule.
Page 193 of 231

User Manual
A protocol for network packet transmission. Select a value from the

Protocol
drop-down list.
An IP version to which the rule will be applied. Select the relevant
IP version
Source IP Address
Set as Select the needed value from the drop-down list.
The source host start IPv4 or IPv6 address.

If it is necessary to specify a single address, leave the End IPv4
Start IPv4 address / address / End IPv6 address field blank.
Start IPv6 address You can choose a device connected to the router's LAN at the
moment. To do this, select the relevant IPv4 or IPv6 address from the
drop-down list (the field will be filled in automatically).
End IPv4 address /
The source host end IPv4 or IPv6 address.
End IPv6 address
Subnet IPv4 address / The source subnet IPv4 or IPv6 address. The field is displayed when
Subnet IPv6 address the Subnet value is selected from the Set as drop-down list.
Destination IP Address
Set as Select the needed value from the drop-down list.
The destination host start IPv4 or IPv6 address.

If it is necessary to specify a single address, leave the End IPv4
Start IPv4 address / address / End IPv6 address field blank.
Start IPv6 address You can choose a device connected to the router's LAN at the
moment. To do this, select the relevant IPv4 or IPv6 address from the
drop-down list (the field will be filled in automatically).
End IPv4 address /
The destination host end IPv4 or IPv6 address.
End IPv6 address
Subnet IPv4 address / The destination subnet IPv4 or IPv6 address. The field is displayed
Subnet IPv6 address when the Subnet value is selected from the Set as drop-down list.
Ports
A port of the destination IP address. You can specify one port,

Destination port several ports separated by a comma, or a range of ports separated by
a colon.
Page 194 of 231

User Manual
Set source port Move the switch to the right to specify a port of the source IP
manually address manually. Upon that the Source port field is displayed.
A port of the source IP address. You can specify one port, several
Source port
ports separated by a comma, or a range of ports separated by a colon.
To edit a rule for IP filtering, select the relevant line in the table. On the opened page, change the
needed parameters and click the APPLY button.
To remove a rule, select the checkbox located to the left of the relevant line of the table and click
the DELETE button. Also you can remove a rule on the editing page.
Page 195 of 231

User Manual
Virtual Servers
On the Firewall / Virtual Servers page, you can create virtual servers for redirecting incoming
Internet traffic to a specified IP address in the local area network.
Figure 158. The Firewall / Virtual Servers page.

To create a new virtual server, click the ADD button.
Page 196 of 231

User Manual
Figure 159. The page for adding a virtual server.

General Settings
A name for the virtual server for easier identification. You can
Name
specify any name.
Select a virtual server template from the drop-down list, or select
Template Custom to specify all parameters of the new virtual server
manually.
Interface A WAN connection to which this virtual server will be assigned.
Page 197 of 231

User Manual
A protocol that will be used by the new virtual server. Select a value
Protocol
from the drop-down list.
Move the switch to the right in order to let the users of the router's
LAN access the local server using the external IP address of the
NAT Loopback router or its DDNS name (if a DDNS service is configured). Users
from the external network access the router using the same address
(or DDNS name).
Public Network Settings
Enter the IP address of the server from the external network.

To add one more IP address, click the ADD REMOTE IP button and
Remote IP enter the address in the displayed line.
To remove the IP address, click the Delete icon ( ) in the line of
the address.
A port of the router from which traffic is directed to the IP address
specified in the Private IP field in the Private Network Settings
Public port (begin)/
section. Specify the start and the end value for the port range. If you
Public port (end)
need to specify one port, enter the needed value in the Public port
(begin) field and leave the Public port (end) field blank.
Private Network Settings
The IP address of the server from the local area network. To choose
a device connected to the router's LAN at the moment, select the
Private IP
relevant value from the drop-down list (the field will be filled in
automatically).
A port of the IP address specified in the Private IP field to which
traffic is directed from the Public port. Specify the start and the
Private port (start)/
end value for the port range. If you need to specify one port, enter
Private port (end)
the needed value in the Private port (start) field and leave the
Private port (end) field blank.
To edit the parameters of an existing server, select the relevant line in the table. On the opened page,
change the needed parameters and click the APPLY button.
To remove a server, select the checkbox located to the left of the relevant line of the table and click
the DELETE button. Also you can remove a server on the editing page.
Page 198 of 231

User Manual
DMZ
A DMZ is a host or network segment located “between” internal (local) and external (global)
networks. In the router, the DMZ implements the capability to transfer a request coming to a port of
the router from the external network to a specified host of the internal network.
On the Firewall / DMZ page, you can specify the IP address of the DMZ host.
Figure 160. The Firewall / DMZ page.

To enable the DMZ, move the Enable switch to the right.
Enter the IP address of a host from your network in the IP address field. To choose a device
connected to the router's LAN at the moment, select the relevant value from the drop-down list (the
field will be filled in automatically).
Move the Enable NAT Loopback switch to the right in order to let the users of the router's LAN
access the DMZ host using the external IP address of the router or its DDNS name (if a DDNS
service is configured). Users from the external network access the router using the same address (or
DDNS name).
Note that when the DMZ is enabled, all traffic coming to a port of the WAN interface of the router
is directed to the same port of the specified IP address. Also note that virtual servers have higher
priority than the DMZ host. In other words, if there has been created a virtual server that directs
traffic from external port 80 to a port of the device from the router's local network, then entering
http://router_WAN_IP in the address bar, users of the external network are directed to the
specified port and IP address configured for the virtual server, but not to port 80 of the device with
the IP address specified on the Firewall / DMZ page.
To disable the DMZ, move the Enable switch to the left and click the APPLY button.
Page 199 of 231

User Manual
MAC Filter
On the Firewall / MAC Filter page, you can configure MAC-address-based filtering for computers
of the router's LAN.
Figure 161. The Firewall / MAC Filter page.

Select the needed action from the drop-down list in the Default mode section to configure
filtering for all devices of the router's network:
• Allow: Allows access to the router's network and to the Internet for devices (the value is
specified by default);
• Deny: Blocks access to the router's network for devices.
!
You can use the Deny mode only if an active rule which allows access to the device's
network is created on the page.
To create a rule (specify a MAC address of a device for which the specified filtering mode will be
applied), click the ADD button.
Figure 162. The window for adding a rule for the MAC filter.
Page 200 of 231

User Manual
Move the switch to the right to enable the rule.

Enable rule
Select an action for the rule.

Deny: Blocks access to the Internet for the device with the
specified MAC address even if the default mode allows access for
Action all devices.
Allow: Allows access to the router's network and to the Internet for
the device with the specified MAC address even if the default mode
denies access for all devices.
The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
MAC address
moment. To do this, select the relevant device from the drop-down
list (the field will be filled in automatically).
The name of the device for easier identification. You can specify
Hostname
any name.
To edit a rule, select the relevant line in the table. In the opened window, change the needed
parameters and click the SAVE button.
To remove a rule, select the checkbox located to the left of the relevant line of the table and click
the DELETE button. Also you can remove a rule in the editing window.
Page 201 of 231

User Manual
URL Filter
On the Firewall / URL Filter page, you can specify restrictions on access to certain web sites and
define devices to which the specified restrictions will be applied.
Figure 163. The Firewall / URL Filter page.

To enable the URL filter, move the Enable switch to the right, then select a mode from the
Address filtering drop-down list:
• Block listed URLs: when this value is selected, the router blocks access to all web sites
specified in the Addresses section;
• Block all URLs except listed: when this value is selected, the router allows access to
web sites specified in the Addresses section and blocks access to all other web sites.
To specify URL addresses to which the selected filtering mode will be applied, in the Addresses
section, click the ADD button and enter a relevant address in the displayed line. Then click the
APPLY button.
To remove an address from the list of URL addresses, click the Delete icon ( ) in the line of the
relevant URL address. Then click the APPLY button.
Page 202 of 231

User Manual
In the Clients section, you can define devices to which the specified restrictions will be applied.
Select a needed value from the Client filtering drop-down list:
• Use filters only for devices from list: when this value is selected, the router applies
restrictions only to the devices specified in the Clients section;
• Use filters for all but devices from list: when this value is selected, the router does not
apply restrictions to the devices specified in the Clients section, but applies restrictions to
other devices.
To add a client to the list, in the Clients section, click the ADD button. In the opened window, in
the MAC address field, enter the MAC address of the device from the LAN. You can enter the
MAC address of a device connected to the router's LAN at the moment. To do this, select the
relevant device from the drop-down list (the field will be filled in automatically). Then specify a
name of the device for easier identification in the Name field and click the SAVE button.
To remove a client from the list, select the checkbox located to the left of the relevant rule of the
table and click the DELETE button. Also you can remove a client in the editing window.
After completing configuration of the URL filter, click the APPLY button.
Page 203 of 231

User Manual
DoS Protection
On the Functions / Firewall / DoS Protection page, you can configure protection against DoS
attacks of different types.
DoS (Denial of Service) attacks are network attacks during which the router and devices connected
to it are flooded with more requests than they can handle, which leads to significant reduce of
performance or even their malfunction.
Figure 164. The Functions / Firewall / DoS Protection page.

To enable protection against DoS attacks, move the Enable switch to the right. Upon that the Per
Source IP Flood and Other Settings sections are displayed on the page.
Page 204 of 231

User Manual
In the Per Source IP Flood section you can enable protection against main types of DoS attacks.
Enables protection against a flood with connection requests (TCP

TCP/SYN
packets with the SYN flag).
Enables protection against a flood with requests for connection

TCP/FIN
termination (TCP packets with the FIN flag).
UDP Enables protection against a flood with UDP packets.
ICMP Enables protection against a flood with ICMP packets.

Move the relevant switches to the right. In the threshold field corresponding to the switch, specify
the maximum number of packets which arrive from one IP address within one second. The value of
the field should be greater than zero (for example, 200). Then, in the Other Settings section,
move the Block source IP switch to the right, and in the Block time field, specify the time
period (in seconds) during which the source IP address will be blocked. For example, you can
specify 120. When the threshold value is exceeded, the source of packets will be blocked for the
specified time period.
In the Other Settings section, you can activate additional protection methods.
Blocks the source of TCP or UDP packets which check the ports
state if the router receives more than 200 requests per second from
one IP address. The source of packets will be blocked during the
time period specified in the Block time field (the field is displayed
TCP/UDP port scan
if the Block source IP switch is moved to the right).
If the switch is moved to the right, the High sensitivity switch is
displayed on the page. Activate the setting to let the router block the
source if it sends more than 10 requests per second.
Blocks TCP packets with the SYN flag in which the source IP
IP Land
address and port coincides with the destination IP address and port.
Block packets in which the source IP address coincides with the

IP Spoof
router's LAN IP address.
Blocks fragmented IP packets if errors can occur upon assembling

IP TearDrop
these packets.
TCP scan Blocks TCP packets with invalid flags.
Blocks TCP packets with the SYN flag if they are fragmented or
TCP/SYN with data
contain data.
Page 205 of 231

User Manual
UDP Bomb Blocks UDP packets if they contain incorrect service data.
Move the switch to the right to block the sources of packets

protection against which is activated in the Other Settings section
Block source IP
for a certain time period. Then, in the Block time (sec) field
displayed, specify the needed value (in seconds).
Page 206 of 231

User Manual
System
In this menu you can do the following:
• change the password used to access the router's settings
• restore the factory default settings
• create a backup of the router's configuration
• restore the router's configuration from a previously saved file
• save the current settings to the non-volatile memory
• reboot the router
• change the web-based interface language
• update the firmware of the router
• configure automatic notification on new firmware version
• view the system log; configure sending the system log to a remote host and/or a USB
storage connected to the router
• check availability of a host on the Internet through the web-based interface of the router
• trace the route to a host
• allow or forbid access to the router via TELNET
• configure automatic synchronization of the system time or manually configure the date and
time for the router.
Page 207 of 231

User Manual
Configuration
On the System / Configuration page, you can change the password for the administrator account
used to access the web-based interface of the router and to access the device settings via TELNET,
restore the factory defaults, backup the current configuration, restore the router's configuration from
a previously created file, save the changed settings to the non-volatile memory, reboot the device, or
change the web-based interface language.
Figure 165. The System / Configuration page.

In order to change the password for the administrator account, in the User section, enter a new
password in the New password and Password confirmation fields. Use digits, Latin letters
(uppercase and/or lowercase), and other characters available in the US keyboard layout. 16 Click the
Show icon ( ) to display the entered values. Then click the SAVE button.
Remember or write down the new password for the administrator account. In case of losing
!
the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.
To change the web-based interface language, select the needed value from the Language drop-
down list.
16 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.
Page 208 of 231

User Manual
The following buttons are also available on the page:
Control Description
Click the button to restore the factory default settings. Also you can
Factory restore the factory defaults via the hardware RESET button (see the
Back Panel section, page 17).
Click the button to save the configuration (all settings of the router)
Backup to your PC. The configuration backup will be stored in the
download location of your web browser.
Click the button and follow the dialog box appeared to select a
Restore previously saved configuration file (all settings of the router)
located on your PC and upload it.
Click the button to save settings to the non-volatile memory.

The router saves changed settings automatically. If changed settings
Save
have not been saved automatically, a notification is displayed in the
top right part of the page.
Click the button to reboot the device. All unsaved changes will be
Reboot
lost after the device's reboot.
Page 209 of 231

User Manual
Firmware Update
On the System / Firmware Update page, you can update the firmware of the router and
configure the automatic check for updates of the router's firmware.
!
Update the firmware only when the router is connected to your PC via a wired
connection.
Figure 166. The System / Firmware Update page.

You can view the current version of the router's firmware on the Summary page.
By default, the automatic check for the router's firmware updates is enabled. If a firmware update is
available, a notification will be displayed in the top right corner of the page.
To disable the automatic check for firmware updates, in the Remote update section, move the
Check for updates automatically switch to the left and click the APPLY SETTINGS button.
To enable the automatic check for firmware updates, in the Remote update section, move the
Check for updates automatically switch to the right and click the APPLY SETTINGS button.
By default, in the Remote server URL field, the D-Link update server address
(fwupdate.dlink.ru) is specified.
You can update the firmware of the router locally (from the hard drive of your PC) or remotely
(from the update server).
Page 210 of 231

User Manual
Local Update
!
Attention! Do not turn off the router before the firmware update is completed. This may
cause the device breakdown.
To update the firmware of the router locally, follow the next steps:
1. Download a new version of the firmware from www.dlink.ru.
2. Click the CHOOSE FILE button in the Local Update section on the System /
Firmware Update page to locate the new firmware file.
3. Click the UPDATE FIRMWARE button.
4. Wait until the router is rebooted (about one and a half or two minutes).
5. Log into the web-based interface using the login (admin) and the current password.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, click the Factory button on the System / Configuration page. Wait until the
router is rebooted.
Page 211 of 231

User Manual
Remote Update
!
Attention! Do not turn off the router before the firmware update is completed. This may
cause the device breakdown.
To update the firmware of the router remotely, follow the next steps:
1. On the System / Firmware Update page, in the Remote Update section, click the
CHECK FOR UPDATES button to check if a newer firmware version exists.
2. Click the UPDATE FIRMWARE button (the button is displayed if a newer version of the
firmware is available).
3. Wait until the router is rebooted (about one and a half or two minutes).
4. Log into the web-based interface using the login (admin) and the current password.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, click the Factory button on the System / Configuration page. Wait until the
router is rebooted.
Page 212 of 231

User Manual
Log
On the System / Log page, you can set the system log options and configure sending the system
log to a remote host and/or a USB storage connected to the router.
Figure 167. The System / Log page. The Settings tab.

To enable logging of the system events, go to the Settings tab and move the Enable switch to the
right. Then specify the needed parameters.
Page 213 of 231

User Manual
Logging
Select a type of logging from the drop-down list.

• Local: the system log is stored in the router's memory. When
this value is selected, the Server and Port fields are not
displayed.
Type • Remote: the system log is sent to the remote host specified in
the Server field.
• Remote and local: the system log is stored in the router's
memory and sent to the remote host specified in the Server
field.
Level Select a type of messages and alerts/notifications to be logged.
The IP or URL address of the host from the local or global network,
Server
to which the system log will be sent.
A port of the host specified in the Server field. By default, the value
Port
514 is specified.
Record to USB
If a USB storage is connected to the router, its name is displayed in

USB Storage the field.
To safely disconnect the USB storage, click the UNMOUNT button.
Move the switch to the right so that the device could send the system
Save log to a USB log to the USB storage connected to it. Upon that the Path, The
storage maximum size of one file, File name, and Number of files
to keep fields are displayed.
Click the Search icon ( ) located to the right of the field in order
Path
to locate the folder where system log files will be stored.
The maximum size of
The maximum size (in kilobytes) of one system log file.
one file
File name A name for system log files.
The maximum number of files allowed to be recorded on the USB

storage. When this number is exceeded, the file containing the oldest
Number of files to keep data will be deleted. The field is available for editing if the value
specified in the The maximum size of one file field is greater
than zero.
Page 214 of 231

User Manual
To disable logging of the system events, move the Enable switch to the left and click the APPLY
button.
To view the system log, go to the Log tab.
Figure 168. The System / Log page. The Log tab.

To view the latest system events, click the REFRESH button.
To save the system log to your PC, click the EXPORT button. The file will be stored in the
download location of your web browser.
Page 215 of 231

User Manual
Ping
On the System / Ping page, you can check availability of a host from the local or global network
via the Ping utility.
The Ping utility sends echo requests to a specified host and receives echo replies.
Figure 169. The System / Ping page.

To check availability of a host, enter the IP address or name of this host in the Host field and
specify a number of requests that will be sent in order to check its availability in the Count of
packets field. If availability check should be performed with IPv6, move the IPv6 switch to the
right.
To specify additional settings, click the MORE SETTINGS button.
Figure 170. The System / Ping page. The additional settings window.
Page 216 of 231

User Manual
In the opened window, in the Packet size field, specify the volume of data sent in a request. In the
Time to wait for a response field, specify the response waiting period in seconds. To restore the
default field values, click the DEFAULT SETTINGS button.
After specifying the additional parameters, click the OK button.
To run the check, click the START button. After a while, the results will be displayed on the page.
To remove the check result from the page, click the CLEAR button.
Page 217 of 231

User Manual
Traceroute
On the System / Traceroute page, you can determine the route of data transfer to a host via the
traceroute utility.
Figure 171. The System / Traceroute page.

To determine the route, enter the name or IP address of a host in the Host field. If the route should
be determined using IPv6, move the IPv6 switch to the right.
To specify additional settings, click the MORE SETTINGS button.
Figure 172. The System / Traceroute page. The additional settings window.
Page 218 of 231

User Manual
Specify the TTL (Time to live) parameter value. The default value is
Maximum TTL value
30.
Number of probes The number of attempts to hit an intermediate host.
Wait time A period of waiting for an intermediate host response.

To restore the default field values, click the DEFAULT SETTINGS button.
After specifying the additional parameters, click the OK button.
To run the check, click the START button. After a while, the results will be displayed on the page.
To remove the check result from the page, click the CLEAR button.
Page 219 of 231

User Manual
Telnet
On the System / Telnet page, you can enable or disable access to the device settings via TELNET
from your LAN. Access via TELNET is disabled by default. It is automatically enabled after
changing the default administrator password.
Figure 173. The System / Telnet page.

To disable access via TELNET, move the Enable Telnet switch to the left and click the APPLY
button.
To enable access via TELNET again, move the Enable Telnet switch to the right. In the Port
field, enter the number of the router's port through which access will be allowed (by default, the
port 23 is specified). Then click the APPLY button.
Page 220 of 231

User Manual
System Time
On the System / System Time page, you can manually set the time and date of the router or
configure automatic synchronization of the system time with a time server on the Internet.
Figure 174. The System / System Time page.

To set the system time manually, follow the next steps:
1. Move the Enable NTP switch to the left.
2. In the Time Settings section, specify needed values. To specify the time set up your PC or
portable device, click the SET LOCAL TIME button.
3. Click the APPLY button. The System date and System time fields will be filled in
automatically.
To enable automatic synchronization with a time server, follow the next steps:
1. Move the Enable NTP switch to the right.
2. Specify the needed NTP server or leave the value specified by default in the NTP Servers
section. If you need to specify several servers, click the ADD SERVER button.
3. Select your time zone from the Timezone drop-down list in the NTP Settings section. To
set the time zone in accordance with the settings of your operating system or portable
device, click the DETERMINE TIMEZONE button.
4. Click the APPLY button. The System date and System time fields will be filled in
automatically.
To enable automatic adjustment for daylight saving time of the router, move the Daylight saving
time switch to the right in the NTP Servers section and click the APPLY button.
Page 221 of 231

User Manual
In some cases NTP servers addresses are provided by your ISP. In this case, you need to move the
Get NTP server addresses using DHCP switch in the NTP Servers section to the right and
click the APPLY button. Contact your ISP to clarify if this setting needs to be enabled. If the Get
NTP server addresses using DHCP switch is moved to the right, the NTP Servers section is
not displayed.
To allow connected devices to use the IP address of the router in the local subnet as a time server,
move the Run as a server for the local network switch to the right and click the APPLY
button.
When the router is powered off or rebooted, the system time is reset to the default value.
!
If you have set automatic synchronization for the system time, the internal clock of the
device will be configured after connecting to the Inter net. If you have set the system time
manually, you need to set the time and date again (see above).
Page 222 of 231

User Manual
Yandex.DNS
This menu is designed to configure the Yandex.DNS service.
Yandex.DNS is a web content filtering service which provides the DNS server, protects a computer
against malicious web sites, and blocks access to adult web sites.
Settings
On the Yandex.DNS / Settings page, you can enable the Yandex.DNS service and configure its
operating mode.
Figure 175. The Yandex.DNS / Settings page.

To get detailed information on the service, click the About Yandex.DNS link.
To enable the Yandex.DNS service, move the Enable switch to the right.
Page 223 of 231

User Manual
When the service is enabled, the Default mode section is displayed on the page. Select the needed
choice of the radio button to configure filtering for all devices of the router's network:
• Protection off: when this value is selected, the service provides the DNS server with no
restrictions on access to unsafe web sites;
• Safe: when this value is selected, the service blocks access to malicious and fraudulent web
sites;
• Child: when this value is selected, the service blocks access to malicious and fraudulent
web sites and blocks access to adult content.
Also the selected filtering mode will be applied to all devices newly connected to the router's
network.
After specifying all needed parameters, click the APPLY button.
To disable the Yandex.DNS service, move the Enable switch to the left and click the APPLY
button.
Page 224 of 231

User Manual
Devices and Rules

On the Yandex.DNS / Devices and Rules page, you can specify a filtering mode for each
device separately.
Figure 176. The Yandex.DNS / Devices and Rules page.

In the Known Clients section, the devices connected to the local network of the router at the
moment and their relevant filtering mode are displayed.
To create17 a new filtering rule for a device, click the ADD button in the Rules section, or left-click
the name of the filtering mode in the line of the device for which a rule should be created in the
Known Clients section.
Figure 177. Adding a new rule for the Yandex.DNS service.
17 When a new rule for filtering is created, a MAC address and IP address pair is displayed on the Connections
Setup / LAN page. The created pair will be deleted with the relevant rule.
Page 225 of 231

User Manual
MAC address The MAC address of a device from the router's LAN.
IP address The IP address of a device from the router's LAN.
Name Enter a name for the rule for easier identification. Optional.
Select an operating mode of the Yandex.DNS service for this rule.

Protection off: when this value is selected, the service provides
the DNS server with no restrictions on access to unsafe web sites.
Safe: when this value is selected, the service blocks access to
Mode
malicious and fraudulent web sites.
Child: when this value is selected, the service blocks access to
malicious and fraudulent web sites and blocks access to adult
content.
To edit a rule for filtering, select a relevant line of the table, in the opened window, change the
needed values and click the SAVE button.
To remove a rule for filtering, select the checkbox located to the left of the relevant rule and click
the DELETE button. Also you can remove a rule in the editing window.
After completing the work with rules, click the APPLY button.
Page 226 of 231

with 3G/LTE Support and USB Port Operation Guidelines
User Manual
CHAPTER 5. OPERATION GUIDELINES

Safety Rules and Conditions
Please carefully read this section before installation and connection of the device. Make sure that
the power adapter and cables are not damaged. The device should be used only as intended in
accordance with the documents.
The device is intended for use in dry, clean, dust-free, and well ventilated areas with normal
humidity away from strong heat sources. Do not use the device outdoors or in the areas with high
humidity. Do not place foreign objects on the device. Do not obstruct the ventilation openings of the
device. The environmental temperature near the device and the temperature inside the device's
cover should be within the range from 0 °С to +40 °С.
Only use the power adapter supplied with the device. Do not plug in the adapter, if its case or cable
are damaged. Plug the adapter only into working electrical outlets with parameters indicated on the
adapter.
Do not open the cover of the device! Unplug the device before dusting and cleaning. Use a damp
cloth to clean the device. Do not use liquid/aerosol cleaners or magnetic/static cleaning devices.
Prevent moisture getting into the device or the power adapter.
The service life of the device is 2 years.
Page 227 of 231

with 3G/LTE Support and USB Port Operation Guidelines
User Manual
Wireless Installation Considerations

The DIR-825/AC device lets you access your network using a wireless connection from virtually
anywhere within the operating range of your wireless network. Keep in mind, however, that the
number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass
through, may limit the range. Typical ranges vary depending on the types of materials and
background RF noise in your home or office. To maximize your wireless range, follow the
guidelines below.
1. Keep the number of walls and ceilings between the DIR-825/AC device and other network
devices to a minimum – each wall or ceiling can reduce your wireless network range by 3-
90 feet (1-30 meters).
2. Be aware of the direct line between network devices. Place your devices so that the signal
travels straight through a wall or ceiling (instead of at an angle) for better reception.
3. Building materials make a difference. A solid metal door or aluminum studs may have a
negative effect on your wireless range. Try to position your router, access points, and
computers so that the signal passes through drywalls or open doorways. Materials and
objects such as glass, steel, metal, walls with insulation, water (fish tanks), mirrors, file
cabinets, brick, and concrete will degrade your wireless signal.
4. Keep your router away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances
that generate RF noise.
5. If you are using 2.4 GHz cordless phones or X-10 equipment (wireless devices such as
ceiling fans, lights, and home security systems), your wireless connection may degrade
dramatically or drop completely. Make sure your 2.4 GHz phone base is as far away from
your wireless devices as possible. Note, that the base transmits a signal even if the phone in
not in use.
Page 228 of 231

with 3G/LTE Support and USB Port Abbreviations and Acronyms
User Manual
CHAPTER 6. ABBREVIATIONS AND ACRONYMS

3G Third Generation
AC Access Category
AES Advanced Encryption Standard
ARP Address Resolution Protocol
BSSID Basic Service Set Identifier
CRC Cyclic Redundancy Check
DDNS Dynamic Domain Name System
DDoS Distributed Denial of Service
DHCP Dynamic Host Configuration Protocol
DNS Domain Name System
DTIM Delivery Traffic Indication Message
GMT Greenwich Mean Time
GSM Global System for Mobile Communications
IGD Internet Gateway Device
IGMP Internet Group Management Protocol
IMEI International Mobile Equipment Identity
IMSI International Mobile Subscriber Identity
IP Internet Protocol
IPsec Internet Protocol Security
ISP Internet Service Provider
L2TP Layer 2 Tunneling Protocol
LAN Local Area Network
LCP Link Control Protocol
LTE Long Term Evolution
MAC Media Access Control
MTU Maximum Transmission Unit
Page 229 of 231

User Manual
NAT Network Address Translation
NTP Network Time Protocol
OFDM Orthogonal Frequency Division Multiplexing
PBC Push Button Configuration
PIN Personal Identification Number
PPPoE Point-to-point protocol over Ethernet
PPTP Point-to-point tunneling protocol
PSK Pre-shared key
PUK PIN Unlock Key
QoS Quality of Service
RADIUS Remote Authentication in Dial-In User Service
RIP Routing Information Protocol
RTS Request To Send
RTSP Real Time Streaming Protocol
SIP Session Initiation Protocol
SIM Subscriber Identification Module
SMB Server Message Block
SSID Service Set Identifier
TKIP Temporal Key Integrity Protocol
UDP User Datagram Protocol
UPnP Universal Plug and Play
URL Uniform Resource Locator
USB Universal Serial Bus
VLAN Virtual Local Area Network
VPN Virtual Private Network
WAN Wide Area Network
WEP Wired Equivalent Privacy
Wi-Fi Wireless Fidelity
Page 230 of 231

User Manual
WLAN Wireless Local Area Network
WMM Wi-Fi Multimedia
WPA Wi-Fi Protected Access
WPS Wi-Fi Protected Setup
Page 231 of 231

DIR-825 - AC - G1 - User Manual - v.3.0.4 - 24.10.18 - EN

Uploaded by

Copyright:

Available Formats

DIR-825 - AC - G1 - User Manual - v.3.0.4 - 24.10.18 - EN

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

DIR-825 - AC - G1 - User Manual - v.3.0.4 - 24.10.18 - EN

Uploaded by

Copyright:

Available Formats

User Manual

text The body text of the manual.

Before You Begin A reference to a chapter or section of this manual.

A name of a menu, menu item, control (field, checkbox, drop-down

192.168.0.1 Data that you should enter in the specified field.

! Information An important note.

RAM · 64MB, DDR2

Flash · 8MB, SPI

Interfaces · 10/100/1000BASE-T WAN port

Power connector · Power input connector (DC)

3 For some models of USB modems.

Wireless Module Parameters

Wireless Module Parameters

· 802.11n (typical at room temperature 25 °C)

· 802.11ac (typical at room temperature 25 °C)

· 802.11b (typical at PER = 8% (1000-byte PDUs) at room temperature 25 °C)

Wireless Module Parameters

· 802.11n (typical at PER = 10% (1000-byte PDUs))

· 802.11ac (typical at PER = 10% (1000-byte PDUs))

Wireless Module Parameters

Weight · 360 g (0.8 lb)

Temperature · Operating: from 0 to 40 °C

Supported USB modems4

Supported USB modems

Figure 1. Upper panel view.

LED Mode Description

LED Mode Description

Figure 2. Back panel view.

A button to set up wireless connection (the WPS function).

A button to enable/disable wireless network.

LAN 1-4 4 Ethernet ports to connect computers or network devices.

A port to connect to a cable or DSL modem or to a private Ethernet

USB A port for connecting a USB device (modem, storage, printer).

12V DC IN Power connector.

POWER A button to turn the router on/off.

CHAPTER 3. INSTALLATION AND CONNECTION

Obtaining IP Address Automatically in OS Windows 7

Figure 3. The Control Panel window.

Figure 4. The Network and Sharing Center window.

Figure 5. The Network Connections window.

Figure 6. The Local Area Connection Properties window.

Figure 7. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

PC with Wi-Fi Adapter

Obtaining IP Address Automatically and Connecting

Figure 8. The Control Panel window.

Figure 9. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

Figure 10. The notification area of the taskbar.

Figure 11. The list of available networks.

Connecting to Web-based Interface

Figure 12. Connecting to the web-based interface of the DIR-825/AC device.

Figure 14. The login page.

Web-based Interface Structure

Figure 15. The summary page.

Figure 16. The Home page.

Figure 17. The web-based interface notifications.

CHAPTER 4. CONFIGURING VIA WEB-BASED

Figure 18. Restoring the default settings in the Wizard.

Figure 19. Checking connection to the wireless network.

Click the START button.