D-LINK SYSTEMS, INC | WIRELESS ROUTER | HOME

Product Page: DIR-330 | Firmware Version: 1.12

| Setup | Advanced | Maintenance | Status | Help

- Menu
- Setup
- Advanced
- Maintenance
- Status

# SUPPORT MENU

- Port Forwarding
- Applications
- Network filter
- Website Filter
- Firewall Settings
- Advanced Wireless
- Advanced Network
- Routing
- Certificates
- User Group

## Port Forwarding

Port Forwarding

Port Forwarding can be used to open a port or range of ports to a device on your network . To use them, click the checkbox to Enable the entry, select a pre-defined service from the Application Name drop down menu, select a computer from the Computer Name drop down menu, and click Save Settings. The Application, Computer, and Ports can also be filled in manually if your Application or Computer is not listed in the drop down menus.
Name – The name for the service being provided by the device on your LAN that uses the ports being opened.
IP Address – The server computer on the LAN network that the specified ports will be opened to.
Application Name – This contains a list of pre-defined services.

Computer Name – This contains a list of the devices on your network that have obtained an IP Address from the router.

Public Port – The port number that users on the Internet will use to access the defined service.
Private Port – The port number of the service being hosted by the server computer on the LAN.
Traffic Type – The protocol used by the service the device on your LAN is providing.

Schedule – The schedule of time when the Virtual Server Rule will be active. Schedules can be defined on the Maintenance>Schedules page.

## Applications

Applications

Multiple connections are required for some applications, such as Internet gaming, video conferencing, Internet telephony and others. These applications have difficulties working through NAT (Network Address Translation). If you need to run applications that require multiple connections, specify the port normally associated with an application in the "Trigger Port" field, select the protocol type as TCP (Transmission Control Protocol) or UDP (User Datagram Protocol), then enter the public ports associated with the trigger port in the Firewall Port field to open them for inbound traffic. There are well-known applications already defined in the Application Name drop down menu.
Name – This is the name referencing the application.
Trigger Port – This is the port used to trigger the application. It can be either a single port or a range of ports.
Traffic Type – This is the protocol used to trigger the application.
Firewall Port – This is the port number on the WAN side that will be used to access the application. You may define a single port or a range of ports. You can use a comma to add multiple ports or port ranges.
Traffic Type – This is the protocol used for the application.
Schedule – The schedule of time when the Application Rule will be active. Schedules can be defined on the Maintenance>Schedules page.

## Network Filter

Network Filter

Network filters or MAC filters can be used to deny computers within the local area network from accessing the Internet. You can either manually add a MAC address or select the MAC address from the list of clients that are currently connected to the unit.

Select "Turn MAC Filtering ON and ALLOW computers with MAC address listed below to access the network" if you only want selected computers to have network access and all other computers not to have network access.
Select "Turn MAC Filtering ON and DENY computers with MAC address listed below to access the network" if you want all computers to have network access except those computers in the list.

MAC Address– The MAC address of the network device to be added to the MAC Filter List.
DHCP Client List – DHCP clients will have their hostname in the Computer Name drop down menu. You can select the client computer you want to add to the MAC Filter List and click arrow button. This will automatically add that computer's MAC address to the appropriate field.
CLEAR– This will remove the MAC Address on the corresponding line from the MAC Filtering table.

## Website Filter

Website Filter

Along with the ability to filter devices from accessing your network and the Internet, the DIR-330 can also be configured to allow or deny access, for the computers on your network, to inappropriate websites either by domain name or by keywords.

Website Filtering
Website Filtering is used to allow or deny computers on your network access to specific web sites by using keywords or specific Domain Names. Select "Turn Website Filtering ON and ALLOW computers access to ONLY these sites" in order only allow computers on your network access to the specified URLs and Domain Names. Select "Turn Website Filtering ON and DENY computers access to ONLY these sites" in order deny computers on your network access to the specified URLs and Domain Names.

Example 1:
If you wanted to block LAN users from any website containing a URL pertaining to shopping, you would need to select "Turn Website Filtering ON and DENY computers access to ONLY these sites" and then enter "shopping" into the Website Filtering Rules list. Sites like these will be denied access to LAN users because they contain the keyword in the URL.
http://www.yahoo.com/shopping/stores.html
http://www.msn.com/search/shopping-spree.html

Example 2: If you want your children to only be able to access particular sites, you would then choose "Turn Website Filtering ON and ALLOW computers access to ONLY these sites" and then enter in the domains you want your children to have access to.

- Disney.com
- Cartoons.com
- DiscoveryChannel.com

Schedule – The schedule of time when the Website Filter Rule will be active. Schedules can be defined on the Maintenance>Schedules page.

## Firewall Settings

Firewall Settings

The Firewall Settings section contains the option to configure a DMZ Host as well as PPTP, L2TP, and IPSec passthrough.

DMZ
If you have a computer that cannot run Internet applications properly from behind the DIR-330, then you can allow the computer to have unrestricted Internet access. Enter the IP address of that computer as a DMZ (Demilitarized Zone) host with unrestricted Internet access. Adding a client to the DMZ may expose that computer to a variety of security risks, so only use this option as a last resort.
Computer Name – If you are not sure what the IP address of the device is that you would like to make the DMZ host, you can select a device on your network that has obtained an IP from the router using the Computer Name dropdown menu.
Schedule – The schedule of time when the DMZ Host will be active. Schedules can be defined on the Maintenance>Schedules page.

Firewall Rules
Up to 50 Firewall Rules can be created to control the incoming and outgoing traffic on your router. For each rule you can create a name and control the direction of traffic. You can also allow or deny a range of IP Addresses, the protocol and a port range. In order to apply a schedule to a Firewall rule, your must first define a schedule on the Maintenance>Schedules page.
Name – Create a name for your Firewall rule.
Action – Select the action for the Firewall rule. You can choose to allow or deny the IP Address Ranges, the Protocol and the Port Range that you enter.
Schedule – Select a schedule from the drop-down menu. In order to apply a schedule to a Firewall rule, your must first define a schedule on the Maintenance>Schedules page.
Source/Dest – This setting controls the direction of traffic. To control incoming traffic, set the Source Interface to WAN and the Dest Interface to LAN. To control outgoing traffic, set the Source Interface to LAN and the Dest Interface to WAN.
IP Address Range – Enter the IP Address Range for both the Source Interface and the Dest Interface. These IP Address Ranges will be either allowed or denied, depending on the selected action.
Protocol – Select a Protocol from the drop-down menu. The Protocol that is selected will be either allowed or denied, depending on the selected action.
Port Range – Enter a Port Range. The Port Range that is entered will be either allowed or denied, depending on the selected action.

## Advanced Wireless

Advanced Wireless

The options on this page should be changed by advanced users or if you are instructed to by one of our support personnel, as they can negatively affect the performance of your router if configured improperly.

802.11b/g/n fixed Tx rate –If you would like to define the Tx rate for each wireless standard, select Fixed and then choose the Tx rate using the dropdown menus.By default this option is set to Auto.

Beacon Interval – Beacons are packets sent by an Access Point to synchronize a wireless network. Specify a Beacon interval value between 20 and 1000. The default value is set to 100 milliseconds.

RTS Threshold – This value should remain at its default setting of 2346. If you encounter inconsistent data flow, only minor modifications to the value range between 1 and 2346 are recommended. The default value for RTS Threshold is set to 2346.

DTIM Interval – Enter a value between 1 and 5 for the Delivery Traffic Indication Message (DTIM). A DTIM is a countdown informing clients of the next window for listening to broadcast and multicast messages. When the Access Point has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. AP clients hear the beacons and awaken to receive the broadcast and multicast messages. The default value for DTIM interval is set to 1.

Preamble Type – The Preamble Type defines the length of the CRC (Cyclic Redundancy Check) block for communication between the Access Point and roaming wireless adapters. Make sure to select the appropriate preamble type and click the Save Settings button.

Note: High network traffic areas should use Short Preamble. CRC is a common technique for detecting data transmission errors.

## Advanced Network

Advanced Network

This section contains settings that can change the way the router handles certain types of traffic. We recommend that you not change any of these settings unless you are already familiar with them or have been instructed to change them by one of our support personnel.

UPnP
UPnP is short for Universal Plug and Play, which is a networking architecture that provides compatibility among networking equipment, software, and peripherals. The DIR-330 is an UPnP enabled router, meaning it will work with other UPnP devices/software. If you do not want to use the UPnP functionality, it can be disabled by unchecking the option.

WAN Ping
When you Enable WAN Ping respond, you are causing the public WAN (Wide Area Network) IP address on the device to respond to ping commands sent by Internet users. Pinging public WAN IP addresses is a common method used by hackers to test whether your WAN IP address is valid.

WAN Port Speed
This allows you to select the speed of the WAN interface of the DIR-330: Choose 10Mbps, 100Mbps, or Auto 10/100Mbps.

## Routing

Routing Routing Settings allow you to define static routes for the WAN types Static IP, Dynamic IP, Russian PPPoE and Russian PPTP with ISPs that require such setup. Static Routing Rules For each rule, enter a Destination address, Subnet Mask, Gateway and Metric. Choose either WAN or WAN_Physical in the Interface drop down menu. Up to 50 rules can be applied.

## Certificates

Certificates Certificates are used with an IPSec based VPN, such as that of the DIR-330. A Certificate Authority(CA) file provides greater security for your router. To configure the Certificates Settings, first choose a certificate type from the drop down menu. Choose "Local Certificate & Private Key" to configure certificates on your computer that are used to access other sites through a VPN tunnel. Choose "Certificate of Remote Peers" to configure the certificates that are used by other computers that require access to your router. Choose "Certificate Authorities" to add an CA file to be used on your router.

## User Group

User Group The User Settings section of the Advanced menu allows you to create groups of users that can access your router with a user name and password. First, select a group from the Authentication database list and click the Edit button. A list of 25 potential users will then be listed. The Group Name can be changed. Enter the User Name and Password for the users in each group. Click Save Settings after you have finished entering the user names and passwords for each page.

Copyright © 2004-2005 D-Link Systems, Inc.