D Link IR825G1 Users Manual

Version 7.00 | 08/15/2016
User Manual
AC1200 Wi-Fi Gigabit Router
DIR-825

Preface

D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any person or organization of such revisions or changes.

Manual Revisions

Revision Date Description
7.00 August 15, 2016 • Initial release for Revision G1
D-Link and the D-Link logo are trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States or other countries. All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies.
Internet Explorer®, Windows® and the Windows logo are trademarks of the Microsoft group of companies.
Copyright © 2016 by D-Link Corporation, Inc.
All rights reserved. This publication may not be reproduced, in whole or in part, without prior expressed written permission from D-Link Corporation, Inc.
The purpose of this product is to create a constant network connection for your devices. As such, it does not have a standby mode or use a power management mode. If you wish to power down this product, please simply unplug it from the power outlet.

Power Usage

This device is an Energy Related Product (ErP) with High Network Availability (HiNA), and automatically switches to a power-saving Network Standby mode within 1 minute of no packets being transmitted. It can also be turned o through a power switch to save energy when it is not needed.
Network Standby: 2.95 watts Switched O: 0.12 watts
iD-Link DIR-825 User Manual
Table of Contents
Table of Contents
Preface ................................................................................. i
Manual Revisions ........................................................................... i
Trademarks ...................................................................................... i
Power Usage .................................................................................... i
Package Contents .............................................................. 1
System Requirements ................................................................. 2
Introduction ................................................................................... 3
Features ............................................................................................4
Hardware Overview ..................................................................... 5
Connections ........................................................................... 5
LEDs ........................................................................................... 6
Installation ......................................................................... 7
Before you Begin ...........................................................................7
Wireless Installation Considerations ......................................8
Manual Setup ................................................................................. 9
Conguration ................................................................... 11
Quick Setup Wizard ....................................................................12
Web-based Conguration Utility ..........................................18
Internet Connection Setup .............................................19
Internet Connection Setup Wizard ...............................20
Internet (Manual) ................................................................26
Static (assigned by ISP) ................................................28
PPPoE (DSL) ......................................................................29
PPTP ....................................................................................31
L2TP ....................................................................................33
DS-Lite ...............................................................................35
Wireless connection setup wizard ................................36
Wi-Fi Protected Setup Wizard .........................................39
Manual wireless network setup .....................................40
Wireless Security .................................................................49
What is WPA? ...................................................................49
Network Settings ................................................................50
Router Settings ...............................................................50
DHCP Server Settings ................................................... 51
DHCP Reservation .........................................................53
IPv6 ..........................................................................................54
IPv6 Internet Connection Setup Wizard ................56
IPv6 Manual Setup.........................................................61
Advanced ...............................................................................71
Virtual Server ................................................................... 71
Port Forwarding .............................................................72
Application Rules ...........................................................73
QoS Engine .......................................................................74
Network Filters ................................................................76
Inbound Filters ................................................................77
Access Control .................................................................78
Website Filters .................................................................81
Firewall Settings .............................................................82
Routing ..............................................................................84
Advanced Wireless ........................................................85
Wi-Fi Protected Setup (WPS) .....................................86
iiD-Link DIR-825 User Manual
Table of Contents
Advanced Network Settings ......................................88
Guest Zone .......................................................................89
IPv6 Firewall .....................................................................90
IPv6 Routing ....................................................................91
Tools ........................................................................................92
Admin.................................................................................92
Time ....................................................................................94
SysLog ................................................................................95
Email Settings..................................................................96
System ...............................................................................97
Firmware ...........................................................................98
Language Pack ................................................................98
Dynamic DNS ..................................................................99
System Check ............................................................... 100
Schedules ...................................................................... 101
Status ................................................................................... 102
Device Info .................................................................... 102
Logs..................................................................................103
Statistics ......................................................................... 104
WPA/WPA2 ......................................................................... 112
Windows® 7 ................................................................................114
WPA/WPA2 ......................................................................... 114
WPS ....................................................................................... 117
Windows Vista® .........................................................................121
WPA/WPA2 ......................................................................... 122
WPS/WCN 2.0 .................................................................... 124
Windows® XP .............................................................................125
WPA/WPA2 ......................................................................... 126
Troubleshooting ............................................................128
Wireless Basics ...............................................................132
What is Wireless? ...................................................................... 133
Tips ................................................................................................ 135
Wireless Modes .........................................................................136
Networking Basics .........................................................137
Check your IP address ............................................................ 137
Statically Assign an IP address ............................................ 138
Internet Sessions ......................................................... 105
Wireless...........................................................................106
Routing ........................................................................... 107
IPv6 .................................................................................. 108
IPV6 Routing ................................................................. 109
Support ............................................................................... 110
Connect a Wireless Client to your Router ....................111
WPS Button ................................................................................ 111
Windows® 8 ................................................................................112
Technical Specications ................................................ 139
Regulatory Information ................................................140
iiiD-Link DIR-825 User Manual
Section 1 - Product Overview
DIR-825 AC1200 Wi-Fi Gigabit Router
Power Adapter
Ethernet Cable

Package Contents

Wi-Fi Conguration Card
Quick Install Guide
If any of the above items are missing, please contact your reseller.
Note: Using a power supply with a dierent voltage rating than the one included with the DIR-825 will cause damage and void the warranty for this product.
1D-Link DIR-825 User Manual
Section 1 - Product Overview
Network Requirements
Utility Requirements

System Requirements

An Ethernet-based cable or DSL modem
• IEEE 802.11ac, 802.11a, 802.11n, 802.11g or 802.11b wireless clients
• 10/100/1000 Ethernet
Computer with the following:
Windows®, Macintosh, or Linux-based operating system
An installed Ethernet adapter
Browser Requirements:
Internet Explorer 7 or higher
Firefox 3.5 or higher
Safari 4 or higher
• Chrome 8 or higher
Windows
installed. Visit www.java.com to download the latest version.
®
Users: Make sure you have the latest version of Java
2D-Link DIR-825 User Manual
Section 1 - Product Overview

Introduction

The D-Link DIR-825 is a IEEE 802.11ac compliant device that delivers up to 3 times faster speeds than 802.11n while staying backward compatible with 802.11a/g/b devices. Connect the DIR-825 to a cable or DSL modem and provide high-speed Internet access to multiple computers, game consoles, and media players. Create a secure wireless network to share photos, les, music, videos, printers, and network storage. Powered by the 802.11ac technology and equipped with an external antenna, this router provides great wireless coverage for larger homes and oces, or for users running bandwidth-intensive applications. The DIR-825 also includes a 4-port Giga Fast Ethernet switch that connects wired devices for enjoying lag-free network gaming and faster le transfers.
With some routers, all wired and wireless trac, including VoIP, video streaming, online gaming, and web browsing are mixed together into a single data stream. By handling data this way, applications like video streaming could pause or delay. With the D-Link Intelligent QoS Technology, wired and wireless trac are analyzed and separated into multiple data streams.
The DIR-825 supports the latest wireless security features to help prevent unauthorized access, be it from over a wireless network or the Internet. Support for WPA and WPA2 standards ensure that you will be able to use the best possible encryption regardless of your client devices. In addition, this router utilizes dual active rewalls (SPI and NAT) to prevent potential attacks from across the Internet for the ideal centerpiece for your wireless network in the home or oce.
3D-Link DIR-825 User Manual
Section 1 - Product Overview
• Ultimate Fast Wireless Networking - The DIR-825 provides up to 300 Mbps wireless connection in the
2.4 GHz band, and 867 Mbps wireless connection in the 5 GHz band with other draft 802.11ac and 802.11n wireless clients. This capability allows users to participate in real-time activities online, such as video streaming, online gaming, and real-time audio. The performance of this 802.11ac wireless router gives you the freedom of wireless networking at speeds 3x faster than 802.11n.
• Compatible with 802.11a/g/n Devices - The DIR-825 is still fully compatible with the IEEE 802.11a, 802.11g and 802.11n, so it can connect with existing 802.11a, 802.11g and 802.11n PCI, USB, and CardBus adapters.
• Advanced Firewall Features - The Web-based user interface displays a number of advanced network management features including:
Content Filtering - Easily applied content ltering based on MAC address, URL, and/or domain name.

Features

Filter Scheduling - These lters can be scheduled to be active on certain days or for a duration of hours or minutes.
Secure Multiple/Concurrent Sessions - The DIR-825 can pass through VPN sessions. It supports multiple and concurrent IPSec and PPTP sessions, so users behind the DIR-825 can securely access corporate networks.
• User-friendly Setup Wizard - Through its easy-to-use web-based user interface, the DIR-825 lets you control what information is accessible to those on the wireless network, whether from the Internet or from your company’s server. Congure your router to your specic settings within minutes.
* Maximum wireless signal rate derived from IEEE Standard 802.11a, 802.11g, 802.11n and draft 802.11ac specications. Actual data throughput will vary. Network conditions and environmental factors, including volume of network trac, building materials and construction, and network overhead, lower actual data throughput rate. Environmental conditions will adversely aect wireless signal range.
4D-Link DIR-825 User Manual
Section 1 - Product Overview

Hardware Overview

Connections

1
2 3 45 7 6
1 USB Port
2 WPS Button Press to start the WPS process. The Internet LED will start to blink.
3 LAN Ports (1-4) Connect 10/100/1000 Ethernet devices such as computers, switches, storage (NAS) devices and game consoles.
4 Internet Port Using an Ethernet cable, connect your broadband modem to this port.
5 WiFi Button Insert a paperclip in the hole and wait for 10 seconds to reset the router to default settings.
6 Power Button
7 Power Receptor Receptor for the supplied power adapter.
5D-Link DIR-825 User Manual
Section 1 - Product Overview
Hardware Overview

LEDs

2
1
4
3
1 Power LED
2 Internet LED A solid light indicates connection on the Internet port.
3 Wi-Fi LED A green light indicates that Wi-Fi is active and available.
4 LAN Port LED A solid green light indicates that an Ethernet connection is established.
A solid green light indicates a proper connection to the power supply. The light will blink green during the WPS process.
6D-Link DIR-825 User Manual
Section 2 - Installation

Installation

This section will walk you through the installation process. Placement of the router is very important. Do not place the router in an enclosed area such as a closet, cabinet, or in the attic or garage.

Before you Begin

• Please congure the router with the computer that was last connected directly to your modem.
• You can only use the Ethernet port on your modem. If you were using the USB connection before using the router, then you must turn o your modem, disconnect the USB cable and connect an Ethernet cable to the Internet port on the router, and then turn the modem back on. In some cases, you may need to call your ISP to change connection types (USB to Ethernet).
• If you have DSL and are connecting via PPPoE, make sure you disable or uninstall any PPPoE software such as WinPoET, BroadJump, or EnterNet 300 from your computer or you will not be able to connect to the Internet.
7D-Link DIR-825 User Manual
Section 2 - Installation

Wireless Installation Considerations

The D-Link wireless router lets you access your network using a wireless connection from virtually anywhere within the operating range of your wireless network. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to follow these basic guidelines:
1. Keep the number of walls and ceilings between the D-Link router and other network devices to a minimum -
each wall or ceiling can reduce your adapter’s range from 3-90 feet (1-30 meters.) Position your devices so that the number of walls or ceilings is minimized.
2. Be aware of the direct line between network devices. A wall that is 1.5 feet thick (.5 meters), at a 45-degree angle
appears to be almost 3 feet (1 meter) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick! Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better reception.
3. Building materials make a dierence. A solid metal door or aluminum studs may have a negative eect on range.
Try to position access points, wireless routers, and computers so that the signal passes through drywall or open doorways. Materials and objects such as glass, steel, metal, walls with insulation, water (sh tanks), mirrors, le cabinets, brick, and concrete will degrade your wireless signal.
4. Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate RF
noise.
5. If you are using 2.4 GHz cordless phones or X-10 (wireless products such as ceiling fans, lights, and home security
systems), your wireless connection may degrade dramatically or drop completely. Make sure your 2.4 GHz phone base is as far away from your wireless devices as possible. The base transmits a signal even if the phone in not in use.
8D-Link DIR-825 User Manual
Section 2 - Installation

Manual Setup

1. Turn o and unplug your cable or DSL broadband modem. This is required.
Modem
2. Position your router close to your modem and a computer. Place the router in an open area of your intended
work area for better wireless coverage.
3. Unplug the Ethernet cable from your modem (or existing router if upgrading) that is connected to your computer.
Plug it into the LAN port labeled 1 on the back of your router. The router is now connected to your computer.
Computer
DIR-825
9D-Link DIR-825 User Manual
Section 2 - Installation
4. Plug one end of the included blue Ethernet cable that came with your router into the yellow port labeled
INTERNET on the back of the router. Plug the other end of this cable into the Ethernet port on your modem.
Computer
DIR-825
Modem
INTERNET
5. Reconnect the power adapter to your cable or DSL broadband modem and wait for two minutes.
6. Connect the supplied power adapter into the power port on the back of the router and then plug it into a power
outlet or surge protector. Press the power button and verify that the power LED is lit. Allow 1 minute for the router to boot up.
Computer
DIR-825
Modem
INTERNET
7. If you are connecting to a broadband service that uses a dynamic connection (not PPPoE), you may be online
already. Try opening a web browser and enter a web site. If a solid light indicates connection on the Internet port and the router can connect to the Internet.
10D-Link DIR-825 User Manual
Section 3 - Conguration
Conguration
There are several dierent ways you can congure your router to connect to the Internet and connect to your clients:
D-Link Setup Wizard - This wizard will launch when you log into the router for the rst time. Refer to page 12.
Manual Setup - Log into the router and manually congure your router (advanced users only). Refer to page 19.
11D-Link DIR-825 User Manual
Section 3 - Conguration

Quick Setup Wizard

If this is your first time installing the router, open your web browser. You will automatically be directed to the
Wizard Setup Screen. If not, enter “http://dlinkrouter or http://dlinkrouter.local. in the address bar”. Then, press Enter.
If you have already congured your settings and you would like to access the conguration utility, please refer to page 18.
If this is your rst time logging into the router, this wizard will start automatically.
This wizard is designed to guide you through a step-by-step process to congure your new D-Link router and connect to the Internet.
Click Next to continue.
Please wait while your router detects your internet connection type. If the router detects your Internet connection, you may need to enter your ISP information such as username and password.
12D-Link DIR-825 User Manual
Section 3 - Conguration
If the router does not detect a valid Ethernet connection from the Internet port, this screen will appear. Connect your broadband modem to the Internet port and then click Try Again.
If the router detects an Ethernet connection but does not detect the type of Internet connection you have, this screen will appear. Click Guide me through the Internet Connection Settings to display a list of connection types to choose from.
Select your Internet connection type and click Next to continue.
13D-Link DIR-825 User Manual
Section 3 - Conguration
If the router detected or you selected PPPoE, enter your PPPoE username and password and click Next to continue.
Note: Make sure to remove your PPPoE software from your computer. The software is no longer needed and will not work through a router.
If the router detected or you selected PPTP, enter your PPTP username, password, and other information supplied by your ISP. Click Next to continue.
If the router detected or you selected L2TP, enter your L2TP username, password, and other information supplied by your ISP. Click Next to continue.
14D-Link DIR-825 User Manual
Section 3 - Conguration
If the router detected or you selected Static, enter the IP and DNS settings supplied by your ISP. Click Next to continue.
For both the 2.4 GHz and 5 GHz segments, create a Wi-Fi network name (SSID) using up to 32 characters.
Create a Wi-Fi password (between 8-63 characters). Your wireless clients will need to have this passphrase or key entered to be able to connect to your wireless network.
Click Next to continue.
In order to secure your router, please enter a new password. Check the Enable Graphical Authentication box to enable CAPTCHA authentication for added security. Click Next to continue.
15D-Link DIR-825 User Manual
Section 3 - Conguration
Select your time zone from the drop-down menu and click Next to continue.
The Setup Complete window will display your Wi-Fi settings. Click Next to continue.
If you want to create a bookmark to the router, click OK. Click Cancel if you do not want to create a bookmark.
If you clicked Yes , a window may appear (depending on what web browser you are using) to create a bookmark.
16D-Link DIR-825 User Manual
Section 3 - Conguration
To use the mydlink service (mydlink.com or the mydlink Lite app), you must have an account. Select if you do have a mydlink account or if you need to create one. Click Next to continue.
If you do not want to register at this time, click Cancel.
If you clicked Yes , enter your mydlink account name (email address) and password. Click Login to register your router.
If you clicked No, ll out the requested information and click Sign Up to create your mydlink account.
17D-Link DIR-825 User Manual
Section 3 - Conguration
Web-based Conguration Utility
To access the conguration utility, open a web-browser such as Internet Explorer and enter address of the router (http://dlinkrouter.local. or http://192.168.0.1).
Leave the password blank by default.
18D-Link DIR-825 User Manual
Section 3 - Conguration

Internet Connection Setup

Click Manual Internet Connection Setup to congure your connection manually and continue to the next page.
If you want to congure your router to connect to the Internet using the wizard, click Internet Connection Setup Wizard. You will be directed to the Quick Setup Wizard.
19D-Link DIR-825 User Manual
Section 3 - Conguration

Internet Connection Setup Wizard

When conguring the router for the rst time, we recommend that you click use the Internet Connection Setup Wizard, and follow the instructions on the screen. This wizard is designed to assist the user with a quick and easy method to congure the Internet connection on this router.
Anytime during the Internet Connection Setup Wizard, the user can click on the Cancel button to discard any changes made and return to the main Internet page. Also the user can click on the Prev button, to return to the previous window for re­conguration.
Welcome:
This wizard will guide you through a step-by-step process to congure your new D-Link router and connect to the Internet. Click Next to continue.
Step 1: Set Your Password
By default, the D-Link Router does not have a password congured for administrator access to the Web-based conguration pages. To secure your new networking device, please enter and verify a password in the spaces provided. The two passwords must match.
Click Next to continue.
20D-Link DIR-825 User Manual
Section 3 - Conguration
Step 2: Select Your Time Zone
Select the appropriate time zone for your location. This information is required to congure the time-based options for the router.
Click Next to continue.
Step 3: Internet Connection
Here the user will be able to congure the Internet connection used by this device. If your ISP connection is listed in the drop-down menu select it and click Next. If your ISP connection is not listed then you can proceed to select any of the other manual Internet connection meth­ods listed below.
The following parameters will be available for conguration:
Dynamic IP Address: Choose this if your Internet connection
automatically provides you with an IP Ad­dress. Most cable modems use this type of connection.
PPPoE: Choose this option if your Internet con-
nection requires a PPPoE username and password to get online. Most DSL mo­dems use this type of connection.
PPTP: Choose this option if your Internet con-
nection requires a PPTP username and password to get online.
L2TP: Choose this option if your Internet con-
nection requires an L2TP username and password to get online.
Static IP Address: Choose this option if your ISP provided
you with IP Address information that has to be manually congured.
21D-Link DIR-825 User Manual
Section 3 - Conguration
Step 3: Internet Connection (Dynamic IP Address)
After selecting the dynamic IP address Internet connection method, the following page will appear.
The following parameters will be available for conguration:
MAC Address: Enter the MAC address of the Internet
gateway (plugged into the Internet port of this device) here.
Clone Button: If the conguration PC also acts as the Internet
gateway, then click on the Clone Your PC’s MAC Address button to copy the PC’s MAC
address into the space provided. If you’re not sure, leave the MAC address eld blank.
Host Name: Enter the host name used here. You may also
need to provide a host name. If you do not have or know this information, please contact your ISP.
Primary DNS Address: Enter the primary DNS IP address used here.
Secondary DNS Address: Enter the secondary DNS IP address used here.
This eld is normally optional. Only one DNS address is required for a functional Internet connection, but using a second DNS address provides more stability.
Click Next to continue.
Step 3: Internet Connection (PPPoE)
After selecting the PPPoE Internet connection method, the following page will appear:
The following parameters will be available for conguration:
User Name: Enter the PPPoE account user name used here.
This information is given by the ISP.
Password: Enter the PPPoE account password used here.
This information is given by the ISP.
Click Next to continue.
22D-Link DIR-825 User Manual
Section 3 - Conguration
Step 3: Internet Connection (PPTP)
After selecting the PPTP Internet connection method, the following page will appear:
The following parameters will be available for conguration:
Address Mode: Here the user can specify whether this
Internet connection requires the use of a Dynamic or Static IP address. PPTP usual requires a Dynamic IP conguration.
PPTP IP Address: Enter the PPTP IP address used here. This
option is only available if Static IP is se­lected.
PPTP Subnet Mask: Enter the PPTP Subnet Mask used here.
PPTP Gateway IP Address: Enter the PPTP Gateway IP address used
here.
PPTP Server IP Address: Enter the PPTP Server IP address used
here. This is normally the same a the PPTP Gateway IP address.
User Name: Enter the PPTP username used here.
Password: Enter the PPTP password used here.
Verify Password: Re-enter the PPTP password used here.
Primary DNS Address: Enter the Primary DNS IP address used
here.
Secondary DNS Address: Enter the Secondary DNS IP address used
here. This eld is normally optional. Only one DNS address is required for a functional Internet connection, but using a second DNS address provides more stability.
Click Next to continue.
23D-Link DIR-825 User Manual
Section 3 - Conguration
Step 3: Internet Connection (L2TP)
After selecting the L2TP Internet connection method, the following page will appear:
The following parameters will be available for conguration:
Address Mode: Here the user can specify whether this
Internet connection requires the use of a Dynamic or Static IP address. L2TP usual requires a Dynamic IP conguration.
L2TP IP Address: Enter the L2TP IP address used here. This
option is only available if Static IP is selected.
L2TP Subnet Mask: Enter the L2TP Subnet Mask used here.
L2TP Gateway IP Address: Enter the L2TP Gateway IP address used
here.
L2TP Server IP Address: Enter the L2TP Server IP address used
here. This is normally the same a the L2TP Gateway IP address.
User Name: Enter the L2TP username used here.
Password: Enter the L2TP password used here.
Verify Password: Re-enter the L2TP password used here.
Primary DNS Address: Enter the Primary DNS IP address used
here.
Secondary DNS Address: Enter the Secondary DNS IP address used
here. This eld is normally optional. Only one DNS address is required for a functional Internet connection, but using a second DNS address provides more stability.
Click Next to continue.
24D-Link DIR-825 User Manual
Section 3 - Conguration
Step 3: Internet Connection (Static IP Address)
After selecting the Static IP Address Internet connection method, the following page will appear:
The following parameters will be available for conguration:
IP Address: Enter the Static IP address provided by the
ISP here.
Subnet Mask: Enter the Subnet Mask provided by the ISP
here.
Gateway Address: Enter the Gateway IP address provided by
the ISP here.
Primary DNS Address: Enter the Primary DNS IP address used
here.
Secondary DNS Address: Enter the Secondary DNS IP address used
here. This eld is normally optional. Only one DNS address is required for a functional Internet connection, but using a second DNS address provides more stability.
Click Next to continue.
Setup Complete!
This is the last page of the Internet Connection Setup Wizard.
Click the Connect button to save your settings.
25D-Link DIR-825 User Manual
Section 3 - Conguration

Internet (Manual)

On this page the user can congure the Internet Connection settings manually. To access the Manual Internet Connection Setup page, click on the Manual Internet Connection Setup button. On this page there a multiple parameters that can be congured regarding the Internet Con­nection setup. We’ll discuss them from top to bottom.
At any given point the user can save the conguration done, on this page, by clicking on the Save Settings button. If you choose to discard the changes made, click on the Don’t Save Settings button.
26D-Link DIR-825 User Manual
Section 3 - Conguration
Internet Connection Type
In this section, the user can select from a list of Internet Connection types that can be congured and used on this router. Options to choose from are Static IP, Dynamic IP, PPPoE, PPTP, L2TP, and DS-Lite.
After selecting a specic Internet Connection type, this page will automatically refresh and provide unique elds to congure related to the specied Internet Connection type.
My Internet Connection is: Dynamic IP (DHCP)
The default WAN conguration for this router is Dynamic IP (DHCP). This option allows the router to obtain an IP address automatically from the device that is connected to the Internet port.
Note: If you’re not sure about the type of Internet Connection you have, please contact your Internet Service Provider (ISP) for assistance.
After selecting Dynamic IP, the following parameters will be available for conguration:
Host Name: The Host Name is optional but may be
required by some ISPs. Leave blank if you are not sure.
Use Unicasting: Tick this option if you ISP uses the unicast
method to provide IP addresses.
Primary DNS: Enter the Primary DNS IP address used
here.
Secondary DNS: Enter the Secondary DNS IP address used
here. This eld is normally optional. Only one DNS address is required for a functional Internet connection, but using a second DNS address provides more stability.
MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP.
1500 is the default MTU.
MAC Address: The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It
is not recommended that you change the default MAC address unless required by your ISP. You can use the Clone Your PC’s MAC Address button to replace the Internet port’s MAC address with the MAC address of your Ethernet
card.
27D-Link DIR-825 User Manual
Section 3 - Conguration
Manual Internet Setup
Static (assigned by ISP)
Select Static IP Address if all the Internet port’s IP information is provided to you by your ISP. You will need to enter in the IP address, subnet mask, gateway address, and DNS address(es) provided to you by your ISP. Each IP address entered in the elds must be in the appropriate IP form, which are four octets separated by a dot (x.x.x.x). The Router will not accept the IP address if it is not in this format.
My Internet Connection:
IP Address:
Subnet Mask:
Default Gateway:
DNS Servers:
MTU:
MAC Address:
Select Static IP to manually enter the IP settings supplied by your ISP.
Enter the IP address assigned by your ISP.
Enter the Subnet Mask assigned by your ISP.
Enter the Gateway assigned by your ISP.
The DNS server information will be supplied by your ISP (Internet Service Provider.)
Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1500 is the default MTU.
The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It is not recommended that you change the default MAC address unless required by your ISP. You can use the Clone Your PC’s MAC Address button to replace the Internet port’s MAC address with the MAC address of your Ethernet card.
28D-Link DIR-825 User Manual
Section 3 - Conguration
Internet Setup
PPPoE (DSL)
Choose PPPoE (Point to Point Protocol over Ethernet) if your ISP uses a PPPoE connection. Your ISP will provide you with a username and password. This option is typically used for DSL services. Make sure to remove your PPPoE software from your computer. The software is no longer needed and will not work through a router.
My Internet
Connection:
Address Mode:
IP Address:
Username:
Password:
Verify Password:
Service Name:
Select PPPoE (Username/Password) from the drop-down menu.
Here the user can specify whether this Internet connection requires the use of a Dynamic or Static IP address. PPPoE usually requires a Dynamic IP conguration.
Enter the PPPoE IP address used here. This option is only available if Static IP is selected.
Enter the PPPoE account user name used here. This information is given by the ISP.
Enter the PPPoE account password used here. This information is given by the ISP.
Re-enter the PPPoE account password used here.
This optional eld enables the user to enter a service name to identify this Internet connection here.
Reconnect Mode:
To create a new schedule, click the New Schedule button to open the Schedules page. Schedules will be discussed later.
Use the radio buttons to specify the reconnect mode. The user can specify a custom schedule or specify the On Demand, or Manual option. To specify a custom schedule, use the drop-down menu to select one of the schedules that has been dened in the Schedules page.
29D-Link DIR-825 User Manual
Section 3 - Conguration
Maximum Idle Time: Enter a maximum idle time during which the Internet connection is maintained during inactivity.
DNS Mode: This option allow the router to obtain the DNS IP addresses from the ISP, when Receive DNS from ISP is selected,
or allows the user to enter DNS IP address manually, when Enter DNS Manually is selected.
Primary DNS Server: Enter the Primary DNS IP address used here.
Secondary DNS Server: Enter the Secondary DNS IP address used here. This eld is normally optional. Only one DNS address is required for
a functional Internet connection, but using a second DNS address provides more stability.
MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP.
1492 is the default MTU.
MAC Address: The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It
is not recommended that you change the default MAC address unless required by your ISP. You can use the Clone Your PC’s MAC Address button to replace the Internet port’s MAC address with the MAC address of your Ethernet card.
30D-Link DIR-825 User Manual
Section 3 - Conguration
Internet Setup
PPTP
Choose PPTP (Point-to-Point-Tunneling Protocol ) if your ISP uses a PPTP connection. Your ISP will provide you with a username and password. This option is typically used for DSL services.
My Internet Connection: Select PPTP (Username/Password) from the
drop-down menu.
Address Mode: Here the user can specify whether this Internet
connection requires the use of a Dynamic or Static IP address. PPTP usually requires a Dynamic IP conguration.
PPTP IP Address: Enter the PPTP IP address used here. This option
is only available if Static IP is selected.
PPTP Subnet Mask: Enter the PPTP Subnet Mask used here.
PPTP Gateway IP Address: Enter the PPTP Gateway IP address used here.
PPTP Server IP Address: Enter the PPTP Server IP address used here. This
is normally the same a the PPTP Gateway IP address.
Username: Enter the PPTP username used here.
Password: Enter the PPTP password used here.
Verify Password: Re-enter the PPTP password used here.
Reconnect Mode: Use the radio buttons to specify the reconnect mode.
The user can specify a custom schedule or specify the On Demand, or Manual option. To specify a custom schedule, use the drop-down menu to select one of the schedules that has been dened in the Schedules page. To create a new schedule, click the New Schedule button to open the Schedules page. Schedules will be discussed later.
Maximum Idle Time: Enter a maximum idle time during which the
Internet connection is maintained during inactivity. To disable this feature, enable Auto­reconnect.
31D-Link DIR-825 User Manual
Section 3 - Conguration
Primary DNS Server: Enter the Primary DNS IP address used here.
Secondary DNS Server: Enter the Secondary DNS IP address used here. This eld is normally optional. Only one DNS address is required for
a functional Internet connection, but using a second DNS address provides more stability.
MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP.
1400 is the default MTU.
MAC Address: The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It
is not recommended that you change the default MAC address unless required by your ISP. You can use the Clone Your PC’s MAC Address button to replace the Internet port’s MAC address with the MAC address of your Ethernet card.
32D-Link DIR-825 User Manual
Section 3 - Conguration
Internet Setup
L2TP
Choose L2TP (Layer 2 Tunneling Protocol) if your ISP uses a L2TP connection. Your ISP will provide you with a username and password. This option is typically used for DSL services.
My Internet
Connection:
Address Mode: Here the user can specify whether this Internet
L2TP IP Address: Enter the L2TP IP address used here. This option is
L2TP Subnet Mask: Enter the L2TP Subnet Mask used here.
L2TP Gateway IP
Address:
L2TP Server IP
Address:
Username: Enter the L2TP username used here.
Password: Enter the L2TP password used here.
Verify Password: Re-enter the L2TP password used here.
Reconnect Mode: Use the radio buttons to specify the reconnect
Select L2TP (Username/Password) from the drop­down menu.
connection requires the use of a Dynamic or Static IP address. L2TP usual requires a Dynamic IP con­guration.
only available if Static IP is selected.
Enter the L2TP Gateway IP address used here.
Enter the L2TP Server IP address used here. This is normally the same a the L2TP Gateway IP address.
mode. The user can specify a custom schedule or specify the On Demand, or Manual option. To specify a custom schedule, use the drop-down menu to select one of the schedules that has been dened in the Schedules page. To create a new schedule, click the New Schedule button to open the Schedules page. Schedules will be discussed later.
33D-Link DIR-825 User Manual
Section 3 - Conguration
Maximum Idle Time: Enter a maximum idle time during which the Internet connection is maintained during inactivity. To disable this
feature, enable Auto-reconnect.
Primary DNS Server: Enter the Primary DNS IP address used here.
Secondary DNS Server: Enter the Secondary DNS IP address used here. This eld is normally optional. Only one DNS address is required for
a functional Internet connection, but using a second DNS address provides more stability.
MTU: Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP.
1400 is the default MTU.
MAC Address: The default MAC Address is set to the Internet port’s physical interface MAC address on the Broadband Router. It
is not recommended that you change the default MAC address unless required by your ISP. You can use the Clone Your PC’s MAC Address button to replace the Internet port’s MAC address with the MAC address of your Ethernet card.
34D-Link DIR-825 User Manual
Section 3 - Conguration
Internet Setup
DS-Lite
Another Internet connection type is DS-Lite.
DS-Lite is an IPv6 connection type. After selecting DS-Lite, the following parameters will be available for conguration:
DS-Lite Conguration: Select the DS-Lite DHCPv6 Option to let
the router allocate the AFTR IPv6 address automatically. Select the Manual Conguration to enter the AFTR IPv6 address in manually.
AFTR IPv6 Address: After selecting the Manual Conguration
option above, the user can enter the AFTR IPv6 address used here.
B4 IPv4 Address: Enter the B4 IPv4 address value used here.
WAN IPv6 Address: Once connected, the WAN IPv6 address
will be displayed here.
IPv6 WAN Default Gateway Once connected, the IPv6 WAN Default
Gateway address will be displayed here.
Click on the Save Settings button to accept the changes made. Click on the Don’t Save Settings button to discard the changes made.
35D-Link DIR-825 User Manual
Section 3 - Conguration

Wireless connection setup wizard

On this page the user can congure the Wireless settings for this device. There are 3 ways to congure Wireless using this router. Firstly, the user can choose to make use for the quick and easy Wireless Connection Setup Wizard. Secondly, the user can choose to make use Wi-Fi Protected Setup. Lastly, the user can congure the Wireless settings manually.
Wireless Settings: Wireless Connection Setup Wizard
The Wireless Connection Setup Wizard is specially designed to assist basic network users with a simple, step-by-step set of instructions to congure the wireless settings of this router. It is highly recommended to customized the wireless network settings to t into your environment and to add higher security.
To initiate the Wireless Connection Setup Wizard click on the Wireless Connection Setup Wizard button.
Step 1: In this step, the user must enter a custom Wireless Network Name or SSID. Enter the new Network Name (SSID) in the appropriate space provided. There are seperate spaces provided for a 2.4 GHz Network Name and a 5 GHz Network Name.
Secondly the user can choose between two wireless security wizard congurations. The user can select ‘Automatically assign a network key’, by which the router will automatically generate a WPA/WPA2 pre­shared key using the TKIP and AES encryption methods; or the user can select ‘Manually assign a network key’, by which the user will be prompt to manually enter a WPA/WPA2 pre-shared key using the TKIP and AES encryption methods.
Click on the Prev button to return to the previous page. Click on the Next button to continue to the next page. Click on the Cancel button to discard the changes made and return to the main wireless page.
36D-Link DIR-825 User Manual
Section 3 - Conguration
Step 2: This step will only be available if the user selected ‘Manually assign a network key’ in the previous step. Here the user can manually enter the WPA/WPA2 pre-shared key in the Wireless Security Password space provided. The key entered must be between 8 and 63 characters long. Remember, this key will be used when wireless clients want to connect to this device. So please remember this key to prevent future troubleshooting. If you want to use the same Wireless Security Password for both 2.4 GHz and 5 GHz bands, tick the option provided. If not selected, you need to input two seperate wireless security passwords for each individual wireless band.
Click on the Prev button to return to the previous page. Click on the Next button to continue to the next page. Click on the Cancel button to discard the changes made and return to the main wireless page.
Setup Complete: On this page the user can view the conguration made and verify whether they are correct.
Click on the Prev button to return to the previous page. Click on the Cancel button to discard the changes made and return to the main wireless page. Click on the Save button to accept the changes made.
37D-Link DIR-825 User Manual
Section 3 - Conguration
After click the Save button the device will save the settings made and return to the main wireless page.
End of Wizard.
38D-Link DIR-825 User Manual
Section 3 - Conguration

Wi-Fi Protected Setup Wizard

Wireless Settings: Wi-Fi Protected Setup Wizard
If your Wireless Clients support the WPS connection method, this Wi-Fi Protected Setup Wizard can be used to initiate a wireless connection between this device and Wireless clients with a simple click of the WPS button. The Wi-Fi Protected Setup Wizard is specially designed to assist basic network users with a simple, step-by-step set of instructions to connect wireless clients to this router using the WPS method.
To initiate the Wi-Fi Protected Setup Wizard click on the Add Wireless
Device with WPS button.
Step 1: In this step the user have two options to choose from. You can
choose Auto if the wireless client supports WPS, or Manual if the wireless client does not support WPS.
Click on the Prev button to return to the previous page. Click on the Next button to continue to the next page. Click on the Cancel button to discard the changes made and return to the main wireless page.
Step 2: After selecting Auto, the following page will appear. There are two ways to add a wireless device, that supports WPS. Firstly, there is the Personal Identication Number (PIN) method. Using this method will prompt the user to enter a PIN code. This PIN code should be identical on the wireless client. Secondly, there is the Push Button Conguration (PBC) method. Using this method will allow the wireless client to connect to this device by similarly pressing the PBC button on it.
Click on the Prev button to return to the previous page. Click on the Next button to continue to the next page. Click on the Cancel button to discard the changes made and return to the main wireless page.
39D-Link DIR-825 User Manual
Section 3 - Conguration
Step 2: After selecting Manual, the following page will appear. On this page to user can view the wireless conguration of this router. The wireless clients should congure their wireless settings to be identical to the settings displayed on this page for a successful connection. This option is for wireless clients that can’t use the WPS method to connect to this device.
Click on the Prev button to return to the previous page. Click on the Next button to continue to the next page. Click on the Cancel button to discard the changes made and return to the main wireless page. Click on the Wireless Status button to navigate to the Status > Wireless page to view what wireless client are connected to this device.
End of Wizard.

Manual wireless network setup

Wireless Settings: Manual Wireless Network Setup
The manual wireless network setup option allows users to congure the wireless settings of this device manually. This option is for the more advanced user and includes all parameters that can be congured for wireless connectivity.
To initiate the Manual Wireless Setup page, click on the Manual Wireless Connection Setup button.
On this page the user can congure all the parameters related to the wireless connectivity of this router.
40D-Link DIR-825 User Manual
Section 3 - Conguration
The following parameters will be available for conguration:
Wireless Band: Displays the wireless band being cong-
ured. In this option we nd that the fol­lowing parameters will be regarding the
2.4GHz band.
Enable Wireless: Check the box to enable the wireless func-
tion. If you do not want to use wireless, uncheck the box to disable all the wireless functions. Select the time frame that you would like your wireless network enabled. The schedule may be set to Always. Any schedule you create will be available in the drop-down menu. Click New Schedule to create a new schedule.
Wireless Network Name: The Service Set Identier (SSID) is the name of your wireless network. Create a name using up to 32 characters. The
SSID is case-sensitive. Enable Auto Channel
802.11 Mode: Here the user can manually select the preferred frequency band to use for this wireless network.
Enable Auto Channel Scan: The auto channel selection setting can be selected to allow this device to choose the channel with the least
amount of interference.
Wireless Channel: By default the channel is set to 1. The Channel can be changed to t the channel setting for an existing wireless
network or to customize the wireless network. If you enable Auto Channel Selection, this option will be greyed out.
Transmission Rate: Select the transmit rate. It is strongly suggested to select Best (Automatic) for best performance.
Channel Width: When using the 802.11n frequency band, the user have an option to choose between a 20 MHz or 20/40 MHz
bandwidth.
Visibility Status: The Invisible option allows you to hide your wireless network. When this option is set to Visible, your wireless
network name is broadcasted to anyone within the range of your signal. If you are not using encryption then they could connect to your network. When Invisible mode is enabled, you must enter the Wireless Network Name (SSID) on the client manually to connect to the network.
41D-Link DIR-825 User Manual
Section 3 - Conguration
By default the wireless security of this router will be disabled. In this next option the user can enabled or disable wireless security for the frequency band 2.4 GHz. There are two types of encryption that can be used. WEP or WPA/WPA2.
Wireless Security Mode: WEP
Wired Equivalent Privacy (WEP) is the most basic form of encryption that can be used for wireless networks. Even though it is known as a ‘weak’ security method, it is better than no security at all. Older wireless adapter sometimes only supports WEP encryption and thus we still nd this encryption method used today.
The following parameters will be available for conguration:
WEP Key Length: Here the user can specify to either use a
64-Bit or a 128-Bit encrypted key.
Authentication: Authentication is a process by which the
router veries the identity of a network device that is attempting to join the wire­less network. There are two types authen­tication for this device when using WEP. Open System allows all wireless devices to communicate with the router before they are required to provide the encryp­tion key needed to gain access to the network. Shared Key requires any wire­less device attempting to communicate with the router to provide the encryption key needed to access the network before they are allowed to communicate with the router.
WEP Key 1: Enter the WEP key used here. For 64-bit keys you must enter 10 hex digits into each key box. For 128-bit keys you
must enter 26 hex digits into each key box. A hex digit is either a number from 0 to 9 or a letter from A to F. You may also enter any text string into a WEP key box, in which case it will be converted into a hexadecimal key using the ASCII values of the characters. A maximum of 5 text characters can be entered for 64-bit keys, and a maximum of 13 characters for 128-bit keys.
42D-Link DIR-825 User Manual
Section 3 - Conguration
Wireless Security Mode: WPA-Personal
Wi-Fi Protected Access (WPA) is the most advanced and up to date wire­less encryption method used today. This is the recommended wireless security option. WPA supports two authentication frameworks. Personal (PSK) and Enterprise (EAP). Personal requires only the use of a pass­phrase (Shared Secret) for security.
The following parameters will be available for conguration:
WPA Mode: WPA is the older standard; select this op-
tion if the clients that will be used with the router only support the older standard. WPA2 is the newer implementation of the stronger IEEE 802.11i security standard. With the “WPA2” option, the router tries WPA2 rst, but falls back to WPA if the client only supports WPA. With the “WPA2 Only” option, the router associates only with clients that also support WPA2 secu­rity.
Cipher Type: Select the appropriate cipher type to use
here. Options to choose from are Temporal Key Integrity Protocol (TKIP), Advanced Encryption Standard (AES), and Both (TKIP
and AES).
Group Key Update Interval: Enter the amount of time before the group
key used for broadcast and multicast data is changed.
Pre-Shared Key: Enter the shared secret used here. This
secret phrase needs to be the same on all of the wireless clients for them to be able to connect to the wireless network suc­cessfully.
43D-Link DIR-825 User Manual
Section 3 - Conguration
Wireless Security Mode: WPA-Enterprise
Wi-Fi Protected Access (WPA) is the most advanced and up to date wireless encryption method used today. This is the recommended wireless security option. WPA supports two authentication frameworks. Personal (PSK) and Enterprise (EAP). Personal requires only the use of a pass-phrase (Shared Secret) for security.
The following parameters will be available for conguration:
WPA Mode: WPA is the older standard; select this option
if the clients that will be used with the router only support the older standard. WPA2 is the newer implementation of the stronger IEEE
802.11i security standard. With the “WPA2” option, the router tries WPA2 rst, but falls back to WPA if the client only supports WPA. With the “WPA2 Only” option, the router associates only with clients that also support WPA2 security.
Cipher Type: Select the appropriate cipher type to use here.
Options to choose from are Temporal Key Integrity Protocol (TKIP), Advanced Encryption Standard (AES), and Both (TKIP and AES).
Group Key Update
Interval:
RADIUS Server IP
Address:
RADIUS Server Port: When the user chooses to use the EAP authentication framework, the RADIUS server’s port number can be entered
RADIUS Server
Shared Secret:
Enter the amount of time before the group key used for broadcast and multicast data is changed.
When the user chooses to use the EAP authentication framework, the RADIUS server’s IP address can be entered here.
here. Enter the shared secret used here. This secret phrase needs to be the same on all of the wireless clients for them to
be able to connect to the wireless network successfully.
44D-Link DIR-825 User Manual
Section 3 - Conguration
The following parameters will be available for conguration:
Wireless Band: Displays the wireless band being cong-
ured. In this option we nd that the fol­lowing parameters will be regarding the 5GHz band.
Enable Wireless: Check the box to enable the wireless func-
tion. If you do not want to use wireless, uncheck the box to disable all the wireless functions. Select the time frame that you would like your wireless network enabled. The schedule may be set to Always. Any schedule you create will be available in the drop-down menu. Click New Schedule to create a new schedule.
Wireless Network Name: The Service Set Identier (SSID) is the name of your wireless network. Create a name using up to 32 characters. The
SSID is case-sensitive. Enable Auto Channel
802.11 Mode: Here the user can manually select the preferred frequency band to use for this wireless network.
Enable Auto Channel Scan: The auto channel selection setting can be selected to allow this device to choose the channel with the least
amount of interference.
Wireless Channel: By default the channel is set to 36. The Channel can be changed to t the channel setting for an existing wireless
network or to customize the wireless network. If you enable Auto Channel Selection, this option will be greyed out.
Transmission Rate: Select the transmit rate. It is strongly suggested to select Best (Automatic) for best performance.
Channel Width: When using the 802.11n frequency band, the user have an option to choose between a 20 MHz, 20/40 MHz, or
20/40/80 MHz bandwidth.
Visibility Status: The Invisible option allows you to hide your wireless network. When this option is set to Visible, your wireless
network name is broadcasted to anyone within the range of your signal. If you are not using encryption then they could connect to your network. When Invisible mode is enabled, you must enter the Wireless Network Name (SSID) on the client manually to connect to the network.
45D-Link DIR-825 User Manual
Section 3 - Conguration
By default the wireless security of this router will be disabled. In this next option the user can enabled or disable wireless security for the fre­quency band 5GHz. There are two types of encryption that can be used. WEP or WPA/WPA2.
Wireless Security Mode: WEP
Wired Equivalent Privacy (WEP) is the most basic form of encryption that can be used for wireless networks. Even though it is known as a ‘weak’ security method, it is better than no security at all. Older wireless adapter sometimes only supports WEP encryption and thus we still nd this encryption method used today.
The following parameters will be available for conguration:
WEP Key Length: Here the user can specify to either use a
64Bit or a 128Bit encrypted key.
Authentication: Authentication is a process by which the
router veries the identity of a network device that is attempting to join the wireless network. There are two types authentication for this device when using WEP. Open System allows all wireless devices to communicate with the router before they are required to provide the encryption key needed to gain access to the network. Shared Key requires any wireless device attempting to communicate with the router to provide the encryption key needed to access the network before they are allowed to communicate with the router.
WEP Key 1: Enter the WEP key used here. For 64-bit keys you must enter 10 hex digits into each key box. For 128-bit keys you
must enter 26 hex digits into each key box. A hex digit is either a number from 0 to 9 or a letter from A to F. You may also enter any text string into a WEP key box, in which case it will be converted into a hexadecimal key using the ASCII values of the characters. A maximum of 5 text characters can be entered for 64-bit keys, and a maximum of 13 characters for 128-bit keys.
46D-Link DIR-825 User Manual
Section 3 - Conguration
Wireless Security Mode: WPA-Personal
Wi-Fi Protected Access (WPA) is the most advanced and up to date wireless encryption method used today. This is the recommended wireless security option. WPA supports two authentication frameworks. Personal (PSK) and Enterprise (EAP).
The following parameters will be available for conguration:
WPA Mode: WPA is the older standard; select this
option if the clients that will be used with the router only support the older standard. WPA2 is the newer implementation of the stronger IEEE
802.11i security standard. With the “WPA2” option, the router tries WPA2 rst, but falls back to WPA if the client only supports WPA. With the “WPA2 Only” option, the router associates only with clients that also support WPA2 security.
Cipher Type: Select the appropriate cipher type to use
here. Options to choose from are Temporal Key Integrity Protocol (TKIP), Advanced Encryption Standard (AES), and Both (TKIP
and AES).
Group Key Update Interval: Enter the amount of time before the group
key used for broadcast and multicast data is changed.
Pre-Shared Key: Enter the shared secret used here. This secret phrase needs to be the same on all of the wireless clients for them to
be able to connect to the wireless network successfully.
47D-Link DIR-825 User Manual
Section 3 - Conguration
Wireless Security Mode: WPA-Enterprise
Wi-Fi Protected Access (WPA) is the most advanced and up to date wireless encryption method used today. This is the recommended wireless security option. WPA supports two authentication frameworks. Personal (PSK) and Enterprise (EAP).
The following parameters will be available for conguration:
WPA Mode: WPA is the older standard; select this op-
tion if the clients that will be used with the router only support the older standard. WPA2 is the newer implementation of the stronger IEEE 802.11i security standard. With the “WPA2” option, the router tries WPA2 rst, but falls back to WPA if the client only supports WPA. With the “WPA2 Only” option, the router associates only with clients that also support WPA2 secu­rity.
Cipher Type: Select the appropriate cipher type to use
here. Options to choose from are Temporal Key Integrity Protocol (TKIP), Advanced Encryption Standard (AES), and Both (TKIP
and AES).
Group Key Update Interval: Enter the amount of time before the group
key used for broadcast and multicast data is changed.
RADIUS Server IP Address: When the user chooses to use the EAP
authentication framework, the RADIUS server’s IP address can be entered here.
RADIUS Server Port: When the user chooses to use the EAP authentication framework, the RADIUS server’s port number can be entered
here.
RADIUS Server Shared
Secret:
Enter the shared secret used here. This secret phrase needs to be the same on all of the wireless clients for them to be able to connect to the wireless network successfully.
48D-Link DIR-825 User Manual
Section 3 - Conguration

Wireless Security

This section will show you the dierent levels of security you can use to protect your data from intruders. The DIR-825 oers the following types of security:
• WPA2 (Wi-Fi Protected Access 2) • WPA2-PSK (Pre-Shared Key)
• WPA (Wi-Fi Protected Access) • WPA-PSK (Pre-Shared Key)
What is WPA?
WPA (Wi-Fi Protected Access), is a Wi-Fi standard that was designed to improve the security features of WEP (Wired Equivalent Privacy).
The 2 major improvements over WEP:
• Improved data encryption through the Temporal Key Integrity Protocol (TKIP). TKIP scrambles the keys using a hashing algorithm and, by adding an integrity-checking feature, ensures that the keys haven’t been tampered with. WPA2 is based on 802.11i and uses Advanced Encryption Standard (AES) instead of TKIP.
• User authentication, which is generally missing in WEP, through the extensible authentication protocol (EAP). WEP regulates access to a wireless network based on a computer’s hardware-specic MAC address, which is relatively simple to be snied out and stolen. EAP is built on a more secure public-key encryption system to ensure that only authorized network users can access the network.
WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wireless connection. The key is an alpha-numeric password between 8 and 63 characters long. The password can include symbols (!?*&_) and spaces. This key must be the exact same key entered on your wireless router or access point.
WPA/WPA2 incorporates user authentication through the Extensible Authentication Protocol (EAP). EAP is built on a more secure public key encryption system to ensure that only authorized network users can access the network.
49D-Link DIR-825 User Manual
Section 3 - Conguration

Network Settings

This section will allow you to change the local network settings of the router and to congure the DHCP settings.
Router Settings
Router IP Address:
Subnet Mask:
Device Name:
Local Domain:
Enable DNS Relay:
Enter the IP address of the router. The default IP address is 192.168.0.1.
If you change the IP address, once you click Save Settings, you will need to enter the new IP address in your browser to get back into the conguration utility.
Enter the Subnet Mask. The default subnet mask is
255.255.255.0.
Enter a name for the router.
Enter the Domain name (Optional).
Uncheck the box to transfer the DNS server information from your ISP to your computers. If checked, your computers will use the router for a DNS server.
50D-Link DIR-825 User Manual
Section 3 - Conguration
DHCP Server Settings
DHCP stands for Dynamic Host Control Protocol. The DIR-825 has a built-in DHCP server. The DHCP Server will automatically assign an IP address to the computers on the LAN/private network. Be sure to set your computers to be DHCP clients by setting their TCP/IP settings to “Obtain an IP Address Automatically.” When you turn your computers on, they will automatically load the proper TCP/IP settings provided by the DIR-825. The DHCP Server will automatically allocate an unused IP address from the IP address pool to the requesting computer. You must specify the starting and ending address of the IP address pool.
Enable DHCP
Server:
DHCP IP Address
Range:
DHCP Lease Time:
Always Broadcast:
Check this box to enable the DHCP server on your router. Uncheck to disable this function.
Enter the starting and ending IP addresses for the DHCP server’s IP assignment.
Note: If you statically (manually) assign IP addresses to your computers or devices, make sure the IP addresses are outside of this range or you may have an IP conict.
The length of time for the IP address lease. Enter the Lease time in minutes.
If all the computers on the LAN successfully obtain their IP addresses from the router’s DHCP server as expected, this option can remain disabled. However, if one of the computers on the LAN fails to obtain an IP address from the router’s DHCP server, it may have an old DHCP client that incorrectly turns o the broadcast ag of DHCP packets. Enabling this option will cause the router to always broadcast its responses to all clients, thereby working around the problem, at the cost of increased broadcast trac on the LAN.
NetBIOS
Announcement:
Check this box to allow the DHCP Server to oer NetBIOS conguration settings to the LAN hosts. NetBIOS allow LAN hosts to discover all other computers within the network, e.g. within Network Neighborhood.
51D-Link DIR-825 User Manual
Section 3 - Conguration
Learn NetBIOS
from WAN:
NetBIOS Scope:
NetBIOS Node:
WINS IP Address:
If NetBIOS announcement is switched on, it will cause WINS information to be learned from the WAN side, if available. Turn this setting o to congure manually.
This is an advanced setting and is normally left blank. This allows the conguration of a NetBIOS ‘domain’ name under which network hosts operate. This setting has no eect if the ‘Learn NetBIOS information from WAN’ is activated.
This eld indicates how network hosts are to perform NetBIOS name registration and discovery. H-Node, this indicates a Hybrid­State of operation. First WINS servers are tried, if any, followed by local network broadcast. This is generally the preferred mode if you have congured WINS servers. M-Node (default), this indicates a Mixed-Mode of operation. First Broadcast operation is performed to register hosts and discover other hosts, if broadcast operation fails, WINS servers are tried, if any. This mode favours broadcast operation which may be preferred if WINS servers are reachable by a slow network link and the majority of network services such as servers and printers are local to the LAN. P-Node, this indicates to use WINS servers ONLY. This setting is useful to force all NetBIOS operation to the congured WINS servers. You must have congured at least the primary WINS server IP to point to a working WINS server. B-Node, this indicates to use local network broadcast ONLY. This setting is useful where there are no WINS servers available, however, it is preferred you try M-Node operation rst. This setting has no eect if the ‘Learn NetBIOS information from WAN’ is activated.
Enter your WINS Server IP address(es).
52D-Link DIR-825 User Manual
Section 3 - Conguration
DHCP Reservation
If you want a computer or device to always have the same IP address assigned, you can create a DHCP reservation. The router will assign the IP address only to that computer or device.
Note: This IP address must be within the DHCP IP Address Range.
Enable:
Computer Name:
IP Address:
MAC Address:
Copy Your PC’s MAC
Address:
Save:
DHCP Reservations
List:
Check this box to enable the reservation.
Enter the computer name or select from the drop-down menu and click <<.
Enter the IP address you want to assign to the computer or device. This IP Address must be within the DHCP IP Address Range.
Enter the MAC address of the computer or device.
If you want to assign an IP address to the computer you are currently on, click this button to populate the elds.
Click Save to save your entry. You must click Save Settings at the top to activate your reservations.
DHCP Reservations List
Displays any reservation entries. Displays the host name (name of your computer or device), MAC Address, and IP address.
Enable:
Edit:
Delete:
Check to enable the reservation.
Click the edit icon to make changes to the reservation entry.
Click to remove the reservation from the list.
53D-Link DIR-825 User Manual
Section 3 - Conguration

IPv6

On this page, the user can congure the IPv6 Connection type. There are two ways to set up the IPv6 Internet connection. You can use the Web­based IPv6 Internet Connection Setup Wizard, or you can manually congure the connection.
For the beginner user that has not congured a router before, click on the IPv6 Internet Connection Setup Wizard button and the router will guide you through a few simple steps to get your network up and running.
For the advanced user that has congured a router before, click on the Manual IPv6 Internet Connection Setup button to input all the settings manually.
To congure the IPv6 local settings, click on the IPv6 Local Connectivity Setup button.
54D-Link DIR-825 User Manual
Section 3 - Conguration
IPV6 ULA allows you to congure a unique local unicast address for your router and is useful for Local IPv6 communications
Enable ULA:
Use default
ULA prex:
ULA Prex:
Check this option to enable support for ULA.
Leave checked to use the default ULA prex congured by your router. If uncheck, you can specify what prex ULA should use in the following eld.
If Use default ULA prex is unchecked, you must specify a ULA prex that will be used by your router for IPV6 local connectivity.
55D-Link DIR-825 User Manual
Section 3 - Conguration
IPv6 Internet Connection Setup Wizard
On this page, the user can congure the IPv6 Connection type using the IPv6 Internet Connection Setup Wizard.
Click the IPv6 Internet Connection Setup Wizard button and the router will guide you through a few simple steps to get your network up and running.
Click Next to continue to the next page. Click Cancel to discard the changes made and return to the main page.
The router will try to detect whether its possible to obtain the IPv6 Internet connection type automatically. If this succeeds then the user will be guided through the input of the appropriate parameters for the connection type found.
56D-Link DIR-825 User Manual
Section 3 - Conguration
However, if the automatic detection fails, the user will be prompt to either Try again or to click on the Guide me through the IPv6 settings button to initiate the manual continual of the wizard.
There are several connection types to choose from. If you are unsure of your connection method, please contact your IPv6 Internet Service Provider.
Note: If using the PPPoE option, you will need to ensure that any PPPoE client software on your computers has been removed or disabled. The 3 options available on this page are IPv6 over PPPoE, Static IPv6 address and Route, and Tunneling Connection.
Choose the required IPv6 Internet Connection type and click on the Next button to continue. Click on the Prev button to return to the previous page. Click on the Cancel button to discard all the changes made and return to the main page.
Click on the Next button to continue. Click on the Prev button to return to the previous page.
Click on the Cancel button to discard all the changes made and return to the main page.
57D-Link DIR-825 User Manual
Section 3 - Conguration
IPv6 over PPPoE
After selecting the IPv6 over PPPoE option, the user will be able to congure the IPv6 Internet connection that requires a username and password to get online. Most DSL modems use this type of connection.
The following parameters will be available for conguration:
PPPoE Session: Select the PPPoE Session value used here. This
option will state that this connection shares it’s information with the already congured IPv6 PPPoE connection, or the user can create a new PPPoE connection here.
User Name: Enter the PPPoE username used here. If you do not
know your user name, please contact your ISP.
Password: Enter the PPPoE password used here. If you do not
know your password, please contact your ISP.
Verify Password: Re-enter the PPPoE password used here.
Service Name: Enter the service name for this connection here.
This option is optional.
58D-Link DIR-825 User Manual
Section 3 - Conguration
Static IPv6 Address Connection
This mode is used when your ISP provides you with a set IPv6 addresses that does not change. The IPv6 information is manually entered in your IPv6 conguration settings. You must enter the IPv6 address, Subnet Prex Length, Default Gateway, Primary DNS Server, and Secondary DNS Server. Your ISP provides you with all this information.
Use Link-Local
Address:
IPv6 Address:
Subnet Prex
Length:
Default Gateway:
Primary IPv6 DNS
Address:
Secondary IPv6 DNS
Address:
LAN IPv6 Address:
The Link-local address is used by nodes and routers when communicating with neighboring nodes on the same link. This mode enables IPv6-capable devices to communicate with each other on the LAN side.
Enter the WAN IPv6 address for the router here.
Enter the WAN subnet prex length value used here.
Enter the WAN default gateway IPv6 address used here.
Enter the WAN primary DNS Server address used here.
Enter the WAN secondary DNS Server address used here.
These are the settings of the LAN (Local Area Network) IPv6 interface for the router. The router’s LAN IPv6 Address conguration is based on the IPv6 Address and Subnet assigned by your ISP. (A subnet with prex /64 is supported in LAN.)
59D-Link DIR-825 User Manual
Section 3 - Conguration
Tunneling Connection (6rd)
After selecting the Tunneling Connection (6rd) option, the user can congure the IPv6 6rd connection settings.
The following parameters will be available for conguration:
6rd IPv6 Prex: Enter the 6rd IPv6 address and prex value used
here.
IPv4 Address: Enter the IPv4 address used here.
Mask Length: Enter the IPv4 mask length used here.
Assigned IPv6 Prex: Displays the IPv6 assigned prex value here.
6rd Border Relay IPv4
Address:
IPv6 DNS Server: Enter the primary DNS Server address used here.
The IPv6 Internet Connection Setup Wizard is complete.
Click on the Connect button to continue. Click on the Prev button to return to the previous page. Click on the Cancel button to discard all the changes made and return to the main page.
Enter the 6rd border relay IPv4 address used here.
60D-Link DIR-825 User Manual
Section 3 - Conguration
IPv6 Manual Setup
There are several connection types to choose from: Auto Detection, Static IPv6, Autoconguration (SLAAC/DHCPv6), PPPoE, IPv6 in IPv4 Tunnel, 6to4, 6rd, and Link-local. If you are unsure of your connection method, please contact your IPv6 Internet Service Provider.
Note: If using the PPPoE option, you will need to ensure that any PPPoE client software on your computers has been removed or disabled.
Auto Detection
Select Auto Detection to have the router detect and automatically congure your IPv6 setting from your ISP.
61D-Link DIR-825 User Manual
Section 3 - Conguration
Static IPv6
My IPv6 Connection:
WAN IPv6 Address
Settings:
LAN IPv6 Address:
LAN Link-Local Address:
Enable
Autoconguration:
Autoconguration Type:
IPv6 Address Lifetime:
Select Static IPv6 from the drop-down menu.
Enter the address settings supplied by your Internet provider (ISP).
Enter the LAN (local) IPv6 address for the router.
Displays the Router’s LAN Link-Local Address.
Check to enable the Autoconguration feature.
Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.
Enter the IPv6 Address Lifetime (in minutes).
62D-Link DIR-825 User Manual
Section 3 - Conguration
Autoconguration
My IPv6 Connection:
IPv6 DNS Settings:
Primary/Secondary DNS
Address:
LAN IPv6 Address:
LAN Link-Local Address:
Enable
Autoconguration:
Autoconguration Type:
IPv6 Address Lifetime:
Select Autoconguration (Stateless/DHCPv6) from the drop-down menu.
Select either Obtain DNS server address automatically or Use the following DNS Address.
Enter the primary and secondary DNS server addresses.
Enter the LAN (local) IPv6 address for the router.
Displays the Router’s LAN Link-Local Address.
Check to enable the Autoconguration feature.
Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.
Enter the IPv6 Address Lifetime (in minutes).
63D-Link DIR-825 User Manual
Section 3 - Conguration
PPPoE
My IPv6 Connection:
Address Mode:
IP Address:
User Name:
Password:
Service Name:
Reconnection Mode:
Maximum Idle Time:
MTU:
Select PPPoE from the drop-down menu.
Select Static if your ISP assigned you the IP address, subnet mask, gateway, and DNS server addresses. In most cases, select Dynamic.
Enter the IP address (Static PPPoE only).
Enter your PPPoE user name.
Enter your PPPoE password and then retype the password in the next box.
Enter the ISP Service Name (optional).
Select either Always-on, On-Demand, or Manual.
Enter a maximum idle time during which the Internet connection is maintained during inactivity. To disable this feature, enable Auto-reconnect.
Maximum Transmission Unit - you may need to change the MTU for optimal performance with your specic ISP. 1492 is the default MTU.
IPv6 DNS Settings:
Primary/Secondary DNS
Address:
LAN IPv6 Address:
Select either Obtain DNS server address automatically or Use the following DNS Address.
Enter the primary and secondary DNS server addresses.
Enter the LAN (local) IPv6 address for the router.
64D-Link DIR-825 User Manual
Section 3 - Conguration
LAN Link-Local Address:
Enable Autoconguration:
Autoconguration Type:
IPv6 Address Lifetime:
Displays the Router’s LAN Link-Local Address.
Check to enable the Autoconguration feature.
Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.
Enter the IPv6 Address Lifetime (in minutes).
65D-Link DIR-825 User Manual
Section 3 - Conguration
IPv6 in IPv4 Tunneling
My IPv6 Connection:
IPv6 in IPv4 Tunnel
Settings:
Remote IPv4
Address:
Remote IPv6
Address:
Local IPv4 Address:
Local IPv6 Address:
Subnet Prex
Length:
IPv6 DNS Settings:
Select IPv6 in IPv4 Tunnel from the drop-down menu.
Enter the settings supplied by your Internet provider (ISP).
Enter the remote IPv4 address supplied by your Internet provider (ISP).
Enter the remote IPv6 address supplied by your Internet provider (ISP).
Enter the remote IPv4 address that will be used on your internal network.
Enter the remote IPv6 address that will be used on your internal network.
Enter the subnet prex length that will be used on your internal network for IPv6.
Select either Obtain DNS server address automatically or Use the following DNS Address.
Primary/Secondary
DNS Address:
LAN IPv6 Address:
LAN IPv6 Link Local
Address:
Enter the primary and secondary DNS server addresses.
Enter the LAN (local) IPv6 address for the router.
Displays the Router’s LAN Link-Local Address.
66D-Link DIR-825 User Manual
Section 3 - Conguration
Enable
Autoconguration:
Autoconguration
Type:
Pv6 Address
Lifetime:
Check to enable the Autoconguration feature.
Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.
Enter the Router Advertisement Lifetime (in minutes).
67D-Link DIR-825 User Manual
Section 3 - Conguration
6 to 4 Tunneling
My IPv6 Connection:
6 to 4 Settings:
Primary/Secondary
DNS Address:
LAN IPv6 Address:
LAN Link-Local
Address:
Enable
Autoconguration:
Autoconguration
Type:
IPv6 Address
Lifetime:
Select 6 to 4 from the drop-down menu.
Enter the IPv6 settings supplied by your Internet provider (ISP).
Enter the primary and secondary DNS server addresses.
Enter the LAN (local) IPv6 address for the router.
Displays the Router’s LAN Link-Local Address.
Check to enable the Autoconguration feature.
Select Stateful (DHCPv6), SLAAC + RDNSS or SLAAC + Stateless DHCPv6.
Enter the IPv6 Address Lifetime (in minutes).
68D-Link DIR-825 User Manual
Section 3 - Conguration
6rd
My IPv6 Connection:
6RD Settings:
LAN IPv6 Address:
LAN Link-Local Address:
Enable
Autoconguration:
Autoconguration Type:
Router Advertisement
Lifetime:
Select 6rd from the drop-down menu.
Enter the address settings supplied by your Internet provider (ISP).
Enter the LAN (local) IPv6 address for the router.
Displays the Router’s LAN Link-Local Address.
Check to enable the Autoconguration feature.
Select Stateful (DHCPv6), SLAAC+RDNSS or SLAAC
+ Stateless DHCPv6.
Enter the Router Advertisement Lifetime (in minutes).
69D-Link DIR-825 User Manual
Section 3 - Conguration
Link-Local Connectivity
My IPv6 Connection:
LAN IPv6 Link Local
Address Settings:
Select Link-Local Only from the drop-down menu.
Displays the IPv6 address of the router.
70D-Link DIR-825 User Manual
Section 3 - Conguration

Advanced

Virtual Server
This will allow you to open a single port. If you would like to open a range of ports, refer to the next page.
Name:
IP Address:
Private Port/
Public Port:
Protocol Type:
Schedule:
Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the elds.
Enter the IP address of the computer on your local network that you want to allow the incoming service to. If your computer is receiving an IP address automatically from the router (DHCP), you computer will be listed in the “Computer Name” drop-down menu. Select your computer and click <<.
Enter the port that you want to open next to Private Port and Public Port. The private and public ports are usually the same. The public port is the port seen from the Internet side, and the private port is the port being used by the application on the computer within your local network.
Select TCP, UDP, or Both from the drop-down menu.
The schedule of time when the Virtual Server Rule will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.
Inbound Filter:
Select Allow All (most common) or a created Inbound lter. You may create your own inbound lters in the Advanced > Inbound Filter page.
71D-Link DIR-825 User Manual
Section 3 - Conguration
Port Forwarding
This will allow you to open a single port or a range of ports.
Name:
IP Address:
TCP/UDP:
Schedule:
Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the elds.
Enter the IP address of the computer on your local network that you want to allow the incoming service to. If your computer is receiving an IP address automatically from the router (DHCP), you computer will be listed in the “Computer Name” drop-down menu. Select your computer and click <<.
Enter the TCP and/or UDP port or ports that you want to open. You can enter a single port or a range of ports. Separate ports with a common.
Example: 24,1009,3000-4000
The schedule of time when the Virtual Server Rule will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.
Inbound Filter:
Select Allow All (most common) or a created Inbound lter. You may create your own inbound lters in the Advanced > Inbound Filter page.
72D-Link DIR-825 User Manual
Section 3 - Conguration
Application Rules
Some applications require multiple connections, such as Internet gaming, video conferencing, Internet telephony and others. These applications have diculties working through NAT (Network Address Translation). Special Applications makes some of these applications work with the DIR-825. If you need to run applications that require multiple connections, specify the port normally associated with an application in the “Trigger Port” eld, select the protocol type as TCP or UDP, then enter the rewall (public) ports associated with the trigger port to open them for inbound trac.
The DIR-825 provides some predened applications in the table on the bottom of the web page. Select the application you want to use and enable it.
Name:
Trigger:
Trac Type:
Firewall:
Trac Type:
Schedule:
Enter a name for the rule. You may select a pre-dened application from the drop-down menu and click <<.
This is the port used to trigger the application. It can be either a single port or a range of ports.
Select the protocol of the trigger port (TCP, UDP, or Both).
This is the port number on the Internet side that will be used to access the application. You may dene a single port or a range of ports. You can use a comma to add multiple ports or port ranges.
Select the protocol of the rewall port (TCP, UDP, or Both).
The schedule of time when the Application Rule will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.
73D-Link DIR-825 User Manual
Section 3 - Conguration
QoS Engine
The QoS Engine option helps improve your network gaming performance by prioritizing applications. By default the QoS Engine settings are disabled and application priority is not classied automatically. The QoS section contains a queuing mechanism, trac shaping and classication. It supports two kinds of queuing mechanisms. Strict Priority Queue (SPQ) and Weighted Fair Queue (WFQ). SPQ will process trac based on trac priority. Queue1 has the highest priority and Queue4 has the lowest priority. WFQ will process trac based on the queue weight. Users can congure each queue’s weight. The sum of all the queue’s weight must be 100. When surng the Internet, the system will do trac shaping based on the uplink and downlink speed. The classication rules can be used to classify trac to dierent queues, then SPQ or WFQ will do QoS based on the queue’s priority or weight.
The following parameters will be available for conguration:
Enable QoS:
Uplink Speed:
Downlink
Speed:
Queue Type:
This option is disabled by default. Enable this option for better performance and experience with online games and other interactive applications, such as VoIP.
The speed at which data can be transferred from the router to your ISP. This is determined by your ISP. An ISP often denes speed as a download/upload pair. For example,
1.5 Mbits/284 Kbits. Using this example, you would enter
284. Alternatively you can test your uplink speed with a service such as www.dslreports.com.
The speed at which data can be transferred from the ISP to the router. This is determined by your ISP. ISP’s often dene speed as a download/upload pair. For example,
1.5 Mbits/284 Kbits. Using this example, you would enter 1500. Alternatively you can test your downlink speed with a service such as www.dslreports.com. Here the user can specify the queue type used. When choosing the option Strict Priority Queue, the router will apply QoS based on the internal specication for the queue IDs listed. When choosing the option Weight Fair Queue, the router will apply QoS based on the user dened percentage in the Queue Weight column.
Queue ID: In this column the Queue ID used will be displayed.
74D-Link DIR-825 User Manual
Section 3 - Conguration
Queue Priority: In this column the Queue Priority used will be displayed.
Queue Weight: After choosing to use the Weight Fair Queue option, under Queue Type, the user will be able to manual enter
the Queue Weight for each individual Queue ID.
After specifying the QoS framework used, in the QoS setup section, the user can now create individual rules for scenarios that require the use of trac control and data priority manipulation.
The following parameters will be available for conguration:
Checkbox: Tick this option to enable the rule specied.
Name: Enter a custom name for the rule being created here.
This name is used for identication.
Queue ID: Select the appropriate priority requirement from the
drop-down menu that will be applied to this rule. Op­tion to choose from are Highest, Higher, Normal, and Best Eort.
Protocol: Select the protocol used for the application for in the
drop-down menu and it will automatically place it in the Protocol eld.
Local IP Range: Enter the local IP range used here. This is the IP range
of you Local Area Network. The Router’s IP cannot be included in this range.
Remote IP
Range:
Application
Enter the remote IP range used here. This is the IP range of the public network from the Internet Port side. To apply this rule to any IP addresses from the public side, enter the range 0.0.0.1 to 255.255.255.254.
Enter the application port number used here.
Port:
Click on the Save Settings button to accept the changes made. Click on the Don’t Save Settings button to discard the changes made.
75D-Link DIR-825 User Manual
Section 3 - Conguration
Network Filters
Use MAC (Media Access Control) Filters to allow or deny LAN (Local Area Network) computers by their MAC addresses from accessing the network. You can either manually add a MAC address or select the MAC address from the list of clients that are currently connected to the broadband router.
Congure MAC
Filtering:
MAC Address:
DHCP Client:
Select Turn MAC Filtering O, Allow MAC addresses listed below, or Deny MAC addresses listed below
from the drop-down menu.
Enter the MAC address you would like to lter.
To nd the MAC address on a computer, please refer to the Networking Basics section in this manual.
Select a DHCP client from the drop-down menu and click << to copy that MAC Address.
76D-Link DIR-825 User Manual
Section 3 - Conguration
Inbound Filters
The Inbound Filter option is an advanced method of controlling data received from the Internet. With this feature you can congure inbound data ltering rules that control data based on an IP address range. Inbound Filters can be used with Virtual Server, Port Forwarding, or Remote Administration features.
Name:
Action:
Enable:
Remote IP Start:
Remote IP End:
Add:
Inbound Filter
Rules List:
Enter a name for the inbound lter rule.
Select Allow or Deny.
Check to enable rule.
Enter the starting IP address. Enter 0.0.0.0 if you do not want to specify an IP range.
Enter the ending IP address. Enter 255.255.255.255 if you do not want to specify and IP range.
Click the Add button to apply your settings. You must click Save Settings at the top to save the settings.
This section will list any rules that are created. You may click the Edit icon to change the settings or enable/disable the rule, or click the Delete icon to remove the rule.
77D-Link DIR-825 User Manual
Section 3 - Conguration
Access Control
The Access Control section allows you to control access in and out of your network. Use this feature as Parental Controls to only grant access to approved sites, limit web access based on time or dates, and/or block access from applications like P2P utilities or games.
Add Policy:
Click the Add Policy button to start the Access Control Wizard.
Click Next to continue with the wizard.
Access Control Wizard
78D-Link DIR-825 User Manual
Section 3 - Conguration
Enter a name for the policy and then click Next to continue.
Select a schedule (I.E. Always) from the drop-down menu and then click Next to continue.
Enter the following information and then click Next to continue.
Address Type - Select IP address, MAC address, or Other Machines.
IP Address - Enter the IP address of the computer you want to apply the rule to.
Machine Address - Enter the PC MAC address (i.e. 00:00.00.00.00).
Select the ltering method and then click Next to continue.
Click Save to save the access control rule.
79D-Link DIR-825 User Manual
Section 3 - Conguration
Your newly created policy will now show up under Policy Table.
80D-Link DIR-825 User Manual
Section 3 - Conguration
Website Filters
Website Filters are used to allow you to set up a list of Web sites that can be viewed by multiple users through the network. To use this feature select to Allow or Deny, enter the domain or website and click Save Settings. You must also select Apply Web Filter under the Access Control section.
Add Website
Filtering Rule:
Website URL/
Domain:
Select either DENY computers access to ONLY these sites or ALLOW computers access to ONLY these sites.
Enter the keywords or URLs that you want to allow or block. Click Save Settings.
81D-Link DIR-825 User Manual
Section 3 - Conguration
Firewall Settings
A rewall protects your network from the outside world. The DIR-825 oers a rewall type functionality. The SPI feature helps prevent cyber attacks. Sometimes you may want a computer exposed to the outside world for certain types of applications. If you choose to expose a computer, you can enable DMZ. DMZ is short for Demilitarized Zone. This option will expose the chosen computer completely to the outside world.
Enable SPI:
Anti-Spoof Check:
SPI (Stateful Packet Inspection, also known as dynamic packet ltering) helps to prevent cyber attacks by tracking more state per session. It validates that the trac passing through the session conforms to the protocol.
Enable this feature to protect your network from certain kinds of “spoong” attacks.
82D-Link DIR-825 User Manual
Section 3 - Conguration
DMZ IP Address:
PPTP:
IPSEC (VPN):
RTSP:
Specify the IP address of the computer on the LAN that you want to have unrestricted Internet communication. If this computer obtains it’s IP address automatically using DHCP, be sure to make a static reservation on the Setup > Network Settings page so that the IP address of the DMZ machine does not change.
Allows multiple machines on the LAN to connect to their corporate network using PPTP protocol.
Allows multiple VPN clients to connect to their corporate network using IPSec. Some VPN clients support traversal of IPSec through NAT. This ALG may interfere with the operation of such VPN clients. If you are having trouble connecting with your corporate network, try turning this ALG o. Please check with the system administrator of your corporate network whether your VPN client supports NAT traversal.
Allows application that uses Real Time Streaming Protocol to receive streaming media from the Internet. QuickTime and Real Player are some of the common applications using this protocol.
SIP:
Allows devices and applications using VoIP (Voice over IP) to communicate across NAT. Some VoIP applications and devices have the ability to discover NAT devices and work around them. This ALG may interfere with the operation of such devices. If you are having trouble making VoIP calls, try turning this ALG o.
83D-Link DIR-825 User Manual
Section 3 - Conguration
Routing
The Routing option is an advanced method of customizing specic routes of data through your network.
Name:
Destination IP:
Netmask:
Gateway:
Metric:
Interface:
Enter a name for your route.
Enter the IP address of packets that will take this route.
Enter the netmask of the route, please note that the octets must match your destination IP address.
Enter your next hop gateway to be taken if this route is used.
The route metric is a value from 1 to 16 that indicates the cost of using this route. A value 1 is the lowest cost and 15 is the highest cost.
Select the interface that the IP packet must use to transit out of the router when this route is used.
84D-Link DIR-825 User Manual
Section 3 - Conguration
Advanced Wireless
Transmit Power:
WLAN Partition:
WMM Enable:
HT20/40 Coexistence:
Set the transmit power of the antennas.
This enables 802.11d operation. 802.11d is a wireless specication developed to allow implementation of wireless networks in countries that cannot use the
802.11 standard. This feature should only be enabled if you are in a country that requires it.
WMM is QoS for your wireless network. This will improve the quality of video and voice applications for your wireless clients.
Enable this option to reduce interference from other wireless networks in your area. If the channel width is operating at 40 MHz and there is another wireless network’s channel over-lapping and causing interference, the router will automatically change to 20 MHz.
85D-Link DIR-825 User Manual
Section 3 - Conguration
Wi-Fi Protected Setup (WPS)
Wi-Fi Protected Setup (WPS) System is a simplied method for securing your wireless network during the “initial setup” as well as the “Add New Device” processes. The Wi-Fi Alliance (WFA) has certied it across dierent products as well as manufacturers. The process is just as easy as pressing a button for the Push-Button Method or correctly entering the 8-digit code for the PIN Code Method. The time reduction in setup and ease of use are quite benecial, while the highest wireless security setting of WPA2 is automatically used.
Enable:
Lock Wireless
Security Settings:
PIN Settings:
Current PIN:
Reset PIN to
Default:
Generate New PIN:
Enable the Wi-Fi Protected Setup feature.
Note: if this option is unchecked, the WPS button on the side of the router will be disabled.
Tick this option to lock the congured wireless security settings.
A PIN is a unique number that can be used to add the router to an existing network or to create a new network. Only the Administrator (“admin” account) can change or reset the PIN.
Shows the current PIN.
Restore the default PIN of the router.
Create a random number that is a valid PIN. This becomes the router’s PIN. You can then copy this PIN to the user interface of the wireless client.
86D-Link DIR-825 User Manual
Section 3 - Conguration
Add Wireless
Station:
Add Wireless
Device Wizard:
This Wizard helps you add wireless devices to the wireless network.
The wizard will either display the wireless network settings to guide you through manual conguration, prompt you to enter the PIN for the device, or ask you to press the conguration button on the device. If the device supports Wi-Fi Protected Setup and has a conguration button, you can add it to the network by pressing the conguration button on the device and then the on the router within 120 seconds. The status LED on the router will ash three times if the device has been successfully added to the network.
There are several ways to add a wireless device to your network. A “registrar” controls access to the wireless network. A registrar only allows devices onto the wireless network if you have entered the PIN, or pressed a special Wi-Fi Protected Setup button on the device. The router acts as a registrar for the network, although other devices may act as a registrar as well.
Click to start the wizard and skip to page 46.
WPS Button
You can also simply press the WPS button on the back of the router, and then press the WPS button on your wireless client to automatically connect without logging into the router.
WPS Button
87D-Link DIR-825 User Manual
Section 3 - Conguration
Advanced Network Settings
Enable UPnP:
Enable WAN Ping
Response:
WAN Port Speed:
Enable IPV4
Multicast Streams:
Enable IPV6
Multicast Streams:
To use the Universal Plug and Play (UPnP) feature click on Enabled. UPnP provides compatibility with networking equipment, software and peripherals.
Checking the box will allow the DIR-825 to respond to pings. Unchecking the box may provide some extra security from hackers.
You may set the port speed of the Internet port to 10 Mbps, 100 Mbps or Auto (recommended).
Check the box to allow multicast trac to pass through the router from the Internet (IPv4).
Check the box to allow multicast trac to pass through the router from the Internet (IPv6).
88D-Link DIR-825 User Manual
Section 3 - Conguration
Guest Zone
The Guest Zone feature will allow you to create temporary zones that can be used by guests to access the Internet. These zones will be separate from your main wireless network. You may congure dierent zones for the 2.4 GHz and 5 GHz wireless bands.
Enable Guest
Zone:
Schedule:
Wireless Network
Name:
Enable Routing
Between Zones:
Security Mode:
Check to enable the Guest Zone feature.
The schedule of time when the Guest Zone will be active. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section or click Add New.
Enter a wireless network name (SSID) that is dierent from your main wireless network.
Check to allow network connectivity between the dierent zones created.
Select the type of security or encryption you would like to enable for the guest zone.
89D-Link DIR-825 User Manual
Section 3 - Conguration
IPv6 Firewall
The DIR-825’s IPv6 Firewall feature allows you to congure which kind of IPv6 trac is allowed to pass through the device. The DIR-825’s IPv6 Firewall functions in a similar way to the IP Filters feature.
Enable IPv6 Simple
Security:
Congure IPv6
Firewall:
Name:
Schedule:
Source:
IP Address Range:
Check the box to enable the IPv6 rewall simple security.
Select an action from the drop-down menu.
Enter a name to identify the IPv6 rewall rule.
Use the drop-down menu to select the time schedule that the IPv6 Firewall Rule will be enabled on. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.
Use the Source drop-down menu to specify the interface that connects to the source IPv6 addresses of the rewall rule.
Enter the source IPv6 address range in the adjacent IP
Address Range eld.
Dest:
Protocol:
Port Range:
Use the Dest drop-down menu to specify the interface that connects to the destination IP addresses of the rewall rule.
Select the protocol of the rewall port (All, TCP, UDP, or ICMP).
Enter the rst port of the range that will be used for the rewall rule in the rst box and enter the last port in the eld in the second box.
90D-Link DIR-825 User Manual
Section 3 - Conguration
IPv6 Routing
This page allows you to specify custom routes that determine how data is moved around your network.
Route List:
Name:
Destination IP/
Prex Length:
Metric:
Interface:
Gateway:
Check the box next to the route you wish to enable.
Enter a specic name to identify this route.
This is the IP address of the router used to reach the specied destination or enter the IPv6 address prex length of the packets that will take this route.
Enter the metric value for this rule here.
Use the drop-down menu to specify if the IP packet must use the WAN or LAN interface to transit out of the router.
Enter the next hop that will be taken if this route is used.
91D-Link DIR-825 User Manual
Section 3 - Conguration

Tools

Admin
This page will allow you to change the Administrator and User passwords. You can also enable Remote Management. There are two accounts that can access the management interface through the web browser. The accounts are admin and user. Admin has read/write access while user has read-only access. User can only view the settings but cannot make any changes. Only the admin account has the ability to change both admin and user account passwords.
Admin Password:
User Password:
Gateway name:
Enable Graphical
Authentication:
Enable HTTPS
Server:
Enable Remote
Management:
Enter a new password for the Administrator Login Name. The administrator can make changes to the settings.
Enter the new password for the User login. If you login as the User, you cannot change the settings (you can only view them).
Enter a name for your router.
Enables a challenge-response test to require users to type letters or numbers from a distorted image displayed on the screen to prevent online hackers and unauthorized users from gaining access to your router’s network settings.
Check to enable HTTPS to connect to the router securely. This means to connect to the router, you must enter https://192.168.0.1 (for example) instead of http://192.168.0.1.
Remote management allows the DIR-825 to be congured from the Internet by a web browser. A username/password is still required to access the Web Management interface.
92D-Link DIR-825 User Manual
Section 3 - Conguration
Remote Admin
Port:
Remote Admin
Inbound Filter:
The port number used to access the DIR-825 is used in the URL. Example: http://x.x.x.x:8080 whereas x.x.x.x is the Internet IP address of the DIR-825 and 8080 is the port used for the Web Management interface.
If you have enabled HTTPS Server, you must enter https:// as part of the URL to access the router remotely.
This section will list any rules that are created. You may click the Edit icon to change the settings or enable/disable the rule, or click the Delete icon to remove the rule. Details will display the current status.
93D-Link DIR-825 User Manual
Section 3 - Conguration
Time
The Time Conguration option allows you to congure, update, and maintain the correct time on the internal system clock. From this section you can set the time zone that you are in and set the Time Server. Daylight Saving can also be congured to automatically adjust the time when needed.
Time:
Time Zone:
Enable Daylight
Saving:
Enable NTP Server:
NTP Server Used:
Manual:
Displays the current date and time of the router.
Select your Time Zone from the drop-down menu.
To select Daylight Saving time manually, select enabled or disabled, and enter a start date and an end date for daylight saving time.
NTP is short for Network Time Protocol. A NTP server will synch the time and date with your router. This will only connect to a server on the Internet, not a local server. Check the box to enable this feature.
Enter the IP address of a NTP server and click “update now” to adjust correct time and date.
To manually input the time, enter the values in these elds for the Year, Month, Day, Hour, Minute, and Second and then click Set Time.
You can also click Sync Your Computer’s Time Settings to synch the date and time with the computer you are currently on.
94D-Link DIR-825 User Manual
Section 3 - Conguration
SysLog
The broadband router keeps a running log of events and activities occurring on the router. You may send these logs to a SysLog server on your network.
Enable Logging to
SysLog Server:
SysLog Server IP
Address:
Check this box to send the router logs to a SysLog Server.
The address of the SysLog server that will be used to send the logs. You may also select your computer from the drop-down menu (only if receiving an IP address from the router via DHCP). This option only becomes available if you enable loggin to a syslog server.
95D-Link DIR-825 User Manual
Section 3 - Conguration
Email Settings
The Email feature can be used to send the system log les, router alert messages, and rmware update notication to your email address.
Enable Email
Notication:
From Email
Address:
To Email Address:
SMTP Server
Address:
SMTP Server Port:
Enable
Authentication:
Account Name:
Password:
When this option is enabled, router activity logs are emailed to a designated email address.
This email address will appear as the sender when you receive a log le or rmware upgrade notication via email.
Enter the email address where you want the email sent.
Enter the SMTP server address for sending email.
Enter the SMTP port used on the server.
Check this box if your SMTP server requires authentication.
Enter your account for sending email.
Enter the password associated with the account. Re-type the password associated with the account.
On Log Full:
On Schedule:
Schedule:
When this option is selected, logs will be sent via email to your account when the log is full.
Selecting this option will send the logs via email according to schedule.
This option is enabled when On Schedule is selected. You can select a schedule from the list of dened schedules. To create a schedule, go to Tools > Schedules.
96D-Link DIR-825 User Manual
Loading...