Version 1.
Preface D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any person or organization of such revisions or changes. Manual Revisions Revision 1.00 1.01 1.
Table of Contents Table of Contents Product Overview............................................................... 1 Package Contents.......................................................................... 1 System Requirements.................................................................. 2 Introduction.................................................................................... 3 Features.............................................................................................
Table of Contents Quick VPN Server Setup Instructions...................................81 iOS Devices....................................................................................83 Mac OS X.........................................................................................87 Windows 7......................................................................................90 Windows 8.1/8..............................................................................94 Windows 10....................
Section 1 - Product Overview Product PackageOverview Contents DIR-867 Wi-Fi Configuration Note Quick Installation Card Ethernet Cable Power Adapter If any of the above items are missing or damaged, please contact your local reseller. Note: Using a power supply with a different voltage rating than the one included with the DIR-867 will cause damage and void the warranty for this product.
Section 1 - Product Overview System Requirements Network Requirements • An Ethernet-based cable or DSL modem • IEEE 802.
Section 1 - Product Overview Introduction The D-Link DIR-867 AC1750 MU-MIMO Wi-Fi Gigabit Router shares your Internet connection over a blazing-fast Gigabit Wireless AC connection of up to 1750+ Mbps (Up to 1300 Mbps 5 GHz Wireless AC and up to 450+ Mbps 2.4 GHz Wireless N)1, using advanced AC beamforming technology to significantly outperform 802.11n and other 802.11ac devices.
Section 1 - Product Overview Introduction (continued) The DIR-867 supports the latest wireless security features to help prevent unauthorized access, be it from over a wireless network or the Internet. Support for WPA™ and WPA2™ standards ensure that you will be able to use the best possible encryption regardless of your client devices. In addition, this router is equipped with a dual-active firewall (SPI and NAT) to prevent potential attacks over the Internet.
Section 1 - Product Overview Features • Superior Wireless Networking - The DIR-867 provides Gigabit wireless speeds of up to a combined 1750+ Mbps (1300 Mbps 802.11ac 5 GHz, plus 450+ Mbps 802.11n 2.4 GHz)1. This capability rivals wired connections, allowing users to participate in real-time activities online, such as HD video communication, online gaming, and use mobile devices from anywhere in your home while still offering full 802.11n/g/b backward compatibility.
Section 1 - Product Overview Hardware Overview LED Indicators 1 1 Power LED 2 Internet LED 3 4 Wireless (2.4 GHz LED) Wireless (5 GHz LED) D-Link DIR-867 User Manual 2 3 4 A solid light indicates a proper connection to the power supply. The light will be solid orange during boot up. A solid light indicates a connection on the Internet port. If the LED is orange, the router cannot connect to the Internet. A solid light indicates that the 2.4 GHz wireless band is enabled.
Section 1 - Product Overview Hardware Overview Back Panel 1 2 3 4 5 6 7 1 Gigabit LAN Ports (1- 4) 2 Gigabit WAN Port 3 Reset Button Insert a paperclip in the hole, wait for 10 seconds, and release to reset the router to default settings. 4 WPS Button Press to start the WPS process and automatically create a secure connection to a WPS client. 5 Wi-Fi Button Press this button turn off or turn on the wireless networks.
Section 2 - Installation Installation This section will walk you through the installation of the DIR-867. Before you Begin • Placement of the router is very important. Do not place the router in an enclosed area such as a closet, cabinet, attic, or garage. • Configure the router with the computer that was last connected directly to your Internet connection. Verify that it is connected to the Internet before connecting additional devices.
Section 2 - Installation Wireless Installation Considerations The D-Link wireless router lets you access your network using a wireless connection from virtually anywhere within the operating range of your wireless network. Keep in mind that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through may limit the range. Typical ranges vary depending on the types of materials and background RF (radio frequency) noise in your home or business.
Section 2 - Installation Hardware Setup 1. The DIR-867 is designed to give you the fastest, most stable network connection possible. In order to maximize performance, fully extend the antennas into a 105 degree angle to provide optimal wireless coverage. Keep the router in an open area for better wireless coverage. 105° 2. Position your DIR-867 near your Internet-connected modem. Place it in an open area for better wireless coverage. DIR-867 Modem 3.
Section 2 - Installation 4. Use the included Ethernet cable to connect your modem to the yellow port labeled INTERNET on the router. DIR-867 Modem 5. Turn on or plug your modem back in and wait approximately one minute before proceeding onward. DIR-867 Modem 6. Connect the supplied power adapter to the router and a power outlet, press the power button, and wait approximately one minute until the LED indicator on the front of the device changes from orange to solid white.
Section 2 - Installation 7. If you are configuring the DIR-867 wirelessly from a PC, connect to the Wi-Fi network printed on the label attached to the bottom your router. DIR-867 Modem If you are configuring the DIR-867 from a PC with a wired Ethernet connection, plug one end of an Ethernet cable into the port labeled 1 on the back of the router, and the other end into the Ethernet port on your computer. DIR-867 Modem 8.
Section 2 - Installation Completing Setup There are several different ways you can configure your router to connect to the Internet and connect to your clients: • D-Link Setup Wizard - This wizard will launch when you log into the router for the first time. Refer to Setup Wizard on page 14. • D-Link Wi-Fi App - Download and install (from the Apple App Store or from the Google Play Store) and follow onscreen instructions. Refer to D-Link Wi-Fi App on page 19.
Section 2 - Installation Setup Wizard If this is your first time installing the router, open your web browser and enter http://dlinkrouter.local./ in the address bar. Alternatively, enter the IP address of the router (default: http://192.168.0.1). The wizard is designed to guide you through a step-by-step process to configure your new D-Link router and connect to the Internet. Click Next to continue. Please wait while your router detects your Internet connection type.
Section 2 - Installation Setup Wizard (continued) If the router detected or you selected PPPoE, enter your PPPoE username and password and click Next to continue. Note: Make sure to remove your PPPoE software from your computer. The software is no longer needed and will not work through a router. If the router detected or you selected Static, enter the IP and DNS settings supplied by your ISP. Click Next to continue.
Section 2 - Installation Setup Wizard (continued) Create a Wi-Fi password (between 8-63 characters). Your wireless clients will need to have this passphrase or key entered to be able to connect to your wireless network. Click Next to continue. Note: The DIR-867's Smart Connect feature presents a single wireless network. When connecting clients to an extension network, they will be automatically added to the best band, either 2.4 GHz or 5 GHz.
Section 2 - Installation Setup Wizard (continued) Select your time zone from the drop-down menu. Click Next to continue. Keeping your DIR-867 firmware up to date provides you with the latest protection and new features over the air. Choose whether to keep your device up to date automatically or to manage the device updates by yourself. Click Next to continue.
Section 2 - Installation Setup Wizard (continued) You will be presented with a summary of your settings. Click Next to finalize the settings or Back to make changes. DIR-867 Click OK to close the Setup Wizard.
Section 3 - Installation D-Link Wi-Fi App The D-Link Wi-Fi App allows you to install and configure your DIR-867 AC1750 MU-MIMO Wi-Fi Gigabit Router from your mobile device. Note: The screenshots may be different depending on your mobile device’s OS version. The following steps show the iOS interface of the D-Link Wi-Fi app. If you are using an Android™ device, the appearance may be different from that of the screenshots, but the process is the same.
Section 3 - Installation D-Link Wi-Fi App (continued) Step 4 Click Yes if you have the setup QR code with you to scan the QR code and proceed to step 5. If not, click No and proceed to step 6. Step 5 Slide the product options to Router and select DIR-867 from the list of available devices. Click Next to continue. Step 6 You will now be guided through a step-by-step process for setting up your device. Simply follow the on-screen instructions to complete the installation and DIR-867 configuration process.
Section 3 - Configuration Configuration To access the configuration utility, open a web-browser such as Internet Explorer and enter http://dlinkrouter.local/ or you may also connect by typing the IP address of the router (by default this is http://192.168.0.1) in the address bar. Enter your password. If you previously followed the setup wizard, please use the admin password you entered during the wizard. Otherwise, leave the password blank. Click Log In to proceed.
Section 3 - Configuration Home The Home page displays the current status of the router in the form of an interactive diagram. You can click each icon to display information about each part of the network at the bottom of the screen. The menu bar at the top of the page will allow you to quickly navigate to other pages. The Home page displays whether or not the router is currently connected to the Internet.
Section 3 - Configuration DIR-867 Click on the DIR-867 icon to view details about the router and its wireless settings. Here you can see the router’s current Wi-Fi network name and password, as well as the router's MAC address, IPv4 address, and IPv6 address. To reconfigure the network settings, either click Go to settings on the lower left, or click Settings (at the top of the page) and then Network on the menu that appears. Refer to Network on page 56 for more information.
Section 3 - Configuration Connected Clients Click on the Connected Clients icon to view details about the router and its wireless settings. On this page you can see all the clients currently connected to the router, and their IP addresses. To edit each client’s settings, click the pencil icon on the client you want to edit. Name: Enter a custom name for this client. Vendor: Displays the vendor of the device. MAC Address: Displays the MAC address of the device.
Section 3 - Configuration Settings Wizard In the Settings menu on the bar on the top of the page, click Wizard to open the setup wizard. This is the same wizard that appears when you start the router for the first time. Refer to Setup Wizard on page 14 for details. Internet In the Settings menu on the bar on the top of the page, click Internet to see the Internet configuration options. My Internet Choose your Internet connection type from the drop-down menu.
Section 3 - Configuration Dynamic IP (DHCP) Select Dynamic IP (DHCP) to obtain IP address information automatically from your Internet Service Provider (ISP). Select this option if your ISP does not specify an IP address to use. Advanced Settings Host Name: The host name is optional but may be required by some ISPs. Leave it blank if you are not sure. Primary DNS Enter the primary DNS server IP address assigned by your ISP. This Server: address is usually obtained automatically from your ISP.
Section 3 - Configuration Static IP Select Static IP if your IP information is provided by your Internet Service Provider (ISP). IP Address: Enter the IP address provided by your ISP. Subnet Mask: Enter the subnet mask provided by your ISP. Default Gateway: Enter the default gateway address provided by your ISP. Primary DNS Enter the primary DNS server IP address assigned by your ISP. Server: Advanced Settings Secondary DNS Enter the secondary DNS server IP address assigned by your ISP.
Section 3 - Configuration PPPoE Select PPPoE if your ISP provides and requires you to enter a PPPoE username and password in order to connect to the Internet. Username: Enter the username provided by your ISP. Password: Enter the password provided by your ISP. Reconnect Mode: Select either Always on, On Demand, or Manual. Maximum Idle Enter a maximum idle time during which the Internet connection is Time: maintained during inactivity. To disable this feature, select Always on as the reconnect mode.
Section 3 - Configuration PPPoE (continued) MAC Address The default MAC address is set to the Internet port’s physical interface Clone: MAC address on the router. You can use the drop-down menu to replace the Internet port’s MAC address with the MAC address of a connected client. Static IP IP Address: Enter the IP address provided by your ISP. Service Name: Enter the ISP service name (optional). Primary DNS Enter the primary DNS server IP address assigned by your ISP.
Section 3 - Configuration PPTP Choose PPTP (Point-to-Point-Tunneling Protocol ) if your Internet Service Provider (ISP) uses a PPTP connection. Your ISP will provide you with a username and password. PPTP Server IP Enter the PPTP server IP address provided by your ISP. Address: Username: Enter the username provided by your ISP. Password: Enter the password provided by your ISP. Reconnect Mode: Select either Always on, On demand, or Manual.
Section 3 - Configuration PPTP (continued) Static IP PPTP IP Address: Enter the IP address provided by your ISP. PPTP Subnet Enter the subnet mask provided by your ISP. Mask: PPTP Gateway IP Enter the gateway IP address provided by your ISP. Address: Primary DNS Enter the primary DNS server IP address assigned by your ISP. Server: Secondary DNS Enter the secondary DNS server IP address assigned by your ISP.
Section 3 - Configuration L2TP Choose L2TP (Layer 2 Tunneling Protocol) if your Internet Service Provider (ISP) uses a L2TP connection. Your ISP will provide you with a username and password. L2TP Server: Enter the L2TP server IP address provided by your ISP. Username: Enter the username provided by your ISP. Password: Enter the password provided by your ISP. Reconnect Mode: Select either Always on, On demand, or Manual.
Section 3 - Configuration L2TP (continued) Static IP L2TP IP Address: Enter the IP address provided by your ISP. L2TP Subnet Enter the subnet mask provided by your ISP. Mask: L2TP Gateway IP Enter the gateway IP address provided by your ISP. Address: Primary DNS Enter the primary DNS server IP address assigned by your ISP. Server: Secondary DNS Enter the secondary DNS server IP address assigned by your ISP.
Section 3 - Configuration DS-Lite DS-Lite is an IPv6 connection type. After selecting DS-Lite, the following parameters will be available for configuration: Advanced Settings DS-Lite Select DS-Lite DHCPv6 Option to let the router allocate the AFTR Configuration: IPv6 address automatically. Select Manual Configuration to enter the AFTR IPv6 address manually. DS-Lite DHCPv6 B4 IPv6 Address: Enter the B4 IPv4 address value used here. WAN IPv6 Once connected, the WAN IPv6 address will be displayed here.
Section 3 - Configuration IPv6 To configure an IPv6 connection, click the IPv6 link. To return to the IPv4 settings, click IPv4. My Internet Choose your IPv6 connection type from the drop-down menu. You Connection Is: will be presented with the appropriate options for your connection type. Click Advanced Settings... to expand the list and see all of the options.
Section 3 - Configuration Auto Detection Select Auto Detection to automatically detect the IPv6 connection method used by your Internet Service Provider (ISP). If Auto Detection fails, you manually select another IPv6 connection type. IPv6 DNS Settings DNS Type: Select either Obtain DNS server address automatically or Use the following DNS address. If Use the following DNS address is selected: Primary DNS If you selected Use the following DNS address above, enter the Server: primary DNS server address.
Section 3 - Configuration Auto Detection (continued) Advanced Settings - Address Autoconfiguration Settings Enable Automatic Enable or disable the Automatic IPv6 Address Assignment feature. IPv6 Address Assignment: Enable Automatic Enable or disable DHCP-PD for other IPv6 routers connected to the DHCP-PD in LAN: LAN interface. Note: This feature requires a smaller subnet prefix than /64 (i.e. allowing for a larger address allocation), such as /63. Contact your ISP for more information.
Section 3 - Configuration Static IPv6 Select Static IP if your IPv6 information is provided by your Internet Service Provider (ISP). Use Link-Local Enable or disable link-local address use. Address: Default Gateway: Enter the default gateway for your IPv6 connection. Primary DNS Enter the primary DNS server address. Server: Secondary DNS Enter the secondary DNS server address.
Section 3 - Configuration Static IPv6 (continued) Advanced Settings - Address Autoconfiguration Settings Enable Automatic Enable or disable the Automatic IPv6 Address Assignment feature. IPv6 Address Assignment: Autoconfiguration Select SLAAC+RDNSS, SLAAC+Stateless DHCP, or Stateful DHCPv6. Type: If you selected SLAAC+RDNSS or SLAAC+Stateless DHCP as the Autoconfiguration Type: Router Enter the router advertisement lifetime (in minutes).
Section 3 - Configuration Auto Configuration (SLAAC/DHCPv6) Select Auto Configuration if your ISP assigns your IPv6 address when your router requests one from the ISP’s server. Some ISPs require you to adjust settings on your side before your router can connect to the IPv6 Internet. IPv6 DNS Settings DNS Type: Select either Obtain DNS server address automatically or Use the following DNS address. If Use the following DNS address is selected: Primary DNS Enter the primary DNS server address.
Section 3 - Configuration Auto Configuration (SLAAC/DHCPv6) (continued) Advanced Settings - Address Autoconfiguration Settings Enable Automatic Enable or disable the Automatic IPv6 Address Assignment feature. IPv6 Address Assignment: If DHCP-PD is enabled in LAN IPv6 Address Settings: Enable Automatic Enable or disable DHCP-PD for other IPv6 routers connected to the DHCP-PD in LAN: LAN interface. Note: This feature requires a smaller subnet prefix than /64 (i.e.
Section 3 - Configuration Auto Configuration (SLAAC/DHCPv6) (continued) If DHCP-PD is disabled in LAN IPv6 Address Settings: IPv6 Address Enter the starting IPv6 address for the DHCP server’s IPv6 assignment. Range (Start): IPv6 Address Enter the ending IPv6 address for the DHCP server’s IPv6 assignment. Range (End): IPv6 Enter the IPv6 address lifetime (in minutes). Advertisement Lifetime: Click Save when you are done.
Section 3 - Configuration PPPoE Select PPPoE if your ISP provides and requires you to enter a PPPoE username and password in order to connect to the Internet. MTU PPPoE Session: Choose Share with IPv4 to re-use your IPv4 PPPoE username and password, or Create a new session. Address Mode Select Static IP if your ISP assigned you an IP address. In most cases, select Dynamic IP. MTU Maximum Transmission Unit - you may need to change the MTU for optimal performance with your ISP.
Section 3 - Configuration PPPoE (continued) MTU Maximum Transmission Unit - you may need to change the MTU for optimal performance with your ISP. If you selected Static IP as the Address Mode and Create a new session as the PPPoE Session: IP Address Enter the IP address provided by your ISP Service Name Enter the ISP service name (optional). Reconnect Mode Select either Always-on or Manual. MTU Maximum Transmission Unit - you may need to change the MTU for optimal performance with your ISP.
Section 3 - Configuration PPPoE (continued) LAN IPv6 Link- Displays the router’s LAN link-local address. Local Address: If Enable DHCP-PD is disabled these additional parameters are available for configuration: LAN IPv6 Address: If DHCP-PD disabled or static address mode is selected, enter the LAN (local) IPv6 address for the router. LAN IPv6 Link- Displays the router’s LAN link-local address.
Section 3 - Configuration PPPoE (continued) If you selected Stateful DHCPv6 as the Autoconfiguration Type: IPv6 Address Enter the starting IPv6 address for the DHCP server’s IPv6 assignment. Range (Start): IPv6 Address Enter the ending IPv6 address for the DHCP server’s IPv6 assignment. Range (End): If DHCP-PD is disabled in LAN IPv6 Address Settings: IPv6 Address Enter the starting IPv6 address for the DHCP server’s IPv6 assignment.
Section 3 - Configuration 6rd In this section the user can configure the IPv6 6rd connection settings. Assign IPv6 Prefix: Currently unsupported. Primary DNS Enter the primary DNS server address. Server: Secondary DNS Enter the secondary DNS server address. Server: 6rd Manual Configuration Enable Hub and Enable if you want to minimize the number of routes to the destination Spoke Mode: by using a hub and spoke method of networking.
Section 3 - Configuration 6rd (continued) Advanced Settings - Address Autoconfiguration Settings Enable Automatic Enable or disable the Automatic IPv6 Address Assignment feature. IPv6 Address Assignment: Autoconfiguration Select SLAAC+RDNSS, SLAAC+Stateless DHCP, or Stateful DHCPv6. Type: Router Enter the router advertisement lifetime (in minutes).
Section 3 - Configuration Local Connectivity Only Local Connectivity Only allows you to set up an IPv6 connection that will not connect to the Internet. Advanced Settings IPv6 ULA Settings Enable ULA: Click here to enable Unique Local IPv6 Unicast Addresses settings. Use Default ULA Enable this option to use the default ULA prefix. Prefix: If you selected Enable ULA and disabled Default ULA Prefix: ULA Prefix: Enter your own ULA prefix.
Section 3 - Configuration VLAN VLAN allows for services such as Triple-Play, and divides a network into segments that can only be accessed by other devices in the same VLAN. In the Settings menu on the bar on the top of the page, click Internet, then click the VLAN link. Triple-Play Status: Click to enable or disable the Triple-Play VLAN feature. Priority ID: Enable or disable traffic priority ID for the Internet, IPTV, and VOIP VLANs.
Section 3 - Configuration Interface Traffic Type Setting LAN 1-4, Wireless, From the drop-down menu, you can select the type of data (Internet, Guest Zone: digital cable, or Voice over IP) coming from the WAN connection to each interface on the DIR-867. Click Save when you are done.
Section 3 - Configuration Wireless From this page you can configure your wireless network settings. Smart Connect Smart Connect: Enable or disable the Smart Connect Feature. When enabled, only a few configuration options are available to simplify configuration. Wi-Fi Name (SSID): Create a name for your wireless network using up to 32 characters. Password: Create a password to use for wireless security. Wireless clients will need to enter this password to successfully connect to the network.
Section 3 - Configuration Wireless - Smart Connect Disabled If Smart Connect is disabled the following options are available: 2.4GHz / 5GHz Status: Enable or disable the 2.4 GHz / 5 GHz wireless network. Wi-Fi Name (SSID): Create a name for your wireless network using up to 32 characters. Password: Create a password to use for wireless security. Advanced Settings Security Mode: Choose None or WPA/WPA2-Personal (recommended). 802.11 Mode Select the desired wireless networking standards to use. (2.
Section 3 - Configuration HT20/40 Enable or disable HT20/40 Coexistence. Coexistence: (2.4 GHz): Visibility Status: The default setting is Visible. Select Invisible if you do not want to broadcast the SSID of your wireless network. Schedule: Use the drop-down menu to select the time schedule that the rule will be enabled on. The schedule may be set to Always Enable, or you can create your own schedules in the Schedules section. Refer to Schedule on page 70 for more information.
Section 3 - Configuration Guest Zone The Guest Zone feature will allow you to create temporary zones that can be used by guests to access the Internet. These zones will be separate from your main wireless network. You may configure different zones for the 2.4 GHz and 5 GHz wireless bands. In the Settings menu on the bar on the top of the page, click Wireless, then click the Guest Zone link. The Guest Zone is disabled by default. Note: If Smart Connect is enabled, then the 2.
Section 3 - Configuration Network This section will allow you to change the local network settings of the router and to configure the DHCP settings. In the Settings menu on the bar on the top of the page, click Network. Click Advanced Settings... to expand the list and see all of the options. Network Settings LAN IP Address: Enter the IP address of the router. The default IP address is 192.168.0.1.
Section 3 - Configuration Network (continued) DHCP Server Status: Enable or disable the DHCP server. DHCP IP Address Enter the starting and ending IP addresses for the DHCP server’s IP Range: assignment. Note: If you statically (manually) assign IP addresses to your computers or devices, make sure the IP addresses are outside of this range or you may have an IP conflict. DHCP Lease Time: Enter the length of time for the IP address lease in minutes.
Section 3 - Configuration Features QoS Engine This Quality of Service (QoS) Engine will allow you to prioritize particular clients over others, so that those clients receive higher bandwidth. For example, if one client is streaming a movie and another is downloading a nonurgent file, you might wish to assign the former device a higher priority than the latter so that the movie streaming is not disrupted by the traffic of the other devices on the network.
Section 3 - Configuration Firewall Settings The router’s firewall protects your network from malicious attacks over the Internet. In the Features menu on the bar on the top of the page, click Firewall Settings. Click Advanced Settings... to expand the list and see all of the options. Enable DMZ: Enable or disable Demilitarized Zone (DMZ). This completely exposes the client to threats over the Internet, and is not recommended in ordinary situations.
Section 3 - Configuration Firewall Settings (continued) Advanced Settings - Application Level Gateway (ALG) Configuration PPTP: Allows multiple machines on the LAN to connect to their corporate network using the PPTP protocol. IPSec (VPN): Allows multiple VPN clients to connect to their corporate network using IPSec. Some VPN clients support traversal of IPSec through NAT. This Application Level Gateway (ALG) may interfere with the operation of such VPN clients.
Section 3 - Configuration IPv4/IPv6 Rules The IPv4/IPv6 Rules section is an advanced option that lets you configure what kind of traffic is allowed to pass through the network. To configure the IPv4 rules, from the Firewall Settings page click IPv4 Rules. To configure IPv6 rules, from the Firewall Settings page click IPv6 Rules. To return to the main Firewall Settings page, click Advanced. To begin, use the drop-down menu to select whether you want to ALLOW or DENY the rules you create.
Section 3 - Configuration Port Forwarding Port forwarding allows you to specify a port or range of ports to open for specific devices on the network. This might be necessary for certain applications to connect through the router. In the Features menu on the bar on the top of the page, click Port Forwarding. If you wish to remove a rule, click on its trash can icon in the Delete column. If you wish to edit a rule, click on its pencil icon in the Edit column.
Section 3 - Configuration Virtual Server The virtual server allows you to specify a single public port on your router for redirection to an internal LAN IP address and Private LAN port. To configure the virtual server, from the Port Forwarding page click Virtual Server. To return to the main Port Forwarding page, click Port Forwarding. If you wish to remove a rule, click on its trash can icon in the Delete column. If you wish to edit a rule, click on its pencil icon in the Edit column.
Section 3 - Configuration Website Filter The website filter settings allow you to block access to certain web sites. You can either create a list of sites to block, or create a list of sites to allow (with all other sites being blocked). In the Features menu on the bar on the top of the page, click Website Filter. If you want to create a list of sites to block, select DENY client access to ONLY these sites from the drop-down menu. All other sites will be accessible.
Section 3 - Configuration Static Routes The Static Routes section allows you to define custom routes to control how data traffic is moved around your network. In the Features menu on the bar on the top of the page, click Static Routes. To configure IPv6 rules, click IPv6 and refer to IPv6 on page 66. To return to the main IPv4 static routes page, click IPv4. If you wish to remove a rule, click on its trash can icon in the Delete column.
Section 3 - Configuration IPv6 To configure IPv6 rules, on the Static Routes page click IPv6. To return to the main IPv4 static routes page, click IPv4. If you wish to remove a rule, click on its trash can icon in the Delete column. If you wish to edit a rule, click on its pencil icon in the Edit column. If you wish to create a new rule, click the Add Rules button. Click Save when you are done. If you edit or create a rule, the following options will appear: Name: Enter a name for the rule.
Section 3 - Configuration Dynamic DNS Most Internet Service Providers (ISPs) assign dynamic (changing) IP addresses. Using a dynamic DNS service provider, people can enter your domain name in their web browser to connect to your server no matter what your IP address is. In the Features menu on the bar on the top of the page, click Dynamic DNS. Enable Dynamic Enable or disable dynamic DNS. Enabling this feature will reveal DNS: further configuration options.
Section 3 - Configuration IPv6 Host The IPv6 host settings are found at the bottom of the Dynamic DNS page. If you wish to remove a rule, click on its trash can icon in the Delete column. If you wish to edit a rule, click on its pencil icon in the Edit column. If you wish to create a new rule, click the Add Record button. Click Save when you are done. If you edit or create a rule, the following options will appear: Host Name: Enter the host name that you registered with your dynamic DNS service provider.
Section 3 - Configuration Management Time & Schedule Time The Time page allows you to configure, update, and maintain the correct time on the internal system clock. From here you can set the time zone and the Network Time Protocol (NTP) server. In the Management menu on the bar on the top of the page, click Time & Schedule. Time Configuration Time Zone: Select your time zone from the drop-down menu. Time: Displays the current date and time of the router.
Section 3 - Configuration Schedule Some router functions can be controlled through a pre-configured schedule. To create, edit, or delete schedules, from the Time page click Schedule. To return to the Time page, click Time. If you wish to remove a rule, click on its trash can icon in the Delete column. If you wish to edit a rule, click on its pencil icon in the Edit column. If you wish to create a new rule, click the Add Rule button. Click Save when you are done.
Section 3 - Configuration System Log The router keeps a running log of events. This log can be sent to a Syslog server, or sent to your email address. In the Management menu on the bar on the top of the page, click System Log. Log Settings System Log Click the Check System Log button to download a text file containing the system log. SysLog Settings Enable Logging to Check this box to send the router logs to a SysLog Server.
Section 3 - Configuration System Log (continued) SMTP Server Port: Enter your SMTP server port. Enable Check this box if your SMTP server requires authentication. Authentication: Account Name: Enter your SMTP account name. Password: Enter your SMTP account's password E-mail Log When Full or On Schedule Send When Log If enabled, this option will set the router to send the log when it is full. Full: Send on Schedule: If enabled, this option will set the router to send according to a set schedule.
Section 3 - Configuration System Admin This page will allow you to change the administrator (Admin) password and enable remote management. In the Management menu on the bar on the top of the page, click System Admin. To load, save, reset settings, or reboot the router, click System and refer to System on page 74. Admin Password Password: Enter a new password for the administrator account. You will need to enter this password whenever you configure the router using a web browser.
Section 3 - Configuration System This page allows you to save the router’s current configuration, load a previously saved configuration, reset the router to its factory default settings, or reboot the router. From the Admin page, click System. To return to the Admin page, click Admin. System Save Settings To This option will save the current router configuration settings to a file Local Hard Drive: on your computer. Load Settings This option will load a previously saved router configuration file.
Section 3 - Configuration User The User section is used to create, manage, and delete user accounts with user-defined access to certain router services. In the Management menu on the bar on the top of the page, click User. If you wish to remove a user account, click on its trash can icon in the Delete column. If you wish to edit a user account, click on its pencil icon in the Edit column. If you wish to create a new user, click the Create User button. Click Save when you are done.
Section 3 - Configuration User (continued) FTP Status: Enable or disable FTP server access for this user. Permission: If FTP is enabled, choose to assign either Read Only or Read/Write permission. Folder: Click Browse to select the folder you want to share. VPN Status: Enable or disable Virtual Private Network (VPN) functionality for this user. Click Save when you are done.
Section 3 - Configuration Upgrade This page will allow you to upgrade the router’s firmware, either automatically or manually. To manually upgrade the firmware, you must first download the relevant file from http://support.dlink.com. In the Management menu on the bar on the top of the page, click Upgrade. Firmware Information Current Firmware The current firmware's version and date will be displayed.
Section 3 - Configuration Statistics On the Statistics page you can view the amount of packets that pass through the router on the WAN, LAN, and wireless segments. In the Management menu on the bar on the top of the page, click Statistics. You can view the Internet, LAN, Wi-Fi 2.4 GHz, or Wi-Fi 5 GHz by clicking on the respective tabs at the top. The graph will update in real time. To clear the information on the graph, click Clear. The traffic counter will reset if the device is rebooted.
Section 4 - Quick VPN Quick VPN This router is equipped with D-Link's Quick VPN technology. Virtual Private Networking (VPN) creates a connection between devices across the Internet. Using Quick VPN allows you to securely connect your computer or mobile device to places with free, untrusted Wi-Fi hotspots in places like coffee shops and hotels by encrypting and relaying it through your home Internet connection.
Section 4 - Quick VPN Important Information The following instructions explain and help you to configure your D-Link Quick VPN enabled router and devices to create a Virtual Private Network (VPN). This feature is provided for advanced users who wish to connect remotely and use their router's Internet connection to add a layer of security while using untrusted networks. Configure the Quick VPN Server on your router first and then set up client devices to connect through your router's WAN connection.
Section 4 - Quick VPN Quick VPN Server Setup Instructions Before proceeding, ensure that your Internet connection is working properly. We recommend configuring Dynamic DNS before proceeding with Quick VPN setup. If your router is assigned an IP address from your ISP using DHCP, it may frequently change, requiring clients credentials to be set up again and a simple DDNS address will be easier than an IP address.
Section 3 - Configuration Quick VPN Setup Instructions (continued) Advanced Settings - Address Autoconfiguration Settings Authentication Choose the authentication protocol type: MSCHAPv2, PAP, or CHAP. Protocol: MSCHAPv2 is the default. MPPE: Select the encryption cipher strength: None, RC4-40, or RC4-128. None is the default. Click Save and proceed to client setup pages.
Section 4 - Quick VPN iOS Devices VPN Setup Instructions This section provides Quick VPN setup instructions for iOS devices. Refer to Quick VPN Server Setup Instructions on page 81 for more information on setting up the router for Quick VPN. 1. Touch Settings on your iPhone or iPad. Scroll to and tap General. Scroll to and tap VPN 2. Click on Add VPN Configuration... You should see a pop up window asking you to fill out the details of your VPN connection.
Section 4 - Quick VPN VPN Setup Instructions (Continued) 3. Tap Type and choose IPSec. Click Back when done. 4. Fill in Description, Server, Account, Password, and Secret. (Refer to Quick VPN Server Setup Instructions on page 81). Description: For reference purposes only, used to differentiate between multiple VPN connections. Server: Enter the IP/DDNS address of your Quick VPN server.
Section 4 - Quick VPN VPN Setup Instructions (Continued) 5. Click Done to save and return to the main VPN Configurations page. Your iOS device is now configured to connect to your Quick VPN server.
Section 4 - Quick VPN Connect or Disconnect To connect or disconnect from to your Quick VPN server, open Settings and under General tap the button next to VPN. The VPN icon will appear in the notification area at the top of your screen indicating that your device is currently connected to the Quick VPN server.
Section 4 - Quick VPN Mac OS X VPN Setup Instructions This section provides Quick VPN setup instructions for OS X using the Export Profile function. Refer to Quick VPN Server Setup Instructions on page 81 for more information. Open the exported profile. The Install Profile dialog will appear; click Continue and Install. Enter your user account password when prompted. Close the Profiles dialog. Go to > System Preferences...
Section 4 - Quick VPN VPN Setup Instructions (Continued) Enter your Passkey in the Shared Secret text box and click OK, Apply, then OK. Your Mac is now configured to connect to your Quick VPN server.
Section 4 - Quick VPN Connect or Disconnect To connect to or disconnect from your Quick VPN server, go to Preferences... > Network. > System Select the Quick VPN connection and click on the Connect or Disconnect button.
Section 4 - Quick VPN Windows 7 VPN Setup Instructions Click the Start button and type vpn into the Search programs and files box. Select Set up a virtual private network (VPN) connection. Enter the IP/DDNS address of your Quick VPN server in the Internet address box, create a name for your connection in the Destination Name, check Don't Connect now; just set it up so I can connect later, and click Next.
Section 4 - Quick VPN VPN Setup Instructions (Continued) Enter your Username. If you would like windows to save your password, enter your Password and check Remember this password. Click Create to continue. Do not click Connect Now. Click Close. Click the Start button and type view network connections into the Search programs and files text box. Select View network connections.
Section 4 - Quick VPN VPN Setup Instructions (Continued) Click Advanced settings. Enter your Passkey in the Key text box under Use preshared key for authentication. Click OK to close Advanced Properties and click OK to close Quick VPN Connection Properties. Your Windows 7 system is now configured to connect to your Quick VPN server.
Section 4 - Quick VPN Connect or Disconnect To connect to or disconnect from your Quick VPN server, click on the Network Settings icon in the notification area of the Windows taskbar and from the Dial Up and VPN section click on your Quick VPN connection and click on the Connect or Disconnect button.
Section 4 - Quick VPN Windows 8.1/8 VPN Setup Instructions This section provides Quick VPN setup instructions for Windows 8.1/8 Click the Start button and type vpn. Select Manage virtual private networks. From the Network Settings page, click Add a VPN Connection.
Section 4 - Quick VPN Add a VPN Connection 1 Select Microsoft from VPN Provider. 2 Create a name for your VPN connection. 3 Enter your IP/DDNS address of your Quick VPN server. 4 Select User name and password from Type of sign-in info. 5 If you would like windows to remember your sign-in information, enter your User name, Password, and select Remember my sign-in info 6 Choose Save.
Section 4 - Quick VPN VPN Setup Instructions (Continued) Right-click on the Quick VPN Connection you just created and left-click on Properties. Select the Security tab. For the Type of VPN, select Layer 2 Tunneling with IPsec (L2TP/IPSec).
Section 4 - Quick VPN VPN Setup Instructions (Continued) Click the Start button and type view network connections. Select View network connections. Right-click your Quick VPN Connection and left-click Properties. Select the Security tab. For the Type of VPN, select Layer 2 Tunneling with IPsec (L2TP/IPSec).
Section 4 - Quick VPN VPN Setup Instructions (Continued) Click Advanced settings. Enter your Passkey in the Key text box under Use preshared key for authentication. Click OK to close Advanced Properties and click OK to close Quick VPN Properties. Your Windows 8.1/8 system is now configured to connect to your Quick VPN server.
Section 4 - Quick VPN Connect or Disconnect To connect to or disconnect from your Quick VPN server, click on the Network Settings icon in the notification area of the Windows taskbar. Click on your Quick VPN connection and click on the Connect or Disconnect button.
Section 4 - Quick VPN Windows 10 VPN Setup Instructions This section provides Quick VPN setup instructions for Windows 10. Click Start > Settings > Network & Internet > Network and Sharing Center > VPN > Add a VPN Connection.
Section 4 - Quick VPN Add a VPN Connection 1 Select Windows (built-in) from the VPN Provider drop down menu. 2 Create a name for your VPN connection. 3 Enter your IP/DDNS address of your Quick VPN server. 4 Select L2TP/IPSec with pre-shared key from VPN type. 5 Enter the Passkey (PSK). 6 Select User name and password from Type of sign-in info. If you would like windows to remember your sign-in information, enter your User name, Password, and select Remember my sign-in info 7 Choose Save.
Section 4 - Quick VPN Connect or Disconnect To connect to or disconnect from your Quick VPN server, click on the Network Settings icon in the notification area of the Windows taskbar and click on your Quick VPN connection. The Network & Internet Settings page will open. Click on the Connect or Disconnect button.
Section 4 - Quick VPN Android VPN Setup Instructions This section provides Quick VPN setup instructions for Android devices. Your device's screens may vary.
Section 4 - Quick VPN Edit VPN Profile 1 Enter a name for your VPN connection. 2 Select L2TP/IPSec PSK for Type. 3 Enter the IP/DDNS address of your Quick VPN server. 4 Enter your Passkey (PSK) in IPSec pre-shared key field. 5 Choose Save. Your Android device is now configured to connect to your Quick VPN server.
Section 4 - Quick VPN Connect or Disconnect To connect to or disconnect from your Quick VPN server, go to Settings > More from the Wireless & networks > VPN and select the Quick VPN connection you created.
Section 4 - Quick VPN Connect or Disconnect (Continued) To connect, enter your Username and Password and select CONNECT. To disconnect, select DISCONNECT.
Section 5- Connecting a Wireless Client Connect a Wireless Client to your Router WPS Button The easiest and most secure way to connect your wireless devices to the router is with WPS (Wi-Fi Protected Setup). Most wireless devices such as wireless adapters, media players, Blu-ray DVD players, wireless printers and cameras will have a WPS button (or a software utility with WPS) that you can press to connect to the DIR-867 router.
Section 5- Connecting a Wireless Client Windows® 10 When connecting to the DIR-867 wirelessly for the first time, you will need to input the wireless network name (SSID) and Wi-Fi password (security key) of the device you are connecting to. If your product has a Wi-Fi configuration card, you can find the default network name and Wi-Fi password here. Otherwise refer to the product label for the default Wi-Fi network SSID and password, or enter the Wi-Fi credentials set during the product configuration.
Section 5- Connecting a Wireless Client To connect to the SSID, click Connect. To automatically connect with the router when your device next detects the SSID, click the Connect Automatically check box. You will then be prompted to enter the Wi-Fi password (network security key) for the wireless network. Enter the password into the box and click Next to connect to the network. Your computer will now automatically connect to this wireless network when it is detected.
Section 5- Connecting a Wireless Client Windows® 8 WPA/WPA2 It is recommended that you enable wireless security (WPA/WPA2) on your wireless router or access point before configuring your wireless adapter. If you are joining an existing network, you will need to know the security key (Wi-Fi password) being used. To join an existing network, locate the wireless network icon in the taskbar next to the time display.
Section 5- Connecting a Wireless Client You will then be prompted to enter the network security key (Wi-Fi password) for the wireless network. Enter the password into the box and click Next. If you wish to use Wi-Fi Protected Setup (WPS) to connect to the router, you can also press the WPS button on your router during this step to enable the WPS function.
Section 5- Connecting a Wireless Client Windows® 7 WPA/WPA2 It is recommended that you enable wireless security (WPA/WPA2) on your wireless router or access point before configuring your wireless adapter. If you are joining an existing network, you will need to know the security key or passphrase being used. 1. Click on the wireless icon in your system tray (lower-right corner). Wireless Icon 2. The utility will display any available wireless networks in your area.
Section 5- Connecting a Wireless Client 3. Highlight the wireless connection with Wi-Fi name (SSID) you would like to connect to and click the Connect button. If you get a good signal but cannot access the Internet, check your TCP/IP settings for your wireless adapter. Refer to the Networking Basics section in this manual for more information. 4. The following window appears while your computer tries to connect to the router.
Section 5- Connecting a Wireless Client 5. Enter the same security key or passphrase (Wi-Fi password) that is on your router and click Connect. You can also connect by pushing the WPS button on the router. It may take 20-30 seconds to connect to the wireless network. If the connection fails, please verify that the security settings are correct. The key or passphrase must be exactly the same as the one on the wireless router.
Section 5- Connecting a Wireless Client WPS The WPS feature of the DIR-867 can be configured using Windows® 7. Carry out the following steps to use Windows® 7 to configure the WPS feature: 1. Click the Start button and select Computer from the Start menu. 2. Click Network on the left side.
Section 5- Connecting a Wireless Client 3. Double-click the DIR-867. DIR-867 4. Input the WPS PIN number (on the router label) in the Setup > Wireless Setup menu in the Router’s Web UI) and click Next.
Section 5- Connecting a Wireless Client 5. Type a name to identify the network. 6. To configure advanced settings, click the icon. Click Next to continue.
Section 5- Connecting a Wireless Client 7. The following window appears while the DIR-867 is being configured. Wait for the configuration to complete. 8. The following window informs you that WPS on the DIR-867 has been set up successfully. Make a note of the security key as you may need to provide this security key if adding an older wireless device to the network in the future. 9. Click Close to complete WPS setup.
Section 5- Connecting a Wireless Client Windows Vista® Windows Vista® users may use the built-in wireless utility. If you are using another company’s wireless utility, please refer to the user manual of your wireless adapter for help connecting to a wireless network. Most wireless utilities will have a “site survey” option similar to the Windows Vista® utility as seen below. If you receive the Wireless Networks Detected bubble, click on the center of the bubble to access the utility.
Section 5- Connecting a Wireless Client WPA/WPA2 It is recommended that you enable wireless security (WPA/WPA2) on your wireless router or access point before configuring your wireless adapter. If you are joining an existing network, you will need to know the security key or passphrase being used. 1. Open the Windows Vista® Wireless Utility by right-clicking on the wireless computer icon in your system tray (lower right corner of screen). Select Connect to a network. 2.
Section 5- Connecting a Wireless Client 3. Enter the same security key or passphrase (Wi-Fi password) that is on your router and click Connect. It may take 20-30 seconds to connect to the wireless network. If the connection fails, please verify that the security settings are correct. The key or passphrase must be exactly the same as the one on the wireless router.
Section 6 - Troubleshooting Troubleshooting This chapter provides solutions to problems that can occur during the installation and operation of the DIR-867. Read the following descriptions if you are having problems. The examples below are illustrated in Windows® XP. If you have a different operating system, the screenshots on your computer will look similar to these examples. 1. Why can’t I access the web-based configuration utility? When entering the IP address of the D-Link router (192.168.0.
Section 6 - Troubleshooting • Configure your Internet settings: • Go to Start > Settings > Control Panel. Double-click the Internet Options Icon. From the Security tab, click the button to restore the settings to their defaults. • Click the Connection tab and set the dial-up option to Never Dial a Connection. Click the LAN Settings button. Make sure nothing is checked. Click OK. • Go to the Advanced tab and click the button to restore these settings to their defaults. Click OK three times.
Section 6 - Troubleshooting 3. Why can’t I connect to certain sites or send and receive emails when connecting through my router? If you are having a problem sending or receiving email, or connecting to secure sites such as eBay, banking sites, and Hotmail, we suggest lowering the MTU in increments of ten (Ex. 1492, 1482, 1472, etc). To find the proper MTU Size, you’ll have to do a special ping of the destination you’re trying to go to. A destination could be another computer, or a URL.
Section 6 - Troubleshooting You should start at 1472 and work your way down by 10 each time. Once you get a reply, go up by 2 until you get a fragmented packet. Take that value and add 28 to the value to account for the various TCP/IP headers. For example, lets say that 1452 was the proper value, the actual MTU size would be 1480, which is the optimum for the network we’re working with (1452+28=1480). Once you find your MTU, you can now configure your router with the proper MTU size.
Appendix A - Wireless Basics Wireless Basics D-Link wireless products are based on industry standards to provide easy-to-use and compatible high-speed wireless connectivity within your home, business, or public access wireless networks. Strictly adhering to the IEEE standard, the D-Link wireless family of products will allow you to securely access the data you want, when, and where you want it. You will be able to enjoy the freedom that wireless networking delivers.
Appendix A - Wireless Basics What is Wireless? Wireless or Wi-Fi technology is another way of connecting your computer to the network without using wires. Wi-Fi uses radio frequency to connect wirelessly so you have the freedom to connect computers anywhere in your home or office network. Why D-Link Wireless? D-Link is the worldwide leader and award winning designer, developer, and manufacturer of networking products. D-Link delivers the performance you need at a price you can afford.
Appendix A - Wireless Basics Wireless Personal Area Network (WPAN) Bluetooth is the industry standard wireless technology used for WPAN. Bluetooth devices in WPAN operate in a range up to 30 feet away. Compared to WLAN the speed and wireless operation range are both less than WLAN, but in return it doesn’t use nearly as much power. This makes it ideal for personal devices, such as mobile phones, PDAs, headphones, laptops, speakers, and other devices that operate on batteries.
Appendix A - Wireless Basics Where is wireless used? Wireless technology is expanding everywhere, not just at home or office. People like the freedom of mobility and it’s becoming so popular that more and more public facilities now provide wireless access to attract people. The wireless connection in public places is usually called “hotspots”.
Appendix A - Wireless Basics Wireless Modes There are basically two modes of networking: • Infrastructure – All wireless clients will connect to an access point or wireless router. • Ad-hoc – Directly connecting to another computer for peer-to-peer communication using wireless network adapters on each computer, such as two or more DIR-867 wireless network USB adapters. An Infrastructure network contains an access point or wireless router.
Appendix B - Networking Basics Check your IP address Networking Basics After you install your new D-Link adapter, by default, the TCP/IP settings should be set to obtain an IP address from a DHCP server (i.e. wireless router) automatically. To verify your IP address, please follow the steps below. Click on Start > Run. In the run box type cmd and click OK. (Windows® 10/8/7/Vista® users type cmd in the Start Search box.) At the prompt, type ipconfig and press Enter.
Appendix B - Networking Basics Statically Assign an IP address If you are not using a DHCP capable gateway/router, or you need to assign a static IP address, please follow the steps below: Step 1 Windows® 10 - Click on Start > Windows System > Command Prompt Windows® 8 - Click on Start > Windows System > Command Prompt Windows® 7 - Click on Start > Control Panel > Network and Internet > Network and Sharing Center.
Appendix B - Networking Basics Wireless Security This section will show you the different levels of security you can use to protect your data from intruders. The DIR-867 offers the following types of security: • WPA2 (Wi-Fi Protected Access 2) • WPA (Wi-Fi Protected Access) • WPA2-PSK (Pre-Shared Key) • WPA-PSK (Pre-Shared Key) What is WPA? WPA (Wi-Fi Protected Access), is a Wi-Fi standard that was designed to improve the security features of WEP (Wired Equivalent Privacy).
Appendix C - Technical Specifications Technical Specifications Device Interfaces • Wireless Interface (2.4 GHz): IEEE 802.11n/g/b • Wireless Interface (5 GHz): IEEE 802.11 ac/n/a • Four 10/100/1000 Mbps LAN ports • One 10/100/1000 Mbps WAN port Antenna Types • Four external antennas Standards • IEEE 802.11ac1,2,3 • IEEE 802.11n • IEEE 802.11g • IEEE 802.11b • IEEE 802.11a • IEEE 802.3 • IEEE 802.3u • IEEE 802.
Appendix D - Regulatory Information Regulatory Statements Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
Appendix D - Regulatory Information IMPORTANT NOTICE: FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 38 cm between the radiator and your body. Innovation, Science and Economic Development Canada (ISED) Statement: This Class B digital apparatus complies with Canadian ICES-003.
Appendix D - Regulatory Information Caution : (i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems; (ii) the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p.
