Dir-878 A1 r1 User Manua en
Dir-878 A1 r1 User Manua en
DIR-878
AC2600 MU-MIMO Wi-Fi Gigabit Router
October 2020
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
User Manual
Contents
Chapter 1. Introduction.........................................5
Contents and Audience.......................................................5
Conventions.................................................................5
Document Structure..........................................................5
Chapter 2. Overview.............................................6
General Information.........................................................6
Specifications..............................................................9
Product Appearance.........................................................14
Upper Panel..............................................................14
Back Panel...............................................................15
Delivery Package...........................................................17
Chapter 3. Installation and Connection.........................18
Before You Begin...........................................................18
Connecting to PC...........................................................19
PC with Ethernet Adapter.................................................19
Obtaining IP Address Automatically (OS Windows 7)........................19
Obtaining IP Address Automatically (OS Windows 10).......................24
PC with Wi-Fi Adapter....................................................28
Obtaining IP Address Automatically and Connecting to Wireless Network
(OS Windows 7)...........................................................29
Obtaining IP Address Automatically and Connecting to Wireless Network
(OS Windows 10)..........................................................32
Connecting to Web-based Interface..........................................35
Web-based Interface Structure..............................................37
Summary Page.............................................................37
Home Page................................................................39
Menu Sections............................................................40
Notifications............................................................41
Chapter 4. Configuring via Web-based Interface.................42
Initial Configuration Wizard...............................................42
Selecting Operation Mode.................................................44
Router.................................................................44
Access Point or Repeater...............................................46
Mesh Network Main Device (Master)......................................48
Mesh Network Subordinate Device (Slave)................................50
Changing LAN IPv4 Address................................................51
Wi-Fi Client.............................................................52
Configuring WAN Connection...............................................54
Static IPv4 Connection.................................................55
Static IPv6 Connection.................................................56
PPPoE, IPv6 PPPoE, PPPoE Dual Stack,
PPPoE + Dynamic IP (PPPoE Dual Access) Connections.....................57
PPPoE + Static IP (PPPoE Dual Access) Connection.......................58
PPTP + Dynamic IP or L2TP + Dynamic IP Connection......................59
PPTP + Static IP or L2TP + Static IP Connection........................60
Configuring Wireless Network.............................................61
Configuring LAN Ports for IPTV/VoIP......................................63
Changing Web-based Interface Password....................................65
Connection of Multimedia Devices...........................................67
Page 2 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
User Manual
Statistics.................................................................70
Network Statistics.......................................................70
DHCP.....................................................................71
Routing..................................................................72
Clients and Session......................................................74
Port Statistics..........................................................75
Multicast Groups.........................................................76
Connections Setup..........................................................77
WAN......................................................................77
Creating Dynamic IPv4 or Static IPv4 WAN Connection....................79
Creating Dynamic IPv6 or Static IPv6 WAN Connection....................82
Creating PPPoE WAN Connection..........................................85
Creating PPTP, L2TP, or L2TP over IPsec WAN Connection.................90
Creating PPPoE IPv6 or PPPoE Dual Stack WAN Connection.................95
LAN.....................................................................101
IPv4..................................................................101
IPv6..................................................................106
WAN Reservation.........................................................110
VPN.......................................................................112
IPsec...................................................................112
GRE.....................................................................119
PPTP/L2TP servers.......................................................121
VPN Users...............................................................126
EoGRE...................................................................127
Wi-Fi.....................................................................129
Basic Settings..........................................................129
Client Management.......................................................137
WPS.....................................................................138
Using WPS Function via Web-based Interface............................140
Using WPS Function without Web-based Interface........................141
WMM.....................................................................142
Client..................................................................145
Additional..............................................................147
MAC Filter..............................................................151
Super Mesh..............................................................154
Roaming.................................................................159
Page 3 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
User Manual
Advanced..................................................................161
VLAN....................................................................162
WAN Assignment..........................................................165
Using LAN Ports as WAN Ports..........................................165
Using WAN Port as LAN Port............................................166
SNMP....................................................................167
DNS.....................................................................170
DDNS....................................................................172
Ports Settings..........................................................174
Redirect................................................................177
Routing.................................................................178
TR-069 Client...........................................................180
Remote Access...........................................................182
UPnP IGD................................................................184
UDPXY...................................................................185
IGMP/MLD................................................................187
ALG/Passthrough.........................................................189
CoovaChilli.............................................................191
VRRP....................................................................195
Firewall..................................................................197
IP Filter...............................................................197
Virtual Servers.........................................................201
DMZ.....................................................................204
MAC Filter..............................................................205
URL Filter..............................................................207
AdBlock.................................................................210
System....................................................................211
Configuration...........................................................212
Firmware Update.........................................................214
Local Update..........................................................216
Remote Update.........................................................217
Schedule................................................................218
Log.....................................................................222
Ping....................................................................224
Traceroute..............................................................226
Telnet/SSH..............................................................228
System Time.............................................................229
Auto Provision..........................................................231
Yandex.DNS................................................................233
Settings................................................................233
Devices and Rules.......................................................235
SkyDNS....................................................................237
Settings................................................................238
Devices.................................................................240
Chapter 5. Operation Guidelines...............................242
Safety Rules and Conditions...............................................242
Wireless Installation Considerations......................................243
Chapter 6. Abbreviations and Acronyms.........................244
Page 4 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Introduction
User Manual
CHAPTER 1. INTRODUCTION
Contents and Audience
This manual describes the router DIR-878 and explains how to configure and operate it.
This manual is intended for users familiar with basic networking concepts, who create an in-home
local area network, and system administrators, who install and configure networks in offices.
Conventions
Example Description
“Quick Installation
A reference to a document.
Guide”
Document Structure
Chapter 1 describes the purpose and structure of the document.
Chapter 2 gives an overview of the router's hardware and software features, describes its
appearance and the package contents.
Chapter 3 explains how to install the router DIR-878 and configure a PC in order to access its web-
based interface.
Chapter 4 describes all pages of the web-based interface in detail.
Chapter 5 includes safety instructions and tips for networking.
Chapter 6 introduces abbreviations and acronyms most commonly used in User Manuals for
D-Link customer premises equipment.
Page 5 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
CHAPTER 2. OVERVIEW
General Information
The DIR-878 device is a wireless dual band gigabit router with a built-in 4-port switch. It provides a
fast and simple way to create a wireless and wired network at home or in an office.
You are able to connect the wireless router DIR-878 to a cable or DSL modem or to a private
Ethernet line and use a high-speed Internet connection to successfully fulfill a wide range of
professional tasks. The built-in 4-port switch enables you to connect Ethernet-enabled computers,
game consoles, and other devices to your network.
New Firmware Version 4.0.1
The firmware update to version 4.0.1 essentially improves the technical specifications and
functional capabilities of the DIR-878 Wi-Fi Gigabit Router, allowing to migrate from the 3 x 3
MU-MIMO to the 4 x 4 MU-MIMO full-fledged support, as also to increase Wi-Fi performance
from AC1900 to AC2600, and to enhance the security features.
The functionality of new firmware:
• moving to 4 x 4 MU-MIMO technology that allows to simultaneously transfer up to 4 data
streams;
• increased wireless connection rate up to 2.6Gbps: up to 800Mbps for 2.4GHz band and up to
1733Mbps for 5GHz band;
• 160MHz channel bandwidth providing a high-speed connection (up to 3.464Gbps);
• Super Mesh1 function is D-Link implementation of Mesh networks designed to quickly
connect up to 16 access points or wireless routers into one transport network, for example,
when it's needed to create a large temporary Wi-Fi network for an outdoor event or when it's
required to provide high-quality Wi-Fi coverage without dead zones in offices and living
units of complicated planning;
• built-in PPTP/L2TP server and GRE, EoGRE, L2TP over IPsec VPN tunnels support;
• embedded ad blocking function;
• CoovaChilli captive portal for HoReCa companies and Internet service providers that
arrange public Wi-Fi hotspot areas.
New firmware version is available for installation through web-based interface and D-Link
Assistant mobile application2.
LAN/WAN Conversion, WAN Failover
You can use any Ethernet port of the router as LAN or WAN port. The new-generation firmware
supports assigning several WAN ports, for example, in order to configure the primary and backup
WAN connection of different ISPs.
1 Other D-Link devices with Super Mesh support: DAP-600P, DAP-400P, DAP-1620/B1, DIR-853, DIR-882.
2 Note: when the firmware is updated, the factory default settings are restored.
Page 6 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Wireless Interface
Using the DIR-878 device, you are able to quickly create a high-speed wireless network at home or
in your office, which lets computers and mobile devices access the Internet virtually anywhere
(within the operational range of your wireless network). Simultaneous activity of 2.4GHz band and
5GHz band allows performing a wide range of tasks. The router can operate as a base station for
connecting wireless devices of the standards 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac (at
the wireless connection rate up to 2600Mbps3).
Secure Wireless Connection
The router supports multiple functions for the wireless interface: several security standards (WEP,
WPA/WPA2), MAC address filtering, WPS, WMM.
In addition, the device is equipped with a button for switching the Wi-Fi network off/on. If needed,
for example, when you leave home, you can easily switch the router’s WLAN by pressing the
button, and devices connected to the LAN ports of the router will stay online.
Advanced Capabilities of Wireless Network
Multi-user MIMO technology allows to distribute the router's resources to let multiple wireless
clients use the Wi-Fi network efficiently, keeping high rates for HD media streaming, lag-free
gaming, and fast transfer of large files.
Transmit Beamforming technology allows to flexibly change the antennas' radiation pattern and to
redistribute the signal directly to wireless devices connected to the router.
Smart adjustment of Wi-Fi clients is useful for networks based on several D-Link access points or
routers – when the smart adjustment function is configured on each of them, a client always
connects to the access point (router) with the highest signal level.
Support of guest Wi-Fi network allows you to create a separate wireless network with individual
security settings and maximum rate limitation. Devices connected to the guest network will be able
to access the Internet, but will be isolated from the devices and resources of the router's LAN.
Security
The wireless router DIR-878 includes a built-in firewall. The advanced security functions minimize
threats of hacker attacks, prevent unwanted intrusions to your network, and block access to
unwanted websites for users of your LAN.
The SSH protocol support provides more secure remote configuration and management of the
router due to encryption of all transmitted traffic, including passwords.
In addition, the router supports IPsec and allows to create secure VPN tunnels. Support of the
IKEv2 protocol allows to provide simplified message exchange and use asymmetric authentication
engine upon configuration of an IPsec tunnel.
Built-in Yandex.DNS service protects against malicious and fraudulent web sites and helps to block
access to adult content on children's devices.
The router also supports the SkyDNS web content filtering service, which provides more settings
and opportunities for safer Internet experience for home users of all ages and for professional
activities of corporate users.
Page 7 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Now the schedules are also implemented; they can be applied to the rules of various filters and used
to reboot the router at the specified time or every specified time period and to enable/disable the
wireless network.
Easy configuration and update
You can configure the settings of the wireless router DIR-878 via the user-friendly web-based
interface (the interface is available in several languages).
The configuration wizard allows you to quickly switch DIR-878 to one of the following modes:
router (for connection to a wired or wireless ISP), access point, repeater, or client, and then
configure all needed setting for operation in the selected mode in several simple steps.
Also DIR-878 supports configuration and management via mobile application for Android and
iPhone smartphones.
You can simply update the firmware: the router itself finds approved firmware on D-Link update
server and notifies when ready to install it.
Page 8 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Specifications*
Hardware
Processor · MT7621A (880MHz, dual core)
LEDs · Power
· Internet
· WLAN 2.4G
· WLAN 5G
MIMO · 4 x 4, MU-MIMO
Software
WAN connection types · PPPoE
· IPv6 PPPoE
· PPPoE Dual Stack
· Static IPv4 / Dynamic IPv4
· Static IPv6 / Dynamic IPv6
· PPPoE + Static IP (PPPoE Dual Access)
· PPPoE + Dynamic IP (PPPoE Dual Access)
· PPTP/L2TP + Static IP
· PPTP/L2TP + Dynamic IP
* The device features are subject to change without notice. For the latest versions of the firmware and relevant
documentation, visit www.dlink.ru.
Page 9 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Software
Network functions · DHCP server/relay
· Advanced configuration of built-in DHCP server
· Stateful/Stateless mode for IPv6 address assignment, IPv6 prefix delegation
· Automatic obtainment of LAN IP address (for access point/repeater/client
modes)
· DNS relay
· Dynamic DNS
· Static IP routing
· Static IPv6 routing
· IGMP/MLD Proxy
· RIP
· Support of UPnP IGD
· Support of VLAN
· WAN ping respond
· Support of SIP ALG
· Support of RTSP
· WAN failover
· LAN/WAN conversion
· Multi-WAN support
· Autonegotiation of speed, duplex mode, and flow control / Manual speed and
duplex mode setup for each Ethernet port
· Built-in UDPXY application
· Support of VRRP
Firewall functions · Network Address Translation (NAT)
· Stateful Packet Inspection (SPI)
· IP filter
· IPv6 filter
· MAC filter
· URL filter
· Ad blocking function
· DMZ
· Virtual servers
· Built-in Yandex.DNS web content filtering service
· Built-in SkyDNS web content filtering service
Page 10 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Software
Management and monitoring · Local and remote access to settings through SSH/TELNET/WEB
(HTTP/HTTPS)
· Multilingual web-based interface for configuration and management
· Support of D-Link Assistant application for Android and iPhone smartphones
· Notification on connection problems and auto redirect to settings
· Firmware update via web-based interface
· Automatic notification on new firmware version
· Saving/restoring configuration to/from file
· Support of logging to remote host
· Automatic synchronization of system time with NTP server and manual
time/date setup
· Ping utility
· Traceroute utility
· TR-069 client
· SNMP agent
· Schedules for filters rules, automatic reboot, and enabling/disabling wireless
network
· Automatic upload of configuration file from ISP's server (Auto Provision)
Frequency range
· 2400 ~ 2483.5MHz
The frequency range depends upon the · 5150 ~ 5350MHz
radio frequency regulations applied in your · 5650 ~ 5850MHz
country
·
4
Wireless connection rate IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
· IEEE 802.11b: 1, 2, 5.5, and 11Mbps
· IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
· IEEE 802.11n (2.4GHz): 6.5–600Mbps (MCS0–MCS30) to 800Mbps (QAM256)
· IEEE 802.11n (5GHz): from 6.5 to 600Mbps (from MCS0 to MCS30)
· IEEE 802.11ac (5GHz): from 6.5 to 1733Mbps (from MCS0 to MSC9)
Page 11 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
4 Maximum wireless signal rate is derived from IEEE standard 802.11ac and 802.11n specifications. In order to get
the rate of 800Mbps in the 2.4GHz band, a Wi-Fi client should support MIMO 4 x 4 and QAM256 modulation
scheme. Actual data throughput will vary. Network conditions and environmental factors, including volume of
network traffic, building materials and construction, and network overhead, lower actual data throughput rate.
Environmental factors will adversely affect wireless signal range.
Page 12 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
· 802.11b
-96dBm at 1Mbps
-90dBm at 11Mbps
· 802.11g
-95dBm at 6Mbps
-76dBm at 54Mbps
· 802.11n
2.4GHz, HT20
-95dBm at MCS0
-76dBm at MCS7
2.4GHz, HT40
-92dBm at MCS0
-72dBm at MCS7
5GHz, HT20
-95dBm at MCS0
-76dBm at MCS7
5GHz, HT40
-93dBm at MCS0
-73dBm at MCS7
· 802.11ac
VHT20
-96dBm at MCS0
-73dBm at MCS8
VHT40
-92dBm at MCS0
-68dBm at MCS9
VHT80
-88dBm at MCS0
-64dBm at MCS9
Physical Parameters
Dimensions (L x W x H) · 259 x 184 x 46 mm (10.8 x 7.24 x 1.81 in)
Operating Environment
Power · Output: 12V DC, 1.5A
Page 13 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Product Appearance
Upper Panel
Page 14 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Back Panel
Port Description
Page 15 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Port Description
The device is also equipped with four external non-detachable Wi-Fi antennas.
Page 16 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual
Delivery Package
The following should be included:
• Router DIR-878
• Power adapter DC 12V/1.5A
• Ethernet cable
• “Quick Installation Guide” (brochure).
The “User Manual” and “Quick Installation Guide” documents are available on D-Link website
(see www.dlink.ru).
! Using a power supply with a different voltage rating than the one included will cause
damage and void the warranty for this product.
Page 17 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Page 18 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Connecting to PC
PC with Ethernet Adapter
1. Connect an Ethernet cable between any of LAN ports located on the back panel of the router
and the Ethernet port of your PC.
2. Connect the power cord to the power connector port on the back panel of the router, then
plug the power adapter into an electrical outlet or power strip.
3. Turn on the router by pressing the POWER button on its back panel.
Then make sure that your PC is configured to obtain an IP address automatically (as DHCP client).
Page 19 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
3. In the menu located on the left part of the window, select the Change adapter settings
line.
Page 20 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
4. In the opened window, right-click the relevant Local Area Connection icon and select
the Properties line in the menu displayed.
Page 21 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
5. In the Local Area Connection Properties window, on the Networking tab, select the
Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.
Page 22 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.
Page 23 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Page 24 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
3. In the Change your network settings section, select the Change adapter options
line.
Page 25 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
4. In the opened window, right-click the relevant Local Area Connection icon and select
the Properties line in the menu displayed.
Page 26 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.
Page 27 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Page 28 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Page 29 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.
Page 30 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
9. In the opened Wireless Network Connection window, select the wireless network
DIR-878 (for operating in the 2.4GHz band) or DIR-878-5G (for operating in the 5GHz
band) and click the Connect button.
If you perform initial configuration of the router via Wi-Fi connection, note that
! immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.
Page 31 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Page 32 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.
Page 33 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
9. In the opened Wireless Network Connection window, select the wireless network DIR-
878 (for operating in the 2.4GHz band) or DIR-878-5G (for operating in the 5GHz band)
and click the Connect button.
If you perform initial configuration of the router via Wi-Fi connection, note that
! immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.
Page 34 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
For security reasons, DIR-878 with default settings cannot connect to the Internet. To get
! started, please set your own password used to access the web-based interface and, if
needed, configure other settings recommended by your ISP.
Start a web browser (see the Before You Begin section, page 18). In the address bar of the web
browser, enter the domain name of the router (by default, dlinkrouter.local) with a dot at
the end and press the Enter key. Also you can enter the IP address of the device (by default,
192.168.0.1).
If the error “The page cannot be displayed” (or “Unable to display the page”/“Could not
! connect to remote server”) occurs upon connecting to the web-based interface of the router,
make sure that you have properly connected the router to your computer.
If the device has not been configured previously or the default settings have been restored, after
access to the web-based interface the Initial Configuration Wizard opens (see the Initial
Configuration Wizard section, page 42).
Figure 23. The page for running the Initial Configuration Wizard.
Page 35 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
If you configured the device previously, after access to the web-based interface the login page
opens. Enter the username (admin) in the Username field and the password you specified in the
Password field, then click the LOGIN button.
In order not to log out, move the Stay signed in switch to the right. After closing the web browser
or rebooting the device, you need to enter the username and the password again.
If you enter a wrong password several times, the web-based interface will be blocked for a while.
Please wait for one minute and reenter the password you specified.
Page 36 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Page 37 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
The Device Information section displays the model and hardware version of the router, the
firmware version, and other data.
To contact the technical support group (to send an e-mail), left-click the support e-mail address.
After clicking the line, the e-mail client window for sending a new letter to the specified address
opens.
To change the operation mode of the device, left-click the name of the mode in the Device mode
line. In the opened window, click the Initial Configuration Wizard link (for the detailed
description of the Wizard, see the Initial Configuration Wizard section, page 42).
The Wi-Fi 2.4 GHz and Wi-Fi 5 GHz sections display data on the state of the device's wireless
network, its name and the authentication type, and availability of an additional wireless network in
the relevant band.
In the WAN section, data on the type and status of the existing WAN connection are displayed.
In the LAN section, the IPv4 and IPv6 address of the router, the LAN MAC address, and the
number of wired and wireless clients of the device are displayed.
The LAN Ports section displays the state of the device's LAN ports and data transfer mode of
active ports.
The Yandex.DNS section displays the Yandex.DNS service state and operation mode. To enable
the Yandex.DNS service, move the Enable switch to the right. If needed, change the operation
mode of the service.
Page 38 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Home Page
The Home page displays links to the most frequently used pages with device's settings.
Other settings of the router are available in the menu in the left part of the page.
Page 39 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Menu Sections
To configure the router use the menu in the left part of the page.
In the Initial Configuration section you can run the Initial Configuration Wizard. The Wizard
allows you to configure the router for operation in the needed mode and specify all parameters
necessary for getting started (for the description of the Wizard, see the Initial Configuration
Wizard section, page 42).
The pages of the Statistics section display data on the current state of the router (for the
description of the pages, see the Statistics section, page 70).
The pages of the Connections Setup section are designed for configuring basic parameters of
the LAN interface of the router and creating a connection to the Internet (for the description of the
pages, see the Connections Setup section, page 77).
The pages of the VPN section are designed for configuring VPN connections based on IPsec/GRE/
EoGRE protocols and creating a PPTP or L2TP server and accounts for access to it (for the
description of the pages, see the VPN section, page 112).
The pages of the Wi-Fi section are designed for specifying all needed settings of the router's
wireless network (for the description of the pages, see the Wi-Fi section, page 129).
The pages of the Advanced section are designed for configuring additional parameters of the
router (for the description of the pages, see the Advanced section, page 161).
The pages of the Firewall section are designed for configuring the firewall of the router (for the
description of the pages, see the Firewall section, page 197).
The pages of the System section provide functions for managing the internal system of the router
(for the description of the pages, see the System section, page 211).
The pages of the Yandex.DNS section are designed for configuring the Yandex.DNS web content
filtering service (for the description of the pages, see the Yandex.DNS section, page 233).
The pages of the SkyDNS section are designed for configuring the SkyDNS web content filtering
service (for the description of the pages, see the SkyDNS section, page 237).
To exit the web-based interface, click the Logout line of the menu.
Page 40 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual
Notifications
The router's web-based interface displays notifications in the top right part of the page.
Page 41 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Page 42 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
On the opened page, click YES in order to leave the current language of the web-based interface or
click NO to select another language.
Page 43 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Router
In order to connect your device to a wired ISP, on the Device mode page, from the Connection
method list, select the Autonomous value. Then from the Work mode list, select the Router
value. In this mode you can configure a WAN connection, set your own settings for the wireless
network in the 2.4GHz and 5GHz bands, configure LAN ports to connect an STB or VoIP phone,
and set your own password for access to the web-based interface of the device.
Page 44 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
In order to connect your device to a wireless ISP (WISP), on the Device mode page, from the
Connection method list, select the Autonomous value. Then from the Work mode list, select
the WISP Repeater value. In this mode you can connect your device to another access point,
configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and
5GHz bands, and set your own password for access to the web-based interface of the device.
Page 45 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Page 46 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
In order to connect your device to a wireless router for extending the range of the existing wireless
network, on the Device mode page, from the Connection method list, select the
Autonomous value. Then from the Work mode list, select the Repeater value. In this mode
you can change the LAN IP address, connect your device to another access point, set your own
settings for the wireless network in the 2.4GHz and 5GHz bands, and set your own password for
access to the web-based interface of the device.
Page 47 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
! The Super Mesh function cannot operate in both bands simultaneously. Select one of the
bands (2.4GHz or 5GHz) for all devices of the configured network.
In order to connect your main device to a wired ISP, from the Work mode list, select the Router
value. In this mode you can configure a WAN connection, set your own settings for the wireless
network in the 2.4GHz and 5GHz bands, configure LAN ports to connect an STB or VoIP phone,
and set your own password for access to the web-based interface of the device.
Figure 37. Configuring the Super Mesh function for a main device. The Router mode.
Page 48 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
In order to connect your main device to a wireless ISP (WISP), from the Work mode list, select
the WISP Repeater value. In this mode you can connect your device to another access point,
configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and
5GHz bands, and set your own password for access to the web-based interface of the device.
Figure 38. Configuring the Super Mesh function for a main device. The WISP Repeater mode.
Page 49 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 39. Configuring the Super Mesh function for a subordinate device.
Page 50 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
! In order to access the web-based interface using the domain name, in the address bar of the
web browser, enter the name of the router with a dot at the end.
If you want to manually assign the LAN IPv4 address for DIR-878, do not select the Automatic
obtainment of IPv4 address checkbox and fill in the IP address, Subnet mask, DNS IP
address, Hostname fields and, if needed, the Gateway IP address field. Make sure that the
assigned address does not coincide with the LAN IPv4 address of the router to which your device
connects.
Figure 40. The page for changing the LAN IPv4 address.
3. Click the NEXT button to continue or click the BACK button to return to the previous page.
Page 51 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Wi-Fi Client
This configuration step is available for the WISP Repeater and Repeater modes.
1. On the Wi-Fi Сlient page, click the WIRELESS NETWORKS button and select the
network to which you want to connect in the opened window. When you select a network,
the Network name (SSID) and BSSID fields are filled in automatically.
If you cannot find the needed network in the list, click the UPDATE LIST icon ( ).
2. If a password is needed to connect to the selected network, fill in the relevant field. Click the
Show icon ( ) to display the entered password.
Parameter Description
Page 52 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Parameter Description
The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.
Encryption key WEP as Select the checkbox to set a hexadecimal number as a key for
HEX encryption.
Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed authentication type is
selected, the following fields are displayed:
Parameter Description
3. Click the NEXT button to continue or click the BACK button to return to the previous page.
Page 53 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
! Internet service provider (ISP). Make sure that you have obtained all necessary information
prior to configuring your connection. Otherwise contact your ISP.
1. On the Internet connection type page, click the SCAN button (available for the Router
mode only) to automatically specify the connection type used by your ISP or manually
select the needed value from the Connection type list.
2. Specify the settings necessary for the connection of the selected type.
3. If your ISP uses MAC address binding, select the Clone MAC address of your device
checkbox.
4. If the Internet access is provided via a VLAN channel, select the Use VLAN checkbox and
fill in the VLAN ID field.
5. Click the NEXT button to continue or click the BACK button to return to the previous page.
Page 54 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 42. The page for configuring Static IPv4 WAN connection.
Fill in the following fields: IP address, Subnet mask, Gateway IP address, and DNS IP
address.
Page 55 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 43. The page for configuring Static IPv6 WAN connection.
Fill in the following fields: IP address, Prefix, Gateway IP address, and DNS IP address.
Page 56 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
PPPoE, IPv6 PPPoE, PPPoE Dual Stack, PPPoE + Dynamic IP (PPPoE Dual
Access) Connections
Page 57 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 45. The page for configuring PPPoE + Static IP (PPPoE Dual Access) WAN connection.
In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.
Also fill in the following fields: IP address, Subnet mask, Gateway IP address, and DNS IP
address.
Page 58 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 46. The page for configuring PPTP + Dynamic IP WAN connection.
In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
Page 59 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 47. The page for configuring PPTP + Static IP WAN connection.
In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
Also fill in the following fields: IP address, Subnet mask, Gateway IP address, and DNS IP
address.
Page 60 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Page 61 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
5. If you want to create an additional wireless network isolated from your LAN in the 2.4GHz
band, select the Enable guest network checkbox (available for the Router and WISP
Repeater modes only).
6. In the Network name field, specify your own name for the guest wireless network or leave
the value suggested by the router.
7. If you want to create a password for access to the guest wireless network, deselect the Open
network checkbox and fill in the Password field.
8. If you want to limit the bandwidth of the guest wireless network, select the Enable
shaping checkbox and fill in the Shaping field.
9. Click the NEXT button to continue or click the BACK button to specify other settings.
10. On the Wireless Network 5 GHz page, specify needed settings for the wireless network
in the 5GHz band and click the NEXT button.
Page 62 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 50. The page for selecting a LAN port to connect an IPTV set-top box.
2. Select a free LAN port for connecting your set-top box.
3. If the IPTV service is provided via a VLAN channel, select the Use VLAN ID checkbox
and fill in the VLAN ID field.
4. Click the NEXT button to continue or click the BACK button to specify other settings.
Page 63 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
5. On the VoIP page, select the Is an IP phone connected to the device checkbox.
Figure 51. The page for selecting a LAN port to connect a VoIP phone.
6. Select a free LAN port for connecting your IP phone.
7. If the VoIP service is provided via a VLAN channel, select the Use VLAN ID checkbox and
fill in the VLAN ID field.
8. Click the NEXT button to continue or click the BACK button to specify other settings.
Page 64 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 52. The page for changing the web-based interface password.
Remember or write down the new password for the administrator account. In case of losing
!
the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.
Click the NEXT button to continue or click the BACK button to return to the previous page.
On the next page, check all specified settings.
Also you can save a text file with parameters set by the Wizard to your PC. To do this, click the
SAVE CONFIGURATION FILE button and follow the dialog box appeared.
To finish the Wizard, click the APPLY button. The router will apply settings and reboot. Click the
BACK button to specify other settings.
Page 65 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
If the Wizard has configured a WAN connection, after clicking the APPLY button, the page for
checking the Internet availability opens.
Page 66 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 54. The Multimedia Devices Connection Wizard. The simplified mode.
Page 67 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
If you need to configure a connection via VLAN, click the ADVANCED MODE button.
Figure 55. The Multimedia Devices Connection Wizard. The advanced mode.
Page 68 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
! The selected port cannot use the default connection to access the Internet.
To deselect the port in the simplified mode, left-click the selected element (the frame will
disappear) and click the APPLY button.
To deselect the port in the advanced mode, select the No value from the Bridged with drop-down
list of the element corresponding to the needed LAN port. Then in the WAN section, select the
connection via VLAN which will not be used any longer and click the DELETE button. Then click
the APPLY button.
Page 69 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Statistics
The pages of this section display data on the current state of the router:
• network statistics
• IP addresses leased by the DHCP server
• the routing rules and routing tables
• data on devices connected to the router's network and its web-based interface, and
information on current sessions of these devices
• statistics for traffic passing through ports of the router
• addresses of active multicast groups.
Network Statistics
On the Statistics / Network Statistics page, you can view statistics for all connections existing
in the system (WAN connections, LAN, WLAN). For each connection the following data are
displayed: name and state (when the connection is on, its name is highlighted in green, when the
connection is off, its name is highlighted in red), IP address and subnet mask, and volume of data
received and transmitted (with increase of the volume the units of measurement are changed
automatically: byte, Kbyte, Mbyte, Gbyte).
Page 70 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
DHCP
The Statistics / DHCP page displays the information on computers that have been identified by
hostnames and MAC addresses and have got IP addresses from the DHCP server of the device, as
well as the IP address expiration periods (the lease time).
Page 71 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Routing
The Statistics / Routing page displays the routing rules and routing tables.
Page 72 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Page 73 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Page 74 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Port Statistics
On the Statistics / Port Statistics page, you can view statistics for traffic passing through ports
of the router. The information shown on the page can be used for diagnosing connection problems.
Page 75 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Multicast Groups
The Statistics / Multicast Groups page displays addresses of active multicast groups (including
IPTV channels and groups for transferring service information) to which the device is subscribed,
and the interface through which the device is subscribed.
Page 76 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Connections Setup
In this menu you can configure basic parameters of the router's local area network and configure
connection to the Internet (a WAN connection).
WAN
On the Connections Setup / WAN page, you can create and edit connections used by the router.
By default, a Dynamic IPv4 connection is configured in the system. It is assigned to the
INTERNET port of the router.
Figure 64. The Connections Setup / WAN page. The simplified mode.
To edit an existing connection, click the EDIT button. On the opened page, сhange the needed
parameters and click the APPLY button.
To disconnect a connection and establish it again, click the RECONNECT button.
To remove an existing connection and create a new one, click the CHANGE CONFIGURATION
button. Upon that the connection creation page opens.
To create several WAN connections, go to the advanced mode. To do this, click the ADVANCED
MODE button.
! When connections of some types are created, the Connections Setup / WAN page is
automatically displayed in the advanced mode.
Page 77 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 65. The Connections Setup / WAN page. The advanced mode.
To create a new connection, click the ADD button ( ) in the Connections List section. Upon
that the connection creation page opens.
To edit an existing connection, in the Connections List section, left-click the relevant line in the
table. On the opened page, сhange the needed parameters and click the APPLY button.
To disconnect a connection and establish it again, select the checkbox located to the left of the
relevant line in the table and click the RECONNECT button.
To remove a connection, in the Connections List section, select the checkbox located to the left
of the relevant line in the table and click the DELETE button ( ).
To allow multicast traffic (e.g. streaming video) for a connection, click the IGMP / MLD link (for
the description of the page, see the IGMP/MLD section, page 187).
To use one of existing WAN connections as the default IPv4 or IPv6 connection, in the Default
Gateway section, select the choice of the radio button which corresponds to this connection.
To return to the simplified mode, click the SIMPLIFIED MODE button (the button is unavailable if
several WAN connections are created).
Page 78 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 66. The page for creating a new Static IPv4 connection. The General Settings section.
Parameter Description
General Settings
RIP Move the switch to the right to allow using RIP for this connection.
Page 79 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 67. The page for creating a new Static IPv4 connection. The Ethernet section.
Parameter Description
Ethernet
Page 80 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 68. The page for creating a new Static IPv4 connection. The IPv4 section.
Parameter Description
IPv4
Gateway IP address Enter an IP address of the gateway used by this WAN connection.
Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.
Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.
Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.
When all needed settings are configured, click the APPLY button.
Page 81 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 69. The page for creating a new Static IPv6 connection. The General Settings section.
Parameter Description
General Settings
Move the switch to the right to allow using RIPng for this
RIPng
connection.
Page 82 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 70. The page for creating a new Static IPv6 connection. The Ethernet section.
Parameter Description
Ethernet
Page 83 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 71. The page for creating a new Static IPv6 connection. The IPv6 section.
Parameter Description
IPv6
Prefix The length of the subnet prefix. The value 64 is used usually.
Gateway IPv6 address Enter an IPv6 address of the gateway used by this WAN connection.
Move the switch to the right if it is necessary that the router requests
Enable prefix
a prefix to configure IPv6 addresses for the local network from a
delegation
delegating router.
When all needed settings are configured, click the APPLY button.
Page 84 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 72. The page for creating a new PPPoE connection. The General Settings section.
Parameter Description
General Settings
RIP Move the switch to the right to allow using RIP for this connection.
Page 85 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 73. The page for creating a new PPPoE connection. The Ethernet section.
Parameter Description
Ethernet
Page 86 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 74. The page for creating a new PPPoE connection. The PPP section.
Parameter Description
PPP
Move the switch to the right if you don't need to enter a username
Without authorization
and password to access the Internet.
Page 87 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Parameter Description
Move the switch to the right if you want the router to keep you
connected to your ISP even when the connection has been inactive
Keep Alive for a specified period of time. If the switch is moved to the right, the
LCP interval and LCP fails fields are available. Specify the
required values.
Move the switch to the right if you want the router to establish
connection to the Internet on demand. In the Maximum idle time
Dial on demand
field, specify a period of inactivity (in seconds) after which the
connection should be terminated.
Fill in the field if you want to use a static IP address to access the
Static IP address
Internet.
Move the switch to the right if you want to log all data on PPP
PPP debug
connection debugging.
Page 88 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 75. The page for creating a new PPPoE connection. The IPv4 section.
Parameter Description
Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.
Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.
When all needed settings are configured, click the APPLY button. In the simplified mode, after
clicking the button, the window for creating an additional connection opens.
If your ISP offers access to local services (e.g. audio and video resources), click the CREATE
CONNECTION button. On the page displayed, specify the parameters for the connection of the
Dynamic IPv4 or Static IPv4 type and click the APPLY button.
If you do not need to create an additional connection, click the SKIP button. In this case, the
Connections Setup / WAN page opens.
Page 89 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 76. The page for creating a new PPTP connection. The General Settings section.
Parameter Description
General Settings
Page 90 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 77. The page for creating a new PPTP connection. The PPP section.
Parameter Description
PPP
Move the switch to the right if you don't need to enter a username
Without authorization
and password to access the Internet.
VPN server address The IP or URL address of the PPTP or L2TP authentication server.
Page 91 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Parameter Description
Move the switch to the right if you want the router to keep you
connected to your ISP even when the connection has been inactive
Keep Alive for a specified period of time. If the switch is moved to the right, the
LCP interval and LCP fails fields are available. Specify the
required values.
Move the switch to the right if you want the router to establish
connection to the Internet on demand. In the Maximum idle time
Dial on demand
field, specify a period of inactivity (in seconds) after which the
connection should be terminated.
Fill in the field if you want to use a static IP address to access the
Static IP address
Internet.
Move the switch to the right if you want to log all data on PPP
PPP debug
connection debugging.
Page 92 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 78. The page for creating a new PPTP connection. The IPv4 section.
Parameter Description
Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.
Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.
Figure 79. The page for creating a new L2TP over IPsec connection. The IPsec section.
! Setting for both parties which establish the tunnel should be the same.
Page 93 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Parameter Description
A key for mutual authentication of the parties. Click the Show icon
Pre-shared key
( ) to display the entered key.
Move the switch to the right to enable the PFS option (Perfect
Forward Secrecy). If the switch is moved to the right, a new
Enable PFS encryption key exchange will be used upon establishing the IPsec
tunnel. This option enhances the security level of data transfer, but
increases the load on DIR-878.
Move the switch to the right to change the port used for data
Specify connection
exchange with the other party enter the needed value in the Port
port
filed displayed. By default, the value 1701 is specified.
When all needed settings are configured, click the APPLY button.
After clicking the button, the window for additional configuration of the connection opens.
If you want to use this WAN connection to access the Internet, select the to the Internet choice of
the radio button. Then select the existing connection which will be used to access the PPTP/L2TP
server or click the CREATE CONNECTION button.
If you have already configured the connection to the Internet and you want to use this WAN
connection only to connect to the virtual private network, select the to the virtual private
network choice of the radio button.
Click the CONTINUE button.
After creating a connection of the L2TP over IPsec type, on the VPN / IPsec page, in the Status
section, the current state of the IPsec tunnel is displayed.
Page 94 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 80. The page for creating a new PPPoE IPv6 connection. The General Settings section.
Parameter Description
General Settings
Move the switch to the right to allow using RIPng for this
RIPng
connection.
Page 95 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 81. The page for creating a new PPPoE IPv6 connection. The Ethernet section.
Parameter Description
Ethernet
Page 96 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 82. The page for creating a new PPPoE IPv6 connection. The PPP section.
Parameter Description
PPP
Move the switch to the right if you don't need to enter a username
Without authorization
and password to access the Internet.
Page 97 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Parameter Description
Move the switch to the right if you want the router to keep you
connected to your ISP even when the connection has been inactive
Keep Alive for a specified period of time. If the switch is moved to the right, the
LCP interval and LCP fails fields are available. Specify the
required values.
Move the switch to the right if you want the router to establish
connection to the Internet on demand. In the Maximum idle time
Dial on demand
field, specify a period of inactivity (in seconds) after which the
connection should be terminated.
Fill in the field if you want to use a static IP address to access the
Static IP address
Internet.
Move the switch to the right if you want to log all data on PPP
PPP debug
connection debugging.
Page 98 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Figure 83. The page for creating a new PPPoE Dual Stack connection. The IPv4 section.
Parameter Description
Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.
Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.
Figure 84. The page for creating a new PPPoE Pv6 connection. The IPv6 section.
Parameter Description
IPv6
Move the switch to the right if it is necessary that the router requests
Enable prefix
a prefix to configure IPv6 addresses for the local network from a
delegation
delegating router.
Page 99 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual
Parameter Description
When all needed settings are configured, click the APPLY button.
LAN
To configure the router's local interface, go to the Connections Setup / LAN page.
IPv4
Go to the IPv4 tab to change the IPv4 address of the router, configure the built-in DHCP server,
specify MAC address and IPv4 address pairs, or add own DNS records.
Figure 85. Configuring the local interface. The IPv4 tab. The Local IP Address section.
Parameter Description
Local IP Address
The IPv4 address of the router in the local subnet. By default, the
IP address
following value is specified: 192.168.0.1.
Parameter Description
The name of the device assigned to its IPv4 address in the local
Hostname
subnet.
Figure 86. Configuring the local interface. The IPv4 tab. The Dynamic IP Addresses section.
Parameter Description
Dynamic IP Addresses
Parameter Description
The start IP address of the address range used by the DHCP server to
Start IP
distribute IP addresses to clients.
The end IP address of the address range used by the DHCP server to
End IP
distribute IP addresses to clients.
Move the switch to the right so that the devices connected to the
router obtain the address of the router as the DNS server address.
DNS relay Move the switch to the left so that the devices connected to the
router obtain the address transmitted by the ISP or specified on the
Advanced / DNS page as the DNS server address.
In the DHCP Options section, you can change default values for some options of DHCP protocol
(IP address, subnet mask, DNS servers) or specify additional parameters which the built-in DHCP
server should send to clients to configure the local network.
Figure 87. Configuring the local interface. The IPv4 tab. The section for configuring DHCP options.
Figure 88. Configuring the local interface. The IPv4 tab. The window for configuring a DHCP option.
In the opened window, you can specify the following parameters:
Parameter Description
Move the switch to the right to let the DHCP server send the
selected option regardless of the client's request.
Force
Move the switch to the left to let the DHCP server send the selected
option only when the client requests it.
After specifying the needed parameters, click the APPLY button.
To edit the parameters of an option, left-click the relevant line in the table. In the opened window,
change the needed parameters and click the APPLY button.
To remove the value of an option, select the checkbox located to the left of the relevant line in the
table and click the DELETE button ( ). Then click the APPLY button.
In the Static IP Addresses section, you can specify MAC address and IPv4 address pairs (set a
fixed IPv4 address in the local area network for a device with a certain MAC address). The router
assigns IPv4 addresses in accordance with the specified pairs only when the DHCP server is
enabled (in the Dynamic IP Addresses section, the Server value is selected from the Mode of
dynamic IP address assignment drop-down list).
Figure 89. Configuring the local interface. The IPv4 tab. The section for creating MAC-IPv4 pairs.
To create a MAC-IPv4 pair, click the ADD button ( ). In the opened window, fill in the MAC
address field. You can choose a device connected to the router's LAN at the moment. To do this,
select the relevant MAC address from the drop-down list (the field will be filled in automatically).
Then in the IP address field, enter an IPv4 address which will be assigned to the device with the
specified MAC address. In the Hostname field, specify a network name of the device for easier
identification (optional). If needed, in the Lease time field, specify a period of time for which the
router’s DHCP server provides the IPv4 address to the client. Click the APPLY button.
To create MAC-IPv4 pairs for the devices connected to the router at the moment, click the
KNOWN CLIENTS button. In the opened window, select the needed device and click the OK
button. To view the latest list of the connected devices, click the REFRESH button.
To edit the settings for an existing MAC-IPv4 pair, left-click the relevant line in the table. In the
opened window, change the needed parameters and click the APPLY button.
To remove a MAC-IPv4 pair, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ). Then click the APPLY button. Also you can remove a pair in
the editing window.
If needed, you can add your own address resource records. To do this, click the ADD button ( )
in the Hosts section (available if the Router or WISP Repeater mode was selected in the Setup
Wizard).
Figure 90. Configuring the local interface. The IPv4 tab. The window for adding a DNS record.
In the IP address field, specify a host from the internal or external network. You can choose a
device connected to the router's LAN at the moment. To do this, select the relevant IPv4 address
from the drop-down list (the field will be filled in automatically). In the Name field, specify the
domain name to which the specified IPv4 address will correspond. Click the SAVE button.
To edit an existing record, in the Hosts section, select the relevant line in the table. In the opened
window, change the needed parameters and click the SAVE button.
To remove a record, in the Hosts section, select the checkbox located to the left of the relevant line
in the table and click the DELETE button ( ).
After completing the work with records, click the APPLY button.
IPv6
Go to the IPv6 tab to change or add the IPv6 address of the router, configure IPv6 addresses
assignment settings, specify MAC address and IPv6 address pairs, or add own DNS records.
Figure 91. Configuring the local interface. The IPv6 tab. The Local IPv6 Address section.
To add an IPv6 address of the router, click the ADD button ( ). To change the IPv6 address of
the router, select it in the table.
Figure 92. Configuring the local interface. The IPv6 tab. The window for adding an IPv6 address.
In the opened window, you can specify the following parameters:
Parameter Description
IPv6 address The IPv6 address of the router in the local subnet.
In the Dynamic IPv6 Addresses section, you can configure IPv6 addresses assignment settings.
Figure 93. Configuring the local interface. The IPv6 tab. The Dynamic IPv6 Addresses section.
Parameter Description
The start and the end values for the latest hextet (16 bit) of the range
Address range
of IPv6 addresses which the DHCPv6 server distributes to clients.
Move the switch to the right to let the clients, that received IPv6
The default route for
addresses or configured them using the prefix, use the router as the
LAN clients
default IPv6 route.
When all needed settings are configured, click the APPLY button.
In the Static IP Addresses section, you can specify MAC address and IPv6 address pairs (set a
fixed IPv6 address in the local area network for a device with a certain MAC address). The router
assigns IPv6 addresses in accordance with the specified pairs only when the Stateful value is
selected from the Mode of dynamic IPv6 address assignment drop-down list in the
Dynamic IPv6 Addresses section.
Figure 94. Configuring the local interface. The IPv6 tab. The section for creating MAC-IPv6 pairs.
To create a MAC-IPv6 pair, click the ADD button ( ). In the opened window, fill in the MAC
address field. You can choose a device connected to the router's LAN at the moment. To do this,
select the relevant MAC address from the drop-down list (the field will be filled in automatically).
Then in the IP address field, enter an IPv6 address which will be assigned to the device with the
specified MAC address. In the Hostname field, specify a network name of the device for easier
identification (optional). If needed, in the Lease time field, specify a period of time for which the
router’s DHCPv6 server provides the IPv6 address to the client. Click the APPLY button.
To create MAC-IPv6 pairs for the devices connected to the router at the moment, click the
KNOWN CLIENTS button. In the opened window, select the needed device and click the OK
button. To view the latest list of the connected devices, click the REFRESH button.
To edit the settings for an existing MAC-IPv6 pair, left-click the relevant line in the table. In the
opened window, change the needed parameters and click the APPLY button.
To remove a MAC-IPv6 pair, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ). Then click the APPLY button. Also you can remove a pair in
the editing window.
If needed, you can add your own address resource records. To do this, click the ADD button ( )
in the Hosts section (available if the Router or WISP Repeater mode was selected in the Setup
Wizard).
Figure 95. Configuring the local interface. The IPv6 tab. The window for adding a DNS record.
In the IP address field, specify a host from the internal or external network. You can choose a
device connected to the router's LAN at the moment. To do this, select the relevant IPv6 address
from the drop-down list (the field will be filled in automatically). In the Name field, specify the
domain name to which the specified IPv6 address will correspond. Click the SAVE button.
To edit an existing record, in the Hosts section, select the relevant line in the table. In the opened
window, change the needed parameters and click the SAVE button.
To remove a record, in the Hosts section, select the checkbox located to the left of the relevant line
in the table and click the DELETE button ( ).
After completing the work with records, click the APPLY button.
WAN Reservation
On the Connections Setup / WAN Reservation page, you can enable the WAN backup
function, which provides you with uninterrupted access to the Internet. When your main connection
breaks down, the router activates the backup connection; and when the main channel is recovered,
the router switches to it and disconnects the reserve one.
Parameter Description
Connections IPv4
Move the switch to the right to let the router use ICMP ping
mechanism for checking the connection.
Status of checking
Move the switch to the left to let the router check only the status of
the connection (may be useful for unstable connections).
IP addresses that the router will check for availability via ICMP ping
mechanism.
Click the ADD HOST button, and in the line displayed, enter an IP
Test hosts
address or leave values suggested by the router.
To remove an IP address from the list, click the Delete icon ( ) in
the line of the address.
When all needed settings are configured, click the APPLY button.
VPN
In this menu you can configure VPN connections based on IPsec/GRE/EoGRE protocols and create
a PPTP or L2TP server and accounts for access to it.
IPsec
On the VPN / IPsec page, you can configure VPN tunnels based on IPsec protocol.
IPsec is a protocol suite for securing IP communications.
To create a new tunnel, click the ADD button ( ) in the Tunnels section.
! Setting for both devices which establish the tunnel should be the same.
Figure 98. The page for adding an IPsec tunnel. The General Settings section.
You can specify the following parameters:
Parameter Description
General Settings
IP version An IP version.
Move the switch to the right to allow a remote host with any public IP
address to connect to the router via IPsec protocol. Such a setting can
Dynamic IPsec
be specified for one IPsec tunnel only. Connection requests via this
tunnel can be sent by a remote host only.
Parameter Description
Select an identification method for the remote host (router) from the
drop-down list:
• Address: The remote host is identified by its IP address.
Type
• FQDN: The remote host is identified by its domain name.
The drop-down list is displayed if the Dynamic IPsec switch is
moved to the left.
A PSK key for mutual authentication of the parties. Click the Show
Pre-shared key
icon ( ) to display the entered key.
A WAN connection through which the tunnel will pass. Select a value
from the drop-down list.
• Interface: When this value is selected, the Interface drop-
Local WAN down list is displayed. Select an existing WAN connection
from the list.
• Default gateway: When this value is selected, the router uses
the default WAN connection.
The NAT Traversal function allows VPN traffic to pass through the
NAT-enabled device. DIR-878 allows to forcibly encapsulate VPN
traffic in UDP packets for passing through a remote device regardless
of whether it supports address translation.
NAT Traversal
If you need to enable forced encapsulation of VPN traffic, select the
Enabled value.
If you need to disable forced encapsulation of VPN traffic, select the
Disabled value.
Parameter Description
An operation mode of the IPsec tunnel. Select a value from the drop-
down list.
• TUNNEL: As a rule, it is used to create a secure connection to
remote networks. In this mode, the source IP packet is fully
encrypted and added to a new IP packet and data transfer is
Type
based on the header of the new IP packet.
• TRANSPORT: As a rule, it is used to encrypt data stream
within one network. In this mode, only the content of the
source IP packet is encrypted, its header remains unchanged
and data transfer is based on the source header.
Move the switch to the right to enable using DPD protocol for this
tunnel. Such a setting allows to check the status of the remote host: if
encrypted packets exchange between the router and the remote host
Enable DPD
breaks down, the router starts sending DPD messages to the remote
host. If the switch is moved to to the left, the DPD delay and DPD
timeout fields are not available for editing.
Figure 99. The page for adding an IPsec tunnel. The First Phase / The Second Phase sections.
Parameter Description
First phase
Select an available encryption algorithm from the drop-down list.
encryption algorithm
First phase DHgroup A Diffie-Hellman key group for Phase 1. Select a value from the drop-
type down list.
Parameter Description
Second phase
Select an available encryption algorithm from the drop-down list.
encryption algorithm
Move the switch to the right to enable the PFS option (Perfect
Forward Secrecy). If the switch is moved to the right, a new
Enable PFS encryption key exchange will be used for Phase 2. This option
enhances the security level of data transfer, but increases the load on
DIR-878.
A Diffie-Hellman key group for Phase 2. Select a value from the drop-
Second phase
down list. The drop-down list is available if the Enable PFS switch
DHgroup type
is moved to the right.
To specify IP addresses of local and remote subnets for this tunnel, click the ADD button ( ) in
the Tunneled Networks section.
If the IPsec tunnel operates over IKEv1 (1 is selected from the IKE version list in the The First
Phase section), you can create only one subnet.
If the IPsec tunnel operates over IKEv2 (2 is selected from the IKE version list in the The First
Phase section), you can create several subnets.
Figure 100. The page for adding an IPsec tunnel. The window for adding a tunneled network.
Parameter Description
To edit fields in the Tunneled Networks section, select the relevant line in the table. In the
opened window, change the needed parameters and click the SAVE button.
To remove a subnet, select the checkbox located to the left of the relevant line in the table and click
the DELETE button ( ). Also you can remove a subnet in the editing window.
After configuring all needed settings for the IPsec tunnel, click the APPLY button.
To edit the parameters of an existing tunnel, in the Tunnels section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the APPLY button.
To disconnect an existing tunnel and establish it again, select the checkbox located to the left of the
relevant line in the table and click the RECONNECT button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ). Also you can remove a tunnel on the editing page.
To disable VPN tunnels based on IPsec protocol, move the Enable switch to the left.
GRE
On the VPN / GRE page, you can configure VPN tunnels based on GRE protocol.
GRE (Generic Routing Encapsulation) is a protocol for tunneling network packets, which enables
you to create unprotected VPN tunnels.
Parameter Description
Tunnel settings
A name of the tunnel for easier identification. You can specify any
Name
name.
Remote IP Enter the public IP address of the remote subnet VPN gateway.
The maximum size of units transmitted from the remote host to the
MTU
router.
Allow traffic GRE → Move the switch to the right to allow GRE tunnel users access
LAN devices in the remote local subnet.
PPTP/L2TP servers
On the VPN / PPTP/L2TP servers page, you can enable the PPTP or L2TP VPN server. To
configure the PPTP or L2TP server, go to the relevant tab.
PPTP and L2TP help to establish a secure connection creating a tunnel in the standard insecure
network.
! Before creating the PPTP or L2TP server, it is required to create user accounts (see the
VPN Users section, page 126).
Parameter Description
VPN network
Start client IP The start IP address of the address range for VPN server’s clients.
End client IP The end IP address of the address range for VPN server’s clients.
Authentication
Parameter Description
Move the switch to the right to enable authentication. Upon that the
Enable authentication Multiple sessions, CHAP, MSCHAP, MSCHAPv2, and PAP
lists are displayed on the page.
The mode of connection for the users listed in the Users List
section. Select a value from the drop-down list.
• Allow: Several users with the same user account are allowed
to connect.
Multiple sessions
• Only new connections: If there are several users with the
same user account, only new users are allowed to connect.
• Only old connections: If there are several users with the
same user account, new users are not allowed to connect.
MPPE
Advanced settings
Parameter Description
Move the switch to the right if you want to log all data on this VPN
Enable debug mode
server debugging.
DNS
Move the switch to the right to let VPN server’s clients obtain DNS
Obtain DNS server
server addresses of the WAN connection which is selected from the
addresses
Interface list. Upon that the Primary DNS and Secondary DNS
automatically
fields are not available for editing.
Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.
After specifying the needed parameters, click the APPLY button.
If you want to specify the list of accounts to provide access to this server, click the ADD ( )
button in the Users List section.
Parameter Description
VPN Users
On the VPN / VPN Users page, you can create user accounts to provide authorized access to a
PPTP or L2TP server.
EoGRE
On the VPN / EoGRE page, you can configure VPN tunnels based on EoGRE technology.
EoGRE (Ethernet over GRE) technology allows transferring traffic through VPN tunnels in
heterogeneous networks, encapsulating Ethernet frames with the help of GRE protocol and
transferring them over a network which uses a network protocol of another level.
Parameter Description
A name of the tunnel for easier identification. You can specify any
Name
name.
Parameter Description
Wi-Fi
In this menu you can specify all needed settings for your wireless network.
Basic Settings
In the Wi-Fi / Basic Settings section, you can change basic parameters for the wireless interface
of the router and configure the basic and additional wireless networks. To configure the 2.4GHz
band or 5GHz band, go to the relevant tab.
Figure 109. Basic settings of the wireless LAN in the 2.4GHz band.
Parameter Description
Country The country you are in. Select a value from the drop-down list.
Select channel Move the switch to the right to let the router itself choose the
automatically channel with the least interference.
Move the switch to the right to let the router search for a free
Enable periodic
channel in certain periods of time. When the switch is moved to the
scanning
right, the Scanning period field is available for editing.
Parameter Description
Specify a period of time (in seconds) after which the router rescans
Scanning period
channels.
When you have configured the parameters, click the APPLY button.
To edit the settings of the basic wireless network, in the Wi-Fi Network section, change the needed
parameters and click the APPLY button.
Also you can create an additional wireless network. To do this, click the ADD WI-FI NETWORK
button. On the opened page, specify the relevant parameters.
Parameter Description
Wi-Fi Network
A name for the wireless network. The name can consist of digits and
Network name (SSID)
Latin characters.
Parameter Description
If the switch is moved to the right, other users cannot see your Wi-Fi
Hide SSID network. It is recommended not to hide the network in order to
simplify initial configuration of the wireless network.
The unique identifier for this wireless network. You cannot change
the value of this parameter, it is determined in the device's internal
BSSID
settings. The field is displayed in the settings of the existing wireless
network.
Move the switch to the right to limit the maximum bandwidth of the
wireless network. In the Shaping field displayed, specify the
Enable shaping
maximum value of speed (Mbit/s).
Move the switch to the left not to limit the maximum bandwidth.
Parameter Description
! The WPA, WPA2, and WPA/WPA2 mixed authentication types require a RADIUS
server.
When the Open or WEP value is selected, the following settings are displayed on the page
(unavailable for the wireless network operating modes which support the standard 802.11n or
802.11ac):
Figure 112. The Open value is selected from the Network authentication drop-down list.
Parameter Description
The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.
Encryption key WEP as Move the switch to the right to set a hexadecimal number as a key
HEX for encryption.
Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed value is selected, the
following fields are displayed on the page:
Figure 113. The WPA2-PSK value is selected from the Network authentication drop-down list.
Parameter Description
The time period (in seconds), at the end of which a new key for WPA
Group key update
encryption is generated. When the value 0 is specified for this field,
interval
the key is not renewed.
When the WPA, WPA2, or WPA/WPA2 mixed value is selected, the following settings are
displayed on the page:
Figure 114. The WPA2 value is selected from the Network authentication drop-down list.
Parameter Description
IP address RADIUS
The IP address of the RADIUS server.
server
The password which the router uses for communication with the
RADIUS encryption key RADIUS server (the value of this parameter is specified in the
RADIUS server settings).
The time period (in seconds), at the end of which a new key for WPA
Group key update
encryption is generated. When the value 0 is specified for this field,
interval
the key is not renewed.
When you have configured the parameters, click the APPLY button.
To edit the basic or additional wireless network, left-click the relevant line in the table. On the
opened page, change the needed parameters and click the APPLY button.
To remove the additional network, select the checkbox located to the left of the relevant line in the
table and click the DELETE button ( ). Then click the APPLY button.
Client Management
On the Wi-Fi / Client Management page, you can view the list of wireless clients connected to
the router.
WPS
On the Wi-Fi / WPS page, you can enable the function for configuration of the WLAN.
The WPS function helps to configure the wireless network automatically. Devices connecting to the
wireless network via the WPS function must support the WPS function.
! The WPS function allows adding devices only to the basic wireless network of the router.
Before using the function you need to configure one of the following authentication types:
To activate the WPS function via the web-based interface, click the ENABLE WPS button.
When the WPS function is enabled, the Information section is available on the page.
Parameter Description
The PIN code of the router. This parameter is used when connecting
Default PIN code
the router to a registrar to set the parameters of the WPS function.
Network Authentication The network authentication type specified for the wireless network.
Password PSK The encryption password specified for the wireless network.
WMM
On the Wi-Fi / WMM page, you can enable the Wi-Fi Multimedia function. To configure the
2.4GHz band or 5GHz band, go to the relevant tab.
The WMM function implements the QoS features for Wi-Fi networks. It helps to improve the
quality of data transfer over Wi-Fi networks by prioritizing different types of traffic.
Select the needed action from the Work mode drop-down list to configure the WMM function:
• Auto: the settings of the WMM function are configured automatically (the value is
specified by default).
• Manual: the settings of the WMM function are configured manually. When this value is
selected, the Access Point and Station sections are displayed on the page.
! All needed settings for the WMM function are specified in the device's system. Changing
parameters manually may negatively affect your WLAN!
The WMM function allows assigning priorities for four Access Categories (AC):
• BK (Background), low priority traffic (print jobs, file downloads, etc.).
• BE (Best Effort), traffic from legacy devices or devices/applications that do not support
QoS.
• VI (Video).
• VO (Voice).
Parameters of the Access Categories are defined for both the router itself (in the Access Point
section) and wireless devices connected to it (in the Station section).
To edit the parameters of an Access Category, left-click the relevant line. In the opened window,
change the needed parameters.
Figure 118. The window for changing parameters of the WMM function.
Parameter Description
Parameter Description
Client
On the Wi-Fi / Client page, you can configure the router as a client to connect to a wireless access
point or to a WISP. To configure the 2.4GHz band or 5GHz band, go to the relevant tab.
Figure 119. The page for configuring the client mode in the 2.4GHz band.
To configure the router as a client, move the Enable switch to the right. Upon that the following
fields are displayed on the page:
Parameter Description
Broadcast wireless
If the switch is moved to the left, devices cannot connect to the
network 2.4 GHz /
router's WLAN. Upon that the router can connect to another access
Broadcast wireless
point as a wireless client.
network 5 GHz
In the Wireless Networks section, the list of available wireless networks is displayed. To view
the latest data on available wireless networks, click the UPDATE LIST button.
To connect to a wireless network from the list, select the needed network. Move the Network
options switch to the right to view more detailed information on the network to which the router
connects. If a password is required, enter it in the relevant field. Click the CONNECT button.
To connect to a hidden network, select the Connect to hidden network value from the
Connecting to network drop-down list. Enter the name of the network in the Network name
(SSID) field. If needed, fill in the BSSID field. Then select the needed type of authentication from
the Network authentication drop-down list.
When the Open or WEP authentication type is selected, the following settings are displayed on the
page:
Parameter Description
The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.
Encryption key WEP as Move the switch to the right to set a hexadecimal number as a key
HEX for encryption.
Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed authentication type is
selected, the following fields are displayed:
Parameter Description
When you have configured the parameters, click the APPLY button.
When connecting to a wireless access point, the wireless channel of DIR-878 will switch to the
channel of the access point to which you have connected.
In addition, the Connection Information section in which you can view the connection status
and the network basic parameters is displayed.
If you want to connect to the WISP network, after configuring the device as a client, you need to
create a WAN connection with relevant parameters for the WiFiClient_2GHz interface in the
2.4GHz band or for the WiFiClient_5GHz interface in the 5GHz band.
Additional
On page of the Wi-Fi / Additional section, you can define additional parameters for the WLAN of
the router. To configure the 2.4GHz band or 5GHz band, go to the relevant tab.
! Changing parameters presented on this page may negatively affect your WLAN!
Parameter Description
Parameter Description
Move the switch to the right to disable multicasting for the router's
Drop multicast WLAN. Move the switch to the left to enable multicasting from the
WAN connection selected on the Advanced / IGMP/MLD page.
The minimum size (in bytes) of a packet for which an RTS frame is
RTS threshold
transmitted.
Parameter Description
The time interval (in seconds) between keep alive checks of wireless
Station Keep Alive devices from your WLAN. When the value 0 is specified, the
checking is disabled.
When you have configured the parameters, click the APPLY button.
MAC Filter
On the Wi-Fi / MAC Filter page, you can define a set of MAC addresses of devices which will be
allowed to access the WLAN, or define MAC addresses of devices which will not be allowed to
access the WLAN.
! It is recommended to configure the Wi-Fi MAC filter through a wired connection to DIR-
878.
Figure 121. The page for configuring the MAC filter for the wireless network.
By default, the Wi-Fi MAC filter is disabled.
To configure the MAC filter, first you need to create rules (specify MAC addresses of devices for
which the specified filtering modes will be applied). To do this, click the ADD button ( ).
Figure 122. The window for adding a rule for the MAC filter.
You can specify the following parameters:
Parameter Description
Frequency band From the drop-down list, select a band of the wireless network.
In the field, enter the MAC address to which the selected filtering
MAC address
mode will be applied.
The name of the device for easier identification (optional). You can
Hostname
specify any name.
After creating the rules you need to configure the filtering modes.
To open the basic or additional wireless network for the devices which MAC addresses are
specified on this page and to close the wireless network for all other devices, in the section
corresponding to the band (2.4 GHz or 5 GHz), left-click the line of the wireless network. In the
opened window, move the Enable MAC filter switch to the right. Upon that the MAC filter
restrict mode drop-down list will be displayed. Select the Allow value from the drop-down list
and click the SAVE button.
To close the wireless network for the devices which MAC addresses are specified on this page,
select the Deny value from the MAC filter restrict mode drop-down list and click the SAVE
button.
To set a schedule for the MAC filter rule, click the Set schedule button ( ) in the line
corresponding to this rule. In the opened window, you can create a new schedule (see the Schedule
section, page 218) or use the existing one. Existing schedules are displayed in the Interval of
execution drop-down list in the simplified mode.
To enable the MAC filter rule at the time specified in the schedule and disable it at the other time,
select the Enable rule value from the Action drop-down list and click the SAVE button.
To disable the MAC filter rule at the time specified in the schedule and enable it at the other time,
select the Disable rule value from the Action drop-down list and click the SAVE button.
To change or delete the schedule for a rule, click the Edit schedule button ( ) in the line
corresponding to this rule. In the opened window, change the parameters and click the SAVE button
or click the DELETE FROM SCHEDULE button.
Super Mesh
On the Wi-Fi / Super Mesh page, you can enable the Super Mesh function. This function is
designed to quickly connect multiple devices into one transport network for providing high-quality
Wi-Fi coverage in living units of complicated planning or for creating a large temporary Wi-Fi
network for an outdoor event.
A Mesh network consists of a main device (the Master role) and subordinate devices (the Slave
role). Devices connect to each other via wireless or wired connection. Settings are transmitted from
the main device to a subordinate one at the final step of configuring the Super Mesh function while
the devices are connected via an Ethernet cable (you don't need to manually specify all the
parameters on subordinate devices).
! The Super Mesh function cannot operate in both bands simultaneously. Select one of the
bands (2.4GHz or 5GHz) for all devices of the configured network.
Parameter Description
If you need to use IPv6 for configuring the Mesh network, move the
IPv6
IPv6 switch to the right.
Move the switch to the right to allow devices of the Mesh network to
use this device for connecting to the Internet.
It is recommended to move the switch to the right when configuring
Enable gateway
the main device.
It is recommended to move the switch to the left when configuring a
subordinate device.
Parameter Description
A name of the Mesh network. This value should be the same for all
devices of your Mesh network.
Network name (SSID)
Clients connected to devices of a Mesh network cannot see the Mesh
network and cannot connect to it.
In the Security Settings section, specify security settings of your Mesh network. 8 To do this,
select the needed type of authentication9 from the Network authentication drop-down list.
When the WPA2-PSK authentication type is selected, the following fields are displayed:
Parameter Description
When you have configured the parameters, click the APPLY button.
To complete your Mesh network configuration, connect the subordinate device to a LAN port of the
main device using an Ethernet cable. Wait for about 5-6 minutes. When all the settings are applied,
the Power LED should be solid orange. Then, if needed, disconnect the Ethernet cable and move
the subordinate device to its workplace.
To view data on the current state of your Mesh network, select the needed value from the
Statistics drop-down list.
• Network Overview: When this value is selected, information on all devices of your Mesh
network is displayed on the page. The value is unavailable if your device is configured as a
subordinate one.
• List of APs: When this value is selected, information on all devices of your Mesh network
is displayed on the page.
• List of Clients: When this value is selected, information on all clients connected to the
devices of your Mesh network is displayed on the page.
• Neighbours: When this value is selected, a connection scheme of your Mesh network
devices is displayed on the page.
Parameter Description
8 Security settings should be the same for all devices of your Mesh network.
9 The full list will be available in the next firmware version.
Parameter Description
List of Clients
Neighbours
Neighbour MAC The MAC address of the device connected to a Mesh network node.
Address The MAC address of this node is displayed in the MAC field.
Parameter Description
The short name for the Mesh network device which MAC address is
displayed in the Neighbour MAC Address field.
MASTERAP (Master Access Point): The main device which
provides connection to the Internet.
RAP (Router Access Point): A subordinate device connected to the
main device via a cable (directly to the main one or via some
Role
subordinate devices connected via a cable).
MAP (Mesh Access Point): A subordinate device with a wireless
connection.
WMAP (Wired Mesh Access Point): A subordinate device
connected via a cable to another subordinate device with a wireless
connection.
The current connection state of the Mesh network node which MAC
Connection status
address is displayed in the Neighbour MAC Address field.
Roaming
On the Wi-Fi / Roaming page, you can enable the function of smart adjustment of Wi-Fi clients.
This function is designed for wireless networks based on several access points or routers. If the
function is enabled for all access points (routers) which establish a wireless network, then wireless
clients will always connect to the device with the highest signal level.
Parameter Description
The number of the port used for data exchange between access
Port
points (routers).
Parameter Description
Move the switch to the right in order to use multicast traffic for
service data exchange between access points (routers). This setting is
needed if the devices which support the smart adjustment function
Use multicast for are located in different subnets. If the switch is moved to the right,
service data exchange the Multicast TTL and Multicast group address fields are
displayed on the page.
If the switch is moved to the left, broadcast traffic is used for service
data exchange.
Multicast group Specify the address of the multicast group (from the subnet
address 239.255.0.0/16).
2.4 GHz / 5 GHz
The maximum time period (in seconds) during which the access
Maximum time of
point (router) stores data on the signal strength of the client located
storing data
on its coverage area.
The signal strength upon which the access point (router) starts
Minimum level of
scanning other devices in order to find a device with a higher signal
connection quality
level.
The signal strength upon which the access point (router) disconnects
Threshold value of the client from its wireless network regardless of the signal levels of
connection quality other devices. This value should not be greater than the value
specified in the field Minimum level of connection quality.
After specifying the needed parameters, click the APPLY button.
To disable the function of smart adjustment of Wi-Fi clients, click the DISABLE button.
Advanced
In this menu you can configure advanced settings of the router:
• create or edit VLANs
• use LAN ports of the router as additional WAN ports and also use the WAN port as a LAN
port
• enable and configure the SNMP agent of the router
• add name servers
• configure a DDNS service
• configure autonegotiation or manually configure speed and duplex mode for each Ethernet
port of the router
• configure notifications on the reason of the Internet connection failure
• define static routes
• configure TR-069 client
• create rules for remote access to the web-based interface
• enable the UPnP IGD protocol
• enable the built-in UDPXY application for the router
• allow the router to use IGMP and MLD
• allow the router to use RTSP, enable the SIP ALG, the PPPoE/PPTP/L2TP/IPsec pass
through functions for the router
• configure the CoovaChilli service
• enable VRRP.
VLAN
On the Advanced / VLAN page, you can edit existing and create new virtual networks (VLAN),
e.g., for distinguishing traffic or specifying additional WAN interfaces.
By default, 2 VLANs are created in the router's system:
• LAN: For the LAN interface, it includes LAN ports and Wi-Fi networks. You cannot delete
this VLAN.
• WAN: For the WAN interface; it includes the INTERNET port. You can edit or delete this
VLAN.
Parameter Description
Move the switch to the right to create an interface that can be used
for creating WAN connections.
Create interface
Move the switch to the left for the VLAN to work in the bridge
mode. This mode is mostly used to connect IPTV set-top boxes.
Parameter Description
Select the Untagged value for each Wi-Fi interface included in the
VLAN.
Wireless interfaces
Leave the Excluded value for the Wi-Fi interfaces not included in
the VLAN.
WAN Assignment
On the Advanced / WAN assignment page, you can use LAN ports of the router as additional
WAN ports and also use the WAN port as a LAN port.
! To create a network interface to which a WAN connection can be assigned upon adding the
VLAN, the Create interface switch should be moved to the right.
3. Go to the Connections Setup / WAN page and create WAN connections which will be
assigned to the network interfaces of the corresponding VLANs (see the WAN section, page
77).
If you don't want to use a LAN port as a WAN port any longer, follow the next steps:
1. On the Connections Setup / WAN page, remove the WAN connection assigned to the
network interface of the VLAN which includes the corresponding LAN port (see the WAN
section, page 77).
2. Go to the Advanced / VLAN page and remove the VLAN (see the VLAN section, page
162).
3. Go to the Advanced / WAN assignment page, deselect the corresponding LAN port,
and click the APPLY button.
! To create a network interface to which a WAN connection can be assigned upon adding the
VLAN, the Create interface switch should be moved to the right.
3. Go to the Connections Setup / WAN page and create a WAN connection which will be
assigned to the network interface of the VLAN (see the WAN section, page 77).
SNMP
On the Advanced / SNMP page, you can enable and configure the SNMP agent of the router.
The SNMP agent is a service which sends data on the state and settings of the device where is it
enabled to the SNMP manager (the network management system of your ISP or system
administrator).
In order to enable the SNMP agent, in the Configuration section, move the Enable SNMP
switch to the right. Then specify the needed parameters.
Parameter Description
Configuration
The contact information Additional information used to contact the administrator of the
for the administrator router.
Parameter Description
DNS
On the Advanced / DNS page, you can add DNS servers to the system.
!
When you use the built-in DHCP server, the network parameters (including DNS servers)
are distributed to clients automatically.
Specify needed settings for IPv4 in the DNS IPv4 section and for IPv6 in the DNS IPv6 section.
If you want to configure automatic obtainment of DNS servers addresses, move the Manual switch
to the left. Then move the Default gateway switch to the left and from the Interface drop-down
list select a WAN connection which will be used to obtain addresses of DNS servers automatically.
If you want the router to use the default WAN connection to obtain addresses of DNS servers, move
the Default gateway switch to the right.
To specify a DNS server manually, move the Manual switch to the right. In the Name Servers
section of the relevant IP version, click the ADD SERVER button, and in the line displayed, enter
an IP address of the DNS server.
To specify a reserve DNS server, in the Reserve servers section of the relevant IP version, click
the ADD SERVER button, and in the line displayed, enter an IP address of the DNS server.
To remove a DNS server from the page, click the Delete icon ( ) in the line of the address.
When all needed settings are configured, click the APPLY button.
DDNS
On the Advanced / DDNS page, you can define parameters of the DDNS service, which allows
associating a domain name with dynamic IP addresses.
Parameter Description
Select the DDNS provider from the drop-down list. If your provider
is not in the list, select the Custom provider value and fill in the
DDNS service fields displayed on the page. Specify the DDNS provider name in
the Name field, the domain name of the provider's server in the
Server field, and the location of settings in the Path field.
Ports Settings
On the Advanced / Ports Settings page, you can configure or disable autonegotiation of speed
and duplex mode or manually configure speed and duplex mode for each Ethernet port of the router.
Also you can enable or disable data flow control in the autonegotiation mode. This function is used
for equal load balancing in ISPs' networks. Contact your ISP to clarify if this function needs to be
enabled.
! When autonegotiation is disabled, speed and duplex mode settings for both devices
connected to each other should be the same.
Figure 135. The window for changing the settings of the router's port.
Parameter Description
Autonegotiation Modes
To enable the needed data transfer modes, move relevant switches to the right.
Parameter Description
Flow control
Move the switch to the right to enable the flow control function for
the port.
Symmetric flow control
Move the switch to the left to disable the flow control function for
the port.
After specifying the needed parameters, click the SAVE button.
If in the future you need to edit the parameters of the router's port, select the port in the table. In the
opened window, change the needed parameters and click the SAVE button.
Redirect
On the Advanced / Redirect page, you can enable notifications on the reason of the Internet
connection failure. Notifications will be displayed in the browser window when a user is attempting
to open a web site on the Internet.
Parameter Description
Routing
On the Advanced / Routing page, you can specify static (fixed) routes.
Parameter Description
Protocol An IP version.
A remote network which can be accessed with help of this route. You
can specify an IPv4 or IPv6 address.
Destination network
The format of a host IPv6 address is 2001:db8:1234::1, the
format of a subnet IPv6 address is 2001:db8:1234::/64.
A metric for the route. The lower the value, the higher is the route
Metric
priority. Optional.
From the drop-down list, select a routing table for the route.
• group_1 table is used to route user traffic.
Table
• main table is used to route management traffic from internal
system services of the router.
TR-069 Client
On the Advanced / TR-069 Client page, you can configure the router for communication with a
remote Auto Configuration Server (ACS).
The TR-069 client is used for remote monitoring and management of the device.
Parameter Description
TR-069 Client
The interface which the router uses for communication with the
ACS. Leave the Automatic value to let the device select the
Interface
interface basing on the routing table or select another value if
required by your ISP.
Enable TR-069 client Move the switch to the right to enable the TR-069 client.
Parameter Description
Inform Settings
Move the switch to the right so the router may send reports (data on
On
the device and network statistics) to the ACS.
Interval Specify the time period (in seconds) between sending reports.
If the switch is moved to the right, the access point obtains the URL
address of the ACS upon establishing the Dynamic IP type
Get URL address via
connection.
DHCP
If you need to specify the URL address manually, move the switch
to the left and enter the needed value in the URL address field.
URL address The URL address of the ACS provided by the ISP.
Request port The port used by the ACS. By default, the port 8999 is specified.
Remote Access
On the Advanced / Remote Access page, you can configure access to the web-based interface
of the router. By default, the access from external networks to the router is closed. If you need to
allow access to the router from the external network, create relevant rules.
Figure 141. The window for adding a rule for remote management.
In the opened window, you can specify the following parameters:
Parameter Description
Open access from any Move the switch to the right to allow access to the router for any
external host host. Upon that the IP address and Mask fields are not displayed.
Parameter Description
UPnP IGD
On the Advanced / UPnP IGD page, you can enable the UPnP IGD protocol. The router uses the
UPnP IGD protocol for automatic configuration of its parameters for network applications requiring
an incoming connection to the router.
Parameter Description
Duration The time period during which the UPnP IGD protocol has been used.
UDPXY
On the Advanced / UDPXY page, you can allow the router to use the built-in UDPXY
application. The UDPXY application transforms UDP traffic into HTTP traffic. This application
allows devices which cannot receive UDP streams to access stream video.
Parameter Description
Port The port of the router which the UDPXY application uses.
Buffer size for incoming Size of intermediate buffer for received data.
data By default, the minimum acceptable value is specified.
Buffer size for data Size of intermediate buffer for transmitted data.
transferred to client By default, the minimum acceptable value is specified.
To access the status page of the application, click the Status link.
IGMP/MLD
On the Advanced / IGMP/MLD page, you can allow the router to use IGMP and MLD and
specify needed settings.
IGMP and MLD are used for managing multicast traffic (transferring data to a group of
destinations) in IPv4 and IPv6 networks correspondingly. These protocols allow using network
resources for some applications, e.g., for streaming video, more efficiently.
Parameter Description
IGMP
Parameter Description
MLD
ALG/Passthrough
On the Advanced / ALG/Passthrough page, you can allow the router to use RTSP, enable the
SIP ALG and PPPoE/PPTP/L2TP/IPsec pass through functions.
SIP is used for creating, modifying, and terminating communication sessions. This protocol allows
telephone calls via the Internet.
RTSP is used for real-time streaming multimedia data delivery. This protocol allows some
applications to receive streaming audio/video from the Internet.
The PPPoE pass through function allows PPPoE clients of computers from your LAN to connect to
the Internet through connections of the router.
The PPTP pass through, L2TP pass through and IPsec pass through functions allow VPN PPTP,
L2TP and IPsec traffic to pass through the router so that clients from your LAN can establish
relevant connections with remote networks.
Parameter Description
Move the switch to the right to enable SIP. Such a setting allows
SIP using the SIP ALG function. This function allows VoIP traffic to
pass through the NAT-enabled router.10
Move the switch to the right to enable RTSP. Such a setting allows
RTSP managing media stream: fast forward streaming audio/video, pause
and start it.
Move the switch to the right to enable the PPPoE pass through
PPPoE pass through
function.
Move the switch to the right to enable the IPsec pass through
IPsec pass through
function.
Move the switch to the right to enable the L2TP pass through
L2TP pass through
function.
Move the switch to the right to enable the PPTP pass through
PPTP pass through
function.
After specifying the needed parameters, click the APPLY button.
10 On the Connections Setup / WAN page, create a WAN connection, move the SIP switch to the right on the
Advanced / ALG/Passthrough page, connect an Ethernet cable between a LAN port of the router and the IP
phone. Specify SIP parameters on the IP phone and configure it to obtain an IP address automatically (as DHCP
client).
CoovaChilli
The CoovaChilli service provides authorized Internet access for clients in your corporate or public
network. On the Advanced / CoovaChilli page, you can add an authorization server.
To add an authorization server, click the ADD button ( ). On the opened page, move the Enable
switch to the right to enable the CoovaChilli service.
Figure 148. The page for adding an authorization server. The Main Settings section.
In the Main Settings section, you can specify the following parameters:
Parameter Description
Figure 149. The page for adding an authorization server. The RADIUS server section.
In the RADIUS server section, you can specify the following parameters:
Parameter Description
The password which the router uses for communication with the
RADIUS encryption key RADIUS server (the value of this parameter is specified in the
RADIUS server settings).
Parameter Description
The settings of the MAC authentication section will be available in the next FW versions.
Figure 150. The page for adding an authorization server. The UAM section.
In the UAM section, you can specify the following parameters:
Parameter Description
The number of a router port which will be used for UAM server
Authorization port
authorization. By default, the value 3990 is specified.
VRRP
On the Advanced / VRRP page, you can enable VRRP (Virtual Router Redundancy Protocol),
which is designed to improve availability of routers acting as default gateways. The protocol
enables you to configure several devices as the default virtual router with a common IP address,
which is used as the default gateway by LAN clients.
Parameter Description
Parameter Description
The priority of the router over other devices, which is used to switch
it to the Master mode. Specify a value from the range 1~255. By
Priority default, the value 100 is specified. If several devices have the same
priority level, the router with the highest IP address will switch to
the Master mode.
Move the switch to the right to enable access to the virtual router by
Assign virtual MAC
a virtual MAC address. A virtual MAC address is generated
address
automatically.
Firewall
In this menu you can configure the firewall of the router:
• add rules for IP filtering
• create virtual servers
• define a DMZ
• configure the MAC filter
• specify restrictions on access to certain web sites
• enable the function of blocking advertisements.
IP Filter
On the Firewall / IP Filter page, you can create new rules for filtering IP packets and edit or
remove existing rules.
Parameter Description
General Settings
A name for the rule for easier identification. You can specify any
Name
name.
Parameter Description
Source IP Address
Subnet IPv4 address / The source subnet IPv4 or IPv6 address. The field is displayed when
Subnet IPv6 address the Subnet value is selected from the Set as drop-down list.
Destination IP Address
Parameter Description
Subnet IPv4 address / The destination subnet IPv4 or IPv6 address. The field is displayed
Subnet IPv6 address when the Subnet value is selected from the Set as drop-down list.
Ports
Set source port Move the switch to the right to specify a port of the source IP
manually address manually. Upon that the Source port field is displayed.
A port of the source IP address. You can specify one port, several
Source port
ports separated by a comma, or a range of ports separated by a colon.
Click the APPLY button.
To set a schedule for the IP filter rule, click the Set schedule button ( ) in the line
corresponding to this rule. In the opened window, you can create a new schedule (see the Schedule
section, page 218) or use the existing one. Existing schedules are displayed in the Interval of
execution drop-down list in the simplified mode.
To enable the IP filter rule at the time specified in the schedule and disable it at the other time,
select the Enable rule value from the Action drop-down list and click the SAVE button.
To disable the IP filter rule at the time specified in the schedule and enable it at the other time,
select the Disable rule value from the Action drop-down list and click the SAVE button.
To edit a rule, select the relevant line in the table. In the opened window, change the needed
parameters and click the APPLY button.
To change or delete the schedule for a rule, click the Edit schedule button ( ) in the line
corresponding to this rule. In the opened window, change the parameters and click the SAVE button
or click the DELETE FROM SCHEDULE button.
To remove a rule, select the checkbox located to the left of the relevant line of the table and click
the DELETE button ( ). Also you can remove a rule in the editing window.
Virtual Servers
On the Firewall / Virtual Servers page, you can create virtual servers for redirecting incoming
Internet traffic to a specified IP address in the local area network.
Parameter Description
General Settings
A name for the virtual server for easier identification. You can
Name
specify any name.
A protocol that will be used by the new virtual server. Select a value
Protocol
from the drop-down list.
Move the switch to the right in order to let the users of the router's
LAN access the local server using the external IP address of the
NAT Loopback router or its DDNS name (if a DDNS service is configured). Users
from the external network access the router using the same address
(or DDNS name).
Public Network Settings
The IP address of the server from the local area network. To choose
a device connected to the router's LAN at the moment, select the
Private IP
relevant value from the drop-down list (the field will be filled in
automatically).
To edit the parameters of an existing server, select the relevant line in the table. On the opened page,
change the needed parameters and click the APPLY button.
To remove a server, select the checkbox located to the left of the relevant line of the table and click
the DELETE button ( ). Also you can remove a server on the editing page.
DMZ
A DMZ is a host or network segment located “between” internal (local) and external (global)
networks. In the router, the DMZ implements the capability to transfer a request coming to a port of
the router from the external network to a specified host of the internal network.
On the Firewall / DMZ page, you can specify the IP address of the DMZ host.
MAC Filter
On the Firewall / MAC Filter page, you can configure MAC-address-based filtering for computers
of the router's LAN.
! You can use the Deny mode only if an active rule which allows access to the device's
network is created on the page.
To create a rule (specify a MAC address of a device for which the specified filtering mode will be
applied), click the ADD button ( ).
Figure 158. The window for adding a rule for the MAC filter.
Parameter Description
The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
MAC address
moment. To do this, select the relevant device from the drop-down
list (the field will be filled in automatically).
The name of the device for easier identification. You can specify
Name
any name.
URL Filter
On the Firewall / URL Filter page, you can specify restrictions on access to certain web sites and
define devices to which the specified restrictions will be applied.
To specify URL addresses to which the selected filtering mode will be applied, in the Addresses
section, click the ADD button ( ). In the opened window, you can specify the following
parameters:
Parameter Description
To enable the URL filter for the time specified in the schedule and disable it at the other time, select
the Enable rule value from the Action drop-down list and click the SAVE button.
To disable the URL filter for the time specified in the schedule and enable it at the other time, select
the Disable rule value from the Action drop-down list and click the SAVE button.
To change or delete the schedule for URL filter, click the Edit schedule button ( ) in the URL
Filter section. In the opened window, change the parameters and click the SAVE button or click the
DELETE FROM SCHEDULE button.
AdBlock
On the Firewall / AdBlock page, you can enable the function of blocking advertisements which
appear during web surfing.
Files saved to the device’s memory are updated upon every reboot of the router or its or
! firmware update. In case the file is not available at that moment, the list of web sites to be
blocked will not be received.
If you don't want to use a file for blocking advertisements any longer, click the Delete icon ( ) in
the line of the URL address of the relevant file. Then click the APPLY button.
To disable the advertisements blocking function, move the Enable switch to the left and click the
APPLY button.
System
In this menu you can do the following:
• change the password used to access the router's settings
• restore the factory default settings
• create a backup of the router's configuration
• restore the router's configuration from a previously saved file
• save the current settings to the non-volatile memory
• reboot the router
• change the web-based interface language
• update the firmware of the router
• configure automatic notification on new firmware version
• enable/disable Wi-Fi connection and configure automatic reboot of the device on a schedule,
and set a schedule for different filter rules
• view the system log; configure sending the system log to a remote host
• check availability of a host on the Internet through the web-based interface of the router
• trace the route to a host
• allow or forbid access to the access point via TELNET and SSH
• configure automatic synchronization of the system time or manually configure the date and
time for the router
• enable the Auto Provision function.
Configuration
On the System / Configuration page, you can change the password for the administrator account
used to access the web-based interface of the router and to access the device settings via TELNET
and SSH, restore the factory defaults, backup the current configuration, restore the router's
configuration from a previously created file, save the changed settings to the non-volatile memory,
reboot the device, or change the web-based interface language.
Remember or write down the new password for the administrator account. In case of losing
! the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.
To change the web-based interface language, select the needed value from the Language drop-
down list.
Control Description
Click the button to restore the factory default settings. Also you can
Factory restore the factory defaults via the hardware RESET button (see the
Back Panel section, page 15).
Click the button to save the configuration (all settings of the router)
Backup to your PC. The configuration backup will be stored in the
download location of your web browser.
Click the button and follow the dialog box appeared to select a
Restore previously saved configuration file (all settings of the router)
located on your PC and upload it.
Click the button to reboot the device. All unsaved changes will be
Reboot
lost after the device's reboot.
In the Idle time field specify a period of inactivity (in minutes) after which the router completes
the session of the interface. By default, the value 5 is specified. Then click the SAVE button.
Firmware Update
On the System / Firmware Update page, you can update the firmware of the router and
configure the automatic check for updates of the router's firmware.
! Update the firmware only when the router is connected to your PC via a wired
connection.
By default, in the Remote server URL field, the D-Link update server address
(fwupdate.dlink.ru) is specified. To add one more address, click the ADD button and enter
the address in the displayed line. To remove the address, click the Delete icon ( ) in the line of
the address.
Click the APPLY SETTINGS button.
You can update the firmware of the router locally (from the hard drive of your PC) or remotely
(from the update server).
Local Update
! Attention! Do not turn off the router before the firmware update is completed. This may
cause the device breakdown.
To update the firmware of the router locally, follow the next steps:
1. Download a new version of the firmware from www.dlink.ru.
2. Click the CHOOSE FILE button in the Local Update section on the System /
Firmware Update page to locate the new firmware file.
3. If you want to restore the factory default settings immediately after updating the firmware,
move the Restore factory defaults after firmware update switch to the right.
4. Click the UPDATE FIRMWARE button.
5. Wait until the router is rebooted (about one and a half or two minutes).
6. Log into the web-based interface using the login (admin) and the current password.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, click the Factory button on the System / Configuration page. Wait until the
router is rebooted.
Remote Update
! Attention! Do not turn off the router before the firmware update is completed. This may
cause the device breakdown.
To update the firmware of the router remotely, follow the next steps:
1. On the System / Firmware Update page, in the Remote Update section, click the
CHECK FOR UPDATES button to check if a newer firmware version exists.
2. Click the UPDATE FIRMWARE button (the button is displayed if a newer version of the
firmware is available).
3. Wait until the router is rebooted (about one and a half or two minutes).
4. Log into the web-based interface using the login (admin) and the current password.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, click the Factory button on the System / Configuration page. Wait until the
router is rebooted.
Schedule
On the System / Schedule page, you can enable/disable Wi-Fi connection and configure
automatic reboot of the device on a schedule, and set a schedule for different filter rules.
! Before creating a schedule you need to configure automatic synchronization of the system
time with a time server on the Internet(see the System Time section, page 229).
In the opened window, in the System Time field, the system time of the device is displayed. You
can select the Simplified mode choice of the radio button and specify the following parameters:
Parameter Description
Simplified mode
Specify a day of the month. You can specify one value or several
Day of month
values separated by a comma.
In the advanced mode, you can specify more parameters for the schedule using a cron expression.
To do this, select the Advanced mode choice of the radio button and specify the needed values in
the fields displayed. You can specify one value or several values separated by a comma. You can
use the character * (asterisk) to specify the entire range of possible values. Upon that the Schedule
field will be filled in automatically.
Click the SAVE button.
To edit the automatic reboot schedule, click the EDIT button in the Auto Reboot section. In the
opened window, change the needed parameters and click the SAVE button.
To disable automatic reboot of the device on a schedule, click the EDIT button in the Auto
Reboot section. In the opened window, click the DISABLE button.
To set a schedule for a task which will be applied to a filter rule or will enable/disable Wi-Fi
connection, click the ADD button ( ) in the All Tasks section.
Parameter Description
Perform task on Move the switch to the right to enable the schedule.
schedule Move the switch to the left to disable the schedule.
Parameter Description
Simplified mode
Duration Specify the interval during which the task will be performing.
Time Specify the time when the task should start running.
Select a day or days of the week when the task will be performing.
Days of week To do this, select the checkbox located to the left of the relevant
value.
Specify a day of the month. You can specify one value or several
Day of month
values separated by a comma.
In the advanced mode, you can specify more parameters for the schedule using a cron expression.
To do this, select the Advanced mode choice of the radio button and specify the needed values in
the fields displayed. You can specify one value or several values separated by a comma. You can
use the character * (asterisk) to specify the entire range of possible values. Upon that the Schedule
field will be filled in automatically.
Click the SAVE button.
To edit a schedule, in the All Tasks section, select the relevant line in the table. In the opened
window, change the needed parameters and click the SAVE button.
To remove a schedule, in the All Tasks section, select the checkbox located to the left of the
relevant line in the table and click the DELETE button ( ).
To assign a created schedule to a task which will be applied to a filter rule or will enable/disable
Wi-Fi connection, go to the relevant page of the web-based interface of the device.
Log
On the System / Log page, you can set the system log options and configure sending the system
log to a remote host.
Parameter Description
The IP or URL address of the host from the local or global network,
Server
to which the system log will be sent.
Parameter Description
A port of the host specified in the Server field. By default, the value
Port
514 is specified.
Ping
On the System / Ping page, you can check availability of a host from the local or global network
via the Ping utility.
The Ping utility sends echo requests to a specified host and receives echo replies.
Figure 169. The System / Ping page. The additional settings window.
In the opened window, in the Packet size field, specify the volume of data sent in a request. In the
Time to wait for a response field, specify the response waiting period in seconds. To restore the
default field values, click the DEFAULT SETTINGS button.
After specifying the additional parameters, click the OK button.
To run the check, click the START button. After a while, the results will be displayed on the page.
If you need to interrupt the check, click the CANCEL button (the button is available from the
moment the check starts).
To remove the check result from the page, click the CLEAR button.
Traceroute
On the System / Traceroute page, you can determine the route of data transfer to a host via the
traceroute utility.
Figure 171. The System / Traceroute page. The additional settings window.
In the opened window, you can specify the following parameters:
Parameter Description
Specify the TTL (Time to live) parameter value. The default value is
Maximum TTL value
30.
To restore the default field values, click the DEFAULT SETTINGS button.
After specifying the additional parameters, click the OK button.
To run the check, click the START button. After a while, the results will be displayed on the page.
If you need to interrupt the check, click the CANCEL button (the button is available from the
moment the check starts).
To remove the check result from the page, click the CLEAR button.
Telnet/SSH
On the System / Telnet/SSH page, you can enable or disable access to the device settings via
TELNET and/or SSH from your LAN. By default, access is disabled.
System Time
On the System / System Time page, you can manually set the time and date of the router or
configure automatic synchronization of the system time with a time server on the Internet.
To enable automatic synchronization with a time server, follow the next steps:
1. Move the Enable NTP switch to the right.
2. Specify the needed NTP server or leave the value specified by default in the NTP Servers
section. If you need to specify several servers, click the ADD SERVER button.
3. Select your time zone from the Main time zone drop-down list. To set the time zone in
accordance with the settings of your operating system or portable device, click the
DETERMINE TIMEZONE button.
4. Click the APPLY button. The System date and System time fields will be filled in
automatically.
In some cases NTP servers addresses are provided by your ISP. In this case, you need to move the
Get NTP server addresses using DHCP switch to the right and click the APPLY button.
Contact your ISP to clarify if this setting needs to be enabled. If the Get NTP server addresses
using DHCP switch is moved to the right, the NTP Servers section is not displayed.
To allow connected devices to use the IP address of the router in the local subnet as a time server,
move the Run as a server for the local network switch to the right and click the APPLY
button.
When the router is powered off or rebooted, the system time is reset to the default value.
! If you have set automatic synchronization for the system time, the internal clock of the
device will be configured after connecting to the Inter net. If you have set the system time
manually, you need to set the time and date again (see above).
Auto Provision
On the System / Auto Provision page, you can enable the Auto Provision function.
The Auto Provision function allows your ISP to manage the device’s settings remotely: DIR-878
connects to the ISP’s server, compares the current configuration file with the configuration file
stored on this server, and updates its settings if the files are different.
Figure 174. The page for configuring the Auto Provision function.
You can specify the following parameters:
Parameter Description
Move the switch to the right to enable the Auto Provision function.
Enable Auto Provision
Move the switch to the left to disable the Auto Provision function.
Autoconfiguration The IP or URL address of your ISP's server where the configuration
server address file is stored.
Parameter Description
File name The location of the configuration file on the ISP's server.
Yandex.DNS
This menu is designed to configure the Yandex.DNS service.
Yandex.DNS is a web content filtering service which provides the DNS server, protects a computer
against malicious web sites, and blocks access to adult web sites.
Settings
On the Yandex.DNS / Settings page, you can enable the Yandex.DNS service and configure its
operating mode.
When the service is enabled, the Default Mode section is displayed on the page. Select the needed
choice of the radio button to configure filtering for all devices of the router's network:
• Protection off: when this value is selected, the service provides the DNS server with no
restrictions on access to unsafe web sites;
• Safe: when this value is selected, the service blocks access to malicious and fraudulent web
sites;
• Child: when this value is selected, the service blocks access to malicious and fraudulent
web sites and blocks access to adult content.
Also the selected filtering mode will be applied to all devices newly connected to the router's
network.
After specifying all needed parameters, click the APPLY button.
To disable the Yandex.DNS service, move the Enable switch to the left and click the APPLY
button.
Parameter Description
The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
MAC address
moment. To do this, select the relevant device from the drop-down
list (the field will be filled in automatically).
Name Enter a name for the rule for easier identification. Optional.
SkyDNS
This menu is designed to configure the SkyDNS service.
SkyDNS is a web content filtering service which provides protection against malicious web sites for
devices connected to the router's network, and also allows to configure filtering, block access to
adult web sites, and use search engines safely. In order to use the service, first register an account
on the SkyDNS service web site.
Settings
On the SkyDNS / Settings page, you can enable the SkyDNS service and specify settings for its
operation.
By default, the account parameters are automatically synchronized with the SkyDNS service web
site once an hour. To start synchronization manually, click the MANUALLY SYNC button.
To use another account, specify its data in the Mail and Password fields and click the APPLY
button.
To disable the SkyDNS service, click the DISABLE button.
Devices
On the SkyDNS / Devices page, you can assign a specific filtering profile to a device connected
to the router's network.
Figure 180. The SkyDNS / Devices page. The window for adding a rule.
Parameter Description
The MAC address of a device from the router's LAN to which the
specified filtering profile will be applied. You can enter the MAC
MAC address address of a device connected to the router's LAN at the moment. To
do this, select the relevant device from the drop-down list (the field
will be filled in automatically).
Select the filtering profile which will be used for the device with the
Profile
specified MAC address from the drop-down list.
Hostname Enter a name for the rule for easier identification. Optional.
AC Access Category
AP Access Point
ID Identifier
IP Internet Protocol
SA Security Association