User Manual

DIR-878
AC2600 MU-MIMO Wi-Fi Gigabit Router

October 2020
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
User Manual

Contents
Chapter 1. Introduction.........................................5
Contents and Audience.......................................................5
Conventions.................................................................5
Document Structure..........................................................5
Chapter 2. Overview.............................................6
General Information.........................................................6
Specifications..............................................................9
Product Appearance.........................................................14
Upper Panel..............................................................14
Back Panel...............................................................15
Delivery Package...........................................................17
Chapter 3. Installation and Connection.........................18
Before You Begin...........................................................18
Connecting to PC...........................................................19
PC with Ethernet Adapter.................................................19
Obtaining IP Address Automatically (OS Windows 7)........................19
Obtaining IP Address Automatically (OS Windows 10).......................24
PC with Wi-Fi Adapter....................................................28
Obtaining IP Address Automatically and Connecting to Wireless Network
(OS Windows 7)...........................................................29
Obtaining IP Address Automatically and Connecting to Wireless Network
(OS Windows 10)..........................................................32
Connecting to Web-based Interface..........................................35
Web-based Interface Structure..............................................37
Summary Page.............................................................37
Home Page................................................................39
Menu Sections............................................................40
Notifications............................................................41
Chapter 4. Configuring via Web-based Interface.................42
Initial Configuration Wizard...............................................42
Selecting Operation Mode.................................................44
Router.................................................................44
Access Point or Repeater...............................................46
Mesh Network Main Device (Master)......................................48
Mesh Network Subordinate Device (Slave)................................50
Changing LAN IPv4 Address................................................51
Wi-Fi Client.............................................................52
Configuring WAN Connection...............................................54
Static IPv4 Connection.................................................55
Static IPv6 Connection.................................................56
PPPoE, IPv6 PPPoE, PPPoE Dual Stack,
PPPoE + Dynamic IP (PPPoE Dual Access) Connections.....................57
PPPoE + Static IP (PPPoE Dual Access) Connection.......................58
PPTP + Dynamic IP or L2TP + Dynamic IP Connection......................59
PPTP + Static IP or L2TP + Static IP Connection........................60
Configuring Wireless Network.............................................61
Configuring LAN Ports for IPTV/VoIP......................................63
Changing Web-based Interface Password....................................65
Connection of Multimedia Devices...........................................67

Page 2 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
User Manual

Statistics.................................................................70
Network Statistics.......................................................70
DHCP.....................................................................71
Routing..................................................................72
Clients and Session......................................................74
Port Statistics..........................................................75
Multicast Groups.........................................................76
Connections Setup..........................................................77
WAN......................................................................77
Creating Dynamic IPv4 or Static IPv4 WAN Connection....................79
Creating Dynamic IPv6 or Static IPv6 WAN Connection....................82
Creating PPPoE WAN Connection..........................................85
Creating PPTP, L2TP, or L2TP over IPsec WAN Connection.................90
Creating PPPoE IPv6 or PPPoE Dual Stack WAN Connection.................95
LAN.....................................................................101
IPv4..................................................................101
IPv6..................................................................106
WAN Reservation.........................................................110
VPN.......................................................................112
IPsec...................................................................112
GRE.....................................................................119
PPTP/L2TP servers.......................................................121
VPN Users...............................................................126
EoGRE...................................................................127
Wi-Fi.....................................................................129
Basic Settings..........................................................129
Client Management.......................................................137
WPS.....................................................................138
Using WPS Function via Web-based Interface............................140
Using WPS Function without Web-based Interface........................141
WMM.....................................................................142
Client..................................................................145
Additional..............................................................147
MAC Filter..............................................................151
Super Mesh..............................................................154
Roaming.................................................................159

Page 3 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
User Manual

Advanced..................................................................161
VLAN....................................................................162
WAN Assignment..........................................................165
Using LAN Ports as WAN Ports..........................................165
Using WAN Port as LAN Port............................................166
SNMP....................................................................167
DNS.....................................................................170
DDNS....................................................................172
Ports Settings..........................................................174
Redirect................................................................177
Routing.................................................................178
TR-069 Client...........................................................180
Remote Access...........................................................182
UPnP IGD................................................................184
UDPXY...................................................................185
IGMP/MLD................................................................187
ALG/Passthrough.........................................................189
CoovaChilli.............................................................191
VRRP....................................................................195
Firewall..................................................................197
IP Filter...............................................................197
Virtual Servers.........................................................201
DMZ.....................................................................204
MAC Filter..............................................................205
URL Filter..............................................................207
AdBlock.................................................................210
System....................................................................211
Configuration...........................................................212
Firmware Update.........................................................214
Local Update..........................................................216
Remote Update.........................................................217
Schedule................................................................218
Log.....................................................................222
Ping....................................................................224
Traceroute..............................................................226
Telnet/SSH..............................................................228
System Time.............................................................229
Auto Provision..........................................................231
Yandex.DNS................................................................233
Settings................................................................233
Devices and Rules.......................................................235
SkyDNS....................................................................237
Settings................................................................238
Devices.................................................................240
Chapter 5. Operation Guidelines...............................242
Safety Rules and Conditions...............................................242
Wireless Installation Considerations......................................243
Chapter 6. Abbreviations and Acronyms.........................244

Page 4 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Introduction
User Manual

CHAPTER 1. INTRODUCTION
Contents and Audience
This manual describes the router DIR-878 and explains how to configure and operate it.
This manual is intended for users familiar with basic networking concepts, who create an in-home
local area network, and system administrators, who install and configure networks in offices.

Conventions
Example Description

text The body text of the manual.

Before You Begin A reference to a chapter or section of this manual.

“Quick Installation
A reference to a document.
Guide”

A name of a menu, menu item, control (field, checkbox, drop-down

Change
list, button, etc.).

192.168.0.1 Data that you should enter in the specified field.

! Information An important note.

Document Structure
Chapter 1 describes the purpose and structure of the document.
Chapter 2 gives an overview of the router's hardware and software features, describes its
appearance and the package contents.
Chapter 3 explains how to install the router DIR-878 and configure a PC in order to access its web-
based interface.
Chapter 4 describes all pages of the web-based interface in detail.
Chapter 5 includes safety instructions and tips for networking.
Chapter 6 introduces abbreviations and acronyms most commonly used in User Manuals for
D-Link customer premises equipment.

Page 5 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

CHAPTER 2. OVERVIEW
General Information
The DIR-878 device is a wireless dual band gigabit router with a built-in 4-port switch. It provides a
fast and simple way to create a wireless and wired network at home or in an office.
You are able to connect the wireless router DIR-878 to a cable or DSL modem or to a private
Ethernet line and use a high-speed Internet connection to successfully fulfill a wide range of
professional tasks. The built-in 4-port switch enables you to connect Ethernet-enabled computers,
game consoles, and other devices to your network.
New Firmware Version 4.0.1
The firmware update to version 4.0.1 essentially improves the technical specifications and
functional capabilities of the DIR-878 Wi-Fi Gigabit Router, allowing to migrate from the 3 x 3
MU-MIMO to the 4 x 4 MU-MIMO full-fledged support, as also to increase Wi-Fi performance
from AC1900 to AC2600, and to enhance the security features.
The functionality of new firmware:
• moving to 4 x 4 MU-MIMO technology that allows to simultaneously transfer up to 4 data
streams;
• increased wireless connection rate up to 2.6Gbps: up to 800Mbps for 2.4GHz band and up to
1733Mbps for 5GHz band;
• 160MHz channel bandwidth providing a high-speed connection (up to 3.464Gbps);
• Super Mesh1 function is D-Link implementation of Mesh networks designed to quickly
connect up to 16 access points or wireless routers into one transport network, for example,
when it's needed to create a large temporary Wi-Fi network for an outdoor event or when it's
required to provide high-quality Wi-Fi coverage without dead zones in offices and living
units of complicated planning;
• built-in PPTP/L2TP server and GRE, EoGRE, L2TP over IPsec VPN tunnels support;
• embedded ad blocking function;
• CoovaChilli captive portal for HoReCa companies and Internet service providers that
arrange public Wi-Fi hotspot areas.
New firmware version is available for installation through web-based interface and D-Link
Assistant mobile application2.
LAN/WAN Conversion, WAN Failover
You can use any Ethernet port of the router as LAN or WAN port. The new-generation firmware
supports assigning several WAN ports, for example, in order to configure the primary and backup
WAN connection of different ISPs.

1 Other D-Link devices with Super Mesh support: DAP-600P, DAP-400P, DAP-1620/B1, DIR-853, DIR-882.
2 Note: when the firmware is updated, the factory default settings are restored.

Page 6 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Wireless Interface
Using the DIR-878 device, you are able to quickly create a high-speed wireless network at home or
in your office, which lets computers and mobile devices access the Internet virtually anywhere
(within the operational range of your wireless network). Simultaneous activity of 2.4GHz band and
5GHz band allows performing a wide range of tasks. The router can operate as a base station for
connecting wireless devices of the standards 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac (at
the wireless connection rate up to 2600Mbps3).
Secure Wireless Connection
The router supports multiple functions for the wireless interface: several security standards (WEP,
WPA/WPA2), MAC address filtering, WPS, WMM.
In addition, the device is equipped with a button for switching the Wi-Fi network off/on. If needed,
for example, when you leave home, you can easily switch the router’s WLAN by pressing the
button, and devices connected to the LAN ports of the router will stay online.
Advanced Capabilities of Wireless Network
Multi-user MIMO technology allows to distribute the router's resources to let multiple wireless
clients use the Wi-Fi network efficiently, keeping high rates for HD media streaming, lag-free
gaming, and fast transfer of large files.
Transmit Beamforming technology allows to flexibly change the antennas' radiation pattern and to
redistribute the signal directly to wireless devices connected to the router.
Smart adjustment of Wi-Fi clients is useful for networks based on several D-Link access points or
routers – when the smart adjustment function is configured on each of them, a client always
connects to the access point (router) with the highest signal level.
Support of guest Wi-Fi network allows you to create a separate wireless network with individual
security settings and maximum rate limitation. Devices connected to the guest network will be able
to access the Internet, but will be isolated from the devices and resources of the router's LAN.
Security
The wireless router DIR-878 includes a built-in firewall. The advanced security functions minimize
threats of hacker attacks, prevent unwanted intrusions to your network, and block access to
unwanted websites for users of your LAN.
The SSH protocol support provides more secure remote configuration and management of the
router due to encryption of all transmitted traffic, including passwords.
In addition, the router supports IPsec and allows to create secure VPN tunnels. Support of the
IKEv2 protocol allows to provide simplified message exchange and use asymmetric authentication
engine upon configuration of an IPsec tunnel.
Built-in Yandex.DNS service protects against malicious and fraudulent web sites and helps to block
access to adult content on children's devices.
The router also supports the SkyDNS web content filtering service, which provides more settings
and opportunities for safer Internet experience for home users of all ages and for professional
activities of corporate users.

3 Up to 800Mbps for 2.4GHz and up to 1733Mbps for 5GHz.

Page 7 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Now the schedules are also implemented; they can be applied to the rules of various filters and used
to reboot the router at the specified time or every specified time period and to enable/disable the
wireless network.
Easy configuration and update
You can configure the settings of the wireless router DIR-878 via the user-friendly web-based
interface (the interface is available in several languages).
The configuration wizard allows you to quickly switch DIR-878 to one of the following modes:
router (for connection to a wired or wireless ISP), access point, repeater, or client, and then
configure all needed setting for operation in the selected mode in several simple steps.
Also DIR-878 supports configuration and management via mobile application for Android and
iPhone smartphones.
You can simply update the firmware: the router itself finds approved firmware on D-Link update
server and notifies when ready to install it.

Page 8 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Specifications*
Hardware
Processor · MT7621A (880MHz, dual core)

RAM · 128MB, DDR3

Flash · 16MB, SPI

Interfaces · 10/100/1000BASE-T WAN port

· 4 10/100/1000BASE-T LAN ports

LEDs · Power
· Internet
· WLAN 2.4G
· WLAN 5G

Buttons · POWER button to power on/power off

· WiFi button to enable/disable wireless network
· WPS button to set up wireless connection
· RESET button to restore factory default settings

Antenna · Four external non-detachable antennas (5dBi gain)

MIMO · 4 x 4, MU-MIMO

Power connector · Power input connector (DC)

Software
WAN connection types · PPPoE
· IPv6 PPPoE
· PPPoE Dual Stack
· Static IPv4 / Dynamic IPv4
· Static IPv6 / Dynamic IPv6
· PPPoE + Static IP (PPPoE Dual Access)
· PPPoE + Dynamic IP (PPPoE Dual Access)
· PPTP/L2TP + Static IP
· PPTP/L2TP + Dynamic IP

* The device features are subject to change without notice. For the latest versions of the firmware and relevant
documentation, visit www.dlink.ru.

Page 9 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Software
Network functions · DHCP server/relay
· Advanced configuration of built-in DHCP server
· Stateful/Stateless mode for IPv6 address assignment, IPv6 prefix delegation
· Automatic obtainment of LAN IP address (for access point/repeater/client
modes)
· DNS relay
· Dynamic DNS
· Static IP routing
· Static IPv6 routing
· IGMP/MLD Proxy
· RIP
· Support of UPnP IGD
· Support of VLAN
· WAN ping respond
· Support of SIP ALG
· Support of RTSP
· WAN failover
· LAN/WAN conversion
· Multi-WAN support
· Autonegotiation of speed, duplex mode, and flow control / Manual speed and
duplex mode setup for each Ethernet port
· Built-in UDPXY application
· Support of VRRP
Firewall functions · Network Address Translation (NAT)
· Stateful Packet Inspection (SPI)
· IP filter
· IPv6 filter
· MAC filter
· URL filter
· Ad blocking function
· DMZ
· Virtual servers
· Built-in Yandex.DNS web content filtering service
· Built-in SkyDNS web content filtering service

VPN · IPsec/PPTP/L2TP/PPPoE pass-through

· PPTP/L2TP servers
· PPTP/L2TP tunnels
· L2TP over IPsec
· GRE tunnels, EoGRE tunnels
· IPsec tunnels
Transport/Tunnel mode
IKEv1/IKEv2 support
DES encryption
NAT Traversal
Support of DPD (Keep-alive for VPN tunnels)

Page 10 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Software
Management and monitoring · Local and remote access to settings through SSH/TELNET/WEB
(HTTP/HTTPS)
· Multilingual web-based interface for configuration and management
· Support of D-Link Assistant application for Android and iPhone smartphones
· Notification on connection problems and auto redirect to settings
· Firmware update via web-based interface
· Automatic notification on new firmware version
· Saving/restoring configuration to/from file
· Support of logging to remote host
· Automatic synchronization of system time with NTP server and manual
time/date setup
· Ping utility
· Traceroute utility
· TR-069 client
· SNMP agent
· Schedules for filters rules, automatic reboot, and enabling/disabling wireless
network
· Automatic upload of configuration file from ISP's server (Auto Provision)

Wireless Module Parameters

Standards · IEEE 802.11a/n/ac
· IEEE 802.11b/g/n

Frequency range
· 2400 ~ 2483.5MHz
The frequency range depends upon the · 5150 ~ 5350MHz
radio frequency regulations applied in your · 5650 ~ 5850MHz
country

Wireless connection security · WEP

· WPA/WPA2 (Personal/Enterprise)
· МАС filter
· WPS (PBC/PIN)

Advanced functions · Super Mesh function

· Support of client mode
· WMM (Wi-Fi QoS)
· Information on connected Wi-Fi clients
· Advanced settings
· Smart adjustment of Wi-Fi clients
· Guest Wi-Fi / support of MBSSID
· Limitation of wireless network rate
· Periodic scan of channels, automatic switch to least loaded channel
· Support of 802.11ac (5GHz) and 802.11n (2.4GHz) TX Beamforming
· Wider bandwidth (up to 160MHz)
· Autonegotiation of channel bandwidth in accordance with environment
conditions (20/40 Coexistence)
· CoovaChilli authentication portal

·
4
Wireless connection rate IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
· IEEE 802.11b: 1, 2, 5.5, and 11Mbps
· IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, and 54Mbps
· IEEE 802.11n (2.4GHz): 6.5–600Mbps (MCS0–MCS30) to 800Mbps (QAM256)
· IEEE 802.11n (5GHz): from 6.5 to 600Mbps (from MCS0 to MCS30)
· IEEE 802.11ac (5GHz): from 6.5 to 1733Mbps (from MCS0 to MSC9)

Page 11 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Wireless Module Parameters

Transmitter output power · 802.11a (typical at room temperature 25 °C)
15dBm at 6, 54Mbps
The maximum value of the transmitter
output power depends upon the radio · 802.11b (typical at room temperature 25 °C)
frequency regulations applied in your 15dBm at 1, 11Mbps
country
· 802.11g (typical at room temperature 25 °C)
15dBm at 6, 54Mbps

· 802.11n (typical at room temperature 25 °C)

2.4GHz
15dBm at MCS0, 7
5GHz
15dBm at MCS0, 7

· 802.11ac (typical at room temperature 25 °C)

15dBm at MCS0, 9

4 Maximum wireless signal rate is derived from IEEE standard 802.11ac and 802.11n specifications. In order to get
the rate of 800Mbps in the 2.4GHz band, a Wi-Fi client should support MIMO 4 x 4 and QAM256 modulation
scheme. Actual data throughput will vary. Network conditions and environmental factors, including volume of
network traffic, building materials and construction, and network overhead, lower actual data throughput rate.
Environmental factors will adversely affect wireless signal range.

Page 12 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Wireless Module Parameters

Receiver sensitivity · 802.11a
-96dBm at 6Mbps
-78dBm at 54Mbps

· 802.11b
-96dBm at 1Mbps
-90dBm at 11Mbps

· 802.11g
-95dBm at 6Mbps
-76dBm at 54Mbps

· 802.11n
2.4GHz, HT20
-95dBm at MCS0
-76dBm at MCS7
2.4GHz, HT40
-92dBm at MCS0
-72dBm at MCS7
5GHz, HT20
-95dBm at MCS0
-76dBm at MCS7
5GHz, HT40
-93dBm at MCS0
-73dBm at MCS7

· 802.11ac
VHT20
-96dBm at MCS0
-73dBm at MCS8
VHT40
-92dBm at MCS0
-68dBm at MCS9
VHT80
-88dBm at MCS0
-64dBm at MCS9

Modulation schemes · 802.11a: BPSK, QPSK, 16QAM, 64QAM with OFDM

· 802.11b: DQPSK, DBPSK, DSSS, CCK
· 802.11g: BPSK, QPSK, 16QAM, 64QAM with OFDM
· 802.11n: BPSK, QPSK, 16QAM, 64QAM, 256QAM with OFDM
· 802.11ac: BPSK, QPSK, 16QAM, 64QAM, up to 256QAM with OFDM

Physical Parameters
Dimensions (L x W x H) · 259 x 184 x 46 mm (10.8 x 7.24 x 1.81 in)

Weight · 565 g (1.25 lb)

Operating Environment
Power · Output: 12V DC, 1.5A

Temperature · Operating: from 0 to 40 °C

· Storage: from -20 to 65 °C

Humidity · Operating: from 10% to 90% (non-condensing)

· Storage: from 5% to 95% (non-condensing)

Page 13 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Product Appearance
Upper Panel

Figure 1. Upper panel view.

LED Mode Description

Solid orange The router is being loaded.

Solid green The router is powered on.

Power
Blinking green The firmware is being updated.

No light The router is powered off.

Solid green The default wired WAN connection is on.

Blinking green The default wired WAN connection is active.

Internet
• The default wired WAN connection is off, or
Blinking orange
• there are no WAN connections created.

No light The WAN cable is not connected.

Solid green The router's WLAN of the relevant band is on.

Fast blinking green

Data transfer through the Wi-Fi network of the relevant
WLAN 2.4G band.
WLAN 5G Attempting to add a wireless device via the WPS
Slow blinking green
function.

No light The router's WLAN of the relevant band is off.

In case the Power and Internet LEDs are blinking orange at the same time, the device is in the
emergency mode. Restore the factory default settings via the hardware RESET button.

Page 14 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Back Panel

Figure 2. Back panel view.

Port Description

LAN 1-4 4 Ethernet ports to connect computers or network devices.

A port to connect to a cable or DSL modem or to a private Ethernet

INTERNET line (it is recommended to use the cable included in the delivery
package).

A button to restore the factory defaults.

RESET To restore the factory defaults, push the button (with the device turned
on), hold it for 10 seconds, and then release the button.

A button to set up wireless connection (the WPS function).

To use the WPS function: with the device turned on, push the button,
WPS
hold it for 2 seconds, and release. The WLAN 2.4G and WLAN 5G
LEDs should start blinking.

A button to enable/disable wireless network.

To disable the router's wireless network: with the device turned on,
WiFi
press the button and release. The WLAN 2.4G and WLAN 5G LEDs
should turn off.

Page 15 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Port Description

12V=1.5A Power connector.

POWER A button to turn the router on/off.

The device is also equipped with four external non-detachable Wi-Fi antennas.

Page 16 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Overview
User Manual

Delivery Package
The following should be included:
• Router DIR-878
• Power adapter DC 12V/1.5A
• Ethernet cable
• “Quick Installation Guide” (brochure).
The “User Manual” and “Quick Installation Guide” documents are available on D-Link website
(see www.dlink.ru).

! Using a power supply with a different voltage rating than the one included will cause
damage and void the warranty for this product.

Page 17 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

CHAPTER 3. INSTALLATION AND CONNECTION

Before You Begin
Please, read this manual prior to installing the device. Make sure that you have all the necessary
information and equipment.
Computer or Mobile Device
Configuration of the wireless dual band gigabit router with a built-in 4-port switch DIR-878
(hereinafter referred to as “the router”) is performed via the built-in web-based interface. The web-
based interface is available from any operating system that supports a web browser.
Also you can use D-Link Assistant application for Android or iPhone mobile devices (smartphones
or tablets).
PC Web Browser
The following PC web browsers are recommended:
• Apple Safari 8 and later
• Google Chrome 48 and later
• Microsoft Internet Explorer 10 and later
• Microsoft Edge 20.10240 and later
• Mozilla Firefox 44 and later
• Opera 35 and later.
For successful operation, JavaScript should be enabled on the web browser. Make sure that
JavaScript has not been disabled by other software (such as virus protection or web user security
packages) running on your computer.
Wired or Wireless NIC (Ethernet or Wi-Fi Adapter)
Any computer that uses the router should be equipped with an Ethernet or Wi-Fi adapter (NIC). If
your computer is not equipped with such a device, install an Ethernet or Wi-Fi adapter prior to using
the router.
Wireless Connection
Wireless workstations from your network should be equipped with a wireless 802.11a, b, g, n, or ac
NIC (Wi-Fi adapter). In addition, you should specify the values of SSID, channel number and
security settings defined in the web-based interface of the router for all these wireless workstations.

Page 18 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Connecting to PC
PC with Ethernet Adapter
1. Connect an Ethernet cable between any of LAN ports located on the back panel of the router
and the Ethernet port of your PC.
2. Connect the power cord to the power connector port on the back panel of the router, then
plug the power adapter into an electrical outlet or power strip.
3. Turn on the router by pressing the POWER button on its back panel.
Then make sure that your PC is configured to obtain an IP address automatically (as DHCP client).

Obtaining IP Address Automatically (OS Windows 7)

1. Click the Start button and proceed to the Control Panel window.
2. Select the Network and Sharing Center section. (If the Control Panel has the category
view (the Category value is selected from the View by drop-down list in the top right
corner of the window), choose the View network status and tasks line under the
Network and Internet section.)

Figure 3. The Control Panel window.

Page 19 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

3. In the menu located on the left part of the window, select the Change adapter settings
line.

Figure 4. The Network and Sharing Center window.

Page 20 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

4. In the opened window, right-click the relevant Local Area Connection icon and select
the Properties line in the menu displayed.

Figure 5. The Network Connections window.

Page 21 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

5. In the Local Area Connection Properties window, on the Networking tab, select the
Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Figure 6. The Local Area Connection Properties window.

Page 22 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.

Figure 7. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the OK button in the connection properties window.

Page 23 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Obtaining IP Address Automatically (OS Windows 10)

1. Click the Start button and proceed to the Settings window.
2. Select the Network & Internet section.

Figure 8. The Windows Settings window.

Page 24 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

3. In the Change your network settings section, select the Change adapter options
line.

Figure 9. The Network & Internet window.

Page 25 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

4. In the opened window, right-click the relevant Local Area Connection icon and select
the Properties line in the menu displayed.

Figure 10. The Network Connections window.

5. In the Local Area Connection Properties window, on the Networking tab, select the
Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Figure 11. The local area connection properties window.

Page 26 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.

Figure 12. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the Close button in the connection properties window.

Page 27 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

PC with Wi-Fi Adapter

1. Connect the power cord to the power connector port on the back panel of the router, then
plug the power adapter into an electrical outlet or power strip.
2. Turn on the router by pressing the POWER button on its back panel.
3. Make sure that your Wi-Fi adapter is on. As a rule, modern notebooks with built-in wireless
NICs are equipped with a button or switch that turns on/off the wireless adapter (refer to
your PC documents). If your PC is equipped with a pluggable wireless NIC, install the
software provided with your Wi-Fi adapter.
Then make sure that your Wi-Fi adapter is configured to obtain an IP address automatically (as
DHCP client).

Page 28 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Obtaining IP Address Automatically and Connecting to Wireless

Network (OS Windows 7)
1. Click the Start button and proceed to the Control Panel window.
2. Select the Network and Sharing Center section. (If the Control Panel has the category
view (the Category value is selected from the View by drop-down list in the top right
corner of the window), choose the View network status and tasks line under the
Network and Internet section.)

Figure 13. The Control Panel window.

3. In the menu located on the left part of the window, select the Change adapter settings
line.
4. In the opened window, right-click the relevant Wireless Network Connection icon.
Make sure that your Wi-Fi adapter is on, then select the Properties line in the menu
displayed.
5. In the Wireless Network Connection Properties window, on the Networking tab,
select the Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Page 29 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.

Figure 14. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the OK button in the connection properties window.
8. To open the list of available wireless networks, select the icon of the wireless network
connection and click the Connect To button or left-click the network icon in the
notification area located on the right side of the taskbar.

Figure 15. The notification area of the taskbar.

Page 30 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

9. In the opened Wireless Network Connection window, select the wireless network
DIR-878 (for operating in the 2.4GHz band) or DIR-878-5G (for operating in the 5GHz
band) and click the Connect button.

Figure 16. The list of available networks.

10. In the opened window, enter the network key (see WPS PIN on the barcode label on the
bottom panel of the device) in the Security key field and click the OK button.
11. Wait for about 20-30 seconds. After the connection is established, the network icon will be
displayed as the signal level scale.

If you perform initial configuration of the router via Wi-Fi connection, note that
! immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.

Page 31 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Obtaining IP Address Automatically and Connecting to Wireless

Network (OS Windows 10)
1. Click the Start button and proceed to the Settings window.
2. Select the Network & Internet section.

Figure 17. The Windows Settings window.

3. In the Change your network settings section, select the Change adapter options
line.
4. In the opened window, right-click the relevant Wireless Network Connection icon.
Make sure that your Wi-Fi adapter is on, then select the Properties line in the menu
displayed.
5. In the Wireless Network Connection Properties window, on the Networking tab,
select the Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Page 32 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

6. Make sure that the Obtain an IP address automatically and Obtain DNS server
address automatically choices of the radio buttons are selected. Click the OK button.

Figure 18. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the Close button in the connection properties window.
8. To open the list of available wireless networks, select the icon of the wireless network
connection and click the Connect To button or left-click the network icon in the
notification area located on the right side of the taskbar.

Figure 19. The notification area of the taskbar.

Page 33 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

9. In the opened Wireless Network Connection window, select the wireless network DIR-
878 (for operating in the 2.4GHz band) or DIR-878-5G (for operating in the 5GHz band)
and click the Connect button.

Figure 20. The list of available networks.

10. In the opened window, enter the network key (see WPS PIN on the barcode label on the
bottom panel of the device) in the Security key field and click the Next button.
11. Allow or forbid your PC to be discoverable by other devices on this network (Yes / No).

Figure 21. PC discovery settings.

12. Wait for about 20-30 seconds. After the connection is established, the network icon will be
displayed as a dot with curved lines indicating the signal level.

If you perform initial configuration of the router via Wi-Fi connection, note that
! immediately after changing the wireless default settings of the router you will need to
reconfigure the wireless connection using the newly specified settings.

Page 34 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Connecting to Web-based Interface

When you have configured your computer, you can access the web-based interface and configure
needed parameters (create a WAN connection, change the parameters of the wireless network,
specify the settings of the firewall, etc.).

For security reasons, DIR-878 with default settings cannot connect to the Internet. To get
! started, please set your own password used to access the web-based interface and, if
needed, configure other settings recommended by your ISP.

Start a web browser (see the Before You Begin section, page 18). In the address bar of the web
browser, enter the domain name of the router (by default, dlinkrouter.local) with a dot at
the end and press the Enter key. Also you can enter the IP address of the device (by default,
192.168.0.1).

Figure 22. Connecting to the web-based interface of the DIR-878 device.

If the error “The page cannot be displayed” (or “Unable to display the page”/“Could not
! connect to remote server”) occurs upon connecting to the web-based interface of the router,
make sure that you have properly connected the router to your computer.

If the device has not been configured previously or the default settings have been restored, after
access to the web-based interface the Initial Configuration Wizard opens (see the Initial
Configuration Wizard section, page 42).

Figure 23. The page for running the Initial Configuration Wizard.

Page 35 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

If you configured the device previously, after access to the web-based interface the login page
opens. Enter the username (admin) in the Username field and the password you specified in the
Password field, then click the LOGIN button.

Figure 24. The login page.

In order not to log out, move the Stay signed in switch to the right. After closing the web browser
or rebooting the device, you need to enter the username and the password again.
If you enter a wrong password several times, the web-based interface will be blocked for a while.
Please wait for one minute and reenter the password you specified.

Page 36 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Web-based Interface Structure

Summary Page
On the Summary page, detailed information on the device state is displayed.

Figure 25. The summary page.

Page 37 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

The Device Information section displays the model and hardware version of the router, the
firmware version, and other data.
To contact the technical support group (to send an e-mail), left-click the support e-mail address.
After clicking the line, the e-mail client window for sending a new letter to the specified address
opens.
To change the operation mode of the device, left-click the name of the mode in the Device mode
line. In the opened window, click the Initial Configuration Wizard link (for the detailed
description of the Wizard, see the Initial Configuration Wizard section, page 42).
The Wi-Fi 2.4 GHz and Wi-Fi 5 GHz sections display data on the state of the device's wireless
network, its name and the authentication type, and availability of an additional wireless network in
the relevant band.
In the WAN section, data on the type and status of the existing WAN connection are displayed.
In the LAN section, the IPv4 and IPv6 address of the router, the LAN MAC address, and the
number of wired and wireless clients of the device are displayed.
The LAN Ports section displays the state of the device's LAN ports and data transfer mode of
active ports.
The Yandex.DNS section displays the Yandex.DNS service state and operation mode. To enable
the Yandex.DNS service, move the Enable switch to the right. If needed, change the operation
mode of the service.

Page 38 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Home Page
The Home page displays links to the most frequently used pages with device's settings.

Figure 26. The Home page.

Other settings of the router are available in the menu in the left part of the page.

Page 39 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Menu Sections
To configure the router use the menu in the left part of the page.
In the Initial Configuration section you can run the Initial Configuration Wizard. The Wizard
allows you to configure the router for operation in the needed mode and specify all parameters
necessary for getting started (for the description of the Wizard, see the Initial Configuration
Wizard section, page 42).
The pages of the Statistics section display data on the current state of the router (for the
description of the pages, see the Statistics section, page 70).
The pages of the Connections Setup section are designed for configuring basic parameters of
the LAN interface of the router and creating a connection to the Internet (for the description of the
pages, see the Connections Setup section, page 77).
The pages of the VPN section are designed for configuring VPN connections based on IPsec/GRE/
EoGRE protocols and creating a PPTP or L2TP server and accounts for access to it (for the
description of the pages, see the VPN section, page 112).
The pages of the Wi-Fi section are designed for specifying all needed settings of the router's
wireless network (for the description of the pages, see the Wi-Fi section, page 129).
The pages of the Advanced section are designed for configuring additional parameters of the
router (for the description of the pages, see the Advanced section, page 161).
The pages of the Firewall section are designed for configuring the firewall of the router (for the
description of the pages, see the Firewall section, page 197).
The pages of the System section provide functions for managing the internal system of the router
(for the description of the pages, see the System section, page 211).
The pages of the Yandex.DNS section are designed for configuring the Yandex.DNS web content
filtering service (for the description of the pages, see the Yandex.DNS section, page 233).
The pages of the SkyDNS section are designed for configuring the SkyDNS web content filtering
service (for the description of the pages, see the SkyDNS section, page 237).
To exit the web-based interface, click the Logout line of the menu.

Page 40 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Installation and Connection
User Manual

Notifications
The router's web-based interface displays notifications in the top right part of the page.

Figure 27. The web-based interface notifications.

Click the icon displaying the number of notifications to view the complete list and click the relevant
button.

Page 41 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

CHAPTER 4. CONFIGURING VIA WEB-BASED

INTERFACE
Initial Configuration Wizard
To start the Initial Configuration Wizard, go to the Initial Configuration section. On the opened
page, click the OK button and wait until the factory default settings are restored.

Figure 28. Restoring the default settings in the Wizard.

If you perform initial configuration of the router via Wi-Fi connection, please make sure that you
are connected to the wireless network of DIR-878 (see the WLAN name (SSID) on the barcode
label on the bottom panel of the device) and click the NEXT button.

Figure 29. Checking connection to the wireless network.

Click the START button.

Figure 30. Starting the Wizard.

Page 42 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

On the opened page, click YES in order to leave the current language of the web-based interface or
click NO to select another language.

Figure 31. Selecting a language.

You can finish the wizard earlier and go to the menu of the web-based interface. To do this, click
the ADVANCED SETTINGS button. On the opened page, change the default settings: specify the
administrator password in the User’s interface password and Password confirmation and
the name of the wireless network in the 2.4GHz and 5GHz bands in the Network name 2.4 GHz
(SSID) and Network name 5 GHz (SSID) fields correspondingly. Then click the APPLY button.

Figure 32. Changing the default settings.

To continue the configuration of the router via the Wizard, click the CONTINUE button.

Page 43 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Selecting Operation Mode

Select the needed operation mode and click the NEXT button.

Router
In order to connect your device to a wired ISP, on the Device mode page, from the Connection
method list, select the Autonomous value. Then from the Work mode list, select the Router
value. In this mode you can configure a WAN connection, set your own settings for the wireless
network in the 2.4GHz and 5GHz bands, configure LAN ports to connect an STB or VoIP phone,
and set your own password for access to the web-based interface of the device.

Figure 33. Selecting an operation mode. The Router mode.

Page 44 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In order to connect your device to a wireless ISP (WISP), on the Device mode page, from the
Connection method list, select the Autonomous value. Then from the Work mode list, select
the WISP Repeater value. In this mode you can connect your device to another access point,
configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and
5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 34. Selecting an operation mode. The WISP Repeater mode.

Page 45 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Access Point or Repeater

In order to connect your device to a wired router for adding a wireless network to the existing local
network, on the Device mode page, from the Connection method list, select the
Autonomous value. Then from the Work mode list, select the Access point value. In this
mode you can change the LAN IP address, set your own settings for the wireless network in the
2.4GHz and 5GHz bands, and set your own password for access to the web-based interface of the
device.

Figure 35. Selecting an operation mode. The Access point mode.

Page 46 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In order to connect your device to a wireless router for extending the range of the existing wireless
network, on the Device mode page, from the Connection method list, select the
Autonomous value. Then from the Work mode list, select the Repeater value. In this mode
you can change the LAN IP address, connect your device to another access point, set your own
settings for the wireless network in the 2.4GHz and 5GHz bands, and set your own password for
access to the web-based interface of the device.

Figure 36. Selecting an operation mode. The Repeater mode.

Page 47 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Mesh Network Main Device (Master)

In order to configure DIR-878 as a main device of your Mesh network, from the Connection
method list, select the Super Mesh value. Then from the Device role list, select the Master
value. From the Frequency band list, select the band where your Mesh network operates.

! The Super Mesh function cannot operate in both bands simultaneously. Select one of the
bands (2.4GHz or 5GHz) for all devices of the configured network.

In order to connect your main device to a wired ISP, from the Work mode list, select the Router
value. In this mode you can configure a WAN connection, set your own settings for the wireless
network in the 2.4GHz and 5GHz bands, configure LAN ports to connect an STB or VoIP phone,
and set your own password for access to the web-based interface of the device.

Figure 37. Configuring the Super Mesh function for a main device. The Router mode.

Page 48 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In order to connect your main device to a wireless ISP (WISP), from the Work mode list, select
the WISP Repeater value. In this mode you can connect your device to another access point,
configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and
5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 38. Configuring the Super Mesh function for a main device. The WISP Repeater mode.

Page 49 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Mesh Network Subordinate Device (Slave)

In order to configure DIR-878 as a subordinate device of your Mesh network, from the
Connection method list, select the Super Mesh value. Then from the Device role list, select
the Slave value. From the Frequency band list, select the band where your main device (in the
Master role) operates.
Then a device in the Slave role is configured in the assess point mode. In this mode you can change
the LAN IP address, set your own settings for the wireless network in the 2.4GHz and 5GHz bands,
and set your own password for access to the web-based interface of the device.

Figure 39. Configuring the Super Mesh function for a subordinate device.

Page 50 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Changing LAN IPv4 Address

This configuration step is available for the Access point and Repeater modes.
1. Select the Automatic obtainment of IPv4 address to let DIR-878 automatically obtain
the LAN IPv4 address.
2. In the Hostname field, you should specify a domain name of the router using which you
can access the web-based interface after finishing the Wizard. Enter a new domain name of
the router ending with .local or leave the value suggested by the router.

! In order to access the web-based interface using the domain name, in the address bar of the
web browser, enter the name of the router with a dot at the end.

If you want to manually assign the LAN IPv4 address for DIR-878, do not select the Automatic
obtainment of IPv4 address checkbox and fill in the IP address, Subnet mask, DNS IP
address, Hostname fields and, if needed, the Gateway IP address field. Make sure that the
assigned address does not coincide with the LAN IPv4 address of the router to which your device
connects.

Figure 40. The page for changing the LAN IPv4 address.
3. Click the NEXT button to continue or click the BACK button to return to the previous page.

Page 51 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Wi-Fi Client
This configuration step is available for the WISP Repeater and Repeater modes.
1. On the Wi-Fi Сlient page, click the WIRELESS NETWORKS button and select the
network to which you want to connect in the opened window. When you select a network,
the Network name (SSID) and BSSID fields are filled in automatically.

If you cannot find the needed network in the list, click the UPDATE LIST icon ( ).
2. If a password is needed to connect to the selected network, fill in the relevant field. Click the
Show icon ( ) to display the entered password.

Figure 41. The page for configuring the Wi-Fi client.

If you connect to a hidden network, select the band where the hidden network operates from the
Frequency band list and enter the network name in the Network name (SSID) field. Then
select a needed value from the Network authentication list and then, if needed, enter the
password in the relevant field.
When the Open or WEP authentication type is selected, the following settings are displayed on the
page:

Parameter Description

For Open authentication type only.

The checkbox activating WEP encryption. When the checkbox is
Enable encryption WEP selected, the Default key ID drop-down list, the Encryption key
WEP as HEX checkbox, and four Encryption key fields are
displayed on the page.

Page 52 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.

Encryption key WEP as Select the checkbox to set a hexadecimal number as a key for
HEX encryption.

Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed authentication type is
selected, the following fields are displayed:

Parameter Description

A password for WPA encryption. Click the Show icon ( ) to

Password PSK
display the entered password.

Encryption type An encryption method: TKIP, AES, or TKIP+AES.

3. Click the NEXT button to continue or click the BACK button to return to the previous page.

Page 53 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Configuring WAN Connection

This configuration step is available for the Router and WISP Repeater modes.
You should configure your WAN connection in accordance with data provided by your

! Internet service provider (ISP). Make sure that you have obtained all necessary information
prior to configuring your connection. Otherwise contact your ISP.

1. On the Internet connection type page, click the SCAN button (available for the Router
mode only) to automatically specify the connection type used by your ISP or manually
select the needed value from the Connection type list.
2. Specify the settings necessary for the connection of the selected type.
3. If your ISP uses MAC address binding, select the Clone MAC address of your device
checkbox.
4. If the Internet access is provided via a VLAN channel, select the Use VLAN checkbox and
fill in the VLAN ID field.
5. Click the NEXT button to continue or click the BACK button to return to the previous page.

Page 54 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Static IPv4 Connection

Figure 42. The page for configuring Static IPv4 WAN connection.
Fill in the following fields: IP address, Subnet mask, Gateway IP address, and DNS IP
address.

Page 55 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Static IPv6 Connection

Figure 43. The page for configuring Static IPv6 WAN connection.
Fill in the following fields: IP address, Prefix, Gateway IP address, and DNS IP address.

Page 56 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

PPPoE, IPv6 PPPoE, PPPoE Dual Stack, PPPoE + Dynamic IP (PPPoE Dual
Access) Connections

Figure 44. The page for configuring PPPoE WAN connection.

In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.

Page 57 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

PPPoE + Static IP (PPPoE Dual Access) Connection

Figure 45. The page for configuring PPPoE + Static IP (PPPoE Dual Access) WAN connection.
In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.
Also fill in the following fields: IP address, Subnet mask, Gateway IP address, and DNS IP
address.

Page 58 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

PPTP + Dynamic IP or L2TP + Dynamic IP Connection

Figure 46. The page for configuring PPTP + Dynamic IP WAN connection.
In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.

Page 59 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

PPTP + Static IP or L2TP + Static IP Connection

Figure 47. The page for configuring PPTP + Static IP WAN connection.
In the Username field enter the login and in the Password field enter the password provided by
your ISP. Click the Show icon ( ) to display the entered password. If authorization is not
required, select the Without authorization checkbox.
In the VPN server address field, enter the IP or URL address of the PPTP or L2TP
authentication server.
Also fill in the following fields: IP address, Subnet mask, Gateway IP address, and DNS IP
address.

Page 60 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Configuring Wireless Network

This configuration step is available for the Router, Access point, WISP Repeater, and
Repeater modes.
1. On the Wireless Network 2.4 GHz page, in the Network name field, specify your own
name for the wireless network in the 2.4GHz band or leave the value suggested by the
router.
2. In the Password field, specify your own password for access to the wireless network or
leave the value suggested by the router (WPS PIN of the device, see the barcode label).
3. If the router is used as a Wi-Fi client, you can specify the same parameters of the wireless
network as specified for the network to which you are connecting. To do this, click the USE
button (available for the WISP Repeater and Repeater modes only).
4. You can restore the parameters of the wireless network specified before resetting to factory
defaults. To do this, click the RESTORE button.

Figure 48. The page for configuring the wireless network.

Page 61 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

5. If you want to create an additional wireless network isolated from your LAN in the 2.4GHz
band, select the Enable guest network checkbox (available for the Router and WISP
Repeater modes only).

Figure 49. The page for configuring the wireless network.

6. In the Network name field, specify your own name for the guest wireless network or leave
the value suggested by the router.
7. If you want to create a password for access to the guest wireless network, deselect the Open
network checkbox and fill in the Password field.
8. If you want to limit the bandwidth of the guest wireless network, select the Enable
shaping checkbox and fill in the Shaping field.
9. Click the NEXT button to continue or click the BACK button to specify other settings.
10. On the Wireless Network 5 GHz page, specify needed settings for the wireless network
in the 5GHz band and click the NEXT button.

Page 62 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Configuring LAN Ports for IPTV/VoIP

This configuration step is available for the Router mode.
1. On the IPTV page, select the Is an STB connected to the device checkbox.

Figure 50. The page for selecting a LAN port to connect an IPTV set-top box.
2. Select a free LAN port for connecting your set-top box.
3. If the IPTV service is provided via a VLAN channel, select the Use VLAN ID checkbox
and fill in the VLAN ID field.
4. Click the NEXT button to continue or click the BACK button to specify other settings.

Page 63 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

5. On the VoIP page, select the Is an IP phone connected to the device checkbox.

Figure 51. The page for selecting a LAN port to connect a VoIP phone.
6. Select a free LAN port for connecting your IP phone.
7. If the VoIP service is provided via a VLAN channel, select the Use VLAN ID checkbox and
fill in the VLAN ID field.
8. Click the NEXT button to continue or click the BACK button to specify other settings.

Page 64 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Changing Web-based Interface Password

On this page, you should change the default administrator password. To do this, enter a new
password in the User’s interface password and Password confirmation fields. You may set
any password except admin. Use digits, Latin letters (uppercase and/or lowercase), and other
characters available in the US keyboard layout.5

Figure 52. The page for changing the web-based interface password.

Remember or write down the new password for the administrator account. In case of losing

!
the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.
Click the NEXT button to continue or click the BACK button to return to the previous page.
On the next page, check all specified settings.
Also you can save a text file with parameters set by the Wizard to your PC. To do this, click the
SAVE CONFIGURATION FILE button and follow the dialog box appeared.
To finish the Wizard, click the APPLY button. The router will apply settings and reboot. Click the
BACK button to specify other settings.

5 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 65 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

If the Wizard has configured a WAN connection, after clicking the APPLY button, the page for
checking the Internet availability opens.

Figure 53. Checking the Internet availability.

If the router has been successfully connected to the Internet, click the FINISH button.
If problems appeared when connecting to the Internet, click the CHECK AGAIN button to recheck
the state of the WAN connection.
If problems of connection have not been solved, contact the technical support of your ISP (as a rule,
the technical support phone is provided with the agreement) or the D-Link technical support (the
phone number will be displayed on the page after several attempts of checking the connection).
To specify other settings, click the ADVANCED SETTINGS button. After clicking the
ADVANCED SETTINGS button, the Home page opens (see the Home Page section, page 39).

Page 66 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Connection of Multimedia Devices

The Multimedia Devices Connection Wizard helps to configure LAN ports of the router for
connecting additional devices, for example, an IPTV set-top box or IP phone. Contact your ISP to
clarify if you need to configure DIR-878 in order to use these devices.
To start the Wizard, on the Home page, select the Connection of Multimedia Devices section.
If you need to select a port in order to use an additional device, left-click the relevant element in the
LAN section (the selected element will be marked with a frame). Then click the APPLY button.

Figure 54. The Multimedia Devices Connection Wizard. The simplified mode.

Page 67 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

If you need to configure a connection via VLAN, click the ADVANCED MODE button.

Figure 55. The Multimedia Devices Connection Wizard. The advanced mode.

In the WAN section, click the Add icon ( ).

Figure 56. Adding a connection.

In the opened window, specify a name of the connection for easier identification in the Name field
(you can specify any name). Specify the VLAN ID provided by your ISP and click the SAVE
button.
Then in the LAN section, from the Bridged with drop-down list of the element corresponding to
the LAN port to which the additional device is connected, select the created connection. Click the
APPLY button.

Page 68 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

! The selected port cannot use the default connection to access the Internet.

To deselect the port in the simplified mode, left-click the selected element (the frame will
disappear) and click the APPLY button.
To deselect the port in the advanced mode, select the No value from the Bridged with drop-down
list of the element corresponding to the needed LAN port. Then in the WAN section, select the
connection via VLAN which will not be used any longer and click the DELETE button. Then click
the APPLY button.

Page 69 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Statistics
The pages of this section display data on the current state of the router:
• network statistics
• IP addresses leased by the DHCP server
• the routing rules and routing tables
• data on devices connected to the router's network and its web-based interface, and
information on current sessions of these devices
• statistics for traffic passing through ports of the router
• addresses of active multicast groups.

Network Statistics
On the Statistics / Network Statistics page, you can view statistics for all connections existing
in the system (WAN connections, LAN, WLAN). For each connection the following data are
displayed: name and state (when the connection is on, its name is highlighted in green, when the
connection is off, its name is highlighted in red), IP address and subnet mask, and volume of data
received and transmitted (with increase of the volume the units of measurement are changed
automatically: byte, Kbyte, Mbyte, Gbyte).

Figure 57. The Statistics / Network Statistics page.

To view detailed data on a connection, click the line corresponding to this connection.

Page 70 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

DHCP
The Statistics / DHCP page displays the information on computers that have been identified by
hostnames and MAC addresses and have got IP addresses from the DHCP server of the device, as
well as the IP address expiration periods (the lease time).

Figure 58. The Statistics / DHCP page.

Page 71 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Routing
The Statistics / Routing page displays the routing rules and routing tables.

Figure 59. The Statistics / Routing page.

The Rules section displays routing rules, their corresponding routing tables, incoming and
outgoing interfaces, priority levels, and other data.
The Tables section displays the list of routing tables stored in the device's memory. To view
detailed information on routes, left-click the relevant line in the table.

Page 72 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 60. The routing table page.

The opened page displays the information on routes in the selected routing table. The table contains
destination IP addresses, gateways, subnet masks, and other data.

Page 73 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Clients and Session

On the Statistics / Clients and Session page, you can view the list of devices connected to the
local network of the router and information on current sessions of each device.

Figure 61. The Statistics / Clients and Session page.

For each device the following data are displayed: the IP address, the MAC address, and the network
interface to which the device is connected.
To view the information on current sessions of a device, select this device in the table. On the
opened page, the following data for each session of the selected device will be displayed: the
protocol for network packet transmission, the source IP address and port, and the destination IP
address and port.

Page 74 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Port Statistics
On the Statistics / Port Statistics page, you can view statistics for traffic passing through ports
of the router. The information shown on the page can be used for diagnosing connection problems.

Figure 62. The Statistics / Port Statistics page.

To view the full list of counters for a port, click the line corresponding to this port.

Page 75 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Multicast Groups
The Statistics / Multicast Groups page displays addresses of active multicast groups (including
IPTV channels and groups for transferring service information) to which the device is subscribed,
and the interface through which the device is subscribed.

Figure 63. The Statistics / Multicast Groups page.

Page 76 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Connections Setup
In this menu you can configure basic parameters of the router's local area network and configure
connection to the Internet (a WAN connection).

WAN
On the Connections Setup / WAN page, you can create and edit connections used by the router.
By default, a Dynamic IPv4 connection is configured in the system. It is assigned to the
INTERNET port of the router.

Figure 64. The Connections Setup / WAN page. The simplified mode.
To edit an existing connection, click the EDIT button. On the opened page, сhange the needed
parameters and click the APPLY button.
To disconnect a connection and establish it again, click the RECONNECT button.
To remove an existing connection and create a new one, click the CHANGE CONFIGURATION
button. Upon that the connection creation page opens.
To create several WAN connections, go to the advanced mode. To do this, click the ADVANCED
MODE button.

! When connections of some types are created, the Connections Setup / WAN page is
automatically displayed in the advanced mode.

Page 77 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 65. The Connections Setup / WAN page. The advanced mode.

To create a new connection, click the ADD button ( ) in the Connections List section. Upon
that the connection creation page opens.
To edit an existing connection, in the Connections List section, left-click the relevant line in the
table. On the opened page, сhange the needed parameters and click the APPLY button.
To disconnect a connection and establish it again, select the checkbox located to the left of the
relevant line in the table and click the RECONNECT button.
To remove a connection, in the Connections List section, select the checkbox located to the left
of the relevant line in the table and click the DELETE button ( ).
To allow multicast traffic (e.g. streaming video) for a connection, click the IGMP / MLD link (for
the description of the page, see the IGMP/MLD section, page 187).
To use one of existing WAN connections as the default IPv4 or IPv6 connection, in the Default
Gateway section, select the choice of the radio button which corresponds to this connection.
To return to the simplified mode, click the SIMPLIFIED MODE button (the button is unavailable if
several WAN connections are created).

Page 78 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Creating Dynamic IPv4 or Static IPv4 WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from
the Connection type drop-down list and specify the needed values.

Figure 66. The page for creating a new Static IPv4 connection. The General Settings section.

Parameter Description

General Settings

A physical or virtual WAN interface to which the new connection

Interface
will be assigned.

Connection name A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Enable connection
Move the switch to the left to disable the connection.

If the switch is moved to the right, the network address translation

NAT function is enabled. Do not disable the function unless your ISP
requires this.

If the switch is moved to the right, the router responds to ping

Ping requests from the external network through this connection. For
security reasons, it is recommended to disable this function.

RIP Move the switch to the right to allow using RIP for this connection.

Page 79 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 67. The page for creating a new Static IPv4 connection. The Ethernet section.

Parameter Description

Ethernet

A MAC address assigned to the interface. This parameter is

mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
To set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
MAC address
as the MAC address of the WAN interface, move the Clone MAC
address of your NIC switch to the right. When the switch is
moved to the right, the field is unavailable for editing.
To set the router's MAC address, click the RESTORE DEFAULT
MAC ADDRESS button (the button is available when the switch is
moved to the right).

MTU The maximum size of units transmitted by the interface.

Page 80 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 68. The page for creating a new Static IPv4 connection. The IPv4 section.

Parameter Description

IPv4

For Static IPv4 type

IP address Enter an IP address for this WAN connection.

Subnet mask Enter a subnet mask for this WAN connection.

Gateway IP address Enter an IP address of the gateway used by this WAN connection.

Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.

For Dynamic IPv4 type

Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.

Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.

Vendor ID The identifier of your ISP. Optional.

Hostname A name of the router specified by your ISP. Optional.

When all needed settings are configured, click the APPLY button.

Page 81 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Creating Dynamic IPv6 or Static IPv6 WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from
the Connection type drop-down list and specify the needed values.

Figure 69. The page for creating a new Static IPv6 connection. The General Settings section.

Parameter Description

General Settings

A physical or virtual WAN interface to which the new connection

Interface
will be assigned.

Connection name A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Enable connection
Move the switch to the left to disable the connection.

If the switch is moved to the right, the router responds to ping

Ping requests from the external network through this connection. For
security reasons, it is recommended to disable this function.

Move the switch to the right to allow using RIPng for this
RIPng
connection.

Page 82 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 70. The page for creating a new Static IPv6 connection. The Ethernet section.

Parameter Description

Ethernet

A MAC address assigned to the interface. This parameter is

mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
To set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
MAC address
as the MAC address of the WAN interface, move the Clone MAC
address of your NIC switch to the right. When the switch is
moved to the right, the field is unavailable for editing.
To set the router's MAC address, click the RESTORE DEFAULT
MAC ADDRESS button (the button is available when the switch is
moved to the right).

MTU The maximum size of units transmitted by the interface.

Page 83 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 71. The page for creating a new Static IPv6 connection. The IPv6 section.

Parameter Description

IPv6

For Static IPv6 type

IPv6 address Enter an IPv6 address for this WAN connection.

Prefix The length of the subnet prefix. The value 64 is used usually.

Gateway IPv6 address Enter an IPv6 address of the gateway used by this WAN connection.

Primary IPv6 DNS

Enter addresses of the primary and secondary IPv6 DNS servers in
server/Secondary IPv6
the relevant fields.
DNS server

For Dynamic IPv6 type

Select a method for IPv6 address assignment from the drop-down

Get IPv6
list or leave the Automatically value.

Move the switch to the right if it is necessary that the router requests
Enable prefix
a prefix to configure IPv6 addresses for the local network from a
delegation
delegating router.

Move the switch to the right to configure automatic assignment of

Obtain DNS server
IPv6 DNS server addresses. Upon that the Primary IPv6 DNS
addresses
server and Secondary IPv6 DNS server fields are not available
automatically
for editing.

Primary IPv6 DNS

Enter addresses of the primary and secondary IPv6 DNS servers in
server/Secondary IPv6
the relevant fields.
DNS server

When all needed settings are configured, click the APPLY button.

Page 84 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Creating PPPoE WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from
the Connection type drop-down list and specify the needed values.

Figure 72. The page for creating a new PPPoE connection. The General Settings section.

Parameter Description

General Settings

A physical or virtual WAN interface to which the new connection

Interface
will be assigned.

Connection name A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Enable connection
Move the switch to the left to disable the connection.

If the switch is moved to the right, the network address translation

NAT function is enabled. Do not disable the function unless your ISP
requires this.

If the switch is moved to the right, the router responds to ping

Ping requests from the external network through this connection. For
security reasons, it is recommended to disable this function.

RIP Move the switch to the right to allow using RIP for this connection.

Page 85 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 73. The page for creating a new PPPoE connection. The Ethernet section.

Parameter Description

Ethernet

A MAC address assigned to the interface. This parameter is

mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
To set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
MAC address
as the MAC address of the WAN interface, move the Clone MAC
address of your NIC switch to the right. When the switch is
moved to the right, the field is unavailable for editing.
To set the router's MAC address, click the RESTORE DEFAULT
MAC ADDRESS button (the button is available when the switch is
moved to the right).

MTU The maximum size of units transmitted by the interface.

Page 86 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 74. The page for creating a new PPPoE connection. The PPP section.

Parameter Description

PPP

Move the switch to the right if you don't need to enter a username
Without authorization
and password to access the Internet.

Username A username (login) to access the Internet.

A password to access the Internet. Click the Show icon ( ) to

Password
display the entered password.

Service name The name of the PPPoE authentication server.

MTU The maximum size of units transmitted by the interface.

Page 87 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Select a method of MPPE encryption.

• No encryption: MPPE encryption is not applied.
• MPPE 40/128 bit: MPPE encryption with a 40-bit or 128-bit
key is applied.
• MPPE 40 bit: MPPE encryption with a 40-bit key is applied.
Encryption protocol
• MPPE 128 bit: MPPE encryption with a 128-bit key is
applied.
MPPE encryption can be applied only if the MS-CHAP or MS-
CHAPV2 value is selected from the Authentication protocol
drop-down list.

Authentication Select a required authentication method from the drop-down list or

protocol leave the AUTO value.

Move the switch to the right if you want the router to keep you
connected to your ISP even when the connection has been inactive
Keep Alive for a specified period of time. If the switch is moved to the right, the
LCP interval and LCP fails fields are available. Specify the
required values.

Move the switch to the right if you want the router to establish
connection to the Internet on demand. In the Maximum idle time
Dial on demand
field, specify a period of inactivity (in seconds) after which the
connection should be terminated.

Advanced options of the pppd daemon which need to be specified

Extra options
for this connection. Optional.

Fill in the field if you want to use a static IP address to access the
Static IP address
Internet.

Move the switch to the right if you want to log all data on PPP
PPP debug
connection debugging.

Page 88 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 75. The page for creating a new PPPoE connection. The IPv4 section.

Parameter Description

Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.

Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.

When all needed settings are configured, click the APPLY button. In the simplified mode, after
clicking the button, the window for creating an additional connection opens.
If your ISP offers access to local services (e.g. audio and video resources), click the CREATE
CONNECTION button. On the page displayed, specify the parameters for the connection of the
Dynamic IPv4 or Static IPv4 type and click the APPLY button.
If you do not need to create an additional connection, click the SKIP button. In this case, the
Connections Setup / WAN page opens.

Page 89 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Creating PPTP, L2TP, or L2TP over IPsec WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from
the Connection type drop-down list and specify the needed values.

Figure 76. The page for creating a new PPTP connection. The General Settings section.

Parameter Description

General Settings

Connection name A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Enable connection
Move the switch to the left to disable the connection.

If the switch is moved to the right, the network address translation

NAT function is enabled. Do not disable the function unless your ISP
requires this.

For the PPTP and L2TP types only.

If the switch is moved to the right, the router responds to ping
Ping
requests from the external network through this connection. For
security reasons, it is recommended to disable this function.

Page 90 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 77. The page for creating a new PPTP connection. The PPP section.

Parameter Description

PPP

Move the switch to the right if you don't need to enter a username
Without authorization
and password to access the Internet.

Username A username (login) to access the Internet.

A password to access the Internet. Click the Show icon ( ) to

Password
display the entered password.

VPN server address The IP or URL address of the PPTP or L2TP authentication server.

MTU The maximum size of units transmitted by the interface.

Page 91 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Select a method of MPPE encryption.

• No encryption: MPPE encryption is not applied.
• MPPE 40/128 bit: MPPE encryption with a 40-bit or 128-
bit key is applied.
• MPPE 40 bit: MPPE encryption with a 40-bit key is applied.
Encryption protocol
• MPPE 128 bit: MPPE encryption with a 128-bit key is
applied.
MPPE encryption can be applied only if the MS-CHAP, MS-
CHAPV2, or AUTO value is selected from the Authentication
protocol drop-down list.

Select a required authentication method from the drop-down list or

Authentication protocol
leave the AUTO value.

Move the switch to the right if you want the router to keep you
connected to your ISP even when the connection has been inactive
Keep Alive for a specified period of time. If the switch is moved to the right, the
LCP interval and LCP fails fields are available. Specify the
required values.

Move the switch to the right if you want the router to establish
connection to the Internet on demand. In the Maximum idle time
Dial on demand
field, specify a period of inactivity (in seconds) after which the
connection should be terminated.

Advanced options of the pppd daemon which need to be specified

Extra options
for this connection. Optional.

Fill in the field if you want to use a static IP address to access the
Static IP address
Internet.

Move the switch to the right if you want to log all data on PPP
PPP debug
connection debugging.

Page 92 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 78. The page for creating a new PPTP connection. The IPv4 section.

Parameter Description

Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.

Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.

Figure 79. The page for creating a new L2TP over IPsec connection. The IPsec section.

! Setting for both parties which establish the tunnel should be the same.

Page 93 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

IPsec (for the L2TP over IPsec type)

A key for mutual authentication of the parties. Click the Show icon
Pre-shared key
( ) to display the entered key.

Move the switch to the right to enable the PFS option (Perfect
Forward Secrecy). If the switch is moved to the right, a new
Enable PFS encryption key exchange will be used upon establishing the IPsec
tunnel. This option enhances the security level of data transfer, but
increases the load on DIR-878.

Move the switch to the right to change the port used for data
Specify connection
exchange with the other party enter the needed value in the Port
port
filed displayed. By default, the value 1701 is specified.

When all needed settings are configured, click the APPLY button.
After clicking the button, the window for additional configuration of the connection opens.
If you want to use this WAN connection to access the Internet, select the to the Internet choice of
the radio button. Then select the existing connection which will be used to access the PPTP/L2TP
server or click the CREATE CONNECTION button.
If you have already configured the connection to the Internet and you want to use this WAN
connection only to connect to the virtual private network, select the to the virtual private
network choice of the radio button.
Click the CONTINUE button.
After creating a connection of the L2TP over IPsec type, on the VPN / IPsec page, in the Status
section, the current state of the IPsec tunnel is displayed.

Page 94 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Creating PPPoE IPv6 or PPPoE Dual Stack WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from
the Connection type drop-down list and specify the needed values.

Figure 80. The page for creating a new PPPoE IPv6 connection. The General Settings section.

Parameter Description

General Settings

A physical or virtual WAN interface to which the new connection

Interface
will be assigned.

Connection name A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Enable connection
Move the switch to the left to disable the connection.

For the PPPoE Dual Stack type only.

If the switch is moved to the right, the network address translation
NAT
function is enabled. Do not disable the function unless your ISP
requires this.

If the switch is moved to the right, the router responds to ping

Ping requests from the external network through this connection. For
security reasons, it is recommended to disable this function.

For the PPPoE Dual Stack type only.

RIP
Move the switch to the right to allow using RIP for this connection.

Move the switch to the right to allow using RIPng for this
RIPng
connection.

Page 95 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 81. The page for creating a new PPPoE IPv6 connection. The Ethernet section.

Parameter Description

Ethernet

A MAC address assigned to the interface. This parameter is

mandatory if your ISP uses MAC address binding. In the field, enter
the MAC address registered by your ISP upon concluding the
agreement.
To set the MAC address of the network interface card (of the
computer that is being used to configure the router at the moment)
MAC address
as the MAC address of the WAN interface, move the Clone MAC
address of your NIC switch to the right. When the switch is
moved to the right, the field is unavailable for editing.
To set the router's MAC address, click the RESTORE DEFAULT
MAC ADDRESS button (the button is available when the switch is
moved to the right).

MTU The maximum size of units transmitted by the interface.

Page 96 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 82. The page for creating a new PPPoE IPv6 connection. The PPP section.

Parameter Description

PPP

Move the switch to the right if you don't need to enter a username
Without authorization
and password to access the Internet.

Username A username (login) to access the Internet.

A password to access the Internet. Click the Show icon ( ) to

Password
display the entered password.

Service name The name of the PPPoE authentication server.

MTU The maximum size of units transmitted by the interface.

Page 97 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Select a method of MPPE encryption.

• No encryption: MPPE encryption is not applied.
• MPPE 40/128 bit: MPPE encryption with a 40-bit or 128-bit
key is applied.
• MPPE 40 bit: MPPE encryption with a 40-bit key is applied.
Encryption protocol
• MPPE 128 bit: MPPE encryption with a 128-bit key is
applied.
MPPE encryption can be applied only if the MS-CHAP or MS-
CHAPV2 value is selected from the Authentication protocol
drop-down list.

Authentication Select a required authentication method from the drop-down list or

protocol leave the AUTO value.

Move the switch to the right if you want the router to keep you
connected to your ISP even when the connection has been inactive
Keep Alive for a specified period of time. If the switch is moved to the right, the
LCP interval and LCP fails fields are available. Specify the
required values.

Move the switch to the right if you want the router to establish
connection to the Internet on demand. In the Maximum idle time
Dial on demand
field, specify a period of inactivity (in seconds) after which the
connection should be terminated.

Advanced options of the pppd daemon which need to be specified

Extra options
for this connection. Optional.

Fill in the field if you want to use a static IP address to access the
Static IP address
Internet.

Move the switch to the right if you want to log all data on PPP
PPP debug
connection debugging.

Page 98 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 83. The page for creating a new PPPoE Dual Stack connection. The IPv4 section.

Parameter Description

IPv4 (for the PPPoE Dual Stack type)

Obtain DNS server Move the switch to the right to configure automatic assignment of
addresses DNS server addresses. Upon that the Primary DNS and
automatically Secondary DNS fields are not available for editing.

Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.

Figure 84. The page for creating a new PPPoE Pv6 connection. The IPv6 section.

Parameter Description

IPv6

Select a method for IPv6 address assignment from the drop-down

Get IPv6
list or leave the Automatically value.

Move the switch to the right if it is necessary that the router requests
Enable prefix
a prefix to configure IPv6 addresses for the local network from a
delegation
delegating router.

Page 99 of 247
DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Move the switch to the right to configure automatic assignment of

Obtain DNS server
IPv6 DNS server addresses. Upon that the Primary IPv6 DNS
addresses
server and Secondary IPv6 DNS server fields are not available
automatically
for editing.

Primary IPv6 DNS

Enter addresses of the primary and secondary IPv6 DNS servers in
server/Secondary IPv6
the relevant fields.
DNS server

When all needed settings are configured, click the APPLY button.

Page 100 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

LAN
To configure the router's local interface, go to the Connections Setup / LAN page.

IPv4
Go to the IPv4 tab to change the IPv4 address of the router, configure the built-in DHCP server,
specify MAC address and IPv4 address pairs, or add own DNS records.

Figure 85. Configuring the local interface. The IPv4 tab. The Local IP Address section.

Parameter Description

Local IP Address

Available if the Access point or Repeater mode was selected in

the Initial Configuration Wizard.
Select the needed value from the drop-down list.
Mode of local IP • Static: The IPv4 address, subnet mask, and the gateway IP
address assignment address are assigned manually.
• Dynamic: The router automatically obtains these
parameters from the LAN DHCP server or from the router to
which it connects.

The IPv4 address of the router in the local subnet. By default, the
IP address
following value is specified: 192.168.0.1.

The mask of the local subnet. By default, the following value is

Mask
specified: 255.255.255.0.

Page 101 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Available if the Access point or Repeater mode was selected in

the Initial Configuration Wizard.
Gateway IP address The gateway IPv4 address which is used by the router to connect to
the Internet (e.g., for synchronizing the system time with an NTP
server). Optional.

The name of the device assigned to its IPv4 address in the local
Hostname
subnet.

Figure 86. Configuring the local interface. The IPv4 tab. The Dynamic IP Addresses section.

Parameter Description

Dynamic IP Addresses

An operating mode of the router's DHCP server.

• Disable: The router's DHCP server is disabled, clients' IP
addresses are assigned manually.
• Server: The router assigns IP addresses to clients
automatically in accordance with the specified parameters.
When this value is selected, the Start IP, End IP, Lease
time fields and the DNS relay switch are displayed on the
Mode of dynamic IP tab. Also when this value is selected, the DHCP Options,
address assignment Static IP Addresses, and Hosts sections are displayed on
the tab.
• Relay: An external DHCP server is used to assign IP
addresses to clients. When this value is selected, the
External DHCP server IP, Option 82 Circuit ID,
Option 82 Remote ID, and Option 82 Subscriber ID
fields are displayed on the tab. Available if the Router or
WISP Repeater mode was selected in the Setup Wizard.

Page 102 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

The start IP address of the address range used by the DHCP server to
Start IP
distribute IP addresses to clients.

The end IP address of the address range used by the DHCP server to
End IP
distribute IP addresses to clients.

The lifetime of IP addresses leased by the DHCP server. At the end

of this period the leased IP address is revoked and can be distributed
Lease time
to another device, unless the previous device has confirmed the need
to keep the address.

Move the switch to the right so that the devices connected to the
router obtain the address of the router as the DNS server address.
DNS relay Move the switch to the left so that the devices connected to the
router obtain the address transmitted by the ISP or specified on the
Advanced / DNS page as the DNS server address.

The IP address of the external DHCP server which assigns IP

External DHCP server IP
addresses to the router's clients.

Available if the Router or WISP Repeater mode was selected in

Option 82 Circuit ID the Initial Configuration Wizard.
Option 82 Remote ID The value of the relevant field of DHCP option 82. Do not fill in the
Option 82 Subscriber ID fields unless your ISP or the administrator of the external DHCP
server provided these values.
When all needed settings are configured, click the APPLY button.

Page 103 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the DHCP Options section, you can change default values for some options of DHCP protocol
(IP address, subnet mask, DNS servers) or specify additional parameters which the built-in DHCP
server should send to clients to configure the local network.

Figure 87. Configuring the local interface. The IPv4 tab. The section for configuring DHCP options.

To do this, click the ADD button ( ).

Figure 88. Configuring the local interface. The IPv4 tab. The window for configuring a DHCP option.
In the opened window, you can specify the following parameters:

Parameter Description

From the drop-down list, select an option which you want to

Known DHCP options
configure.

Options value Specify the value for the selected option.

Move the switch to the right to let the DHCP server send the
selected option regardless of the client's request.
Force
Move the switch to the left to let the DHCP server send the selected
option only when the client requests it.
After specifying the needed parameters, click the APPLY button.
To edit the parameters of an option, left-click the relevant line in the table. In the opened window,
change the needed parameters and click the APPLY button.
To remove the value of an option, select the checkbox located to the left of the relevant line in the
table and click the DELETE button ( ). Then click the APPLY button.
In the Static IP Addresses section, you can specify MAC address and IPv4 address pairs (set a
fixed IPv4 address in the local area network for a device with a certain MAC address). The router
assigns IPv4 addresses in accordance with the specified pairs only when the DHCP server is
enabled (in the Dynamic IP Addresses section, the Server value is selected from the Mode of
dynamic IP address assignment drop-down list).

Page 104 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 89. Configuring the local interface. The IPv4 tab. The section for creating MAC-IPv4 pairs.

To create a MAC-IPv4 pair, click the ADD button ( ). In the opened window, fill in the MAC
address field. You can choose a device connected to the router's LAN at the moment. To do this,
select the relevant MAC address from the drop-down list (the field will be filled in automatically).
Then in the IP address field, enter an IPv4 address which will be assigned to the device with the
specified MAC address. In the Hostname field, specify a network name of the device for easier
identification (optional). If needed, in the Lease time field, specify a period of time for which the
router’s DHCP server provides the IPv4 address to the client. Click the APPLY button.
To create MAC-IPv4 pairs for the devices connected to the router at the moment, click the
KNOWN CLIENTS button. In the opened window, select the needed device and click the OK
button. To view the latest list of the connected devices, click the REFRESH button.
To edit the settings for an existing MAC-IPv4 pair, left-click the relevant line in the table. In the
opened window, change the needed parameters and click the APPLY button.
To remove a MAC-IPv4 pair, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ). Then click the APPLY button. Also you can remove a pair in
the editing window.
If needed, you can add your own address resource records. To do this, click the ADD button ( )
in the Hosts section (available if the Router or WISP Repeater mode was selected in the Setup
Wizard).

Figure 90. Configuring the local interface. The IPv4 tab. The window for adding a DNS record.
In the IP address field, specify a host from the internal or external network. You can choose a
device connected to the router's LAN at the moment. To do this, select the relevant IPv4 address
from the drop-down list (the field will be filled in automatically). In the Name field, specify the
domain name to which the specified IPv4 address will correspond. Click the SAVE button.
To edit an existing record, in the Hosts section, select the relevant line in the table. In the opened
window, change the needed parameters and click the SAVE button.
To remove a record, in the Hosts section, select the checkbox located to the left of the relevant line
in the table and click the DELETE button ( ).
After completing the work with records, click the APPLY button.

Page 105 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

IPv6
Go to the IPv6 tab to change or add the IPv6 address of the router, configure IPv6 addresses
assignment settings, specify MAC address and IPv6 address pairs, or add own DNS records.

Figure 91. Configuring the local interface. The IPv6 tab. The Local IPv6 Address section.

To add an IPv6 address of the router, click the ADD button ( ). To change the IPv6 address of
the router, select it in the table.

Figure 92. Configuring the local interface. The IPv6 tab. The window for adding an IPv6 address.
In the opened window, you can specify the following parameters:

Parameter Description

Local IPv6 Address

IPv6 address The IPv6 address of the router in the local subnet.

Prefix The length of the prefix subnet.

Available if the Access point or Repeater mode was selected in

the Setup Wizard.
Gateway IPv6 address The gateway IPv6 address which is used by the router to connect to
the Internet (e.g., for synchronizing the system time with an NTP
server). Optional.
Click the APPLY button.
To remove the IPv6 address, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ). Then click the APPLY button. Also you can remove the IPv6
address in the editing window.

Page 106 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the Dynamic IPv6 Addresses section, you can configure IPv6 addresses assignment settings.

Figure 93. Configuring the local interface. The IPv6 tab. The Dynamic IPv6 Addresses section.

Parameter Description

Dynamic IPv6 Addresses

Select the needed value from the drop-down list.

• Disable: Clients' IPv6 addresses are assigned manually.
• Stateful: The built-in DHCPv6 server of the router allocates
Mode of dynamic IPv6 addresses from the range specified in the Address range
address assignment fields. Also when this value is selected, the Static IP
Addresses and Hosts sections are displayed on the tab.
• Stateless: Clients themselves configure IPv6 addresses
using the prefix.

The start and the end values for the latest hextet (16 bit) of the range
Address range
of IPv6 addresses which the DHCPv6 server distributes to clients.

Lease time The lifetime of IPv6 addresses provided to clients.

Move the switch to the right to let the clients, that received IPv6
The default route for
addresses or configured them using the prefix, use the router as the
LAN clients
default IPv6 route.
When all needed settings are configured, click the APPLY button.

Page 107 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the Static IP Addresses section, you can specify MAC address and IPv6 address pairs (set a
fixed IPv6 address in the local area network for a device with a certain MAC address). The router
assigns IPv6 addresses in accordance with the specified pairs only when the Stateful value is
selected from the Mode of dynamic IPv6 address assignment drop-down list in the
Dynamic IPv6 Addresses section.

Figure 94. Configuring the local interface. The IPv6 tab. The section for creating MAC-IPv6 pairs.

To create a MAC-IPv6 pair, click the ADD button ( ). In the opened window, fill in the MAC
address field. You can choose a device connected to the router's LAN at the moment. To do this,
select the relevant MAC address from the drop-down list (the field will be filled in automatically).
Then in the IP address field, enter an IPv6 address which will be assigned to the device with the
specified MAC address. In the Hostname field, specify a network name of the device for easier
identification (optional). If needed, in the Lease time field, specify a period of time for which the
router’s DHCPv6 server provides the IPv6 address to the client. Click the APPLY button.
To create MAC-IPv6 pairs for the devices connected to the router at the moment, click the
KNOWN CLIENTS button. In the opened window, select the needed device and click the OK
button. To view the latest list of the connected devices, click the REFRESH button.
To edit the settings for an existing MAC-IPv6 pair, left-click the relevant line in the table. In the
opened window, change the needed parameters and click the APPLY button.
To remove a MAC-IPv6 pair, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ). Then click the APPLY button. Also you can remove a pair in
the editing window.
If needed, you can add your own address resource records. To do this, click the ADD button ( )
in the Hosts section (available if the Router or WISP Repeater mode was selected in the Setup
Wizard).

Figure 95. Configuring the local interface. The IPv6 tab. The window for adding a DNS record.
In the IP address field, specify a host from the internal or external network. You can choose a
device connected to the router's LAN at the moment. To do this, select the relevant IPv6 address
from the drop-down list (the field will be filled in automatically). In the Name field, specify the
domain name to which the specified IPv6 address will correspond. Click the SAVE button.

Page 108 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To edit an existing record, in the Hosts section, select the relevant line in the table. In the opened
window, change the needed parameters and click the SAVE button.
To remove a record, in the Hosts section, select the checkbox located to the left of the relevant line
in the table and click the DELETE button ( ).
After completing the work with records, click the APPLY button.

Page 109 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

WAN Reservation
On the Connections Setup / WAN Reservation page, you can enable the WAN backup
function, which provides you with uninterrupted access to the Internet. When your main connection
breaks down, the router activates the backup connection; and when the main channel is recovered,
the router switches to it and disconnects the reserve one.

Figure 96. The Settings / WAN Reservation page.

To activate the backup function, create several WAN connections. After that go to the
Connections Setup / WAN Reservation page, move the Enable switch to the right, and
specify the needed values in the fields displayed on the page.

Page 110 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Connections IPv4

Sort the existing IPv4 connections in order of priority. The first

connection on the list serves as the main connection, the others are
backup connections.
Connection In order to move a connection in the table, select the checkbox in the
line of the connection and use the Up ( ) and Down ( )
buttons.

Move the switch to the right to let the router use ICMP ping
mechanism for checking the connection.
Status of checking
Move the switch to the left to let the router check only the status of
the connection (may be useful for unstable connections).

Checking availability of hosts

A time period (in seconds) between regular checks of the hosts’

availability. By default, the value 30 is specified. The value of this
field should not be higher than product of Timeout check and
Check interval Number of checks fields values.
Several ping requests are sent to check the hosts. After a successful
attempt the router keeps using the main connection. After several
failed attempts the next connection from the list is enabled.

A time period (in seconds) allocated for a respond to one ping

Timeout check
request.

A number of failed attempts to check the health of a connection after

Number of checks
which the next connection from the list is enabled.

IP addresses that the router will check for availability via ICMP ping
mechanism.
Click the ADD HOST button, and in the line displayed, enter an IP
Test hosts
address or leave values suggested by the router.
To remove an IP address from the list, click the Delete icon ( ) in
the line of the address.
When all needed settings are configured, click the APPLY button.

Page 111 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

VPN
In this menu you can configure VPN connections based on IPsec/GRE/EoGRE protocols and create
a PPTP or L2TP server and accounts for access to it.

IPsec
On the VPN / IPsec page, you can configure VPN tunnels based on IPsec protocol.
IPsec is a protocol suite for securing IP communications.

Figure 97. The VPN / IPsec page.

To allow IPsec tunnels, move the Enable switch to the right. Upon that the Tunnels and Status
sections and the Logging level drop-down list are displayed on the page.
In the Status section, the current state of an existing tunnel is displayed.
From the Logging level drop-down list, select a detail level of messages recorded to the system
log or leave the value specified by default. The Basic value is recommended to establish an IPsec
tunnel faster. To view the log, go to the System / Log page (see the Log section, page 222).

Page 112 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To create a new tunnel, click the ADD button ( ) in the Tunnels section.

! Setting for both devices which establish the tunnel should be the same.

Figure 98. The page for adding an IPsec tunnel. The General Settings section.
You can specify the following parameters:

Parameter Description

Move the switch to the right to enable the tunnel.

Enable
Move the switch to the left to disable the tunnel.

General Settings

IP version An IP version.

Move the switch to the right to allow a remote host with any public IP
address to connect to the router via IPsec protocol. Such a setting can
Dynamic IPsec
be specified for one IPsec tunnel only. Connection requests via this
tunnel can be sent by a remote host only.

Page 113 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Select an identification method for the remote host (router) from the
drop-down list:
• Address: The remote host is identified by its IP address.
Type
• FQDN: The remote host is identified by its domain name.
The drop-down list is displayed if the Dynamic IPsec switch is
moved to the left.

Enter the remote subnet VPN gateway IP address if the Address

value is selected from the Type drop-down list.
Enter the remote subnet VPN gateway domain name if the FQDN
Remote host
value is selected from the Type drop-down list.
The field is available for editing if the Dynamic IPsec switch is
moved to the left.

Identifier value Specify a unique name of the tunnel.

A PSK key for mutual authentication of the parties. Click the Show
Pre-shared key
icon ( ) to display the entered key.

A WAN connection through which the tunnel will pass. Select a value
from the drop-down list.
• Interface: When this value is selected, the Interface drop-
Local WAN down list is displayed. Select an existing WAN connection
from the list.
• Default gateway: When this value is selected, the router uses
the default WAN connection.

The NAT Traversal function allows VPN traffic to pass through the
NAT-enabled device. DIR-878 allows to forcibly encapsulate VPN
traffic in UDP packets for passing through a remote device regardless
of whether it supports address translation.
NAT Traversal
If you need to enable forced encapsulation of VPN traffic, select the
Enabled value.
If you need to disable forced encapsulation of VPN traffic, select the
Disabled value.

Page 114 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

An operation mode of the IPsec tunnel. Select a value from the drop-
down list.
• TUNNEL: As a rule, it is used to create a secure connection to
remote networks. In this mode, the source IP packet is fully
encrypted and added to a new IP packet and data transfer is
Type
based on the header of the new IP packet.
• TRANSPORT: As a rule, it is used to encrypt data stream
within one network. In this mode, only the content of the
source IP packet is encrypted, its header remains unchanged
and data transfer is based on the source header.

Move the switch to the right to enable using DPD protocol for this
tunnel. Such a setting allows to check the status of the remote host: if
encrypted packets exchange between the router and the remote host
Enable DPD
breaks down, the router starts sending DPD messages to the remote
host. If the switch is moved to to the left, the DPD delay and DPD
timeout fields are not available for editing.

A time period (in seconds) between DPD messages. By default, the

DPD delay
value 30 is specified.

A waiting period for the response to a DPD message (in seconds). If

the host does not answer in the specified time, the router breaks down
DPD timeout
the tunnel connection, updates information on it, and tries to
reestablish the connection. By default, the value 120 is specified.

Maximum Segment Size of a TCP packet. This parameter influences

the size of a TCP packet which will be sent from the remote host to the
router.
If the Manual value is selected, you can specify the value of this
TCP MSS parameter for each subnet of the tunnel in the MTU field. The field is
displayed in the window for adding a subnet in the Tunneled
Networks section.
If the Path MTU discovery value is selected, the parameter will be
configured automatically for all created subnets.

Page 115 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 99. The page for adding an IPsec tunnel. The First Phase / The Second Phase sections.

Parameter Description

The First Phase

Encryption mode Select an encryption mode from the drop-down list.

First phase
Select an available encryption algorithm from the drop-down list.
encryption algorithm

Hashing mode Select a hashing mode from the drop-down list.

Size of hash The length of the hash in bits.

Hashing algorithm Select a hashing algorithm from the drop-down list.

First phase DHgroup A Diffie-Hellman key group for Phase 1. Select a value from the drop-
type down list.

The lifetime of IKE-SA keys in seconds. After the specified period it is

required to renegotiate the keys. The value specified in this field
IKE-SA lifetime
should be greater than the value specified in the IPsec-SA lifetime
field.

IKE (Internet Key Exchange) is a protocol of keys exchange between

IKE version two hosts of VPN connections. Select a version of the protocol from
the drop-down list.

Page 116 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

The Second Phase

Encryption mode Select an encryption mode from the drop-down list.

Second phase
Select an available encryption algorithm from the drop-down list.
encryption algorithm

Hashing mode Select a hashing mode from the drop-down list.

Size of hash The length of the hash in bits.

Hashing algorithm Select a hashing algorithm from the drop-down list.

Move the switch to the right to enable the PFS option (Perfect
Forward Secrecy). If the switch is moved to the right, a new
Enable PFS encryption key exchange will be used for Phase 2. This option
enhances the security level of data transfer, but increases the load on
DIR-878.

A Diffie-Hellman key group for Phase 2. Select a value from the drop-
Second phase
down list. The drop-down list is available if the Enable PFS switch
DHgroup type
is moved to the right.

The lifetime of Phase 2 keys in seconds. After the specified period it is

IPsec-SA lifetime required to renegotiate the keys. The value specified in this field
should be greater than zero.

To specify IP addresses of local and remote subnets for this tunnel, click the ADD button ( ) in
the Tunneled Networks section.
If the IPsec tunnel operates over IKEv1 (1 is selected from the IKE version list in the The First
Phase section), you can create only one subnet.
If the IPsec tunnel operates over IKEv2 (2 is selected from the IKE version list in the The First
Phase section), you can create several subnets.

Page 117 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 100. The page for adding an IPsec tunnel. The window for adding a tunneled network.

In the opened window, you can specify the following parameters:

Parameter Description

Local network A local subnet IP address and mask.

Remote subnet A remote subnet IP address and mask.

The maximum size (in bytes) of a non-fragmented packet. The field is

MTU displayed when the Manual value is selected from the TCP MSS
drop-down list in the General Settings section.

To edit fields in the Tunneled Networks section, select the relevant line in the table. In the
opened window, change the needed parameters and click the SAVE button.
To remove a subnet, select the checkbox located to the left of the relevant line in the table and click
the DELETE button ( ). Also you can remove a subnet in the editing window.
After configuring all needed settings for the IPsec tunnel, click the APPLY button.
To edit the parameters of an existing tunnel, in the Tunnels section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the APPLY button.
To disconnect an existing tunnel and establish it again, select the checkbox located to the left of the
relevant line in the table and click the RECONNECT button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ). Also you can remove a tunnel on the editing page.
To disable VPN tunnels based on IPsec protocol, move the Enable switch to the left.

Page 118 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

GRE
On the VPN / GRE page, you can configure VPN tunnels based on GRE protocol.
GRE (Generic Routing Encapsulation) is a protocol for tunneling network packets, which enables
you to create unprotected VPN tunnels.

Figure 101. The VPN / GRE page.

To create a new tunnel, click the ADD button ( ).

Figure 102. The page for adding a GRE tunnel.

Page 119 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

You can specify the following parameters:

Parameter Description

Move the switch to the right to enable the GRE tunnel.

Enable
Move the switch to the left to disable the GRE tunnel.

Tunnel settings

A name of the tunnel for easier identification. You can specify any
Name
name.

IP address The IP address of the GRE tunnel interface.

Mask The mask of the subnet.

From the drop-down list, select a WAN connection through which

Interface the tunnel will pass. Select the Default gateway value to use the
default WAN connection.

Remote IP Enter the public IP address of the remote subnet VPN gateway.

The maximum size of units transmitted from the remote host to the
MTU
router.

Allow traffic GRE → Move the switch to the right to allow GRE tunnel users access
LAN devices in the remote local subnet.

Static route settings

Remote LAN IP address The IP address of the remote local subnet.

Remote LAN mask The mask of the remote local subnet.

Remote GRE interface

The IP address of the GRE tunnel interface in the remote subnet.
IP address
After configuring all needed settings, click the APPLY button.
To edit the parameters of an existing tunnel, in the Tunnels section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the APPLY button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ).

Page 120 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

PPTP/L2TP servers
On the VPN / PPTP/L2TP servers page, you can enable the PPTP or L2TP VPN server. To
configure the PPTP or L2TP server, go to the relevant tab.
PPTP and L2TP help to establish a secure connection creating a tunnel in the standard insecure
network.

! Before creating the PPTP or L2TP server, it is required to create user accounts (see the
VPN Users section, page 126).

Figure 103. The VPN / PPTP/L2TP servers page.

To enable the server, move the Enable switch to the right.

Page 121 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

You can specify the following parameters:

Parameter Description

VPN network

Server local IP address The IP address of the VPN server.

Start client IP The start IP address of the address range for VPN server’s clients.

End client IP The end IP address of the address range for VPN server’s clients.

Select a WAN connection through which this VPN server will be

Interface available. If the Default gateway value is selected, the router uses
the default WAN connection.

Access policies and NAT

Select a value from the drop-down list.

• Allow: VPN server’s clients can access the router’s local
network; clients from the router’s local network can access
VPN ↔ LAN the VPN server’s network.
• Deny: VPN server’s clients cannot access the router’s local
network; clients from the router’s local network cannot
access the VPN server’s network.

Select a value from the drop-down list.

• Allow: VPN server’s clients can access the external network;
clients from the external network can access the VPN
VPN ↔ WAN server’s network.
• Deny: VPN server’s clients cannot access the external
network; clients from the external network cannot access the
VPN server’s network.

Select a value from the drop-down list.

VPN → Router • Allow: VPN server’s clients can access the router.
• Deny: VPN server’s clients cannot access the router.

If the switch is moved to the right, the network address translation

NAT VPN → WAN function between the VPN server’s interface and the external
network interface is enabled.

If the switch is moved to the right, the network address translation

NAT VPN → LAN function between the VPN server’s interface and the local network
interface is enabled.

Authentication

Page 122 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Move the switch to the right to enable authentication. Upon that the
Enable authentication Multiple sessions, CHAP, MSCHAP, MSCHAPv2, and PAP
lists are displayed on the page.

The mode of connection for the users listed in the Users List
section. Select a value from the drop-down list.
• Allow: Several users with the same user account are allowed
to connect.
Multiple sessions
• Only new connections: If there are several users with the
same user account, only new users are allowed to connect.
• Only old connections: If there are several users with the
same user account, new users are not allowed to connect.

Challenge Handshake Authentication Protocol.

Microsoft Challenge Handshake Authentication Protocol.
Password Authentication Protocol.
CHAP
Select the needed action from the drop-down list for the relevant
MSCHAP
protocol.
MSCHAPv2
• Auto: Enable automatic client authentication over this
PAP
protocol.
• Refuse: Disable client authentication over this protocol.
• Require: Require client authentication over this protocol.

MPPE

Move the switch to the right to enable MPPE encryption.

Enable MPPE MPPE encryption can be applied only if the Require value is
selected from the MSCHAP or MSCHAPv2 drop-down list.

MPPE encryption with a 40-bit or 128-bit key is applied. Select the

needed action from the drop-down list.
• Auto: Allow clients to connect to the VPN server
MPPE40 automatically with MPPE encryption.
MPPE128 • Refuse: Restrict clients from connecting to the VPN server
with MPPE encryption.
• Require: Allow clients to connect to the VPN server only
with MPPE encryption.

Advanced settings

Available on the PPTP tab.

Maximum number of
The maximum number of devices allowed to connect to the PPTP
connections
server.

Page 123 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Available on the L2TP tab.

Port
The port of L2TP server. By default, the value 1701 is specified.

MTU The maximum size of units transmitted by the interface.

Move the switch to the right if you want to log all data on this VPN
Enable debug mode
server debugging.

DNS

Move the switch to the right to let VPN server’s clients obtain DNS
Obtain DNS server
server addresses of the WAN connection which is selected from the
addresses
Interface list. Upon that the Primary DNS and Secondary DNS
automatically
fields are not available for editing.

Primary DNS/ Enter addresses of the primary and secondary DNS servers in the
Secondary DNS relevant fields.
After specifying the needed parameters, click the APPLY button.
If you want to specify the list of accounts to provide access to this server, click the ADD ( )
button in the Users List section.

Figure 104. A window for adding a user.

Page 124 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the opened window, you can specify the following parameters:

Parameter Description

User Select a user account to allow access.

The mode of IP address assignment. Select a value from the drop-

down list.
• Auto: The IP address is assigned to the user automatically.
Set IP address
• Single IP: The IP address is assigned to the user manually.
When this value is selected, the IP address field is
displayed.

Specify an IP address from the range specified in the Start client

IP address
IP and End client IP fields.
Click the SAVE button.
To edit an existing user, in the Users List section, select the relevant line in the table. In the
opened window, change the needed parameters and click the SAVE button.
To remove a user, in the Users List section, select the checkbox located to the left of the relevant
line in the table and click the DELETE button ( ).
To disable the server, move the Enable switch to the left and click the APPLY button.

Page 125 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

VPN Users
On the VPN / VPN Users page, you can create user accounts to provide authorized access to a
PPTP or L2TP server.

Figure 105. The VPN / VPN Users page.

To create a new user account, click the ADD button ( ).

Figure 106. The window for adding a user.

In the opened window, in the Username field, specify a username, and in the Password field –
the password for the account. Use digits, Latin letters (uppercase and/or lowercase), and other
characters available in the US keyboard layout. 6 Click the Show icon ( ) to display the entered
key.
Click the SAVE button.
To view passwords of all user accounts, move the Show password switch to the right.
To edit the parameters of an account, select the relevant line in the table. In the opened window,
enter a new value in the relevant field, and then click the SAVE button.
To remove an account, select the checkbox located to the left of the relevant line in the table and
click the DELETE button ( ).

6 0-9, A-Z, a-z, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 126 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

EoGRE
On the VPN / EoGRE page, you can configure VPN tunnels based on EoGRE technology.
EoGRE (Ethernet over GRE) technology allows transferring traffic through VPN tunnels in
heterogeneous networks, encapsulating Ethernet frames with the help of GRE protocol and
transferring them over a network which uses a network protocol of another level.

Figure 107. The VPN / EoGRE page.

To create a new tunnel, click the ADD button ( ).

Figure 108. The page for adding an EoGRE tunnel.

You can specify the following parameters:

Parameter Description

Move the switch to the right to enable the EoGRE tunnel.

Enable
Move the switch to the left to disable the EoGRE tunnel.

A name of the tunnel for easier identification. You can specify any
Name
name.

Remote IP address The IP address of the remote local subnet.

Page 127 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Move the switch to the right to assign a tag (VLAN ID) to EoGRE

Tagged
traffic and specify the needed value in the Tag ID field displayed.

From the drop-down list, select a WAN connection through which

Interface the tunnel will pass. Select the Default gateway value to use the
default WAN connection.

MTU The maximum size of units transmitted by the interface.

After configuring all needed settings, click the APPLY button.

To edit the parameters of an existing tunnel, in the Tunnels section, select the relevant tunnel in the
table. On the opened page, change the needed parameters and click the APPLY button.
To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ).
VPN tunnels using EoGRE technology will appear in the EoGRE interfaces section on the
Advanced / VLAN page and will be automatically removed from this section after the tunnel is
deleted from the current page.

Page 128 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Wi-Fi
In this menu you can specify all needed settings for your wireless network.

Basic Settings
In the Wi-Fi / Basic Settings section, you can change basic parameters for the wireless interface
of the router and configure the basic and additional wireless networks. To configure the 2.4GHz
band or 5GHz band, go to the relevant tab.

Figure 109. Basic settings of the wireless LAN in the 2.4GHz band.

Page 129 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the Basic Settings section, the following parameters are available:

Parameter Description

To enable Wi-Fi connection, move the switch to the right.

To disable Wi-Fi connection, move the switch to the left.
To enable/disable Wi-Fi connection on a schedule, click the Set
schedule button ( ). In the opened window, you can create a
new schedule (see the Schedule section, page 218) or use the
existing one. Existing schedules are displayed in the Interval of
execution drop-down list in the simplified mode.
To enable Wi-Fi connection at the time specified in the schedule and
disable it at the other time, select the Enable wireless
Enable Wireless
connection value from the Action drop-down list and click the
SAVE button.
To disable Wi-Fi connection at the time specified in the schedule and
enable it at the other time, select the Disable wireless
connection value from the Action drop-down list and click the
SAVE button.
To change or delete the schedule, click the Edit schedule button
( ). In the opened window, change the parameters and click the
SAVE button or click the DELETE FROM SCHEDULE button.

Country The country you are in. Select a value from the drop-down list.

Operating mode of the wireless network of the router. This

Wireless mode parameter defines standards of the devices that will be able to use
your wireless network. Select a value from the drop-down list.

Select channel Move the switch to the right to let the router itself choose the
automatically channel with the least interference.

If the switch is moved to the left, the device automatically selects

Enable additional one of available standard channels. To use additional channels (the
channels 12th and 13th – in the 2.4 GHz band, the 100th and higher – in the 5
GHz band), move the switch to the right.

The wireless channel number.

To select a channel manually, left-click; in the opened window,
Channel select a channel and click the SAVE button. The action is available,
when the Select channel automatically switch is moved to the
left.

Move the switch to the right to let the router search for a free
Enable periodic
channel in certain periods of time. When the switch is moved to the
scanning
right, the Scanning period field is available for editing.

Page 130 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Specify a period of time (in seconds) after which the router rescans
Scanning period
channels.
When you have configured the parameters, click the APPLY button.
To edit the settings of the basic wireless network, in the Wi-Fi Network section, change the needed
parameters and click the APPLY button.
Also you can create an additional wireless network. To do this, click the ADD WI-FI NETWORK
button. On the opened page, specify the relevant parameters.

Figure 110. Creating a wireless network.

Parameter Description

Wi-Fi Network

A name for the wireless network. The name can consist of digits and
Network name (SSID)
Latin characters.

Page 131 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

If the switch is moved to the right, other users cannot see your Wi-Fi
Hide SSID network. It is recommended not to hide the network in order to
simplify initial configuration of the wireless network.

The unique identifier for this wireless network. You cannot change
the value of this parameter, it is determined in the device's internal
BSSID
settings. The field is displayed in the settings of the existing wireless
network.

The maximum number of devices connected to the wireless network.

Max associated clients When the value 0 is specified, the device does not limit the number
of connected clients.

Move the switch to the right to limit the maximum bandwidth of the
wireless network. In the Shaping field displayed, specify the
Enable shaping
maximum value of speed (Mbit/s).
Move the switch to the left not to limit the maximum bandwidth.

If the wireless network broadcasting is disabled, devices cannot

connect to the wireless network. Upon that DIR-878 can connect to
another access point as a wireless client.
To enable/disable broadcasting on a schedule, click the Set
schedule button ( ). In the opened window, you can create a
new schedule (see the Schedule section, page 218) or use the
existing one. Existing schedules are displayed in the Interval of
execution drop-down list in the simplified mode.
To enable broadcasting at the time specified in the schedule and
disable it at the other time, select the Enable wireless network
broadcasting value from the Action drop-down list and click the
Broadcast wireless SAVE button. When the wireless connection is disabled, the device
network will not be able to enable broadcasting of this wireless network on
schedule.
To disable broadcasting at the time specified in the schedule and
enable it at the other time, select the Disable wireless network
broadcasting value from the Action drop-down list and click the
SAVE button.
To change or delete the schedule, click the Edit schedule button
( ). In the opened window, change the parameters and click the
SAVE button or click the DELETE FROM SCHEDULE button.
If you created an additional network, you can configure, change or
delete a schedule for each network. To do this, click the button in the
line of the network.

Page 132 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Move the switch to the right to forbid wireless clients of this

Clients isolation
wireless network to communicate to each other.

This function is available for the additional network. Move the

switch to the right if you want the devices connected to the
Enable guest network
additional network to be isolated from the devices and resources of
the router's LAN.
In the Security Settings section, you can change security settings of the wireless network.
By default, the WPA2-PSK network authentication type of both bands of the wireless network is
specified. WPS PIN from the barcode label is used as the network key.

Figure 111. Network authentication types supported by the router.

The router supports the following authentication types:

Authentication type Description

Open authentication (with WEP encryption for wireless network

Open
modes not supporting 802.11n or 802.11ac devices).

Authentication with a shared key with WEP encryption. This

authentication type is not available when a mode supporting
WEP
802.11n or 802.11ac devices is selected from the Wireless mode
drop-down list on the Wi-Fi / Basic Settings page.

WPA WPA-based authentication using a RADIUS server.

WPA-PSK WPA-based authentication using a PSK.

WPA2 WPA2-based authentication using a RADIUS server.

WPA2-PSK WPA2-based authentication using a PSK.

A mixed type of authentication. When this value is selected, devices

WPA/WPA2 mixed using the WPA authentication type and devices using the WPA2
authentication type can connect to the wireless network.

Page 133 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Authentication type Description

A mixed type of authentication. When this value is selected, devices

WPA-PSK/WPA2-PSK using the WPA-PSK authentication type and devices using the
mixed WPA2-PSK authentication type can connect to the wireless
network.

! The WPA, WPA2, and WPA/WPA2 mixed authentication types require a RADIUS
server.

When the Open or WEP value is selected, the following settings are displayed on the page
(unavailable for the wireless network operating modes which support the standard 802.11n or
802.11ac):

Figure 112. The Open value is selected from the Network authentication drop-down list.

Page 134 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

For Open authentication type only.

To activate WEP encryption, move the switch to the right. Upon that
Enable encryption WEP the Default key ID drop-down list, the Encryption key WEP as
HEX switch, and four Encryption key fields are displayed on the
page.

The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.

Encryption key WEP as Move the switch to the right to set a hexadecimal number as a key
HEX for encryption.

Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed value is selected, the
following fields are displayed on the page:

Figure 113. The WPA2-PSK value is selected from the Network authentication drop-down list.

Parameter Description

A password for WPA encryption. The password can contain digits,

Latin letters (uppercase and/or lowercase), and other characters
Password PSK
available in the US keyboard layout.7 Click the Show icon ( ) to
display the entered password.

Encryption type An encryption method: TKIP, AES, or TKIP+AES.

The time period (in seconds), at the end of which a new key for WPA
Group key update
encryption is generated. When the value 0 is specified for this field,
interval
the key is not renewed.

7 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 135 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

When the WPA, WPA2, or WPA/WPA2 mixed value is selected, the following settings are
displayed on the page:

Figure 114. The WPA2 value is selected from the Network authentication drop-down list.

Parameter Description

Move the switch to the right to activate preliminary authentication

WPA2 Pre-
(displayed only for the WPA2 and WPA/WPA2 mixed
authentication
authentication types).

IP address RADIUS
The IP address of the RADIUS server.
server

RADIUS server port A port of the RADIUS server.

The password which the router uses for communication with the
RADIUS encryption key RADIUS server (the value of this parameter is specified in the
RADIUS server settings).

Encryption type An encryption method: TKIP, AES, or TKIP+AES.

The time period (in seconds), at the end of which a new key for WPA
Group key update
encryption is generated. When the value 0 is specified for this field,
interval
the key is not renewed.
When you have configured the parameters, click the APPLY button.
To edit the basic or additional wireless network, left-click the relevant line in the table. On the
opened page, change the needed parameters and click the APPLY button.
To remove the additional network, select the checkbox located to the left of the relevant line in the
table and click the DELETE button ( ). Then click the APPLY button.

Page 136 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Client Management
On the Wi-Fi / Client Management page, you can view the list of wireless clients connected to
the router.

Figure 115. The page for managing the wireless clients.

If you want to disconnect a wireless device from your WLAN, select the checkbox in the line
containing the MAC address of this device and click the DISCONNECT button.
To view the latest data on the devices connected to the WLAN, click the REFRESH button.
To view the latest data on a connected device, left-click the line containing the MAC address of this
device.

Page 137 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

WPS
On the Wi-Fi / WPS page, you can enable the function for configuration of the WLAN.
The WPS function helps to configure the wireless network automatically. Devices connecting to the
wireless network via the WPS function must support the WPS function.

! The WPS function allows adding devices only to the basic wireless network of the router.

Before using the function you need to configure one of the following authentication types:

! Open with no encryption, WPA2-PSK or WPA-PSK/WPA2-PSK mixed with the AES

encryption method. When other security settings are specified, controls of the WPS page
are not available.

Figure 116. The page for configuring the WPS function.

You can activate the WPS function via the web-based interface or the hardware WPS button on the
cover of the device.
To activate the WPS function via the hardware button, move the Enable Wi-Fi when WPS
function is activated with hardware button switch to the right on the tabs of both bands.
Then, with the device turned on, push the WPS button, hold it for 2 seconds, and release. The
WLAN 2.4G and WLAN 5G LEDs should start blinking. In addition, upon pressing the button, the
wireless interfaces of the device are enabled if they were disabled before.
If you want to disable activating the WPS function via the hardware button, move the Enable
Wi-Fi when WPS function is activated with hardware button switch to the left and make
sure that the WPS function is not activated via the web-based interface.

Page 138 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To activate the WPS function via the web-based interface, click the ENABLE WPS button.
When the WPS function is enabled, the Information section is available on the page.

Parameter Description

The state of the WPS function:

• Configured (all needed settings are specified; these settings
will be used upon establishing the wireless connection)
WPS state
• Unconfigured (after activating the WPS function, the SSID
and the encryption key will be configured automatically, the
network authentication type will be changed to WPA2-PSK).

The PIN code of the router. This parameter is used when connecting
Default PIN code
the router to a registrar to set the parameters of the WPS function.

Network name (SSID) The name of the router's wireless network.

Network Authentication The network authentication type specified for the wireless network.

Encryption The encryption type specified for the wireless network.

Password PSK The encryption password specified for the wireless network.

UPDATE Click the button to update the data on the page.

Page 139 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Using WPS Function via Web-based Interface

To connect to the basic wireless network via the PIN method of the WPS function, follow the next
steps:
1. Click the ENABLE WPS button.
2. In the WPS Control section, click the ESTABLISH CONNECTION button.
3. In the opened window, select the PIN value from the WPS method drop-down list.
4. Select the PIN method in the software of the wireless device that you want to connect to the
router's WLAN.
5. Click the relevant button in the software of the wireless device that you want to connect to
the WLAN.
6. Right after that, enter the PIN code specified on the cover of the wireless device or in its
software in the PIN code field.
7. Click the CONNECT button in the web-based interface of the router.
To connect to the basic wireless network via the PBC method of the WPS function, follow the next
steps:
1. Click the ENABLE WPS button.
2. In the WPS Control section, click the ESTABLISH CONNECTION button.
3. In the opened window, select the PBC value from the WPS method drop-down list.
4. Select the PBC method in the software of the wireless device that you want to connect to the
router's WLAN.
5. Click the relevant button in the software or press the WPS button on the cover of the
wireless device that you want to connect to the WLAN.
6. Right after that, click the CONNECT button in the web-based interface of the router.

Page 140 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Using WPS Function without Web-based Interface

You can use the WPS function without accessing the web-based interface of the router. To do this,
you need to configure the following router's settings:
1. Specify relevant security settings for the wireless network of the router.
2. Make sure that the Enable Wi-Fi when WPS function is activated with hardware
button switch is moved to the right on the tabs of both bands.
3. Click the ENABLE WPS button.
4. Close the web-based interface (click the Logout line of the menu).
Later you will be able to add wireless devices to the WLAN by pressing the WPS button of the
router.
1. Select the PBC method in the software of the wireless device that you want to connect to the
router's WLAN.
2. Click the relevant button in the software or press the WPS button on the cover of the
wireless device that you want to connect to the WLAN.
3. Press the WPS button of the router and release. The WLAN 2.4G and WLAN 5G LEDs
will start blinking.

Page 141 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

WMM
On the Wi-Fi / WMM page, you can enable the Wi-Fi Multimedia function. To configure the
2.4GHz band or 5GHz band, go to the relevant tab.
The WMM function implements the QoS features for Wi-Fi networks. It helps to improve the
quality of data transfer over Wi-Fi networks by prioritizing different types of traffic.
Select the needed action from the Work mode drop-down list to configure the WMM function:
• Auto: the settings of the WMM function are configured automatically (the value is
specified by default).
• Manual: the settings of the WMM function are configured manually. When this value is
selected, the Access Point and Station sections are displayed on the page.

Figure 117. The page for configuring the WMM function.

! All needed settings for the WMM function are specified in the device's system. Changing
parameters manually may negatively affect your WLAN!

The WMM function allows assigning priorities for four Access Categories (AC):
• BK (Background), low priority traffic (print jobs, file downloads, etc.).
• BE (Best Effort), traffic from legacy devices or devices/applications that do not support
QoS.
• VI (Video).
• VO (Voice).
Parameters of the Access Categories are defined for both the router itself (in the Access Point
section) and wireless devices connected to it (in the Station section).

Page 142 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To edit the parameters of an Access Category, left-click the relevant line. In the opened window,
change the needed parameters.

Figure 118. The window for changing parameters of the WMM function.

Parameter Description

Arbitrary Inter-Frame Space Number. This parameter influences

AIFSN time delays for the relevant Access Category. The lower the value,
the higher is the Access Category priority.

Contention Window Minimum/Contention Window Maximum. Both

fields influence time delays for the relevant Access Category. The
CWMax field value should not be lower, than the CWMin field
CWMin/CWMax
value. The lower the difference between the CWMax field value
and the CWMin field value, the higher is the Access Category
priority.

Transmission Opportunity. The higher the value, the higher is the

TXOP
Access Category priority.

Admission Control Mandatory.

ACM If the switch is moved to the right, the device cannot use the
relevant Access Category.

Page 143 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Acknowledgment. Answering response requests while transmitting.

Displayed only in the Access Point section.
ACK If the switch is moved to the left, the router answers requests.
If the switch is moved to the right, the router does not answer
requests.

Click the SAVE button.

Page 144 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Client
On the Wi-Fi / Client page, you can configure the router as a client to connect to a wireless access
point or to a WISP. To configure the 2.4GHz band or 5GHz band, go to the relevant tab.

Figure 119. The page for configuring the client mode in the 2.4GHz band.
To configure the router as a client, move the Enable switch to the right. Upon that the following
fields are displayed on the page:

Parameter Description

Broadcast wireless
If the switch is moved to the left, devices cannot connect to the
network 2.4 GHz /
router's WLAN. Upon that the router can connect to another access
Broadcast wireless
point as a wireless client.
network 5 GHz

Connecting to network A method for connecting to another access point.

In the Wireless Networks section, the list of available wireless networks is displayed. To view
the latest data on available wireless networks, click the UPDATE LIST button.
To connect to a wireless network from the list, select the needed network. Move the Network
options switch to the right to view more detailed information on the network to which the router
connects. If a password is required, enter it in the relevant field. Click the CONNECT button.

Page 145 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To connect to a hidden network, select the Connect to hidden network value from the
Connecting to network drop-down list. Enter the name of the network in the Network name
(SSID) field. If needed, fill in the BSSID field. Then select the needed type of authentication from
the Network authentication drop-down list.
When the Open or WEP authentication type is selected, the following settings are displayed on the
page:

Parameter Description

For Open authentication type only.

To activate WEP encryption, move the switch to the right. Upon that
Enable encryption WEP the Default key ID drop-down list, the Encryption key WEP as
HEX switch, and four Encryption key fields are displayed on the
page.

The number of the key (from first to fourth) which will be used for
Default key ID
WEP encryption.

Encryption key WEP as Move the switch to the right to set a hexadecimal number as a key
HEX for encryption.

Keys for WEP encryption. The router uses the key selected from the
Encryption key
Default key ID drop-down list. It is required to specify all the
(1-4)
fields. Click the Show icon ( ) to display the entered key.
When the WPA-PSK, WPA2-PSK, or WPA-PSK/WPA2-PSK mixed authentication type is
selected, the following fields are displayed:

Parameter Description

A password for WPA encryption. Click the Show icon ( ) to

Password PSK
display the entered key.

Encryption type An encryption method: TKIP, AES, or TKIP+AES.

When you have configured the parameters, click the APPLY button.
When connecting to a wireless access point, the wireless channel of DIR-878 will switch to the
channel of the access point to which you have connected.
In addition, the Connection Information section in which you can view the connection status
and the network basic parameters is displayed.
If you want to connect to the WISP network, after configuring the device as a client, you need to
create a WAN connection with relevant parameters for the WiFiClient_2GHz interface in the
2.4GHz band or for the WiFiClient_5GHz interface in the 5GHz band.

Page 146 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Additional
On page of the Wi-Fi / Additional section, you can define additional parameters for the WLAN of
the router. To configure the 2.4GHz band or 5GHz band, go to the relevant tab.

! Changing parameters presented on this page may negatively affect your WLAN!

Figure 120. Additional settings of the WLAN.

Page 147 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

The following fields are available on the page:

Parameter Description

The channel bandwidth for 802.11n standard in the 2.4GHz band

(the 2.4 GHz tab).
• 20 MHz: 802.11n clients operate at 20MHz channels.
• 20/40 MHz: 802.11n clients operate at 20MHz or 40MHz
channels.
• Auto: the access point automatically chooses the most
suitable channel bandwidth for 802.11n clients.
The channel bandwidth for 802.11n and 802.11ac standards in 5GHz
band (the 5 GHz tab).
Bandwidth • 20 MHz: 802.11n and 802.11ac clients operate at 20MHz
channels.
• 20/40 MHz: 802.11n and 802.11ac clients operate at 20MHz
or 40MHz channels.
• 20/40/80 MHz: 802.11ac clients operate at 20MHz, 40MHz,
or 80MHz channels.
• 20/40/80/160 MHz: 802.11ac clients operate at 20MHz,
40MHz, 80MHz, or 160MHz channels.
• Auto: the access point automatically chooses the most
suitable channel bandwidth for 802.11n and 802.11ac clients.

Available on the 2.4 GHz tab.

Move the switch to the right to let the router to automatically choose
the most suitable channel bandwidth (20MHz or 40MHz) for the
Autonegotiation
connected devices (this setting can substantially lower the data
20/40 (Coexistence)
transfer rate of your wireless network). The switch is displayed when
the 20/40 MHz or Auto value is selected from the Bandwidth
drop-down list.

TX power The transmit power (in percentage terms) of the router.

Available on the 5 GHz tab.

Move the switch to the right to enable the DFS (Dynamic Frequency
Selection) mechanism. Upon that the router uses the channels at
which radars and other mobile or stationary radio systems can
operate, but switches to other channels if these devices require this.
Enable DFS
In order to use the DFS mechanism, the automatic channel selection
should be enabled (on the Wi-Fi / Basic Settings page).
Move the switch to the left not to let the router use the channels at
which radars and other mobile or stationary radio systems can
operate.

Page 148 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Move the switch to the right to disable multicasting for the router's
Drop multicast WLAN. Move the switch to the left to enable multicasting from the
WAN connection selected on the Advanced / IGMP/MLD page.

TX Beamforming is the signal processing/directing technique which

Enable TX helps to support a high enough transfer rate in the areas with difficult
Beamforming conditions for the signal propagation.
Move the switch to the right to improve the signal quality.

The STBC (Space-time block coding) technique allows increasing

data transfer reliability even for portable devices equipped with poor
STBC antennas (smartphones, pads, etc.) due to using several data streams
and processing several versions or received data.
Move the switch to the right if you need to use the STBC technique.

Available on the 2.4 GHz tab.

The 802.11b and 802.11g protection function is used to minimize
collisions between devices of your wireless network.
Select a value from the drop-down list.
• Auto: The protection function is enabled and disabled
automatically depending on the state of the network (this
B/G protection
value is recommended if your wireless local area network
consists of both 802.11b and 802.11g devices).
• Always On: The protection function is always enabled (this
setting can substantially lower the efficiency of your wireless
network).
• Always Off: The protection function is always disabled.

Guard interval (in nanoseconds). This parameter defines the interval

between symbols transmitted when the router is communicating to
wireless devices.
• Enable: The router uses the 400 ns short guard interval.
Short GI Only for the wireless network operating modes which
support 802.11n and 802.11ac standards (see the value of the
Wireless mode drop-down list on the Wi-Fi / Basic
Settings page).
• Disable: The router uses the 800 ns standard guard interval.

The time interval (in milliseconds) between packets sent to

Beacon period
synchronize the wireless network.

The minimum size (in bytes) of a packet for which an RTS frame is
RTS threshold
transmitted.

Page 149 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

The maximum size (in bytes) of a non-fragmented packet. Larger

Frag threshold
packets are fragmented (divided).

The number of beacon frames between sending DTIM messages

DTIM period
(messages notifying on broadcast or multicast transmission).

The time interval (in seconds) between keep alive checks of wireless
Station Keep Alive devices from your WLAN. When the value 0 is specified, the
checking is disabled.
When you have configured the parameters, click the APPLY button.

Page 150 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

MAC Filter
On the Wi-Fi / MAC Filter page, you can define a set of MAC addresses of devices which will be
allowed to access the WLAN, or define MAC addresses of devices which will not be allowed to
access the WLAN.

! It is recommended to configure the Wi-Fi MAC filter through a wired connection to DIR-
878.

Figure 121. The page for configuring the MAC filter for the wireless network.
By default, the Wi-Fi MAC filter is disabled.
To configure the MAC filter, first you need to create rules (specify MAC addresses of devices for
which the specified filtering modes will be applied). To do this, click the ADD button ( ).

Page 151 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 122. The window for adding a rule for the MAC filter.
You can specify the following parameters:

Parameter Description

Frequency band From the drop-down list, select a band of the wireless network.

A wireless network to which the rule will be applied. Select the

SSID
needed value from the drop-down list.

In the field, enter the MAC address to which the selected filtering
MAC address
mode will be applied.

The name of the device for easier identification (optional). You can
Hostname
specify any name.

If the switch is moved to the right, the rule is active.

Enable
Move the switch to the left to disable the rule.
When you have configured the parameters, click the SAVE button.
To edit the parameters of the existing rule, in the Filters section, left-click the needed rule. In the
opened window, change the settings and click the SAVE button.
To remove the rule from the page, in the Filters section, select the checkbox located to the left of
the relevant rule and click the DELETE button ( ).

Page 152 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

After creating the rules you need to configure the filtering modes.
To open the basic or additional wireless network for the devices which MAC addresses are
specified on this page and to close the wireless network for all other devices, in the section
corresponding to the band (2.4 GHz or 5 GHz), left-click the line of the wireless network. In the
opened window, move the Enable MAC filter switch to the right. Upon that the MAC filter
restrict mode drop-down list will be displayed. Select the Allow value from the drop-down list
and click the SAVE button.
To close the wireless network for the devices which MAC addresses are specified on this page,
select the Deny value from the MAC filter restrict mode drop-down list and click the SAVE
button.
To set a schedule for the MAC filter rule, click the Set schedule button ( ) in the line
corresponding to this rule. In the opened window, you can create a new schedule (see the Schedule
section, page 218) or use the existing one. Existing schedules are displayed in the Interval of
execution drop-down list in the simplified mode.
To enable the MAC filter rule at the time specified in the schedule and disable it at the other time,
select the Enable rule value from the Action drop-down list and click the SAVE button.
To disable the MAC filter rule at the time specified in the schedule and enable it at the other time,
select the Disable rule value from the Action drop-down list and click the SAVE button.
To change or delete the schedule for a rule, click the Edit schedule button ( ) in the line
corresponding to this rule. In the opened window, change the parameters and click the SAVE button
or click the DELETE FROM SCHEDULE button.

Page 153 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Super Mesh
On the Wi-Fi / Super Mesh page, you can enable the Super Mesh function. This function is
designed to quickly connect multiple devices into one transport network for providing high-quality
Wi-Fi coverage in living units of complicated planning or for creating a large temporary Wi-Fi
network for an outdoor event.
A Mesh network consists of a main device (the Master role) and subordinate devices (the Slave
role). Devices connect to each other via wireless or wired connection. Settings are transmitted from
the main device to a subordinate one at the final step of configuring the Super Mesh function while
the devices are connected via an Ethernet cable (you don't need to manually specify all the
parameters on subordinate devices).

Figure 123. A Mesh network structure.

If the device is in the router mode (the Router value is displayed in the Device mode line on the
Summary page), you can configure it as a main device (the Master role). If the device is in the
access point mode (the Access Point value is displayed in the Device mode line on the
Summary page), you can configure it as a subordinate device (the Slave role).

! The Super Mesh function cannot operate in both bands simultaneously. Select one of the
bands (2.4GHz or 5GHz) for all devices of the configured network.

Page 154 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 124. The Wi-Fi / Super Mesh page.

To activate the Super Mesh function, on the tab of the relevant band, move the Enable Super
Mesh switch to the right. You can specify the following parameters:

Parameter Description

An identifier which shows that the device belongs to a certain Mesh

Domain network. This value should be the same for all devices of your Mesh
network.

If you need to use IPv6 for configuring the Mesh network, move the
IPv6
IPv6 switch to the right.

Move the switch to the right to allow devices of the Mesh network to
use this device for connecting to the Internet.
It is recommended to move the switch to the right when configuring
Enable gateway
the main device.
It is recommended to move the switch to the left when configuring a
subordinate device.

Page 155 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

A name of the Mesh network. This value should be the same for all
devices of your Mesh network.
Network name (SSID)
Clients connected to devices of a Mesh network cannot see the Mesh
network and cannot connect to it.
In the Security Settings section, specify security settings of your Mesh network. 8 To do this,
select the needed type of authentication9 from the Network authentication drop-down list.
When the WPA2-PSK authentication type is selected, the following fields are displayed:

Parameter Description

A password for WPA encryption. Click the Show icon ( ) to

Password PSK display the entered key. By default, WPS PIN from the barcode label
is used as the network key.

Encryption type An encryption method: AES.

When you have configured the parameters, click the APPLY button.
To complete your Mesh network configuration, connect the subordinate device to a LAN port of the
main device using an Ethernet cable. Wait for about 5-6 minutes. When all the settings are applied,
the Power LED should be solid orange. Then, if needed, disconnect the Ethernet cable and move
the subordinate device to its workplace.
To view data on the current state of your Mesh network, select the needed value from the
Statistics drop-down list.
• Network Overview: When this value is selected, information on all devices of your Mesh
network is displayed on the page. The value is unavailable if your device is configured as a
subordinate one.
• List of APs: When this value is selected, information on all devices of your Mesh network
is displayed on the page.
• List of Clients: When this value is selected, information on all clients connected to the
devices of your Mesh network is displayed on the page.
• Neighbours: When this value is selected, a connection scheme of your Mesh network
devices is displayed on the page.

Parameter Description

Network Overview / List of APs

Model The model of a device.

The identifier which shows that a device belongs to the Mesh

Domain
network.

8 Security settings should be the same for all devices of your Mesh network.
9 The full list will be available in the next firmware version.

Page 156 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

IP The IPv4 and/or IPv6 address of a device.

MAC The MAC address of a device.

The short name for a Mesh network device.

MASTERAP (Master Access Point): The main device which
provides connection to the Internet.
RAP (Router Access Point): A subordinate device connected to the
main device via a cable (directly to the main one or via some
Role subordinate devices connected via a cable).
MAP (Mesh Access Point): A subordinate device with a wireless
connection.
WMAP (Wired Mesh Access Point): A subordinate device
connected via a cable to another subordinate device with a wireless
connection.

Available for the Network Overview section only.

Signal strength
The strength of a device's wireless signal.

Uptime The operational time of a device.

List of Clients

The MAC address of the Mesh network device to which a client is

AP MAC
connected.

Client MAC Address The MAC address of a client.

Bandwidth The bandwidth at which a client operates.

Wireless mode The operating mode of a client’s wireless connection.

Status Information on a client’s current state.

Neighbours

The MAC address of the device to which a Mesh network node is

MAC connected. The MAC address of this node is displayed in the
Neighbour MAC Address field.

Neighbour MAC The MAC address of the device connected to a Mesh network node.
Address The MAC address of this node is displayed in the MAC field.

Page 157 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

The short name for the Mesh network device which MAC address is
displayed in the Neighbour MAC Address field.
MASTERAP (Master Access Point): The main device which
provides connection to the Internet.
RAP (Router Access Point): A subordinate device connected to the
main device via a cable (directly to the main one or via some
Role
subordinate devices connected via a cable).
MAP (Mesh Access Point): A subordinate device with a wireless
connection.
WMAP (Wired Mesh Access Point): A subordinate device
connected via a cable to another subordinate device with a wireless
connection.

The current connection state of the Mesh network node which MAC
Connection status
address is displayed in the Neighbour MAC Address field.

The number of intermediate Mesh network nodes from the device

which MAC address is displayed in the Neighbour MAC
Address field to the main device.
Hops
If the MAC address of the main device is displayed in the
Neighbour MAC Address field, the number of intermediate
nodes is 0.

The maximum allowed value of connection speed from the device

Rate at path to upper- which MAC address is displayed in the Neighbour MAC
level host Address field to the device which MAC address is displayed in the
MAC field.

The capacity of the device which MAC address is displayed in the

Host capacity
MAC field.
To view detailed data on a device, click the line corresponding to this device.

Page 158 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Roaming
On the Wi-Fi / Roaming page, you can enable the function of smart adjustment of Wi-Fi clients.
This function is designed for wireless networks based on several access points or routers. If the
function is enabled for all access points (routers) which establish a wireless network, then wireless
clients will always connect to the device with the highest signal level.

Figure 125. The Wi-Fi / Roaming page.

To enable the function, click the ENABLE button. Upon that the following settings are available on
the page.

Parameter Description

The number of the port used for data exchange between access
Port
points (routers).

Page 159 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Move the switch to the right in order to use multicast traffic for
service data exchange between access points (routers). This setting is
needed if the devices which support the smart adjustment function
Use multicast for are located in different subnets. If the switch is moved to the right,
service data exchange the Multicast TTL and Multicast group address fields are
displayed on the page.
If the switch is moved to the left, broadcast traffic is used for service
data exchange.

Specify the TTL (Time to live) parameter value. The recommended

Multicast TTL
value is 4.

Multicast group Specify the address of the multicast group (from the subnet
address 239.255.0.0/16).

2.4 GHz / 5 GHz

The maximum time period (in seconds) during which the access
Maximum time of
point (router) stores data on the signal strength of the client located
storing data
on its coverage area.

The signal strength upon which the access point (router) starts
Minimum level of
scanning other devices in order to find a device with a higher signal
connection quality
level.

This parameter is used for calculation of the signal strength upon

which the smart adjustment function goes off. If the signal strength
provided by another device is less than the sum of the Minimum
Dead zone
level of connection quality field value and the Dead zone field
value, then the client disconnects from the access point (router). You
can specify the values from -50% to +50%.

The signal strength upon which the access point (router) disconnects
Threshold value of the client from its wireless network regardless of the signal levels of
connection quality other devices. This value should not be greater than the value
specified in the field Minimum level of connection quality.
After specifying the needed parameters, click the APPLY button.
To disable the function of smart adjustment of Wi-Fi clients, click the DISABLE button.

Page 160 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Advanced
In this menu you can configure advanced settings of the router:
• create or edit VLANs
• use LAN ports of the router as additional WAN ports and also use the WAN port as a LAN
port
• enable and configure the SNMP agent of the router
• add name servers
• configure a DDNS service
• configure autonegotiation or manually configure speed and duplex mode for each Ethernet
port of the router
• configure notifications on the reason of the Internet connection failure
• define static routes
• configure TR-069 client
• create rules for remote access to the web-based interface
• enable the UPnP IGD protocol
• enable the built-in UDPXY application for the router
• allow the router to use IGMP and MLD
• allow the router to use RTSP, enable the SIP ALG, the PPPoE/PPTP/L2TP/IPsec pass
through functions for the router
• configure the CoovaChilli service
• enable VRRP.

Page 161 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

VLAN
On the Advanced / VLAN page, you can edit existing and create new virtual networks (VLAN),
e.g., for distinguishing traffic or specifying additional WAN interfaces.
By default, 2 VLANs are created in the router's system:
• LAN: For the LAN interface, it includes LAN ports and Wi-Fi networks. You cannot delete
this VLAN.
• WAN: For the WAN interface; it includes the INTERNET port. You can edit or delete this
VLAN.

Figure 126. The Advanced / VLAN page.

In order to add untagged LAN ports or available Wi-Fi networks to an existing or new VLAN, first
you need to exclude them from the LAN network on this page. To do this, select the LAN line. On
the opened page, from the Type drop-down list of the element corresponding to the relevant LAN
port or Wi-Fi network, select the Excluded value and click the APPLY button.

Page 162 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To create a new VLAN, click the ADD button ( ).

Figure 127. The page for adding a VLAN.

You can specify the following parameters:

Parameter Description

Name A name for the VLAN for easier identification.

VLAN ID An identifier of the VLAN.

QoS A priority tag for the transmitted traffic.

Move the switch to the right to create an interface that can be used
for creating WAN connections.
Create interface
Move the switch to the left for the VLAN to work in the bridge
mode. This mode is mostly used to connect IPTV set-top boxes.

Page 163 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Select a type for each port included in the VLAN.

• Untagged: Untagged traffic will be transmitted through the
specified port.
• Tagged: Tagged traffic will be transmitted through the
Ports
specified port. If at least one port of this type is included to
the VLAN, it is required to fill in the VLAN ID and QoS
fields.
Leave the Excluded value for the ports not included in the VLAN.

Select the Untagged value for each Wi-Fi interface included in the
VLAN.
Wireless interfaces
Leave the Excluded value for the Wi-Fi interfaces not included in
the VLAN.

Click the APPLY button.

To edit an existing VLAN, select the relevant line in the table. On the page displayed, change the
parameters and click the APPLY button.
To remove an existing VLAN, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ).

Page 164 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

WAN Assignment
On the Advanced / WAN assignment page, you can use LAN ports of the router as additional
WAN ports and also use the WAN port as a LAN port.

Figure 128. The Advanced / WAN assignment page.

Using LAN Ports as WAN Ports
To configure one or several LAN ports of the router to be used as WAN ports, follow the next steps:
1. On the Advanced / WAN assignment page, select LAN ports and click the APPLY
button.
2. Go to the Advanced / VLAN page and create additional VLANs each of which will
include one selected LAN port (see the VLAN section, page 162).

! To create a network interface to which a WAN connection can be assigned upon adding the
VLAN, the Create interface switch should be moved to the right.

3. Go to the Connections Setup / WAN page and create WAN connections which will be
assigned to the network interfaces of the corresponding VLANs (see the WAN section, page
77).
If you don't want to use a LAN port as a WAN port any longer, follow the next steps:
1. On the Connections Setup / WAN page, remove the WAN connection assigned to the
network interface of the VLAN which includes the corresponding LAN port (see the WAN
section, page 77).
2. Go to the Advanced / VLAN page and remove the VLAN (see the VLAN section, page
162).
3. Go to the Advanced / WAN assignment page, deselect the corresponding LAN port,
and click the APPLY button.

Page 165 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Using WAN Port as LAN Port

To configure the WAN port of the router to be used as a LAN port, follow the next steps:
1. On the Connections Setup / WAN page, remove the WAN connection assigned to the
network interface of the VLAN which includes the WAN port (see the WAN section, page
77).
2. Go to the Advanced / VLAN page and remove the VLAN (see the VLAN section, page
162).
3. On the Advanced / WAN assignment page, deselect the WAN port and click the
APPLY button.
If you don't want to use the WAN port as a LAN port any longer, follow the next steps:
1. On the Advanced / WAN assignment page, select the WAN port and click the APPLY
button.
2. Go to the Advanced / VLAN page and create a VLAN which will include the WAN port
(see the VLAN section, page 162).

! To create a network interface to which a WAN connection can be assigned upon adding the
VLAN, the Create interface switch should be moved to the right.

3. Go to the Connections Setup / WAN page and create a WAN connection which will be
assigned to the network interface of the VLAN (see the WAN section, page 77).

Page 166 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

SNMP
On the Advanced / SNMP page, you can enable and configure the SNMP agent of the router.
The SNMP agent is a service which sends data on the state and settings of the device where is it
enabled to the SNMP manager (the network management system of your ISP or system
administrator).

Figure 129. The Advanced / SNMP page.

Page 167 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In order to enable the SNMP agent, in the Configuration section, move the Enable SNMP
switch to the right. Then specify the needed parameters.

Parameter Description

Configuration

The IP address of the remote subnet where the SNMP manager is

Remote subnet
located.

Hostname A name of the router for identification in the SNMP manager.

The contact information Additional information used to contact the administrator of the
for the administrator router.

System location Additional information used to locate the router.

After specifying the needed parameters, click the APPLY button.

In order to disable the SNMP agent, in the Configuration section, move the Enable SNMP
switch to the left and click the APPLY button.
If the SNMP manager operates over SNMPv2c, create a read-only community which will be used
by the SNMP manager to get data on the device. To do this, in the Communities section, click the
ADD button and specify the community name in the line displayed. Then click the APPLY button.
To remove a community, click the Delete icon ( ) in the relevant line. Then click the APPLY
button.
If the SNMP manager operates over SNMPv3, create a read-only user which will be used by the
SNMP manager to get data on the device. To do this, in the Users section, click
the ADD button ( ).

Figure 130. The window for adding a user.

Page 168 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the opened window, specify the needed parameters:

Parameter Description

Name Specify a username for access from the SNMP manager.

Select a required authentication method from the drop-down list or

Authentication protocol
leave the None value if authentication is not required.

Specify a password for user authentication from the SNMP manager.

Authentication
The field is displayed if the MD5 or SHA value is selected from the
password
Authentication protocol drop-down list.

Select a required encryption method from the drop-down list or

leave the None value if encryption is not required. The list is
Encryption protocol
displayed if the MD5 or SHA value is selected from the
Authentication protocol drop-down list.

Specify an encryption key for data exchange between the SNMP

Encryption key agent and SNMP manager. The field is displayed if the DES or AES
value is selected from the Encryption protocol drop-down list.

Specify a MIB element which will be available to the SNMP

MIB subtree
manager.
Click the SAVE button.
To edit a user, select the relevant line in the table. In the opened window, change the needed values
and click the SAVE button. Then click the APPLY button.
To remove a user, select the checkbox located to the left of the relevant line in the table and click
the DELETE button ( ). Then click the APPLY button.

Page 169 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

DNS
On the Advanced / DNS page, you can add DNS servers to the system.

Figure 131. The Advanced / DNS page.

DNS servers are used to determine the IP address from the name of a server in Intranets or the
Internet (as a rule, they are specified by an ISP or assigned by a network administrator).
You can specify the addresses of DNS servers manually on this page or configure the router to
obtain DNS servers addresses automatically from your ISP upon installing a connection. Also here
you can specify addresses of reserve DNS servers which the router can use if the addresses
specified manually or obtained automatically are unavailable.

!
When you use the built-in DHCP server, the network parameters (including DNS servers)
are distributed to clients automatically.

Page 170 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Specify needed settings for IPv4 in the DNS IPv4 section and for IPv6 in the DNS IPv6 section.
If you want to configure automatic obtainment of DNS servers addresses, move the Manual switch
to the left. Then move the Default gateway switch to the left and from the Interface drop-down
list select a WAN connection which will be used to obtain addresses of DNS servers automatically.
If you want the router to use the default WAN connection to obtain addresses of DNS servers, move
the Default gateway switch to the right.
To specify a DNS server manually, move the Manual switch to the right. In the Name Servers
section of the relevant IP version, click the ADD SERVER button, and in the line displayed, enter
an IP address of the DNS server.
To specify a reserve DNS server, in the Reserve servers section of the relevant IP version, click
the ADD SERVER button, and in the line displayed, enter an IP address of the DNS server.
To remove a DNS server from the page, click the Delete icon ( ) in the line of the address.
When all needed settings are configured, click the APPLY button.

Page 171 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

DDNS
On the Advanced / DDNS page, you can define parameters of the DDNS service, which allows
associating a domain name with dynamic IP addresses.

Figure 132. The Advanced / DDNS page.

To add a new DDNS service, click the ADD button ( ).

Figure 133. The page for adding a DDNS service.

Page 172 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

On the opened page, you can specify the following parameters:

Parameter Description

Enter the full domain name registered at your DDNS provider.

If you want to use another domain name of this DDNS provider,
click the ADD HOST button, and in the line displayed, enter the
Hostname
needed value.
To remove a domain name, click the Delete icon ( ) in the line of
the name.

Select the DDNS provider from the drop-down list. If your provider
is not in the list, select the Custom provider value and fill in the
DDNS service fields displayed on the page. Specify the DDNS provider name in
the Name field, the domain name of the provider's server in the
Server field, and the location of settings in the Path field.

Username The username to authorize for your DDNS provider.

The password to authorize for your DDNS provider. Click the

Password
Show icon ( ) to display the entered password.

An interval (in minutes) between sending data on the router's

Update period
external IP address to the relevant DDNS service.

After specifying the needed parameters, click the SAVE button.

To edit parameters of the existing DDNS service, select the relevant line in the table. On the opened
page, change the needed parameters and click the SAVE button.
To remove an existing DDNS service, select the checkbox located to the left of the relevant line in
the table and click the DELETE button ( ).

Page 173 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Ports Settings
On the Advanced / Ports Settings page, you can configure or disable autonegotiation of speed
and duplex mode or manually configure speed and duplex mode for each Ethernet port of the router.
Also you can enable or disable data flow control in the autonegotiation mode. This function is used
for equal load balancing in ISPs' networks. Contact your ISP to clarify if this function needs to be
enabled.

Figure 134. The Advanced / Ports Settings page.

In order to configure autonegotiation or configure speed and duplex mode manually for an Ethernet
port, select it in the table.

! Autonegotiation should be enabled for both devices connected to each other.

! When autonegotiation is disabled, speed and duplex mode settings for both devices
connected to each other should be the same.

Page 174 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 135. The window for changing the settings of the router's port.

In the opened window, specify the needed parameters:

Parameter Description

Data transfer mode.

Select the Auto value to enable autonegotiation. When this value is
selected, the Autonegotiation Modes and Flow control sections
are displayed.
Select the 10M-Half, 10M-Full, 100M-Half, or 100M-Full value
to manually configure speed and duplex mode for the selected port:
• 10M-Half: Data transfer in just one direction at a time (data
can be either sent or received) at the maximum possible rate
of up to 10Mbps.
Speed
• 10M-Full: Data transfer in two directions simultaneously
(data can be sent and received at the same time) at the
maximum possible rate of up to 10Mbps.
• 100M-Half: Data transfer in just one direction at a time (data
can be either sent or received) at the maximum possible rate
of up to 100Mbps.
• 100M-Full: Data transfer in two directions simultaneously
(data can be sent and received at the same time) at the
maximum possible rate of up to 100Mbps.

Autonegotiation Modes

To enable the needed data transfer modes, move relevant switches to the right.

Page 175 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Flow control

Move the switch to the right to enable the flow control function for
the port.
Symmetric flow control
Move the switch to the left to disable the flow control function for
the port.
After specifying the needed parameters, click the SAVE button.
If in the future you need to edit the parameters of the router's port, select the port in the table. In the
opened window, change the needed parameters and click the SAVE button.

Page 176 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Redirect
On the Advanced / Redirect page, you can enable notifications on the reason of the Internet
connection failure. Notifications will be displayed in the browser window when a user is attempting
to open a web site on the Internet.

Figure 136. The Advanced / Redirect page.

To configure notifications, click the ENABLE button. Then, in the Reasons for Redirect
section, move the needed switches to the right.

Parameter Description

Reasons for Redirect

Notifications in case of physical connection problems (the ISP's

Physical connection
cable is not connected, an additional device needed to access the
error
Internet is not connected).

Notifications in case of problems of the default WAN connection

No connection
(authorization error, the IPS's server does not respond, etc.).

The device is not

Notifications in case when the device works with default settings.
configured
When you have configured the parameters, click the APPLY button.
To disable notifications, click the DISABLE button.

Page 177 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Routing
On the Advanced / Routing page, you can specify static (fixed) routes.

Figure 137. The Advanced / Routing page.

To specify a new route, click the ADD button ( ).

Figure 138. The window for adding a new route.

Page 178 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the opened window, you can specify the following parameters:

Parameter Description

Move the switch to the right to enable the route.

Enable
Move the switch to the left to disable the route.

Protocol An IP version.

From the drop-down list, select an interface (connection) through

which the device will communicate with the remote network. If you
Interface
have selected the Auto value, the router itself sets the interface
according to the data on the existing dynamic routes.

A remote network which can be accessed with help of this route. You
can specify an IPv4 or IPv6 address.
Destination network
The format of a host IPv6 address is 2001:db8:1234::1, the
format of a subnet IPv6 address is 2001:db8:1234::/64.

For IPv4 protocol only.

Destination netmask
The remote network mask.

Gateway An IP address through which the destination network can be accessed.

A metric for the route. The lower the value, the higher is the route
Metric
priority. Optional.

From the drop-down list, select a routing table for the route.
• group_1 table is used to route user traffic.
Table
• main table is used to route management traffic from internal
system services of the router.

After specifying the needed parameters, click the SAVE button.

To edit an existing route, select a relevant line of the table. In the opened window, change the
needed parameters and click the SAVE button.
To remove an existing route, select the checkbox located to the left of the relevant line in the table
and click the DELETE button ( ).

Page 179 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

TR-069 Client
On the Advanced / TR-069 Client page, you can configure the router for communication with a
remote Auto Configuration Server (ACS).
The TR-069 client is used for remote monitoring and management of the device.

Figure 139. The page for configuring the TR-069 client.

You can specify the following parameters:

Parameter Description

TR-069 Client

The interface which the router uses for communication with the
ACS. Leave the Automatic value to let the device select the
Interface
interface basing on the routing table or select another value if
required by your ISP.

Enable TR-069 client Move the switch to the right to enable the TR-069 client.

Page 180 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Inform Settings

Move the switch to the right so the router may send reports (data on
On
the device and network statistics) to the ACS.

Interval Specify the time period (in seconds) between sending reports.

Auto Configuration Server Settings

If the switch is moved to the right, the access point obtains the URL
address of the ACS upon establishing the Dynamic IP type
Get URL address via
connection.
DHCP
If you need to specify the URL address manually, move the switch
to the left and enter the needed value in the URL address field.

URL address The URL address of the ACS provided by the ISP.

Username The username to connect to the ACS.

The password to connect to the ACS. Click the Show icon ( ) to

Password
display the entered password.

Connection Request Settings

The username used by the ACS to transfer a connection request to

Username
the router.

The password used by the ACS. Click the Show icon ( ) to

Password
display the entered password.

Request port The port used by the ACS. By default, the port 8999 is specified.

Request path The path used by the ACS.

When you have configured the parameters, click the APPLY button.

Page 181 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Remote Access
On the Advanced / Remote Access page, you can configure access to the web-based interface
of the router. By default, the access from external networks to the router is closed. If you need to
allow access to the router from the external network, create relevant rules.

Figure 140. The Advanced / Remote Access page.

To create a new rule, click the ADD button ( ).

Figure 141. The window for adding a rule for remote management.
In the opened window, you can specify the following parameters:

Parameter Description

An IP version to which the rule will be applied. Select the relevant

IP version
value from the drop-down list.

Open access from any Move the switch to the right to allow access to the router for any
external host host. Upon that the IP address and Mask fields are not displayed.

Page 182 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

A host or a subnet to which the rule is applied. You can specify an

IP address
IPv4 or IPv6 address.

For the IPv4-based network only.

Mask
The mask of the subnet.

For the IPv4-based network only.

Public port
An external port of the router. You can specify only one port.

Protocol The protocol available for remote management of the router.

After specifying the needed parameters, click the SAVE button.

To edit a rule for remote access, left-click the relevant rule. In the opened window, change the
needed parameters and click the SAVE button.
To remove a rule for remote access, select the checkbox located to the left of the relevant line in the
table and click the DELETE button ( ).

Page 183 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

UPnP IGD
On the Advanced / UPnP IGD page, you can enable the UPnP IGD protocol. The router uses the
UPnP IGD protocol for automatic configuration of its parameters for network applications requiring
an incoming connection to the router.

Figure 142. The Advanced / UPnP IGD page.

If you want to manually specify all parameters needed for network applications, move the Enable
switch to the left. Then go to the Firewall / Virtual Servers page and specify needed settings.
If you want to enable the UPnP IGD protocol in the router, move the Enable switch to the right.
When the protocol is enabled, the following parameters of the router are displayed on the page:

Parameter Description

Protocol A protocol for network packet transmission.

IP address The IP address of a client from the local area network.

A port of a client's IP address to which traffic is directed from a

Private port
public port of the router.

A public port of the router from which traffic is directed to a client's

Public port
IP address.

Description Information transmitted by a client's network application.

Duration The time period during which the UPnP IGD protocol has been used.

Page 184 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

UDPXY
On the Advanced / UDPXY page, you can allow the router to use the built-in UDPXY
application. The UDPXY application transforms UDP traffic into HTTP traffic. This application
allows devices which cannot receive UDP streams to access stream video.

Figure 143. The Advanced / UDPXY page.

To enable the application, move the Enable switch to the right.
Upon that the following fields are displayed on the page:

Parameter Description

Port The port of the router which the UDPXY application uses.

Maximum number of devices from the router's LAN which will be

Maximum client number
served by the application.

Buffer size for incoming Size of intermediate buffer for received data.
data By default, the minimum acceptable value is specified.

Buffer size for data Size of intermediate buffer for transmitted data.
transferred to client By default, the minimum acceptable value is specified.

From the drop-down list, select a WAN connection which will be

WAN interface
used for operation with streaming video.
After specifying the needed parameters, click the APPLY button.

Page 185 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To access the status page of the application, click the Status link.

Figure 144. The UDPXY application status page.

Page 186 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

IGMP/MLD
On the Advanced / IGMP/MLD page, you can allow the router to use IGMP and MLD and
specify needed settings.
IGMP and MLD are used for managing multicast traffic (transferring data to a group of
destinations) in IPv4 and IPv6 networks correspondingly. These protocols allow using network
resources for some applications, e.g., for streaming video, more efficiently.

Figure 145. The Advanced / IGMP/MLD page.

The following elements are available on the page:

Parameter Description

IGMP

Enable Move the switch to the right to enable IGMP.

IGMP version Select a version of IGMP from the drop-down list.

From the drop-down list, select a connection of the Dynamic IPv4 or

Interface Static IPv4 type for which you need to allow multicast traffic (e.g.
streaming video).

Page 187 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

MLD

Enable Move the switch to the right to enable MLD.

MLD version Select a version of MLD from the drop-down list.

From the drop-down list, select a connection of the Dynamic IPv6 or

Interface Static IPv6 type for which you need to allow multicast traffic (e.g.
streaming video).
After specifying the needed parameters, click the APPLY button.

Page 188 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

ALG/Passthrough
On the Advanced / ALG/Passthrough page, you can allow the router to use RTSP, enable the
SIP ALG and PPPoE/PPTP/L2TP/IPsec pass through functions.
SIP is used for creating, modifying, and terminating communication sessions. This protocol allows
telephone calls via the Internet.
RTSP is used for real-time streaming multimedia data delivery. This protocol allows some
applications to receive streaming audio/video from the Internet.
The PPPoE pass through function allows PPPoE clients of computers from your LAN to connect to
the Internet through connections of the router.
The PPTP pass through, L2TP pass through and IPsec pass through functions allow VPN PPTP,
L2TP and IPsec traffic to pass through the router so that clients from your LAN can establish
relevant connections with remote networks.

Figure 146. The Advanced / ALG/Passthrough page.

Page 189 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

The following elements are available on the page:

Parameter Description

Move the switch to the right to enable SIP. Such a setting allows
SIP using the SIP ALG function. This function allows VoIP traffic to
pass through the NAT-enabled router.10

Move the switch to the right to enable RTSP. Such a setting allows
RTSP managing media stream: fast forward streaming audio/video, pause
and start it.

Move the switch to the right to enable the PPPoE pass through
PPPoE pass through
function.

Move the switch to the right to enable the IPsec pass through
IPsec pass through
function.

Move the switch to the right to enable the L2TP pass through
L2TP pass through
function.

Move the switch to the right to enable the PPTP pass through
PPTP pass through
function.
After specifying the needed parameters, click the APPLY button.

10 On the Connections Setup / WAN page, create a WAN connection, move the SIP switch to the right on the
Advanced / ALG/Passthrough page, connect an Ethernet cable between a LAN port of the router and the IP
phone. Specify SIP parameters on the IP phone and configure it to obtain an IP address automatically (as DHCP
client).

Page 190 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

CoovaChilli
The CoovaChilli service provides authorized Internet access for clients in your corporate or public
network. On the Advanced / CoovaChilli page, you can add an authorization server.

Figure 147. The Advanced / CoovaChilli page.

To add an authorization server, click the ADD button ( ). On the opened page, move the Enable
switch to the right to enable the CoovaChilli service.

Figure 148. The page for adding an authorization server. The Main Settings section.

Page 191 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the Main Settings section, you can specify the following parameters:

Parameter Description

From the drop-down list, select a physical or virtual interface to be

used for the authorization server. In order to specify an additional
Interface interface, for example, a separate LAN port or a Wi-Fi network, it is
necessary to create another VLAN for this port or network (see the
VLAN section, page 162).

The interval (in seconds) between sending authorization requests to

Lease time
clients.

From the drop-down list, select a detail level of messages recorded to

Logging level
the server or leave the value specified by default.

Specify an IP address of the router to be used for authorized client

IP address
access.

Mask Specify a subnet mask.

If the switch is moved to the right, the router responds to ping

Ping requests by the IP address specified on this page. For security
reasons, it is recommended to disable this function.

Figure 149. The page for adding an authorization server. The RADIUS server section.
In the RADIUS server section, you can specify the following parameters:

Parameter Description

Primary RADIUS server

Enter addresses of the primary and secondary RADIUS servers in the
address / Secondary
relevant fields.
RADIUS server address

The password which the router uses for communication with the
RADIUS encryption key RADIUS server (the value of this parameter is specified in the
RADIUS server settings).

Page 192 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

RADIUS server port A port of the RADIUS server.

The number of a router port which will be used to connect to the

Authentication port
RADIUS server. By default, the value 1812 is specified.

The settings of the MAC authentication section will be available in the next FW versions.

Figure 150. The page for adding an authorization server. The UAM section.
In the UAM section, you can specify the following parameters:

Parameter Description

The authentication method is specified in the RADIUS server

Enable CHAP settings.
authentication Move the switch to the right to enable CHAP authentication.
Move the switch to the left to enable PAP authentication.

The number of a router port which will be used for UAM server
Authorization port
authorization. By default, the value 3990 is specified.

Specify the URL of the UAM server which ensures client

UAM server authorization. The address of the UAM server should start with a
protocol. Example: http://dlink.ru

Specify the list of resources (separated by a comma) which

Access for
unauthorized users are allowed to access. Please specify a site
unauthorized users
address and a port. Example: dlink.ru:80

UAM encryption key Specify the UAM authentication encryption key.

Page 193 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

After specifying the needed parameters, click the APPLY button.

After adding an authorization server, on the Advanced / CoovaChilli page, in the Status
section, the current state of the server connection is displayed.
To edit the parameters of a server, left-click the relevant line in the table. On the opened page,
change the needed parameters and click the APPLY button.
To remove a server, select the checkbox located to the left of the relevant line in the table and click
the DELETE button ( ).

Page 194 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

VRRP
On the Advanced / VRRP page, you can enable VRRP (Virtual Router Redundancy Protocol),
which is designed to improve availability of routers acting as default gateways. The protocol
enables you to configure several devices as the default virtual router with a common IP address,
which is used as the default gateway by LAN clients.

Figure 151. The Advanced / VRRP page.

If you want to enable VRRP, move the Enable VRRP switch to the right. When the protocol is
enabled, the following elements are displayed on the page:

Parameter Description

The operation mode of the router:

• Master: The router ensuring data transfer at present. A
device with a higher priority switches to the Master mode.
Mode
• Backup: A reserve router, which switches to the Master
mode upon the main router failure in accordance with its
priority level.

Page 195 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

The status of the service working over VRRP:

Status • Disable: The service is not active.
• Enable: The service is active.

Interface A network interface used by VRRP.

Specify a unique ID of the virtual router. By default, the value 1 is

VRID
specified.

The priority of the router over other devices, which is used to switch
it to the Master mode. Specify a value from the range 1~255. By
Priority default, the value 100 is specified. If several devices have the same
priority level, the router with the highest IP address will switch to
the Master mode.

IP address The IP address used by LAN devices to access the router.

Mask The subnet mask of the virtual router.

An interval (in seconds) between sending service advertisements,

containing information on the priority level and connection status of
Delay
the device working in the Master mode. By default, the value 1 is
specified.

Move the switch to the right to enable access to the virtual router by
Assign virtual MAC
a virtual MAC address. A virtual MAC address is generated
address
automatically.

The preempt mode enables a backup router to switch to the Master

mode if its priority level is higher than the priority of the current
Master.
Preempt mode
Move the switch to the left to disable the preempt mode. If a device
is the owner of the IP address specified on this page, it uses the
preempt mode regardless of the position of this switch.

Select the authorization method for devices working over VRRP:

• Without authorization: Authorization is not required.
Authorization • PW: Authorization by password (a HEX key). The
maximum key length is 8 symbols. The key should begin
with the 0x prefix.

After specifying the needed parameters, click the APPLY button.

If you want to disable VRRP, move the Enable VRRP switch to the left and click the APPLY
button.

Page 196 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Firewall
In this menu you can configure the firewall of the router:
• add rules for IP filtering
• create virtual servers
• define a DMZ
• configure the MAC filter
• specify restrictions on access to certain web sites
• enable the function of blocking advertisements.

IP Filter
On the Firewall / IP Filter page, you can create new rules for filtering IP packets and edit or
remove existing rules.

Figure 152. The Firewall / IP Filter page.

To create a new rule, click the ADD button ( ).

Page 197 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 153. The page for adding a rule for IP filtering.

You can specify the following parameters:

Parameter Description

General Settings

Move the switch to the right to enable the rule.

Enable rule
Move the switch to the left to disable the rule.

A name for the rule for easier identification. You can specify any
Name
name.

Select an action for the rule.

• Allow: Allows packet transmission in accordance with the
Action criteria specified by the rule.
• Deny: Denies packet transmission in accordance with the
criteria specified by the rule.

Page 198 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

A protocol for network packet transmission. Select a value from the

Protocol
drop-down list.

An IP version to which the rule will be applied. Select the relevant

IP version
value from the drop-down list.

The direction of network packet transmission to which the rule will

be applied. Select the relevant value from the drop-down list.
• LAN to WAN: The rule will be applied to the packets
transmitted from the local network to the external network.
Direction
• WAN to LAN: The rule will be applied to the packets
transmitted from the external network to the local network.
• LAN to Router: The rule will be applied to the packets
transmitted from the local network to DIR-878.

Source IP Address

Set as Select the needed value from the drop-down list.

The source host start IPv4 or IPv6 address.

If it is necessary to specify a single address, leave the End IPv4
Start IPv4 address / address / End IPv6 address field blank.
Start IPv6 address You can choose a device connected to the router's LAN at the
moment. To do this, select the relevant IPv4 or IPv6 address from the
drop-down list (the field will be filled in automatically).

End IPv4 address /

The source host end IPv4 or IPv6 address.
End IPv6 address

Subnet IPv4 address / The source subnet IPv4 or IPv6 address. The field is displayed when
Subnet IPv6 address the Subnet value is selected from the Set as drop-down list.

Destination IP Address

Set as Select the needed value from the drop-down list.

The destination host start IPv4 or IPv6 address.

If it is necessary to specify a single address, leave the End IPv4
Start IPv4 address / address / End IPv6 address field blank.
Start IPv6 address You can choose a device connected to the router's LAN at the
moment. To do this, select the relevant IPv4 or IPv6 address from the
drop-down list (the field will be filled in automatically).

End IPv4 address /

The destination host end IPv4 or IPv6 address.
End IPv6 address

Page 199 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Subnet IPv4 address / The destination subnet IPv4 or IPv6 address. The field is displayed
Subnet IPv6 address when the Subnet value is selected from the Set as drop-down list.

Ports

A port of the destination IP address. You can specify one port,

Destination port several ports separated by a comma, or a range of ports separated by
a colon.

Set source port Move the switch to the right to specify a port of the source IP
manually address manually. Upon that the Source port field is displayed.

A port of the source IP address. You can specify one port, several
Source port
ports separated by a comma, or a range of ports separated by a colon.
Click the APPLY button.
To set a schedule for the IP filter rule, click the Set schedule button ( ) in the line
corresponding to this rule. In the opened window, you can create a new schedule (see the Schedule
section, page 218) or use the existing one. Existing schedules are displayed in the Interval of
execution drop-down list in the simplified mode.
To enable the IP filter rule at the time specified in the schedule and disable it at the other time,
select the Enable rule value from the Action drop-down list and click the SAVE button.
To disable the IP filter rule at the time specified in the schedule and enable it at the other time,
select the Disable rule value from the Action drop-down list and click the SAVE button.
To edit a rule, select the relevant line in the table. In the opened window, change the needed
parameters and click the APPLY button.
To change or delete the schedule for a rule, click the Edit schedule button ( ) in the line
corresponding to this rule. In the opened window, change the parameters and click the SAVE button
or click the DELETE FROM SCHEDULE button.
To remove a rule, select the checkbox located to the left of the relevant line of the table and click
the DELETE button ( ). Also you can remove a rule in the editing window.

Page 200 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Virtual Servers
On the Firewall / Virtual Servers page, you can create virtual servers for redirecting incoming
Internet traffic to a specified IP address in the local area network.

Figure 154. The Firewall / Virtual Servers page.

To create a new virtual server, click the ADD button ( ).

Figure 155. The page for adding a virtual server.

Page 201 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

You can specify the following parameters:

Parameter Description

General Settings

A name for the virtual server for easier identification. You can
Name
specify any name.

Select a virtual server template from the drop-down list, or select

Template Custom to specify all parameters of the new virtual server
manually.

Interface A WAN connection to which this virtual server will be assigned.

A protocol that will be used by the new virtual server. Select a value
Protocol
from the drop-down list.

Move the switch to the right in order to let the users of the router's
LAN access the local server using the external IP address of the
NAT Loopback router or its DDNS name (if a DDNS service is configured). Users
from the external network access the router using the same address
(or DDNS name).
Public Network Settings

Enter the IP address of the server from the external network.

To add one more IP address, click the ADD REMOTE IP button and
Remote IP enter the address in the displayed line.
To remove the IP address, click the Delete icon ( ) in the line of
the address.

A port of the router from which traffic is directed to the IP address

specified in the Private IP field in the Private Network Settings
Public port
section. You can specify one port or several ports separated by a
comma.

Private Network Settings

The IP address of the server from the local area network. To choose
a device connected to the router's LAN at the moment, select the
Private IP
relevant value from the drop-down list (the field will be filled in
automatically).

A port of the IP address specified in the Private IP field to which

Private port traffic is directed from the Public port. You can specify one port or
several ports separated by a comma.
Click the APPLY button.

Page 202 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To edit the parameters of an existing server, select the relevant line in the table. On the opened page,
change the needed parameters and click the APPLY button.
To remove a server, select the checkbox located to the left of the relevant line of the table and click
the DELETE button ( ). Also you can remove a server on the editing page.

Page 203 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

DMZ
A DMZ is a host or network segment located “between” internal (local) and external (global)
networks. In the router, the DMZ implements the capability to transfer a request coming to a port of
the router from the external network to a specified host of the internal network.
On the Firewall / DMZ page, you can specify the IP address of the DMZ host.

Figure 156. The Firewall / DMZ page.

To enable the DMZ, move the Enable switch to the right.
Enter the IP address of a host from your network in the IP address field. To choose a device
connected to the router's LAN at the moment, select the relevant value from the drop-down list (the
field will be filled in automatically).
Move the Enable NAT Loopback switch to the right in order to let the users of the router's LAN
access the DMZ host using the external IP address of the router or its DDNS name (if a DDNS
service is configured). Users from the external network access the router using the same address (or
DDNS name).
Click the APPLY button.
Note that when the DMZ is enabled, all traffic coming to a port of the WAN interface of the router
is directed to the same port of the specified IP address. Also note that virtual servers have higher
priority than the DMZ host. In other words, if there has been created a virtual server that directs
traffic from external port 80 to a port of the device from the router's local network, then entering
http://router_WAN_IP in the address bar, users of the external network are directed to the
specified port and IP address configured for the virtual server, but not to port 80 of the device with
the IP address specified on the Firewall / DMZ page.
To disable the DMZ, move the Enable switch to the left and click the APPLY button.

Page 204 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

MAC Filter
On the Firewall / MAC Filter page, you can configure MAC-address-based filtering for computers
of the router's LAN.

Figure 157. The Firewall / MAC Filter page.

Select the needed action from the drop-down list in the Default mode section to configure
filtering for all devices of the router's network:
• Allow: Allows access to the router's network and to the Internet for devices (the value is
specified by default);
• Deny: Blocks access to the router's network for devices.

! You can use the Deny mode only if an active rule which allows access to the device's
network is created on the page.

To create a rule (specify a MAC address of a device for which the specified filtering mode will be
applied), click the ADD button ( ).

Figure 158. The window for adding a rule for the MAC filter.

Page 205 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the opened window, you can specify the following parameters:

Parameter Description

Move the switch to the right to enable the rule.

Enable rule
Move the switch to the left to disable the rule.

Select an action for the rule.

• Deny: Blocks access to the Internet for the device with the
specified MAC address even if the default mode allows
Action access for all devices.
• Allow: Allows access to the router's network and to the
Internet for the device with the specified MAC address even
if the default mode denies access for all devices.

The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
MAC address
moment. To do this, select the relevant device from the drop-down
list (the field will be filled in automatically).

The name of the device for easier identification. You can specify
Name
any name.

After specifying the needed parameters, click the SAVE button.

To set a schedule for the MAC filter rule, click the Set schedule button ( ) in the line
corresponding to this rule. In the opened window, you can create a new schedule (see the Schedule
section, page 218) or use the existing one. Existing schedules are displayed in the Interval of
execution drop-down list in the simplified mode.
To enable the MAC filter rule at the time specified in the schedule and disable it at the other time,
select the Enable rule value from the Action drop-down list and click the SAVE button.
To disable the MAC filter rule at the time specified in the schedule and enable it at the other time,
select the Disable rule value from the Action drop-down list and click the SAVE button.
To edit a rule, select the relevant line in the table. In the opened window, change the needed
parameters and click the SAVE button.
To change or delete the schedule for a rule, click the Edit schedule button ( ) in the line
corresponding to this rule. In the opened window, change the parameters and click the SAVE button
or click the DELETE FROM SCHEDULE button.
To remove a rule, select the checkbox located to the left of the relevant line of the table and click
the DELETE button ( ). Also you can remove a rule in the editing window.

Page 206 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

URL Filter
On the Firewall / URL Filter page, you can specify restrictions on access to certain web sites and
define devices to which the specified restrictions will be applied.

Figure 159. The Firewall / URL Filter page.

To enable the URL filter, move the Enable switch to the right, then select a mode from the
Address filtering drop-down list:
• Block listed URLs: when this value is selected, the router blocks access to all web sites
specified in the Addresses section;
• Block all URLs except listed: when this value is selected, the router allows access to
web sites specified in the Addresses section and blocks access to all other web sites.

Page 207 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To specify URL addresses to which the selected filtering mode will be applied, in the Addresses
section, click the ADD button ( ). In the opened window, you can specify the following
parameters:

Parameter Description

URL address A URL address, a part of URL address, or a keyword.

Select a value from the drop-down list.

• Full: The request address should exactly match the value
specified in the field above.
• Begin: The request address should begin with the value
Match with template specified in the field above.
• End: The request address should end with the value
specified in the field above.
• Partly: The request address should contain the value
specified in the field above in any part of it.

Click the SAVE button.

To remove a URL address from the list, select the checkbox located to the left of the relevant
address in the table and click the DELETE button ( ). Also you can remove an address in the
editing window.
In the Clients section, you can define devices to which the specified restrictions will be applied.
Select a needed value from the Client filtering drop-down list:
• Devices from list: when this value is selected, the router applies restrictions only to the
devices specified in the Clients section;
• All but devices from list: when this value is selected, the router does not apply
restrictions to the devices specified in the Clients section, but applies restrictions to other
devices.
To add a client to the list, in the Clients section, click the ADD button ( ). In the opened
window, in the MAC address field, enter the MAC address of the device from the LAN. You can
enter the MAC address of a device connected to the router’s LAN at the moment. To do this, select
the relevant device from the drop-down list (the field will be filled in automatically) and click the
SAVE button.
To remove a client from the list, select the checkbox located to the left of the relevant rule of the
table and click the DELETE button ( ). Also you can remove a client in the editing window.
After completing configuration of the URL filter, click the APPLY button.
To set a schedule for the URL filter, click the Set schedule button ( ). In the opened window,
you can create a new schedule (see the Schedule section, page 218) or use the existing one. Existing
schedules are displayed in the Interval of execution drop-down list in the simplified mode.

Page 208 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To enable the URL filter for the time specified in the schedule and disable it at the other time, select
the Enable rule value from the Action drop-down list and click the SAVE button.
To disable the URL filter for the time specified in the schedule and enable it at the other time, select
the Disable rule value from the Action drop-down list and click the SAVE button.
To change or delete the schedule for URL filter, click the Edit schedule button ( ) in the URL
Filter section. In the opened window, change the parameters and click the SAVE button or click the
DELETE FROM SCHEDULE button.

Page 209 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

AdBlock
On the Firewall / AdBlock page, you can enable the function of blocking advertisements which
appear during web surfing.

Figure 160. The Firewall / AdBlock page.

To enable the advertisements blocking function, in the Common Settings section, move the
Enable switch to the right. Then in the URL section, click the ADD button and in the line
displayed, enter a URL address of a file containing the list of advertising web sites which should be
blocked. Click the APPLY button and wait while the file is being loaded to the device’s memory.

Files saved to the device’s memory are updated upon every reboot of the router or its or
! firmware update. In case the file is not available at that moment, the list of web sites to be
blocked will not be received.

If you don't want to use a file for blocking advertisements any longer, click the Delete icon ( ) in
the line of the URL address of the relevant file. Then click the APPLY button.
To disable the advertisements blocking function, move the Enable switch to the left and click the
APPLY button.

Page 210 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

System
In this menu you can do the following:
• change the password used to access the router's settings
• restore the factory default settings
• create a backup of the router's configuration
• restore the router's configuration from a previously saved file
• save the current settings to the non-volatile memory
• reboot the router
• change the web-based interface language
• update the firmware of the router
• configure automatic notification on new firmware version
• enable/disable Wi-Fi connection and configure automatic reboot of the device on a schedule,
and set a schedule for different filter rules
• view the system log; configure sending the system log to a remote host
• check availability of a host on the Internet through the web-based interface of the router
• trace the route to a host
• allow or forbid access to the access point via TELNET and SSH
• configure automatic synchronization of the system time or manually configure the date and
time for the router
• enable the Auto Provision function.

Page 211 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Configuration
On the System / Configuration page, you can change the password for the administrator account
used to access the web-based interface of the router and to access the device settings via TELNET
and SSH, restore the factory defaults, backup the current configuration, restore the router's
configuration from a previously created file, save the changed settings to the non-volatile memory,
reboot the device, or change the web-based interface language.

Figure 161. The System / Configuration page.

In order to change the password for the administrator account, in the User section, enter a new
password in the New password and Password confirmation fields. Use digits, Latin letters
(uppercase and/or lowercase), and other characters available in the US keyboard layout. 11 Click the
Show icon ( ) to display the entered values. Then click the SAVE button.

Remember or write down the new password for the administrator account. In case of losing

! the new password, you can access the settings of the router only after restoring the factory
default settings via the hardware RESET button. This procedure wipes out all settings that
you have configured for your router.

To change the web-based interface language, select the needed value from the Language drop-
down list.

11 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 212 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

The following buttons are also available on the page:

Control Description

Click the button to restore the factory default settings. Also you can
Factory restore the factory defaults via the hardware RESET button (see the
Back Panel section, page 15).

Click the button to save the configuration (all settings of the router)
Backup to your PC. The configuration backup will be stored in the
download location of your web browser.

Click the button and follow the dialog box appeared to select a
Restore previously saved configuration file (all settings of the router)
located on your PC and upload it.

Click the button to save settings to the non-volatile memory.

The router saves changed settings automatically. If changed settings
Save
have not been saved automatically, a notification is displayed in the
top right part of the page.

Click the button to reboot the device. All unsaved changes will be
Reboot
lost after the device's reboot.
In the Idle time field specify a period of inactivity (in minutes) after which the router completes
the session of the interface. By default, the value 5 is specified. Then click the SAVE button.

Page 213 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Firmware Update
On the System / Firmware Update page, you can update the firmware of the router and
configure the automatic check for updates of the router's firmware.

! Update the firmware only when the router is connected to your PC via a wired
connection.

Figure 162. The System / Firmware Update page.

The current version of the router's firmware is displayed in the Current firmware version field.
By default, the automatic check for the router's firmware updates is enabled. If the Access point
or Repeater mode was selected in the Initial Configuration Wizard and the Static value is
selected from the Mode of local IP address assignment list on the Connections Setup /
LAN page, the Gateway IP address field should also be filled in on order to realize automatic
check.
If a firmware update is available, a notification will be displayed in the top right corner of the page.
To disable the automatic check for firmware updates, in the Remote Update section, move the
Check for updates automatically switch to the left and click the APPLY SETTINGS button.
To enable the automatic check for firmware updates, in the Remote Update section, move the
Check for updates automatically switch to the right. In the Interval field, specify the time
period (in seconds) between checks or leave the value specified by default (43200).

Page 214 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

By default, in the Remote server URL field, the D-Link update server address
(fwupdate.dlink.ru) is specified. To add one more address, click the ADD button and enter
the address in the displayed line. To remove the address, click the Delete icon (   ) in the line of
the address.
Click the APPLY SETTINGS button.
You can update the firmware of the router locally (from the hard drive of your PC) or remotely
(from the update server).

Page 215 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Local Update

! Attention! Do not turn off the router before the firmware update is completed. This may
cause the device breakdown.

To update the firmware of the router locally, follow the next steps:
1. Download a new version of the firmware from www.dlink.ru.
2. Click the CHOOSE FILE button in the Local Update section on the System /
Firmware Update page to locate the new firmware file.
3. If you want to restore the factory default settings immediately after updating the firmware,
move the Restore factory defaults after firmware update switch to the right.
4. Click the UPDATE FIRMWARE button.
5. Wait until the router is rebooted (about one and a half or two minutes).
6. Log into the web-based interface using the login (admin) and the current password.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, click the Factory button on the System / Configuration page. Wait until the
router is rebooted.

Page 216 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Remote Update

! Attention! Do not turn off the router before the firmware update is completed. This may
cause the device breakdown.

To update the firmware of the router remotely, follow the next steps:
1. On the System / Firmware Update page, in the Remote Update section, click the
CHECK FOR UPDATES button to check if a newer firmware version exists.
2. Click the UPDATE FIRMWARE button (the button is displayed if a newer version of the
firmware is available).
3. Wait until the router is rebooted (about one and a half or two minutes).
4. Log into the web-based interface using the login (admin) and the current password.
If after updating the firmware the router doesn't work correctly, please restore the factory default
settings. To do this, click the Factory button on the System / Configuration page. Wait until the
router is rebooted.

Page 217 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Schedule
On the System / Schedule page, you can enable/disable Wi-Fi connection and configure
automatic reboot of the device on a schedule, and set a schedule for different filter rules.

! Before creating a schedule you need to configure automatic synchronization of the system
time with a time server on the Internet(see the System Time section, page 229).

Figure 163. The System / Schedule page.

To configure automatic reboot of the device on a schedule, click the REBOOT ON SCHEDULE
button in the Auto Reboot section.

Figure 164. The window for configuring automatic reboot on a schedule.

Page 218 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the opened window, in the System Time field, the system time of the device is displayed. You
can select the Simplified mode choice of the radio button and specify the following parameters:

Parameter Description

Simplified mode

Specify the time period for the device's reboot.

Every day: When this value is selected, the Time field is displayed
in the section.
Interval of execution Every week: When this value is selected, the names of days of the
week and the Time field are displayed in the section.
Every month: When this value is selected, the Day of month and
Time fields are displayed in the section.

Time Specify the time for the device's reboot.

Select a day or days of the week when the device will be

Days of week automatically rebooted. To do this, select the checkbox located to the
left of the relevant value.

Specify a day of the month. You can specify one value or several
Day of month
values separated by a comma.
In the advanced mode, you can specify more parameters for the schedule using a cron expression.
To do this, select the Advanced mode choice of the radio button and specify the needed values in
the fields displayed. You can specify one value or several values separated by a comma. You can
use the character * (asterisk) to specify the entire range of possible values. Upon that the Schedule
field will be filled in automatically.
Click the SAVE button.
To edit the automatic reboot schedule, click the EDIT button in the Auto Reboot section. In the
opened window, change the needed parameters and click the SAVE button.
To disable automatic reboot of the device on a schedule, click the EDIT button in the Auto
Reboot section. In the opened window, click the DISABLE button.

Page 219 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To set a schedule for a task which will be applied to a filter rule or will enable/disable Wi-Fi
connection, click the ADD button ( ) in the All Tasks section.

Figure 165. The window for adding a schedule for a task.

In the opened window, in the System Time field, the system time of the device is displayed. You
can select the Simplified mode choice of the radio button and specify the following parameters:

Parameter Description

Perform task on Move the switch to the right to enable the schedule.
schedule Move the switch to the left to disable the schedule.

Page 220 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

Simplified mode

Specify the time period for performing a task.

Every minute.
Every hour: When this value is selected, the Time field is
displayed in the section.
Every day: When this value is selected, the Time field is displayed
Interval of execution
in the section.
Every week: When this value is selected, the names of days of the
week and the Time field are displayed in the section.
Every month: When this value is selected, the Day of month and
Time fields are displayed in the section.

Duration Specify the interval during which the task will be performing.

Time Specify the time when the task should start running.

Select a day or days of the week when the task will be performing.
Days of week To do this, select the checkbox located to the left of the relevant
value.

Specify a day of the month. You can specify one value or several
Day of month
values separated by a comma.
In the advanced mode, you can specify more parameters for the schedule using a cron expression.
To do this, select the Advanced mode choice of the radio button and specify the needed values in
the fields displayed. You can specify one value or several values separated by a comma. You can
use the character * (asterisk) to specify the entire range of possible values. Upon that the Schedule
field will be filled in automatically.
Click the SAVE button.
To edit a schedule, in the All Tasks section, select the relevant line in the table. In the opened
window, change the needed parameters and click the SAVE button.
To remove a schedule, in the All Tasks section, select the checkbox located to the left of the
relevant line in the table and click the DELETE button ( ).
To assign a created schedule to a task which will be applied to a filter rule or will enable/disable
Wi-Fi connection, go to the relevant page of the web-based interface of the device.

Page 221 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Log
On the System / Log page, you can set the system log options and configure sending the system
log to a remote host.

Figure 166. The System / Log page. The Settings tab.

To enable logging of the system events, go to the Settings tab and move the Enable switch to the
right. Then specify the needed parameters.

Parameter Description

Select a type of logging from the drop-down list.

• Local: the system log is stored in the router's memory. When
this value is selected, the Server and Port fields are not
displayed.
Type • Remote: the system log is sent to the remote host specified in
the Server field.
• Remote and local: the system log is stored in the router's
memory and sent to the remote host specified in the Server
field.

Level Select a type of messages and alerts/notifications to be logged.

The IP or URL address of the host from the local or global network,
Server
to which the system log will be sent.

Page 222 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

A port of the host specified in the Server field. By default, the value
Port
514 is specified.

After specifying the needed parameters, click the APPLY button.

To disable logging of the system events, move the Enable switch to the left and click the APPLY
button.
To view the system log, go to the Log tab.

Figure 167. The System / Log page. The Log tab.

To view the latest system events, click the REFRESH button.
To save the system log to your PC, click the EXPORT button. The file will be stored in the
download location of your web browser.

Page 223 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Ping
On the System / Ping page, you can check availability of a host from the local or global network
via the Ping utility.
The Ping utility sends echo requests to a specified host and receives echo replies.

Figure 168. The System / Ping page.

To check availability of a host, enter the IP address or name of this host in the Host field and
specify a number of requests that will be sent in order to check its availability in the Count of
packets field. If availability check should be performed with IPv6, move the IPv6 switch to the
right.
To specify additional settings, click the MORE SETTINGS button.

Page 224 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Figure 169. The System / Ping page. The additional settings window.
In the opened window, in the Packet size field, specify the volume of data sent in a request. In the
Time to wait for a response field, specify the response waiting period in seconds. To restore the
default field values, click the DEFAULT SETTINGS button.
After specifying the additional parameters, click the OK button.
To run the check, click the START button. After a while, the results will be displayed on the page.
If you need to interrupt the check, click the CANCEL button (the button is available from the
moment the check starts).
To remove the check result from the page, click the CLEAR button.

Page 225 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Traceroute
On the System / Traceroute page, you can determine the route of data transfer to a host via the
traceroute utility.

Figure 170. The System / Traceroute page.

To determine the route, enter the name or IP address of a host in the Host field. If the route should
be determined using IPv6, move the IPv6 switch to the right.

Page 226 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To specify additional settings, click the MORE SETTINGS button.

Figure 171. The System / Traceroute page. The additional settings window.
In the opened window, you can specify the following parameters:

Parameter Description

Specify the TTL (Time to live) parameter value. The default value is
Maximum TTL value
30.

Number of probes The number of attempts to hit an intermediate host.

Wait time A period of waiting for an intermediate host response.

To restore the default field values, click the DEFAULT SETTINGS button.
After specifying the additional parameters, click the OK button.
To run the check, click the START button. After a while, the results will be displayed on the page.
If you need to interrupt the check, click the CANCEL button (the button is available from the
moment the check starts).
To remove the check result from the page, click the CLEAR button.

Page 227 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Telnet/SSH
On the System / Telnet/SSH page, you can enable or disable access to the device settings via
TELNET and/or SSH from your LAN. By default, access is disabled.

Figure 172. The System / Telnet/SSH page.

To enable access via TELNET and/or SSH, move the Enable Telnet switch and/or Enable SSH
switch to the right. In the Port field, enter the number of the access point's port through which
access will be allowed (by default, the port 23 is specified for Telnet and the port 22 is specified
for SSH). Then click the APPLY button.
To disable access via TELNET and/or SSH again, move the Enable Telnet switch and/or Enable
SSH switch to the left and click the APPLY button.

Page 228 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

System Time
On the System / System Time page, you can manually set the time and date of the router or
configure automatic synchronization of the system time with a time server on the Internet.

Figure 173. The System / System Time page.

To set the system time manually, follow the next steps:
1. Move the Enable NTP switch to the left.
2. In the Time Settings section, specify needed values. To specify the time set up your PC or
portable device, click the SET LOCAL TIME button.
3. Click the APPLY button. The System date and System time fields will be filled in
automatically.

Page 229 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

To enable automatic synchronization with a time server, follow the next steps:
1. Move the Enable NTP switch to the right.
2. Specify the needed NTP server or leave the value specified by default in the NTP Servers
section. If you need to specify several servers, click the ADD SERVER button.
3. Select your time zone from the Main time zone drop-down list. To set the time zone in
accordance with the settings of your operating system or portable device, click the
DETERMINE TIMEZONE button.
4. Click the APPLY button. The System date and System time fields will be filled in
automatically.
In some cases NTP servers addresses are provided by your ISP. In this case, you need to move the
Get NTP server addresses using DHCP switch to the right and click the APPLY button.
Contact your ISP to clarify if this setting needs to be enabled. If the Get NTP server addresses
using DHCP switch is moved to the right, the NTP Servers section is not displayed.
To allow connected devices to use the IP address of the router in the local subnet as a time server,
move the Run as a server for the local network switch to the right and click the APPLY
button.

When the router is powered off or rebooted, the system time is reset to the default value.

! If you have set automatic synchronization for the system time, the internal clock of the
device will be configured after connecting to the Inter net. If you have set the system time
manually, you need to set the time and date again (see above).

Page 230 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Auto Provision
On the System / Auto Provision page, you can enable the Auto Provision function.
The Auto Provision function allows your ISP to manage the device’s settings remotely: DIR-878
connects to the ISP’s server, compares the current configuration file with the configuration file
stored on this server, and updates its settings if the files are different.

Figure 174. The page for configuring the Auto Provision function.
You can specify the following parameters:

Parameter Description

Move the switch to the right to enable the Auto Provision function.
Enable Auto Provision
Move the switch to the left to disable the Auto Provision function.

If the switch is moved to the right, the parameters of your ISP's

server (the address, the location of the configuration file, and the
protocol) are automatically specified using DHCP options 66 and
Use BOOTP option 67. Upon that a connection of the Dynamic IPv4 type should be
configured on the Connections Setup / WAN page.
If the switch is moved to the left, the parameters of your ISP's server
should be specified manually.

Autoconfiguration The IP or URL address of your ISP's server where the configuration
server address file is stored.

Page 231 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Parameter Description

File name The location of the configuration file on the ISP's server.

A time period (in seconds) between attempts to compare the current

File check period
configuration file with the configuration file on the ISP's server.

A protocol for communication with the ISP's server where the

Protocol type
configuration file is stored.

After specifying the needed parameters, click the APPLY button.

If you need to check manually if the current configuration file corresponds to the configuration file
on the ISP's server, click the CHECK STATUS button. The check result will be displayed in the
Status field. If the files are different, the device’s settings will be updated.

Page 232 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Yandex.DNS
This menu is designed to configure the Yandex.DNS service.
Yandex.DNS is a web content filtering service which provides the DNS server, protects a computer
against malicious web sites, and blocks access to adult web sites.

Settings
On the Yandex.DNS / Settings page, you can enable the Yandex.DNS service and configure its
operating mode.

Figure 175. The Yandex.DNS / Settings page.

To get detailed information on the service, click the About Yandex.DNS link.
To enable the Yandex.DNS service, move the Enable switch to the right.

Page 233 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

When the service is enabled, the Default Mode section is displayed on the page. Select the needed
choice of the radio button to configure filtering for all devices of the router's network:
• Protection off: when this value is selected, the service provides the DNS server with no
restrictions on access to unsafe web sites;
• Safe: when this value is selected, the service blocks access to malicious and fraudulent web
sites;
• Child: when this value is selected, the service blocks access to malicious and fraudulent
web sites and blocks access to adult content.
Also the selected filtering mode will be applied to all devices newly connected to the router's
network.
After specifying all needed parameters, click the APPLY button.
To disable the Yandex.DNS service, move the Enable switch to the left and click the APPLY
button.

Page 234 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Devices and Rules

On the Yandex.DNS / Devices and Rules page, you can specify a filtering mode for each
device separately.

Figure 176. The Yandex.DNS / Devices and Rules page.

In the Known Clients section, the devices connected to the local network of the router at the
moment and their relevant filtering mode are displayed.
To create a new filtering rule for a device, click the ADD button ( ) in the Rules section, or left-
click the name of the filtering mode in the line of the device for which a rule should be created in
the Known Clients section.

Figure 177. Adding a new rule for the Yandex.DNS service.

Page 235 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the opened window, you can specify the following parameters:

Parameter Description

The MAC address of a device from the router's LAN. You can enter
the MAC address of a device connected to the router's LAN at the
MAC address
moment. To do this, select the relevant device from the drop-down
list (the field will be filled in automatically).

Name Enter a name for the rule for easier identification. Optional.

Select an operating mode of the Yandex.DNS service for this rule.

• Protection off: when this value is selected, the service
provides the DNS server with no restrictions on access to
unsafe web sites.
Mode • Safe: when this value is selected, the service blocks access
to malicious and fraudulent web sites.
• Child: when this value is selected, the service blocks access
to malicious and fraudulent web sites and blocks access to
adult content.

After specifying the needed parameters, click the SAVE button.

To edit a rule for filtering, select a relevant line of the table, in the opened window, change the
needed values and click the SAVE button.
To remove a rule for filtering, select the checkbox located to the left of the relevant rule and click
the DELETE button ( ). Also you can remove a rule in the editing window.
After completing the work with rules, click the APPLY button.

Page 236 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

SkyDNS
This menu is designed to configure the SkyDNS service.
SkyDNS is a web content filtering service which provides protection against malicious web sites for
devices connected to the router's network, and also allows to configure filtering, block access to
adult web sites, and use search engines safely. In order to use the service, first register an account
on the SkyDNS service web site.

Page 237 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Settings
On the SkyDNS / Settings page, you can enable the SkyDNS service and specify settings for its
operation.

! The SkyDNS service is unavailable when the Yandex.DNS service is enabled.

Figure 178. The SkyDNS / Settings page.

To enable the SkyDNS service, click the ENABLE button. Then in the Mail and Password fields,
enter the account data (the e-mail address and the password correspondingly) specified upon
registration on the SkyDNS service web site. Click the APPLY button. The account data
(authorization status, the tariff used) and the Default profile drop-down list will be displayed on
the page. If needed, from the Default profile list, select another filtering profile which will be
used for all devices of your LAN and click the APPLY button again.
The default filtering profile will be applied to all devices newly connected to the router's network.
To change the parameters of your account on the SkyDNS service web site, click the Go to
personal profile page link.

Page 238 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

By default, the account parameters are automatically synchronized with the SkyDNS service web
site once an hour. To start synchronization manually, click the MANUALLY SYNC button.
To use another account, specify its data in the Mail and Password fields and click the APPLY
button.
To disable the SkyDNS service, click the DISABLE button.

Page 239 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

Devices
On the SkyDNS / Devices page, you can assign a specific filtering profile to a device connected
to the router's network.

Figure 179. The SkyDNS / Devices page.

In the Known Clients section, the devices connected to the local network of the router at the
moment and their relevant filtering profile are displayed.
To assign a specific filtering profile for a device, click the ADD button ( ) in the Device List
section or left-click the name of the filtering profile in the line of the device for which a profile
should be assigned in the Known Clients section.

Figure 180. The SkyDNS / Devices page. The window for adding a rule.

Page 240 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Configuring via Web-based Interface
User Manual

In the opened window, specify the following parameters:

Parameter Description

The MAC address of a device from the router's LAN to which the
specified filtering profile will be applied. You can enter the MAC
MAC address address of a device connected to the router's LAN at the moment. To
do this, select the relevant device from the drop-down list (the field
will be filled in automatically).

Select the filtering profile which will be used for the device with the
Profile
specified MAC address from the drop-down list.

Hostname Enter a name for the rule for easier identification. Optional.

After specifying the needed parameters, click the SAVE button.

To edit a rule, select the relevant line in the table. In the opened window, change the needed
parameters and click the SAVE button.
To remove a rule, select the checkbox located to the left of the relevant line of the table and click
the DELETE button ( ).

Page 241 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Operation Guidelines
User Manual

CHAPTER 5. OPERATION GUIDELINES

Safety Rules and Conditions
Please carefully read this section before installation and connection of the device. Make sure that
the power adapter and cables are not damaged. The device should be used only as intended in
accordance with the documents.
The device is intended for use in dry, clean, dust-free, and well ventilated areas with normal
humidity away from strong heat sources. Do not use the device outdoors or in the areas with high
humidity. Do not place foreign objects on the device. Do not obstruct the ventilation openings of the
device. The environmental temperature near the device and the temperature inside the device's
cover should be within the range from 0 °С to +40 °С.
Only use the power adapter supplied with the device. Do not plug in the adapter, if its case or cable
are damaged. Plug the adapter only into working electrical outlets with parameters indicated on the
adapter.
Do not open the cover of the device! Unplug the device before dusting and cleaning. Use a damp
cloth to clean the device. Do not use liquid/aerosol cleaners or magnetic/static cleaning devices.
Prevent moisture getting into the device or the power adapter.
The service life of the device is 2 years.

Page 242 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Operation Guidelines
User Manual

Wireless Installation Considerations

The DIR-878 device lets you access your network using a wireless connection from virtually
anywhere within the operating range of your wireless network. Keep in mind, however, that the
number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass
through, may limit the range. Typical ranges vary depending on the types of materials and
background RF noise in your home or office. To maximize your wireless range, follow the
guidelines below.
1. Keep the number of walls and ceilings between the DIR-878 device and other network
devices to a minimum – each wall or ceiling can reduce your wireless network range by 3-
90 feet (1-30 meters).
2. Be aware of the direct line between network devices. Place your devices so that the signal
travels straight through a wall or ceiling (instead of at an angle) for better reception.
3. Building materials make a difference. A solid metal door or aluminum studs may have a
negative effect on your wireless range. Try to position your router, access points, and
computers so that the signal passes through drywalls or open doorways. Materials and
objects such as glass, steel, metal, walls with insulation, water (fish tanks), mirrors, file
cabinets, brick, and concrete will degrade your wireless signal.
4. Keep your router away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances
that generate RF noise.
5. If you are using 2.4 GHz cordless phones or X-10 equipment (wireless devices such as
ceiling fans, lights, and home security systems), your wireless connection may degrade
dramatically or drop completely. Make sure your 2.4 GHz phone base is as far away from
your wireless devices as possible. Note, that the base transmits a signal even if the phone in
not in use.

Page 243 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Abbreviations and Acronyms
User Manual

CHAPTER 6. ABBREVIATIONS AND ACRONYMS

3G Third Generation

AC Access Category

AES Advanced Encryption Standard

AP Access Point

ARP Address Resolution Protocol

BPSK Binary Phase-shift Keying

BSSID Basic Service Set Identifier

CCK Complementary Code Keying

CHAP Challenge Handshake Authentication Protocol

DBSK Differential Binary Phase-shift Keying

DDNS Dynamic Domain Name System

DDoS Distributed Denial of Service

DES Data Encryption Standard

DHCP Dynamic Host Configuration Protocol

DMZ DeMilitarized Zone

DNS Domain Name System

DPD Dead Peer Detection

DQPSK Differential Quadrature Phase-shift Keying

DSL Digital Subscriber Line

DSSS Direct-sequence Spread Spectrum

DTIM Delivery Traffic Indication Message

EoGRE Ethernet over Generic Routing Encapsulation

GMT Greenwich Mean Time

GRE Generic Routing Encapsulation

GSM Global System for Mobile Communications

Page 244 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Abbreviations and Acronyms
User Manual

HTTP Hypertext Transfer Protocol

HTTPS Hypertext Transfer Protocol Secure

ICMP Internet Control Message Protocol

ID Identifier

IGD Internet Gateway Device

IGMP Internet Group Management Protocol

IKE Internet Key Exchange

IMEI International Mobile Equipment Identity

IMSI International Mobile Subscriber Identity

IP Internet Protocol

IPTV Internet Protocol Television

IPsec Internet Protocol Security

ISP Internet Service Provider

L2TP Layer 2 Tunneling Protocol

LAN Local Area Network

LCP Link Control Protocol

LED Light-emitting diode

LTE Long Term Evolution

MAC Media Access Control

MBSSID Multiple Basic Service Set Identifier

MIB Management Information Base

MIMO Multiple Input Multiple Output

MPPE Microsoft Point-to-Point Encryption

MS-CHAP Microsoft Challenge Handshake Authentication Protocol

MTU Maximum Transmission Unit

NAT Network Address Translation

Page 245 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Abbreviations and Acronyms
User Manual

NIC Network Interface Controller

NTP Network Time Protocol

OFDM Orthogonal Frequency Division Multiplexing

PAP Password Authentication Protocol

PBC Push Button Configuration

PFS Perfect Forward Secrecy

PIN Personal Identification Number

PoE Power over Ethernet

PPP Point-to-Point Protocol

pppd Point-to-Point Protocol Daemon

PPPoE Point-to-point protocol over Ethernet

PPTP Point-to-point tunneling protocol

PSK Pre-shared key

PUK PIN Unlock Key

QAM Quadrature Amplitude Modulation

QoS Quality of Service

QPSK Quadrature Phase-shift Keying

RADIUS Remote Authentication in Dial-In User Service

RIP Routing Information Protocol

RIPng Next Generation Routing Information Protocol

RTS Request To Send

RTSP Real Time Streaming Protocol

SA Security Association

SAE Simultaneous Authentication of Equals

SIM Subscriber Identification Module

SIP Session Initiation Protocol

Page 246 of 247

DIR-878 AC2600 MU-MIMO Wi-Fi Gigabit Router
Abbreviations and Acronyms
User Manual

SMB Server Message Block

SNMP Simple Network Management Protocol

SSH Secure Shell

SSID Service Set Identifier

STBC Space-time block coding

TCP Transmission Control Protocol

TKIP Temporal Key Integrity Protocol

UAM Universal Access Method

UDP User Datagram Protocol

UPnP Universal Plug and Play

URL Uniform Resource Locator

USB Universal Serial Bus

VLAN Virtual Local Area Network

VPN Virtual Private Network

VRID Virtual Router Identifier

VRRP Virtual Router Redundancy Protocol

WAN Wide Area Network

WEP Wired Equivalent Privacy

Wi-Fi Wireless Fidelity

WISP Wireless Internet Service Provider

WLAN Wireless Local Area Network

WMM Wi-Fi Multimedia

WPA Wi-Fi Protected Access

WPS Wi-Fi Protected Setup

Page 247 of 247