D-Link AC750 - Firewall Settings

84D-Link DIR-818LW User Manual
Section 3 - Conguration
Check the box to Enable SPI (Stateful Packet Inspection, also
known as dynamic packet ltering). This helps prevent cyber
attacks by tracking more state per session. It validates that the
trac passing through the session conforms to the protocol.
Check the box to Enable this feature, which will protect your
network from certain kinds of “spoong” attacks.
If an application has trouble working from behind the router,
you check the box to expose a single computer to the Internet
and run the application on that computer.
Note: Placing one computer in the DMZ may expose that
computer to a variety of security risks. This option is only
recommended as a last resort.
Specify the IP Address of the computer on the LAN that you
want to allow unrestricted Internet access. If this computer
obtains it’s IP address automatically using DHCP, be sure to
make a static reservation on the Setup > Network Settings
page so that the IP address of the DMZ machine does not
change.
Check the box to allow multiple machines on the LAN to
connect to their corporate network using PPTP protocol.
Check the box to allow multiple VPN clients to connect to their corporate network using IPSec. Some VPN clients support traversal
of IPSec through NAT. This Application Level Gateway (ALG) may interfere with the operation of such VPN clients. If you are having
trouble connecting with your corporate network, try turning this ALG o. Please check with the system administrator of your
corporate network to nd out whether your VPN client supports NAT traversal.
Enable SPI:
Enable Anti-Spoof
Checking:
Enable DMZ:
DMZ IP Address:
PPTP:
IPSec (VPN):
Firewall Settings
A rewall protects your network from the outside world. The DIR-818LW oers a rewall-type functionality. The SPI feature helps
prevent cyber attacks. There may be times you want a computer exposed to the outside world for certain types of applications.
To expose a computer, you can enable DMZ. This option will expose the selected computer completely to the outside world.