This manual is intended for users familiar with basic networking concepts, who create an in-home local area network, and system administrators, who install and configure networks in offices.

Conventions

text

Example Description

The body text of the manual.

Before You Begin A reference to a chapter or section of this manual.

“Quick Installation

Guide”

A reference to a document.

Change

192.168.0.1

A name of a menu, menu item, control (field, checkbox, drop-down list, button, etc.).

Data that you should enter in the specified field.

Information An important note.

Document Structure

Chapter 1 describes the purpose and structure of the document.

Chapter 2 gives an overview of the router's hardware and software features, describes its appearance and the package contents.

Chapter 3 explains how to install the router DIR-825 and configure a PC in order to access its webbased interface.

Chapter 4 describes all pages of the web-based interface in detail.

Chapter 5 includes safety instructions and tips for networking.

Chapter 6 introduces abbreviations and acronyms most commonly used in User Manuals for

D-Link customer premises equipment.

Page 5 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Overview

CHAPTER 2. OVERVIEW

General Information

The DIR-825 device is a wireless dual band gigabit router with 3G/LTE support. It provides a fast and simple way to create a wireless and wired network at home or in an office.

The router is equipped with a USB port for connecting a USB modem

, which can be used to establish connection to the Internet. In addition, to the USB port of the router you can connect a

USB storage device, which will be used as a network drive.

In order to use the multifunction USB port effectively, the router supports simultaneous operation of several USB devices. For example, you can access multimedia content of the connected HDD storage and at the same time share a USB modem.

Also you are able to connect the wireless router DIR-825 to a cable or DSL modem or to a private

Ethernet line and use a high-speed Internet connection to successfully fulfill a wide range of professional tasks. The built-in 4-port switch enables you to connect Ethernet-enabled computers, game consoles, and other devices to your network.

Using the DIR-825 device, you are able to quickly create a high-speed wireless network at home or in your office, which lets computers and mobile devices access the Internet virtually anywhere

(within the operational range of your wireless network). Simultaneous activity of 2.4GHz band and

5GHz band allows performing a wide range of tasks. The router can operate as a base station for connecting wireless devices of the standards 802.11a, 802.11b, 802.11g, 802.11n, and 802.11ac (at

the wireless connection rate up to 1167Mbps 3 ).

The router supports multiple functions for the wireless interface: several security standards (WEP,

WPA/WPA2/WPA3), MAC address filtering, WPS, WMM.

In addition, the device is equipped with a button for switching the Wi-Fi network off/on. If needed, for example, when you leave home, you can easily switch the router’s WLAN by pressing the button, and devices connected to the LAN ports of the router will stay online.

The EasyMesh function is D-Link implementation of mesh networks designed to quickly connect

several 4

devices into one transport network, for example, when it's required to provide high-quality

Wi-Fi coverage without dead zones in living units of complicated planning or it's needed to create a large temporary Wi-Fi network for an outdoor event.

Multi-user MIMO technology allows to distribute the router's resources to let multiple wireless clients use the Wi-Fi network efficiently, keeping high rates for HD media streaming, lag-free gaming, and fast transfer of large files.

Transmit Beamforming technology allows to flexibly change the antennas' radiation pattern and to redistribute the signal directly to wireless devices connected to the router.

1 Not included in the delivery package. D-Link does not guarantee compatibility with all USB modems. For the list of

supported USB modems, see the Specifications section, page 8.

2 When using a USB hub with external power supply.

3 Up to 300Mbps for 2.4GHz and up to 867Mbps for 5GHz.

4 Up to 6 devices.

Page 6 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Overview

Support of guest Wi-Fi network allows you to create a separate wireless network with individual security settings and maximum rate limitation. Devices connected to the guest network will be able to access the Internet, but will be isolated from the devices and resources of the router's LAN.

The wireless router DIR-825 includes a built-in firewall. The advanced security functions minimize threats of hacker attacks and prevent unwanted intrusions to your network.

The SSH protocol support provides more secure remote configuration and management of the router due to encryption of all transmitted traffic, including passwords.

In addition, the router supports IPsec and allows to create secure VPN tunnels. Support of the

IKEv2 protocol allows to provide simplified message exchange and use asymmetric authentication engine upon configuration of an IPsec tunnel.

Built-in Yandex.DNS service protects against malicious and fraudulent web sites and helps to block access to adult content on children's devices.

Now the schedules are also implemented; they can be applied to the rules and settings of the firewall and used to reboot the router at the specified time or every specified time period and to enable/disable the wireless network and the Wi-Fi filter.

The new ad blocking function effectively blocks advertisements which appear during web surfing.

You can configure the settings of the wireless router DIR-825 via the user-friendly web-based interface (the interface is available in several languages).

The Setup Wizard allows you to quickly switch DIR-825 to one of the following modes: router (for connection to a wired or wireless ISP), access point, repeater, or client, and then configure all needed setting for operation in the selected mode in several simple steps.

Also DIR-825 supports configuration and management via mobile application for Android and iPhone smartphones.

You can simply update the firmware: the router itself finds approved firmware on D-Link update server and notifies when ready to install it.

Page 7 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Specifications

Hardware

Processor

RAM

Flash

Interfaces

LEDs

Buttons

Antenna

MIMO

Power connector

Software

WAN connection types

Overview

· RTL8197FH-VG (1GHz)

128MB, DDR2, built in processor

128MB, SPI NAND

10/100/1000BASE-T WAN port

4 10/100/1000BASE-T LAN ports

USB 2.0 port

Power

Internet

WLAN 2.4G

WLAN 5G

USB

ON/OFF button to power on/power off

RESET button to restore factory default settings

WPS button to connect mesh network devices, set up wireless connection, and enable/disable wireless network

Four external non-detachable antennas (5dBi gain)

2 x 2, MU-MIMO

Power input connector (DC)

Mobile Internet

PPPoE

IPv6 PPPoE

PPPoE Dual Stack

Static IPv4 / Dynamic IPv4

Static IPv6 / Dynamic IPv6

PPPoE + Static IP (PPPoE Dual Access)

PPPoE + Dynamic IP (PPPoE Dual Access)

PPTP/L2TP + Static IP

PPTP/L2TP + Dynamic IP

* The device features are subject to change without notice. For the latest versions of the firmware and relevant documentation, visit www.dlink.ru

Page 8 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Software

Network functions

Firewall functions

VPN

USB interface functions

Overview

DHCP server/relay

Advanced configuration of built-in DHCP server

Stateful/Stateless mode for IPv6 address assignment, IPv6 prefix delegation

Automatic obtainment of LAN IP address (for access point/repeater/client modes)

DNS relay

Dynamic DNS

Static IPv4/IPv6 routing

IGMP/MLD Proxy

RIP

Support of UPnP IGD

Support of VLAN

WAN ping respond

Support of SIP ALG

Support of RTSP

WAN failover

Autonegotiation of speed, duplex mode, and flow control / Manual speed and duplex mode setup for each Ethernet port

Network Address Translation (NAT)

Stateful Packet Inspection (SPI)

IPv4/IPv6 filter

MAC filter

Ad blocking function

DMZ

Virtual servers

Built-in Yandex.DNS web content filtering service

IPsec/PPTP/L2TP/PPPoE pass-through

PPTP/L2TP tunnels

L2TP over IPsec

IPsec tunnels

Transport/Tunnel mode

IKEv1/IKEv2 support

DES encryption

NAT Traversal

Support of DPD (Keep-alive for VPN tunnels)

USB modem

Auto connection to available type of supported network (4G/3G/2G)

Auto configuration of connection upon plugging in USB modem

Enabling/disabling PIN code check, changing PIN code

Sending/receiving/reading/removing SMS messages

Support of USSD requests 5

USB storage

File browser

Access to storage via accounts

Built-in Samba/FTP/DLNA server

Built-in Transmission torrent client; uploading/downloading files from/to USB storage

5 For some models of USB modems.

Page 9 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Software

Management and monitoring

Overview

Local and remote access to settings through SSH/TELNET/WEB

(HTTP/HTTPS)

Multilingual web-based interface for configuration and management

Support of D-Link Assistant application for Android and iPhone smartphones

Notification on connection problems and auto redirect to settings

Firmware update via web-based interface

Automatic notification on new firmware version

Saving/restoring configuration to/from file

Support of logging to remote host/connected USB storage

Automatic synchronization of system time with NTP server and manual time/date setup

Ping utility

Traceroute utility

TR-069 client

Schedules for rules and settings of firewall, automatic reboot, and enabling/disabling wireless network and Wi-Fi filter

Wireless Module Parameters

Standards

Frequency range

The frequency range depends upon the radio frequency regulations applied in your country

Wireless connection security

Advanced functions

Wireless connection rate

IEEE 802.11ac Wave 2

IEEE 802.11a/b/g/n

IEEE 802.11k/v

IEEE 802.11w

· 2400 ~ 2483.5MHz

5150 ~ 5350MHz

5650 ~ 5850MHz

WEP

WPA/WPA2 (Personal/Enterprise)

WPA3 (Personal)

МАС filter

WPS (PBC)

EasyMesh function

Support of client mode

WMM (Wi-Fi QoS)

Information on connected Wi-Fi clients

Advanced settings

Guest Wi-Fi / support of MBSSID

Rate limitation for wireless network/separate MAC addresses

Periodic scan of channels, automatic switch to least loaded channel

Support of 5GHz TX Beamforming

Autonegotiation of channel bandwidth in accordance with environment conditions (20/40 Coexistence)

Support of STBC

IEEE 802.11a: 6, 9, 12, 18, 24, 36, 48, and 54Mbps

IEEE 802.11b: 1, 2, 5.5, and 11Mbps

IEEE 802.11g: 6, 9, 12, 18, 24, 36, 48, and 54Mbps

IEEE 802.11n (2.4GHz/5GHz): from 6.5 to 300Mbps (MCS0–MCS15)

IEEE 802.11ac (5GHz): from 6.5 to 867Mbps

Page 10 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Overview

Wireless Module Parameters

Transmitter output power

The maximum value of the transmitter output power depends upon the radio frequency regulations applied in your country

Receiver sensitivity

802.11a (typical at room temperature 25 °C)

15dBm at 6, 54Mbps

802.11g (typical at room temperature 25 °C)

15dBm at 6, 54Mbps

802.11n (typical at room temperature 25 °C)

2.4GHz

15dBm at MCS0, 7

5GHz

15dBm at MCS0, 7

802.11ac (typical at room temperature 25 °C)

15dBm at MCS0, 9

802.11a (typical at PER < 10% (1000-byte PDUs) at room temperature 25 °C)

-95dBm at 6Mbps

-93dBm at 9Mbps

-92dBm at 12Mbps

-90dBm at 18Mbps

-87dBm at 24Mbps

-84dBm at 36Mbps

-80dBm at 48Mbps

-78dBm at 54Mbps

802.11b (typical at PER = 8% (1000-byte PDUs) at room temperature 25 °C)

-90dBm at 1Mbps

-92dBm at 2Mbps

-93dBm at 5.5Mbps

-96dBm at 11Mbps

802.11g (typical at PER < 10% (1000-byte PDUs) at room temperature 25 °C)

-94dBm at 6Mbps

-92dBm at 9Mbps

-90dBm at 12Mbps

-89dBm at 18Mbps

-87dBm at 24Mbps

-84dBm at 36Mbps

-80dBm at 48Mbps

-77dBm at 54Mbps

802.11n (typical at PER = 10% (1000-byte PDUs) at room temperature 25 °C)

2.4GHz, HT20

-95dBm at MCS0

-91dBm at MCS1

-88dBm at MCS2

-86dBm at MCS3

-82dBm at MCS4

-79dBm at MCS5

-77dBm at MCS6

-75dBm at MCS7

2.4GHz, HT40

-92dBm at MCS0

-89dBm at MCS1

-86dBm at MCS2

-83dBm at MCS3

-80dBm at MCS4

-77dBm at MCS5

-74dBm at MCS6

-72dBm at MCS7

Page 11 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Wireless Module Parameters

Modulation schemes

Overview

5GHz, HT20

-95dBm at MCS0

-93dBm at MCS1

-90dBm at MCS2

-87dBm at MCS3

-83dBm at MCS4

-79dBm at MCS5

-77dBm at MCS6

-75dBm at MCS7

5GHz, HT40

-92dBm at MCS0

-89dBm at MCS1

-86dBm at MCS2

-83dBm at MCS3

-80dBm at MCS4

-76dBm at MCS5

-74dBm at MCS6

-72dBm at MCS7

802.11ac (typical at PER = 10% (1000-byte PDUs) at room temperature 25 °C)

VHT20

-95dBm at MCS0

-92dBm at MCS1

-90dBm at MCS2

-86dBm at MCS3

-83dBm at MCS4

-79dBm at MCS5

-77dBm at MCS6

-75dBm at MCS7

-71dBm at MCS8

VHT40

-92dBm at MCS0

-89dBm at MCS1

-87dBm at MCS2

-84dBm at MCS3

-80dBm at MCS4

-76dBm at MCS5

-74dBm at MCS6

-72dBm at MCS7

-68dBm at MCS8

-66dBm at MCS9

VHT80

-89dBm at MCS0

-86dBm at MCS1

-83dBm at MCS2

-80dBm at MCS3

-77dBm at MCS4

-73dBm at MCS5

-71dBm at MCS6

-69dBm at MCS7

-66dBm at MCS8

-64dBm at MCS9

802.11a: BPSK, QPSK, 16QAM, 64QAM with OFDM

802.11b: DQPSK, DBPSK, DSSS, CCK

802.11g: BPSK, QPSK, 16QAM, 64QAM with OFDM

802.11n: BPSK, QPSK, 16QAM, 64QAM with OFDM

802.11ac: BPSK, QPSK, 16QAM, 64QAM, up to 256QAM with OFDM

Page 12 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Physical Parameters

Dimensions (L x W x H)

Weight ·

· 181 x 132.5 x 47.71 mm (7.13 x 5.22 x 1.88 in)

304.8 g (0.67 lb)

Operating Environment

Power

Temperature

Humidity

· Output: 12V DC, 1.5A

Operating: from 0 to 40 °C

Storage: from -20 to 65 °C

Operating: from 10% to 90% (non-condensing)

Storage: from 5% to 95% (non-condensing)

Supported USB modems

GSM

Alcatel X500

D-Link DWM-152C1

D-Link DWM-156A6

D-Link DWM-156A7

D-Link DWM 156A8

D-Link DWM-156C1

D-Link DWM-157B1

D-Link DWM-157B1 (Velcom)

D-Link DWM-158D1

D-Link DWR-710

Huawei E150

Huawei E1550

Huawei E156G

Huawei E160G

Huawei E169G

Huawei E171

Huawei E173 (Megafon)

Huawei E220

Huawei E3131 (MTS 420S)

Huawei E352 (Megafon)

Huawei E3531

Prolink PHS600

Prolink PHS901

ZTE MF112

ZTE MF192

ZTE MF626

ZTE MF627

ZTE MF652

ZTE MF667

ZTE MF668

ZTE MF752

Overview

6 The manufacturer does not guarantee proper operation of the router with every modification of the firmware of USB modems.

Page 13 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Supported USB modems

LTE

Smartphones in USB tethering mode

Alcatel IK40V

D-Link DWM-222

Huawei E3131

Huawei E3272

Huawei E3351

Huawei E3372s

Huawei E3372h-153

Huawei E3372h-320

Huawei E367

Huawei E392

Megafon M100-1

Megafon M100-2

Megafon M100-3

Megafon M100-4

Megafon M150-1

Megafon M150-2

Megafon M150-3

Quanta 1K6E (Beeline 1K6E)

MTS 824F

MTS 827F

Yota LU-150

Yota WLTUBA-107

ZTE MF823

ZTE MF823D

ZTE MF827

ZTE MF833T

ZTE MF833V

Some models of Android smartphones

Overview

Page 14 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Product Appearance

Front Panel

Overview

LED

Power

Internet

Mode

Solid blue

Figure 1. Front panel view.

Description

The router is powered on.

No light The router is powered off.

Solid blue

Slow blinking blue

Fast blinking blue

The default wired WAN connection is on.

The firmware is being updated.

The device is in the emergency mode. Restore the factory default settings via the hardware RESET button.

Page 15 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

LED

WLAN 2.4G

WLAN 5G

USB

Overview

Mode

No light

Fast blinking blue

Slow blinking blue

Solid blue

No light

Description

•

The default wired WAN connection is off, or

• there are no WAN connections created.

Data transfer through the Wi-Fi network of the relevant band.

When attempting to connect mesh network devices or add a wireless device via the WPS function, the LEDs are blinking one at a time.

A USB device is connected to the router's USB port.

No USB device.

Page 16 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Back Panel

Overview

Name

RESET

WPS

USB

LAN 1-4

Figure 2. Back panel view.

Description

A button to restore the factory defaults.

To restore the factory defaults, push the button (with the device turned on), hold it for 10 seconds, and then release the button.

A button to connect mesh network devices or set up wireless connection (the WPS function).

To connect mesh network devices or use the WPS function: with the device turned on, push and release the button.

To disable the router's wireless network: with the device turned on, push the button, hold it for 10 seconds, and release.

A port for connecting a USB device (modem, storage).

4 Ethernet ports to connect computers or network devices.

Page 17 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Overview

Name

WAN

Description

A port to connect to a cable or DSL modem or to a private Ethernet line (it is recommended to use the cable included in the delivery package).

12V=1.5A

Power connector.

ON/OFF A button to turn the router on/off.

The device is also equipped with four external non-detachable Wi-Fi antennas.

Page 18 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Overview

Delivery Package

The following should be included:

•

Router DIR-825

•

Power adapter DC 12V/1.5A

•

Ethernet cable

•

“ Quick Installation Guide ” (brochure).

The “ User Manual ” and “ Quick Installation Guide ” documents are available on D-Link website

(see www.dlink.ru

Using a power supply with a different voltage rating than the one included will cause damage and void the warranty for this product.

Page 19 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

CHAPTER 3. INSTALLATION AND CONNECTION

Before You Begin

Please, read this manual prior to installing the device. Make sure that you have all the necessary information and equipment.

Computer or Mobile Device

Configuration of the wireless dual band gigabit router with a built-in 4-port switch DIR-825

(hereinafter referred to as “the router”) is performed via the built-in web-based interface. The webbased interface is available from any operating system that supports a web browser.

Also you can use D-Link Assistant application for Android or iPhone mobile devices (smartphones or tablets).

PC Web Browser

The following PC web browsers are recommended:

• Apple Safari 8 and later

• Google Chrome 48 and later

• Microsoft Internet Explorer 10 and later

• Microsoft Edge 20.10240 and later

• Mozilla Firefox 44 and later

• Opera 35 and later.

For successful operation, JavaScript should be enabled on the web browser. Make sure that

JavaScript has not been disabled by other software (such as virus protection or web user security packages) running on your computer.

Wired or Wireless NIC (Ethernet or Wi-Fi Adapter)

Any computer that uses the router should be equipped with an Ethernet or Wi-Fi adapter (NIC). If your computer is not equipped with such a device, install an Ethernet or Wi-Fi adapter prior to using the router.

Wireless Connection

Wireless workstations from your network should be equipped with a wireless 802.11a, b, g, n, or ac

NIC (Wi-Fi adapter). In addition, you should specify the values of SSID, channel number and security settings defined in the web-based interface of the router for all these wireless workstations.

Page 20 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

USB Modem

To connect to an LTE or 3G network, you should use a USB modem. Connect it to the USB port of the router, then access the web-based interface of the router, and you will be able to configure a

connection to the Internet.

Your USB modem should be equipped with an active SIM card of your operator.

Some operators require subscribers to activate their USB modems prior to using them.

Please, refer to connection guidelines provided by your operator when concluding the agreement or placed on its website.

For some models of USB modems, it is required to disable the PIN code check on the SIM card prior to connecting the USB modem to the router.

7 Contact your operator to get information on the service coverage and fees.

Page 21 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Connecting to PC

PC with Ethernet Adapter

1. Connect an Ethernet cable between any of LAN ports located on the back panel of the router and the Ethernet port of your PC.

To connect via USB modem

: connect your USB modem to the USB port 8 located on the

front panel of the router.

In some cases you will need to reboot the router after connection of the USB modem.

3. Connect the power cord to the power connector port on the back panel of the router, then plug the power adapter into an electrical outlet or power strip.

4. Turn on the router by pressing the ON/OFF button on its back panel.

Then make sure that your PC is configured to obtain an IP address automatically (as DHCP client).

8 It is recommended to use a USB extension cable to connect a USB modem to the router.

Page 22 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Obtaining IP Address Automatically (OS Windows 7)

1. Click the Start button and proceed to the Control Panel window.

2. Select the Network and Sharing Center section. (If the Control Panel has the category view (the Category value is selected from the View by drop-down list in the top right corner of the window), choose the View network status and tasks line under the

Network and Internet section.)

Figure 3. The Control Panel window.

Page 23 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

3. In the menu located on the left part of the window, select the Change adapter settings line.

Figure 4. The Network and Sharing Center window.

Page 24 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

4. In the opened window, right-click the relevant Local Area Connection icon and select the Properties line in the menu displayed.

Figure 5. The Network Connections window.

Page 25 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

5. In the Local Area Connection Properties window, on the Networking tab, select the

Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Figure 6. The Local Area Connection Properties window.

Page 26 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

6. Make sure that the Obtain an IP address automatically and Obtain DNS server address automatically choices of the radio buttons are selected. Click the OK button.

Figure 7. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the OK button in the connection properties window.

Page 27 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Obtaining IP Address Automatically (OS Windows 10)

1. Click the Start button and proceed to the Settings window.

2. Select the Network & Internet section.

Installation and Connection

Figure 8. The Windows Settings window.

Page 28 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

3. In the Change your network settings section, select the Change adapter options line.

Figure 9. The Network & Internet window.

Page 29 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

4. In the opened window, right-click the relevant Local Area Connection icon and select the Properties line in the menu displayed.

Figure 10. The Network Connections window.

Page 30 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

5. In the Local Area Connection Properties window, on the Networking tab, select the

Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Figure 11. The local area connection properties window.

Page 31 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

6. Make sure that the Obtain an IP address automatically and Obtain DNS server address automatically choices of the radio buttons are selected. Click the OK button.

Figure 12. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the Close button in the connection properties window.

Page 32 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

PC with Wi-Fi Adapter

To connect via USB modem : connect your USB modem to the USB port

located on the front panel of the router.

In some cases you will need to reboot the router after connection of the USB modem.

2. Connect the power cord to the power connector port on the back panel of the router, then plug the power adapter into an electrical outlet or power strip.

3. Turn on the router by pressing the ON/OFF button on its back panel.

4. Make sure that your Wi-Fi adapter is on. As a rule, modern notebooks with built-in wireless

NICs are equipped with a button or switch that turns on/off the wireless adapter (refer to your PC documents). If your PC is equipped with a pluggable wireless NIC, install the software provided with your Wi-Fi adapter.

Then make sure that your Wi-Fi adapter is configured to obtain an IP address automatically (as

DHCP client).

9 It is recommended to use a USB extension cable to connect a USB modem to the router.

Page 33 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Obtaining IP Address Automatically and Connecting to Wireless

Network (OS Windows 7)

1. Click the Start button and proceed to the Control Panel window.

Network and Internet section.)

Figure 13. The Control Panel window.

3. In the menu located on the left part of the window, select the Change adapter settings line.

4. In the opened window, right-click the relevant Wireless Network Connection icon.

Make sure that your Wi-Fi adapter is on, then select the Properties line in the menu displayed.

5. In the Wireless Network Connection Properties window, on the Networking tab, select the Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Page 34 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

6. Make sure that the Obtain an IP address automatically and Obtain DNS server address automatically choices of the radio buttons are selected. Click the OK button.

Figure 14. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the OK button in the connection properties window.

8. To open the list of available wireless networks, select the icon of the wireless network connection and click the Connect To button or left-click the network icon in the notification area located on the right side of the taskbar.

Figure 15. The notification area of the taskbar.

Page 35 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

9. In the opened Wireless Network Connection window, select the wireless network

DIR-825 (for operating in the 2.4GHz band) or DIR-825-5G (for operating in the 5GHz band) and click the Connect button.

Figure 16. The list of available networks.

10. In the opened window, enter the network key (see WPS PIN on the barcode label on the bottom panel of the device) in the Security key field and click the OK button.

11. Wait for about 20-30 seconds. After the connection is established, the network icon will be displayed as the signal level scale.

If you perform initial configuration of the router via Wi-Fi connection, note that immediately after changing the wireless default settings of the router you will need to reconfigure the wireless connection using the newly specified settings.

Page 36 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Obtaining IP Address Automatically and Connecting to Wireless

Network (OS Windows 10)

1. Click the Start button and proceed to the Settings window.

2. Select the Network & Internet section.

Figure 17. The Windows Settings window.

3. In the Change your network settings section, select the Change adapter options line.

4. In the opened window, right-click the relevant Wireless Network Connection icon.

Make sure that your Wi-Fi adapter is on, then select the Properties line in the menu displayed.

5. In the Wireless Network Connection Properties window, on the Networking tab, select the Internet Protocol Version 4 (TCP/IPv4) line. Click the Properties button.

Page 37 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

6. Make sure that the Obtain an IP address automatically and Obtain DNS server address automatically choices of the radio buttons are selected. Click the OK button.

Figure 18. The Internet Protocol Version 4 (TCP/IPv4) Properties window.

7. Click the Close button in the connection properties window.

Figure 19. The notification area of the taskbar.

Page 38 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

9. In the opened Wireless Network Connection window, select the wireless network

DIR-825 (for operating in the 2.4GHz band) or DIR-825-5G (for operating in the 5GHz band) and click the Connect button.

Figure 20. The list of available networks.

10. In the opened window, enter the network key (see WPS PIN on the barcode label on the bottom panel of the device) in the Security key field and click the Next button.

11. Allow or forbid your PC to be discoverable by other devices on this network ( Yes / No ).

Figure 21. PC discovery settings.

12. Wait for about 20-30 seconds. After the connection is established, the network icon will be displayed as a dot with curved lines indicating the signal level.

Page 39 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Connecting to Web-based Interface

When you have configured your computer, you can access the web-based interface and configure needed parameters (create a WAN connection, change the parameters of the wireless network, specify the settings of the firewall, etc.).

For security reasons, DIR-825 with default settings cannot connect to the Internet. To get started, please set your own password used to access the web-based interface and, if needed, configure other settings recommended by your ISP.

Start a web browser (see the

Before You Begin section, page 20). In the address bar of the web

browser, enter the domain name of the router (by default, dlinkrouter.local

) with a dot at the end and press the Enter key. Also you can enter the IP address of the device (by default,

192.168.0.1

Figure 22. Connecting to the web-based interface of the DIR-825 device.

If the error “ The page cannot be displayed ” (or “ Unable to display the page ”/“ Could not connect to remote server ”) occurs upon connecting to the web-based interface of the router, make sure that you have properly connected the router to your computer.

If the device has not been configured previously or the default settings have been restored, after

access to the web-based interface the Setup Wizard opens (see the Setup Wizard section, page 48).

Figure 23. The page for running the Setup Wizard.

Page 40 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

If you configured the device previously, after access to the web-based interface the login page opens. Enter the username ( admin ) in the Username field and the password you specified in the

Password field, then click the LOGIN button.

Figure 24. The login page.

In order not to log out, move the Stay signed in switch to the right. After closing the web browser or rebooting the device, you need to enter the username and the password again.

If you enter a wrong password several times, the web-based interface will be blocked for a while.

Please wait for one minute and reenter the password you specified.

Page 41 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Web-based Interface Structure

Home Page

The Home page displays the current status of the router in the form of an interactive diagram. You can click each icon to display information about each part of the network at the bottom of the screen. The menu bar at the top of the page will allow you to quickly navigate to other pages.

The page displays whether or not the router is currently connected to the Internet. If it is disconnected, click the sign Click to repair to go to the Settings / Internet / WAN page (for the description of the page, see the

WAN section, page 76), or click

Internet disconnected to run the

Setup Wizard (for the description of the Wizard, see the Setup Wizard section, page 48).

Figure 25. The Home page. The device is connected to the Internet.

Figure 26. The Home page. The device is not connected to the Internet.

Page 42 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Internet Section

Click the Internet icon to view more details about your Internet connection.

Installation and Connection

Figure 27. The Home page. The Internet section.

Click IPv4 or IPv6 to display details of the IPv4 connection and IPv6 connection respectively.

To reconfigure the Internet settings, click Go to setting . Upon that the Settings / Internet /

WAN page opens (for the description of the page, see the

WAN section, page 76).

Page 43 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

DIR-825 Section

Click the DIR-825 icon to view details about the router and its wireless settings.

Figure 28. The Home page. The DIR-825 section.

Here you can see the router’s current Wi-Fi network name in the 2.4GHz and 5GHz bands, the password (click Show ( ) to display it), as well as the router's MAC address, IPv4 address, and

IPv6 address.

To reconfigure the network settings, either click Go to settings on the lower left, or click

Settings (at the top of the page) and then Network on the menu that appears (for the description

of the page, see the Settings / Network section, page 124).

To reconfigure the wireless settings, either click Go to settings on the lower right, or click

Settings (at the top of the page) and then Wireless Network on the menu that appears (for the

description of the page, see the Settings / Wireless network section, page 114).

Page 44 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Wi-Fi Clients Section

Click the Wi-Fi clients icon to view details about wireless clients connected to the router.

Figure 29. The Home page. The Wi-Fi clients section.

Here you can see all wireless clients currently connected to the router. Such devices are marked by the Connected icon ( ).

Page 45 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Menu Sections

To configure the router use the menu bar in the top part of the page.

The Settings section provides you with the most essential settings.

On the Setup Wizard page you can run the Setup Wizard. The Wizard allows you to configure the router for operation in the needed mode and specify all parameters necessary for getting started (for

the description of the Wizard, see the Setup Wizard section, page 48).

On the Internet / WAN page you can create a connection to the Internet or reconfigure existing connections (for the description of the page, see the

WAN section, page 76).

On the WAN Failover page you can enable and configure the WAN backup function (for the

description of the page, see the Settings / WAN Failover section, page 111).

On the Wireless network page you can configure the basic and additional wireless networks (for

the description of the page, see the Settings / Wireless network section, page 114).

On the Network page you can configure basic parameters of the LAN interface of the router (for

the description of the page, see the Settings / Network section, page 124).

The pages of the USB Storage section are designed for operating the connected USB storage (for

the description of the pages, see the Settings / USB Storage section, page 134).

The pages of the USB Modem section are designed for operating the connected USB modem (for

the description of the pages, see the Settings / USB Modem section, page 146).

The pages of the Functions / Firewall subsection are designed for configuring the firewall of the

router (for the description of the pages, see the Functions / Firewall section, page 153).

The pages of the Functions / Wi-Fi subsection are designed for specifying all other settings of the router's wireless network (for the description of the pages, see the

Functions / Wi-Fi

section,

page 162).

The pages of the Functions / Advanced subsection are designed for configuring additional parameters of the router (for the description of the pages, see the

Functions / Advanced section, page 182).

The pages of the Management section provide functions for managing the internal system of the router (for the description of the pages, see the

Management section, page 209). And the pages of

the Management / Statistics subsection display data on the current state of the router (for the description of the pages, see the

Statistics section, page 229). Also the pages of the

Management /

Yandex.DNS

subsection are designed for configuring the Yandex.DNS web content filtering

service (for the description of the pages, see the Yandex.DNS

section, page 218).

Page 46 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Installation and Connection

Notifications

The router's web-based interface displays notifications in the top right part of the page.

Figure 30. The web-based interface notifications.

Click the icon displaying the number of notifications to view the complete list and click the relevant button.

Page 47 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

CHAPTER 4. CONFIGURING VIA WEB-BASED

INTERFACE

Setup Wizard

To start the Setup Wizard, go to the Settings / Setup Wizard section. On the opened page, click the OK button and wait until the factory default settings are restored.

Figure 31. Restoring the default settings in the Wizard.

If you perform initial configuration of the router via Wi-Fi connection, please make sure that you are connected to the wireless network of DIR-825 (see the WLAN name (SSID) on the barcode label on the bottom panel of the device) and click the NEXT button.

Figure 32. Checking connection to the wireless network.

Click the START button.

Figure 33. Starting the Wizard.

Page 48 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

On the opened page, click YES in order to leave the current language of the web-based interface or click NO to select another language.

Figure 34. Selecting a language.

You can finish the Wizard earlier and go to the menu of the web-based interface. To do this, click the ADVANCED SETTINGS button. On the opened page, change the default settings: specify the administrator password in the User’s interface password and Password confirmation fields and the name of the wireless network in the 2.4GHz and 5GHz bands in the Network name 2.4

GHz (SSID) and Network name 5 GHz (SSID) fields correspondingly. Then click the APPLY button.

Figure 35. Changing the default settings.

To continue the configuration of the router via the Wizard, click the CONTINUE button.

Page 49 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Selecting Operation Mode

Select the needed operation mode and click the NEXT button.

Router

In order to connect your device to a wired ISP, on the Device mode page, from the Connection method list, select the Autonomous value. Then from the Work mode list select the Router value. In this mode you can configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and 5GHz bands, configure LAN ports to connect an STB or VoIP phone, and set your own password for access to the web-based interface of the device.

Figure 36. Selecting an operation mode. The Router mode.

In order to connect your device to the network of a 3G or LTE operator, on the Device mode page, from the Connection method list, select the Autonomous value. Then from the Work mode list select the Mobile Internet value. In this mode you can configure a 3G/LTE WAN connection, set your own settings for the wireless network in the 2.4GHz and 5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 37. Selecting an operation mode. The Mobile Internet mode.

Page 50 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In order to connect your device to a wireless ISP (WISP), on the Device mode page, from the

Connection method list, select the Autonomous value. Then from the Work mode list select the WISP Repeater value. In this mode you can connect your device to another access point, configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and

5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 38. Selecting an operation mode. The WISP Repeater mode.

Page 51 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Access Point or Repeater

In order to connect your device to a wired router for adding a wireless network to the existing local network, on the Device mode page, from the Connection method list, select the

Autonomous value. Then from the Work mode list select the Access point value. In this mode you can change the LAN IP address, set your own settings for the wireless network in the

2.4GHz and 5GHz bands and set your own password for access to the web-based interface of the device.

Figure 39. Selecting an operation mode. The Access point mode.

In order to connect your device to a wireless router for extending the range of the existing wireless network, on the Device mode page, from the Connection method list, select the

Autonomous value. Then from the Work mode list select the Repeater value. In this mode you can change the LAN IP address, connect your device to another access point, set your own settings for the wireless network in the 2.4GHz and 5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 40. Selecting an operation mode. The Repeater mode.

Page 52 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In order to let wired PCs connected to your device access the network of a wireless router, on the

Device mode page, from the Connection method list, select the Autonomous value. Then from the Work mode list select the Client value. In this mode you can change the LAN IP address, connect your device to another access point and set your own password for access to the web-based interface of the device.

Figure 41. Selecting an operation mode. The Client mode.

When the operation mode is selected, click the NEXT button.

Page 53 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Mesh Network Main Device (Controller)

In order to configure DIR-825 as a main device of your mesh network, from the Connection method list, select the EasyMesh value. Then from the Device Role list, select the Controller value.

In order to connect your main device to a wired ISP, from the Work mode list, select the Router value. In this mode you can configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and 5GHz bands, configure LAN ports to connect an STB or VoIP phone, and set your own password for access to the web-based interface of the device.

Figure 42. Configuring the EasyMesh function for the main device. The Router mode.

Page 54 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In order to connect your main device to the network of a 3G or LTE operator, from the Work mode list, select the Mobile Internet value. In this mode you can configure a 3G/LTE WAN connection, set your own settings for the wireless network in the 2.4GHz and 5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 43. Configuring the EasyMesh function for a main device. The Mobile Internet mode.

Page 55 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In order to connect your main device to a wireless ISP (WISP), from the Work mode list, select the WISP Repeater value. In this mode you can connect your device to another access point, configure a WAN connection, set your own settings for the wireless network in the 2.4GHz and

5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 44. Configuring the EasyMesh function for a main device. The WISP Repeater mode.

Page 56 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Mesh Network Subordinate Device (Agent)

In order to configure DIR-825 as a subordinate device of your mesh network, from the

Connection method list, select the EasyMesh value. Then from the Device Role list, select the Agent value.

Then a subordinate device is configured in the access point mode. In this mode you can change the

LAN IP address, set your own settings for the wireless network in the 2.4GHz and 5GHz bands, and set your own password for access to the web-based interface of the device.

Figure 45. Configuring the EasyMesh function for a subordinate device.

Page 57 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Creating 3G/LTE WAN Connection

This configuration step is available for the Mobile Internet mode.

1. If the PIN code check is enabled for the SIM card inserted into your USB modem, enter the

PIN code in the PIN field and click the APPLY button.

Figure 46. The page for entering the PIN code.

2. Please wait while the router automatically creates a WAN connection for your mobile operator.

Figure 47. The page for creating 3G/LTE connection .

Page 58 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

3. Click the NEXT button to continue or click the BACK button to return to the previous page.

If the router failed to create a WAN connection automatically, click the CONFIGURE

MANUALLY button. On the Modem settings page, configure all needed settings and click the

NEXT button.

Page 59 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Changing LAN IPv4 Address

This configuration step is available for the Access point , Repeater , and Client modes.

1. Select the Automatic obtainment of IPv4 address to let DIR-825 automatically obtain the LAN IPv4 address.

2. In the Hostname field, you should specify a domain name of the router using which you can access the web-based interface after finishing the Wizard. Enter a new domain name of the router ending with .local

or leave the value suggested by the router.

I n order to access the web-based interface using the domain name, i n the address bar of the web browser, enter the name of the router with a dot at the end.

If you want to manually assign the LAN IPv4 address for DIR-825, do not select the Automatic obtainment of IPv4 address checkbox and fill in the IP address , Subnet mask , DNS IP address , Hostname fields and, if needed, the Gateway IP address field. Make sure that the assigned address does not coincide with the LAN IPv4 address of the router to which your device connects.

Figure 48. The page for changing the LAN IPv4 address .

3. Click the NEXT button to continue or click the BACK button to return to the previous page.

Page 60 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Wi-Fi Client

This configuration step is available for the WISP Repeater , Repeater , and Client modes.

1. On the Wi-Fi Сlient page, click the WIRELESS NETWORKS button and select the network to which you want to connect in the opened window. When you select a network, the Network name (SSID) and BSSID fields are filled in automatically.

If you cannot find the needed network in the list, click the UPDATE LIST icon ( ).

2. If a password is needed to connect to the selected network, fill in the relevant field. Click the

Show icon ( ) to display the entered password.

Figure 49. The page for configuring the Wi-Fi client.

If you connect to a hidden network, select the band where the hidden network operates from the

Frequency band list and enter the network name in the Network name (SSID) field. Then select a needed value from the Network authentication list and then, if needed, enter the password in the relevant field.

When the Open or WEP authentication type is selected, the following settings are displayed on the page:

Parameter Description

Enable encryption WEP

For Open authentication type only.

The checkbox activating WEP encryption. When the checkbox is selected, the Default key ID drop-down list, the Encryption key

WEP as HEX checkbox, and four Encryption key fields are displayed on the page.

Page 61 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Default key ID

The number of the key (from first to fourth) which will be used for

WEP encryption.

Encryption key WEP as

HEX

Select the checkbox to set a hexadecimal number as a key for encryption.

Encryption key

(1-4)

Keys for WEP encryption. The router uses the key selected from the

Default key ID drop-down list. It is required to specify all the fields. Click the Show icon ( ) to display the entered key.

When the WPA-PSK , WPA2-PSK , WPA-PSK/WPA2-PSK mixed, WPA3-SAE , or WPA2-

PSK/WPA3-SAE mixed authentication type is selected, the following fields are displayed:

Parameter Description

Password PSK

A password for WPA encryption. Click the Show icon ( ) to display the entered password.

Encryption type

An encryption method: TKIP , AES , or TKIP+AES .

TKIP and TKIP+AES encryption types are not available for

WPA3-SAE and WPA2-PSK/WPA3-SAE mixed authentication types.

Click the NEXT button to continue or click the BACK button to return to the previous page.

Page 62 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Configuring Wired WAN Connection

This configuration step is available for the Router and WISP Repeater modes.

You should configure your WAN connection in accordance with data provided by your

Internet service provider (ISP). Make sure that you have obtained all necessary information prior to configuring your connection. Otherwise contact your ISP.

1. On the Internet connection type page, click the SCAN button (available only for the

Router mode) to automatically specify the connection type used by your ISP or manually select the needed value from the Connection type list.

2. Specify the settings necessary for the connection of the selected type.

If your ISP uses MAC address binding, select the Clone MAC address of your device checkbox (available only for the Router mode) .

If the Internet access is provided via a VLAN channel, select the Use VLAN checkbox and fill in the VLAN ID field (available only for the Router mode) .

Click the NEXT button to continue or click the BACK button to return to the previous page.

Page 63 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Static IPv4 Connection

Configuring via Web-based Interface

Figure 50. The page for configuring Static IPv4 WAN connection.

Fill in the following fields: IP address , Subnet mask , Gateway IP address , and DNS IP address .

Page 64 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Static IPv6 Connection

Configuring via Web-based Interface

Figure 51. The page for configuring Static IPv6 WAN connection.

Fill in the following fields: IP address , Prefix , Gateway IP address , and DNS IP address .

Page 65 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

PPPoE, IPv6 PPPoE, PPPoE Dual Stack, PPPoE + Dynamic IP (PPPoE Dual

Access) Connections

Figure 52. The page for configuring PPPoE WAN connection.

In the Username field enter the login and in the Password field enter the password provided by your ISP. Click the Show icon ( ) to display the entered password.

If authorization is not required, select the Without authorization checkbox.

Page 66 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

PPPoE + Static IP (PPPoE Dual Access) Connection

Configuring via Web-based Interface

Figure 53. The page for configuring PPPoE + Static IP (PPPoE Dual Access) WAN connection.

In the Username field enter the login and in the Password field enter the password provided by your ISP. Click the Show icon ( ) to display the entered password.

If authorization is not required, select the Without authorization checkbox.

Also fill in the following fields: IP address , Subnet mask , Gateway IP address , and DNS

IP address .

Page 67 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

PPTP + Dynamic IP or L2TP + Dynamic IP Connection

Configuring via Web-based Interface

Figure 54. The page for configuring PPTP + Dynamic IP WAN connection.

In the Username field enter the login and in the Password field enter the password provided by your ISP. Click the Show icon ( ) to display the entered password.

If authorization is not required, select the Without authorization checkbox.

In the VPN server address field, enter the IP or URL address of the PPTP or L2TP authentication server.

Page 68 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

PPTP + Static IP or L2TP + Static IP Connection

Configuring via Web-based Interface

Figure 55. The page for configuring PPTP + Static IP WAN connection.

In the Username field enter the login and in the Password field enter the password provided by your ISP. Click the Show icon ( ) to display the entered password.

If authorization is not required, select the Without authorization checkbox.

In the VPN server address field, enter the IP or URL address of the PPTP or L2TP authentication server.

Also fill in the following fields: IP address , Subnet mask , Gateway IP address , and DNS

IP address .

Page 69 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Configuring Wireless Network

This configuration step is available for the Mobile Internet, Router , Access point , WISP

Repeater , and Repeater modes.

1. On the Wireless Network 2.4 GHz page, in the Network name field, specify your own name for the wireless network in the 2.4GHz band or leave the value suggested by the router.

2. In the Password field, specify your own password for access to the wireless network or leave the value suggested by the router (WPS PIN of the device, see the barcode label).

3. If the router is used as a Wi-Fi client, you can specify the same parameters of the wireless network as specified for the network to which you are connecting. To do this, click the USE button (available for the WISP Repeater and Repeater modes only).

4. You can restore the parameters of the wireless network specified before resetting to factory defaults. To do this, click the RESTORE button.

Figure 56. The page for configuring the wireless network.

Page 70 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

5. If you want to create an additional wireless network isolated from your LAN in the 2.4GHz band, select the Enable guest network checkbox (available for the Router and WISP

Repeater modes only).

Figure 57. The page for configuring the wireless network.

6. In the Network name field, specify your own name for the guest wireless network or leave the value suggested by the router.

7. If you want to create a password for access to the guest wireless network, deselect the Open network checkbox and fill in the Password field.

8. If you want to limit the bandwidth of the guest wireless network, select the Enable shaping checkbox and fill in the Shaping field.

9. Click the NEXT button to continue or click the BACK button to specify other settings.

10. On the Wireless Network 5 GHz page, specify needed settings for the wireless network in the 5GHz band and click the NEXT button.

Page 71 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Configuring LAN Ports for IPTV/VoIP

This configuration step is available for the Router mode.

On the IPTV page, select the Is an STB connected to the device checkbox.

Figure 58. The page for selecting a LAN port to connect an IPTV set-top box.

Select a free LAN port for connecting your set-top box.

If the IPTV service is provided via a VLAN channel, select the Use VLAN ID checkbox and fill in the VLAN ID field.

Click the NEXT button to continue or click the BACK button to specify other settings.

Page 72 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

On the VoIP page, select the Is an IP phone connected to the device checkbox.

Figure 59. The page for selecting a LAN port to connect an VoIP phone.

Select a free LAN port for connecting your IP phone.

If the VoIP service is provided via a VLAN channel, select the Use VLAN ID checkbox and fill in the VLAN ID field.

Click the NEXT button to continue or click the BACK button to specify other settings.

Page 73 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Changing Web-based Interface Password

On this page, you should change the default administrator password. To do this, enter a new password in the User’s interface password and Password confirmation fields. You may set any password except admin . Use digits, Latin letters (uppercase and/or lowercase), and other

characters available in the US keyboard layout.

Figure 60. The page for changing the web-based interface password.

Remember or write down the new password for the administrator account. In case of losing the new password, you can access the settings of the router only after restoring the factory default settings via the hardware RESET button. This procedure wipes out all settings that you have configured for your router.

Click the NEXT button to continue or click the BACK button to return to the previous page.

On the next page, check all specified settings.

Also you can save a text file with parameters set by the Wizard to your PC. To do this, click the

SAVE CONFIGURATION FILE button and follow the dialog box appeared.

To finish the Wizard, click the APPLY button. The router will apply settings and reboot. Click the

BACK button to specify other settings.

10 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 74 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

If the Wizard has configured a WAN connection, after clicking the APPLY button, the page for checking the Internet availability opens.

Figure 61. Checking the Internet availability.

If problems appeared when connecting to the Internet, click the CHECK AGAIN button to recheck the state of the WAN connection.

If problems of connection have not been solved, contact the technical support of your ISP (as a rule, the technical support phone is provided with the agreement) or the D-Link technical support.

To specify other settings, click the ADVANCED SETTINGS button. After clicking the

ADVANCED SETTINGS button, the Home

page opens (see the Home Page section, page 42).

Page 75 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Settings / Internet

WAN

On the Settings / Internet / WAN page, you can create and edit connections used by the router.

By default, a Dynamic IPv4 connection is configured in the system. It is assigned to the WAN port of the router.

Figure 62. The Settings / Internet / WAN page. The simplified mode.

To edit an existing connection, click the EDIT button. Change the needed parameters and click the

APPLY button.

To disconnect a connection and establish it again, click the RECONNECT button.

To remove an existing connection and create a new one, click the CHANGE CONFIGURATION button. Upon that the connection creation page opens.

To create several WAN connections, go to the advanced mode. To do this, click the ADVANCED

MODE button.

When connections of some types are created, the Settings / Internet / WAN page is automatically displayed in the advanced mode.

Page 76 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 63. The Settings / Internet / WAN page. The advanced mode.

To create a new connection, click the ADD button ( ) in the Connections List section. Upon that the connection creation page opens.

To edit an existing connection, in the Connections List section, left-click the relevant line in the table. Change the needed parameters and click the APPLY button.

To disconnect a connection and establish it again, select the checkbox located to the left of the relevant line in the table and click the RECONNECT button.

To remove a connection, in the Connections List section, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

To allow multicast traffic (e.g. streaming video) for a connection, click the IGMP/MLD link (for the description of the page, see the

IGMP/MLD section, page 206).

To use one of existing WAN connections as the default IPv4 or IPv6 connection, in the Default

Gateway section, select the choice of the radio button which corresponds to this connection.

To return to the simplified mode, click the SIMPLIFIED MODE button (the button is unavailable if several WAN connections are created).

Page 77 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Creating Dynamic IPv4 or Static IPv4 WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from the Connection type drop-down list and specify the needed values.

Figure 64. The page for creating a new Static IPv4 connection. The General Settings section.

Parameter Description

General Settings

Interface

Connection name

Enable connection

NAT

Ping

RIP

A physical or virtual WAN interface to which the new connection will be assigned.

A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Move the switch to the left to disable the connection.

If the switch is moved to the right, the network address translation function is enabled. Do not disable the function unless your ISP requires this.

If the switch is moved to the right, the router responds to ping requests from the external network through this connection. For security reasons, it is recommended to disable this function.

Move the switch to the right to allow using RIP for this connection.

Page 78 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 65. The page for creating a new Static IPv4 connection. The Ethernet section.

Parameter Description

MAC address

MTU

Ethernet

A MAC address assigned to the interface. This parameter is mandatory if your ISP uses MAC address binding. In the field, enter the MAC address registered by your ISP upon concluding the agreement.

To set the MAC address of the network interface card (of the computer that is being used to configure the router at the moment) as the MAC address of the WAN interface, move the Clone MAC address of your NIC switch to the right. When the switch is moved to the right, the field is unavailable for editing.

To set the router's MAC address, click the RESTORE DEFAULT

MAC ADDRESS button (the button is available when the switch is moved to the right).

The maximum size of units transmitted by the interface.

Page 79 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 66. The page for creating a new Static IPv4 connection. The IPv4 section.

Parameter Description

IPv4

IP address

Subnet mask

For Static IPv4 type

Enter an IP address for this WAN connection.

Enter a subnet mask for this WAN connection.

Gateway IP address Enter an IP address of the gateway used by this WAN connection.

Primary DNS /

Secondary DNS

Enter addresses of the primary and secondary DNS servers in the relevant fields.

Obtain DNS server addresses automatically

For Dynamic IPv4 type

Move the switch to the right to configure automatic assignment of

DNS server addresses. Upon that the Primary DNS and

Secondary DNS fields are not available for editing.

Primary DNS /

Secondary DNS

Vendor ID

Enter addresses of the primary and secondary DNS servers in the relevant fields.

The identifier of your ISP. Optional .

Hostname A name of the router specified by your ISP. Optional .

When all needed settings are configured, click the APPLY button.

Page 80 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Creating Dynamic IPv6 or Static IPv6 WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from the Connection type drop-down list and specify the needed values.

Figure 67. The page for creating a new Static IPv6 connection. The General Settings section.

Parameter Description

Interface

Connection name

General Settings

A physical or virtual WAN interface to which the new connection will be assigned.

A name for the connection for easier identification.

Enable connection

NATv6

Ping

Move the switch to the right to enable the connection.

Move the switch to the left to disable the connection.

If the switch is moved to the right, the network address translation function for IPv6 is enabled. Do not disable the function unless your

ISP requires this.

If the switch is moved to the right, the router responds to ping requests from the external network through this connection. For security reasons, it is recommended to disable this function.

Page 81 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Parameter

RIPng

Configuring via Web-based Interface

Description

Move the switch to the right to allow using RIPng for this connection.

Figure 68. The page for creating a new Static IPv6 connection. The Ethernet section.

Parameter Description

Ethernet

MAC address

MTU

A MAC address assigned to the interface. This parameter is mandatory if your ISP uses MAC address binding. In the field, enter the MAC address registered by your ISP upon concluding the agreement.

To set the router's MAC address, click the RESTORE DEFAULT

MAC ADDRESS button (the button is available when the switch is moved to the right).

The maximum size of units transmitted by the interface.

Page 82 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 69. The page for creating a new Static IPv6 connection. The IPv6 section.

Parameter Description

IPv6

IPv6 address

For Static IPv6 type

Enter an IPv6 address for this WAN connection.

Prefix The length of the subnet prefix. The value 64 is used usually.

Gateway IPv6 address Enter an IPv6 address of the gateway used by this WAN connection.

Primary IPv6 DNS server / Secondary IPv6

DNS server

Enter addresses of the primary and secondary IPv6 DNS servers in the relevant fields.

Get IPv6

Enable prefix delegation

Obtain DNS server addresses automatically

For Dynamic IPv6 type

Select a method for IPv6 address assignment from the drop-down list or leave the Automatically value.

Move the switch to the right if it is necessary that the router requests a prefix to configure IPv6 addresses for the local network from a delegating router.

Move the switch to the right to configure automatic assignment of

IPv6 DNS server addresses. Upon that the Primary IPv6 DNS server and Secondary IPv6 DNS server fields are not available for editing.

Page 83 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Primary IPv6 DNS server / Secondary IPv6

DNS server

Enter addresses of the primary and secondary IPv6 DNS servers in the relevant fields.

When all needed settings are configured, click the APPLY button.

Page 84 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Creating PPPoE WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from the Connection type drop-down list and specify the needed values.

Figure 70. The page for creating a new PPPoE connection. The General Settings section.

Parameter Description

Interface

Connection name

General Settings

A physical or virtual WAN interface to which the new connection will be assigned.

A name for the connection for easier identification.

Enable connection

NAT

Ping

RIP

Move the switch to the right to enable the connection.

Move the switch to the left to disable the connection.

If the switch is moved to the right, the network address translation function is enabled. Do not disable the function unless your ISP requires this.

If the switch is moved to the right, the router responds to ping requests from the external network through this connection. For security reasons, it is recommended to disable this function.

Move the switch to the right to allow using RIP for this connection.

Page 85 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 71. The page for creating a new PPPoE connection. The Ethernet section.

Parameter Description

MAC address

MTU

Ethernet

A MAC address assigned to the interface. This parameter is mandatory if your ISP uses MAC address binding. In the field, enter the MAC address registered by your ISP upon concluding the agreement.

To set the router's MAC address, click the RESTORE DEFAULT

MAC ADDRESS button (the button is available when the switch is moved to the right).

The maximum size of units transmitted by the interface.

Page 86 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 72. The page for creating a new PPPoE connection. The PPP section.

Parameter Description

PPP

Without authorization

Username

Password

Service name

Move the switch to the right if you don't need to enter a username and password to access the Internet.

A username (login) to access the Internet.

A password to access the Internet. Click the Show icon ( ) to display the entered password.

The name of the PPPoE authentication server.

Page 87 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

MTU

Encryption protocol

Authentication protocol

Keep Alive

Dial on demand

Static IP address

PPP debug

Description

The maximum size of units transmitted by the interface.

Select a method of MPPE encryption.

• No encryption : MPPE encryption is not applied.

• MPPE 40 128 bit : MPPE encryption with a 40-bit or 128-bit key is applied.

• MPPE 40 bit : MPPE encryption with a 40-bit key is applied.

•

MPPE 128 bit : MPPE encryption with a 128-bit key is applied.

MPPE encryption can be applied only if the MS-CHAP or MS-

CHAPV2 value is selected from the Authentication protocol drop-down list.

Select a required authentication method from the drop-down list or leave the AUTO value.

Move the switch to the right if you want the router to keep you connected to your ISP even when the connection has been inactive for a specified period of time. If the switch is moved to the right, the

LCP interval and LCP fails fields are available. Specify the required values.

Move the switch to the right if you want the router to establish connection to the Internet on demand. In the Maximum idle time field, specify a period of inactivity (in seconds) after which the connection should be terminated.

Fill in the field if you want to use a static IP address to access the

Internet.

Move the switch to the right if you want to log all data on PPP connection debugging.

Page 88 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 73. The page for creating a new PPPoE connection. The IPv4 section.

Parameter Description

IPv4

Obtain DNS server addresses automatically

Move the switch to the right to configure automatic assignment of

DNS server addresses. Upon that the Primary DNS and

Secondary DNS fields are not available for editing.

Primary DNS /

Secondary DNS

Enter addresses of the primary and secondary DNS servers in the relevant fields.

When all needed settings are configured, click the APPLY button. In the simplified mode, after clicking the button, the window for creating an additional connection opens.

If your ISP offers access to local services (e.g. audio and video resources), click the CREATE

CONNECTION button. On the page displayed, specify the parameters for the connection of the

Dynamic IPv4 or Static IPv4 type and click the APPLY button.

If you do not need to create an additional connection, click the SKIP button. In this case, the

Settings / Internet / WAN page opens.

Page 89 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Creating PPTP, L2TP, or L2TP over IPsec WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from the Connection type drop-down list and specify the needed values.

Figure 74. The page for creating a new PPTP connection. The General Settings section.

Parameter Description

Connection name

General Settings

A name for the connection for easier identification.

Enable connection

NAT

Ping

Move the switch to the right to enable the connection.

Move the switch to the left to disable the connection.

If the switch is moved to the right, the network address translation function is enabled. Do not disable the function unless your ISP requires this.

If the switch is moved to the right, the router responds to ping requests from the external network through this connection. For security reasons, it is recommended to disable this function.

Page 90 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 75. The page for creating a new PPTP connection. The PPP section.

Parameter Description

PPP

Without authorization

Username

Move the switch to the right if you don't need to enter a username and password to access the Internet.

A username (login) to access the Internet.

Password

A password to access the Internet. Click the Show icon ( ) to display the entered password.

VPN server address The IP or URL address of the PPTP or L2TP authentication server.

MTU The maximum size of units transmitted by the interface.

Page 91 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Encryption protocol

Description

Select a method of MPPE encryption.

•

No encryption : MPPE encryption is not applied.

•

MPPE 40 128 bit : MPPE encryption with a 40-bit or 128bit key is applied.

•

MPPE 40 bit : MPPE encryption with a 40-bit key is applied.

•

MPPE 128 bit : MPPE encryption with a 128-bit key is applied.

MPPE encryption can be applied only if the MS-CHAP , MS-

CHAPV2 , or AUTO value is selected from the Authentication protocol drop-down list.

Authentication protocol

Select a required authentication method from the drop-down list or leave the AUTO value.

Keep Alive

Dial on demand

Static IP address

PPP debug

LCP interval and LCP fails fields are available. Specify the required values.

Fill in the field if you want to use a static IP address to access the

Internet.

Move the switch to the right if you want to log all data on PPP connection debugging.

Page 92 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 76. The page for creating a new PPTP connection. The IPv4 section.

Parameter Description

IPv4

Obtain DNS server addresses automatically

Primary DNS /

Secondary DNS

Move the switch to the right to configure automatic assignment of

DNS server addresses. Upon that the Primary DNS and

Secondary DNS fields are not available for editing.

Enter addresses of the primary and secondary DNS servers in the relevant fields.

Figure 77. The page for creating a new L2TP over IPsec connection. The IPsec section.

Setting for both parties which establish the tunnel should be the same.

Parameter

Pre-shared key

Description

IPsec (for the L2TP over IPsec type)

A key for mutual authentication of the parties. Click the Show icon

( ) to display the entered key.

Page 93 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Enable PFS

Description

Move the switch to the right to enable the PFS option ( Perfect

Forward Secrecy ). If the switch is moved to the right, a new encryption key exchange will be used upon establishing the IPsec tunnel. This option enhances the security level of data transfer, but increases the load on DIR-825.

Specify connection port

Move the switch to the right to change the port used for data exchange with the other party enter the needed value in the Port filed displayed. By default, the value 1701 is specified.

When all needed settings are configured, click the APPLY button.

After clicking the button, the window for additional configuration of the connection opens.

If you want to use this WAN connection to access the Internet, select the to the Internet choice of the radio button. Then select the existing connection which will be used to access the PPTP/L2TP server or click the CREATE CONNECTION button.

If you have already configured the connection to the Internet and you want to use this WAN connection only to connect to the virtual private network, select the to the virtual private network choice of the radio button.

Click the CONTINUE button.

After creating a connection of the L2TP over IPsec type, on the Functions / Advanced / IPsec page, in the Status section, the current state of the IPsec tunnel is displayed.

Page 94 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Creating PPPoE IPv6 or PPPoE Dual Stack WAN Connection

On the connection creation page, in the General Settings section, select the relevant value from the Connection type drop-down list and specify the needed values.

Figure 78. The page for creating a new PPPoE IPv6 connection. The General Settings section.

Parameter Description

General Settings

Interface

Connection name

Enable connection

NAT

NATv6

A physical or virtual WAN interface to which the new connection will be assigned.

A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Move the switch to the left to disable the connection.

For the PPPoE Dual Stack type only.

If the switch is moved to the right, the network address translation function for IPv4 is enabled. Do not disable the function unless your

ISP requires this.

If the switch is moved to the right, the network address translation function for IPv6 is enabled. Do not disable the function unless your

ISP requires this.

Page 95 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Parameter

Ping

RIP

RIPng

Configuring via Web-based Interface

Description

If the switch is moved to the right, the router responds to ping requests from the external network through this connection. For security reasons, it is recommended to disable this function.

For the PPPoE Dual Stack type only.

Move the switch to the right to allow using RIP for this connection.

Move the switch to the right to allow using RIPng for this connection.

Figure 79. The page for creating a new PPPoE IPv6 connection. The Ethernet section.

Parameter Description

Ethernet

MAC address

MTU

A MAC address assigned to the interface. This parameter is mandatory if your ISP uses MAC address binding. In the field, enter the MAC address registered by your ISP upon concluding the agreement.

To set the router's MAC address, click the RESTORE DEFAULT

MAC ADDRESS button (the button is available when the switch is moved to the right).

The maximum size of units transmitted by the interface.

Page 96 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 80. The page for creating a new PPPoE IPv6 connection. The PPP section.

Parameter Description

PPP

Without authorization

Username

Password

Service name

MTU

Move the switch to the right if you don't need to enter a username and password to access the Internet.

A username (login) to access the Internet.

A password to access the Internet. Click the Show icon ( ) to display the entered password.

The name of the PPPoE authentication server.

The maximum size of units transmitted by the interface.

Page 97 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Encryption protocol

Authentication protocol

Keep Alive

Static IP address

PPP debug

Description

Select a method of MPPE encryption.

•

No encryption : MPPE encryption is not applied.

•

MPPE 40 128 bit : MPPE encryption with a 40-bit or 128-bit key is applied.

•

MPPE 40 bit : MPPE encryption with a 40-bit key is applied.

•

MPPE 128 bit : MPPE encryption with a 128-bit key is applied.

MPPE encryption can be applied only if the MS-CHAP , MS-

CHAPV2 , or AUTO value is selected from the Authentication protocol drop-down list.

Select a required authentication method from the drop-down list or leave the AUTO value.

LCP interval and LCP fails fields are available. Specify the required values.

Fill in the field if you want to use a static IP address to access the

Internet.

Move the switch to the right if you want to log all data on PPP connection debugging.

Page 98 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 81. The page for creating a new PPPoE Pv6 connection. The IPv4 section.

Parameter Description

Obtain DNS server addresses automatically

Primary DNS /

Secondary DNS

IPv4 (for the PPPoE Dual Stack type)

Move the switch to the right to configure automatic assignment of

DNS server addresses. Upon that the Primary DNS and

Secondary DNS fields are not available for editing.

Enter addresses of the primary and secondary DNS servers in the relevant fields.

Figure 82. The page for creating a new PPPoE Pv6 connection. The IP section.

Parameter Description

IPv6

Get IPv6

Enable prefix delegation

Select a method for IPv6 address assignment from the drop-down list or leave the Automatically value.

Move the switch to the right if it is necessary that the router requests a prefix to configure IPv6 addresses for the local network from a delegating router.

Page 99 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Obtain DNS server addresses automatically

Description

Move the switch to the right to configure automatic assignment of

IPv6 DNS server addresses. Upon that the Primary IPv6 DNS server and Secondary IPv6 DNS server fields are not available for editing.

Primary IPv6 DNS server / Secondary

IPv6 DNS server

Enter addresses of the primary and secondary IPv6 DNS servers in the relevant fields.

When all needed settings are configured, click the APPLY button.

Page 100 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Creating Mobile Internet WAN Connection

If the PIN code check is enabled for the SIM card inserted into your USB modem, for correct operation of the mobile WAN connection click the ENTER PIN button in the notification in the top right corner of the page and enter the PIN code in the window displayed. Then on the connection creation page, in the General Settings section, select the relevant value from the Connection type drop-down list and specify the needed values.

Figure 83. The page for creating a new Mobile Internet connection. The General Settings section.

Parameter Description

Connection name

Enable connection

A name for the connection for easier identification.

Move the switch to the right to enable the connection.

Move the switch to the left to disable the connection.

Use as interface

NAT

Ping

Move the switch to the right in order to create a network interface for this connection, for example, to combine several interfaces into a transparent connection.

If the switch is moved to the right, the network address translation function is enabled. Do not disable the function unless your ISP requires this.

If the switch is moved to the right, the router responds to ping requests from the external network through this connection. For security reasons, it is recommended to disable this function.

Page 101 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 84. The page for creating a new Mobile Internet connection. The Modem settings section.

Parameter Description

MODEM/SIM CARD

SELECTION

Modem settings

Click the button in order to assign the connection to one of connected USB modems.

Mode

APN

The value of the field specifies the type of the network to which the router connects. Leave the Auto value to let the router connect automatically to an available type of network, or select a needed value from the drop-down list.

An access point name.

Dial number

A number dialed to connect to the authorization server of the operator.

Without authorization

Move the switch to the right if your operator does not require authorization.

Authentication protocol Select a required authentication method from the drop-down list.

11 When several devices are connected to one USB port of the router, it is recommended to use a self-powered USB hub.

Page 102 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Parameter

Username

Password

Type

Configuring via Web-based Interface

Description

A username (login) to connect to the network of the operator.

A password to connect to the network of the operator. Click the

Show icon ( ) to display the entered password.

An IP version which will be used by this connection. Select the

IPv4 , IPv6 , or Dual value from the drop-down list.

Figure 85. The page for creating a new Mobile Internet connection. The PPP section.

Parameter Description

PPP

MTU

Keep Alive

The maximum size of units transmitted by the interface.

Move the switch to the right if you want the router to keep you connected to the network of your operator even when the connection has been inactive for a specified period of time. When the checkbox is selected, the LCP interval and LCP fails fields are available. Specify the required values.

Dial on demand

PPP debug

Move the switch to the right if you want to log all data on PPP connection debugging.

Page 103 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 86. The page for creating a new Mobile Internet connection. The Health Check section.

Parameter Description

Enable

Health Check

Move the switch to the right to check the connection health using the ICMP ping mechanism.

The maximum number of attempts

A number of requests to check the health of the connection. By default, the value 10 is specified.

Several ping requests are sent to check the hosts. After several failed attempts the connection status is changed until a successful attempt is made.

Timeout

Connection restart

A time period (in seconds) allocated for a respond to one ping request. By default, the value 3 is specified.

Move the switch to the right to reestablish connection if the maximum number of ping requests fails.

Page 104 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Addresses

Description

IP addresses from the external network that the router will check for availability via ICMP ping mechanism. By default, the router checks the IP address 8.8.8.8.

Click the ADD button, and in the line displayed, enter an IP address or leave value suggested by the router. You can add several addresses.

To remove an IP address from the list, click the Delete icon ( ) in the line of the address.

Modem IP address verification

Move the switch to the right to let the router request the actual IP address from the modem in case modem's IP address changes before expiration of the previous one.

When all needed settings are configured, click the APPLY button.

Page 105 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

VLAN

On the Settings / Internet / VLAN page, you can edit existing and create new virtual networks

(VLAN), e.g., for distinguishing traffic or specifying additional WAN interfaces.

By default, 2 VLANs are created in the router's system:

•

LAN : For the LAN interface, it includes LAN ports and Wi-Fi networks. You cannot delete this VLAN.

•

WAN : For the WAN interface; it includes the WAN port. You can edit or delete this VLAN.

Figure 87. The Settings / Internet / VLAN page.

In order to add untagged LAN ports or available Wi-Fi networks to an existing or new VLAN, first you need to exclude them from the LAN network on this page. To do this, select the LAN line. On the opened page, from the Type drop-down list of the element corresponding to the relevant LAN port or Wi-Fi network, select the Excluded value and click the APPLY button.

Page 106 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

To create a new VLAN, click the ADD button ( ) .

Configuring via Web-based Interface

Figure 88. The page for adding a VLAN.

You can specify the following parameters:

Parameter Description

Name

VLAN ID

QoS

A name for the VLAN for easier identification.

An identifier of the VLAN.

Create interface

A priority tag for the transmitted traffic.

Move the switch to the right to create an interface that can be used for creating WAN connections.

Move the switch to the left for the VLAN to work in the bridge mode. This mode is mostly used to connect IPTV set-top boxes.

Page 107 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Ports

Description

Select a type for each port included in the VLAN.

• Untagged : Untagged traffic will be transmitted through the specified port .

• Tagged : Tagged traffic will be transmitted through the specified port .

If at least one port of this type is included to the VLAN, it is required to fill in the VLAN ID and QoS fields.

Leave the Excluded value for the ports not included in the VLAN.

Wireless interfaces

Select the Untagged value for each Wi-Fi interface included in the

Leave the Excluded value for the Wi-Fi interfaces not included in the VLAN.

Click the APPLY button.

To edit an existing VLAN, select the relevant line in the table. On the page displayed, change the parameters and click the APPLY button.

To remove an existing VLAN, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

Page 108 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

DNS

On the Settings / Internet / DNS page, you can add DNS servers to the system.

Figure 89. The Settings / Internet / DNS page.

DNS servers are used to determine the IP address from the name of a server in Intranets or the

Internet (as a rule, they are specified by an ISP or assigned by a network administrator).

You can specify the addresses of DNS servers manually on this page or configure the router to obtain DNS servers addresses automatically from your ISP upon installing a connection. Also here you can specify addresses of reserve DNS servers which the router can use if the addresses specified manually or obtained automatically are unavailable.

When you use the built-in DHCP server, the network parameters (including DNS servers) are distributed to clients automatically.

Page 109 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Specify needed settings for IPv4 in the IPv4 section and for IPv6 in the IPv6 section.

If you want to configure automatic obtainment of DNS servers addresses, move the Manual switch to the left. Then move the Default gateway switch to the left and from the Interface drop-down list select a WAN connection which will be used to obtain addresses of DNS servers automatically.

If you want the router to use the default WAN connection to obtain addresses of DNS servers, move the Default gateway switch to the right.

To specify a DNS server manually, move the Manual switch to the right. In the Name Servers section of the relevant IP version, click the ADD SERVER button, and in the line displayed, enter an IP address of the DNS server.

To specify a reserve DNS server, in the Reserve Servers section of the relevant IP version, click the ADD SERVER button, and in the line displayed, enter an IP address of the DNS server.

To remove a DNS server from the page, click the Delete icon ( ) in the line of the address.

When all needed settings are configured, click the APPLY button.

Page 110 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Settings / WAN Failover

On the Settings / WAN Failover page, you can enable the WAN backup function, which provides you with uninterrupted access to the Internet. When your main connection breaks down, the router activates the backup connection; and when the main channel is recovered, the router switches to it and disconnects the reserve one.

Figure 90. The Settings / WAN Failover page.

To activate the backup function, create several WAN connections. After that go to the Settings /

WAN Failover page, move the Enable switch to the right.

In the Connections IPv4 section, the existing IPv4 connections are displayed in order of their priority. The first connection on the list serves as the main connection, the others are backup connections.

To change the priority of a connection, left-click the relevant line in the table.

Page 111 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 91. The window for changing the priority of a connection.

In the opened window, specify the needed parameters.

Parameter Description

Check with ping

Move the switch to the right to let the router use ICMP ping mechanism for checking the connection.

Move the switch to the left to let the router check only the status of the connection (may be useful for unstable connections).

Priority

The priority level of the connection. Level 1 is for the main connection, the others are backup connections. Select the required value from the drop-down list.

After specifying the needed parameters, click the SAVE button.

Page 112 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the Check with ping section, specify settings of checking the connection using ICMP ping mechanism.

Parameter Description

Check with ping

Interval between checks

A time period (in seconds) between regular checks of the hosts’ availability. By default, the value 30 is specified. The value of this field should not be higher than product of Waiting for response and Number of attempts fields values.

Several ping requests are sent to check the hosts. After a successful attempt the router keeps using the main connection. After several failed attempts the next connection from the list is enabled.

Waiting for response

Number of attempts

A time period (in seconds) allocated for a response to one ping request.

A number of failed attempts to check the health of a connection after which the next connection from the list is enabled.

Hosts

External IP addresses that the router will check for availability via

ICMP ping mechanism.

Click the ADD HOST button, and in the line displayed, enter an IP address or leave values suggested by the router.

To remove an IP address from the list, click the Delete icon ( ) in the line of the address.

When all needed settings are configured, click the APPLY button.

Page 113 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Settings / Wireless network

On the Settings / Wireless network page, you can change basic parameters for the wireless interface of the router and configure the basic and additional wireless networks. To configure the

2.4GHz band or 5GHz band, go to the relevant tab.

Figure 92. Basic settings of the wireless LAN.

Page 114 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the Basic Settings section, the following parameters are available:

Parameter Description

Enable Wireless

To enable Wi-Fi connection, move the switch to the right.

To disable Wi-Fi connection, move the switch to the left.

To enable/disable Wi-Fi connection on a schedule, click the Set schedule button ( ). In the opened window, you can create a

new schedule (see the Schedule section, page 225

) or use the existing one. Existing schedules are displayed in the Interval of execution drop-down list in the simplified mode.

To enable Wi-Fi connection at the time specified in the schedule and disable it at the other time, select the Enable wireless connection value from the Action drop-down list and click the

SAVE button.

To disable Wi-Fi connection at the time specified in the schedule and enable it at the other time, select the Disable wireless connection value from the Action drop-down list and click the

SAVE button.

To change or delete the schedule, click the Edit schedule button ( ) . In the opened window, change the parameters and click the SAVE button or click the DELETE FROM

SCHEDULE button.

Wireless mode

Select channel automatically

Enable additional channels

Channel

Enable periodic scanning

Operating mode of the wireless network of the router. This parameter defines standards of the devices that will be able to use your wireless network. Select a value from the drop-down list.

Move the switch to the right to let the router itself choose the channel with the least interference.

If the switch is moved to the left, the device automatically selects one of available standard channels. To use additional channels

(the 12th and 13th – in the 2.4 GHz band, the 100th and higher – in the 5 GHz band), move the switch to the right.

The wireless channel number. Left-click to open the window for selecting a channel (the action is available, when the Select channel automatically switch is moved to the left).

Move the switch to the right to let the router search for a free channel in certain periods of time. When the switch is moved to the right, the Scanning period field is available for editing.

Page 115 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Scanning period

Specify a period of time (in seconds) after which the router rescans channels.

When you have configured the parameters, click the APPLY button.

To edit the settings of the basic wireless network, in the Wi-Fi Network section, change the needed parameters and click the APPLY button.

Also you can create an additional wireless network. To do this, click the ADD WI-FI NETWORK button. On the opened page, specify the relevant parameters.

Parameter

Figure 93. Creating a wireless network.

Description

Wi-Fi Network

Network name (SSID) A name for the wireless network.

Page 116 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Hide SSID

Enable shaping

Broadcast wireless network

Description

If the switch is moved to the right, other users cannot see your Wi-Fi network. It is recommended not to hide the network in order to simplify initial configuration of the wireless network.

BSSID

Max Associated Clients

The unique identifier for this wireless network. You cannot change the value of this parameter, it is determined in the device's internal settings. The field is displayed in the settings of the existing wireless network.

The maximum number of devices connected to the wireless network.

When the value 0 is specified, the device does not limit the number of connected clients.

Move the switch to the right to limit the maximum bandwidth of the wireless network. In the Shaping field displayed, specify the maximum value of speed (Mbit/s).

Move the switch to the left not to limit the maximum bandwidth.

If the wireless network broadcasting is disabled, devices cannot connect to the wireless network. Upon that DIR-825 can connect to another access point as a wireless client.

To enable/disable broadcasting on a schedule, click the Set schedule button ( ). In the opened window, you can create a

new schedule (see the Schedule section, page 225

) or use the existing one. Existing schedules are displayed in the Interval of execution drop-down list in the simplified mode.

To enable broadcasting at the time specified in the schedule and disable it at the other time, select the Enable wireless network broadcasting value from the Action drop-down list and click the

SAVE button. When the wireless connection is disabled, the device will not be able to enable broadcasting of this wireless network on schedule .

To disable broadcasting at the time specified in the schedule and enable it at the other time, select the Disable wireless network broadcasting value from the Action drop-down list and click the

SAVE button.

Page 117 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Clients isolation

To change or delete the schedule, click the Edit schedule button

( ) . In the opened window, change the parameters and click the

SAVE button or click the DELETE FROM SCHEDULE button.

If you created an additional network, you can configure, change or delete a schedule for each network. To do this, click the button in the line of the network.

Move the switch to the right to forbid wireless clients of this wireless network to communicate to each other.

Enable guest network

This function is available for the additional network. Move the switch to the right if you want the devices connected to the additional network to be isolated from the devices and resources of the router's LAN.

In the Security Settings section, you can change security settings of the wireless network.

By default, the WPA2-PSK network authentication type of the wireless network is specified. WPS

PIN from the barcode label is used as the network key.

Figure 94. Network authentication types supported by the router.

The router supports the following authentication types:

Authentication type Description

Open

WEP

Open authentication (with WEP encryption for wireless network modes not supporting 802.11n or 802.11ac devices).

Authentication with a shared key with WEP encryption. This authentication type is not available when a mode supporting

802.11n or 802.11ac devices is selected from the Wireless mode drop-down list on the Settings / Wireless Network page.

WPA

WPA-PSK

WPA-based authentication using a RADIUS server.

WPA-based authentication using a PSK.

WPA2 WPA2-based authentication using a RADIUS server.

Page 118 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Authentication type

WPA2-PSK

WPA/WPA2 mixed

WPA-PSK/WPA2-PSK mixed

Description

WPA2-based authentication using a PSK.

A mixed type of authentication. When this value is selected, devices using the WPA authentication type and devices using the WPA2 authentication type can connect to the wireless network.

A mixed type of authentication. When this value is selected, devices using the WPA-PSK authentication type and devices using the

WPA2-PSK authentication type can connect to the wireless network.

WPA3-SAE

WPA2-PSK/WPA3-SAE mixed

WPA3-based authentication using a PSK and SAE method.

A mixed type of authentication. When this value is selected, devices using the WPA2-PSK authentication type and devices using the

WPA3-SAE authentication type can connect to the wireless network.

The WPA , WPA2 , and WPA/WPA2 mixed authentication types require a RADIUS server.

Page 119 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

When the Open or WEP value is selected, the following settings are displayed on the page

(unavailable for the wireless network operating modes which support the standard 802.11n or

802.11ac

Figure 95. The Open value is selected from the Network authentication drop-down list.

Parameter Description

Enable encryption WEP

For Open authentication type only.

To activate WEP encryption, move the switch to the right. Upon that the Default key ID drop-down list, the Encryption key WEP as

HEX switch, and four Encryption key fields are displayed on the page.

Default key ID

Encryption key

(1-4)

The number of the key (from first to fourth) which will be used for

WEP encryption.

Encryption key WEP as

HEX

Move the switch to the right to set a hexadecimal number as a key for encryption.

Keys for WEP encryption. The router uses the key selected from the

Default key ID drop-down list. It is required to specify all the fields. Click the Show icon ( ) to display the entered key.

Page 120 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

When the WPA-PSK , WPA2-PSK , WPA-PSK/WPA2-PSK mixed , WPA3-SAE , or WPA2-

PSK/WPA3-SEA mixed value is selected, the following fields are displayed on the page:

Figure 96. The WPA2-PSK value is selected from the Network authentication drop-down list.

Parameter Description

Password PSK

Encryption type

Group key update interval

A password for WPA encryption. The password can contain digits,

Latin letters (uppercase and/or lowercase), and other characters available in the US keyboard layout.

Click the Show icon ( ) to display the entered password.

An encryption method: TKIP , AES , or TKIP+AES .

TKIP and TKIP+AES encryption types are not available for

WPA3-SAE and WPA2-PSK/WPA3-SAE mixed authentication types.

The time period (in seconds), at the end of which a new key for WPA encryption is generated. When the value 0 is specified for this field, the key is not renewed.

12 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 121 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

802.11w (Protected

Management Frames)

For WPA2-PSK , WPA3-SAE , and WPA2-PSK/WPA3-SAE mixed authentication types only.

Protected Management Frames help to improve packet privacy protection for wireless data transmission. Select a value for the wireless network from the drop-down list.

•

Disabled : Protected Management Frames are not used.

•

Optional : Protected Management Frames are optional.

•

Required : Protected Management Frames are required.

When this value is selected, devices not supporting the

802.11w standard cannot connect to the wireless network.

The default value cannot be changed for WPA3-SAE and WPA2-

PSK/WPA3-SAE mixed authentication types.

When the WPA , WPA2 , or WPA/WPA2 mixed value is selected, the following settings are displayed on the page:

Figure 97. The WPA2 value is selected from the Network authentication drop-down list.

Parameter Description

WPA2 Preauthentication

Move the switch to the right to activate preliminary authentication

(displayed only for the WPA2 and WPA/WPA2 mixed authentication types).

IP address RADIUS server

The IP address of the RADIUS server.

Page 122 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

RADIUS server port A port of the RADIUS server .

RADIUS encryption key

The password which the router uses for communication with the

RADIUS server (the value of this parameter is specified in the

RADIUS server settings).

Encryption type

Group key update interval

An encryption method: TKIP , AES , or TKIP+AES .

The time period (in seconds), at the end of which a new key for WPA encryption is generated. When the value 0 is specified for this field, the key is not renewed.

802.11w (Protected

Management Frames)

For WPA2 authentication type only.

Protected Management Frames help to improve packet privacy protection for wireless data transmission. Select a value for the wireless network from the drop-down list.

•

Disabled : Protected Management Frames are not used.

•

Optional : Protected Management Frames are optional.

• Required : Protected Management Frames are required.

When this value is selected, devices not supporting the

802.11w standard cannot connect to the wireless network.

When you have configured the parameters, click the APPLY button.

To edit the basic or additional wireless network, left-click the relevant line in the table. On the opened page, change the needed parameters and click the APPLY button.

To remove the additional network, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ). Then click the APPLY button.

Page 123 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Settings / Network

To configure the router's local interface, go to the Settings / Network page.

IPv4

Go to the IPv4 tab to change the IPv4 address of the router, configure the built-in DHCP server, specify MAC address and IPv4 address pairs, or add own DNS records.

Figure 98. Configuring the local interface. The IPv4 tab. The Local IP Address section.

Parameter Description

Local IP Address

Mode of local IP address assignment

IP address

Mask

Gateway IP address

Available if the Access point , Repeater , or Client mode was selected in the Setup Wizard.

Select the needed value from the drop-down list.

•

Static : The IPv4 address, subnet mask, and the gateway IP address are assigned manually.

•

Dynamic : The router automatically obtains these parameters from the LAN DHCP server or from the router to which it connects.

The IPv4 address of the router in the local subnet. By default, the following value is specified: 192.168.0.1

The mask of the local subnet. By default, the following value is specified: 255.255.255.0

Available if the Access point , Repeater , or Client mode was selected in the Setup Wizard.

The gateway IPv4 address which is used by the router to connect to the Internet (e.g., for synchronizing the system time with an NTP server). Optional .

Page 124 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Parameter

Hostname

Configuring via Web-based Interface

Description

The name of the device assigned to its IPv4 address in the local subnet. For Wi-Fi clients, the device is not available by the domain name, if multicasting is disabled in the additional settings of Wi-Fi.

Figure 99. Configuring the local interface. The IPv4 tab. The Dynamic IP Addresses section.

Parameter Description

Mode of dynamic IP address assignment

Dynamic IP Addresses

An operating mode of the router's DHCP server.

• Disable : The router's DHCP server is disabled, clients' IP addresses are assigned manually.

•

Server : The router assigns IP addresses to clients automatically in accordance with the specified parameters.

When this value is selected, the Start IP , End IP , Lease time fields and the DNS relay switch are displayed on the tab. Also when this value is selected, the DHCP Options ,

Static IP Addresses , and Hosts sections are displayed on the tab.

• Relay : An external DHCP server is used to assign IP addresses to clients. When this value is selected, the

External DHCP server IP , Option 82 Circuit ID ,

Option 82 Remote ID , and Option 82 Subscriber ID fields are displayed on the tab. Available if the Mobile

Internet , Router , or WISP Repeater mode was selected in the Setup Wizard.

Page 125 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Start IP

End IP

Lease time

DNS relay

The start IP address of the address range used by the DHCP server to distribute IP addresses to clients.

The end IP address of the address range used by the DHCP server to distribute IP addresses to clients.

The lifetime of IP addresses leased by the DHCP server. At the end of this period the leased IP address is revoked and can be distributed to another device, unless the previous device has confirmed the need to keep the address.

Move the switch to the right so that the devices connected to the router obtain the address of the router as the DNS server address.

Move the switch to the left so that the devices connected to the router obtain the address transmitted by the ISP or specified on the

Settings / Internet / DNS page as the DNS server address.

External DHCP server IP

The IP address of the external DHCP server which assigns IP addresses to the router's clients.

Option 82 Circuit ID

Option 82 Remote ID

Option 82

Subscriber ID

Available if the Mobile Internet , Router , or WISP Repeater mode was selected in the Setup Wizard.

The value of the relevant field of DHCP option 82. Do not fill in the fields unless your ISP or the administrator of the external DHCP server provided these values.

When all needed settings are configured, click the APPLY button.

In the DHCP Options section, you can change default values for some options of DHCP protocol

(IP address, subnet mask, DNS servers) or specify additional parameters which the built-in DHCP server should send to clients to configure the local network.

Figure 100. Configuring the local interface. The IPv4 tab. The section for configuring DHCP options.

Page 126 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

To do this, click the ADD button ( ).

Configuring via Web-based Interface

Figure 101. Configuring the local interface. The IPv4 tab. The window for configuring a DHCP option.

In the opened window, you can specify the following parameters:

Parameter Description

Known DHCP options

From the drop-down list, select an option which you want to configure.

Specify the value for the selected option.

Options value

Force

Move the switch to the right to let the DHCP server send the selected option regardless of the client's request.

Move the switch to the left to let the DHCP server send the selected option only when the client requests it.

After specifying the needed parameters, click the APPLY button.

To edit the parameters of an option, left-click the relevant line in the table. In the opened window, change the needed parameters and click the APPLY button.

To remove the value of an option, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ). Then click the APPLY button.

Page 127 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the Static IP Addresses section, you can specify MAC address and IPv4 address pairs (set a fixed IPv4 address in the local area network for a device with a certain MAC address). The router assigns IPv4 addresses in accordance with the specified pairs only when the DHCP server is enabled (in the Dynamic IP Addresses section, the Server value is selected from the Mode of dynamic IP address assignment drop-down list).

Figure 102. Configuring the local interface. The IPv4 tab. The section for creating MAC-IPv4 pairs.

To create a MAC-IPv4 pair, click the ADD button ( ). In the opened window, fill in the MAC address field. You can choose a device connected to the router's LAN at the moment. To do this, select the relevant MAC address from the drop-down list (the field will be filled in automatically).

Then in the IP address field, enter an IPv4 address which will be assigned to the device with the specified MAC address. In the Hostname field, specify a network name of the device for easier identification ( optional ). Click the APPLY button.

To create MAC-IPv4 pairs for the devices connected to the router at the moment, click the

KNOWN CLIENTS button. In the opened window, select the needed device and click the OK button. To view the latest list of the connected devices, click the REFRESH button.

To edit the settings for an existing MAC-IPv4 pair, left-click the relevant line in the table. In the opened window, change the needed parameters and click the APPLY button.

To remove a MAC-IPv4 pair, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ). Then click the APPLY button. Also you can remove a pair in the editing window.

Page 128 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

If needed, you can add your own address resource records. To do this, click the ADD button ( ) in the Hosts section ( available if the Router or WISP Repeater mode was selected in the Setup

Wizard ).

Figure 103. Configuring the local interface. The IPv4 tab. The window for adding a DNS record.

In the IP address field, specify a host from the internal or external network. You can choose a device connected to the router's LAN at the moment. To do this, select the relevant IPv4 address from the drop-down list (the field will be filled in automatically). In the Name field, specify the domain name to which the specified IPv4 address will correspond. Click the SAVE button.

To edit an existing record, in the Hosts section, select the relevant line in the table. In the opened window, change the needed parameters and click the SAVE button.

To remove a record, in the Hosts section, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

After completing the work with records, click the APPLY button.

Page 129 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

IPv6

Go to the IPv6 tab to change or add the IPv6 address of the router, configure IPv6 addresses assignment settings, specify MAC address and IPv6 address pairs, or add own DNS records.

Figure 104. Configuring the local interface. The IPv6 tab. The Local IPv6 Address section.

To add an IPv6 address of the router, click the ADD button ( ). To change the IPv6 address of the router, select it in the table.

Figure 105. Configuring the local interface. The IPv6 tab. The window for adding an IPv6 address.

In the opened window, you can specify the following parameters:

Parameter Description

IPv6 address

Local IPv6 Address

The IPv6 address of the router in the local subnet.

Prefix The length of the prefix subnet.

Gateway IPv6 address

Available if the Access point or Repeater mode was selected in the Setup Wizard.

The gateway IPv6 address which is used by the router to connect to the Internet (e.g., for synchronizing the system time with an NTP server). Optional .

Click the APPLY button.

To remove the IPv6 address, select it in the table and click the DELETE button in the opened window. Then click the APPLY button.

Page 130 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the Dynamic IPv6 Addresses section, you can configure IPv6 addresses assignment settings.

Figure 106. Configuring the local interface. The IPv6 tab. The Dynamic IPv6 Addresses section.

Parameter Description

Mode of dynamic IPv6 address assignment

Address range

Dynamic IPv6 Addresses

Select the needed value from the drop-down list.

•

Disable : Clients' IPv6 addresses are assigned manually.

•

Stateful : The built-in DHCPv6 server of the router allocates addresses from the range specified in the Address range fields. Also when this value is selected, the Static IP

Addresses and Hosts sections are displayed on the tab.

• Stateless : Clients themselves configure IPv6 addresses using the prefix.

The start and the end values for the latest hextet (16 bit) of the range of IPv6 addresses which the DHCPv6 server distributes to clients.

Lease time

The default route for

LAN clients

The lifetime of IPv6 addresses provided to clients.

Move the switch to the right to let the clients, that received IPv6 addresses or configured them using the prefix, use the router as the default IPv6 route.

DNS relay

Move the switch to the right so that the devices connected to the router obtain the address of the router as the DNS server address.

Move the switch to the left so that the devices connected to the router obtain the address transmitted by the ISP or specified on the

Settings / Internet / DNS page as the DNS server address.

When all needed settings are configured, click the APPLY button.

Page 131 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the Static IP Addresses section, you can specify MAC address and IPv6 address pairs (set a fixed IPv6 address in the local area network for a device with a certain MAC address). The router assigns IPv6 addresses in accordance with the specified pairs only when the Stateful value is selected from the Mode of dynamic IPv6 address assignment drop-down list in the

Dynamic IPv6 Addresses section.

Figure 107. Configuring the local interface. The IPv6 tab. The section for creating MAC-IPv6 pairs.

To create a MAC-IPv6 pair, click the ADD button ( ). In the opened window, fill in the MAC address field. You can choose a device connected to the router's LAN at the moment. To do this, select the relevant MAC address from the drop-down list (the field will be filled in automatically).

Then in the IP address field, enter an IPv6 address which will be assigned to the device with the specified MAC address. In the Hostname field, specify a network name of the device for easier identification ( optional ). Click the APPLY button.

To create MAC-IPv6 pairs for the devices connected to the router at the moment, click the

KNOWN CLIENTS button. In the opened window, select the needed device and click the OK button. To view the latest list of the connected devices, click the REFRESH button.

To edit the settings for an existing MAC-IPv6 pair, left-click the relevant line in the table. In the opened window, change the needed parameters and click the APPLY button.

To remove a MAC-IPv6 pair, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ). Then click the APPLY button. Also you can remove a pair in the editing window.

If needed, you can add your own address resource records. To do this, click the ADD button ( ) in the Hosts section ( available if the Router or WISP Repeater mode was selected in the Setup

Wizard ).

Figure 108. Configuring the local interface. The IPv6 tab. The window for adding a DNS record.

In the IP address field, specify a host from the internal or external network. You can choose a device connected to the router's LAN at the moment. To do this, select the relevant IPv6 address from the drop-down list (the field will be filled in automatically). In the Name field, specify the domain name to which the specified IPv6 address will correspond. Click the SAVE button.

To edit an existing record, in the Hosts section, select the relevant line in the table. In the opened window, change the needed parameters and click the SAVE button.

Page 132 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To remove a record, in the Hosts section, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

After completing the work with records, click the APPLY button.

Page 133 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Settings / USB Storage

Information

On the Settings / USB Storage / Information page, you can view data on the USB storage connected to the router.

Figure 109. The Settings / USB Storage / Information page.

The following data are presented on the page: the name, total and free space of the storage, and the type of its file system (supported file systems: FAT16/32, NTFS, and ext2/3/4).

If the USB storage is divided into volumes, a section for every volume (partition) of the USB storage is displayed on the page.

To safely disconnect the USB storage or a volume of the USB storage, click the UNMOUNT button in the relevant section and wait for several seconds.

To disconnect all volumes of the USB storage, click the UNMOUNT ALL STORAGES button.

Page 134 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

USB Users

On the Settings / USB Storage / USB Users page, you can create user accounts to provide access to data on the USB storage connected to the router.

Figure 110. The Settings / USB Storage / USB users page.

To create a new user account, click the ADD button ( ).

Figure 111. The window for adding a user.

In the opened window, in the Username field, specify a username, and in the Password field – the password for the account. Use digits, Latin letters (uppercase and/or lowercase), and other characters available in the US keyboard layout.

Click the Show icon ( ) to display the entered key.

You cannot create accounts with the following usernames: admin and nobody .

For ext2, ext3, ext4, or FAT storages or storage partitions, it is possible to create users with limited rights. Move the Read only switch to the right not to let the user create, change, or delete files.

Click the SAVE button.

To view passwords of all user accounts, move the Show password switch to the right.

To change the password of an account, select the relevant line in the table. In the opened window, enter a new value in the Password field, and then click the SAVE button.

To remove an account, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

13 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 135 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Samba

On the Settings / USB Storage / Samba page, you can enable the built-in Samba server of the router to provide access to the USB storage for users of your LAN.

Figure 112. The Settings / USB Storage / Samba page.

To enable the Samba server, move the Enable Samba server switch to the right.

The Anonymous login switch (by default, the switch is moved to the right) allows anonymous access to the content of the USB storage for users of your LAN.

If you want to provide authorized access to the content of the USB storage for users of your LAN, move the switch to the left. After applying the parameters on this page, go to the USB Storage /

USB Users page and create needed accounts.

In the Work group field, leave the value specified by default ( WORKGROUP ) or specify a new name of a workgroup which participants will have access to the content of the USB storage.

In the Short description field, you can specify an additional description for the USB storage.

This value will be displayed in some operating systems. Use digits and/or Latin characters.

In the NetBIOS field, specify a name of the USB storage which will be displayed for users of your

LAN. Use digits and/or Latin characters.

To allow access only to a certain folder of the USB storage, click the ADD ( ) button in the

Directories section.

Page 136 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 113. Specifying a folder.

In the opened window, locate a folder containing files. To do this, click the Search icon ( ) in the Path field. Then go to the needed folder and click the SELECT button.

In the Name field, specify a name of the selected folder which will be displayed for users of your

LAN. Use digits and/or Latin characters.

Click the SAVE button.

To remove a folder from the list in the Directories section, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

After specifying the needed parameters, click the APPLY button.

To disable the built-in Samba server of the router, move the Enable Samba server switch to the left and click the APPLY button.

Page 137 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

FTP

On the Settings / USB Storage / FTP page, you can enable the built-in FTP server of the router to provide access to the USB storage for users of your LAN.

Figure 114. The Settings / USB Storage / FTP page.

To enable the FTP server, move the Enable FTP server switch to the right.

Move the Anonymous login switch to the right to allow anonymous access to the content of the

USB storage for users of your LAN. If you want to provide authorized access to the content of the

USB storage for users of your LAN, move the switch to the left . After applying the parameters on this page, go to the Settings / USB Storage / USB Users page and create needed accounts.

If needed, change the router's port used by the FTP server in the Port field (by default, the standard port 21 is specified).

To allow access only to a certain folder of the USB storage for users of your LAN, locate a folder containing files. To do this, click the Search icon ( ) in the Directory field. Then go to the needed folder and click the SELECT button.

After specifying the needed parameters, click the APPLY button.

To allow access to all the content of the USB storage for users of your LAN again, remove the value specified in the Directory field and click the APPLY button.

To disable the built-in FTP server of the router, move the Enable FTP server switch to the left and click the APPLY button.

Page 138 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Filebrowser

On the Settings / USB Storage / Filebrowser page, you can view the content of your USB storage connected to the router and remove separate folders and files from the USB storage.

Figure 115. The Settings / USB Storage / Filebrowser page.

To view the content of the USB storage, click the icon of the storage or storage partition. The list of folders and files will be displayed on the page.

To go to a folder, click the line corresponding to this folder.

To refresh the folder contents, click the Actions icon ( ) in the line corresponding to this folder and select the Refresh value.

To remove a folder or file, click the Actions icon ( ) in the line corresponding to this folder or file and select the Delete value.

Page 139 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

DLNA

On the Settings / USB Storage / DLNA page, you can enable the built-in DLNA server of the router to provide access to the USB storage for users of your LAN.

The built-in media server allows DLNA certified devices of your LAN to play multimedia content of the USB storage. Multimedia content can be played only when a USB storage is connected to the router.

Figure 116. The Settings / USB Storage / DLNA page.

To enable the DLNA server, move the Enable switch to the right.

In the Update interval field, specify the time period (in seconds), at the end of which the media server updates the file list of the USB storage, or leave the value specified by default ( 900 ).

In the DLNA server name field, specify a name of the DLNA server which will be displayed for users of your LAN or leave the value specified by default ( D-Link DLNA Server ). Use digits and/or Latin characters.

To allow access to the content of the USB storage for users of your LAN, click the ADD ( ) button in the Media Folders section.

Page 140 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 117. Specifying a media folder.

In the opened window, locate a folder containing files. To do this, click the Search icon ( ) in the Path field. Then go to the needed folder and click the SELECT button.

When selecting a folder which contains a large amount of files, use of the DLNA server can lead to unstable operation of the device.

For each folder you can define the type of files which will be available for users of your LAN. To do this, select the needed type of files from the Type drop-down list. To share all files of a folder, select the All value from the Type drop-down list.

Click the SAVE button.

To remove a folder from the list in the Media Folders section, select the checkbox located to the left of the relevant line in the table and click the DELETE ( ) button.

After specifying all needed settings on the USB Storage / DLNA page, click the APPLY button.

To disable the built-in DLNA server of the router, move the Enable switch to the left and click the

APPLY button.

Page 141 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Torrent Client

On the Settings / USB Storage / Torrent Client page, you can configure all needed settings for the built-in Transmission client.

Figure 118. The Settings / USB Storage / Torrent Client page.

You can specify the following parameters:

Parameter Description

Enable

Transmission

Move the switch to the right to activate the Transmission client.

Page 142 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Port

Path

Main Settings

Description

The router's port which will be used by the Transmission client.

Locate data of the Transmission client. To do this, click the Search icon ( ), select the needed value, and click the SELECT button.

Directory

Download queue size

The folder on the USB storage where data of the Transmission client will be stored.

Enable download queue

Move the switch to the right if you want to limit the number of simultaneous downloads. Upon that the Download queue size field will be displayed.

Move the switch to the left not to limit the number of simultaneous downloads.

The maximum number of simultaneous downloads. By default, the value 1 is specified.

Peer limit

The maximum number of the service users from which you can download files.

Enable download speed limit

Move the switch to the right to limit the maximum file download speed. In the Download speed limit field displayed, specify the maximum value of speed (KBps).

Move the switch to the left not to limit the maximum download speed.

Use uTP

Web interface port

Move the switch to the right to enable μTP ( Micro Transport

Protocol, a transport protocol for file sharing ). Such a setting can increase the load on the router.

Move the switch to the left to disable μTP.

The port on which the web-based interface of the Transmission client is available.

Enable

Username

Authorization

Move the switch to the right if you want the Transmission client to request for username and password when accessing its web-based interface. Then fill in the Username and Password fields.

The username to access the web-based interface of the Transmission client.

Page 143 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Password

The password to access the web-based interface of the Transmission client.

After specifying the needed parameters, click the SAVE button.

In the Web-interface page field, the address of the web-based interface of the Transmission client is displayed. To access the web-based interface of the Transmission client, click the link.

Figure 119. The web-based interface of the Transmission torrent client.

Using the web-based interface of the built-in Transmission torrent client you can manage the process of downloading files to the USB storage connected to the router.

The following buttons are available on the page:

Parameter Description

Open Torrent

Click the button to add a new torrent file (a metadata file according to which the Transmission client downloads files) to the download queue. In the dialog box appeared, select a file stored on your PC and click the Upload button.

Remove Selected

Torrents

Select the torrent file which you want to remove from the download queue and click the button.

Page 144 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Start Selected Torrents

Select the torrent file corresponding to the download which should be restarted and click the button.

Start All Torrents

Click the button to restart all downloads. If you limited the maximum number of simultaneous downloads, the Transmission client starts processing of the specified number of torrent files; after completing download of the first one, the client proceeds to the next file in the queue.

Pause Selected

Torrents

Select the torrent file corresponding to the download which should be stopped and click the button.

Pause All Torrents

Click the button to stop all downloads.

Select a torrent file and click the button to view its data.

Toggle Inspector

Page 145 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Settings / USB Modem

This menu is designed to operate USB modems.

Some models of USB modems do not allow performing operations available in this menu section through the web-based interface of the router.

If the PIN code check for the SIM card inserted into the USB modem is not disabled, the relevant notification will be displayed in the top right corner of the page.

Figure 120. The notification on the PIN code check.

Click the ENTER PIN button and enter the PIN code in the PIN Input window. Click the Show icon ( ) to display the entered code. Then click the APPLY button.

Figure 121. The window for entering the PIN code.

Some USB modems in the router mode and Android smartphones in the modem mode have an IP address from the subnet which coincides with the router's local subnet. In this case, the router's web-based interface can be unavailable. For correct operation, disconnect the device from the USB port and reboot the router. Then access the web-based interface, go to the Settings / Network page, and change the value of the IP address field on the IPv4 tab (for example, specify the value

192.168.2.1

). Wait until the router is rebooted.

Page 146 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Basic Settings

On the Settings / USB Modem / Basic Settings page, you can view data on the USB modem connected to the router, enable/disable the function for automatic creation of 3G/LTE WAN connection upon plugging a USB modem into the router, change the PIN code of the SIM card inserted into your USB modem, disable or enable the check of the PIN code.

Figure 122. The Settings / USB Modem / Basic Settings page.

If the Automatic creation of connection switch is moved to the right and the PIN code check for the SIM card inserted into your USB modem is disabled, then an active WAN connection with default settings (for LTE modems) or the operator's settings (for GSM modems) will be automatically created when plugging the USB modem into the router. The connection will be displayed on the Settings / Internet / WAN page.

If you don't want to use this function, move the Automatic creation of connection switch to the left.

When a USB modem is connected to the router, the following data are displayed on the page:

Parameter Description

Information

Model

Vendor

IMEI

The alphanumeric code of the model of your USB modem.

The manufacturer of your USB modem.

The code stored in the memory of the USB modem.

Page 147 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Interface

Revision

Serial number

Mode

RSSI

Signal level

Description

The network interface name.

The revision of the firmware of your USB modem.

The unique identifier assigned to the device by its manufacturer.

Network information

A type of the network to which the USB modem is connected.

The strength of the signal received by the USB modem.

The signal level at the input of the modem's receiver. The zero signal level shows that you are out of the coverage area of the selected operator's network.

Operator name

Roaming

IMSI

PIN status

The name of the mobile operator proving the service.

Roaming mode status of the SIM card inserted into the USB modem.

The code stored in the SIM card inserted into your USB modem.

PIN code request status of the SIM card inserted into the USB modem.

SMS

The number of text messages stored in the memory of the SIM card inserted into the USB modem.

Click the number of text messages in the line to go to Settings /

USB Modem / SMS page.

If the PIN code check for the SIM card inserted into your USB modem is not disabled, the PIN

INPUT button is displayed on the page.

To disable the PIN code check, click the DISABLE PIN CODE REQUEST button (the button is displayed if the PIN code check is enabled). In the opened window, enter the current PIN code in the PIN code field and click the DISABLE button

To enable the PIN code check, click the ENABLE PIN CODE REQUEST button (the button is displayed if the PIN code check is disabled). In the opened window, enter the PIN code used before disabling the check in the PIN code field and click the ENABLE .

To change the PIN code, click the CHANGING PIN CODE button (the button is displayed if the

PIN code check is enabled). In the opened window, enter the current code in the PIN code field, then enter a new code in the New PIN code and New PIN code confirmation fields and click the SAVE button.

Page 148 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

If upon one of the operations described above you have entered an incorrect value in the PIN code field three times (the number of remaining attempts is displayed in the PIN input window), the SIM card inserted into your USB modem is blocked.

Figure 123. The Settings / USB Modem / Basic Settings page. The window for PUK code input.

For further use of the card, click the PUK INPUT button, enter the PUK code in the relevant field, and then specify a new PIN code for your SIM card in the New PIN code and New PIN code confirmation fields. Click the APPLY button.

Click the USSD button to go to the Settings / USB Modem / USSD page.

Page 149 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

SMS

When a new text message is received, the relevant notification will be displayed in the top right corner of the page. Click the CHECK button. After clicking the button, the Settings / USB

Modem / SMS page opens.

On the Settings / USB Modem / SMS page, you can create and send a text message, view data on a number of messages and the memory state of the SIM card inserted into the USB modem, and also view the history of sent and received messages stored in the memory of the SIM card.

Figure 124. The Settings / USB Modem / SMS page. The SMS tab.

To view all outgoing and incoming messages on the SMS tab, select the relevant value from the

Message filter drop-down list.

To view the latest data on sent and received messages, click the REFRESH button.

Page 150 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To create and send a text message, click the CREATE MESSAGE button ( ).

Figure 125. The window for creating a new text message.

In the Number field, enter the recipient's phone number. If you need to send the text message to several recipients, click the ADD button, and in the line displayed, enter a phone number. Enter the text of the message in the Message field and click the SEND button.

To remove a message, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

To reply to an incoming message, click the REPLY button in the line corresponding to the message.

To forward an incoming message, click the FORWARD button in the line corresponding to the message.

On the SMS Memory tab, you can view data on the number of messages and the state of the SIM card memory.

Figure 126. The Settings / USB Modem / SMS page. The SMS Memory tab.

Page 151 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

USSD

On the Settings / USB Modem / USSD

page, you can send a USSD command.

USSD ( Unstructured Supplementary Service Data ) is a technology which provides real-time message exchange between a subscriber and a mobile operator's special application. USSD commands are often used to check the SIM card balance, receive data on the rate plan or service packets, etc.

Figure 127. The Settings / USB Modem / USSD page.

In the Number field, enter a USSD command and click the SEND button. After a while, the results will be displayed in the Response field.

14 Contact your operator to get information on USSD commands and their functions.

Page 152 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Functions / Firewall

IP Filter

On the Functions / Firewall / IP filter page, you can create new rules for filtering IP packets and edit or remove existing rules.

Figure 128. The Functions / Firewall / IP filter page.

To create a new rule, click the ADD button ( ).

Page 153 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 129. The page for adding a rule for IP filtering.

You can specify the following parameters:

Parameter Description

Enable rule

Name

Action

General Settings

Move the switch to the right to enable the rule.

Move the switch to the left to disable the rule.

Enter a name for the rule for easier identification.

Select an action for the rule.

•

Allow : Allows packet transmission in accordance with the criteria specified by the rule.

•

Deny : Denies packet transmission in accordance with the criteria specified by the rule.

Page 154 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Protocol

IP version

Direction

Start IPv4 address /

Start IPv6 address

Description

A protocol for network packet transmission. Select a value from the drop-down list.

An IP version to which the rule will be applied. Select the relevant value from the drop-down list.

The direction of network packet transmission to which the rule will be applied. Select the relevant value from the drop-down list.

• LAN to WAN : The rule will be applied to the packets transmitted from the local network to the external network.

•

WAN to LAN : The rule will be applied to the packets transmitted from the external network to the local network.

•

LAN to Router : The rule will be applied to the packets transmitted from the local network to DIR-825.

•

WAN to Router : The rule will be applied to the packets transmitted from the external network to DIR-825.

Source IP Address

Set as Select the needed value from the drop-down list.

Start IPv4 address /

Start IPv6 address

The source host start IPv4 or IPv6 address.

If it is necessary to specify a single address, leave the End IPv4 address / End IPv6 address field blank.

You can choose a device connected to the router's LAN at the moment. To do this, select the relevant IPv4 or IPv6 address from the drop-down list (the field will be filled in automatically).

End IPv4 address /

End IPv6 address

The source host end IPv4 or IPv6 address.

Subnet IPv4 address /

Subnet IPv6 address

The source subnet IPv4 or IPv6 address. The field is displayed when the Subnet value is selected from the Set as drop-down list.

Destination IP Address

Set as Select the needed value from the drop-down list.

The destination host start IPv4 or IPv6 address.

If it is necessary to specify a single address, leave the End IPv4 address / End IPv6 address field blank.

You can choose a device connected to the router's LAN at the moment. To do this, select the relevant IPv4 or IPv6 address from the drop-down list (the field will be filled in automatically).

Page 155 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

End IPv4 address /

End IPv6 address

The destination host end IPv4 or IPv6 address.

Subnet IPv4 address /

Subnet IPv6 address

The destination subnet IPv4 or IPv6 address. The field is displayed when the Subnet value is selected from the Set as drop-down list.

Ports

Destination port

Set source port manually

A port of the destination IP address. You can specify one port, several ports separated by a comma, or a range of ports separated by a colon.

Move the switch to the right to specify a port of the source IP address manually. Upon that the Source port field is displayed.

Source port

A port of the source IP address. You can specify one port, several ports separated by a comma, or a range of ports separated by a colon.

Click the APPLY button.

To set a schedule for the IP filter rule, click the Set Schedule button ( ) in the line corresponding to this rule. In the opened window, you can create a new schedule ( see the

Schedule

section, page

225) or use the existing one. Existing schedules are displayed in the

Interval of execution drop-down list in the simplified mode.

To enable the IP filter rule at the time specified in the schedule and disable it at the other time, select the Enable rule value from the Action drop-down list and click the SAVE button.

To disable the IP filter rule at the time specified in the schedule and enable it at the other time, select the Disable rule value from the Action drop-down list and click the SAVE button.

To edit a rule, select the relevant line in the table. In the opened window, change the needed parameters and click the APPLY button.

To change or delete the schedule for a rule, click the Edit schedule button ( ) in the line corresponding to this rule. In the opened window, change the parameters and click the SAVE button or click the DELETE FROM SCHEDULE button.

To remove a rule, select the checkbox located to the left of the relevant line of the table and click the DELETE button ( ). Also you can remove a rule in the editing window.

Page 156 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

DMZ

A DMZ is a host or network segment located “between” internal (local) and external (global) networks. In the router, the DMZ implements the capability to transfer a request coming to a port of the router from the external network to a specified host of the internal network.

On the Functions / Firewall / DMZ page, you can specify the IP address of the DMZ host.

Figure 130. The Functions / Firewall / DMZ page.

To enable the DMZ, move the Enable switch to the right.

Enter the IP address of a host from your network in the IP address field. To choose a device connected to the router's LAN at the moment, select the relevant value from the drop-down list (the field will be filled in automatically).

Move the Enable NAT Loopback switch to the right in order to let the users of the router's LAN access the DMZ host using the external IP address of the router or its DDNS name (if a DDNS service is configured). Users from the external network access the router using the same address (or

DDNS name).

Click the APPLY button.

Note that when the DMZ is enabled, all traffic coming to a port of the WAN interface of the router is directed to the same port of the specified IP address. Also note that virtual servers have higher priority than the DMZ host. In other words, if there has been created a virtual server that directs traffic from external port 80 to a port of the device from the router's local network, then entering http://router_WAN_IP in the address bar, users of the external network are directed to the specified port and IP address configured for the virtual server, but not to port 80 of the device with the IP address specified on the Functions / Firewall / DMZ page.

Page 157 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To set a schedule for the DMZ, click the Set schedule button ( ). In the opened window, you can create a new schedule (

see the Schedule section, page 225) or use the existing one. Existing

schedules are displayed in the Interval of execution drop-down list in the simplified mode.

To enable the DMZ for the time specified in the schedule and disable it at the other time, select the

Enable rule value from the Action drop-down list and click the SAVE button.

To disable the DMZ for the time specified in the schedule and enable it at the other time, select the

Disable rule value from the Action drop-down list and click the SAVE button.

To change or delete the schedule for the DMZ, click the Edit schedule button ( ). In the opened window, change the parameters and click the SAVE button or click the DELETE FROM

SCHEDULE button.

To disable the DMZ, move the Enable switch to the left and click the APPLY button.

Page 158 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

MAC Filter

On the Functions / Firewall / MAC Filter page, you can configure MAC-address-based filtering for computers of the router's LAN.

Figure 131. The Functions / Firewall / MAC Filter page.

Select the needed action from the drop-down list in the Default mode section to configure filtering for all devices of the router's network:

•

Allow : Allows access to the router's network and to the Internet for devices (the value is specified by default);

•

Deny : Blocks access to the router's network for devices.

You can use the Deny mode only if an active rule which allows access to the device's network is created on the page.

To create a rule (specify a MAC address of a device for which the specified filtering mode will be applied), click the ADD button ( ).

Figure 132. The window for adding a rule for the MAC filter.

Page 159 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the opened window, you can specify the following parameters:

Parameter Description

Enable rule

Action

MAC address

Move the switch to the right to enable the rule.

Move the switch to the left to disable the rule.

Select an action for the rule.

•

Deny : Blocks access to the Internet for the device with the specified MAC address even if the default mode allows access for all devices.

•

Allow : Allows access to the router's network and to the

Internet for the device with the specified MAC address even if the default mode denies access for all devices.

The MAC address of a device from the router's LAN. You can enter the MAC address of a device connected to the router's LAN at the moment. To do this, select the relevant device from the drop-down list (the field will be filled in automatically).

Name

The name of the device for easier identification. You can specify any name.

After specifying the needed parameters, click the SAVE button.

To set a schedule for the MAC filter rule, click the Set Schedule button ( ) in the line corresponding to this rule. In the opened window, you can create a new schedule ( see the

Schedule

section, page

225) or use the existing one. Existing schedules are displayed in the

Interval of execution drop-down list in the simplified mode.

To enable the MAC filter rule at the time specified in the schedule and disable it at the other time, select the Enable rule value from the Action drop-down list and click the SAVE button.

To disable the MAC filter rule at the time specified in the schedule and enable it at the other time, select the Disable rule value from the Action drop-down list and click the SAVE button.

To edit a rule, select the relevant line in the table. In the opened window, change the needed parameters and click the SAVE button.

To remove a rule, select the checkbox located to the left of the relevant line of the table and click the DELETE button ( ). Also you can remove a rule in the editing window.

Page 160 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

AdBlock

On the Functions / Firewall / AdBlock page, you can enable the function of blocking advertisements which appear during web surfing.

Figure 133. The Functions / Firewall / AdBlock page.

To enable the advertisements blocking function, in the Common Settings section, move the

Enable switch to the right. Then in the URL section, click the ADD button and in the line displayed, enter a URL address of a file containing the list of advertising web sites which should be blocked. Click the APPLY button and wait while the file is being loaded to the memory of the USB storage. Also you can save the file with the list of advertising web sites to the device’s memory. To do this, move the Save to the device’s memory switch to the right, and then click the APPLY button.

Files saved to the device ’ s memory are updated upon every reboot of the router or its or firmware update. In case the file is not available at that moment, the list of web sites to be blocked will not be received.

If you don't want to use a file for blocking advertisements any longer, click the Delete icon ( ) in the line of the URL address of the relevant file. Then click the APPLY button.

To disable the advertisements blocking function, move the Enable switch to the left and click the

APPLY button.

Page 161 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Functions / Wi-Fi

Client Management

On the Functions / Wi-Fi / Client Management page, you can view the list of wireless clients connected to the router.

Figure 134. The page for managing the wireless clients.

If you want to disconnect a wireless device from your WLAN, select the checkbox in the line containing the MAC address of this device and click the DISCONNECT button.

To view the latest data on the devices connected to the WLAN, click the REFRESH button.

To view data on a connected device, left-click the line containing the MAC address of this device.

Page 162 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

WPS

On the Functions / Wi-Fi / WPS page, you can enable the function for configuration of the

WLAN.

The WPS function helps to configure the wireless network automatically. Devices connecting to the wireless network via the WPS function must support the WPS function.

The WPS function allows adding devices only to the basic wireless network of the router.

Before using the function you need to configure one of the following authentication types:

Open with no encryption, WPA2-PSK or with the AES encryption method. When other security settings are specified, controls of the WPS page are not available.

Figure 135. The page for configuring the WPS function.

You can activate the WPS function via the web-based interface or the hardware WPS button on the cover of the device.

To activate the WPS function via the hardware button, move the Enable Wi-Fi when WPS function is activated with hardware button switch to the right on the tabs of both bands.

Then, with the device turned on, push the button, hold it for 2 seconds, and release. Upon pressing the button, the wireless interfaces of the device are enabled if they were disabled before.

If you want to disable activating the WPS function via the hardware button, move the Enable

Wi-Fi when WPS function is activated with hardware button switch to the left on the tabs of both bands and make sure that the WPS function is not activated via the web-based interface.

To activate the WPS function via the web-based interface, click the ENABLE WPS button.

Page 163 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

When the WPS function is enabled, the Information section is available on the page.

Parameter Description

WPS state

The state of the WPS function:

•

Configured (all needed settings are specified; these settings will be used upon establishing the wireless connection)

•

Unconfigured (after activating the WPS function, the SSID and the encryption key will be configured automatically, the network authentication type will be changed to WPA2-PSK).

Network name (SSID) The name of the router's wireless network.

Network Authentication The network authentication type specified for the wireless network.

Encryption The encryption type specified for the wireless network.

Password PSK

UPDATE

The encryption password specified for the wireless network.

Click the button to update the data on the page.

Page 164 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Using WPS Function via Web-based Interface

To connect to the basic wireless network via the WPS function, follow the next steps:

1. Click the ENABLE WPS button.

2. In the WPS Control section, click the ESTABLISH CONNECTION button.

3. Select the PBC method in the software of the wireless device that you want to connect to the router's WLAN.

4. Click the relevant button in the software or press the WPS button on the cover of the wireless device that you want to connect to the WLAN.

5. Right after that, click the CONNECT button in the web-based interface of the router.

Using WPS Function without Web-based Interface

You can use the WPS function without accessing the web-based interface of the router. To do this, you need to configure the following router's settings:

1. Specify relevant security settings for the wireless network of the router.

2. Make sure that the Enable Wi-Fi when WPS function is activated with hardware button switch is moved to the right on the tabs of both bands.

3. Click the ENABLE WPS button.

4. Close the web-based interface (click the Logout line of the menu).

Later you will be able to add wireless devices to the WLAN by pressing the WPS button of the router.

1. Select the PBC method in the software of the wireless device that you want to connect to the router's WLAN.

2. Click the relevant button in the software or press the WPS button on the cover of the wireless device that you want to connect to the WLAN.

3. Press the WPS button of the router and release.

Page 165 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

WMM

On the Functions / Wi-Fi / WMM page, you can enable the Wi-Fi Multimedia function.

The WMM function implements the QoS features for Wi-Fi networks. It helps to improve the quality of data transfer over Wi-Fi networks by prioritizing different types of traffic.

Select the needed action from the Work mode drop-down list to configure the WMM function:

•

Auto : the settings of the WMM function are configured automatically (the value is specified by default).

•

Manual : the settings of the WMM function are configured manually. When this value is selected, the Access Point and Station sections are displayed on the page.

Figure 136. The page for configuring the WMM function.

All needed settings for the WMM function are specified in the device's system. Changing parameters manually may negatively affect your WLAN!

The WMM function allows assigning priorities for four Access Categories (AC):

•

BK ( Background ), low priority traffic (print jobs, file downloads, etc.).

•

BE ( Best Effort ), traffic from legacy devices or devices/applications that do not support

QoS.

•

VI ( Video ).

•

VO ( Voice ).

Parameters of the Access Categories are defined for both the router itself (in the Access Point section) and wireless devices connected to it (in the Station section).

To edit the parameters of an Access Category, left-click the relevant line. In the opened window, change the needed parameters.

Page 166 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 137. The window for changing parameters of the WMM function.

Parameter Description

AIFSN

CWMin / CWMax

Arbitrary Inter-Frame Space Number . This parameter influences time delays for the relevant Access Category. The lower the value, the higher is the Access Category priority.

Contention Window Minimum/Contention Window Maximum . Both fields influence time delays for the relevant Access Category. The

CWMax field value should not be lower, than the CWMin field value. The lower the difference between the CWMax field value and the CWMin field value, the higher is the Access Category priority.

TXOP

ACM

ACK

Transmission Opportunity . The higher the value, the higher is the

Access Category priority.

Admission Control Mandatory .

If the switch is moved to the right, the device cannot use the relevant Access Category.

Acknowledgment . Answering response requests while transmitting.

Displayed only in the Access Point section.

If the switch is moved to the left, the router answers requests.

If the switch is moved to the right, the router does not answer requests.

Click the SAVE button.

Page 167 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Client

On the Functions / Wi-Fi / Client page, you can configure the router as a client to connect to a wireless access point or to a WISP. To configure the 2.4GHz band or 5GHz band, go to the relevant tab.

Figure 138. The page for configuring the client mode.

To configure the router as a client, move the Enable switch to the right. Upon that the following fields are displayed on the page:

Parameter Description

Broadcast wireless network 2.4 GHz /

Broadcast wireless network 5 GHz

If the switch is moved to the left, devices cannot connect to the router's WLAN. Upon that the router can connect to another access point as a wireless client.

Connecting to network A method for connecting to another access point.

In the Wireless Networks section, the list of available wireless networks is displayed. To view the latest data on available wireless networks, click the UPDATE LIST button.

To connect to a wireless network from the list, select the needed network. Move the Network options switch to the right to view more detailed information on the network to which the router connects. If a password is required, enter it in the relevant field. Click the CONNECT button.

Page 168 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To connect to a hidden network, select the Connect to hidden network value from the

Connecting to network drop-down list. Then enter the network name in the Network name

(SSID) field. If needed, fill in the BSSID field. Then select the needed type of authentication from the Network authentication drop-down list.

When the Open or WEP authentication type is selected, the following settings are displayed on the page:

Parameter Description

Enable encryption WEP

Default key ID

For Open authentication type only.

To activate WEP encryption, move the switch to the right. Upon that the Default key ID drop-down list, the Encryption key WEP as

HEX switch, and four Encryption key fields are displayed on the page.

The number of the key (from first to fourth) which will be used for

WEP encryption.

Encryption key WEP as

HEX

Move the switch to the right to set a hexadecimal number as a key for encryption.

Encryption key

(1-4)

Keys for WEP encryption. The router uses the key selected from the

Default key ID drop-down list. It is required to specify all the fields. Click the Show icon ( ) to display the entered key.

When the WPA-PSK , WPA2-PSK , WPA-PSK/WPA2-PSK mixed, WPA3-SAE , and WPA2-

PSK/WPA3-SAE mixed authentication type is selected, the following fields are displayed:

Parameter Description

Password PSK

A password for WPA encryption. Click the Show icon ( ) to display the entered password.

Encryption type

An encryption method: TKIP , AES , or TKIP+AES .

TKIP and TKIP+AES encryption types are not available for

WPA3-SAE and WPA2-PSK/WPA3-SAE mixed authentication types.

When you have configured the parameters, click the APPLY button.

When connecting to a wireless access point, the wireless channel of DIR-825 will switch to the channel of the access point to which you have connected.

In addition, the Connection Information section in which you can view the connection status and the network basic parameters is displayed.

If you want to connect to the WISP network, after configuring the device as a client, you need to create a WAN connection with relevant parameters for the WiFiClient_2GHz_1 interface in the

2.4GHz band or for the WiFiClient_5GHz_1 interface in the 5GHz band.

Page 169 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Client Shaping

On the Functions / Wi-Fi / Client Shaping page, you can limit the maximum bandwidth of upstream and downstream traffic for each wireless client of the router by its MAC address.

Figure 139. The Functions / Wi-Fi / Client Shaping page.

If you want to limit the maximum bandwidth of traffic for the router’s wireless client, create a relevant rule. To do this, click the ADD button ( ).

Figure 140. The window for setting up rate limit.

Page 170 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the opened window, you can specify the following parameters:

Parameter Description

Frequency band

SSID

From the drop-down list, select a band of the wireless network.

A wireless network to which the rule will be applied. Select the needed value from the drop-down list.

Enabled

MAC address

If the switch is moved to the right, the rule is active.

Move the switch to the left to disable the rule.

In the field, enter the MAC address to which the rule will be applied. You can enter the MAC address of a device connected to the router's LAN at the moment. To do this, select the relevant device from the drop-down list (the field will be filled in automatically).

Upload

Maximum rate

Specify the maximum value of the upstream traffic rate (Mbit/s) or move the Not limited switch to the right not to limit the maximum bandwidth of upstream traffic.

Download

Maximum rate

Specify the maximum value of the downstream traffic rate (Mbit/s) or move the Not limited switch to the right not to limit the maximum bandwidth of downstream traffic.

After specifying the needed parameters, click the SAVE button.

To edit a rule, left-click the relevant rule. In the opened window, change the needed parameters and click the SAVE button.

To remove a rule, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

Page 171 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Additional

On page of the Functions / Wi-Fi / Additional section, you can define additional parameters for the WLAN of the router. To configure the 2.4GHz band or 5GHz band, go to the relevant tab.

Changing parameters presented on this page may negatively affect your WLAN!

Figure 141. Additional settings of the WLAN.

Page 172 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

The following fields are available on the page:

Parameter

Bandwidth

Autonegotiation

20/40 (Coexistence)

Description

The channel bandwidth for 802.11n standard in the 2.4GHz band

(the 2.4 GHz tab).

• 20 MHz : 802.11n clients operate at 20MHz channels.

• 20/40 MHz : 802.11n clients operate at 20MHz or 40MHz channels.

• Auto : the router automatically chooses the most suitable channel bandwidth for 802.11n clients.

The channel bandwidth for 802.11n and 802.11ac standards in 5GHz band (the 5 GHz tab).

•

20 MHz : 802.11n and 802.11ac clients operate at 20MHz channels.

•

20/40 MHz : 802.11n and 802.11ac clients operate at 20MHz or 40MHz channels.

•

20/40/80 MHz : 802.11ac clients operate at 20MHz, 40MHz, or 80MHz channels.

•

Auto : the router automatically chooses the most suitable channel bandwidth for 802.11n and 802.11ac clients.

Available on the 2.4 GHz tab.

Move the switch to the right to let the router automatically choose the channel bandwidth (20MHz or 40MHz) depending on availability of other APs within its operational range (this setting can substantially lower the data transfer rate of your wireless network).

The switch is displayed when the 20/40 MHz value is selected from the Bandwidth drop-down list.

TX Power

Drop multicast

Adaptivity mode

The transmit power (in percentage terms) of the router.

Move the switch to the right to disable multicasting for the router's

WLAN. Move the switch to the left to enable multicasting from the

WAN connection selected on the Functions / Advanced /

IGMP/MLD page. If the switch is moved to the right, the device will not be available by the domain name for Wi-Fi clients.

Move the switch to the right to prevent your wireless network from interfering with radars and other mobile or stationary radio systems.

Such a setting can slow down the router's WLAN.

Page 173 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Parameter

STBC

B/G protection

Short GI

Beacon Period

RTS threshold

Frag threshold

DTIM period

Configuring via Web-based Interface

Description

The STBC ( Space-time block coding ) technique allows increasing data transfer reliability even for portable devices equipped with poor antennas (smartphones, pads, etc.) due to using several data streams and processing several versions or received data.

Move the switch to the right if you need to use the STBC technique.

Available on the 2.4 GHz tab.

The 802.11b and 802.11g protection function is used to minimize collisions between devices of your wireless network.

Select a value from the drop-down list.

•

Auto : The protection function is enabled and disabled automatically depending on the state of the network (this value is recommended if your wireless local area network consists of both 802.11b and 802.11g devices).

•

Always On : The protection function is always enabled (this setting can substantially lower the efficiency of your wireless network).

•

Always Off : The protection function is always disabled.

Guard interval (in nanoseconds). This parameter defines the interval between symbols transmitted when the router is communicating to wireless devices.

•

Enable : the router uses the 400 ns short guard interval. Only for the wireless network operating modes which support

802.11n and 802.11ac standards (see the value of the

Wireless mode drop-down list on the Settings /

Wireless Network page).

•

Disable : the router uses the 800 ns standard guard interval.

The time interval (in milliseconds) between packets sent to synchronize the wireless network.

The minimum size (in bytes) of a packet for which an RTS frame is transmitted.

The maximum size (in bytes) of a non-fragmented packet. Larger packets are fragmented (divided).

The number of beacon frames between sending DTIM messages

(messages notifying on broadcast or multicast transmission).

Page 174 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Station Keep Alive

The time interval (in seconds) between keep alive checks of wireless devices from your WLAN. When the value 0 is specified, the checking is disabled.

When you have configured the parameters, click the APPLY button.

Page 175 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

MAC Filter

On the Functions / Wi-Fi / MAC Filter page, you can define a set of MAC addresses of devices which will be allowed to access the WLAN, or define MAC addresses of devices which will not be allowed to access the WLAN.

It is recommended to configure the Wi-Fi MAC filter through a wired connection to

DIR-825 .

Figure 142. The page for configuring the MAC filter for the wireless network.

By default, the Wi-Fi MAC filter is not configured.

To configure the MAC filter, first you need to create rules (specify MAC addresses of devices for which the specified filtering modes will be applied). To do this, click the ADD button ( ).

Figure 143. The window for adding a rule for the MAC filter.

Page 176 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

You can specify the following parameters:

Parameter

Frequency band

SSID

Description

From the drop-down list, select a band of the wireless network.

A wireless network to which the rule will be applied. Select the needed value from the drop-down list.

MAC address

Hostname

In the field, enter the MAC address of the device to which the selected filtering mode will be applied. You can enter the MAC address of a device connected to the router's LAN at the moment. To do this, select the relevant device from the drop-down list (the field will be filled in automatically).

The name of the device for easier identification ( optional ). You can specify any name.

Enable

If the switch is moved to the right, the rule is active.

Move the switch to the left to disable the rule.

When you have configured the parameters, click the SAVE button.

To edit the parameters of the existing rule, in the Filters section, left-click the needed rule. In the opened window, change the settings and click the SAVE button.

To remove the rule from the page, in the Filters section, select the checkbox located to the left of the relevant rule and click the DELETE button ( ).

After creating the rules you need to configure the filtering modes.

To open the basic or additional wireless network for the devices which MAC addresses are specified on this page and to close the wireless network for all other devices, in the section corresponding to the band ( 2.4 GHz or 5 GHz ), left-click the line of the wireless network. In the opened window, move the Enable MAC filter switch to the right. Upon that the MAC filter restrict mode drop-down list will be displayed. Select the Allow value from the drop-down list and click the SAVE button.

To close the wireless network for the devices which MAC addresses are specified on this page, select the Deny value from the MAC filter restrict mode drop-down list and click the SAVE button.

To set a schedule for the MAC filter rule, click the Set Schedule button ( ) in the line corresponding to this rule. In the opened window, you can create a new schedule ( see the

Schedule

section, page

225) or use the existing one. Existing schedules are displayed in the

Interval of execution drop-down list in the simplified mode.

To enable the MAC filter rule at the time specified in the schedule and disable it at the other time, select the Enable rule value from the Action drop-down list and click the SAVE button.

To disable the MAC filter rule at the time specified in the schedule and enable it at the other time, select the Disable rule value from the Action drop-down list and click the SAVE button.

Page 177 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To change or delete the schedule for a rule, click the Select schedule button ( ) in the line corresponding to this rule. In the opened window, change the parameters and click the SAVE button or click the DELETE FROM SCHEDULE button.

Page 178 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

EasyMesh

On the Functions / Wi-Fi / EasyMesh page, you can enable the EasyMesh function. This function is designed to quickly connect several devices into one transport network for providing high-quality Wi-Fi coverage in living units of complicated planning or for creating a large temporary Wi-Fi network for an outdoor event.

A mesh network consists of a main device (the Controller role) and subordinate devices (the Agent role).

Devices connect to each other via wireless or wired connection. The Controller device enables connection and configuration of other devices of the mesh network, controls the data flow and the roaming of clients between devices in this network. Agents execute commands from the

Controller device and serve as Wi-Fi access points for subordinate devices.

Figure 144. The Functions / Wi-Fi / EasyMesh page.

To activate the EasyMesh function, in the Settings section, move the Enable switch to the right.

In the Device Role field, the current role of the device in the mesh network is displayed. To configure DIR-825 as the main or subordinate device of the mesh network, go to the Setup

Wizard

section (see the Setup Wizard section, page 48), from the

Connection method list, select the EasyMesh value. Then from the Device Role list, select the required value.

In the Device name field, specify a name of the device for easier identification. You can specify any name.

15 At present, you can connect up to 6 D-Link devices with EasyMesh support: 1 in the Controller role and 5 in the

Agent role.

Page 179 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

When you have configured the parameters, click the APPLY button.

To complete your mesh network configuration, connect subordinate devices to the main device.

Connecting Subordinate Devices with Ethernet Cable

To connect a subordinate device with an Ethernet cable, follow the next steps:

1. Connect an Ethernet cable between any of the LAN ports of the main and subordinate device.

2. Wait for about 4 minutes for the subordinate device to receive all mesh network settings from the main device, including SSID and password.

3. Make sure that the connection is established. To do this, in the web-based interface of the main device, on the Functions / Wi-Fi / EasyMesh page, in the Network topology section, check the information on the connected devices.

Connecting Subordinate Devices with Hardware Button

To connect a subordinate device with the hardware WPS button, follow the next steps:

1. Simultaneously press the hardware WPS button on the cover of the main and the subordinate device (or two subordinate devices, if one of them has previously been connected to the mesh network).

Do not press the button on more than two devices simultaneously.

2. The WLAN 2.4G and WLAN 5G LEDs should start blinking one at a time. Wait for about

4 minutes for the subordinate device to receive all mesh network settings from the main device, including SSID and password.

3. Make sure the connection is successful. To do this, in the web-based interface of the main device, on the Functions / Wi-Fi / EasyMesh page, in the Network topology section, check the information on the connected devices.

Page 180 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Connecting Subordinate Devices via Web-based Interface

To connect a subordinate device with the ESTABLISH CONNECTION button in the web-based interface, follow the next steps:

1. Simultaneously press the ESTABLISH CONNECTION button in the web-based interface the main and the subordinate device (or two subordinate devices, if one of them has previously been connected to the mesh network).

Do not press the button on more than two devices simultaneously.

2. The WLAN 2.4G and WLAN 5G LEDs should start blinking one at a time. Wait for about

4 minutes for the subordinate device to receive all mesh network settings from the main device, including SSID and password.

To view detailed data on a mesh network device, click the line corresponding to this device in the

Network topology section.

Figure 145. The device information page.

Page 181 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Functions / Advanced

UPnP IGD

On the Functions / Advanced / UPnP IGD page, you can enable the UPnP IGD protocol. The router uses the UPnP IGD protocol for automatic configuration of its parameters for network applications requiring an incoming connection to the router.

Figure 146. The Functions / Advanced / UPnP IGD page.

If you want to manually specify all parameters needed for network applications, move the Enable switch to the left. Then go to the Functions / Advanced / Virtual Servers page and specify needed settings.

If you want to enable the UPnP IGD protocol in the router, move the Enable switch to the right.

When the protocol is enabled, the following parameters of the router are displayed on the page:

Parameter Description

Protocol

IP address

A protocol for network packet transmission.

Private port

Public port

Description

Duration

The IP address of a client from the local area network.

A port of a client's IP address to which traffic is directed from a public port of the router.

A public port of the router from which traffic is directed to a client's

IP address.

Information transmitted by a client's network application.

The time period during which the UPnP IGD protocol has been used.

Page 182 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Remote Access

On the Functions / Advanced / Remote Access page, you can configure access to the webbased interface of the router. By default, the access from external networks to the router is closed. If you need to allow access to the router from the external network, create relevant rules.

Figure 147. The Functions / Advanced / Remote Access page.

To create a new rule, click the ADD button ( ).

Figure 148. The window for adding a rule for remote management.

Page 183 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the opened window, you can specify the following parameters:

Parameter Description

Name

Interface

IP version

A name for the rule for easier identification. You can specify any name.

From the drop-down list, select an interface (WAN connection) through which remote access to the router will operate. Leave the

Automatic value to allow remote access to operate through all created WAN connections.

An IP version to which the rule will be applied. Select the relevant value from the drop-down list.

Open access from any external host

Move the switch to the right to allow access to the router for any host. Upon that the IP address and Mask fields are not displayed.

IP address

A host or a subnet to which the rule is applied. You can specify an

IPv4 or IPv6 address.

Mask

Public port

For the IPv4-based network only.

The mask of the subnet.

For the IPv4-based network only.

An external port of the router. You can specify only one port.

Protocol The protocol available for remote management of the router.

After specifying the needed parameters, click the SAVE button.

To edit a rule for remote access, left-click the relevant rule. In the opened window, change the needed parameters and click the SAVE button.

To remove a rule for remote access, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

Page 184 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Virtual Servers

On the Functions / Advanced / Virtual Servers page, you can create virtual servers for redirecting incoming Internet traffic to a specified IP address in the local area network.

Figure 149. The Functions / Advanced / Virtual Servers page.

To create a new virtual server, click the ADD button ( ) .

Page 185 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 150. The page for adding a virtual server.

You can specify the following parameters:

Parameter Description

General Settings

Enable

Name

Move the switch to the right to enable the server.

Move the switch to the left to disable the server.

A name for the virtual server for easier identification. You can specify any name.

Page 186 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Template

Interface

Protocol

NAT Loopback

Description

Select a virtual server template from the drop-down list, or select

Custom to specify all parameters of the new virtual server manually.

A WAN connection to which this virtual server will be assigned.

A protocol that will be used by the new virtual server. Select a value from the drop-down list.

Move the switch to the right in order to let the users of the router's

LAN access the local server using the external IP address of the router or its DDNS name (if a DDNS service is configured). Users from the external network access the router using the same address

(or DDNS name).

Public Network Settings

Remote IP

Public port

Enter the IP address of the server from the external network.

To add one more IP address, click the ADD REMOTE IP button and enter the address in the displayed line.

To remove the IP address, click the Delete icon ( ) in the line of the address.

A port of the router from which traffic is directed to the IP address specified in the Private IP field in the Private Network Settings section. You can specify one port or several ports separated by a comma.

Private Network Settings

Private IP

The IP address of the server from the local area network. To choose a device connected to the router's LAN at the moment, select the relevant value from the drop-down list (the field will be filled in automatically).

Private port

A port of the IP address specified in the Private IP field to which traffic is directed from the Public port . You can specify one port or several ports separated by a comma.

Click the APPLY button.

To edit the parameters of an existing server, select the relevant line in the table. On the opened page, change the needed parameters and click the APPLY button.

To remove a server, select the checkbox located to the left of the relevant line of the table and click the DELETE button ( ). Also you can remove a server on the editing page.

Page 187 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

TR-069 Client

On the Functions / Advanced / TR-069 Client page, you can configure the router for communication with a remote Auto Configuration Server (ACS).

The TR-069 client is used for remote monitoring and management of the device.

Figure 151. The page for configuring the TR-069 client.

You can specify the following parameters:

Parameter Description

TR-069 Client

Enable TR-069 client Move the switch to the right to enable the TR-069 client.

Interface

The interface which the router uses for communication with the

ACS. Leave the Automatic value to let the device select the interface basing on the routing table or select another value if required by your ISP.

Page 188 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Interval

Get URL address via

DHCP

URL address

Username

Password

Username

Inform Settings

Move the switch to the right so the router may send reports (data on the device and network statistics) to the ACS.

Specify the time period (in seconds) between sending reports.

Auto Configuration Server Settings

If the switch is moved to the right, the router obtains the URL address of the ACS upon establishing the Dynamic IP type connection.

If you need to specify the URL address manually, move the switch to the left and enter the needed value in the URL address field.

The URL address of the ACS provided by the ISP.

The username to connect to the ACS.

The password to connect to the ACS.

Connection Request Settings

The username used by the ACS to transfer a connection request to the router.

Password

Request port

The password used by the ACS.

The port used by the ACS. By default, the port 8999 is specified.

Request path The path used by the ACS.

When you have configured the parameters, click the APPLY button.

Page 189 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Static Route

On the Functions / Advanced / Static Route page, you can specify static (fixed) routes.

Figure 152. The Functions / Advanced / Static Route page.

To specify a new route, click the ADD button ( ) in the Routes section.

Figure 153. The window for adding a new route.

Page 190 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the opened window, you can specify the following parameters:

Parameter Description

Enable

Move the switch to the right to enable the route.

Move the switch to the left to disable the route.

Protocol

Interface

Destination network

Destination netmask

An IP version.

From the drop-down list, select an interface (connection) through which the device will communicate with the remote network. If you have selected the Auto value, the router itself sets the interface according to the data on the existing dynamic routes.

A remote network which can be accessed with help of this route.

You can specify an IPv4 or IPv6 address.

The format of a host IPv6 address is 2001:db8:1234::1 , the format of a subnet IPv6 address is 2001:db8:1234::/64 .

For IPv4 protocol only.

The remote network mask.

Gateway

Metric

An IP address through which the destination network can be accessed.

A metric for the route. The lower the value, the higher is the route priority. Optional .

Table

From the drop-down list, select a routing table for the route.

• group_1 table is used to route user traffic.

• main table is used to route management traffic from internal system services of the router.

After specifying the needed parameters, click the SAVE button.

To edit an existing route, select a relevant line of the table. In the opened window, change the needed parameters and click the SAVE button.

To remove an existing route, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

Page 191 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Dynamic DNS

On the Functions / Advanced / Dynamic DNS page, ou can configure the router to use one or several DDNS services.

A DDNS service allows associating a domain name with dynamic IP addresses. In order to use a service, it is necessary to register a domain name on the web site of your DDNS provider.

Figure 154. The Functions / Advanced / Dynamic DNS page.

To add a new DDNS service, click the ADD button ( ).

Figure 155. The page for adding a DDNS service.

Page 192 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

On the opened page, you can specify the following parameters:

Parameter Description

Enable

Hostname

DDNS service

Move the switch to the right to enable DDNS.

Move the switch to the left to disable DDNS.

Enter the full domain name registered at your DDNS provider.

If you want to use another domain name of this DDNS provider, click the ADD HOST button, and in the line displayed, enter the needed value.

To remove a domain name, click the Delete icon ( ) in the line of the name.

Select the DDNS provider from the drop-down list. If your provider is not in the list, select the Custom provider value and fill in the fields displayed on the page. Specify the DDNS provider name in the Name field, the domain name of the provider's server in the

Server field, and the location of settings in the Path field.

Username

Password

The username to authorize for your DDNS provider.

The password to authorize for your DDNS provider. Click the

Show icon ( ) to display the entered password.

Interface

From the drop-down list, select a WAN connection which will be used for DDNS, or leave the Default gateway value.

Update period

An interval (in minutes) between sending data on the router's external IP address to the relevant DDNS service.

After specifying the needed parameters, click the SAVE button.

To specify other parameters for a DDNS service, select the relevant line in the table. On the opened page, change the needed parameters and click the SAVE button.

To remove settings for a DDNS service, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

Page 193 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

IPsec

On the Functions / Advanced / IPsec page, you can configure VPN tunnels based on IPsec protocol.

IPsec is a protocol suite for securing IP communications.

Figure 156. The Functions / Advanced / IPsec page.

To allow IPsec tunnels, move the Enable switch to the right. Upon that the Tunnels and Status sections and the Logging level drop-down list are displayed on the page.

In the Status section, the current state of an existing tunnel is displayed.

From the Logging level drop-down list, select a detail level of messages recorded to the system log or leave the value specified by default. The Basic value is recommended to establish an IPsec tunnel faster. To view the log, go to the Management / System Log

page (see the System Log section, page 212).

Page 194 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To create a new tunnel, click the ADD button ( ) in the Tunnels section.

Setting for both devices which establish the tunnel should be the same.

Figure 157. The page for adding an IPsec tunnel. The General Settings section.

Page 195 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

You can specify the following parameters:

Parameter

Enable

Description

Move the switch to the right to enable the tunnel.

Move the switch to the left to disable the tunnel.

General Settings

Name

IP version

Dynamic IPsec

A name for the tunnel for easier identification. Use digits, Latin letters

(uppercase and/or lowercase), and other characters available in the US

keyboard layout.

An IP version.

Move the switch to the right to allow a remote host with any public IP address to connect to the router via IPsec protocol. Such a setting can be specified for one IPsec tunnel only. Connection requests via this tunnel can be sent by a remote host only.

Type

Remote host

Remote identifier

Select an identification method for the remote host (router) from the drop-down list:

•

Address : The remote host is identified by its IP address.

•

FQDN : The remote host is identified by its domain name.

The drop-down list is displayed if the Dynamic IPsec switch is moved to the left.

Enter the remote subnet VPN gateway IP address if the Address value is selected from the Type drop-down list.

Enter the remote subnet VPN gateway domain name if the FQDN value is selected from the Type drop-down list.

The field is available for editing if the Dynamic IPsec switch is moved to the left.

A remote host identifier to establish connection over IPsec with particular hosts only. To establish connection, DIR-825 remote identifier value should correspond to the local identifier value specified in the settings of the remote host. Use an IP address, domain name, or certificate CN. Optional.

16 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 196 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Parameter

Remote port

Pre-shared key

Local WAN

Local identifier

Local port

NAT Traversal

Configuring via Web-based Interface

Description

A port of the remote host, that is used for IPsec packets exchange during the First Phase of the connection. If the field is left blank, port

500 is used. If the field is left blank and the network address translation (NAT) function is used for the connection, port 4500 is used.

A PSK key for mutual authentication of the parties. Click the Show icon ( ) to display the entered key.

A WAN connection through which the tunnel will pass. Select a value from the drop-down list.

•

Interface : When this value is selected, the Interface dropdown list is displayed. Select an existing WAN connection from the list.

•

Default gateway : When this value is selected, the router uses the default WAN connection.

A local identifier of the router to establish connection over IPsec with particular hosts only. To establish connection, DIR-825 local identifier value should correspond to the remote identifier value specified in the settings of the remote host. Use an IP address, domain name, or certificate CN. Optional.

A port of the router, that is used for IPsec packets exchange during the

First Phase of the connection. If the field is left blank, port 500 is used.

If the field is left blank and the network address translation (NAT) function is used for the connection, port 4500 is used.

The NAT Traversal function allows VPN traffic to pass through the

NAT-enabled device. DIR-825 allows to forcibly encapsulate VPN traffic in UDP packets for passing through a remote device regardless of whether it supports address translation.

If you need to enable forced encapsulation of VPN traffic, select the

Enabled value.

If you need to disable forced encapsulation of VPN traffic, select the

Disabled value .

Page 197 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Mode

Allow traffic from

IPsec to router

Enable DPD

DPD delay

DPD timeout

TCP MSS

Description

An operation mode of the IPsec tunnel. Select a value from the dropdown list.

• TUNNEL : As a rule, it is used to create a secure connection to remote networks. In this mode, the source IP packet is fully encrypted and added to a new IP packet and data transfer is based on the header of the new IP packet.

•

TRANSPORT : As a rule, it is used to encrypt data stream within one network. In this mode, only the content of the source IP packet is encrypted, its header remains unchanged and data transfer is based on the source header.

Move the switch to the left to deny access to your router from the remote subnet via IPsec.

Move the switch to the right to enable using DPD protocol for this tunnel. Such a setting allows to check the status of the remote host: if encrypted packets exchange between the router and the remote host breaks down, the router starts sending DPD messages to the remote host. If the switch is moved to to the left, the DPD delay and DPD timeout fields are not available for editing.

A time period (in seconds) between DPD messages. By default, the value 30 is specified.

A waiting period for the response to a DPD message (in seconds). If the host does not answer in the specified time, the router breaks down the tunnel connection, updates information on it, and tries to reestablish the connection. By default, the value 120 is specified.

Maximum Segment Size of a TCP packet. This parameter influences the size of a TCP packet which will be sent from the remote host to the router.

If the Manua l value is selected, you can specify the value of this parameter for each subnet of the tunnel in the MTU field. The field is displayed in the window for adding a subnet in the Tunneled

Networks section.

If the Path MTU discovery value is selected, the parameter will be configured automatically for all created subnets.

Page 198 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 158. The page for adding an IPsec tunnel. The First Phase / The Second Phase sections.

Parameter Description

The First Phase

Encryption mode

First phase encryption algorithm

Select an encryption mode from the drop-down list.

Select an available encryption algorithm from the drop-down list.

Hashing mode Select a hashing mode from the drop-down list.

Size of hash The length of the hash in bits.

Hashing algorithm Select a hashing algorithm from the drop-down list.

First phase DHgroup type

A Diffie-Hellman key group for the First Phase. Select a value from the drop-down list.

IKE-SA lifetime

The lifetime of IKE-SA keys in seconds. After the specified period it is required to renegotiate the keys. The value specified in this field should be greater than the value specified in the IPsec-SA lifetime field.

Page 199 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Aggressive Mode

IKE version

Move the switch to the right to enable the aggressive mode for mutual authentication of the parties. Such a setting accelerates the connection establishment, but reduces its security.

IKE ( Internet Key Exchange ) is a protocol of keys exchange between two hosts of VPN connections. Select a version of the protocol from the drop-down list.

The Second Phase

Encryption mode

Second phase encryption algorithm

Hashing mode

Select an encryption mode from the drop-down list.

Select an available encryption algorithm from the drop-down list.

Select a hashing mode from the drop-down list.

Size of hash The length of the hash in bits.

Hashing algorithm Select a hashing algorithm from the drop-down list.

Enable PFS

Move the switch to the right to enable the PFS option ( Perfect

Forward Secrecy ). If the switch is moved to the right, a new encryption key exchange will be used for the Second Phase. This option enhances the security level of data transfer, but increases the load on DIR-825.

Second phase

DHgroup type

A Diffie-Hellman key group for the Second Phase. Select a value from the drop-down list. The drop-down list is available if the Enable PFS switch is moved to the right.

IPsec-SA lifetime

The lifetime of the Second Phase keys in seconds. After the specified period it is required to renegotiate the keys. The value specified in this field should be greater than zero.

To specify IP addresses of local and remote subnets for this tunnel, click the ADD button ( ) in the Tunneled Networks section.

If the IPsec tunnel operates over IKEv1 ( 1 is selected from the IKE version list in the The First

Phase section), you can create only one subnet.

If the IPsec tunnel operates over IKEv2 ( 2 is selected from the IKE version list in the The First

Phase section), you can create several subnets.

Page 200 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 159. The page for adding an IPsec tunnel. The window for adding a tunneled network.

In the opened window, you can specify the following parameters:

Parameter Description

Local network

Remote subnet

A local subnet IP address and mask.

A remote subnet IP address and mask.

MTU

The maximum size (in bytes) of a non-fragmented packet. The field is displayed when the Manual value is selected from the TCP MSS drop-down list in the General Settings section.

To edit fields in the Tunneled Networks section, select the relevant line in the table. In the opened window, change the needed parameters and click the SAVE button.

To remove a subnet, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ). Also you can remove a subnet in the editing window.

After configuring all needed settings for the IPsec tunnel, click the APPLY button.

To edit the parameters of an existing tunnel, in the Tunnels section, select the relevant tunnel in the table. On the opened page, change the needed parameters and click the APPLY button.

To disconnect an existing tunnel and establish it again, select the checkbox located to the left of the relevant line in the table and click the RECONNECT button.

To remove an existing tunnel, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ). Also you can remove a tunnel on the editing page.

To disable VPN tunnels based on IPsec protocol, move the Enable switch to the left.

Page 201 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Ports Settings

On the Functions / Advanced / Ports Settings page, you can configure or disable autonegotiation of speed and duplex mode or manually configure speed and duplex mode for each

Ethernet port of the router.

Also you can enable or disable data flow control in the autonegotiation mode. This function is used for equal load balancing in ISPs' networks. Contact your ISP to clarify if this function needs to be enabled.

Figure 160. The Functions / Advanced / Ports Settings page.

In order to configure autonegotiation or configure speed and duplex mode manually for an Ethernet port, select it in the table.

Autonegotiation should be enabled for both devices connected to each other.

When autonegotiation is disabled, speed and duplex mode settings for both devices connected to each other should be the same.

Page 202 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 161. The window for changing the settings of the router's port.

In the opened window, specify the needed parameters:

Parameter Description

Speed

Data transfer mode.

Select the A uto value to enable autonegotiation. When this value is selected, the Autonegotiation Modes and Flow control sections are displayed.

Select the 10M-Half , 10M-Full , 100M-Half , or 100M-Full value to manually configure speed and duplex mode for the selected port:

•

10M-Half : Data transfer in just one direction at a time (data can be either sent or received ) at the maximum possible rate of up to 10 Mbps .

• 10M-Full: Data transfer in two directions simultaneously

(data can be sent and received at the same time) at the maximum possible rate of up to 10 Mbps .

•

100MHalf: Data transfer in just one direction at a time (data can be either sent or received ) at the maximum possible rate of up to 100 Mbps.

•

100M-Full: Data transfer in two directions simultaneously

(data can be sent and received at the same time) at the maximum possible rate of up to 100 Mbps .

Autonegotiation Modes

To enable the needed data transfer modes, move relevant switches to the right.

Page 203 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Flow control

Description

Symmetric flow control

Move the switch to the right to enable the flow control function for the port.

Move the switch to the left to disable the flow control function for the port.

After specifying the needed parameters, click the SAVE button.

If in the future you need to edit the parameters of the router's port, select the port in the table. In the opened window, change the needed parameters and click the SAVE button.

Page 204 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Redirect

On the Functions/ Advanced / Redirect page, you can enable notifications on the reason of the

Internet connection failure. Notifications will be displayed in the browser window when a user is attempting to open a web site on the Internet.

Figure 162. The Functions / Advanced / Redirect page.

To configure notifications, click the ENABLE button. Then, in the Reasons for Redirect section, move the needed switches to the right.

Parameter Description

Reasons for Redirect

Physical connection error

No connection

Notifications in case of physical connection problems (the ISP's cable is not connected, an additional device needed to access the

Internet is not connected).

Notifications in case of problems of the default WAN connection

(authorization error, the IPS's server does not respond, etc.).

The device is not configured

Notifications in case when the device works with default settings.

When you have configured the parameters, click the APPLY button.

To disable notifications, click the DISABLE button.

Page 205 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

IGMP/MLD

On the Functions/ Advanced / IGMP/MLD page, you can allow the router to use IGMP and

MLD and specify needed settings.

IGMP and MLD are used for managing multicast traffic (transferring data to a group of destinations) in IPv4 and IPv6 networks correspondingly. These protocols allow using network resources for some applications, e.g., for streaming video, more efficiently.

Figure 163. The Functions / Advanced / IGMP/MLD page.

The following elements are available on the page:

Parameter Description

Enable

IGMP version

Interface

IGMP

Move the switch to the right to enable IGMP.

Select a version of IGMP from the drop-down list.

From the drop-down list, select a connection of the Dynamic IPv4 or

Static IPv4 type for which you need to allow multicast traffic (e.g. streaming video).

MLD

Enable

MLD version

Move the switch to the right to enable MLD.

Select a version of MLD from the drop-down list.

Interface

From the drop-down list, select a connection of the Dynamic IPv6 or

Static IPv6 type for which you need to allow multicast traffic (e.g. streaming video).

After specifying the needed parameters, click the APPLY button.

Page 206 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

ALG/Passthrough

On the Functions/ Advanced / ALG/Passthrough page, you can allow the router to use RTSP, enable the SIP ALG and PPPoE/PPTP/L2TP/IPsec pass through functions.

SIP is used for creating, modifying, and terminating communication sessions. This protocol allows telephone calls via the Internet.

RTSP is used for real-time streaming multimedia data delivery. This protocol allows some applications to receive streaming audio/video from the Internet.

The PPPoE pass through function allows PPPoE clients of computers from your LAN to connect to the Internet through connections of the router.

The PPTP pass through, L2TP pass through and IPsec pass through functions allow VPN PPTP,

L2TP and IPsec traffic to pass through the router so that clients from your LAN can establish relevant connections with remote networks.

Figure 164. The Functions / Advanced / ALG/Passthrough page.

Page 207 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

The following elements are available on the page:

Parameter

SIP

RTSP

Description

Move the switch to the right to enable SIP. Such a setting allows using the SIP ALG function. This function allows VoIP traffic to

pass through the NAT-enabled router.

Move the switch to the right to enable RTSP. Such a setting allows managing media stream: fast forward streaming audio/video, pause and start it.

PPPoE pass through

IPsec pass through

Move the switch to the right to enable the PPPoE pass through function.

Move the switch to the right to enable the IPsec pass through function.

L2TP pass through

Move the switch to the right to enable the L2TP pass through function.

PPTP pass through

Move the switch to the right to enable the PPTP pass through function.

After specifying the needed parameters, click the APPLY button.

17 On the Settings / Internet / WAN page, create a WAN connection, move the SIP switch to the right on the

Functions / Advanced / ALG/Passthrough page, connect an Ethernet cable between a LAN port of the router and the IP phone. Specify SIP parameters on the IP phone and configure it to obtain an IP address automatically (as

DHCP client).

Page 208 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Management

System Time

On the Management / System Time page, you can manually set the time and date of the router or configure automatic synchronization of the system time with a time server on the Internet.

Figure 165. The Management / System Time page.

To set the system time manually, follow the next steps:

1. Move the Enable NTP switch to the left.

2. In the Time Settings section, specify needed values. To specify the time set up your PC or portable device, click the SET LOCAL TIME button.

3. Click the APPLY button. The System date and System Time fields will be filled in automatically.

To enable automatic synchronization with a time server, follow the next steps:

1. Move the Enable NTP switch to the right.

2. Specify the needed NTP server or leave the value specified by default in the NTP Servers section. If you need to specify several servers, click the ADD SERVER button.

Page 209 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

3. Select your time zone from the Time zone drop-down list. To set the time zone in accordance with the settings of your operating system or portable device, click the

DETERMINE TIMEZONE button.

4. Click the APPLY button. The System date and System Time fields will be filled in automatically and the Completed value will be displayed in the Synchronization field.

Additional settings are also available on the page:

Parameter Description

UTC offset settings

Move the switch to the right to set the UTC ( Coordinated Universal

Time ) offset for the router clock manually. In the UTC offset field displayed, specify the required offset time (in minutes).

Configure daylight saving time manually

Get NTP server addresses using DHCP

Move the switch to the right to configure settings for daylight saving time for the router clock manually. In the Daylight Saving Time section displayed, specify the required offset time for daylight saving time (in minutes), and specify the needed values in the

Beginning of daylight saving time and End of daylight saving time sections.

Move the switch to the right if NTP servers addresses are provided by your ISP. Contact your ISP to clarify if this setting needs to be enabled.

If the switch is moved to the right, the NTP Servers section is not displayed.

Run as a server for the local network

Move the switch to the right to allow connected devices to use the IP address of the router in the local subnet as a time server.

Time interval between

NTP requests after synchronization with

NTP server

From the drop-down list, select a time period (in seconds) after which a request to update the system time will be sent to the NTP server or leave the Auto value.

Time interval between

NTP requests for unsynchronized NTP client

A time period (in seconds) after which a request to synchronize the system time will be sent to the NTP server.

Select the needed value from the drop-down list.

•

Auto : The time period is defined automatically.

•

Manual : The time period is defined in accordance with the value specified in the Interval value field.

Interval value

Specify the time period (in seconds). The minimum acceptable value is 3.

After specifying the needed parameters, click the APPLY button.

Page 210 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

When the router is powered off or rebooted, the system time is reset to the default value.

If you have set automatic synchronization for the system time, the internal clock of the device will be configured after connecting to the Internet. If you have set the system time manually, you need to set the time and date again (see above).

Page 211 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

System Log

On the Management / System Log page, you can set the system log options and configure sending the system log to a remote host and/or a USB storage connected to the router.

Figure 166. The Management / System Log page. The Settings tab.

To enable logging of the system events, go to the Settings tab and move the Enable switch to the right. Then specify the needed parameters.

Page 212 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter

Type

Level

Server

Port

USB Storage

Save log to a USB storage

Description

Logging

Select a type of logging from the drop-down list.

•

Local : the system log is stored in the router's memory. When this value is selected, the Server and Port fields are not displayed.

•

Remote : the system log is sent to the remote host specified in the Server field.

•

Remote and local : the system log is stored in the router's memory and sent to the remote host specified in the Server field.

Select a type of messages and alerts/notifications to be logged.

The IP or URL address of the host from the local or global network, to which the system log will be sent.

A port of the host specified in the Server field. By default, the value

514 is specified.

Record to USB

If a USB storage is connected to the router, its name is displayed in the field.

To safely disconnect the USB storage, click the UNMOUNT button.

Move the switch to the right so that the device could send the system log to the USB storage connected to it. Upon that the Path , File name , The maximum size of one file , and Number of files to keep fields are displayed.

Path

Click the Search icon ( ) located to the right of the field in order to locate the folder where system log files will be stored.

A name for system log files.

File name

The maximum size of one file

The maximum size (in kilobytes) of one system log file.

Number of files to keep

The maximum number of files allowed to be recorded on the USB storage. When this number is exceeded, the file containing the oldest data will be deleted. The field is available for editing if the value specified in the The maximum size of one file field is greater than zero.

After specifying the needed parameters, click the APPLY button.

Page 213 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To disable logging of the system events, move the Enable switch to the left and click the APPLY button.

To view the system log, go to the Log tab.

Figure 167. The Management / System Log page. The Log tab.

To view the latest system events, click the REFRESH button.

To save the system log to your PC, click the EXPORT button. The file will be stored in the download location of your web browser.

Page 214 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Administration

On the Management / Administration page, you can change the password for the administrator account used to access the web-based interface of the router and to access the device settings via

TELNET and SSH, restore the factory defaults, backup the current configuration, restore the router's configuration from a previously created file, save the changed settings to the non-volatile memory, reboot the device, or change the web-based interface language.

Figure 168. The Management / Administration page.

In order to change the password for the administrator account, in the User section, enter a new password in the New password and Password confirmation fields. Use digits, Latin letters

(uppercase and/or lowercase), and other characters available in the US keyboard layout.

Click the

Show icon ( ) to display the entered values. Then click the SAVE button.

To change the web-based interface language, select the needed value from the Language dropdown list.

18 0-9, A-Z, a-z, space, !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~.

Page 215 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

The following buttons are also available on the page:

Control

Factory

Backup

Restore

Description

Click the button to restore the factory default settings. Also you can restore the factory defaults via the hardware RESET button (see the

Back Panel section, page 17).

Click the button to save the configuration (all settings of the router) to your PC. The configuration backup will be stored in the download location of your web browser.

Click the button and follow the dialog box appeared to select a previously saved configuration file (all settings of the router) located on your PC and upload it.

Save

Click the button to save settings to the non-volatile memory.

The router saves changed settings automatically. If changed settings have not been saved automatically, a notification is displayed in the top right part of the page.

Reboot

Click the button to reboot the device. All unsaved changes will be lost after the device's reboot.

In the Idle time field specify a period of inactivity (in minutes) after which the router completes the session of the interface. By default, the value 5 is specified. Then click the SAVE button.

Page 216 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Telnet/SSH

On the Management / Telnet/SSH page, you can enable or disable access to the device settings via TELNET and/or SSH from your LAN. By default, access is disabled.

Figure 169. The Management / Telnet/SSH page.

To enable access via TELNET and/or SSH, move the Enable Telnet switch and/or Enable SSH switch to the right. In the Port field, enter the number of the router's port through which access will be allowed (by default, the port 23 is specified for Telnet and the port 22 is specified for SSH).

Then click the APPLY button.

To disable access via TELNET and/or SSH again, move the Enable Telnet switch and/or Enable

SSH switch to the left and click the APPLY button.

Page 217 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Yandex.DNS

This menu is designed to configure the Yandex.DNS service.

Yandex.DNS is a web content filtering service which provides the DNS server, protects a computer against malicious web sites, and blocks access to adult web sites.

Settings

On the Management / Yandex.DNS / Settings page, you can enable the Yandex.DNS service and configure its operating mode.

Figure 170. The Management / Yandex.DNS / Settings page.

To get detailed information on the service, click the About Yandex.DNS

link.

To enable the Yandex.DNS service, move the Enable switch to the right.

When the service is enabled, the Default Mode section is displayed on the page. Select the needed choice of the radio button to configure filtering for all devices of the router's network:

•

Protection off : when this value is selected, the service provides the DNS server with no restrictions on access to unsafe web sites;

•

Safe : when this value is selected, the service blocks access to malicious and fraudulent web sites;

Page 218 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

•

Child : when this value is selected, the service blocks access to malicious and fraudulent web sites and blocks access to adult content.

Also the selected filtering mode will be applied to all devices newly connected to the router's network.

After specifying all needed parameters, click the APPLY button.

To disable the Yandex.DNS service, move the Enable switch to the left and click the APPLY button.

Page 219 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Devices and Rules

On the Management / Yandex.DNS / Devices and Rules page, you can specify a filtering mode for each device separately.

Figure 171. The Management / Yandex.DNS / Devices and Rules page.

In the Known Clients section, the devices connected to the local network of the router at the moment and their relevant filtering mode are displayed.

To create a new filtering rule for a device, click the ADD button ( ) in the Rules section, or leftclick the name of the filtering mode in the line of the device for which a rule should be created in the Known Clients section.

Figure 172. Adding a new rule for the Yandex.DNS service.

Page 220 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the opened window, you can specify the following parameters:

Parameter Description

MAC address

Name Enter a name for the rule for easier identification. Optional .

Mode

Select an operating mode of the Yandex.DNS service for this rule.

Protection off : when this value is selected, the service provides the DNS server with no restrictions on access to unsafe web sites.

Safe : when this value is selected, the service blocks access to malicious and fraudulent web sites.

Child : when this value is selected, the service blocks access to malicious and fraudulent web sites and blocks access to adult content.

After specifying the needed parameters, click the SAVE button.

To edit a rule for filtering, select a relevant line of the table, in the opened window, change the needed values and click the SAVE button.

To remove a rule for filtering, select the checkbox located to the left of the relevant rule and click the DELETE button ( ). Also you can remove a rule in the editing window.

After completing the work with rules, click the APPLY button.

Page 221 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Firmware Update

On the Management / Firmware Update page, you can update the firmware of the router and configure the automatic check for updates of the router's firmware.

Update the firmware only when the router is connected to your PC via a wired connection.

Figure 173. The Management / Firmware Update page.

The current version of the router's firmware is displayed in the Current firmware version field.

By default, the automatic check for the router's firmware updates is enabled. If the Access point ,

Repeater , or Client mode was selected in the Setup Wizard, and the Static value is selected from the Mode of local IP address assignment list on the Connections Setup / LAN page, the

Gateway IP address field should also be filled in on order to realize automatic check.

If a firmware update is available, a notification will be displayed in the top right corner of the page.

To disable the automatic check for firmware updates, in the Remote Update section, move the

Check for updates automatically switch to the left and click the APPLY SETTINGS button.

To enable the automatic check for firmware updates, in the Remote Update section, move the

Check for updates automatically switch to the right. In the Interval field, specify the time period (in seconds) between checks or leave the value specified by default ( 43200 ).

You can update the firmware of the router locally (from the hard drive of your PC) or remotely

(from the update server).

Page 222 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Local Update

Attention! Do not turn off the router before the firmware update is completed. This may cause the device breakdown.

To update the firmware of the router locally, follow the next steps:

1. Download a new version of the firmware from www.dlink.ru

2. Click the CHOOSE FILE button in the Local Update section on the Management /

Firmware Update page to locate the new firmware file.

3. If you want to restore the factory default settings immediately after updating the firmware, move the Restore factory defaults after firmware update switch to the right.

4. Click the UPDATE FIRMWARE button.

5. Wait until the router is rebooted (about one and a half or two minutes).

6. Log into the web-based interface using the login ( admin ) and the current password.

If after updating the firmware the router doesn't work correctly, please restore the factory default settings. To do this, click the Factory button on the Management / Administration page. Wait until the router is rebooted.

Page 223 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Remote Update

Attention! Do not turn off the router before the firmware update is completed. This may cause the device breakdown.

To update the firmware of the router remotely, follow the next steps:

1. On the Management / Firmware Update page, in the Remote Update section, click the CHECK FOR UPDATES button to check if a newer firmware version exists.

2. Click the UPDATE FIRMWARE button (the button is displayed if a newer version of the firmware is available).

3. Wait until the router is rebooted (about one and a half or two minutes).

4. Log into the web-based interface using the login ( admin ) and the current password.

Page 224 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Schedule

On the Management / Schedule page, you can enable/disable Wi-Fi connection and configure automatic reboot of the device on a schedule, and set a schedule for different filter rules.

Before creating a schedule you need to configure automatic synchronization of the system time with a time server on the Internet (see t he

System Time section, page

Figure 174. The Management / Schedule page.

To configure automatic reboot of the device on a schedule, click the REBOOT ON SCHEDULE button in the Auto Reboot section.

Figure 175. The window for configuring automatic reboot on a schedule.

Page 225 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the opened window, in the System Time field, the system time of the device is displayed. You can select the Simplified mode choice of the radio button and specify the following parameters:

Parameter Description

Interval of execution

Simplified mode

Specify the time period for the device's reboot.

Every day : When this value is selected, the Time field is displayed in the section.

Every week : When this value is selected, the names of days of the week and the Time field are displayed in the section.

Every month : When this value is selected, the Day of month and

Time fields are displayed in the section.

Time

Days of week

Specify the time for the device's reboot.

Select a day or days of the week when the device will be automatically rebooted. To do this, select the checkbox located to the left of the relevant value.

Day of month

Specify a day of the month. You can specify one value or several values separated by a comma.

In the advanced mode, you can specify more parameters for the schedule using a cron expression.

To do this, select the Advanced mode choice of the radio button and specify the needed values in the fields displayed. You can specify one value or several values separated by a comma. You can use the character * (asterisk) to specify the entire range of possible values. Upon that the Schedule field will be filled in automatically.

Click the SAVE button.

To edit the automatic reboot schedule, click the EDIT button in the Auto Reboot section. In the opened window, change the needed parameters and click the SAVE button.

To disable automatic reboot of the device on a schedule, click the EDIT button in the Auto

Reboot section. In the opened window, click the DISABLE button.

Page 226 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

To set a schedule for a task which will be applied to a filter rule or will enable/disable Wi-Fi connection, click the ADD button ( ) in the All Tasks section.

Figure 176. The window for adding a schedule for a task.

In the opened window, in the System Time field, the system time of the device is displayed. You can select the Simplified mode choice of the radio button and specify the following parameters:

Parameter Description

Perform task on schedule

Interval of execution

Move the switch to the right to enable the schedule.

Move the switch to the left to disable the schedule.

Simplified mode

Specify the time period for performing a task.

Every minute .

Every hour : When this value is selected, the Time field is displayed in the section.

Every day : When this value is selected, the Time field is displayed in the section.

Page 227 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Parameter Description

Every week : When this value is selected, the names of days of the week and the Time field are displayed in the section.

Every month : When this value is selected, the Day of month and

Time fields are displayed in the section.

Specify the interval during which the task will be performing.

Specify the time when the task should start running.

Duration

Time

Days of week

Select a day or days of the week when the task will be performing.

To do this, select the checkbox located to the left of the relevant value.

Day of month

Specify a day of the month. You can specify one value or several values separated by a comma.

In the advanced mode, you can specify more parameters for the schedule using a cron expression.

Click the SAVE button.

To edit a schedule, in the All Tasks section, select the relevant line in the table. In the opened window, change the needed parameters and click the SAVE button.

To remove a schedule, in the All Tasks section, select the checkbox located to the left of the relevant line in the table and click the DELETE button ( ).

To assign a created schedule to a task which will be applied to a filter rule or will enable/disable

Wi-Fi connection, go to the relevant page of the web-based interface of the device.

Page 228 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Statistics

The pages of this section display data on the current state of the router.

Network Statistics

On the Management / Statistics / Network Statistics page, you can view statistics for all connections existing in the system (WAN connections, LAN, WLAN). For each connection the following data are displayed: name and state (when the connection is on, its name is highlighted in green, when the connection is off, its name is highlighted in red), IP address and subnet mask, and volume of data received and transmitted (with increase of the volume the units of measurement are changed automatically: byte, Kbyte, Mbyte, Gbyte).

Figure 177. The Management / Statistics / Network Statistics page.

To view detailed data on a connection, click the line corresponding to this connection.

Page 229 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Port Statistics

On the Management / Statistics / Port statistics page, you can view statistics for traffic passing through ports of the router. The information shown on the page can be used for diagnosing connection problems.

Figure 178. The Management / Statistics / Port Statistics page.

To view the full list of counters for a port, click the line corresponding to this port.

Page 230 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Routing

The Management / Statistics / Routing page displays the routing rules and routing tables.

Figure 179. The Management / Statistics / Routing page.

The Rules section displays routing rules, their corresponding routing tables, incoming and outgoing interfaces, priority levels, and other data.

The Tables section displays the list of routing tables stored in the device's memory. To view detailed information on routes, left-click the relevant line in the table.

Page 231 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Figure 180. The routing table page.

The opened page displays the information on routes in the selected routing table. The table contains destination IP addresses, gateways, subnet masks, and other data.

Page 232 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

DHCP

The Management / Statistics / DHCP page displays the information on computers that have been identified by hostnames and MAC addresses and have got IP addresses from the DHCP server of the device.

Figure 181. The Management / Statistics / DHCP page.

Page 233 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Multicast Groups

The Management / Statistics / Multicast Groups page displays addresses of active multicast groups (including IPTV channels and groups for transferring service information) to which the device is subscribed, and the interface through which the device is subscribed.

Figure 182. The Management / Statistics / Multicast Groups page.

Page 234 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Diagnostics

Ping

On the Management / Diagnostics / Ping page, you can check availability of a host from the local or global network via the Ping utility.

The Ping utility sends echo requests to a specified host and receives echo replies.

Figure 183. The Management / Diagnostics / Ping page.

To check availability of a host, enter the IP address or name of this host in the Host field and specify a number of requests that will be sent in order to check its availability in the Number of attempts field. If availability check should be performed with IPv6, move the IPv6 switch to the right.

Page 235 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

To specify additional settings, click the MORE SETTINGS button.

Configuring via Web-based Interface

Figure 184. The Management / Diagnostics / Ping page. The additional settings window.

In the opened window, in the Packet size field, specify the volume of data sent in a request. In the

Waiting for response field, specify the response waiting period in seconds. To restore the default field values, click the DEFAULT SETTINGS button.

After specifying the additional parameters, click the OK button.

To run the check, click the START button. After a while, the results will be displayed on the page.

If you need to interrupt the check, click the CANCEL button (the button is available from the moment the check starts).

To remove the check result from the page, click the CLEAR button.

Page 236 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

Traceroute

On the Management / Diagnostics / Traceroute page, you can determine the route of data transfer to a host via the traceroute utility.

Figure 185. The Management / Diagnostics / Traceroute page.

To determine the route, enter the name or IP address of a host in the Host field. If the route should be determined using IPv6, move the IPv6 switch to the right.

To specify additional settings, click the MORE SETTINGS button.

Figure 186. The Management / Diagnostics / Traceroute page. The additional settings window.

Page 237 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Configuring via Web-based Interface

In the opened window, you can specify the following parameters:

Parameter Description

Maximum TTL value

Specify the TTL ( Time to live ) parameter value. The default value is

30 .

Number of attempts The number of attempts to hit an intermediate host.

Wait time A period of waiting for an intermediate host response.

To restore the default field values, click the DEFAULT SETTINGS button.

After specifying the additional parameters, click the OK button.

To run the check, click the START button. After a while, the results will be displayed on the page.

The additional settings window.

If you need to interrupt the check, click the CANCEL button (the button is available from the moment the check starts).

To remove the check result from the page, click the CLEAR button.

Page 238 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Operation Guidelines

CHAPTER 5. OPERATION GUIDELINES

Safety Rules and Conditions

Please carefully read this section before installation and connection of the device. Make sure that the power adapter and cables are not damaged. The device should be used only as intended in accordance with the documents.

The device is intended for use in dry, clean, dust-free, and well ventilated areas with normal humidity away from strong heat sources. Do not use the device outdoors or in the areas with high humidity. Do not place foreign objects on the device. Do not obstruct the ventilation openings of the device. The environmental temperature near the device and the temperature inside the device's cover should be within the range from 0 °С to +40 °С.

Only use the power adapter supplied with the device. Do not plug in the adapter, if its case or cable are damaged. Plug the adapter only into working electrical outlets with parameters indicated on the adapter.

Do not open the cover of the device! Unplug the device before dusting and cleaning. Use a damp cloth to clean the device. Do not use liquid/aerosol cleaners or magnetic/static cleaning devices.

Prevent moisture getting into the device or the power adapter.

The service life of the device is 2 years.

Page 239 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Operation Guidelines

Wireless Installation Considerations

The DIR-825 device lets you access your network using a wireless connection from virtually anywhere within the operating range of your wireless network. Keep in mind, however, that the number, thickness and location of walls, ceilings, or other objects that the wireless signals must pass through, may limit the range. Typical ranges vary depending on the types of materials and background RF noise in your home or office. To maximize your wireless range, follow the guidelines below.

1. Keep the number of walls and ceilings between the DIR-825 device and other network devices to a minimum – each wall or ceiling can reduce your wireless network range by 3-

90 feet (1-30 meters).

2. Be aware of the direct line between network devices. Place your devices so that the signal travels straight through a wall or ceiling (instead of at an angle) for better reception.

3. Building materials make a difference. A solid metal door or aluminum studs may have a negative effect on your wireless range. Try to position your router, access points, and computers so that the signal passes through drywalls or open doorways. Materials and objects such as glass, steel, metal, walls with insulation, water (fish tanks), mirrors, file cabinets, brick, and concrete will degrade your wireless signal.

4. Keep your router away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate RF noise.

5. If you are using 2.4 GHz cordless phones or X-10 equipment (wireless devices such as ceiling fans, lights, and home security systems), your wireless connection may degrade dramatically or drop completely. Make sure your 2.4 GHz phone base is as far away from your wireless devices as possible. Note, that the base transmits a signal even if the phone in not in use.

Page 240 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Abbreviations and Acronyms

DHCP

DMZ

DNS

DPD

DQPSK

DSL

DSSS

CHAPTER 6. ABBREVIATIONS AND ACRONYMS

3G Third Generation

AC Access Category

AES

ARP

BPSK

BSSID

CCK

DBSK

DDNS

DDoS

DES

DTIM

GMT

GSM

HTTP

HTTPS

Advanced Encryption Standard

Access Point

Address Resolution Protocol

Binary Phase-shift Keying

Basic Service Set Identifier

Complementary Code Keying

Differential Binary Phase-shift Keying

Dynamic Domain Name System

Distributed Denial of Service

Data Encryption Standard

Dynamic Host Configuration Protocol

DeMilitarized Zone

Domain Name System

Dead Peer Detection

Differential Quadrature Phase-shift Keying

Digital Subscriber Line

Direct-sequence Spread Spectrum

Delivery Traffic Indication Message

Greenwich Mean Time

Global System for Mobile Communications

Hypertext Transfer Protocol

Hypertext Transfer Protocol Secure

Page 241 of 244

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

IPsec

ISP

L2TP

LAN

LCP

LED

LTE

MAC

MBSSID

MIB

ICMP

IGD

IGMP

IKE

IMEI

IMSI

IPTV

MIMO

MPPE

MS-CHAP

MTU

NAT

NIC

Internet Control Message Protocol

Identifier

Internet Gateway Device

Internet Group Management Protocol

Internet Key Exchange

International Mobile Equipment Identity

International Mobile Subscriber Identity

Internet Protocol

Internet Protocol Television

Internet Protocol Security

Internet Service Provider

Layer 2 Tunneling Protocol

Local Area Network

Link Control Protocol

Light-emitting diode

Long Term Evolution

Media Access Control

Multiple Basic Service Set Identifier

Management Information Base

Multiple Input Multiple Output

Microsoft Point-to-Point Encryption

Microsoft Challenge Handshake Authentication Protocol

Maximum Transmission Unit

Network Address Translation

Network Interface Controller

Abbreviations and Acronyms

Page 242 of 244

RTS

RTSP

SAE

SIM

SIP

SMB

QoS

QPSK

RADIUS

RIP

RIPng

NTP

OFDM

PBC

PFS

PIN

PoE

PPP pppd

PPPoE

PPTP

PSK

PUK

QAM

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

Network Time Protocol

Orthogonal Frequency Division Multiplexing

Push Button Configuration

Perfect Forward Secrecy

Personal Identification Number

Power over Ethernet

Point-to-Point Protocol

Point-to-Point Protocol Daemon

Point-to-point protocol over Ethernet

Point-to-point tunneling protocol

Pre-shared key

PIN Unlock Key

Quadrature Amplitude Modulation

Quality of Service

Quadrature Phase-shift Keying

Remote Authentication in Dial-In User Service

Routing Information Protocol

Next Generation Routing Information Protocol

Request To Send

Real Time Streaming Protocol

Security Association

Simultaneous Authentication of Equals

Subscriber Identification Module

Session Initiation Protocol

Server Message Block

Page 243 of 244

Abbreviations and Acronyms

DIR-825 AC1200 Wave 2 MU-MIMO Wi-Fi EasyMesh

Gigabit Router with 3G/LTE Support and USB Port

User Manual

SNMP

SSH

SSID

STBC

TCP

VLAN

VPN

WAN

WEP

Wi-Fi

WISP

TKIP

UDP

UPnP

URL

USB

WLAN

WMM

WPA

WPS

Simple Network Management Protocol

Secure Shell

Service Set Identifier

Space-time block coding

Transmission Control Protocol

Temporal Key Integrity Protocol

User Datagram Protocol

Universal Plug and Play

Uniform Resource Locator

Universal Serial Bus

Virtual Local Area Network

Virtual Private Network

Wide Area Network

Wired Equivalent Privacy

Wireless Fidelity

Wireless Internet Service Provider

Wireless Local Area Network

Wi-Fi Multimedia

Wi-Fi Protected Access

Wi-Fi Protected Setup

Abbreviations and Acronyms

Page 244 of 244