DIR-867 REVA MANUAL v1.01 WW EN

Version 1.
01| 2018/01/16
User Manual
AC1750+ MU-MIMO Wi-Fi Gigabit Router
DIR-867
Preface
D-Link reserves the right to revise this publication and to make changes in the content hereof without obligation to notify any
person or organization of such revisions or changes.
Manual Revisions
Revision Date Description
1.00 May 15, 2017 Initial release.
1.01 Jan 16, 2018 update Quick VPN and add D-Link Wi-Fi app
Trademarks
D-Link and the D-Link logo are trademarks or registered trademarks of D-Link Corporation or its subsidiaries in the United States or other countries.
All other company or product names mentioned herein are trademarks or registered trademarks of their respective companies.
Apple®, Apple logo®, Safari®, iPhone®, iPad® and Macintosh® are trademarks of Apple Inc., registered in the U.S. and other countries. App StoreSM
is a service mark of Apple Inc.
Chrome™ browser, Google Play™ and Android™ are trademarks of Google Inc.
Internet Explorer®, Windows® and the Windows logo are trademarks of the Microsoft group of companies.
Copyright © 2018 by D-Link Corporation, Inc.
All rights reserved. This publication may not be reproduced, in whole or in part, without prior expressed written permission from D-Link Corporation, Inc.
Power Usage
This device is an Energy Related Product (ErP) with High Network Availability (HiNA), and automatically switches to a power-saving Network
Standby mode within 1 minute of no packets being transmitted. It can also be turned off through a power switch to save energy when it is not
needed.
Network Standby: 4.85 watts
Switched Off: 0.06 watts
D-Link DIR-867 User Manual i

Table of Contents
Table of Contents
Product Overview............................................................... 1 Dynamic IP (DHCP).........................................................25
Package Contents.......................................................................... 1 Static IP...............................................................................26
System Requirements.................................................................. 2 PPPoE..................................................................................27
Introduction.................................................................................... 3 PPTP.....................................................................................29
Features............................................................................................. 5 L2TP.....................................................................................31
Hardware Overview...................................................................... 6 DS-Lite................................................................................33
LED Indicators......................................................................... 6 IPv6......................................................................................34
Back Panel................................................................................ 7 Auto Detection................................................................35
Static IPv6..........................................................................37
Installation.......................................................................... 8
Auto Configuration (SLAAC/DHCPv6).....................39
Before you Begin............................................................................ 8
PPPoE..................................................................................42
Wireless Installation Considerations....................................... 9
IPv6 in IPv4 Tunnel.........................................................46
Hardware Setup...........................................................................10
6to4......................................................................................49
Completing Setup.......................................................................13
6rd........................................................................................51
Setup Wizard.........................................................................14
Local Connectivity Only...............................................53
D-Link Wi-Fi App..................................................................18
VLAN....................................................................................54
Configuration....................................................................20 Wireless...................................................................................56
Home...............................................................................................21 Guest Zone........................................................................59
Internet....................................................................................21 Network...................................................................................60
DIR-867....................................................................................22 Features...........................................................................................62
Connected Clients...............................................................23 QoS Engine............................................................................62
Settings...........................................................................................24 Firewall Settings...................................................................63
Wizard......................................................................................24 IPv4/IPv6 Rules................................................................65
Internet....................................................................................24 Port Forwarding...................................................................66
Virtual Server....................................................................67
Website Filter.........................................................................68
D-Link DIR-867 User Manual ii

Table of Contents
Static Routes..........................................................................69 WPA/WPA2.......................................................................... 114

IPv6......................................................................................70 WPS........................................................................................ 117
Dynamic DNS........................................................................71 Windows Vista®.......................................................................... 121
IPv6 Host............................................................................72 WPA/WPA2.......................................................................... 122
Management.................................................................................73
Troubleshooting.............................................................124
Time & Schedule..................................................................73
Time.....................................................................................73 Wireless Basics................................................................128
Schedule............................................................................74 What is Wireless?....................................................................... 129
System Log.............................................................................75 Tips................................................................................................. 131
System Admin.......................................................................77 Wireless Modes.......................................................................... 132
System................................................................................78
Upgrade..................................................................................79 Networking Basics..........................................................133
Statistics..................................................................................80 Check your IP address............................................................. 133
Statically Assign an IP address............................................. 134
Quick VPN..........................................................................81 Wireless Security.......................................................... 135
Important Information..............................................................82 What is WPA?................................................................. 135
Quick VPN Server Setup Instructions...................................83
iOS Devices....................................................................................85 Technical Specifications.................................................136
Mac OS X.........................................................................................89 Regulatory Statements..................................................137
Windows 7......................................................................................92
Windows 8.1/8..............................................................................96
Windows 10................................................................................ 102
Android........................................................................................ 105
Connect a Wireless Client to your Router.....................109

WPS Button................................................................................. 108
Windows® 10.............................................................................. 110
Windows® 8................................................................................. 112
WPA/WPA2.......................................................................... 112
Windows® 7................................................................................. 114
D-Link DIR-867 User Manual iii
Section 1 - Product Overview
Product
PackageOverview
Contents
DIR-867 Wi-Fi Configuration Card

Wi-Fi Configuration Note
Ethernet Cable Quick Installation Guide
Power Adapter
If any of the above items are missing or damaged, please contact your local reseller.
Note: Using a power supply with a different voltage rating than the one included with the DIR-867 will cause damage and void the warranty
for this product.
D-Link DIR-867 User Manual 1

System Requirements
• An Ethernet-based cable or DSL modem
Network Requirements • IEEE 802.11ac/n/g/b/a wireless clients
• 10/100/1000 Ethernet
Computer with the following:

• Windows®, Macintosh, or Linux-based operating system
• An installed Ethernet adapter
Browser Requirements:
Web-based Configuration • Internet Explorer 10 or higher
Utility Requirements • Firefox 28 or higher
• Safari 6 or higher
• Chrome 28 or higher
Windows® Users: Make sure you have the latest version of Java
installed. Visit www.java.com to download the latest version.
• iPhone®/iPad®, Android™ or Windows smartphone or tablet.
D-Link Wi-Fi APP
(Please refer to the mobile app's store page to check whether your
Requirements
device is compatible)

Introduction
The D-Link DIR-867 AC1750+ MU-MIMO Wi-Fi Gigabit Router shares your Internet connection over a blazing-fast Gigabit
Wireless AC connection of up to 1750+ Mbps (Up to 1300 Mbps 5 GHz Wireless AC and up to 450+ Mbps 2.4 GHz Wireless N)1,
using advanced AC beamforming technology to significantly outperform 802.11n and other 802.11ac devices. Equipped with
one Gigabit WAN/Internet port and four Gigabit LAN ports to provide wired speeds of up to 10 times faster than standard
10/100 ports, the DIR-867 creates the best networking experience to date.
Featuring four antennas and a 3 x 3 Multiple In Multiple Out (MIMO) antenna configuration, the DIR-867 offers better
data rates, fewer dead-spots, more coverage, and higher reliability. Operating exclusively in the 5 GHz band, the DIR-867's
802.11ac wireless connections avoid the crowded 2.4 GHz band, allowing you faster speeds while still maintaining backwards
compatibility with older 802.11n/g/b devices. The DIR-867 prepares your home to become a Connected Home by bringing Wi-
Fi to places your old signal can’t reach. A stronger Wi-Fi signal means you can install more wireless surveillance cameras, baby
monitors, sensors, and alarms in the places where you need them.
The DIR-867's Smart Connect Technology makes connecting to wireless networks easy by eliminating the confusion of multiple
networks. Ever since the introduction of 5 GHz multi-band wireless technology, users have had to guess whether the 5 GHz
or 2.4 GHz band network would provide them with better range and speed. Smart Connect simplifies this by only presenting
a single wireless network for you to connect to. Behind the scenes, when a connection is initiated, the DIR-867's advanced
algorithms determine the best band for your device to connect to, automatically distributing devices to the optimal band,
thereby ensuring a faster, more reliable, and hassle-free experience for all of your users and devices.
This router is equipped with D-Link's Quick VPN technology. Using Quick VPN allows you to securely connect your computer
or mobile device to places with free, untrusted Wi-Fi hotspots by encrypting and relaying your connection through your home
Internet connection. This extra 'hop' reduces the chances of hackers stealing your information, such as logins, passwords, and
credit card numbers. When traveling, Quick VPN lets you watch sports and use video streaming services without experiencing
blackouts or filtering. You can surf the whole Internet unfiltered and unblocked, just as you would at home.

Introduction (continued)
The DIR-867 supports the latest wireless security features to help prevent unauthorized access, be it from over a wireless
network or the Internet. Support for WPA™ and WPA2™ standards ensure that you will be able to use the best possible
encryption regardless of your client devices. In addition, this router is equipped with a dual-active firewall (SPI and NAT) to
prevent potential attacks over the Internet.
The DIR-867 AC1750+ MU-MIMO Wi-Fi Gigabit Router provides incredible speeds, smart antenna technology, fast ports, cloud
features, and terrific security features. It also features an innovative design and easy installation options.
1 Maximum wireless signal rate derived from IEEE Standard 802.11a, 802.11g, 802.11n and 802.11ac specifications. Actual data throughput will vary. Network conditions and
environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate.

Features
• Superior Wireless Networking - The DIR-867 provides Gigabit wireless speeds of up to a combined 1750+ Mbps (1300
Mbps 802.11ac 5 GHz, plus 450+ Mbps 802.11n 2.4 GHz)1. This capability rivals wired connections, allowing users to
participate in real-time activities online, such as HD video communication, online gaming, and use mobile devices from
anywhere in your home while still offering full 802.11n/g/b backward compatibility.
• Extreme Wired LAN and WAN Networking - With four 10/100/1000 Gigabit Ethernet LAN ports, and a 10/100/1000
Gigabit Ethernet WAN port, the DIR-867 has an enormous amount of bandwidth to take full advantage of the highest
speed broadband connections available.
IPv6 Support - The DIR-867 fully supports IPv6 and includes support for a variety of IPv6 connection types including:
SLAAC/DHCPv6, 6to4, 6rd, Static IPv6, IPv6 PPPoE, IPv6 in IPv4 tunneling, and local connectivity.
• Smart Connect - Creates a 'single' wireless network for your devices to connect to. Behind the scenes, the DIR-867
automatically determines whether to connect a device to the 2.4 or 5 GHz band, thereby providing the best speed and
range for each device and optimally distributing devices to each network.
• Advanced Firewall Features - The web-based user interface displays a number of advanced network management
features. Easily apply content filtering based on MAC address, URL, and/or domain name. Schedule these filters to be
active on certain days or for a duration of hours or minutes.
• Secure Multiple/Concurrent Sessions - The DIR-867 can pass through VPN sessions. It supports multiple and
concurrent IPSec and PPTP sessions, so users behind the DIR-867 can access corporate networks through encrypted
channels.
• User-friendly Setup Wizard - Through its easy-to-use web-based user interface or Wi-Fi APP, the DIR-867 lets you
quickly configure and secure your router to your specific settings in minutes.
1 Maximum wireless signal rate derived from IEEE Standard 802.11a, 802.11g, 802.11n and 802.11ac specifications. Actual data throughput will vary. Network conditions and
environmental factors, including volume of network traffic, building materials and construction, and network overhead, lower actual data throughput rate. Environmental
conditions will adversely affect wireless signal range.

Hardware Overview
LED Indicators
1 2 3 4
1 Power LED A solid light indicates a proper connection to the power supply. The light will be solid orange during boot up.
A solid light indicates a connection on the Internet port. If the LED is orange, the router cannot connect to the
2 Internet LED
Internet.
3 Wireless (2.4 GHz LED) A solid light indicates that the 2.4 GHz wireless band is enabled.
4 Wireless (5 GHz LED) A solid light indicates that the 5 GHz wireless band is enabled.

Hardware Overview
Back Panel
1 2 3 4 5 6 7
1 Gigabit LAN Ports (1- 4) Connect Ethernet devices such as computers, switches, storage (NAS) devices, and game consoles.
2 Gigabit WAN Port Using an Ethernet cable, connect your broadband modem to this port.
3 Reset Button Insert a paperclip in the hole, wait for 10 seconds, and release to reset the router to default settings.
4 WPS Button Press to start the WPS process and automatically create a secure connection to a WPS client.
5 Wi-Fi Button Press this button turn off or turn on the wireless networks.
6 Power Connector Connector for the supplied power adapter.
7 Power Button Press the power button to power the device on or off.

Section 2 - Installation
Installation
This section will walk you through the installation of the DIR-867.
Before you Begin

• Placement of the router is very important. Do not place the router in an enclosed area such as a closet, cabinet,
attic, or garage.
• Configure the router with the computer that was last connected directly to your Internet connection. Verify that it
is connected to the Internet before connecting additional devices.
• If your ISP provided you with a modem/router combo, you will need to set it to “bridge” mode so the router can
work properly. Please contact your ISP or refer to the user manual for your modem/router device.
• You can only use the Ethernet port on your modem. If you were using the USB connection before using the router,
then you must turn off your modem, disconnect the USB cable and connect an Ethernet cable to the Internet
port on the router, and then turn the modem back on. In some cases, you may need to call your Internet Service
Provider (ISP) to change connection types (USB to Ethernet).
• If connecting to a DSL modem, make sure to have your DSL service information provided by your Internet Service
Provider handy. This information is likely to include your DSL account's Username and Password. Your ISP may also
supply you with additional WAN configuration settings which might be necessary to establish a connection.
• If you are connecting a considerable amount of networking equipment, it may be a good idea to take the time to
label each cable or take a picture of your existing setup before making any changes.
• If you have DSL and are connecting via PPPoE, make sure you disable or uninstall any PPPoE software such as
WinPoET, BroadJump, or EnterNet 300 from your computer or you will not be able to connect to the Internet.

Wireless Installation Considerations

The D-Link wireless router lets you access your network using a wireless connection from virtually anywhere within the
operating range of your wireless network. Keep in mind that the number, thickness and location of walls, ceilings, or other
objects that the wireless signals must pass through may limit the range. Typical ranges vary depending on the types of
materials and background RF (radio frequency) noise in your home or business. The key to maximizing wireless range is to
follow these basic guidelines:
1. Keep the number of walls and ceilings between the D-Link router and other network devices to a minimum -
each wall or ceiling can reduce your adapter’s range from 3-90 feet (1-30 meters.) Position your devices so that
the number of walls or ceilings is minimized.
2. Be aware of the direct line between network devices. A wall that is 1.5 feet thick (0.5 meters), at a 45-degree
angle appears to be almost 3 feet (1 meter) thick. At a 2-degree angle it looks over 42 feet (14 meters) thick!
Position devices so that the signal will travel straight through a wall or ceiling (instead of at an angle) for better
reception.
3. Building materials make a difference. A solid metal door or aluminum studs may have a negative effect on
range. Try to position access points, wireless routers, and computers so that the signal passes through drywall or
open doorways. Materials and objects such as glass, steel, metal, walls with insulation, water (fish tanks), mirrors,
file cabinets, brick, and concrete will degrade your wireless signal.
4. Keep your product away (at least 3-6 feet or 1-2 meters) from electrical devices or appliances that generate RF
noise.
5. If you are using 2.4 GHz cordless phones or X-10 (wireless products such as ceiling fans, lights, and home
security systems), your wireless connection may degrade dramatically or drop completely. Make sure your 2.4
GHz phone base is as far away from your wireless devices as possible. The base transmits a signal even if the
phone is not in use.

Hardware Setup
1. The DIR-867 is designed to give you the fastest, most stable network connection possible. In order to maximize
performance, fully extend the antennas into a 105 degree angle to provide optimal wireless coverage. Keep the router
in an open area for better wireless coverage.
105°
2. Position your DIR-867 near your Internet-connected modem. Place it in an open area for better wireless coverage.
Modem
DIR-867
3. Turn off and unplug the power and Ethernet cable to your cable or DSL broadband modem. This is required. In some
cases, you may need to turn it off for up to five minutes.
Modem
DIR-867

4. Use the included Ethernet cable to connect your modem to the yellow port labeled INTERNET on the router.
DIR-867 Modem
5. Turn on or plug your modem back in and wait approximately one minute before proceeding onward.
DIR-867 Modem
6. Connect the supplied power adapter to the router and a power outlet, press the power button, and wait approximately
one minute until the LED indicator on the front of the device changes from orange to solid white.
DIR-867
Modem
Note: This unit is to be used with power supply model DA-60N12.

7. If you are configuring the DIR-867 wirelessly from a PC, connect to a Wi-Fi network printed on the included Wi-Fi
Configuration Card. You can also find the Wi-Fi network names and passwords printed on the label attached to the
bottom your router.
DIR-867 Modem
Wi-Fi Configuration Note
If you are configuring the DIR-867 from a PC with a wired Ethernet connection, plug one end of an Ethernet cable
into the port labeled 1 on the back of the router, and the other end into the Ethernet port on your computer.
DIR-867 Modem
8. If you are connecting to a broadband service that uses a dynamic connection (not PPPoE), you may be online already.
Try opening a web browser and connecting to a website. If the website does not load, proceed to Completing Setup
on page 13.

Completing Setup
There are several different ways you can configure your router to connect to the Internet and connect to your clients:
• D-Link Setup Wizard - This wizard will launch when you log into the router for the first time.
Refer to Setup Wizard on page 14.
• D-Link Wi-Fi App - Download and install (from the Apple App Store or from the Google Play Store) and follow onscreen
instructions. Refer to D-Link Wi-Fi App on page 18.
• Manual Setup - Log in to the router and manually configure your router.
Refer to Configuration on page 20.

Setup Wizard
If this is your first time installing the router, open your web browser and enter
http://dlinkrouter.local./ in the address bar. Alternatively, enter the IP address
of the router (default: http://192.168.0.1).
The wizard is designed to guide you through a step-by-step process to configure

your new D-Link router and connect to the Internet.
Click Next to continue.
Please wait while your router detects your Internet connection type. If the router
detects your Internet connection, you may need to enter your ISP information
such as username and password.
If the router does not detect a valid Internet connection, a list of connection
types to choose from will be displayed.
Select your Internet connection type (this information can be obtained from
your Internet Service Provider) and click Next to continue.

Setup Wizard (continued)

If the router detected or you selected PPPoE, enter your PPPoE username and
password and click Next to continue.
Note: Make sure to remove your PPPoE software from your computer. The software
is no longer needed and will not work through a router.
If the router detected or you selected Static, enter the IP and DNS settings
supplied by your ISP. Click Next to continue.


Create a Wi-Fi password (between 8-63 characters). Your wireless clients will
need to have this passphrase or key entered to be able to connect to your
wireless network.
Note: The DIR-867's Smart Connect feature presents a single wireless network.
When connecting clients to an extension network, they will be automatically
added to the best band, either 2.4 GHz or 5 GHz. To disable the Smart Connect
feature and individually configure 2.4 GHz and 5 GHz networks, refer to Wireless
on page 56.
In order to secure the router, please enter a new password. You will be prompted
for this password every time you want to use the router’s web configuration
utility. Click Next to continue.


You will be presented with a summary of your settings. Click Next to finalize
the settings or Back to make changes.
At the end of the wizard, you will be presented with a final summary of your
settings. Click Finish to close the wizard.
Congratulations, your device has been successfully configured!

D-Link Wi-Fi App

The D-Link Wi-Fi App allows you to install and configure your DIR-867 AC1750+ MU-MIMO Wi-Fi Gigabit Router from your
mobile device.
Note: The screenshots may be different depending on your mobile device’s OS version. The following steps show the Android
interface of the D-Link Wi-Fi app. If you are using an iOS device, the appearance may be different from that of the screenshots, but the
process is the same.
Step 1
Search for the free D-Link Wi-Fi App on the Apple App Store or Google Play
and install. You can also scan the QR code on the right, which will take you to
the respective D-Link Wi-Fi app store page directly.
Step 2
Launch the D-Link Wi-Fi App from the Home screen of your device.
D-Link Wi-Fi
Step 3
Click on the Install Your Device Button at the bottom of the screen. (Or click on
the Menu button on the top left of the app and do the same.)

D-Link Wi-Fi App (continued)

Step 4
Select from list of options the device you want to install. If you do not see your
device listed choose "Others" then tap NEXT.
Step 5
You will now be guided through a step-by-step process for setting up your
device. Simply follow the on-screen instructions to complete the installation
and DIR-867 configuration process.

Section 3 - Configuration
Configuration
To access the configuration utility, open a web-browser such as Internet
Explorer and enter http://dlinkrouter.local/ or you may also connect by
typing the IP address of the router (by default this is http://192.168.0.1) in the
address bar.
Enter your password. If you previously followed the setup wizard, please use
the admin password you entered during the wizard. Otherwise, leave the
password blank. Click Log In to proceed.
Note: If you cannot remember your password and cannot log in, press the reset/
wps button on the back of the device for longer than 10 seconds to restore the
router to its default settings.
The router’s home page will open displaying its current connection status.
The bar at the top of the page has quick access to Settings and Management
functions. You may quickly jump back Home at any time.
Note: The system will automatically log out after a period of inactivity.
If the mode switch is set to Router these are the pages you will see.

Home
The Home page displays the current status of the router in the form of an
interactive diagram. You can click each icon to display information about each
part of the network at the bottom of the screen. The menu bar at the top of
the page will allow you to quickly navigate to other pages.
The Home page displays whether or not the router is currently connected to
the Internet. If it is disconnected, click Click to repair to bring up the setup
wizard, refer to Setup Wizard on page 14 for more information.
Internet
To bring up more details about your Internet connection, click on the
Internet icon. Click IPv4 or IPv6 to see details of the IPv4 connection and IPv6
connection respectively.
Click Release to disconnect from the Internet. If you do this and wish to
reconnect, click Renew.
To reconfigure the Internet settings, refer to Internet on page 24.

DIR-867
Click on the DIR-867 icon to view details about the router and its wireless
settings.
Here you can see the router’s current Wi-Fi network name and password, as
well as the router's MAC address, IPv4 address, and IPv6 address.
To reconfigure the network settings, either click Go to settings on the lower

left, or click Settings (at the top of the page) and then Network on the menu
that appears. Refer to Network on page 60 for more information.
To reconfigure the wireless settings, either click Go to settings, on the lower

right, or click Settings (at the top of the page) and then Wireless on the menu
that appears. Refer to Wireless on page 56 for more information.

Connected Clients
Click on the Connected Clients icon to view details about the router and its
wireless settings.
On this page you can see all the clients currently connected to the router, and
their IP addresses.
To edit each client’s settings, click the pencil icon on the client you want to
edit.
Name: Enter a custom name for this client.
Vendor: Displays the vendor of the device.
MAC Address: Displays the MAC address of the device.
IP Address: Displays the current IP address of this client.
Reserve IP: Enable to reserve this IP address for this client.
IP Address Specify an IP address for the DIR-867's DHCP server to assign.

(Reserved):
Parental Control: Allow or Block access to the router.
Click Save when you are done.

Settings
Wizard
In the Settings menu on the bar on the top of the page, click Wizard to open the setup wizard. This is the same wizard that
appears when you start the router for the first time. Refer to Setup Wizard on page 14 for details.
Internet
In the Settings menu on the bar on the top of the page, click Internet to see the Internet configuration options.
My Internet Choose your Internet connection type from the drop-down menu. You
Connection Is: will be presented with the appropriate options for your connection
type. Click Advanced Settings... to expand the list and see all of the
options.
For Dynamic IP (DHCP) refer to page 25.
For Static IP refer to page 26.
For PPPoE refer to page 27.
For PPTP refer to page 29.
For L2TP refer to page 31.
For DS-Lite refer to page 33.

To configure an IPv6 connection, click the IPv6 link. Refer to page 34.

Dynamic IP (DHCP)
Select Dynamic IP (DHCP) to obtain IP address information automatically
from your Internet Service Provider (ISP). Select this option if your ISP does not
specify an IP address to use.
Advanced Settings
Host Name: The host name is optional but may be required by some ISPs. Leave
it blank if you are not sure.
Primary DNS Enter the primary DNS server IP address assigned by your ISP. This
Server: address is usually obtained automatically from your ISP.
Secondary DNS Enter the secondary DNS server IP address assigned by your ISP. This
Server: address is usually obtained automatically from your ISP.
MTU: Maximum Transmission Unit - you may need to change the MTU for
optimal performance with your ISP.
MAC Address The default MAC address is set to the Internet port’s physical interface
Clone: MAC address on the router. You can use the drop-down menu to
replace the Internet port’s MAC address with the MAC address of a
connected client.

Static IP
Select Static IP if your IP information is provided by your Internet Service
Provider (ISP).
IP Address: Enter the IP address provided by your ISP.
Subnet Mask: Enter the subnet mask provided by your ISP.
Default Gateway: Enter the default gateway address provided by your ISP.
Primary DNS Enter the primary DNS server IP address assigned by your ISP.
Server:
Advanced Settings
Secondary DNS Enter the secondary DNS server IP address assigned by your ISP.
Server:
connected client.

PPPoE
Select PPPoE if your ISP provides and requires you to enter a PPPoE username
and password in order to connect to the Internet.
Username: Enter the username provided by your ISP.
Password: Enter the password provided by your ISP.
Reconnect Mode: Select either Always on, On Demand, or Manual.
Maximum Idle Enter a maximum idle time during which the Internet connection is
Time: maintained during inactivity. To disable this feature, select Always
on as the reconnect mode.
Advanced Settings
Address Mode: Select Static IP if your ISP assigned you the IP address, subnet mask,
gateway, and DNS server addresses. In most cases, select Dynamic IP.
Dynamic IP
Service Name: Enter the ISP service name (optional).
Server:
Server:
optimal performance with your ISP. The recommended setting is Auto.

PPPoE (continued)
connected client.
Static IP
Server:
Server:
connected client.

PPTP
Choose PPTP (Point-to-Point-Tunneling Protocol ) if your Internet Service
Provider (ISP) uses a PPTP connection. Your ISP will provide you with a
username and password.
PPTP Server IP Enter the PPTP server IP address provided by your ISP.
Address:
Reconnect Mode: Select either Always on, On demand, or Manual.
Advanced Settings
Dynamic IP
Server:
Server:

PPTP (continued)
Static IP
PPTP IP Address: Enter the IP address provided by your ISP.
PPTP Subnet Enter the subnet mask provided by your ISP.

Mask:
PPTP Gateway IP Enter the gateway IP address provided by your ISP.

Address:
Server:
Server:

L2TP
Choose L2TP (Layer 2 Tunneling Protocol) if your Internet Service Provider
(ISP) uses a L2TP connection. Your ISP will provide you with a username and
password.
L2TP Server: Enter the L2TP server IP address provided by your ISP.
Reconnect Mode: Select either Always on, On demand, or Manual.
Advanced Settings
Dynamic IP
Server:
Server:

L2TP (continued)
Static IP
L2TP IP Address: Enter the IP address provided by your ISP.
L2TP Subnet Enter the subnet mask provided by your ISP.

Mask:
L2TP Gateway IP Enter the gateway IP address provided by your ISP.

Address:
Server:
Server:

DS-Lite
DS-Lite is an IPv6 connection type. After selecting DS-Lite, the following
parameters will be available for configuration:
Advanced Settings
DS-Lite Select DS-Lite DHCPv6 Option to let the router allocate the AFTR
Configuration: IPv6 address automatically. Select Manual Configuration to enter
the AFTR IPv6 address manually.
DS-Lite DHCPv6
B4 IPv6 Address: Enter the B4 IPv4 address value used here.
WAN IPv6 Once connected, the WAN IPv6 address will be displayed here.
Address:
IPv6 WAN Default Once connected, the IPv6 WAN default gateway address will be
Gateway: displayed here.
Manual
AFTR IPv6 Enter the AFTR IPv6 address used here.
Address:
B4 IPv6 Address: Enter the B4 IPv4 address value used here.
WAN IPv6 Once connected, the WAN IPv6 address will be displayed here.
Address:
IPv6 WAN Default Once connected, the IPv6 WAN default gateway address will be
Gateway: displayed here.

IPv6
To configure an IPv6 connection, click the IPv6 link. To return to the IPv4
settings, click IPv4.
My Internet Choose your IPv6 connection type from the drop-down menu. You
Connection Is: will be presented with the appropriate options for your connection
type. Click Advanced Settings... to expand the list and see all of the
options.
For Auto Detection refer to page 35.
For Static IPv6 refer to page 37.
For Auto Configuration (SLAAC/DHCPv6) refer to page 39.
For PPPoE refer to page 42.
For IPv6 in IPv4 Tunnel refer to page 46.
For 6to4 refer to page 49.
For 6rd refer to page 51.
For Local Connectivity Only refer to page 53.

Auto Detection
Select Auto Detection to automatically detect the IPv6 connection method

used by your Internet Service Provider (ISP). If Auto Detection fails, you
manually select another IPv6 connection type.
IPv6 DNS Settings

DNS Type: Select either Obtain DNS server address automatically or Use the
following DNS address.
If Use the following DNS address is selected:
Primary DNS If you selected Use the following DNS address above, enter the
Server: primary DNS server address.
Secondary DNS If you selected Use the following DNS address above, enter the
Server: secondary DNS server address.
LAN IPv6 Address Settings

Enable DHCP-PD: Enable or disable DHCP Prefix Delegation.
LAN IPv6 Link- Displays the router’s LAN link-local address.

Local Address:
If Enable DHCP-PD is disabled, these additional parameters are available for configuration:
LAN IPv6 Address: Enter a valid LAN IPv6 address.

Local Address:

Auto Detection (continued)
Advanced Settings - Address Autoconfiguration Settings

Enable Automatic Enable or disable the Automatic IPv6 Address Assignment feature.
IPv6 Address
Assignment:
Enable Automatic Enable or disable DHCP-PD for other IPv6 routers connected to the
DHCP-PD in LAN: LAN interface.
Note: This feature requires a smaller subnet prefix than /64 (i.e. allowing
for a larger address allocation), such as /63. Contact your ISP for more
information.
Autoconfiguration Select SLAAC+RDNSS, SLAAC+Stateless DHCP, or Stateful DHCPv6.

Type:
If you selected SLAAC+RDNSS or SLAAC+Stateless DHCP as the Autoconfiguration Type:
Router Enter the router advertisement lifetime (in minutes).

Advertisement
Lifetime:
If you selected Stateful DHCPv6 as the Autoconfiguration Type:
IPv6 Address Enter the starting IPv6 address for the DHCP server’s IPv6 assignment.
Range (Start):
IPv6 Address Enter the ending IPv6 address for the DHCP server’s IPv6 assignment.
Range (End):

Static IPv6
Select Static IP if your IPv6 information is provided by your Internet Service
Provider (ISP).
Use Link-Local Enable or disable link-local address use.
Address:
Default Gateway: Enter the default gateway for your IPv6 connection.
Primary DNS Enter the primary DNS server address.

Server:
Secondary DNS Enter the secondary DNS server address.

Server:
If Use Link-Local Address is disabled these additional parameters are available for
configuration:
IPv6 Address: Enter the address supplied by your ISP.
Subnet Prefix Enter the subnet prefix length supplied by your ISP.
Length:

LAN IPv6 Address: Enter the LAN (local) IPv6 address for the router.

Local Address:

Static IPv6 (continued)

IPv6 Address
Assignment:

Type:

Advertisement
Lifetime:
Range (Start):
Range (End):
IPv6 Enter the IPv6 address lifetime (in minutes).

Advertisement
Lifetime:

Auto Configuration (SLAAC/DHCPv6)

Select Auto Configuration if your ISP assigns your IPv6 address when your
router requests one from the ISP’s server. Some ISPs require you to adjust
settings on your side before your router can connect to the IPv6 Internet.
IPv6 DNS Settings


Server:

Server:

Enable DHCP-PD: Enable or disable prefix delegation services.

Local Address:
If Enable DHCP-PD is disabled, these additional parameters are available for configuration:
LAN IPv6 Address: Enter a valid LAN IPv6 address.

Local Address:

Auto Configuration (SLAAC/DHCPv6) (continued)

IPv6 Address
Assignment:
If DHCP-PD is enabled in LAN IPv6 Address Settings:
DHCP-PD in LAN: LAN interface. Note: This feature requires a smaller subnet prefix than
/64 (i.e. allowing for a larger address allocation), such as /63. Contact
your ISP for more information.

Type:

Advertisement
Lifetime:
Range (Start):
Range (End):

Auto Configuration (SLAAC/DHCPv6) (continued)
If DHCP-PD is disabled in LAN IPv6 Address Settings:
Range (Start):
Range (End):

Advertisement
Lifetime:

PPPoE
Select PPPoE if your ISP provides and requires you to enter a PPPoE username
and password in order to connect to the Internet.
MTU
PPPoE Session: Choose Share with IPv4 to re-use your IPv4 PPPoE username and
password, or Create a new session.
Address Mode Select Static IP if your ISP assigned you an IP address. In most cases,
select Dynamic IP.
MTU Maximum Transmission Unit - you may need to change the MTU for
If you selected Static IP as the Address Mode and Share with IPv4 as the PPPoE Session:
If you selected Create a new session as the PPPoE Session:
Address Mode: Select either Dynamic IP or Static IP.
Reconnect Mode Select either Always On or Manual.

PPPoE (continued)
If you selected Static IP as the Address Mode and Create a new session as the PPPoE Session:
IP Address Enter the IP address provided by your ISP
Service Name Enter the ISP service name (optional).
Reconnect Mode Select either Always-on or Manual.
IPv6 DNS Settings


Server:

Server:

Enable DHCP-PD: Enable or disable prefix delegation services. This option is only
available if you selected Dynamic IP for address mode.

PPPoE (continued)

Local Address:
If Enable DHCP-PD is disabled these additional parameters are available for configuration:
LAN IPv6 Address: If DHCP-PD disabled or static address mode is selected, enter the LAN
(local) IPv6 address for the router.

Local Address:

IPv6 Address
Assignment:

Type:

Advertisement
Lifetime:

PPPoE (continued)
Range (Start):
Range (End):
Range (Start):
Range (End):

Advertisement
Lifetime:

IPv6 in IPv4 Tunnel

The user can configure the IPv6 connection to run in IPv4 Tunnel mode. IPv6
over IPv4 tunnelling encapsulates IPv6 packets in IPv4 packets so that IPv6
packets can be sent over an IPv4 infrastructure.
Remote IPv4 Enter the IPv4 remote address you will use.
Address:
Remote IPv6 Enter the IPv6 remote address you will use.
Address:
Local IPv4 Displays the current local IPv4 address.

Address:
Local IPv6 Enter the IPv6 local address you will use.
Address:
Subnet Prefix Enter the subnet prefix length supplied by your ISP.
Length:
IPv6 DNS Settings


Server:

Server:

IPv6 in IPv4 Tunnel (continued)

Enable DHCP-PD: Enable or disable prefix delegation services. This option is only
available if you selected Dynamic IP for address mode.

Local Address:
If Enable DHCP-PD is disabled, these additional parameters are available for

configuration:
LAN IPv6 Address: If DHCP-PD disabled or static address mode is selected, enter the LAN
(local) IPv6 address for the router.

Local Address:

IPv6 Address
Assignment:

Type:

IPv6 in IPv4 Tunnel (continued)

Advertisement
Lifetime:
Range (Start):
Range (End):
Range (Start):
Range (End):

Advertisement
Lifetime:

6to4
In this section the user can configure the IPv6 6 to 4 connection settings. 6to4
is an IPv6 address assignment and automatic tunneling technology that is
used to provide unicast IPv6 connectivity between IPv6 sites and hosts across
the IPv4 Internet.
6to4 Address: Displays the 6 to 4 address.
6to4 Relay: Enter the 6 to 4 relay supplied by your ISP.

Server:

Server:

LAN IPv6 Address: Enter the LAN (local) IPv6 address for the router.

Local Address:

6to4 (continued)

IPv6 Address
Assignment:

Type:
Range (Start):
Range (End):

Advertisement
Lifetime:

6rd
In this section the user can configure the IPv6 6rd connection settings.
Assign IPv6 Prefix: Currently unsupported.

Server:

Server:
6rd Manual Configuration

Enable Hub and Enable if you want to minimize the number of routes to the destination
Spoke Mode: by using a hub and spoke method of networking.
6rd Configuration: Choose the 6rd DHCPv4 Option to automatically discover and
populate the data values, or Manual Configuration to enter the
settings yourself.
If you selected Manual configuration
6rd IPv6 Prefix: Enter the 6rd IPv6 prefix and mask length supplied by your ISP.
WAN IPv4 Address Displays the router’s IPv4 address.
6rd Border Relay Enter the 6rd border relay IPv4 address settings supplied by your ISP.
IPv4 Address:

LAN IPv6 Address: Displays the router’s LAN IPv6 Address link-local address.

Local Address:

6rd (continued)

IPv6 Address
Assignment:

Type:

Advertisement
Lifetime:
Range (Start):
Range (End):

Advertisement
Lifetime:

Local Connectivity Only

Local Connectivity Only allows you to set up an IPv6 connection that will not
connect to the Internet.
Advanced Settings
IPv6 ULA Settings

Enable ULA: Click here to enable Unique Local IPv6 Unicast Addresses settings.
Use Default ULA Enable this option to use the default ULA prefix.
Prefix:
If you selected Enable ULA and disabled Default ULA Prefix:
ULA Prefix: Enter your own ULA prefix.
Current IPv6 ULA Settings

Current ULA Displays the current ULA prefix.
Prefix:
LAN IPv6 ULA: Displays the LAN's IPv6 ULA.

VLAN
VLAN allows for services such as Triple-Play, and divides a network into
segments that can only be accessed by other devices in the same VLAN.
In the Settings menu on the bar on the top of the page, click Internet, then
click the VLAN link.
Triple-Play
Status: Click to enable or disable the Triple-Play VLAN feature.
Priority ID: Enable or disable traffic priority ID for the Internet, IPTV, and VOIP
VLANs. Higher priority ID traffic takes precedence over traffic with a
low priority ID tag.
If Status is enabled:
Internet VLAN ID Enter the VLAN ID for your Internet connection as provided by your ISP.
IPTV VLAN ID Enter the VLAN ID for your digital cable as provided by your ISP.
VOIP VLAN ID: Enter the VLAN ID for your Voice over IP network as provided by your
ISP.
If Priority ID is enabled:
Priority ID: Select a priority ID from the drop-down menu to assign to the
corresponding VLAN.

Interface Traffic Type Setting

LAN 1-4, Wireless, From the drop-down menu, you can select the type of data (Internet,
Guest Zone: digital cable, or Voice over IP) coming from the WAN connection to
each interface on the DIR-867.

Wireless
From this page you can configure your wireless network settings.
Smart Connect
Smart Connect: Enable or disable the Smart Connect Feature. When enabled, only
a few configuration options are available to simplify configuration.
Wi-Fi Name (SSID): Create a name for your wireless network using up to 32 characters.
Password: Create a password to use for wireless security. Wireless clients will
need to enter this password to successfully connect to the network.
Advanced Settings
Security Mode: Choose None or WPA/WPA2-(Personal) (recommended).
Transmission Select the desired wireless transmission power.

Power:
Schedule: Use the drop-down menu to select the time schedule that the rule
will be enabled on. The schedule may be set to Always Enable, or
you can create your own schedules in the Schedules section. Refer
to Schedule on page 74 for more information.
Wi-Fi Protected Setup

The easiest way to connect your wireless devices to the router is with Wi-Fi Protected Setup
(WPS). Using WPS-PIN disabled by default due to security vulnerabilities.
WPS-PBC Status: Enable or disable WPS-PBC fuctionality.
WPS-PIN Status: Enable or disable WPS-PIN fuctionality.
Refer to the next page if you wish to disable Smart Connect or click
Save when you are done.
Wireless - Smart Connect Disabled

If Smart Connect is disabled the following options are available:
2.4GHz / 5GHz
Status: Enable or disable the 2.4 GHz / 5 GHz wireless network.
Password: Create a password to use for wireless security.
Advanced Settings
Security Mode: Choose None or WPA/WPA2-Personal (recommended).
802.11 Mode Select the desired wireless networking standards to use.

(2.4 GHz): The available options for the 2.4 GHz wireless network are Mixed
802.11b/g/n, Mixed 802.11g/n, 802.11n only.
802.11 Mode Select the desired wireless networking standards to use.

(5 GHz): The available options for the 5 GHz wireless network are Mixed
802.11a/n/ac, Mixed 802.11n/ac, 802.11ac only, Mixed 802.11a/n,
Mixed 802.11n only, or 802.11a only.
Wi-Fi Channel: Select the desired channel. The default is Auto (recommended).
Transmission Select the desired wireless transmission power.

Power:
Channel Width Select Auto 20/40 if you are using both 802.11n and non-802.11n
(2.4 GHz): devices, or select 20 MHz if you are not using any 802.11n devices.
Channel Width Select Auto 20/40/80 if you are using 802.11ac, 802.11n, and 802.11a
(5 GHz): devices, select Auto 20/40 if you are using 802.11n and 802.11a
devices, or select 20 MHz if you are only using 802.11a devices.

HT20/40 Enable or disable HT20/40 Coexistence.

Coexistence:
(2.4 GHz):
Visibility Status: The default setting is Visible. Select Invisible if you do not want to
broadcast the SSID of your wireless network.
Wi-Fi Protected Setup

The easiest way to connect your wireless devices to the router is with Wi-Fi Protected Setup
(WPS). Using WPS-PIN disabled by default due to security vulnerabilities.
WPS-PBC Status: Enable or disable WPS-PBC fuctionality.
WPS-PIN Status: Enable or disable WPS-PIN fuctionality.

Guest Zone
The Guest Zone feature will allow you to create temporary zones that can be
used by guests to access the Internet. These zones will be separate from your
main wireless network. You may configure different zones for the 2.4 GHz and
5 GHz wireless bands.
Note: If Smart Connect is enabled, Guest Zone is unavailable.

In the Settings menu on the bar on the top of the page, click Wireless, then
click the Guest Zone link.
2.4 GHz / 5 GHz

Status: Enable or disable the 2.4 GHz / 5 GHz wireless network.
Password: Create a password to use for wireless security.
Home Network Access

Internet Access Enabling this option will confine connectivity to the Internet,
Only: preventing guests from accessing other local network devices.

Network
This section will allow you to change the local network settings of the router
and to configure the DHCP settings. In the Settings menu on the bar on the
top of the page, click Network. Click Advanced Settings... to expand the list
and see all of the options.
Network Settings
LAN IP Address: Enter the IP address of the router. The default IP address is 192.168.0.1.
If you change the IP address, once you click Save, you will need
to enter the new IP address in your browser to get back into the
configuration utility.
Subnet Mask: Enter the subnet mask of the router. The default subnet mask is
255.255.255.0.
Management The default address to access the router’s configuration is

Link: http://dlinkrouter.local/ Here, you can replace dlinkrouter with a
name of your choice.
Local Domain Enter the domain name (optional).

Name:
Enable DNS Relay: Disable to transfer the DNS server information from your ISP to your
computers. If enabled, your computers will use the router for a DNS
server.

Network (continued)
DHCP Server
Status: Enable or disable the DHCP server.
DHCP IP Address Enter the starting and ending IP addresses for the DHCP server’s IP
Range: assignment.
Note: If you statically (manually) assign IP addresses to your computers
or devices, make sure the IP addresses are outside of this range or you
may have an IP conflict.
DHCP Lease Time: Enter the length of time for the IP address lease in minutes.
Always Broadcast: Enable this feature to broadcast your network's DHCP server to LAN/
WLAN clients.
Advanced Settings
WAN Port Speed: You may set the port speed of the Internet port to 10 Mbps, 100
Mbps, 1000 Mbps, or Auto (recommended).
UPnP: Enable or disable Universal Plug and Play (UPnP). UPnP provides
compatibility with networking equipment, software, and peripherals.
IPv4 Multicast Enable to allow IPv4 multicast traffic to pass through the router from
Stream: the Internet.
IPv6 Multicast Enable to allow IPv6 multicast traffic to pass through the router from
Stream: the Internet.

Features
QoS Engine
This Quality of Service (QoS) Engine will allow you to prioritize particular
clients over others, so that those clients receive higher bandwidth. For
example, if one client is streaming a movie and another is downloading a non-
urgent file, you might wish to assign the former device a higher priority than
the latter so that the movie streaming is not disrupted by the traffic of the
other devices on the network.
In the Features menu on the bar on the top of the page, click QoS Engine.
Under Connected Clients, you will see device cards representing each
connected client. If some are off-screen, you can use the < and > buttons to
scroll through the cards.
A maximum of one device can be assigned Highest priority.

A maximum of two devices can be assigned High priority.
A maximum of eight devices can be assigned Medium priority.
If no devices are explicitly assigned a priority, they will all be treated with
equal priority. If some devices are not assigned a priority and others are, the
unassigned devices will be treated with the lowest priority.
To assign a priority level to a device, drag the device card from the All Devices
list over an empty slot and release the mouse button. The card will remain in
the slot. If you want to remove a priority assignment from a device and return
it to the All Devices list, click the cross icon in the top right of the device card.

Firewall Settings
The router’s firewall protects your network from malicious attacks over the
Internet. In the Features menu on the bar on the top of the page, click Firewall
Settings. Click Advanced Settings... to expand the list and see all of the
options.
Enable DMZ: Enable or disable Demilitarized Zone (DMZ). This completely exposes
the client to threats over the Internet, and is not recommended in
ordinary situations.
DMZ IP Address: If you enabled DMZ, enter the IP address of the client you wish to
expose, or use the drop-down menu to quickly select it.
Enable SPI IPv4: Enabling Stateful Packet Inspection (SPI) helps to prevent cyber
attacks by validating that the traffic passing through the session
conforms to the protocol.
Enable Anti-Spoof Enable this feature to protect your network from certain kinds of
Checking: “spoofing” attacks.
IPv6 Simple Enable or disable IPv6 simple security.

Security:
IPv6 Ingress Enable or disable IPv6 ingress filtering.

Filtering:

Firewall Settings (continued)

Advanced Settings - Application Level Gateway (ALG) Configuration
PPTP: Allows multiple machines on the LAN to connect to their corporate
network using the PPTP protocol.
IPSec (VPN): Allows multiple VPN clients to connect to their corporate network
using IPSec. Some VPN clients support traversal of IPSec through
NAT. This Application Level Gateway (ALG) may interfere with the
operation of such VPN clients. If you are having trouble connecting
with your corporate network, try turning this ALG off. Please check
with the system administrator of your corporate network whether
your VPN client supports NAT traversal.
RTSP: Allows applications that uses Real Time Streaming Protocol (RTSP)to
receive streaming media from the Internet.
SIP: Allows devices and applications using VoIP (Voice over IP) to
communicate across NAT. Some VoIP applications and devices have
the ability to discover NAT devices and work around them. This ALG
may interfere with the operation of such devices. If you are having
trouble making VoIP calls, try turning this ALG off.

IPv4/IPv6 Rules
The IPv4/IPv6 Rules section is an advanced option that lets you configure what
kind of traffic is allowed to pass through the network. To configure the IPv4
rules, from the Firewall Settings page click IPv4 Rules. To configure IPv6 rules,
from the Firewall Settings page click IPv6 Rules. To return to the main Firewall
Settings page, click Advanced.
To begin, use the drop-down menu to select whether you want to ALLOW or
DENY the rules you create. You can also choose to turn filtering OFF.
If you wish to remove a rule, click on its trash can icon in the Delete column. If
you wish to edit a rule, click on its pencil icon in the Edit column. If you wish to
create a new rule, click the Add Rule button. Click Save when you are done. If
you edit or create a rule, the following options will appear:
Name: Enter a name for the rule.
Source IP Address Enter the source IP address range that the rule will apply to, and using
Range: the drop-down menu, specify whether it is a WAN or LAN IP address.
Destination IP Enter the destination IP address range that the rule will apply to, and
Address Range: using the drop-down menu, specify whether it is a WAN or LAN IP
address.
Protocol & Port Select the protocol of the traffic to allow or deny (Any, TCP, or UDP)
Range: and then enter the range of ports that the rule will apply to.
to Refer to Schedule on page 74 for more information.

Port Forwarding
Port forwarding allows you to specify a port or range of ports to open
for specific devices on the network. This might be necessary for certain
applications to connect through the router. In the Features menu on the bar
on the top of the page, click Port Forwarding.
Local IP: Enter the IP address of the computer on your local network that you
want to allow the incoming service to. Alternatively, select the device
from the drop-down menu.
TCP Port: Enter the TCP ports that you want to open. You can enter a single
port or a range of ports. Separate ports with a comma (for example:
24,1009,3000-4000).
UDP Port: Enter the UDP ports that you want to open. You can enter a single
port or a range of ports. Separate ports with a comma (for example:
24,1009,3000-4000).

Virtual Server
The virtual server allows you to specify a single public port on your router for
redirection to an internal LAN IP address and Private LAN port. To configure
the virtual server, from the Port Forwarding page click Virtual Server. To
return to the main Port Forwarding page, click Port Forwarding.
create a new rule, click the Add Rules button. Click Save when you are done. If
Name: Enter a name for the rule. Alternatively, select the protocol/Application
Local IP: Enter the IP address of the computer on your local network that you
want to allow the incoming service to. Alternatively, select the device
Protocol: Select the protocol of the traffic to allow or deny (TCP, UDP, Both,
or Other).
Protocol Number: If you entered Other above, enter the protocol number.
External Port: Enter the public port you want to open.
Internal Port: Enter the private port you want to open.

Website Filter
The website filter settings allow you to block access to certain web sites. You
can either create a list of sites to block, or create a list of sites to allow (with all
other sites being blocked).
In the Features menu on the bar on the top of the page, click Website Filter.
If you want to create a list of sites to block, select DENY client access to ONLY
these sites from the drop-down menu. All other sites will be accessible. If you
want to specify a list of sites to allow, select ALLOW clients access to ONLY
these sites from the drop-down menu. All other sites will be blocked.
You may specify a maximum of fifteen web sites. To add a new site to the list,
click Add Rule. Next, under Website URL/Domain enter the URL or domain. If
you wish to remove a rule, click on its trash can icon in the Delete column. If
you wish to edit a rule, simply replace the URL or domain.

Static Routes
The Static Routes section allows you to define custom routes to control how
data traffic is moved around your network.
In the Features menu on the bar on the top of the page, click Static Routes.
To configure IPv6 rules, click IPv6 and refer to IPv6 on page 70. To return to
the main IPv4 static routes page, click IPv4.
create a new rule, click the Add Route button. Click Save when you are done.
If you edit or create a rule, the following options will appear:
Destination Enter the IP address of packets that will take this route.
Network:
Mask: Enter the subnet mask of the route.
Gateway: Enter your next hop gateway to be taken if this route is used.
Metric: The route metric is a value from 1 to 16 that indicates the cost of using
this route. A value of 1 is the lowest cost and 15 is the highest cost.
Interface: Select the interface that the IP packet must use to transit out of the
router when this route is used.

IPv6
To configure IPv6 rules, on the Static Routes page click IPv6. To return to the
main IPv4 static routes page, click IPv4.
create a new rule, click the Add Rules button. Click Save when you are done. If
DestNetwork: This is the IP address of the router used to reach the specified
destination.
PrefixLen: Enter the IPv6 address prefix length of the packets that will take this
route.
Gateway: Enter your next hop gateway to be taken if this route is used.
Metric: Enter the metric value for this rule here.
Interface: Select the interface that the IP packet must use to transit out of the
router when this route is used.

Dynamic DNS
Most Internet Service Providers (ISPs) assign dynamic (changing) IP addresses.
Using a dynamic DNS service provider, people can enter your domain name in
their web browser to connect to your server no matter what your IP address is.
In the Features menu on the bar on the top of the page, click Dynamic DNS.
Enable Dynamic Enable or disable dynamic DNS. Enabling this feature will reveal
DNS: further configuration options.
Status: Displays the current dynamic DNS connection status.
Server Address: Enter the address of your dynamic DNS server, or select one from the
drop-down menu.
Host Name: Enter the host name that you registered with your dynamic DNS
service provider.
User Name: Enter your dynamic DNS username.
Password: Enter your dynamic DNS password.
Time Out: Enter a timeout time (in hours).
At the bottom of the page are the IPv6 host settings. To configure an IPv6
dynamic DNS host, refer to IPv6 Host on page 72.

IPv6 Host
The IPv6 host settings are found at the bottom of the Dynamic DNS page.
create a new rule, click the Add Record button. Click Save when you are done.
If you edit or create a rule, the following options will appear:
Host Name: Enter the host name that you registered with your dynamic DNS
service provider.
IPv6 Address: Enter the IPv6 address of the dynamic DNS server. Alternatively, select
the server device in the drop-down menu.

Management
Time & Schedule
Time
The Time page allows you to configure, update, and maintain the correct
time on the internal system clock. From here you can set the time zone, the
Network Time Protocol (NTP) server, and enable or disable daylight saving
time.
In the Management menu on the bar on the top of the page, click Time &
Schedule.
Time Configuration
Time Zone: Select your time zone from the drop-down menu.
Time: Displays the current date and time of the router.
Enable Daylight Enable or disable daylight saving time.

Saving:
Automatic Time Configuration

Update Time Enable or disable to allow an NTP server on the Internet to synchronize
Using an NTP the time and date with your router. If you enable this option, select
Server: an NTP server from the drop-down menu. To configure the router's
time and date manually, disable this option and use the drop-down
menus that appear to input the time and date.
To configure and manage your schedules, click Schedule and refer to

Schedule on page 74.
Schedule
Some router functions can be controlled through a pre-configured schedule.
To create, edit, or delete schedules, from the Time page click Schedule. To
return to the Time page, click Time.
you edit or create a rule, the following screen will appear:
First, enter the name of your schedule in the Name field.
Each box represents one hour, with the time at the top of each column. To add
a time period to the schedule, simply click on the starting hour and drag to the
ending hour. You can add multiple days to the schedule, but only one period
per day.
To remove a time period from the schedule, click on the cross icon.

System Log
The router keeps a running log of events. This log can be sent to a Syslog
server, or sent to your email address. In the Management menu on the bar on
the top of the page, click System Log.
Log Settings
System Log Click the Check System Log button to download a text file containing
the system log.
SysLog Settings
Enable Logging to Check this box to send the router logs to a SysLog Server.
Syslog Server:
If Logging to the Syslog Server is Enabled:
Syslog Server IP Enter the IP address for the Syslog server. If the Syslog server is
Address: connected to the extender, select it from the drop-down menu to
automatically populate the field.
Email Settings
Enable E-mail Enable this option if you want the logs to be automatically sent to
Notification: an email address.
If E-mail notification is Enabled:
From E-mail Enter the email address your SysLog messages will be sent from.
Address:
To E-mail Address: Enter the email address your SysLog messages will be sent to.
SMTP Server Enter your SMTP server address.

Address:

System Log (continued)

SMTP Server Port: Enter your SMTP server port.
Enable Check this box if your SMTP server requires authentication.

Authentication:
Account Name: Enter your SMTP account name.
Password: Enter your SMTP account's password
E-mail Log When Full or On Schedule

Send When Log If enabled, this option will set the router to send the log when it is full.
Full:
Send on Schedule: If enabled, this option will set the router to send according to a set
schedule.
Schedule: If you enable Send On Schedule, use the drop-down menu to select
a schedule to apply. The schedule may be set to Always Enable, or

System Admin
This page will allow you to change the administrator (Admin) password and
enable remote management. In the Management menu on the bar on the top
of the page, click Admin. To load, save, reset settings, or reboot the router, click
System and refer to System on page 80.
Admin Password
Password: Enter a new password for the administrator account. You will need to
enter this password whenever you configure the router using a web
browser.
Enable Graphical Enables a challenge-response test to require users to type letters or

Authentication numbers from a distorted image displayed on the screen to prevent
(CAPTCHA): online hackers and unauthorized users from gaining access to your
router’s network settings.
Advanced Settings - Administration

Enable HTTPS Check to enable HTTPS to connect to the router securely. Instead of using
Server: http://dlinkrouter.local./, you must use https://dlinkrouter.local./ in
order to connect to the router.
Enable Remote Remote management allows the DIR-867 to be configured from the
Management: Internet by a web browser. A password is still required to access the web
management interface.
Remote Admin The port number used to access the DIR-867 is used in the URL. Example:
Port: http://x.x.x.x:8080 where x.x.x.x is the Internet IP address of the DIR-867
and 8080 is the port used for the web management interface.
Note: If you enabled Use HTTPS and wish to access the router remotely and
securely, you must enter https:// at the beginning of the address.

System
This page allows you to save the router’s current configuration, load a
previously saved configuration, reset the router to its factory default settings,
or reboot the router.
From the Admin page, click System. To return to the Admin page, click Admin.
System
Save Settings To This option will save the current router configuration settings to a file
Local Hard Drive: on your computer.
Load Settings This option will load a previously saved router configuration file. This will
From Local Hard overwrite the router’s current configuration.
Drive:
Restore To Factory This option will restore all configuration settings back to the settings that
Default Settings: were in effect at the time the router was shipped from the factory. Any
settings that have not been saved will be lost, including any rules that
you have created. If you want to save the current router configuration
settings, use the Save Settings To Local Hard Drive button above.
Auto Reboot Configuration

Reboot The Click to reboot the router immediately.
Device:
Auto Reboot: You may set the DIR-867 to automatically reboot at a set time. The options
are Never, Daily, Weekly. You may set the hour using a 24 hour format,
the minute, and the day you wish to have the DIR-867 automatically
reboot.

Upgrade
This page will allow you to upgrade the router’s firmware or language pack,
either automatically or manually. To manually upgrade the firmware or
language pack, you must first download the relevant file from http://support.
dlink.com.
In the Management menu on the bar on the top of the page, click Upgrade.
Firmware Information
Current Firmware The current firmware’s version and date will be displayed.
Version/Date :
Check for New Click this button to prompt the router to automatically check for a new
Firmware: firmware version. If a newer version is found, it will prompt you to install it.
Upgrade Manually
Upgrade If you wish to upgrade manually, first download the firmware file you wish
Firmware: to upgrade to. Next, click the Upgrade Firmware button and browse to
the file to install the new firmware. You can also browse to a language
pack file to install a new language pack.

Statistics
On the Statistics page you can view the amount of packets that pass through
the router on the WAN, LAN, and wireless segments.
In the Management menu on the bar on the top of the page, click Statistics.
You can view the Internet, LAN, Wi-Fi 2.4 GHz, or Wi-Fi 5 GHz by clicking on
the respective tabs at the top. The graph will update in real time. To clear the
information on the graph, click Clear.
The traffic counter will reset if the device is rebooted.

Section 4 - Quick VPN
Quick VPN
This router is equipped with D-Link's Quick VPN technology. Virtual Private Networking (VPN) creates a connection between
devices across the Internet. Using Quick VPN allows you to securely connect your computer or mobile device to places with
free, untrusted Wi-Fi hotspots in places like coffee shops and hotels by encrypting and relaying it through your home Internet
connection. This extra 'hop' reduces the chances of hackers stealing your information, such as logins, passwords, and credit
card numbers. When traveling, Quick VPN lets you watch sports and use video streaming services without experiencing
blackouts or filtering. You can surf the whole Internet unfiltered and unblocked, just as you would at home.
Without Quick VPN
Your Laptop Potential Hacker Public Unsecured Internet

Stealing Data Wi-Fi Hotspot
With Quick VPN
Your Laptop Public Unsecured Internet Your Network with

Wi-Fi Hotspot Quick VPN Server
Unencrypted Data
Encrypted Data

Important Information
The following instructions explain and help you to configure your D-Link Quick VPN enabled router and devices to create a Virtual Private Network
(VPN). This feature is provided for advanced users who wish to connect remotely and use their router's Internet connection to add a layer of security
while using untrusted networks. Configure the Quick VPN Server on your router first and then set up client devices to connect through your router's
WAN connection.
• Quick VPN only provides an added layer of security against specific types of snooping attacks and does not guarantee complete data
integrity or protection. Only traffic in the tunnel between your router and device will be encrypted, WAN traffic will leave your D-Link
Quick VPN enabled router unencrypted.
• Keep your Quick VPN Username, Password, and Passkey safe. Keep your Quick VPN Username, Password, and Passkey safe. It is
recommended that you change these credentials periodically.
• A device connected via Quick VPN tunnel may experience lower data throughput and higher latency due to a number of factors
including: Internet conditions, local and remote network Wi-Fi and WAN bandwidth limitations, and increased latency. This may
negatively impact real time voice and video communication.
• Quick VPN supports up to five concurrent VPN client sessions using the same login and password are supported. Quick VPN uses
L2TP/IPsec with MSCHAPv2, PAP, or CHAP authentication.
• You device may warn you that your information may be intercepted, since you control the Quick VPN server, you may ignore this.
• UDP Ports 500, 4500, 1701 and IP Port 50 must be open in order for Quick VPN to work.
• L2TP/IPsec VPN usage may be restricted in some countries and on some networks. If you have trouble using Quick VPN on some
networks, but not others and are not violating network access rules, try contacting your ISP or network administrator.
• Devices connected via Quick VPN are assigned addresses on a separate subnet (ex. 192.168.1.x). Some network resources may be
unavailable when connecting via Quick VPN.
• If your Internet connection uses DHCP, it is strongly recommended that you first set up Dynamic DNS (DDNS), such as D-Link DDNS,
to eliminate the need to reconfigure client devices in the event your ISP assigns you a new WAN IP address.
Quick VPN Server Setup Instructions

Before proceeding, ensure that your Internet connection is working properly.
We recommend configuring Dynamic DNS before proceeding with Quick
VPN setup. If your router is assigned an IP address from your ISP using DHCP, it
may frequently change, requiring clients credentials to be set up again and a
simple DDNS address will be easier than an IP address.
In the Features menu on the bar on the top of the page, click Quick VPN to
configure the following options:
L2TP over IPSec: Enable or disable the Quick VPN server.
If you enable Quick VPN, the following options are available:
Username: . Enter a username between 1 and 20 characters
Password: Enter a password between 1 and 20 characters.
PSK: Enter a passkey between 6 and 64 characters.
Authentication Choose the authentication protocol type: MSCHAPv2, PAP, or CHAP.

Protocol: MSCHAPv2 is the default.
MPPE: Select the encryption cipher strength: none, RC4-40, or RC4-128.

RC4-128 is the default.

Quick VPN Setup Instructions (continued)

Authentication Choose the authentication protocol type: MSCHAPv2, PAP, or CHAP.
Protocol: MSCHAPv2 is the default.
MPPE: Select the encryption cipher strength: None, RC4-40, or RC4-128.

RC4-128 is the default.
Click Save and proceed to client setup pages.

iOS Devices
VPN Setup Instructions
This section provides Quick VPN setup instructions for iOS devices.
Refer to Quick VPN Server Setup Instructions on page 83
for more information on setting up the router for Quick VPN.
1. Touch Settings on your iPhone or iPad. Scroll to and tap General. Scroll to and
tap VPN.
2. Click on Add VPN Configuration... You should see a pop up window asking you
to fill out the details of your VPN connection.

VPN Setup Instructions (Continued)

3. Tap Type and choose IPSec. Click Back when done.
4. Fill in Description, Server, Account, Password, and Secret. (Refer to Quick VPN
Server Setup Instructions on page 83).
Description: For reference purposes only, used to differentiate between

multiple VPN connections.
Server: Enter the IP/DDNS address of your Quick VPN server.
Account: Enter the Username used o authenticate login to VPN server
Password: Enter Password used to authenticate login to VPN server
Secret: Enter your Passkey (PSK).


5. Click Done to save and return to the main VPN Configurations page. Your iOS
device is now configured to connect to your Quick VPN server.

Connect or Disconnect
To connect or disconnect from to your Quick VPN server, open Settings and under
General tap the button next to VPN.
The VPN icon will appear in the notification area at the top of your screen indicating
that your device is currently connected to the Quick VPN server.

Mac OS X
This section provides Quick VPN setup instructions for OS X using the Export Profile
function. Refer to Quick VPN Server Setup Instructions on page 83 for more
information.
Open the exported profile. The Install Profile dialog will appear; click Continue and
Install.
Enter your user account password when prompted. Close the Profiles dialog.
Go to  > System Preferences... > Network and select the Quick VPN connection
and click Authentication Settings.


Enter your Passkey in the Shared Secret text box and click OK, Apply, then OK.
Your Mac is now configured to connect to your Quick VPN server.

To connect to or disconnect from your Quick VPN server, go to > System
Preferences... > Network.
Select the Quick VPN connection and click on the Connect or Disconnect button.

Windows 7
Click the Start button and type vpn into the Search programs and files box.
Select Set up a virtual private network (VPN) connection.
Enter the IP/DDNS address of your Quick VPN server in the Internet address
box, create a name for your connection in the Destination Name, check Don't
Connect now; just set it up so I can connect later, and click Next.


Enter your Username. If you would like windows to save your password, enter
your Password and check Remember this password. Click Create to continue.
Do not click Connect Now.
Click Close. Click the Start button and type view network connections into the
Search programs and files text box. Select View network connections.


Click Advanced settings. Enter your Passkey in the Key text box under Use
preshared key for authentication. Click OK to close Advanced Properties and
click OK to close Quick VPN Connection Properties.
Your Windows 7 system is now configured to connect to your Quick VPN server.

To connect to or disconnect from your Quick VPN server, click on the Network Settings icon in the notification area of the Windows taskbar and
from the Dial Up and VPN section click on your Quick VPN connection and click on the Connect or Disconnect button.

Windows 8.1/8
This section provides Quick VPN setup instructions for Windows 8.1/8
Click the Start button and type vpn.
Select Manage virtual private networks.
From the Network Settings page, click Add a VPN Connection.

Add a VPN Connection

1 Select Microsoft from VPN Provider.
2 Create a name for your VPN connection.

3 Enter your IP/DDNS address of your Quick VPN server.
4 Select User name and password from Type of sign-in info.
5 If you would like windows to remember your sign-in information, enter

your User name, Password, and select Remember my sign-in info
6 Choose Save.


Right-click on the Quick VPN Connection you just created and left-click on
Properties.
Select the Security tab. For the Type of VPN, select Layer 2 Tunneling with IPsec
(L2TP/IPSec).


Click the Start button and type view network connections.
Select View network connections.
Right-click your Quick VPN Connection and left-click Properties.

Select the Security tab.
For the Type of VPN, select Layer 2 Tunneling with IPsec (L2TP/IPSec).


Click Advanced settings. Enter your Passkey in the Key text box under Use
preshared key for authentication.
Click OK to close Advanced Properties and click OK to close Quick VPN

Properties.
Your Windows 8.1/8 system is now configured to connect to your Quick VPN server.

To connect to or disconnect from your Quick VPN server, click on the Network Settings icon in the notification area of the Windows taskbar. Click
on your Quick VPN connection and click on the Connect or Disconnect button.

Windows 10
This section provides Quick VPN setup instructions for Windows 10.
Click Start > Settings > Network & Internet > Network and Sharing Center >
VPN > Add a VPN Connection.

Add a VPN Connection

1 Select Windows (built-in) from the VPN Provider drop down menu.
2 Create a name for your VPN connection.

3 Enter your IP/DDNS address of your Quick VPN server.
4 Select L2TP/IPSec with pre-shared key from VPN type.
5 Enter the Passkey (PSK).
6 Select User name and password from Type of sign-in info.
If you would like windows to remember your sign-in information, enter
your User name, Password, and select Remember my sign-in info
7 Choose Save.
Your Windows 10 system is now configured to connect to your Quick VPN server.

To connect to or disconnect from your Quick VPN server, click on the Network Settings icon in the notification area of the Windows taskbar and
click on your Quick VPN connection. The Network & Internet Settings page will open. Click on the Connect or Disconnect button.

Android
This section provides Quick VPN setup instructions for Android devices. Your device's screens may vary.
Go to Settings > More from the Wireless & networks > VPN > ADD VPN NETWORK

Edit VPN Profile

1 Enter a name for your VPN connection.
2 Select L2TP/IPSec PSK for Type.

3 Enter the IP/DDNS address of your Quick VPN server.
4 Enter your Passkey (PSK) in IPSec pre-shared key field.
5 Choose Save.
Your Android device is now configured to connect to your Quick VPN server.

To connect to or disconnect from your Quick VPN server, go to Settings > More from the Wireless & networks > VPN and
select the Quick VPN connection you created.

Connect or Disconnect (Continued)

To connect, enter your Username and Password and select CONNECT.
To disconnect, select DISCONNECT.

Section 5- Connecting a Wireless Client
Connect a Wireless Client to your Router

WPS Button
The easiest and most secure way to connect your wireless devices to the router is with WPS (Wi-Fi Protected Setup). Most
wireless devices such as wireless adapters, media players, Blu-ray DVD players, wireless printers and cameras will have a WPS
button (or a software utility with WPS) that you can press to connect to the DIR-867 router. Please refer to your user manual for
the wireless device you want to connect to make sure you understand how to enable WPS. Once you know, follow the steps
below:
Step 1 - Press the WPS button on the DIR-867 for about 1 second. The LED on the front will start to blink.
WPS Button
Step 2 - Within 2 minutes, press the WPS button on your wireless device (or launch the software utility and start the WPS
process).
Step 3 - Allow up to 1 minute for your connection to be configured. Once the Internet light stops blinking, you will be
connected and your wireless connection will be secure with WPA2.

Windows® 10
When connecting to the DIR-867 wirelessly for the first time, you will need to input the wireless network name (SSID) and
Wi-Fi password (security key) of the device you are connecting to. If your product has a Wi-Fi configuration card, you can
find the default network name and Wi-Fi password here. Otherwise refer to the product label for the default Wi-Fi network
SSID and password, or enter the Wi-Fi credentials set during the product configuration.
To join an existing network, locate the wireless network icon in the taskbar,
next to the time display and click on it.
Wireless Icon
Clicking on this icon will display a list of wireless networks which are within
range of your computer. Select the desired network by clicking on the SSID.

To connect to the SSID, click Connect.
To automatically connect with the router when your device next detects the
SSID, click the Connect Automatically check box.
You will then be prompted to enter the Wi-Fi password (network security key)
for the wireless network. Enter the password into the box and click Next to
connect to the network. Your computer will now automatically connect to this
wireless network when it is detected.
You can also use Wi-Fi Protected Setup (WPS) to connect to the router.
Press the WPS button on your D-Link device and you will be automatically
connected.

Windows® 8
WPA/WPA2
It is recommended that you enable wireless security (WPA/WPA2) on your wireless router or access point before configuring
your wireless adapter. If you are joining an existing network, you will need to know the security key (Wi-Fi password) being
used.
To join an existing network, locate the wireless network icon in the taskbar
next to the time display.
Wireless Icon
Clicking on this icon will display a list of wireless networks that are within
connecting proximity of your computer. Select the desired network by clicking
on the network name.

You will then be prompted to enter the network security key (Wi-Fi password)
for the wireless network. Enter the password into the box and click Next.
If you wish to use Wi-Fi Protected Setup (WPS) to connect to the router, you
can also press the WPS button on your router during this step to enable the
WPS function.
When you have established a successful connection to a wireless network, the

word Connected will appear next to the name of the network to which you
are connected to.

Windows® 7
WPA/WPA2
your wireless adapter. If you are joining an existing network, you will need to know the security key or passphrase being used.
1. Click on the wireless icon in your system tray (lower-right corner).
Wireless Icon
2. The utility will display any available wireless networks in your area.

3. Highlight the wireless connection with Wi-Fi name (SSID) you would like to
connect to and click the Connect button.
If you get a good signal but cannot access the Internet, check your TCP/IP
settings for your wireless adapter. Refer to the Networking Basics section in
this manual for more information.
4. The following window appears while your computer tries to connect to the
router.

5. Enter the same security key or passphrase (Wi-Fi password) that is on your
router and click Connect. You can also connect by pushing the WPS button
on the router.
It may take 20-30 seconds to connect to the wireless network. If the

connection fails, please verify that the security settings are correct. The key or
passphrase must be exactly the same as the one on the wireless router.

WPS
The WPS feature of the DIR-867 can be configured using Windows® 7. Carry out the following steps to use Windows® 7 to
configure the WPS feature:
1. Click the Start button and select Computer from the Start menu.
2. Click Network on the left side.

3. Double-click the DIR-867.
DIR-867
4. Input the WPS PIN number (on the router label) in the Setup > Wireless
Setup menu in the Router’s Web UI) and click Next.

5. Type a name to identify the network.
6. To configure advanced settings, click the icon.

7. The following window appears while the DIR-867 is being configured.
Wait for the configuration to complete.
8. The following window informs you that WPS on the DIR-867 has been set up
successfully.
Make a note of the security key as you may need to provide this security key
if adding an older wireless device to the network in the future.
9. Click Close to complete WPS setup.

Windows Vista®
Windows Vista® users may use the built-in wireless utility. If you are using another company’s wireless utility, please refer to the
user manual of your wireless adapter for help connecting to a wireless network. Most wireless utilities will have a “site survey”
option similar to the Windows Vista® utility as seen below.
If you receive the Wireless Networks Detected bubble, click on the center of
the bubble to access the utility.
or
Right-click on the wireless computer icon in your system tray (lower-right

corner next to the time). Select Connect to a network.
The utility will display any available wireless networks in your area. Click on a
network (displayed using the SSID) and click the Connect button.
If you get a good signal but cannot access the Internet, check you TCP/IP
settings for your wireless adapter. Refer to the Networking Basics section in
this manual for more information.

WPA/WPA2
your wireless adapter. If you are joining an existing network, you will need to know the security key or passphrase being used.
1. Open the Windows Vista® Wireless Utility by right-clicking on the wireless

computer icon in your system tray (lower right corner of screen). Select
Connect to a network.
2. Highlight the Wi-Fi name (SSID) you would like to connect to and click
Connect.

3. Enter the same security key or passphrase (Wi-Fi password) that is on your
router and click Connect.
It may take 20-30 seconds to connect to the wireless network. If the

connection fails, please verify that the security settings are correct. The key or
passphrase must be exactly the same as the one on the wireless router.

Section 6 - Troubleshooting
Troubleshooting
This chapter provides solutions to problems that can occur during the installation and operation of the DIR-867. Read the
following descriptions if you are having problems. The examples below are illustrated in Windows® XP. If you have a different
operating system, the screenshots on your computer will look similar to these examples.
1. Why can’t I access the web-based configuration utility?
When entering the IP address of the D-Link router (192.168.0.1 for example), you are not connecting to a website, nor do you
have to be connected to the Internet. The device has the utility built-in to a ROM chip in the device itself. Your computer must
be on the same IP subnet to connect to the web-based utility.
• Make sure you have an updated Java-enabled web browser. We recommend the following:
- Microsoft Internet Explorer® 10 or higher

- Mozilla Firefox 28 or higher
- Google™ Chrome 28 or higher
- Apple Safari 6 or higher
• Verify physical connectivity by checking for solid link lights on the device. If you do not get a solid link light, try using a
different cable, or connect to a different port on the device if possible. If the computer is turned off, the link light may not be
on.
• Disable any Internet security software running on the computer. Software firewalls such as ZoneAlarm, BlackICE, Sygate,
Norton Personal Firewall, and Windows® XP firewall may block access to the configuration pages. Check the help files
included with your firewall software for more information on disabling or configuring it.

• Configure your Internet settings:
• Go to Start > Settings > Control Panel. Double-click the Internet Options Icon. From the Security tab, click
the button to restore the settings to their defaults.
• Click the Connection tab and set the dial-up option to Never Dial a Connection. Click the LAN Settings button.
Make sure nothing is checked. Click OK.
• Go to the Advanced tab and click the button to restore these settings to their defaults. Click OK three times.
• Close your web browser (if open) and open it.
• Access the web management. Open your web browser and enter the IP address of your D-Link router in the address bar. This
should open the login page for your web management.
• If you still cannot access the configuration, unplug the power to the router for 10 seconds and plug back in. Wait about 30
seconds and try accessing the configuration. If you have multiple computers, try connecting using a different computer.
2. What can I do if I forgot my password?
If you forgot your password, you must reset your router. This process will change all your settings back to the factory defaults.
To reset the router, locate the reset button (hole) on the rear panel of the unit. With the router powered on, use a paperclip
to hold the button down for 10 seconds. Release the button and the router will go through its reboot process. Wait about 30
seconds to access the router. The default IP address is 192.168.0.1. When logging in, leave the password box empty.

3. Why can’t I connect to certain sites or send and receive emails when connecting through my router?
If you are having a problem sending or receiving email, or connecting to secure sites such as eBay, banking sites, and Hotmail,
we suggest lowering the MTU in increments of ten (Ex. 1492, 1482, 1472, etc).
To find the proper MTU Size, you’ll have to do a special ping of the destination you’re trying to go to. A destination could be
another computer, or a URL.
• Click on Start and then click Run.
• Windows® 95, 98, and Me users type in command (Windows® NT, 2000, XP, Vista®, and 7 users type in cmd) and
press Enter (or click OK).
• Once the window opens, you’ll need to do a special ping. Use the following syntax:
ping [url] [-f] [-l] [MTU value]
Example: ping yahoo.com -f -l 1472

You should start at 1472 and work your way down by 10 each time. Once you get a reply, go up by 2 until you get a
fragmented packet. Take that value and add 28 to the value to account for the various TCP/IP headers. For example, lets say
that 1452 was the proper value, the actual MTU size would be 1480, which is the optimum for the network we’re working with
(1452+28=1480).
Once you find your MTU, you can now configure your router with the proper MTU size.
To change the MTU rate on your router follow the steps below:
• Open your browser, enter the IP address of your router (192.168.0.1) and click OK.
• Enter your username (admin) and password (blank by default). Click OK to enter the web configuration page for
the device.
• Click on Setup and then click Manual Configure.
• To change the MTU, enter the number in the MTU field and click Save Settings to save your settings.
• Test your email. If changing the MTU does not resolve the problem, continue changing the MTU in increments
of ten.

Appendix A - Wireless Basics
Wireless Basics
D-Link wireless products are based on industry standards to provide easy-to-use and compatible high-speed wireless
connectivity within your home, business, or public access wireless networks. Strictly adhering to the IEEE standard, the D-Link
wireless family of products will allow you to securely access the data you want, when, and where you want it. You will be able to
enjoy the freedom that wireless networking delivers.
A wireless local area network (WLAN) is a cellular computer network that transmits and receives data with radio signals
instead of wires. Wireless LANs are used increasingly in both home and office environments, and public areas such as airports,
coffee shops and universities. Innovative ways to utilize WLAN technology are helping people work, and communicate more
efficiently. Increased mobility and the absence of cabling and other fixed infrastructure have proven to be beneficial for many
users.
Wireless users can use the same applications they use on a wired network. Wireless adapter cards used on laptop and desktop
systems support the same protocols as Ethernet adapter cards.
Under many circumstances, it may be desirable for mobile network devices to link to a conventional Ethernet LAN in order to
use servers, printers or an Internet connection supplied through the wired LAN. A wireless router is a device used to provide
this link.

What is Wireless?
Wireless or Wi-Fi technology is another way of connecting your computer to the network without using wires. Wi-Fi uses radio
frequency to connect wirelessly so you have the freedom to connect computers anywhere in your home or office network.
Why D-Link Wireless?
D-Link is the worldwide leader and award winning designer, developer, and manufacturer of networking products.
D-Link delivers the performance you need at a price you can afford. D-Link has all the products you need to build your
network.
How does wireless work?
Wireless works similarly to how cordless phones work, through radio signals that transmit data from one point A to point B. But
wireless technology has restrictions as to how you can access the network. You must be within the wireless network range area
to be able to connect your computer. There are two different types of wireless networks: Wireless Local Area Network (WLAN),
and Wireless Personal Area Network (WPAN).
Wireless Local Area Network (WLAN)
In a wireless local area network, a device called an Access Point (AP) connects computers to the network. The access point
has a small antenna attached to it, which allows it to transmit data back and forth over radio signals. With an indoor access
point the signal can travel up to 300 feet. With an outdoor access point the signal can reach out up to 30 miles to serve places
like manufacturing plants, industrial locations, university and high school campuses, airports, golf courses, and many other
outdoor venues.

Wireless Personal Area Network (WPAN)
Bluetooth is the industry standard wireless technology used for WPAN. Bluetooth devices in WPAN operate in a range up to 30
feet away.
Compared to WLAN the speed and wireless operation range are both less than WLAN, but in return it doesn’t use nearly as
much power. This makes it ideal for personal devices, such as mobile phones, PDAs, headphones, laptops, speakers, and other
devices that operate on batteries.
Who uses wireless?
Wireless technology as become so popular in recent years that almost everyone is using it, whether it’s for home, office,
business, D-Link has a wireless solution for it.
Home Uses/Benefits
• Gives everyone at home broadband access
• Surf the web, check email, instant message, etc.
• Gets rid of the cables around the house
• Simple and easy to use
Small Office and Home Office Uses/Benefits

• Stay on top of everything at home as you would at office
• Remotely access your office network from home
• Share Internet connection and printer with multiple computers
• No need to dedicate office space

Where is wireless used?
Wireless technology is expanding everywhere, not just at home or office. People like the freedom of mobility and it’s becoming
so popular that more and more public facilities now provide wireless access to attract people. The wireless connection in public
places is usually called “hotspots”.
Using a D-Link USB adapter with your laptop, you can access the hotspot to connect to the Internet from remote locations like:
airports, hotels, coffee shops, libraries, restaurants, and convention centers.
Wireless network is easy to setup, but if you’re installing it for the first time it could be quite a task not knowing where to start.
That’s why we’ve put together a few setup steps and tips to help you through the process of setting up a wireless network.
Tips
Here are a few things to keep in mind, when you install a wireless network.
Centralize your router or access point
Make sure you place the router/access point in a centralized location within your network for the best performance. Try to
place the router/access point as high as possible in the room, so the signal gets dispersed throughout your home. If you have a
two-story home, you may need a repeater to boost the signal to extend the range.
Eliminate Interference
Place home appliances such as cordless telephones, microwaves, and televisions as far away as possible from the router/access
point. This would significantly reduce any interference that the appliances might cause since they operate on same frequency.
Security
Don’t let your next-door neighbors or intruders connect to your wireless network. Secure your wireless network by turning on
the WPA or WEP security feature on the router. Refer to the product manual for detail information on how to set it up.

Wireless Modes
There are basically two modes of networking:
• Infrastructure – All wireless clients will connect to an access point or wireless router.

• Ad-hoc – Directly connecting to another computer for peer-to-peer communication using wireless network
adapters on each computer, such as two or more DIR-867 wireless network USB adapters.
An Infrastructure network contains an access point or wireless router. All the wireless devices, or clients, will connect to the
wireless router or access point.
An Ad-hoc network contains only clients, such as laptops with wireless USB adapters. All the adapters must be in Ad-hoc mode
to communicate.

Appendix B - Networking Basics
Networking Basics
Check your IP address
After you install your new D-Link adapter, by default, the TCP/IP settings should be set to obtain an IP address from a DHCP
server (i.e. wireless router) automatically. To verify your IP address, please follow the steps below.
Click on Start > Run. In the run box type cmd and click OK. (Windows® 10/8/7/Vista® users type cmd in the Start Search box.)
At the prompt, type ipconfig and press Enter.
This will display the IP address, subnet mask, and the

default gateway of your adapter.
If the address is 0.0.0.0, check your adapter

installation, security settings, and the settings on
your router. Some firewall software programs may
block a DHCP request on newly installed adapters.

Statically Assign an IP address

If you are not using a DHCP capable gateway/router, or you need to assign a static IP address, please follow the steps below:
Step 1
Windows® 10 - Click on Start > Windows System > Command Prompt
Windows® 8 - Click on Start > Windows System > Command Prompt
Windows® 7 - Click on Start > Control Panel > Network and Internet > Network and Sharing Center.
Windows Vista® - Click on Start > Control Panel > Network and Internet > Network and Sharing Center > Manage
Network Connections.
Windows® XP - Click on Start > Control Panel > Network Connections.
Windows® 2000 - From the desktop, right-click My Network Places > Properties.
Step 2
Right-click on the Local Area Connection which represents your network adapter and select Properties.
Step 3
Highlight Internet Protocol (TCP/IP) and click Properties.
Step 4
Click Use the following IP address and enter an IP address that is on the same subnet
as your network or the LAN IP address on your router.
Example: If the router´s LAN IP address is 192.168.0.1, make your IP address 192.168.0.X
where X is a number between 2 and 99. Make sure that the number you choose is not
in use on the network. Set the Default Gateway the same as the LAN IP address of your
router (I.E. 192.168.0.1).
Set Primary DNS the same as the LAN IP address of your router (192.168.0.1). The
Secondary DNS is not needed or you may enter a DNS server from your ISP.
Step 5
Click OK twice to save your settings.

Wireless Security
This section will show you the different levels of security you can use to protect your data from intruders. The DIR-867 offers the following
types of security:
• WPA2 (Wi-Fi Protected Access 2) • WPA2-PSK (Pre-Shared Key)

• WPA (Wi-Fi Protected Access) • WPA-PSK (Pre-Shared Key)
What is WPA?
WPA (Wi-Fi Protected Access), is a Wi-Fi standard that was designed to improve the security features of WEP (Wired Equivalent Privacy).
The 2 major improvements over WEP:
• Improved data encryption through the Temporal Key Integrity Protocol (TKIP). TKIP scrambles the keys using a hashing
algorithm and by adding an integrity-checking feature, ensures that the keys haven’t been tampered with. WPA2 is
based on 802.11i and uses Advanced Encryption Standard (AES) instead of TKIP.
• User authentication, which is generally missing in WEP, through the extensible authentication protocol (EAP). WEP
regulates access to a wireless network based on a computer’s hardware-specific MAC address, which is relatively simple
to be sniffed out and stolen. EAP is built on a more secure public-key encryption system to ensure that only authorized
network users can access the network.
WPA-PSK/WPA2-PSK uses a passphrase or key to authenticate your wireless connection. The key is an alpha-numeric password between
8 and 63 characters long. The password can include symbols (!?*&_) and spaces. This key must be the exact same key entered on your
wireless router or access point.
WPA/WPA2 incorporates user authentication through the Extensible Authentication Protocol (EAP). EAP is built on a more secure public
key encryption system to ensure that only authorized network users can access the network.

Appendix C - Technical Specifications
Technical Specifications
Device Interfaces Power
• Wireless Interface (2.4 GHz): IEEE 802.11n/g/b • Input: 100 to 240 V AC, 50/60 Hz
• Wireless Interface (5 GHz): IEEE 802.11 ac/n/a • Output: 12 V DC, 1.5 A
• Four 10/100/1000 Mbps LAN ports
• One 10/100/1000 Mbps WAN port Temperature
• Operating: 0 to 40 °C (32 to 104 °F)
Antenna Types • Storage: -20 to 65 °C (-4 to 149 °F)
• Four external antennas
Humidity
Standards • Operating: 10% to 90% maximum, non-condensing
• IEEE 802.11ac1,2,3 • Storage: 5% to 95% maximum, non-condensing
• IEEE 802.11n
• IEEE 802.11g Certifications
• IEEE 802.11b • FCC
• IEEE 802.11a • IC
• IEEE 802.3
• IEEE 802.3u Dimensions & Weight
• IEEE 802.3ab • L x W x H: 285x196x48mm
• 576g
Security
• WPATM - Personal/Enterprise
• WPA2TM - Personal/Enterprise
• Wi-Fi Protected Setup (WPS) PIN/PBC
1 Maximum wireless signal rate derived from IEEE Standard 802.11a, 802.11g, 802.11n, and 802.11ac specifications. Actual data throughput will vary. Network conditions and environmental factors,including volume of
network traffic, building materials and construction, and network overhead, lower actual data throughput rate. Environmental factors will adversely affect wireless signal range.
2 Frequency Range varies depending on country’s regulation.
3 The DIR-867 does not include 5.25-5.35 GHz & 5.47-5.725 GHz in some regions.

Appendix D - Regulatory Information
Regulatory Statements
Federal Communication Commission Interference Statement
This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits
are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and
can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful
interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to
correct the interference by one of the following measures:
-- Reorient or relocate the receiving antenna.
-- Increase the separation between the equipment and receiver.
-- Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
-- Consult the dealer or an experienced radio/TV technician for help.
Non-modifications Statement:
Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this
equipment.
This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
Caution:
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
(1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that
may cause undesired operation.
This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance
with FCC multi-transmitter product procedures. For product available in the USA/Canada market, only channel 1~11 can be operated. Selection
of other channels is not possible.
Note
The country code selection is for non-USA models only and is not available to all USA models. Per FCC regulations, all WiFi product marketed in
the USA must be fixed to USA operational channels only.

IMPORTANT NOTICE:
FCC Radiation Exposure Statement
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and
operated with minimum distance 38 cm between the radiator and your body.
Innovation, Science and Economic Development Canada (ISED) Statement:

This Class B digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe B est conforme à la norme NMB-003 du Canada.
Innovation, Science and Economic Development Canada (ISED) Statement:

This device complies with ISED licence-exempt RSS standard(s). Operation is subject to the following two conditions:
(1) this device may not cause interference, and
(2) this device must accept any interference, including interference that may cause undesired operation of the device.
Le présent appareil est conforme aux CNR d'ISED applicables aux appareils radio exempts de licence. L'exploitation est autorisée aux deux
conditions suivantes :
(1) l'appareil ne doit pas produire de brouillage, et
(2) l'utilisateur de l'appareil doit accepter tout brouillage radioélectrique subi, même si le brouillage est susceptible d'en compromettre le
fonctionnement.

Caution :
(i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel
mobile satellite systems;
(ii) the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p.
limits specified for point-to-point and non-point-to-point operation as appropriate; and
(iii) Users should also be advised that high-power radars are allocated as primary users (i.e. priority users) of the bands 5650-5850 MHz and that
these radars could cause interference and/or damage to LE-LAN devices.
Avertissement:
(i) les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieur afin de réduire les risques
de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux;
(ii) le gain maximal d'antenne permis (pour les dispositifs utilisant la bande de 5725 à 5 850 MHz) doit être conforme à la limite de la p.i.r.e.
spécifiée pour l'exploitation point à point et l’exploitation non point à point, selon le cas;
(iii) De plus, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de haute puissance sont désignés utilisateurs principaux (c.-
à-d., qu’ils ont la priorité) pour les bandes 5650-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs
LAN-EL.
Radiation Exposure Statement

This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and
operated with minimum distance 44 cm between the radiator and your body.
Déclaration d'exposition aux radiations

Cet équipement est conforme aux limites d'exposition aux rayonnements ISED établies pour un environnement non contrôlé. Cet équipement
doit être installé et utilisé avec un minimum de 44 cm de distance entre la source de rayonnement et votre corps.

DIR-867 REVA MANUAL v1.01 WW EN

Uploaded by

Copyright:

Available Formats

DIR-867 REVA MANUAL v1.01 WW EN

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

DIR-867 REVA MANUAL v1.01 WW EN

Uploaded by

Copyright:

Available Formats

Version 1.

AC1750+ MU-MIMO Wi-Fi Gigabit Router

D-Link DIR-867 User Manual i

D-Link DIR-867 User Manual ii

Static Routes..........................................................................69 WPA/WPA2.......................................................................... 114

Connect a Wireless Client to your Router.....................109

DIR-867 Wi-Fi Configuration Card

Ethernet Cable Quick Installation Guide

D-Link DIR-867 User Manual 1

Computer with the following:

D-Link DIR-867 User Manual 2

D-Link DIR-867 User Manual 3

D-Link DIR-867 User Manual 4

D-Link DIR-867 User Manual 5

D-Link DIR-867 User Manual 6

D-Link DIR-867 User Manual 7

Before you Begin

D-Link DIR-867 User Manual 8

Wireless Installation Considerations

D-Link DIR-867 User Manual 9

D-Link DIR-867 User Manual 10

Note: This unit is to be used with power supply model DA-60N12.

D-Link DIR-867 User Manual 11

Wi-Fi Configuration Note

D-Link DIR-867 User Manual 12

D-Link DIR-867 User Manual 13

The wizard is designed to guide you through a step-by-step process to configure

Click Next to continue.

D-Link DIR-867 User Manual 14

Setup Wizard (continued)

D-Link DIR-867 User Manual 15

Setup Wizard (continued)

Click Next to continue.

D-Link DIR-867 User Manual 16

Setup Wizard (continued)

Congratulations, your device has been successfully configured!

D-Link DIR-867 User Manual 17

D-Link Wi-Fi App

D-Link DIR-867 User Manual 18

D-Link Wi-Fi App (continued)

D-Link DIR-867 User Manual 19

D-Link DIR-867 User Manual 20

To reconfigure the Internet settings, refer to Internet on page 24.

D-Link DIR-867 User Manual 21

To reconfigure the network settings, either click Go to settings on the lower

To reconfigure the wireless settings, either click Go to settings, on the lower

D-Link DIR-867 User Manual 22

Name: Enter a custom name for this client.

Vendor: Displays the vendor of the device.

MAC Address: Displays the MAC address of the device.

IP Address: Displays the current IP address of this client.

Reserve IP: Enable to reserve this IP address for this client.

IP Address Specify an IP address for the DIR-867's DHCP server to assign.

Parental Control: Allow or Block access to the router.

Click Save when you are done.

D-Link DIR-867 User Manual 23

For Dynamic IP (DHCP) refer to page 25.

For Static IP refer to page 26.

For PPPoE refer to page 27.