The D-Link DGL-4500 firewall feature filters out unrecognized packets to protect your LAN network so all computers networked with the DGL-4500 are invisible to the outside world. If you wish, you can make some of the LAN computers accessible from the Internet by enabling Virtual Server. Depending on the requested service, the DGL-4500 redirects the external service request to the appropriate server within the LAN network.

The DGL-4500 is also capable of port-redirection meaning incoming traffic to a particular port may be redirected to a different port on the server computer.

Each virtual service that is created will be listed at the bottom of the screen in the Virtual Servers List. There are
pre-defined virtual services already in the table. You may use them by enabling them and assigning the server IP to use that particular virtual service.

Enable:

Check this box to enable the rule.

Name:

Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the fields.

IP Address:

Enter the IP address of the computer on your local network that you want to allow the incoming service to. If your computer is receiving an IP address automatically from the router (DHCP), you computer will be listed in the “Computer Name” drop-down menu. Select your computer and click <<.

Protocol Type:

Select TCP, UDP, or Both from the drop-down menu. Private Port/Public Port: Enter the port that you want to open next to Private Port and Public Port. The private and public ports are usually the same. The public port is the port seen from the Internet side, and the private port is the port being used by the application on the computer within your local network. Schedule: The schedule of time when the Virtual Server Rule will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.

Inbound Filter:

Select Allow All (most common) or a created Inbound filter. You may create your own inbound filters in the Advanced > Inbound Filter page.

Configuring the Virtual Server on D-Link DI-604:

Step 1: Access the device configuration by entering 192.168.0.1 in your web browser. Login with your username and password. The default username is admin and the password is blank.

Step 2a: If the port you need to forward is a common port, it will be under the predefined virtual server list at the bottom of the page. Click the pad and paper icon next to the virtual server entry you want to use. The Protocol Type and Service Port fields are preconfigured. Click the Enable radio button to use the virtual server. Enter the private IP address of the computer that will use the service port. Configure the Schedule as needed, then Apply your settings.

Step 2b: If the port you need to forward is not listed under the predefined virtual server list at the bottom of the page, you can create a new entry for your application. Click the Enable radio button to use the virtual server. Give your virtual server a name. Next, enter the private IP address of the computer that will use the service port. Then, select the Protocol Type and enter the Service Port. If you don’t know how to use Private and Public port assignment, then just enter the same port number in both fields. Configure the Schedule as needed and Apply your settings.

The DIR-825 firewall feature filters out unrecognized packets to protect your LAN network so all computers networked with the DIR-825 are invisible to the outside world. If you wish, you can make some of the LAN computers accessible from the Internet by enabling Virtual Server. Depending on the requested service, the DIR-825 redirects the external service request to the appropriate server within the LAN network.

The D-Link DIR-825 is also capable of port-redirection meaning incoming traffic to a particular port may be redirected to a different port on the server computer.

Each virtual service that is created will be listed at the bottom of the screen in the Virtual Servers List. There are
pre-defined virtual services already in the table. You may use them by enabling them and assigning the server IP to use that particular virtual service.

Name:Enter a name for the rule or select an application from the drop-down menu. Select an application and click << to populate the fields.

IP Address:Enter the IP address of the computer on your local network that you want to allow the incoming service to. If your computer is receiving an IP address automatically from the router (DHCP), you computer will be listed in the “Computer Name” drop-down menu. Select your computer and click <<.

Private Port/ Public Port:Enter the port that you want to open next to Private Port and Public Port. The private and public ports are usually the same. The public port is the port seen from the Internet side, and the private port is the port being used by the application on the computer within your local network.

Protocol Type:Select TCP, UDP, or Both from the drop-down menu.

Schedule:The schedule of time when the Virtual Server Rule will be enabled. The schedule may be set to Always, which will allow the particular service to always be enabled. You can create your own times in the Tools > Schedules section.

Inbound Filter:Select Allow All (most common) or a created Inbound filter. You may create your own inbound filters in the Advanced > Inbound Filter page.

In these cases, you can use Inbound Filters to limit that exposure by specifying the IP addresses of internet hosts that you trust to access your LAN through the ports that you have opened. You might, for example, only allow access to a game server on your home LAN from the computers of friends whom you have invited to play the games on that server.

Inbound Filters can be used for limiting access to a server on your network to a system or group of systems. Filter rules can be used with Virtual Server, Gaming, or Remote Administration features. Each filter can be used for several functions; for example a “Game Clan” filter might allow all of the members of a particular gaming group to play several different games for which gaming entries have been created. At the same time an “Admin” filter might only allows systems from your office network to access the WAN admin pages and an FTP server you use at home. If you add an IP address to a filter, the change is effected in all of the places where the filter is used.

Add/Edit Inbound Filter Rule

Here you can add entries to the Inbound Filter Rules List below, or edit existing entries.

Name

Enter a name for the rule that is meaningful to you.

Action

The rule can either Allow or Deny messages.

Source IP Range

Define the ranges of Internet addresses this rule applies to. For a single IP address, enter the same address in both the Start and End boxes. Up to eight ranges can be entered. The Enable checkbox allows you to turn on or off specific entries in the list of ranges.

Save
Saves the new or edited Inbound Filter Rule in the following list. When finished updating the Inbound Filter Rules List, you must still click the Save Settings button at the top of the page to make the changes effective and permanent.

Inbound Filter Rules List

The section lists the current Inbound Filter Rules. An Inbound Filter Rule can be changed by clicking the Edit icon, or deleted by clicking the Delete icon. When you click the Edit icon, the item is highlighted, and the “Edit Inbound Filter Rule” section is activated for editing.

In addition to the filters listed here, two predefined filters are available wherever inbound filters can be applied:

Allow All

Permit any WAN user to access the related capability.

Deny All

Prevent all WAN users from accessing the related capability. (LAN users are not affected by Inbound Filter Rules.)

Step 2: The default username is admin (all lower case) and the default password is blank (nothing). Click OK.

Step 3: Click on Advanced on the top and then Virtual Server on the left.

Step 4: Click on the trash can to delete one of the built-in Virtual Server entries.

Step 5: Click on the Enabled radio button and give the Virtual Server a name. Specify the Private IP address, Protocol Type, Public Port, Private Port, and Schedule. Apply the settings.

Read More: What is the difference between Virtual Server and Port Forwarding?

Depending on the D-Link router models, divided into the following set of several.

1.DI-514, DI-524, DI-604, DI-614+, DI-624 OR
DI-704P (revB), DI-704P (revC), DI-704UP, DI-707P, DI-714P+, DI-754, DI-764, DI-774, DI-784

Step 1: Open your web browser and enter the IP address of your router (192.168.0.1). Enter username (admin) and your password (leave blank).

Step 2: Click the Advanced tab and then click on the DMZ button.

Step 3: Select Enable and type in the IP address of the computer you want to use as DMZ host.

Step 4: Click Apply and then Continue to save the changes.

2.For the DI-704, DI-704P (revA), DI-707, DI-711 (revA), DI-713, and DI-713P:

Step 1: Open your web browser and enter the IP address of your router (192.168.0.1). Enter username (admin) and your password (leave blank). If you have only 1 box, enter admin.

Step 2: At the bottom, click Advanced and then click Misc Items.

Step 3: Type in the IP address of the computer you want to use as DMZ host. Click the box to enable DMZ.

Step 4: Click Save and then Yes when prompted to reboot router.

3.For the DI-711 (revB), 714, and 804:

Step 1: Open your web browser and enter the IP address of the router (192.168.0.1).

Step 2: Enter your username (admin) and password (blank) and click Log in.

Step 3: Click on Advanced Settings on top and then click Virtual Server Settings on the left side.

Step 4: Next to Internal IP, enter the last number of the IP address of your computer that you want to use (i.e. 192.168.0.100). Next to Service, click the down arrow and select ALL(DMZ).

Step 5: Click Submit and then Save and Restart to save settings.

Example: In Virtual Server you would set your first camera as public port 81, private port of 80 and set it private IP accordingly. Then make the second camera public port 82, private port 80 and set its private IP accordingly. Internally (from LAN) both camera can be accessed at their IP address and port 80. From the outside(from WAN) they are access from the WAN ip address and their respective Public port, camera one at 81 and camera two at 82. http://wan-ip-address:81 typed into your browser will show you the web page of camera one.

Port Forwarding – is used to allow data to come from the WAN (Internet) and pass through the firewall to the destination ip address(s). This is used when a device or application behind the firewall of your router needs access to a range of ports to function properly. (E.g. online games or gaming consoles, FTP servers and network cameras.)
However, no two devices or machines on the LAN side of the router can use the same port number at the same time.

Example: In the case of the camera above, for Virtual Server, you kept the HTTP port as 80 and used Virtual Server to make the public port 81. To cover the streaming ports, Audio, Video, and control (DCS-5300G) you will have to set each port range unique to each camera and put those ranges in Port Forwarding. You can keep 5001-5003 for camera one but need to make camera two unique, may be 5004-5006.

In the end you will have used the Virtual Server for redirection and the Port Forwarding rules to allow a range of ports through the router to a LAN side device.