TP-Link TL-R480T+ Bedienungsanleitung

TL-R480T+ Load Balance Broadband Router REV6.2.0 191001 101 1[...]

-I- COPYRIGHT & TRADEMARKS Specifications are subjec t to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., L TD. Other brands and product names are trademarks of their respective holders. No part of the specificat ions may be reproduced in any form or by any means or used to make any derivative such as translation, [...]

-II- Продукт сер тифіковано згідно с правилами системи Ук р С Е П Р О на відповідність вимогам норма тивних документів та вимогам , що пере дб а чені чинними законодав чими ак тами Ук р а ї н и . Safet[...]

-III- CONTENTS Package Contents .................................................................................................................. 1 Chapter 1 About this Guide ................................................................................................... 2 1.1 Intended Re aders ..................................................[...]

-IV- 4.5 Advanc ed ....................................................................................................................... ......51 4.5.1 NA T .......................................................................................................................... 51 4.5.2 T raf fic C ontrol ........................................[...]

-V- Appendix C Glossary .................................................................................................. 122[...]

-1- Package Content s The following items should be found in your package:  One TL-R480T+ Load Balance Broadband Router  One Power cord  One Console Cable  One Ethernet Cable  Quick In stallation Guide  Mounting kit s for installing in a st andard 19-inch rack  Resource CD Note: ● Make sure that the pa ckage contains the abov[...]

-2- Chapter 1 About this Guide This User Guide contains information for setu p and management of TL-R480T+ Load Balance Broadband Router . Please read this gui de carefully before ope ration. 1.1 Intended Readers This Guide is intended for Network Engineer and Network Administrator. 1.2 Conventions In this Guide the following conventions are used: [...]

-3- Appendix B F AQ Provides the possible solu tions to the problems that may occur during the installation and operation of the router . Appendix C Glossary Lists the glossary used in this guide.[...]

-4- Chapter 2 Introduction Thanks for choosing the Load Balance Broadband Router TL-R480T+. 2.1 Overview of the Router The Load Balance Broadband Router TL-R4 80T+ from TP-LINK possesses excellent data processing capability and multiple powerful func tions including Load Balance, Access Control, Bandwid th Con trol, IGMP Proxy , Session Limit, PPPo[...]

-5- + Featured Link Backup to switch all the new sessions from dropped line automatically to another for keeping an always on-line network.  Easy-to-use + Providing easy-to-use GUI with clear configur ation steps and detailed help information for the users to configure the router simply . + Helping administrators to monitor the whole network sta[...]

-6- T raffic Control  Supports Bandwidth Control  Supports Session Limit Security  Built-in firewall supporting URL/MAC Filtering  Supports Access Control  Supports App Control  Supports Attack Defense  Supports IP-MAC Binding  Supports GARP (Gratuitous ARP) 2.3 Appearance 2.3.1 Front Panel The front panel of TL-R480T+ is sh[...]

-7- LED Status Indication Off The linked device is running at 10Mbps. 100Mbps (W AN/LAN) On (Green/Y ellow) The linked device is running at 100Mbps. (Green light indicates the corresponding port is working as a LAN port, and yellow indicates W AN port.)  Interface Description Interface Port Description WAN 1~4 The WAN port is for c onnecting the[...]

-8- Chapter 3 Quick Inst allation Guide After connecting the TL-R480T+ router into your network, you shoul d conf igure it. This chapter describes how to configure the basic functions of your TL-R480T+ Load Balance Broadband Router . These procedures only take you a few minutes. Y ou can access the Inte rnet via the router immediately after it has [...]

-9- Step 2: In the next screen, right click Local Area Connecti on (LAN), and then select Properties . Figure 3-2 Step 3: In the next screen, select General tab, highlight Internet Protoc ol (TCP/IP), and then click the Properties button. Figure 3-3[...]

-10- Step 4: Configure the IP address as shown in Figure 3-4 . After that, click OK . Figure 3-4 Note: Y ou can configure the PC to get an IP address automatically , select “ Obt ain an IP address automatically ” and “ Obt ain DNS server address automatically ” in the screen above. For Windows 98 OS or earlier , the PC and router may need t[...]

-1 1- Figure 3-6 Y ou can check it by following the step s below: Note: ● Is the connection between your PC and the router correct? The LEDs of LAN port which you link to the devic e and the LEDs on your PC's adapter should be lit. ● Is the TCP/IP configuration for y our PC correct? If the router's IP address is 192. 168.0.1, your PC&[...]

-12- After a successful login, the “Quick Setup” screen will pop up as the Figure 3-8 shows. If it does no t prompt, you can click the Quick Setup on the left of the main menu. Then click <Next>. Figure 3-8 Quick Setup Select the total number of W AN por ts you prefer to use as the Figure 3-9 shows. Then click <Next> to load the WA [...]

-13- Select the W AN port you want to use as the Figure 3-10 shows, and then click <Next> to load the W AN Connection T ype screen. Figure 3-10 W AN Port Select the connection type prov ided by your ISP as the Figure 3-1 1 shows. Three popular typ es are provided here. For other connecti on types, please refer to the 4.3.1 WA N . Figure 3-1 1[...]

-14- 1) If you choose PPPoE , you will see the screen as the Figure 3-12 shows. Enter the Account Name and Password provided by yo ur ISP (Internet Service Provider). Figure 3-12 W AN Connection T ype - PPPoE Click <Next> to dial up, and the process will take a few minutes. The process of configuring the network parameters is shown as Figure [...]

-15- Figure 3-14 W AN Connection T ype - Dynamic IP 3) If you choose Static IP , you should enter the detailed IP information provided by your ISP in Figure 3-15 . Figure 3-15 W AN Connection T ype - S tatic IP Then click <Next>. The process for configuring the network parameters is shown as Figure 3-16 . If you close the screen during the pr[...]

-16- Figure 3-16 W AN Connection T ype - S tatic IP Connecting After that, you will see the next screen. Click <Finis h> to complete the quick inst allation or click <Continue> to configure other W AN ports. Figure 3-17 Configuration Completed[...]

-17- Chapter 4 Configuration 4.1 Stat u s The S tatus page shows the system information, the port connection st atus and other information related to this router . Choose the menu Statu s to load the following page. Figure 4-1 S t atus[...]

-18- 4.2 Quick Setup Please refer to the Chapter 3 Quick Installation Guide . 4.3 Network 4.3.1 W AN 4.3.1.1 W AN Mode TL-R480T+ provides four available W AN port s. Y ou can set the number of W AN ports on this p age. Choose the menu Network → WA N → W AN Mode to load the following p age. Figure 4-2 W AN Mode  W AN Mode W AN Ports: Select t[...]

-19- Tips: ● It’ s allowed t o set the IP addresses of multiple W AN ports within the same subnet. However , to guarantee a normal communication, make sure that the W AN ports can access the same network, such as Internet or a local area network. ● The amount of tab p ages for W AN port varies with the number of the WAN port s. For the config[...]

-20- Default Gateway: Optional. Enter the Gateway assigned by yo ur ISP . MTU: MTU (Maximum T ransmission Unit) is the maximum data unit transmitted by the physical network . It can be set in the ran ge of 576-1500. The default MTU is 1500. Y ou are recommended to keep the default value if no other MTU va lue is provided by your ISP . Primary DNS: [...]

-21- Figure 4-4 W AN – Dynamic IP The following items are displayed on this screen:  Dyn am ic I P Connection T ype: Select Dynamic IP if your ISP as signs the IP address automatically . Click <Obtain> to get the IP address from your ISP’ s server . Click <Release> to release the current IP address of W AN port. Host Name: Option[...]

-22- Get IP Address b y Unicast: The broadcast requirement may not be supported by a few ISPs. Select this option if you can not get the IP address from your ISP even with a normal network connection. This option is not required generally . Use the following DNS Server: Select this option to enter the DNS (D omain Name Server) address manually . Pr[...]

-23- Primary DNS: Displays the IP address of your ISP’ s Primary DNS. Secondary DNS: Displays the IP address of your ISP’ s Secondary DNS. 3) PPPoE If your ISP (Internet Service Provider) has provid ed the account information for the PPPoE connection, please choose the PPPoE/Russian PPPoE connection ty pe (Used mainly for DSL Internet service).[...]

-24- The following items are displayed on this screen:  PPPoE Settings Connection T ype: Select PPPoE/Russian P PPoE if your ISP provides xDSL V irtual Dial-up connection. Cli ck <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Na[...]

-25- ISP Address: Optional. Enter the ISP address provided by your ISP . It's null by default. Service Name: Optional. Enter the Service Name prov ided by your ISP . It's null by default. Primary DNS: Enter the IP address of y our ISP’s Primary DNS. Secondary DNS: Optional. Enter the IP address of your ISP’ s Secondary DNS. Secondary [...]

-26-  PPPoE St atus Statu s: Displays the status of PPPoE connection.  “Disabled” indicates that the PPPoE connection type is not applied.  “Connecting” indicates that t he router is obtaining the IP parameters from your ISP .  “Connected” indicates that t he router has successfully obtained the IP parameters from your ISP .[...]

-27- 4) L2TP If your ISP (Internet Service Provider) has provi ded the account informati on for the L2TP connection, please choose the L2TP/Ru ssian L2TP connection type. Figure 4-6 W AN - L2TP[...]

-28- The following items are displayed on this screen:  L2TP Settings Connection T ype: Select L2TP/Russian L2TP if your ISP provides an L2TP connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Name: Enter the Accou[...]

-29- IP Address: If S tatic IP is selected, confi gure the IP address of W A N port. If Dynamic IP is selected, the IP address of W AN port obtained is displayed. Subnet Mask: If S tatic IP is selected, conf igure the subnet mask of W AN port. If Dynamic IP is select, the subnet mask of W AN port obtained is displayed. Default Gateway: If S tatic I[...]

-30- Primary DNS: Displays the IP address of your ISP’ s Primary DNS. Secondary DNS: Displays the IP address of your ISP’ s Secondary DNS. 5) PPTP If your ISP (Internet Service Provider) has provi ded the account informati on for the PPTP connection, please choose the PPTP/Russi an PPTP connection type. Figure 4-7 W AN - PPTP The following item[...]

-31-  PPTP Settings Connection T ype: Select PPTP/Russian PPTP if your ISP provides a PPTP connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Name: Enter the Account Name provided by your ISP . If you are not clear[...]

-32- Subnet Mask: If S t atic IP is selected, conf igure the subnet mask of W AN port. If Dynamic IP is select, the subnet mask of W AN port obtained is displayed. Default Gateway: If S tatic IP is selected, c onfigure the default gateway . If Dynamic IP is selected, the obt ained default gateway is displayed. Primary DNS/Secondary DNS: If S tatic [...]

-33- 6) BigPond If your ISP (Internet Service Provider) has provided the account inform ation for the BigPond connection, please choose t he BigPond connection type. Figure 4-8 W AN – Bigpond The following items are displayed on this screen:  BigPond Settings Connection T ype: Select BigPond if your ISP prov ides a BigPond connection. Click &l[...]

-34- Password: Enter the Password provided by your ISP . If you are not clear , please consult your ISP . Auth Server: Enter the address of authentication server . It can be IP address or server name. Auth Domain: Enter the domain name of authentication server . It's only required when the address of Auth Server is a server name. Auth Mode: Y [...]

-35-  BigPond St atus Statu s: Displays the status of Big Pond connection.  “Disabled” indicates that the BigPond connection type is not applied.  “Connecting” indicates that t he router is obtaining the IP parameters from your ISP .  “Connected” indicates that the router has successfully obtained the IP p arameters from you[...]

-36- The following items are displayed on this screen:  LAN IP Address: Enter the LAN IP address of the router . 192.168.0.1 is the default IP address. The Hosts in LAN can access the router via this IP address. It can be changed according to your network. Subnet Mask: Enter the Subnet Mask. The default subnet mask is 255.255.255.0. Note: If the[...]

-37- The following items are displayed on this screen:  DHCP Settings DHCP Server: Enable or disable the DHCP server on your router . Select Enable to make the router automatically a ssign TCP/IP parameters to the computers in the LAN. St art IP Address: Enter the S tart IP address to define a range for the DHCP server to assign dynamic IP addre[...]

-38- Figure 4-1 1 DHCP Client Y ou can view the informati on of the DHCP client s in this t able. Click the Refresh button for the updated information. 4.3.2.4 DHCP Reservation DHCP Reservation feature allows you to reserve an IP address for the specified MAC address. The client with this MAC address will always get t he same IP address each ti me [...]

-39- Statu s: Activate or Inactivate the corresponding entry .  List of Reserved Address In this table, you can view the information of the entries and edit t hem by the Action buttons. Up to 512 DHCP st atic address entries can be supported for LAN by this router . The first entry in Figure 4-12 indicates: The IP address 192.168.0.101 is reserv[...]

-40- Tips: ● Among the W AN ports, only W AN1( Port1 ) can be used for IPTV service. ● When IGMP Proxy option is Enabled, you need to ensure the Block IP options under the Firewall → Att ack Defense → Attack Defense is not selected. ● If the data traf fic is heavy when you use IPTV function, it is recommended to increase the parameters of[...]

-41- The following items are displayed on this screen:  MAC Address Port: Displays the port type of the router . Current MAC Address: Displays the current MAC address of the port. MAC Clone: It’s only available for WAN port. Click the <Resto re Factory MAC> button to res tore the MAC address t o the factory default value or click the <[...]

-42- Figure 4-15 S t atistics The following items are displayed on this screen:  St atistics Unicast: Displays the number of normal unica st packet s received or transmitted on the port. Broadcast: Displays the number of normal broadcast packet s received or transmitted on the port. Pause: Displays the number of flow contro l frames received or [...]

-43- Normal: Displays the number of the received packets (including error frames) that are between 64 bytes and the maximum frame length. The maximum untagged frame this router can support is 1518 bytes long and the maximum tagged frame is 1522 bytes long. Oversize: Displays the number of the received pa ckets (including error frames) that are long[...]

-44- Mode: Select the mode for the port mirror function. Options include:  Ingress: When this mode is selected, only the incoming packet s sent by the mirrored port will be copied to the mirroring port.  Egress: When this mode is selected, only the outgoing packets sent by the mirrored port will be copied to the mirroring port.  Ingress&am[...]

-45- Application Example T o monitor all the traffic and analyze the network abnormity for an ent erprise’s network, please set the Port Mirror function as below: 1) Check the box before Enable Port Mirror to enable the Port Mirro r function and select the Ingress & Egress mode. 2) Select Port 3 to be the Mirroring Port to monitor all the p a[...]

-46- The following items are displayed on this screen:  Rate Control Port: Displays the port number . Ingress Limit: S pecify whether to enable t he Ingress Limit feature. Ingress Rate: S pecify the limit rate for the ingress packet s. Egress Limit: S pecify whether to enabl e Egress Limit feature. Egress Rate: S pecify the limit rate for the eg[...]

-47- Negotiation Mode: Select the Negotiation Mode for the port. All Port s: Allows you to configure the parame ters for all the ports at one time. 4.3.5.5 Port St atus On this page, you can view t he current status of each port. Choose the menu Network → Sw itc h → Port St atus to load the following page. Figure 4-19 Port S t atus 4.3.5.6 Port[...]

-48- Figure 4-20 Port VLAN The following items are displayed on this screen:  Port VLAN Network: Displays the current logical network of the physical port. VLAN: Select the desired VLAN for the port. Tips: The Port VLAN can only be created among the LAN ports. 4.4 User Group The User Group function is used to group different users for unified ma[...]

-49-  Group Config Group Name: S pecify a unique name fo r the group. Description: Give a description for the group. It's optional.  List of Group In this table, you can view the information of the Groups and edit them by the Action buttons. 4.4.2 User On this page, you can confi gure the User for the group. Choose the menu User Group ?[...]

-50- Choose the menu User Group → Vi ew to load the following page. Figure 4-23 View Configuration The following items are displayed on this screen:  Vie w Config View : Select the desired view for configuration. User Name: Select the name of the desired User . A vailable Group: Displays the Groups that the User can join. Selected Group: Displ[...]

-51- Selected Member: Displays the members of this group, including Users and Groups. 4.5 Advanced 4.5.1 NA T NA T (Network Address T ranslation) is the translation between private IP and public IP , which allows private network users to visit the public network using private IP addresses. With the explosion of the Inter net, the number of availabl[...]

-52- Host IP Address: Enter the IP address of the host specified as NA T DMZ server . 4.5.1.2 One-to-One NA T On this page, you can conf igure the One-to-One NA T . Choose the menu Advanced → NA T → One-to-One NA T to load the following page. Figure 4-25 NA T Setup The following items are displayed on this screen:  One-to-One NA T Mapping IP[...]

-53- The first entry in Figure 4-25 indicates: The IP address of host1 in local network is 192.168.0.128 and the W AN IP address af ter NA T mapping is spec ified to be 222.135.48.128. The data packet s are transmitted from W AN1 port. DMZ Forwar ding and this entry are both activated. Note: One-to-One NA T entries t ake ef fect only when the Conne[...]

-54- Note: ● Multi-Nets NA T entry takes ef fect only when co operating with the corresponding St atic Route entries. ● For detailed setting of subnet mask, please refer to the Appendix B F AQ Application Example  Net work Requirements The LAN subnet of TL-R480T+ is 192. 168.0.0 /24, the subnet of VLAN2 under a three layer switch is 192.168.[...]

-55-  Configuration procedure 1. Establish the Multi-Nets NA T entries with Subnet/Mask of VLAN2 and VLAN3. The configured entries are as follows: 2. Then set the corresponding S tatic Route entry , en ter the IP address of t he interface connecting the router and the three layer swit ch into the Next Hop field. Choose the menu Advanced → Rout[...]

-56- 4.5.1.4 V irtual Server Virtual server can be used for setting up public servic es in your private netw ork, such as DNS, Email and FTP . Virtual server can define a service port. All the service requests to this port will be transmitted to the LAN server appointed by the router via IP address. Choose the menu Advanced → NA T → Vi rtu al S[...]

-57- Internal Server IP: Enter the IP address of the specified internal server for the entry . All the requests from the Internet to the specified LAN port will be redirected to this host. Statu s: Activate or inactivate the entry . Note: ● The External port and Internal Port should be set in the range of 1-65535. ● The external ports of dif fe[...]

-58- Figure 4-28 Port T riggering The following items are displayed on this screen:  Port T riggering Name: Enter a name for Port Triggering entri es. Up to 28 characters can be entered. Interface: Select an interface for forwarding dat a packet s. T rigger Port: Enter the trigger port number or range of port numbers. Only when the trigger port [...]

-59- Note: ● The T rigger Port and Incoming Port should be set in the range of 1-65535. The Incoming Port can be set in a continuous range such as 8690-8696. ● The router supports up to 16 Port T riggering ent ries. Each entry supports at most 5 groups of trigger ports and overlapping between the ports is not allowed. ● Each entry supports at[...]

-60- H.323 ALG: Enable or disable H.323 ALG . The default setting is enabled. H.323 is used for various applicat ions such as NetMeeting and V oIP . SIP ALG: Enable or disable SIP ALG . The default setting is enabled. It is recommended to keep the def ault setting if no special requirement. IPsec ALG: Enable or disable IPsec ALG . The de fault sett[...]

-61- The following items are displayed on this screen:  General Disable Bandwidth Control: Select this option to disable Bandwidth Control. Enable Bandwidth Control all the time: Select this option to enable Bandwidth Control all the time. Enable Bandwidth Control When: With this option selected, the Bandwidth Control will take ef fect when the [...]

-62- 4.5.2.2 Bandwid th Control On this page, you can configure the Bandwid th Control function. Choose the menu Advanced → T raffic Control → Band width Control to loa d the following page. Figure 4-31 Bandwidth Control The following items are displayed on this screen:  Bandwidth Control Rule Direction: Select the data stream direction for [...]

-63- Guaranteed Bandwidth ( Down): S pecify the Guaranteed Downstr eam Bandwidth for this entry . Limited Bandwid th (Down): S pecify the L imited Downstream Bandwidth for this entry . Effective Time: S pecify the t ime for the entry to take e ffect . Description: Give a description for the entry . Statu s: Activate or inactivate the entry .  Li[...]

-64- Figure 4-32 Session Limit The following items are displayed on this screen:  General Enable Session Limit: Check here to enable Session Limit, otherwise all the Session Limit entries will be disabled.  Session Limit Group: Select a group to define the controlled user . Max. Sessions: Enter the max. Sessions for the users. Description: Gi[...]

-65- Choose the menu Advanced → Sessi on Limit → Session List to load the following p age. Figure 4-33 Session List In this table, you can view the session limit inform ation of users configured with Session Limit. Click the <Refresh> button to get the latest information. 4.5.4 Load Balance On this part, you can configure how the traf fic[...]

-66- Choose the menu Advanced → Load Balance → Policy Routing to load the following page. Figure 4-35 Policy Routing The following items are displayed on this screen:  General Protocol: Select the protocol for the entry in the drop-down list. If the protocol you want to set is not in the lis t, you can add it to the list on 4.5.4.4 Protocol [...]

-67- Effective Time: S pecify the time for the entry to take ef fect. Statu s: Activate or inactivate the entry . Priority: Select this option to specify the prio rity for the added entries. The latest enabled entry will be displayed at the end of the list by default.  List of Rules Y ou can view the informati on of the entries and edit t hem by[...]

-68- Figure 4-36 Link Backup The following items are displayed on this screen:  General W AN Ports: Displays all the W AN ports in use. Y o u can drag the light-blue WAN button to primary and backup W AN list. The colo r of W AN button changing to gray indicates that the W AN port is already in the primary and backup W AN list. W AN Config: The [...]

-69- Failover: S pecify the premise for Failover Mode. The backup W AN port will be enabled only when the premise is met. Backup Effective Time: S pecify the backup ef fective time if T iming Mode has been selected. Then the backup W AN port will be enabled, while t he primary W AN port is disabled in the specified time period. When the start time [...]

-70- Figure 4-37 Protocol The following items are displayed on this screen:  Protocol Name: Enter a name to indicate a protocol. The name will display in the drop-down list of Protocol on Access Rule page. Number: Enter the Number of the prot ocol in the range of 0-255.  List of Protocol Y ou can view the informati on of the entries and edit [...]

-71- Figure 4-38 Static Route The following items are displayed on this screen:  St atic Route Destination: Enter the destination hos t the route leads to. Subnet Mask: Enter the Subnet Mask of the destination network. Next Hop: Enter the gateway IP address to which the p acket should be sent next. Interface: Select the physical network interf a[...]

-72- The first entry in Figure 4-38 indicates: If there are packets being sent to a device with IP address of 21 1.162.1.0 and subnet mask of 255.255.255.0, the router will forward the p ackets from W AN1 port to the next hop of 21 1.200.1.1. Application Example  Network Requirements LAN1 is under the router and it uses network seg ment 192.168.[...]

-73- 2. Add a static routing rule for LAN3 by referring to step 1. The static routing rules are shown in the following figure. 4.6 Firewall 4.6.1 Anti ARP S poofing ARP (Address Resolution Protocol) is used to analyze and map IP addresses to the corresponding MAC addresses so that packet s can be de livered to their destinations correctly . ARP fun[...]

-74- Figure 4-39 IP-MAC Binding The following items are displayed on this screen:  General It is recommended to check all the options. Y ou should import the IP and MAC address of the host to List of IP-MAC Binding and enable the corresp o nding entry before enabling “Permit the packet s matching the IP-MAC Binding entries only”. When suffer[...]

-75-  List of Rules Y ou can view the informati on of the entries and edit t hem by the Action buttons. The first entry in Figure 4-39 indicates: The IP address of 192.168.1.101 and MAC address of 00-1 9-66-83-53-CF have been bound and this entry is activated. Note: If all the entries in the binding list are disabled and “Permit the packets of[...]

-76- T o bind the entries in the list, check these entri es and click the <Import> button, then the settings will take ef fect if the entries do not c onflict with the existed entries. Note: If the local hosts suffered from ARP attack, you cannot add IP-MAC Binding entries on this p age. Please add entries manually on 4.6.1.1 IP-MAC Binding .[...]

-77- Figure 4-42 Attack Defense The following items are displayed on this screen:  General Flood Defense: Flood attack is a kind of commonly used DoS (Denial of Service), which including TCP SYN, UDP , ICMP and so on. It is recommended to check all the Fl ood Defense options and specify the corresponding thresholds. Keep the default settings if [...]

-78- Enable Att ack Defense Logs: With this box checked, the rout er will record the defense logs. Tips: When IPTV works in Automatic mode, you need to ensure the Block IP opti ons is not selected. 4.6.3 MAC Filtering On this page, you can control the access to the Internet of local host by specifying their MAC addresses. Choose the menu Firewall ?[...]

-79-  List of Rules Y ou can view the informati on of the entries and edit t hem by the Action buttons. 4.6.4 Access Control 4.6.4.1 URL Filtering URL (Uniform Resource Locator) specifies wher e an identified resource is available and the mechanism for retrieving it. URL Filt er functions to filter the Internet URL address, so as to provide a co[...]

-80-  URL Filtering Rule Object: Select the ra nge in which the URL Filtering takes ef fect:  Group: URL Filtering will take ef fect to all the users in group.  ANY : URL Fi ltering will take ef fect to all the users. Mode: Select the mode for URL Filtering. “Keywords’’ indicates that all the URL addresses including the specified key[...]

-81- 4.6.4.2 Web Filtering On this page, you can filter the desired web components. Choose the menu Firewall → Access Control → Web Filtering to load the following p age. Figure 4-45 Web Filtering Check the box before Enable Web Filt ering and select the web components to be filtered. 4.6.4.3 Access Rules Choose the menu Firewall → Access Con[...]

-82- Figure 4-46 Access Rule The following items are displayed on this screen:  Access Rules Policy: Select a policy for the entry:  Block: When this option is select ed, the packet s obeyed the rule will not be allowed to pass through the router .  Allow: When this option is selected, the packe ts obeyed the rule will be allowed to pass t[...]

-83- Source: Select the Source IP Ra nge for t he entries, including the following three ways:  IP/MASK: Enter an IP address or subnet mask. ("0.0.0.0/32" means any IP).  Group: Select a predefined gro up of users. Y ou can set the group on 4.4.1 Group .  ANY : means for any users. Destination: Select the Destination IP Range fo [...]

-84- 4.6.4.4 Service The Service function allows you to specify the protocol and port number to be filtered for Firewall function conveniently . Protocol nam e and port range constitute a servic e type. The router predefines three commonly used services such as HTTP , FT P and TELNET and you can also add customized services if needed. Choose the me[...]

-85-  List of Service Y ou can view the informati on of the entries and edit t hem by the Action buttons. Note: The service types predefined by the system cannot be modified. 4.6.5 App Control 4.6.5.1 Control Rules On this page, you can enable t he Application Rules function. Choose the menu Firewall → App Control → Control Rules to load the[...]

-86-  Control Rules Object: Specify the object for the entry . Y o u can select “Group” to limit the predefined group, or select “ANY” to limit all the users. Group: If select “Group” as object, you can se lect the group in the drop-down list. T o establish new group, please refer to 4.4.1 Group . Application: Click the <Applicati[...]

-87- The database refers to all the applicat ions in the application list on the Application Rules p age, you can download the latest database from http://www .tp-link.com , Click the <Browse> button and select the file, and then click the <Upgrade> button to upgrad e the database. 4.7 Services 4.7.1 PPPoE Server The router can be co nf[...]

-88- PPPoE User Isolation: S pecify whether to allow the Dial-i n Users to communicate with one another . Primary/Secondary DNS: Enter the Primary/Secondary DNS server address. The default is 0.0.0.0. Max Sessions: S pecify the maximum number of the sessions for PPPoE server . The default is 256. Max Echo-Request s: S pecify the maximum number of E[...]

-89- 4.7.1.2 IP Address Pool On this page, you can define or edit the IP Address Pool. Choose the menu Services → PPPoE Server → IP Address Pool to load the following p age. Figure 4-51 IP Address Pool The following items are displayed on this screen:  IP Address Pool Pool Name: S pecify a unique name to the IP A ddress Pool for identificati[...]

-90- Figure 4-52 Account The following items are displayed on this screen:  Account Account Name: Enter the account name. This name should not be the same with the one in L2TP/PPTP connection settings. Password: Enter the password. IP Address Assigned Mode: Select the IP Address Assigned Mode for IP assignment.  Static: Select this option to [...]

-91- Description: Enter the description for management and search purposes. Up to 28 characters can be entered. Statu s: Activate or inactivate the entry . MAC Binding: Select a MAC Binding type from t he pull-down list. Options include:  Disable: Select this option to disable the MAC Binding function.  Manual: Select this option to bi nd the[...]

-92- Figure 4-53 Exceptional IP The following items are displayed on this screen:  Exceptional IP IP Address Range: S pecify the start and the end IP address to make an exceptional IP address range. This range should be in the same IP range with LAN port of the router . The start IP address should not exceed the end address and the IP address ra[...]

-93- 4.7.2 E-Bulletin With E-Bulletin function, bulletin in formation can be released to the s pecified users. On this page you can edit the bulletin c ontent and specify the re ceiving user group. Choose the menu Services → E-Bulletin to load the following page. Figure 4-55 E-Bulletin The following items are displayed on this screen:  General[...]

-94- Enable Logs: S pecify whether to log the E-Bulletin.  E-Bulletin Tit le : Enter a title for the bulletin. Content: Enter the content of the bulletin. Object: Select the object of this bulletin. Options include:  ANY: The bulletin will be released to all the users and the PCs on the LAN.  Group: The bulletin will be released to the use[...]

-95- As many ISPs use DHCP to assi gn public IP addresses in W AN, the public IP address assigned to the client is unfixed. In this way , it’ s very difficult for other clients to get the latest IP address of this client for access. DDNS (Dynamic DNS) server provides a fixed d oma in name for DDNS client and maps its late st IP address to this do[...]

-96- The following items are displayed on this screen:  Dyndns DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of Dyndns for register . Password: Enter the password of your DDNS account. Domain Name: Enter the Domain Name that you registered with your[...]

-97- Figure 4-57 NO-IP DDNS The following items are displayed on this screen:  No-IP DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of No-IP for register . Password: Enter the password of your DDNS account. Domain Name: Enter the Domain Name that you[...]

-98- DDNS St atus: Dis plays the current status of DDNS service  Offline: DDNS service is disabled.  Connecting: Client is connecting to the server.  Online: DDNS works normally.  Authorization fails: The Account Name or Password is incorrect. Please check and enter it again.  Invalid Domain name: The Domain Name is incorrect or unr [...]

-99- The following items are displayed on this screen:  PeanutHull DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of PeanutHull for register . Password: Enter the password of your DDNS account. DDNS Service: Activate or inactivate DDNS service here. [...]

-100- Figure 4-59 Comexe DDNS The following items are displayed on this screen:  Comexe DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of Comexe for register . Password: Enter the password of your DDNS account. DDNS Service: Activate or inactivate DD[...]

-101-  List of Comexe Account In this table, you can view the existing DDNS entries or edit them by the Action button. 4.7.4 UPnP Devices based on UPnP (Universal Plug and Play) protocol from dif ferent manufacturer can automatically discover and communicate with one another . If UPnP groupware are installed in the host in LA N and UPnP function[...]

-102- Note: ● When using UPnP function, ma ke sure the UPnP is enabled fo r the router , and the operating system and applications in t he host support UPnP service. ● As some Trojan and viruses c an open the specific port using UPnP service resulting in hacker attack on the host, be careful of using UPnP service. 4.8 Maintenance 4.8.1 Admin Se[...]

-103- Note: ● The factory default password and user name are both admin. ● Y ou should enter the new user name and p assword when next login if the current username and password has been changed. ● The new user name and password must not exc eed 31 chara cters in lengt h and must consist of numbers or letters. All the fi elds are case-sensiti[...]

-104- Note: ● The default Web Management Port is 80. If the port is changed, you should type “http://IP address: port” to login the router . E.g.: If the Web Management Port is changed to 88, type http://192.168.0.1:88 in the address filed to login the router . ● The new timeout period will take ef fect when next login. Application Example [...]

-105- Figure 4-63 Remote Management The following items are displayed on this screen:  Remote Management Subnet/Mask: S pecify a single IP address or network address for the hosts d esired to access the router from external network. Statu s: Activate or inactivate the entry .  List of Subnet In this list, you can view the Remote Management en[...]

-106- Figure 4-65 Export and Import The following items are displayed on this screen:  Configuration V ersion Displays the current Configur ation version of the rou ter .  Export Click the <Export> button to save the current configuration as a file to your computer . Y ou are suggested to take this measure before upgrading or modifying [...]

-107- Figure 4-66 Reboot Click the <Reboot> button to reboot the router . The configuration will not be lost after rebooting. The Internet connection will be temporarily interrupted while rebooting. Note: T o avoid damage, please don't turn off the device while rebooting. 4.8.2.4 Firmware Upgrade Choose the menu Maintenance → Managemen[...]

-108- Choose the menu Maintenance → SNMP → SNMP to load the following page. Figure 4-68 SNMP The following items are displayed on this screen:  General SNMP: Enable or disable the SNMP function. Device Name: Enter the name of the router . Location: Enter the location of the router . Cont act: Enter the name of the netwo rk administrator for [...]

-109- 4.8.4 S t atistics 4.8.4.1 Interface T raffic St atistics Interface T raf fic S tatistics screen displays the det ailed traf fic information of each port and extra information of W AN ports. Choose the menu Maintenance → St atistics → Interface T raffic St atistics to load the following page. Figure 4-69 Interface T raffic S tatistics The[...]

-1 10- Figure 4-70 IP T raf fic S tatistics The following items are displayed on this screen:  General Enable IP T raffic St atistics: Allows you to enable or disable IP T raf fic S tatistics. Enable Auto-refresh: Allows you to enable/disable refreshing the IP T raffic S tatistics automatically . The default refr esh interval is 5 seconds.  T[...]

- 111 - Figure 4-71 Diagnostics The following items are displayed on this screen:  Ping Destination IP/Domain: Enter destination IP address or Domain name here. Then select a port for testing, if you select “A uto”, the router will select the interface of destination automatically . After clickin g <S tart> button, the router will send[...]

-1 12-  T racert Destination IP/Domain: Enter destination IP address or Domain name here. Then select a port for testing, if Auto is selected, the router will select the interface of destination automatically . Af ter clicking the <S tart> button, the router will send Tr acert packet s to test the connectivity of the gateways during the jo[...]

-1 13-  List of W AN status Port: Displays the detected W AN port. Detection: Displays whether the Online Detection is enabled. W AN St atus: Display the detecting results. 4.8.6 Tim e 4.8.6.1 Ti me System T ime is the time displayed while the router is running. On this page y ou can configure the system time and the settings here will be used f[...]

-1 14-  Config Get UTC: When this option is selected, you can configure the time zone and the IP address for the NTP server . The r outer will get UTC automatically if it has connected to an NTP server .  T ime Zone: Select the time zone for the router .  Primary/Secondary NTP Server: Enter the IP address or domain name of the NTP server .[...]

-1 15- The following items are displayed on this screen:  Daylight Saving Time(DST) S t ate Show the work state of DST .  Daylight Saving Ti me(DST) Config DST St atus: Enable or disable the DST . Predefined Mode: Select a predefined DST configuration.  USA: Second Sunday in March, 02: 00 ~ First Sunday in November , 02:00.  European: L[...]

-1 16- Figure 4-75 Logs  List of Logs List of Logs displays the system log information in log buf fer .  Config Enable Auto-refresh: With this option selected, the page will refresh automatically every 5 seconds. Severity: Displays the severity level of the log information. Y ou can select a severity level to display the log information with [...]

-1 17- Level Description Severity debugging 7 Debug-level messages 4.8.8 NA T T able NA T T able correspo nds to a mapping relation, whic h displays the connection sessions in network to help user check forwarding st atus and troubleshoot network. Choose the menu Maintenance → NA T T able → NA T T able to load the following page. Figure 4-76 NA[...]

-1 18- Aging Time: Displays the time which the link last s (Unit: second). Out Link: Displays the WAN port which is used in the link. Sorted by: Select the rule for displaying the NA T T able. Y ou can click table headers to sort items.[...]

-1 19- Appendix A Hardware S pecifications St andards and Protocols IEEE 802.3, 802.3u TCP/IP , PPPoE, DHCP , ICMP , NA T , SNTP ,HTTP ,DNS One 10/100 Auto-Neg otiation W AN RJ45 port (Auto MDI/MDIX) Three adjustable 10/100M Auto-Negot iation WAN/LAN RJ45 port s (Auto MDI/MDIX) One 10/100M Auto-Nego tiation LAN RJ45 port (Auto MDI/MDIX) Port s One [...]

-120- Appendix B F AQ Q1. What can I do if I cannot access the web-based configuration page? 1. For the first login, pl ease try the following steps: 1) Make sure the cable is well connected to t he LAN port of the router . The corresponding LED should flash or be solid light. 2) Make sure the IP address of your PC is se t in the same subnet addres[...]

-121- Q3: What can I do if the router with the remote management function enabled cannot be accessed by the remote computer? 1. Make sure that the IP address of the remote com puter is in the subnet allowed to remotely access the router . 2. If the router ’s management port has been modif ied, please log into the router with the new address, such[...]

-122- Appendix C Glossary Glossary Description ALG （ Application Layer Gateway ） Application Level Gateway (A LG) is application specifi c translation agent that allows an application on a host in one address realm to connect to its counterpart running on a host in different realm transparently . ARP （ Address Resolution Protocol ） Internet[...]

-123- Glossary Description H.323 H.323 allows dissimilar communica tion devices to communicate with each other by using a standardized communication protocol. H.323 defines a comm on set of CODECs, call setup and negotiating procedures, and basic data transport methods. H HTTP （ Hypertext Transfer Protocol ） The protocol used by Web browsers an[...]

-124- Glossary Description MAC address （ Media Access Control address ） S tandardized data link layer address that is required for every port or device that connects to a LAN. Other devices in th e network use these addresses to lo cate specific ports in the network and to create and update routing tables and data structures. MAC addresses are [...]

-125- Glossary Description TCP （ T ransfer Control Protocol ） Connection-oriented transport la yer protocol that provides reliable full-duplex data transmission. TCP/IP （ T ransmission Control Protocol/ Internet Protocol ） Common name for the suite of protocols to support the construction of worldwide Inter networks. TCP and IP are the two [...]