TP-Link 1910010933 manual

TL-R480T+ Load Balance Broadband Router REV6.0.0 1910010933[...]

-I- COPYRIGHT & TRADEMARKS Specifications are subjec t to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., L TD. Other brands and product names are trademarks of their respective holders. No part of the specificat ions may be reproduced in any form or by any means or used to make any derivative such as translation, [...]

-II- Продукт сер тифіковано згідно с правилами системи Ук р С Е П Р О на відповідність вимогам норма тивних документів та вимогам , що пере дб а чені чинними законодав чими ак тами Ук р а ї н и . Safet[...]

-III- CONTENTS Package Contents .................................................................................................................. 1 Chapter 1 About this Guide ................................................................................................... 2 1.1 Intended Re aders ..................................................[...]

-IV- 4.5.1 NA T .......................................................................................................................... 49 4.5.2 T raf fic C ontrol ..........................................................................................................58 4.5.3 Session Li mit .....................................................[...]

-1- Package Content s The following items should be found in your package: ¾ One TL-R480T+ Load Balance Broadband Router ¾ One Power cord ¾ One Console Cable ¾ One Ethernet Cable ¾ Quick In stallation Guide ¾ Mounting kit s for installing in a st andard 19-inch rack ¾ Resource CD Note: ● Make sure that the pa ckage contains the above items[...]

-2- Chapter 1 About this Guide This User Guide contains information for setu p and management of TL-R480T+ Load Balance Broadband Router . Please read this gui de carefully before ope ration. 1.1 Intended Readers This Guide is intended for Network Engineer and Network Administrator. 1.2 Conventions In this Guide the following conventions are used: [...]

-3- Appendix B F AQ Provides the possible solutions to the problems that may occur during the installation and operation of the router . Appendix C Glossary Lists the glossary used in this guide.[...]

-4- Chapter 2 Introduction Thanks for choosing the Load Balance Broadband Router TL-R480T+. 2.1 Overview of the Router The Load Balance Broadband Router TL-R4 80T+ from TP-LINK possesses excellent data processing capability and multiple powerful func tions including Load Balance, Access Control, Bandwid th Con trol, Session Limit, PPPoE Server and [...]

-5- + Featured Link Backup to switch all the new sessions from dropped line automatically to another for keeping an always on-line network. z Easy-to-use + Providing easy-to-use GUI with clear configur ation steps and detailed help information for the users to configure the router simply . + Helping administrators to monitor the whole network statu[...]

-6- Security ¾ Built-in firewall supporting URL/MAC Filtering ¾ Supports Access Control ¾ Supports App Control ¾ Supports Attack Defense ¾ Supports IP-MAC Binding ¾ Supports GARP (Gratuitous ARP) 2.3 Appearance 2.3.1 Front Panel The front panel of TL-R480T+ is show n as the following figure. z LEDs LED Status Indication On The router is power[...]

-7- z Interface Description Interface Port Description WAN 1~4 The WAN port is for connecting the router to a DSL/Cable modem or Ethernet by the RJ45 cable. LAN 2~5 The LAN port is for connecting the router to the local PCs or switches by the RJ45 cable. Console / The Console port is for connecti ng with the serial port of a computer or terminal to[...]

-8- Chapter 3 Quick Inst allation Guide After connecting the TL-R480T+ router into your network, you shoul d conf igure it. This chapter describes how to configure the basic functions of your TL-R480T+ Load Balance Broadband Router . These procedures only take you a few minutes. Y ou can access the Inte rnet via the router immediately after it has [...]

-9- Step 2: In the next screen, right click Local Area Connecti on (LAN), and then select Properties . Figure 3-2 Step 3: In the next screen, select General tab, highlight Internet Protoc ol (TCP/IP), and then click the Properties button. Figure 3-3[...]

-10- Step 4: Configure the IP address as shown in Figure 3-4 . After that, click OK . Figure 3-4 Note: Y ou can configure the PC to get an IP address automatically , select “ Obt ain an IP address automatically ” and “ Obt ain DNS server address automatically ” in the screen above. For Windows 98 OS or earlier , the PC and router ma y need [...]

-1 1- Figure 3-6 Y ou can check it by following the steps below: Note: ● Is the connection between your PC and the router correct? The LEDs of LAN port which you link to the devic e and the LEDs on your PC's adapter should be lit. ● Is the TCP/IP configuration for y our PC correct? If the router's IP address is 192. 168.0.1, your PC&a[...]

-12- Note: If the above screen ( Figure 3-7 ) does not prompt, it means that your web-browser may be set to a proxy . Choose To o l s m e n u → Internet Options → Connections → LAN Settings , in the screen that appears, cancel the Using Proxy checkbox , and click OK to finish it. After a successful login, the “Quick Setup” screen will pop[...]

-13- Figure 3-10 W AN Port Select the connection type prov ided by your ISP as the Figure 3-1 1 shows. Three pop ular types are provided here. For other connecti on types, please refer to the 4.3.1 WA N . Figure 3-1 1 W AN Connection T ype 1) If you choose PPPoE , you will see the screen as the Figure 3-12 shows. Enter the Account Name and Password[...]

-14- Figure 3-12 W AN Connection T ype - PPPoE Click <Next> to dial up, and the process will take a few minutes. The process of configuring the network parameters is shown as Figure 3-14 . If you close the screen during the process, the configuration will still be c ontinued in the background. These fields are case sensitive. If you have diff[...]

-15- Figure 3-14 W AN Connection T ype - Dynamic IP 3) If you choose Static IP , you should enter the detailed IP information provided by your ISP in Figure 3-15 . Figure 3-15 W AN Connection T ype - S tatic IP Then click <Next>. The process for configuring the network parameters is shown as Figure 3-16 . If you close the screen during the pr[...]

-16- Figure 3-16 W AN Connection T ype - S tatic IP Connecting After that, you will see the next screen. Click <Finis h> to complete the quick inst allation or click <Continue> to configure other W AN ports. Figure 3-17 Configuration Completed[...]

-17- Chapter 4 Configuration 4.1 Stat u s The S tatus page shows the system information, the port connection st atus and other information related to this router . Choose the menu Statu s to load the following page. Figure 4-1 S t atus[...]

-18- 4.2 Quick Setup Please refer to the Chapter 3 Quick Installation Guide . 4.3 Network 4.3.1 W AN 4.3.1.1 W AN Mode TL-R480T+ provides four available W AN port s. Y ou can set the number of W AN ports on this p age. Choose the menu Network → WA N → W AN Mode to load the following page. Figure 4-2 W AN Mode ¾ W AN Mode W AN Ports: Select the[...]

-19- Tips: ● It’ s allowed to set the IP addresses of multiple W AN port s within the same subnet. However , to guarantee a normal communication, make sure that the W AN ports can access the same network, such as Internet or a local area network. ● The amount of tab p ages for W A N port varies with the number of the W AN ports. For the confi[...]

-20- Default Gateway: Optional. Enter the Gateway assigned by yo ur ISP . MTU: MTU (Maximum T ransmission Unit) is the maximum data unit transmitted by the physical network . It can be set in the ran ge of 576-1500. The default MTU is 1500. Y ou are recommended to keep the default value if no other MTU va lue is provided by your ISP . Primary DNS: [...]

-21- Figure 4-4 W AN – Dynamic IP The following items are displayed on this screen: ¾ Dyn am ic I P Connection T ype: Select Dynamic IP if your ISP as signs the IP address automatically . Click <Obtain> to get the IP address from your ISP’ s server . Click <Release> to release the current IP address of W AN port. Host Name: Optiona[...]

-22- Get IP Address b y Unicast: The broadcast requirement may not be supported by a few ISPs. Select this option if you can not get the IP address from your ISP even with a normal network connection. This option is not required generally . Use the following DNS Server: Select this option to enter the DNS (D omain Name Server) address manually . Pr[...]

-23- Primary DNS: Displays the IP address of your ISP’ s Primary DNS. Secondary DNS: Displays the IP address of your ISP’ s Secondary DNS. 3) PPPoE If your ISP (Internet Service Provider) has provid ed the account information for the PPPoE connection, please choose the PPPoE/Russian PPPoE connection ty pe (Used mainly for DSL Internet service).[...]

-24- The following items are displayed on this screen: ¾ PPPoE Settings Connection T ype: Select PPPoE/Russian P PPoE if your ISP provides xDSL V irtual Dial-up connection. Cli ck <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Nam[...]

-25- ISP Address: Optional. Enter the ISP address provided by your ISP . It's null by default. Service Name: Optional. Enter the Service Name prov ided by your ISP . It's null by default. Primary DNS: Enter the IP address of y our ISP’s Primary DNS. Secondary DNS: Optional. Enter the IP address of your ISP’ s Secondary DNS. Secondary [...]

-26- ¾ PPPoE St atus Statu s: Displays the status of PPPoE connection. z “Disabled” indicates that the PPPoE connection type is not applied. z “Connecting” indicates that t he router is obtaining the IP parameters from your ISP . z “Connected” indicates that t he router has successfully obtained the IP parameters from your ISP . z “D[...]

-27- 4) L2TP If your ISP (Internet Service Provider) has provi ded the account informati on for the L2TP connection, please choose the L2TP/Ru ssian L2TP connection type. Figure 4-6 W AN - L2TP[...]

-28- The following items are displayed on this screen: ¾ L2TP Settings Connection T ype: Select L2TP/Russian L2TP if your ISP provides a L2TP connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Name: Enter the Account[...]

-29- IP Address: If S tatic IP is selected, confi gure the IP address of W AN port. If Dynamic IP is selected, the IP address of W AN port obtained is displayed. Subnet Mask: If S tatic IP is selected, conf igure the subnet mask of W AN port. If Dynamic IP is select, the subnet mask of W AN port obtained is displayed. Default Gateway: If S tatic IP[...]

-30- Primary DNS: Displays the IP address of your ISP’ s Primary DNS. Secondary DNS: Displays the IP address of your ISP’ s Secondary DNS. 5) PPTP If your ISP (Internet Service Provider) has provi ded the account informati on for the PPTP connection, please choose the PPTP/Russi an PPTP connection type. Figure 4-7 W AN - PPTP The following item[...]

-31- ¾ PPTP Settings Connection T ype: Select PPTP/Russian PPTP if your ISP provides a PPTP connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Name: Enter the Account Name provided by your ISP . If you are not clear [...]

-32- Subnet Mask: If S tatic IP is selected, conf igure the subnet mask of W AN port. If Dynamic IP is select, the subnet mask of W AN port obtained is displayed. Default Gateway: If S tatic IP is selected, c onfigure the default gateway . If Dynamic IP is selected, the obt ained default gateway is displayed. Primary DNS/Secondary DNS: If S t atic [...]

-33- 6) BigPond If your ISP (Internet Service Provider) has provided the account inform ation for the BigPond connection, please choose t he BigPond connection type. Figure 4-8 W AN – Bigpond The following items are displayed on this screen: ¾ BigPond Settings Connection T ype: Select BigPond if your ISP prov ides a BigPond connection. Click <[...]

-34- Password: Enter the Password provided by your ISP . If you are not clear , please consult your ISP . Auth Server: Enter the address of authentication server . It can be IP address or server name. Auth Domain: Enter the domain name of authentication server . It's only required when the address of Auth Server is a server name. Auth Mode: Y [...]

-35- network is connected we ll. Consult your ISP if this problem remains. IP Address: Displays the IP address a ssigned by your ISP . Subnet Mask: Displays the Subnet Mask assigned by your ISP . Default Gateway: Displays the IP address of the default gateway assigned by your ISP . Note: T o ensure the BigPond connection re-established norma lly , [...]

-36- Note: If the LAN IP address is changed, you must use the new IP address to login to the router . T o guarantee a normal communication, please be sure that the Gateway address and the Subnet Mask of the Hosts are consistent with that of the router accordingly . 4.3.2.2 DHCP The router with its DHCP (Dynamic Host Configur ation Protocol) server [...]

-37- Lease Time: S pecify the length of ti me the DHCP server will reserve the IP address for each computer . After the IP address expired, the client will be automatically assigned a new one. Default Gateway: Optional. Enter the Gateway address to be assigned. It is recommended to enter the IP address of the LAN port of the router . Default Domain[...]

-38- Figure 4-12 DHCP Reservation The following items are displayed on this screen: ¾ DHCP Reservation MAC Address: Enter the MAC address of the computer for which you want to reserve the IP address. IP Address: Enter the reserved IP address. Description: Optional. Enter a description for the entry . Up to 28 characters can be entered. Statu s: Ac[...]

-39- 4.3.3 MAC Address The MAC (Media Access Control) address, as the uni que identi fier of the rout er in network, does not need to be changed commonly . Set the MAC Address for LAN port: In a complex network topology with all the ARP bound devices, if you want to use TL-R480T+ instead of the current router in a network node, you can ju st set th[...]

-40- MAC Clone: It’s only available for WAN port. Click the <Resto re Factory MAC> button to res tore the MAC address t o the factory default value or click the <Clone Curre nt PC’ s MAC> button to clone the MA C address of the PC you are currently using t o configure the rou ter . Then click <Save> to apply . Note: T o avoid [...]

-41- The following items are displayed on this screen: ¾ St atistics Unicast: Displays the number of normal unica st packet s received or transmitted on the port. Broadcast: Displays the number of normal broadcast packet s received or transmitted on the port. Pause: Displays the number of flow contro l frames received or tra nsmitted on the port. [...]

-42- Figure 4-15 Port Mirror The following items are displayed on this screen: ¾ General Enable Port Mirror: Check the box to enable the Port Mirr or function. If unchecked, it will be disabled. Mode: Select the mode for the port mirror function. Options include: z Ingress: When this mode is selected, only the incoming packet s sent by the mirrore[...]

-43- Tips: If both the mirrored port and the mirroring port are the LAN ports, these two L AN ports should be in the same Port VLAN. For example, if port 3 (the mirror ing port) and port 4 (th e mirrored port) are the LAN ports, the Port Mirror function can ta ke effect only when port 3 and port 4 are in the same Port VLAN. Application Example: T o[...]

-44- Figure 4-16 Rate Control The following items are displayed on this screen: ¾ Rate Control Port: Displays the port number . Ingress Limit: S pecify whether to enable t he Ingress Limit feature. Ingress Rate: S pecify the limit rate for the ingress packet s. Egress Limit: S pecify whether to enabl e Egress Limit feature. Egress Rate: S pecify t[...]

-45- Figure 4-17 Port Config The following items are displayed on this screen: ¾ Port Config Statu s: S pecify whether to enabl e the port. The packet s can be transported via this port after being enabled. Flow Control: Allows you to enable/dis able the Flow Control function. Negotiation Mode: Select the Negotiation Mode for the port. All Port s:[...]

-46- 4.3.4.6 Port VLAN A VLAN (Virtual Local Area Network) is a network topology configured accord ing to a logical scheme rather than the physical layout, which allows you to divide the physical LAN into multiple logical LANs so as to control the communication among the ports . The VLAN function can prevent t he broadcast storm in LANs and enhance[...]

-47- 4.4.1 Group On this page you can define the group for management. Choose the menu User Group → Group to load the following page. Figure 4-20 Group Configuration The following items are displayed on this screen: ¾ Group Config Group Name: S pecify a unique name for the group. Description: Give a description for the group. It's optional.[...]

-48- The following items are displayed on this screen: ¾ User Config User Name: S pecify a unique name for the user . IP Address: Enter the IP Address of the user . It cannot be the network address or broadcast address of the port. Description: Give a description to the user fo r identification. It's optional. ¾ List of User In this table, y[...]

-49- ¾ Vie w Config View : Select the desired view for configuration. User Name: Select the name of the desired User . A vailable Group: Displays the Groups that the User can join. Selected Group: Displays the Groups to which this User belongs. Group Name: Select the name of the desired Group. Group Structure: Click this button to view the tree st[...]

-50- Figure 4-23 NA T Setup The following items are displayed on this screen: ¾ NAPT Source Port Range: Enter the source port range between 2049 and 65000, the span of which must be not less than 100. ¾ NA T -DMZ NA T -DMZ: Enable or disable NA T -DMZ. NA T DM Z is a special service of NA T application, which can be considered as a default forwar[...]

-51- Figure 4-24 NA T Setup The following items are displayed on this screen: ¾ One-to-One NA T Mapping IP Address: Enter the Original IP Address in the first checkbox and T ranslated IP Address in the second checkbox. TL-R480T+ allows mapping from LAN port to W AN port. Interface: Select an interface for forwarding data packets. DMZ Forwarding: E[...]

-52- 4.5.1.3 Multi-Net s NA T Multi-Nets NA T functions to allow the IP under LAN wi thin multiple subnets to access the Internet via NA T . Choose the menu Advanced → NA T → Multi-Nets NA T to load the following page. Figure 4-25 Multi-Nets NA T The following items are displayed on this screen: ¾ Multi-Net s NA T Subnet/Mask: Enter the subnet[...]

-53- Application Example: Network Requirements The LAN subnet of TL-R480T+ is 192. 168.0.0 /24, the subnet of VLAN2 under a three layer switch is 192.168.2.0 /24, while the subnet of VLAN3 is 192.168.3.0 /24. The IP of VLAN for cascading the switch to the router is 192.168. 0.2. Now the hosts within VLAN 2 and VLAN3 desire to access the Internet. T[...]

-54- 2. Then set the corresponding S tatic Route entry , en ter the IP address of t he interface connecting the router and the three layer swit ch into the Next Hop field. Choose the menu Advanced → Routi ng → S t atic Route to load the following page. The set S tatic Route entry is as follows: 4.5.1.4 V irtual Server Virtual server can be used[...]

-55- Figure 4-26 Virtual Server The following items are displayed on this screen: ¾ Virtual Server Name: Enter a name for Virtual Server ent ries. Up to 28 characters can be entered. External Port: Enter the service port or port range provided by router for accessing external network. All requests from In ternet to this service port or port range [...]

-56- Note: ● The External port and Internal Port should be set in the range of 1-65535. ● The external ports of dif ferent entries should be different, whereas the internal ports can be the same. ¾ List of Rules In this table, you can view the information of the entries and edit them by the Action buttons. The first entry in Figure 4-26 indica[...]

-57- ¾ Port T riggering Name: Enter a name for Port Triggering entri es. Up to 28 characters can be entered. T rigger Port: Enter the trigger port number or range of port numbers. Only when the trigger port initiates connection w ill all the corresponding incoming ports open and provide service for the applications, otherwise the incoming ports wi[...]

-58- Choose the menu Advanced → NA T → ALG to load the following page. Figure 4-28 ALG The following items are displayed on this screen: ¾ ALG FTP ALG: Enable or di sable FTP ALG . The default setting is enabled. It is recommended to keep the def ault setting if no special requirement. H.323 ALG: Enable or disable H.323 ALG . The default setti[...]

-59- Figure 4-29 Configuration The following items are displayed on this screen: ¾ General Disable Bandwidth Control: Select this option to disable Bandwidth Control. Enable Bandwidth Control all the time: Select this option to enable Bandwidth Control all the time. Enable Bandwidth Control When: With this option selected, the Bandwidth Control wi[...]

-60- ¾ Interface Bandwidth Interface: Displays the current enabled W AN port(s). The T otal bandwid th is equal to the sum of bandwidth of the enabled W AN port s. Up stream Bandwidth: Displays the bandwidth of each W A N port for transmitting dat a. The Upstream Bandwid th of W AN port can be configured on W AN page. Downstream Bandwidth: Display[...]

-61- ¾ Bandwidth Control Rule Direction: Select the data stream direction for the entry . The direction of arrowhead indicates the data stream direction W AN-ALL means all W A N port s through which the data flow might pa ss. Individual W AN port cannot be selected after W A N-ALL rules are added. Group: Select the group to defin e the controlled [...]

-62- Note: ● The premise for single rule taking effect is that the bandwidth of the interface for this rule is sufficient and not used up. ● It is impossible to satisfy all the guaranteed bandw idth if the tota l guaranteed bandwidth specified by all Bandwidth Control rules for certain in terface exceeds the physical bandwid th of this interfac[...]

-63- ¾ Session Limit Group: Select a group to define the controlled user . Max. Sessions: Enter the max. Sessions for the users. Description: Give a description for the entry . Statu s: Activate or inactivate the entry . ¾ List of Session Limit Y ou can view the informati on of the entries and edit t hem by the Action buttons. The first entry in [...]

-64- Figure 4-33 Configuration With the box before Enable Application Optimized Routing checked, the router will consider the source IP address and destination IP address of the packet s as a whole and record the W AN port they pass through. And then the p acket s with the sa me source IP address and destination IP address or destination port will [...]

-65- The following items are displayed on this screen: ¾ General Protocol: Select the protocol for the entry in the drop-down list. If the protocol you want to set is not in the lis t, you can add it to the list on 4.5.4.4 Protocol page. Source IP: Enter the source IP range for the entry . 0.0.0.0 - 0.0.0.0 means any IP is acceptable. Destination [...]

-66- On this page, you can configur e the Link Backup function based on actual need to reduce the traffic burden of W AN port and improve the network efficie ncy . Choose the menu Advanced → Load Balance → Li nk Backup to load the following p age. Figure 4-35 Link Backup The following items are displayed on this screen: ¾ General W AN Ports: D[...]

-67- Timing: Link Backup will be enabled if the specified effective time is reached. All the traffic on the primary W AN will switch to the backup W AN at the beginning of the effective time; the tr affic on the backup W AN will switch to the primary W AN at the ending of the ef fective time. Failover: S pecify the premise for Failover Mode. The ba[...]

-68- Figure 4-36 Protocol The following items are displayed on this screen: ¾ Protocol Name: Enter a name to indicate a protocol. The name will display in the drop-down list of Protocol on Access Rule page. Number: Enter the Number of the prot ocol in the range of 0-255. ¾ List of Protocol Y ou can view the informati on of the entries and edit t [...]

-69- Choose the menu Advanced → Routi ng → S t atic Route to load the following page. Figure 4-37 Static Route The following items are displayed on this screen: ¾ St atic Route Destination: Enter the destination hos t the route leads to. Subnet Mask: Enter the Subnet Mask of the destination network. Next Hop: Enter the gateway IP address to wh[...]

-70- The first entry in Figure 4-37 indicates: If there are packets being sent to a device with IP address of 21 1.162.1.0 and subnet mask of 255.255.255.0, t he router will forward the packets from W AN1 port to the next hop of 21 1.200.1.1. Application Example Network Requirements LAN1 is under the router and it uses network seg ment 192.168.0.0 [...]

-71- 2. Add a static routing rule for LAN3 by referring to step 2. The static routing rules are shown in the following figure. 4.6 Firewall 4.6.1 Anti ARP S poofing ARP (Address Resolution Protocol) is used to analyze and map IP addresses to the corresponding MAC addresses so that packet s can be de livered to their destinations correctly . ARP fun[...]

-72- Figure 4-38 IP-MAC Binding The following items are displayed on this screen: ¾ General It is recommended to check all the options. Y ou s hould import the IP and MAC address of the host to List of IP-MAC Binding and enable the correspo nding entry before e nabling “Permit the packet s matching the IP-MAC Binding entries only”. When suffer[...]

-73- ¾ List of Rules Y ou can view the informati on of the entries and edit t hem by the Action buttons. The first entry in Figure 4-38 indicates: The IP address of 192.168.1.101 and MAC address of 00-19-66-83-53-CF have been bound and this entry is activated. Note: If all the entries in the binding list are disabled and “Permit the packets of I[...]

-74- T o bind the entries in the list, check these entri es and click the <Import> button, then the settings will take ef fect if the entries do not c onflict with the existed entries. Note: If the local hosts suffered from ARP attack, you cannot add IP-MAC Binding entries on this p age. Please add entries manually on 4.6.1.1 IP-MAC Binding .[...]

-75- Figure 4-41 Attack Defense The following items are displayed on this screen: ¾ General Flood Defense: Flood attack is a kind of commonly used DoS (Denial of Service), which including TCP SYN, UDP , ICMP and so on. It is recommended to check all the Fl ood Defense options and specify the corresponding thresholds. Keep the default settings if y[...]

-76- Packet Anomaly Defense: Packet Anomaly refers to the abnormal p ackets. It is recommended to select all the Packet Anomaly Defense options. Enable Att ack Defense Logs: With this box checked, the rout er will record the defense logs. 4.6.3 MAC Filtering On this page, you can control the access to the Internet of local host by specifying their [...]

-77- ¾ List of Rules Y ou can view the informati on of the entries and edit t hem by the Action buttons. 4.6.4 Access Control 4.6.4.1 URL Filtering URL (Uniform Resource Locator) specifies wher e an identified resource is available and the mechanism for retrieving it. URL Filt er functions to filter the Internet URL address, so as to provide a con[...]

-78- ¾ URL Filtering Rule Object: Select the ra nge in which the URL Filtering takes ef fect: z Group: URL Filtering will take ef fect to all the users in group. z ANY : URL Fi ltering will take ef fect to all the users. Mode: Select the mode for URL Filtering. “Keywords’’ indicates that all the URL addresses including the specified keywords[...]

-79- 4.6.4.2 Web Filtering On this page, you can filter the desired web components. Choose the menu Firewall → Access Control → Web Filtering to load the following p age. Figure 4-44 Web Filtering Check the box before Enable Web Filt ering and select the web components to be filtered. 4.6.4.3 Access Rules Choose the menu Firewall → Access Con[...]

-80- Figure 4-45 Access Rule The following items are displayed on this screen: ¾ Access Rules Policy: Select a policy for the entry: z Block: When this option is select ed, the packet s obeyed the rule will not be allowed to pass through the router . z Allow: When this option is selected, the packe ts obeyed the rule will be allowed to pass throug[...]

-81- Interface: Select interface for the entry . T he entry will take ef fect when the interface to which the data is flow ing is selected. W AN or LAN refers to all the W AN or LAN interfaces. Source: Select the Source IP Ra nge for t he entries, including the following three ways: z IP/MASK: Enter an IP address or subnet mask. ("0.0.0.0/32&q[...]

-82- Note: ● For the users in the private network and not being set access ru le, the default Policy is Allow . ● T o specify all IP addresses, type “0.0 .0.0 / 32” in the Policy field. ● For detailed setting of subnet mask, please refer to Appendix B F AQ . 4.6.4.4 Service The Service function allows you to specify the protocol and port [...]

-83- Protocol: Select the protocol for the servic e. The system predefined protocols include TCP , UDP and TCP/UDP . Dest. Port: Enter the start and end ports to make a destination port range for the service. The start port number cannot be greater than the end port number . ¾ List of Service Y ou can view the informati on of the entries and edit [...]

-84- The following items are displayed on this screen: ¾ General Check the box before Enable Application Control to make the Applicat ion Control function take ef fect. The specified applic ation used by the specified loca l users will be not allowed to access the Internet if the App lication Control entry is enabled. ¾ Control Rules Object: Spec[...]

-85- Figure 4-48 Database The database refers to all the applicat ions in the application list on the Application Rules p age, you can download the latest database from http://www .tp-link.com , Click the <Browse> button and select the file, and then click the <Upgrade> button to upgrad e the database. 4.7 Services 4.7.1 PPPoE Server Th[...]

-86- ¾ General PPPoE Server: S pecify whether to enable t he PPPoE Server function. Dial-up Access Only: S pecify whether to enable the Dial -up Access Only function. If enabled, only the Dial-in Users and the user with Exceptional IP can access the Internet. PPPoE User Isolation: S pecify whether to allow the Dial-i n Users to communicate with on[...]

-87- Radius Server: It is available when Remote Auth entication is selected. RADIUS (Remote Authentication Dial In User Servi ce) provides an authentication for dial-up users. Enter the Radius Server address for Remote authentication. Shared Key: Enter the Shared Key for Remote authentication. It should be the same to the shared key of the Radius S[...]

-88- Figure 4-51 Account The following items are displayed on this screen: ¾ Account Account Name: Enter the account name. This name should not be the same with the one in L2TP/PPTP connection settings. Password: Enter the password. IP Address Assigned Mode: Select the IP Address Assigned Mode for IP assignment. z Static: Select this option to ass[...]

-89- Description: Enter the description for management and search purposes. Up to 28 characters can be entered. Statu s: Activate or inactivate the entry . MAC Binding: Select a MAC Binding type from t he pull-down list. Options include: z Disable: Select this option to disable the MAC Binding function. z Manual: Select this option to bi nd the acc[...]

-90- Figure 4-52 Exceptional IP The following items are displayed on this screen: ¾ Exceptional IP IP Address Range: S pecify the start and the end IP address to make an exceptional IP address range. This range should be in the same IP range with LAN port of the router . The start IP address should not exceed the end address and the IP address ran[...]

-91- 4.7.2 E-Bulletin With E-Bulletin function, bulletin in formation can be released to the s pecified users. On this page you can edit the bulletin c ontent and specify the re ceiving user group. Choose the menu Services → E-Bulletin to load the following page. Figure 4-54 E-Bulletin The following items are displayed on this screen: ¾ General [...]

-92- Enable Logs: S pecify whether to log the E-Bulletin. ¾ E-Bulletin Tit le : Enter a title for the bulletin. Content: Enter the content of the bulletin. Object: Select the object of this bulletin. Options include: z ANY: The bulletin will be released to all the users and the PCs on the LAN. z Group: The bulletin will be released to the users in[...]

-93- As many ISPs use DHCP to assi gn public IP addresses in W AN, the public IP address assigned to the client is unfixed. In this way , it’s very dif ficult for other clients to get the latest IP address of this client for access. DDNS (Dynamic DNS) server provides a fixed d oma in name for DDNS client and maps its late st IP address to this do[...]

-94- ¾ Dyndns DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of Dyndns for register . Password: Enter the password of your DDNS account. Domain Name: Enter the Domain Name that you registered with your DDNS service provider . DDNS Service: Activate or [...]

-95- Figure 4-56 NO-IP DDNS The following items are displayed on this screen: ¾ No-IP DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of No-IP for register . Password: Enter the password of your DDNS account. Domain Name: Enter the Domain Name that you [...]

-96- 4.7.3.3 PeanutHull On this page you can confi gure PeanutHull DDNS client. Choose the menu Services → Dynamic DNS → PeanutHull to load the following page. Figure 4-57 PeanutHull DDNS The following items are displayed on this screen: ¾ PeanutHull DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, c[...]

-97- DDNS St atus: Dis plays the current status of DDNS service z Offline: DDNS service is disabled. z Connecting: client is connecting to the server. z Online: DDNS works normally. z Authorization fails: The Account Name or Password is incorrect. Please check and enter it again. Domain Name: Displays the domain nam es obtained fr om the DDNS serve[...]

-98- ¾ Comexe DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of Comexe for register . Password: Enter the password of your DDNS account. Domain Name 1: Enter the Domain Name that you registered with your DDNS service provider . Domain Name 2: Optional.[...]

-99- If UPnP groupware are installed in the host in LA N and UPnP function is enabled for the router , the host in LAN can automatically open the corresponding port to allow the UP nP application in W AN to access the resource of the host in LAN via this port, so that the functions limited to NA T can work normally . For example, MSN Messenger inst[...]

-100- 4.8 Maintenance 4.8.1 Admin Setup 4.8.1.1 Administrator On this page, you can modify the factory default user name and p assword of the router . Choose the menu Maintenance → Admin Setup → Administrator to load the following page. Figure 4-60 Administrator The following items are displayed on this screen: ¾ Administrator Current User Nam[...]

-101- 4.8.1.2 Login Parameter On this page, you can configure and modify the W eb and T elne t port. Choose the menu Maintenance → Admin Setup → Login Parameter to load the following page. Figure 4-61 Login Parameter The following items are displayed on this screen: ¾ General Web Management Port: Enter the Web Management Port for the router . [...]

-102- Configuration Procedure T ype 210.10. 10.0/24 in the Subnet/Mask field on Remo te Management page and enable the entry as the following figure shows. Then type the corresponding port number in Web Managem ent Port and T elnet Management Port fields as the following figure shows. Finally , start the web browser and type 210.10.10.50 in the URL[...]

-103- Statu s: Activate or inactivate the entry . ¾ List of Subnet In this list, you can view the Remote Management entries and edit them by the Action buttons. The first entry in Figure 4-62 indicates that: The hosts with IP address in subnet of 192.168.2.0/24 are allowed to access the router and this entry is activated. 4.8.2 Management 4.8.2.1 [...]

-104- ¾ Configuration V ersion Displays the current Configur ation version of the rou ter . ¾ Export Click the <Export> button to save the current conf iguration a s a file to your computer . Y ou are suggested to take this measure before upgrading or modifying the configuration. ¾ Import Click the <Browse> button to locate the updat[...]

-105- T o upgrade the router is to get more f unctions and better pe rformance. Go to http://www .tp-link.com to download the updated firmware. T ype the path and file name of the updat e file into the “File” field. Or cl ick the <Browse> button to locate the update file. Then click the <Upgrade> button to complete. Note: ● After [...]

-106- Bytes Tx: Displays the bytes of packet s transmitted on the interface. ¾ Advanced W AN Information Interface: Displays the interface. IP Fragment Rx: Displays the amount of IP Fragments received by W AN port. Abnormal IP Packet s Rx: Displays the rate for transmitting dat a frames. 4.8.3.2 IP T raffic St atistics IP T r affic S tatistics scr[...]

-107- 4.8.4 Diagnostics 4.8.4.1 Diagnostics This router provides Ping test and T rac ert test functions for network diagnose. Choose the menu Maintenance → Diagnostics → Diagnostics to load the following page. Figure 4-69 Diagnostics The following items are displayed on this screen:[...]

-108- ¾ Ping Destination IP/Domain: Enter destination IP address or Domain name here. Then select a port for testing, if you select “A uto”, the router will select the interface of destination automatically . After clickin g <S tart> button, the router will send Ping packet s to test the netwo rk connectivity and reachability of the host[...]

-109- Mode: Detect automatically or Manually . In Auto mode, gateway will be selected as destination for PING detection, DNS server of W AN port will be selected as destination for DNS Lookup. In Manual Mode, you can configure the destination for PING and DNS Lookup manually . Ping: Enter the destination IP for Ping in Manual mode. 0.0. 0.0 means P[...]

-1 10- Statu s: Displays the st atus of time capturing. ¾ Config Get UTC: When this option is selected, you can configure the time zone and the IP address for the NTP server . The r outer will get UTC automatically if it has connected to an NTP server . z T ime Zone: Select the time zone for the router . z Primary/Secondary NTP Server: Enter the I[...]

- 111 - The following items are displayed on this screen: ¾ Daylight Saving Time(DST) S t ate Show the work state of DST . ¾ Daylight Saving Ti me(DST) Config DST St atus: Enable or disable the DST . Predefined Mode: Select a predefined DST configuration. z USA: Second Sunday in March, 02: 00 ~ First Sunday in November , 02:00. z European: Last S[...]

-1 12- Figure 4-73 Logs ¾ List of Logs List of Logs displays the system l og information in log buf fer . An entry of log contains the following four part s: ¾ Config Enable Auto-refresh: With this option selected, the page will refresh automatically every 5 seconds. Severity: Displays the severity level of the log information. Y ou can select a [...]

-1 13- Appendix A Hardware Specifications St andards and Protocols IEEE 802.3, 802.3u TCP/IP , PPPoE, DHCP , ICMP , NA T , SNTP ,HTTP ,DNS One 10/100 Auto-Negotiation W AN RJ45 port (Auto MDI/MDIX) Three adjustable 10/100M Auto-Negot iation WAN/LAN RJ45 port s (Auto MDI/MDIX) One 10/100M Auto-Negotiation LAN RJ45 port (Auto MDI/MDIX) Port s One Con[...]

-1 14- Appendix B F AQ Q1. What can I do if I cannot access the web-based configuration page? 1. For the first login, pl ease try the following steps: 1) Make sure the cable is well connected to t he LAN port of the router . The corresponding LED should flash or be solid light. 2) Make sure the IP address of your PC is se t in the same subnet addre[...]

-1 15- Q3: What can I do if the router with the remote management function enabled cannot be accessed by the remote computer? 1. Make sure that the IP address of the remote com puter is in the subnet allowed to remotely access the router . 2. If the router ’s management port has been modif ied, please log into the router with the new address, suc[...]

-1 16- Appendix C Glossary Glossary Description ALG （ Application Layer Gateway ） Application Level Gateway (A LG) is application specifi c translation agent that allows an application on a host in one address realm to connect to its counterpart running on a host in different realm transparently . ARP （ Address Resolution Protocol ） Interne[...]

-1 17- Glossary Description H.323 H.323 allows dissimilar communication devices to communicate with each other by using a standardized communication protocol. H.323 defines a comm on set of CODECs, call setup and negotiating procedures, and basic data transport methods. H HTTP （ Hyp ertext T ransfer Protocol ） The protocol used by Web browsers [...]

-1 18- Glossary Description MAC address （ Media Access Control address ） S tandardized data link layer address that is required for every port or device that connects to a LAN. Other devices in th e network use these addresses to lo cate specific ports in the network and to create and update routing tables and data structures. MAC addresses are[...]

-1 19- Glossary Description TCP （ T ransfer Control Protocol ） Connection-oriented transport la yer protocol that provides reliable full-duplex data transmission. TCP/IP （ T ransmission Control Protocol/ Internet Protocol ） Common name for the suite of protocols to support the construction of worldwide Inter networks. TCP and IP are the two[...]