English dropdown-ico

TP-Link TL-R480T+ manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131

Go to page of

Similar user manuals

A good user manual

The rules should oblige the seller to give the purchaser an operating instrucion of TP-Link TL-R480T+, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.

What is an instruction?

The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of TP-Link TL-R480T+ one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.

Unfortunately, only a few customers devote their time to read an instruction of TP-Link TL-R480T+. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.

What should a perfect user manual contain?

First and foremost, an user manual of TP-Link TL-R480T+ should contain:
- informations concerning technical data of TP-Link TL-R480T+
- name of the manufacturer and a year of construction of the TP-Link TL-R480T+ item
- rules of operation, control and maintenance of the TP-Link TL-R480T+ item
- safety signs and mark certificates which confirm compatibility with appropriate standards

Why don't we read the manuals?

Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of TP-Link TL-R480T+ alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of TP-Link TL-R480T+, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the TP-Link service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of TP-Link TL-R480T+.

Why one should read the manuals?

It is mostly in the manuals where we will find the details concerning construction and possibility of the TP-Link TL-R480T+ item, and its use of respective accessory, as well as information concerning all the functions and facilities.

After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.

Table of contents for the manual

  • Page 1

    TL-R480T+ Load Balance Broadband Router REV6.2.0 191001 101 1[...]

  • Page 2

    -I- COPYRIGHT & TRADEMARKS Specifications are subjec t to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., L TD. Other brands and product names are trademarks of their respective holders. No part of the specificat ions may be reproduced in any form or by any means or used to make any derivative such as translation, [...]

  • Page 3

    -II- Продукт сер тифіковано згідно с правилами системи Ук р С Е П Р О на відповідність вимогам норма тивних документів та вимогам , що пере дб а чені чинними законодав чими ак тами Ук р а ї н и . Safet[...]

  • Page 4

    -III- CONTENTS Package Contents .................................................................................................................. 1 Chapter 1 About this Guide ................................................................................................... 2 1.1 Intended Re aders ..................................................[...]

  • Page 5

    -IV- 4.5 Advanc ed ....................................................................................................................... ......51 4.5.1 NA T .......................................................................................................................... 51 4.5.2 T raf fic C ontrol ........................................[...]

  • Page 6

    -V- Appendix C Glossary .................................................................................................. 122[...]

  • Page 7

    -1- Package Content s The following items should be found in your package:  One TL-R480T+ Load Balance Broadband Router  One Power cord  One Console Cable  One Ethernet Cable  Quick In stallation Guide  Mounting kit s for installing in a st andard 19-inch rack  Resource CD Note: ● Make sure that the pa ckage contains the abov[...]

  • Page 8

    -2- Chapter 1 About this Guide This User Guide contains information for setu p and management of TL-R480T+ Load Balance Broadband Router . Please read this gui de carefully before ope ration. 1.1 Intended Readers This Guide is intended for Network Engineer and Network Administrator. 1.2 Conventions In this Guide the following conventions are used: [...]

  • Page 9

    -3- Appendix B F AQ Provides the possible solu tions to the problems that may occur during the installation and operation of the router . Appendix C Glossary Lists the glossary used in this guide.[...]

  • Page 10

    -4- Chapter 2 Introduction Thanks for choosing the Load Balance Broadband Router TL-R480T+. 2.1 Overview of the Router The Load Balance Broadband Router TL-R4 80T+ from TP-LINK possesses excellent data processing capability and multiple powerful func tions including Load Balance, Access Control, Bandwid th Con trol, IGMP Proxy , Session Limit, PPPo[...]

  • Page 11

    -5- + Featured Link Backup to switch all the new sessions from dropped line automatically to another for keeping an always on-line network.  Easy-to-use + Providing easy-to-use GUI with clear configur ation steps and detailed help information for the users to configure the router simply . + Helping administrators to monitor the whole network sta[...]

  • Page 12

    -6- T raffic Control  Supports Bandwidth Control  Supports Session Limit Security  Built-in firewall supporting URL/MAC Filtering  Supports Access Control  Supports App Control  Supports Attack Defense  Supports IP-MAC Binding  Supports GARP (Gratuitous ARP) 2.3 Appearance 2.3.1 Front Panel The front panel of TL-R480T+ is sh[...]

  • Page 13

    -7- LED Status Indication Off The linked device is running at 10Mbps. 100Mbps (W AN/LAN) On (Green/Y ellow) The linked device is running at 100Mbps. (Green light indicates the corresponding port is working as a LAN port, and yellow indicates W AN port.)  Interface Description Interface Port Description WAN 1~4 The WAN port is for c onnecting the[...]

  • Page 14

    -8- Chapter 3 Quick Inst allation Guide After connecting the TL-R480T+ router into your network, you shoul d conf igure it. This chapter describes how to configure the basic functions of your TL-R480T+ Load Balance Broadband Router . These procedures only take you a few minutes. Y ou can access the Inte rnet via the router immediately after it has [...]

  • Page 15

    -9- Step 2: In the next screen, right click Local Area Connecti on (LAN), and then select Properties . Figure 3-2 Step 3: In the next screen, select General tab, highlight Internet Protoc ol (TCP/IP), and then click the Properties button. Figure 3-3[...]

  • Page 16

    -10- Step 4: Configure the IP address as shown in Figure 3-4 . After that, click OK . Figure 3-4 Note: Y ou can configure the PC to get an IP address automatically , select “ Obt ain an IP address automatically ” and “ Obt ain DNS server address automatically ” in the screen above. For Windows 98 OS or earlier , the PC and router may need t[...]

  • Page 17

    -1 1- Figure 3-6 Y ou can check it by following the step s below: Note: ● Is the connection between your PC and the router correct? The LEDs of LAN port which you link to the devic e and the LEDs on your PC's adapter should be lit. ● Is the TCP/IP configuration for y our PC correct? If the router's IP address is 192. 168.0.1, your PC&[...]

  • Page 18

    -12- After a successful login, the “Quick Setup” screen will pop up as the Figure 3-8 shows. If it does no t prompt, you can click the Quick Setup on the left of the main menu. Then click <Next>. Figure 3-8 Quick Setup Select the total number of W AN por ts you prefer to use as the Figure 3-9 shows. Then click <Next> to load the WA [...]

  • Page 19

    -13- Select the W AN port you want to use as the Figure 3-10 shows, and then click <Next> to load the W AN Connection T ype screen. Figure 3-10 W AN Port Select the connection type prov ided by your ISP as the Figure 3-1 1 shows. Three popular typ es are provided here. For other connecti on types, please refer to the 4.3.1 WA N . Figure 3-1 1[...]

  • Page 20

    -14- 1) If you choose PPPoE , you will see the screen as the Figure 3-12 shows. Enter the Account Name and Password provided by yo ur ISP (Internet Service Provider). Figure 3-12 W AN Connection T ype - PPPoE Click <Next> to dial up, and the process will take a few minutes. The process of configuring the network parameters is shown as Figure [...]

  • Page 21

    -15- Figure 3-14 W AN Connection T ype - Dynamic IP 3) If you choose Static IP , you should enter the detailed IP information provided by your ISP in Figure 3-15 . Figure 3-15 W AN Connection T ype - S tatic IP Then click <Next>. The process for configuring the network parameters is shown as Figure 3-16 . If you close the screen during the pr[...]

  • Page 22

    -16- Figure 3-16 W AN Connection T ype - S tatic IP Connecting After that, you will see the next screen. Click <Finis h> to complete the quick inst allation or click <Continue> to configure other W AN ports. Figure 3-17 Configuration Completed[...]

  • Page 23

    -17- Chapter 4 Configuration 4.1 Stat u s The S tatus page shows the system information, the port connection st atus and other information related to this router . Choose the menu Statu s to load the following page. Figure 4-1 S t atus[...]

  • Page 24

    -18- 4.2 Quick Setup Please refer to the Chapter 3 Quick Installation Guide . 4.3 Network 4.3.1 W AN 4.3.1.1 W AN Mode TL-R480T+ provides four available W AN port s. Y ou can set the number of W AN ports on this p age. Choose the menu Network → WA N → W AN Mode to load the following p age. Figure 4-2 W AN Mode  W AN Mode W AN Ports: Select t[...]

  • Page 25

    -19- Tips: ● It’ s allowed t o set the IP addresses of multiple W AN ports within the same subnet. However , to guarantee a normal communication, make sure that the W AN ports can access the same network, such as Internet or a local area network. ● The amount of tab p ages for W AN port varies with the number of the WAN port s. For the config[...]

  • Page 26

    -20- Default Gateway: Optional. Enter the Gateway assigned by yo ur ISP . MTU: MTU (Maximum T ransmission Unit) is the maximum data unit transmitted by the physical network . It can be set in the ran ge of 576-1500. The default MTU is 1500. Y ou are recommended to keep the default value if no other MTU va lue is provided by your ISP . Primary DNS: [...]

  • Page 27

    -21- Figure 4-4 W AN – Dynamic IP The following items are displayed on this screen:  Dyn am ic I P Connection T ype: Select Dynamic IP if your ISP as signs the IP address automatically . Click <Obtain> to get the IP address from your ISP’ s server . Click <Release> to release the current IP address of W AN port. Host Name: Option[...]

  • Page 28

    -22- Get IP Address b y Unicast: The broadcast requirement may not be supported by a few ISPs. Select this option if you can not get the IP address from your ISP even with a normal network connection. This option is not required generally . Use the following DNS Server: Select this option to enter the DNS (D omain Name Server) address manually . Pr[...]

  • Page 29

    -23- Primary DNS: Displays the IP address of your ISP’ s Primary DNS. Secondary DNS: Displays the IP address of your ISP’ s Secondary DNS. 3) PPPoE If your ISP (Internet Service Provider) has provid ed the account information for the PPPoE connection, please choose the PPPoE/Russian PPPoE connection ty pe (Used mainly for DSL Internet service).[...]

  • Page 30

    -24- The following items are displayed on this screen:  PPPoE Settings Connection T ype: Select PPPoE/Russian P PPoE if your ISP provides xDSL V irtual Dial-up connection. Cli ck <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Na[...]

  • Page 31

    -25- ISP Address: Optional. Enter the ISP address provided by your ISP . It's null by default. Service Name: Optional. Enter the Service Name prov ided by your ISP . It's null by default. Primary DNS: Enter the IP address of y our ISP’s Primary DNS. Secondary DNS: Optional. Enter the IP address of your ISP’ s Secondary DNS. Secondary [...]

  • Page 32

    -26-  PPPoE St atus Statu s: Displays the status of PPPoE connection.  “Disabled” indicates that the PPPoE connection type is not applied.  “Connecting” indicates that t he router is obtaining the IP parameters from your ISP .  “Connected” indicates that t he router has successfully obtained the IP parameters from your ISP .[...]

  • Page 33

    -27- 4) L2TP If your ISP (Internet Service Provider) has provi ded the account informati on for the L2TP connection, please choose the L2TP/Ru ssian L2TP connection type. Figure 4-6 W AN - L2TP[...]

  • Page 34

    -28- The following items are displayed on this screen:  L2TP Settings Connection T ype: Select L2TP/Russian L2TP if your ISP provides an L2TP connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Name: Enter the Accou[...]

  • Page 35

    -29- IP Address: If S tatic IP is selected, confi gure the IP address of W A N port. If Dynamic IP is selected, the IP address of W AN port obtained is displayed. Subnet Mask: If S tatic IP is selected, conf igure the subnet mask of W AN port. If Dynamic IP is select, the subnet mask of W AN port obtained is displayed. Default Gateway: If S tatic I[...]

  • Page 36

    -30- Primary DNS: Displays the IP address of your ISP’ s Primary DNS. Secondary DNS: Displays the IP address of your ISP’ s Secondary DNS. 5) PPTP If your ISP (Internet Service Provider) has provi ded the account informati on for the PPTP connection, please choose the PPTP/Russi an PPTP connection type. Figure 4-7 W AN - PPTP The following item[...]

  • Page 37

    -31-  PPTP Settings Connection T ype: Select PPTP/Russian PPTP if your ISP provides a PPTP connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Name: Enter the Account Name provided by your ISP . If you are not clear[...]

  • Page 38

    -32- Subnet Mask: If S t atic IP is selected, conf igure the subnet mask of W AN port. If Dynamic IP is select, the subnet mask of W AN port obtained is displayed. Default Gateway: If S tatic IP is selected, c onfigure the default gateway . If Dynamic IP is selected, the obt ained default gateway is displayed. Primary DNS/Secondary DNS: If S tatic [...]

  • Page 39

    -33- 6) BigPond If your ISP (Internet Service Provider) has provided the account inform ation for the BigPond connection, please choose t he BigPond connection type. Figure 4-8 W AN – Bigpond The following items are displayed on this screen:  BigPond Settings Connection T ype: Select BigPond if your ISP prov ides a BigPond connection. Click &l[...]

  • Page 40

    -34- Password: Enter the Password provided by your ISP . If you are not clear , please consult your ISP . Auth Server: Enter the address of authentication server . It can be IP address or server name. Auth Domain: Enter the domain name of authentication server . It's only required when the address of Auth Server is a server name. Auth Mode: Y [...]

  • Page 41

    -35-  BigPond St atus Statu s: Displays the status of Big Pond connection.  “Disabled” indicates that the BigPond connection type is not applied.  “Connecting” indicates that t he router is obtaining the IP parameters from your ISP .  “Connected” indicates that the router has successfully obtained the IP p arameters from you[...]

  • Page 42

    -36- The following items are displayed on this screen:  LAN IP Address: Enter the LAN IP address of the router . 192.168.0.1 is the default IP address. The Hosts in LAN can access the router via this IP address. It can be changed according to your network. Subnet Mask: Enter the Subnet Mask. The default subnet mask is 255.255.255.0. Note: If the[...]

  • Page 43

    -37- The following items are displayed on this screen:  DHCP Settings DHCP Server: Enable or disable the DHCP server on your router . Select Enable to make the router automatically a ssign TCP/IP parameters to the computers in the LAN. St art IP Address: Enter the S tart IP address to define a range for the DHCP server to assign dynamic IP addre[...]

  • Page 44

    -38- Figure 4-1 1 DHCP Client Y ou can view the informati on of the DHCP client s in this t able. Click the Refresh button for the updated information. 4.3.2.4 DHCP Reservation DHCP Reservation feature allows you to reserve an IP address for the specified MAC address. The client with this MAC address will always get t he same IP address each ti me [...]

  • Page 45

    -39- Statu s: Activate or Inactivate the corresponding entry .  List of Reserved Address In this table, you can view the information of the entries and edit t hem by the Action buttons. Up to 512 DHCP st atic address entries can be supported for LAN by this router . The first entry in Figure 4-12 indicates: The IP address 192.168.0.101 is reserv[...]

  • Page 46

    -40- Tips: ● Among the W AN ports, only W AN1( Port1 ) can be used for IPTV service. ● When IGMP Proxy option is Enabled, you need to ensure the Block IP options under the Firewall → Att ack Defense → Attack Defense is not selected. ● If the data traf fic is heavy when you use IPTV function, it is recommended to increase the parameters of[...]

  • Page 47

    -41- The following items are displayed on this screen:  MAC Address Port: Displays the port type of the router . Current MAC Address: Displays the current MAC address of the port. MAC Clone: It’s only available for WAN port. Click the <Resto re Factory MAC> button to res tore the MAC address t o the factory default value or click the <[...]

  • Page 48

    -42- Figure 4-15 S t atistics The following items are displayed on this screen:  St atistics Unicast: Displays the number of normal unica st packet s received or transmitted on the port. Broadcast: Displays the number of normal broadcast packet s received or transmitted on the port. Pause: Displays the number of flow contro l frames received or [...]

  • Page 49

    -43- Normal: Displays the number of the received packets (including error frames) that are between 64 bytes and the maximum frame length. The maximum untagged frame this router can support is 1518 bytes long and the maximum tagged frame is 1522 bytes long. Oversize: Displays the number of the received pa ckets (including error frames) that are long[...]

  • Page 50

    -44- Mode: Select the mode for the port mirror function. Options include:  Ingress: When this mode is selected, only the incoming packet s sent by the mirrored port will be copied to the mirroring port.  Egress: When this mode is selected, only the outgoing packets sent by the mirrored port will be copied to the mirroring port.  Ingress&am[...]

  • Page 51

    -45- Application Example T o monitor all the traffic and analyze the network abnormity for an ent erprise’s network, please set the Port Mirror function as below: 1) Check the box before Enable Port Mirror to enable the Port Mirro r function and select the Ingress & Egress mode. 2) Select Port 3 to be the Mirroring Port to monitor all the p a[...]

  • Page 52

    -46- The following items are displayed on this screen:  Rate Control Port: Displays the port number . Ingress Limit: S pecify whether to enable t he Ingress Limit feature. Ingress Rate: S pecify the limit rate for the ingress packet s. Egress Limit: S pecify whether to enabl e Egress Limit feature. Egress Rate: S pecify the limit rate for the eg[...]

  • Page 53

    -47- Negotiation Mode: Select the Negotiation Mode for the port. All Port s: Allows you to configure the parame ters for all the ports at one time. 4.3.5.5 Port St atus On this page, you can view t he current status of each port. Choose the menu Network → Sw itc h → Port St atus to load the following page. Figure 4-19 Port S t atus 4.3.5.6 Port[...]

  • Page 54

    -48- Figure 4-20 Port VLAN The following items are displayed on this screen:  Port VLAN Network: Displays the current logical network of the physical port. VLAN: Select the desired VLAN for the port. Tips: The Port VLAN can only be created among the LAN ports. 4.4 User Group The User Group function is used to group different users for unified ma[...]

  • Page 55

    -49-  Group Config Group Name: S pecify a unique name fo r the group. Description: Give a description for the group. It's optional.  List of Group In this table, you can view the information of the Groups and edit them by the Action buttons. 4.4.2 User On this page, you can confi gure the User for the group. Choose the menu User Group ?[...]

  • Page 56

    -50- Choose the menu User Group → Vi ew to load the following page. Figure 4-23 View Configuration The following items are displayed on this screen:  Vie w Config View : Select the desired view for configuration. User Name: Select the name of the desired User . A vailable Group: Displays the Groups that the User can join. Selected Group: Displ[...]

  • Page 57

    -51- Selected Member: Displays the members of this group, including Users and Groups. 4.5 Advanced 4.5.1 NA T NA T (Network Address T ranslation) is the translation between private IP and public IP , which allows private network users to visit the public network using private IP addresses. With the explosion of the Inter net, the number of availabl[...]

  • Page 58

    -52- Host IP Address: Enter the IP address of the host specified as NA T DMZ server . 4.5.1.2 One-to-One NA T On this page, you can conf igure the One-to-One NA T . Choose the menu Advanced → NA T → One-to-One NA T to load the following page. Figure 4-25 NA T Setup The following items are displayed on this screen:  One-to-One NA T Mapping IP[...]

  • Page 59

    -53- The first entry in Figure 4-25 indicates: The IP address of host1 in local network is 192.168.0.128 and the W AN IP address af ter NA T mapping is spec ified to be 222.135.48.128. The data packet s are transmitted from W AN1 port. DMZ Forwar ding and this entry are both activated. Note: One-to-One NA T entries t ake ef fect only when the Conne[...]

  • Page 60

    -54- Note: ● Multi-Nets NA T entry takes ef fect only when co operating with the corresponding St atic Route entries. ● For detailed setting of subnet mask, please refer to the Appendix B F AQ Application Example  Net work Requirements The LAN subnet of TL-R480T+ is 192. 168.0.0 /24, the subnet of VLAN2 under a three layer switch is 192.168.[...]

  • Page 61

    -55-  Configuration procedure 1. Establish the Multi-Nets NA T entries with Subnet/Mask of VLAN2 and VLAN3. The configured entries are as follows: 2. Then set the corresponding S tatic Route entry , en ter the IP address of t he interface connecting the router and the three layer swit ch into the Next Hop field. Choose the menu Advanced → Rout[...]

  • Page 62

    -56- 4.5.1.4 V irtual Server Virtual server can be used for setting up public servic es in your private netw ork, such as DNS, Email and FTP . Virtual server can define a service port. All the service requests to this port will be transmitted to the LAN server appointed by the router via IP address. Choose the menu Advanced → NA T → Vi rtu al S[...]

  • Page 63

    -57- Internal Server IP: Enter the IP address of the specified internal server for the entry . All the requests from the Internet to the specified LAN port will be redirected to this host. Statu s: Activate or inactivate the entry . Note: ● The External port and Internal Port should be set in the range of 1-65535. ● The external ports of dif fe[...]

  • Page 64

    -58- Figure 4-28 Port T riggering The following items are displayed on this screen:  Port T riggering Name: Enter a name for Port Triggering entri es. Up to 28 characters can be entered. Interface: Select an interface for forwarding dat a packet s. T rigger Port: Enter the trigger port number or range of port numbers. Only when the trigger port [...]

  • Page 65

    -59- Note: ● The T rigger Port and Incoming Port should be set in the range of 1-65535. The Incoming Port can be set in a continuous range such as 8690-8696. ● The router supports up to 16 Port T riggering ent ries. Each entry supports at most 5 groups of trigger ports and overlapping between the ports is not allowed. ● Each entry supports at[...]

  • Page 66

    -60- H.323 ALG: Enable or disable H.323 ALG . The default setting is enabled. H.323 is used for various applicat ions such as NetMeeting and V oIP . SIP ALG: Enable or disable SIP ALG . The default setting is enabled. It is recommended to keep the def ault setting if no special requirement. IPsec ALG: Enable or disable IPsec ALG . The de fault sett[...]

  • Page 67

    -61- The following items are displayed on this screen:  General Disable Bandwidth Control: Select this option to disable Bandwidth Control. Enable Bandwidth Control all the time: Select this option to enable Bandwidth Control all the time. Enable Bandwidth Control When: With this option selected, the Bandwidth Control will take ef fect when the [...]

  • Page 68

    -62- 4.5.2.2 Bandwid th Control On this page, you can configure the Bandwid th Control function. Choose the menu Advanced → T raffic Control → Band width Control to loa d the following page. Figure 4-31 Bandwidth Control The following items are displayed on this screen:  Bandwidth Control Rule Direction: Select the data stream direction for [...]

  • Page 69

    -63- Guaranteed Bandwidth ( Down): S pecify the Guaranteed Downstr eam Bandwidth for this entry . Limited Bandwid th (Down): S pecify the L imited Downstream Bandwidth for this entry . Effective Time: S pecify the t ime for the entry to take e ffect . Description: Give a description for the entry . Statu s: Activate or inactivate the entry .  Li[...]

  • Page 70

    -64- Figure 4-32 Session Limit The following items are displayed on this screen:  General Enable Session Limit: Check here to enable Session Limit, otherwise all the Session Limit entries will be disabled.  Session Limit Group: Select a group to define the controlled user . Max. Sessions: Enter the max. Sessions for the users. Description: Gi[...]

  • Page 71

    -65- Choose the menu Advanced → Sessi on Limit → Session List to load the following p age. Figure 4-33 Session List In this table, you can view the session limit inform ation of users configured with Session Limit. Click the <Refresh> button to get the latest information. 4.5.4 Load Balance On this part, you can configure how the traf fic[...]

  • Page 72

    -66- Choose the menu Advanced → Load Balance → Policy Routing to load the following page. Figure 4-35 Policy Routing The following items are displayed on this screen:  General Protocol: Select the protocol for the entry in the drop-down list. If the protocol you want to set is not in the lis t, you can add it to the list on 4.5.4.4 Protocol [...]

  • Page 73

    -67- Effective Time: S pecify the time for the entry to take ef fect. Statu s: Activate or inactivate the entry . Priority: Select this option to specify the prio rity for the added entries. The latest enabled entry will be displayed at the end of the list by default.  List of Rules Y ou can view the informati on of the entries and edit t hem by[...]

  • Page 74

    -68- Figure 4-36 Link Backup The following items are displayed on this screen:  General W AN Ports: Displays all the W AN ports in use. Y o u can drag the light-blue WAN button to primary and backup W AN list. The colo r of W AN button changing to gray indicates that the W AN port is already in the primary and backup W AN list. W AN Config: The [...]

  • Page 75

    -69- Failover: S pecify the premise for Failover Mode. The backup W AN port will be enabled only when the premise is met. Backup Effective Time: S pecify the backup ef fective time if T iming Mode has been selected. Then the backup W AN port will be enabled, while t he primary W AN port is disabled in the specified time period. When the start time [...]

  • Page 76

    -70- Figure 4-37 Protocol The following items are displayed on this screen:  Protocol Name: Enter a name to indicate a protocol. The name will display in the drop-down list of Protocol on Access Rule page. Number: Enter the Number of the prot ocol in the range of 0-255.  List of Protocol Y ou can view the informati on of the entries and edit [...]

  • Page 77

    -71- Figure 4-38 Static Route The following items are displayed on this screen:  St atic Route Destination: Enter the destination hos t the route leads to. Subnet Mask: Enter the Subnet Mask of the destination network. Next Hop: Enter the gateway IP address to which the p acket should be sent next. Interface: Select the physical network interf a[...]

  • Page 78

    -72- The first entry in Figure 4-38 indicates: If there are packets being sent to a device with IP address of 21 1.162.1.0 and subnet mask of 255.255.255.0, the router will forward the p ackets from W AN1 port to the next hop of 21 1.200.1.1. Application Example  Network Requirements LAN1 is under the router and it uses network seg ment 192.168.[...]

  • Page 79

    -73- 2. Add a static routing rule for LAN3 by referring to step 1. The static routing rules are shown in the following figure. 4.6 Firewall 4.6.1 Anti ARP S poofing ARP (Address Resolution Protocol) is used to analyze and map IP addresses to the corresponding MAC addresses so that packet s can be de livered to their destinations correctly . ARP fun[...]

  • Page 80

    -74- Figure 4-39 IP-MAC Binding The following items are displayed on this screen:  General It is recommended to check all the options. Y ou should import the IP and MAC address of the host to List of IP-MAC Binding and enable the corresp o nding entry before enabling “Permit the packet s matching the IP-MAC Binding entries only”. When suffer[...]

  • Page 81

    -75-  List of Rules Y ou can view the informati on of the entries and edit t hem by the Action buttons. The first entry in Figure 4-39 indicates: The IP address of 192.168.1.101 and MAC address of 00-1 9-66-83-53-CF have been bound and this entry is activated. Note: If all the entries in the binding list are disabled and “Permit the packets of[...]

  • Page 82

    -76- T o bind the entries in the list, check these entri es and click the <Import> button, then the settings will take ef fect if the entries do not c onflict with the existed entries. Note: If the local hosts suffered from ARP attack, you cannot add IP-MAC Binding entries on this p age. Please add entries manually on 4.6.1.1 IP-MAC Binding .[...]

  • Page 83

    -77- Figure 4-42 Attack Defense The following items are displayed on this screen:  General Flood Defense: Flood attack is a kind of commonly used DoS (Denial of Service), which including TCP SYN, UDP , ICMP and so on. It is recommended to check all the Fl ood Defense options and specify the corresponding thresholds. Keep the default settings if [...]

  • Page 84

    -78- Enable Att ack Defense Logs: With this box checked, the rout er will record the defense logs. Tips: When IPTV works in Automatic mode, you need to ensure the Block IP opti ons is not selected. 4.6.3 MAC Filtering On this page, you can control the access to the Internet of local host by specifying their MAC addresses. Choose the menu Firewall ?[...]

  • Page 85

    -79-  List of Rules Y ou can view the informati on of the entries and edit t hem by the Action buttons. 4.6.4 Access Control 4.6.4.1 URL Filtering URL (Uniform Resource Locator) specifies wher e an identified resource is available and the mechanism for retrieving it. URL Filt er functions to filter the Internet URL address, so as to provide a co[...]

  • Page 86

    -80-  URL Filtering Rule Object: Select the ra nge in which the URL Filtering takes ef fect:  Group: URL Filtering will take ef fect to all the users in group.  ANY : URL Fi ltering will take ef fect to all the users. Mode: Select the mode for URL Filtering. “Keywords’’ indicates that all the URL addresses including the specified key[...]

  • Page 87

    -81- 4.6.4.2 Web Filtering On this page, you can filter the desired web components. Choose the menu Firewall → Access Control → Web Filtering to load the following p age. Figure 4-45 Web Filtering Check the box before Enable Web Filt ering and select the web components to be filtered. 4.6.4.3 Access Rules Choose the menu Firewall → Access Con[...]

  • Page 88

    -82- Figure 4-46 Access Rule The following items are displayed on this screen:  Access Rules Policy: Select a policy for the entry:  Block: When this option is select ed, the packet s obeyed the rule will not be allowed to pass through the router .  Allow: When this option is selected, the packe ts obeyed the rule will be allowed to pass t[...]

  • Page 89

    -83- Source: Select the Source IP Ra nge for t he entries, including the following three ways:  IP/MASK: Enter an IP address or subnet mask. ("0.0.0.0/32" means any IP).  Group: Select a predefined gro up of users. Y ou can set the group on 4.4.1 Group .  ANY : means for any users. Destination: Select the Destination IP Range fo [...]

  • Page 90

    -84- 4.6.4.4 Service The Service function allows you to specify the protocol and port number to be filtered for Firewall function conveniently . Protocol nam e and port range constitute a servic e type. The router predefines three commonly used services such as HTTP , FT P and TELNET and you can also add customized services if needed. Choose the me[...]

  • Page 91

    -85-  List of Service Y ou can view the informati on of the entries and edit t hem by the Action buttons. Note: The service types predefined by the system cannot be modified. 4.6.5 App Control 4.6.5.1 Control Rules On this page, you can enable t he Application Rules function. Choose the menu Firewall → App Control → Control Rules to load the[...]

  • Page 92

    -86-  Control Rules Object: Specify the object for the entry . Y o u can select “Group” to limit the predefined group, or select “ANY” to limit all the users. Group: If select “Group” as object, you can se lect the group in the drop-down list. T o establish new group, please refer to 4.4.1 Group . Application: Click the <Applicati[...]

  • Page 93

    -87- The database refers to all the applicat ions in the application list on the Application Rules p age, you can download the latest database from http://www .tp-link.com , Click the <Browse> button and select the file, and then click the <Upgrade> button to upgrad e the database. 4.7 Services 4.7.1 PPPoE Server The router can be co nf[...]

  • Page 94

    -88- PPPoE User Isolation: S pecify whether to allow the Dial-i n Users to communicate with one another . Primary/Secondary DNS: Enter the Primary/Secondary DNS server address. The default is 0.0.0.0. Max Sessions: S pecify the maximum number of the sessions for PPPoE server . The default is 256. Max Echo-Request s: S pecify the maximum number of E[...]

  • Page 95

    -89- 4.7.1.2 IP Address Pool On this page, you can define or edit the IP Address Pool. Choose the menu Services → PPPoE Server → IP Address Pool to load the following p age. Figure 4-51 IP Address Pool The following items are displayed on this screen:  IP Address Pool Pool Name: S pecify a unique name to the IP A ddress Pool for identificati[...]

  • Page 96

    -90- Figure 4-52 Account The following items are displayed on this screen:  Account Account Name: Enter the account name. This name should not be the same with the one in L2TP/PPTP connection settings. Password: Enter the password. IP Address Assigned Mode: Select the IP Address Assigned Mode for IP assignment.  Static: Select this option to [...]

  • Page 97

    -91- Description: Enter the description for management and search purposes. Up to 28 characters can be entered. Statu s: Activate or inactivate the entry . MAC Binding: Select a MAC Binding type from t he pull-down list. Options include:  Disable: Select this option to disable the MAC Binding function.  Manual: Select this option to bi nd the[...]

  • Page 98

    -92- Figure 4-53 Exceptional IP The following items are displayed on this screen:  Exceptional IP IP Address Range: S pecify the start and the end IP address to make an exceptional IP address range. This range should be in the same IP range with LAN port of the router . The start IP address should not exceed the end address and the IP address ra[...]

  • Page 99

    -93- 4.7.2 E-Bulletin With E-Bulletin function, bulletin in formation can be released to the s pecified users. On this page you can edit the bulletin c ontent and specify the re ceiving user group. Choose the menu Services → E-Bulletin to load the following page. Figure 4-55 E-Bulletin The following items are displayed on this screen:  General[...]

  • Page 100

    -94- Enable Logs: S pecify whether to log the E-Bulletin.  E-Bulletin Tit le : Enter a title for the bulletin. Content: Enter the content of the bulletin. Object: Select the object of this bulletin. Options include:  ANY: The bulletin will be released to all the users and the PCs on the LAN.  Group: The bulletin will be released to the use[...]

  • Page 101

    -95- As many ISPs use DHCP to assi gn public IP addresses in W AN, the public IP address assigned to the client is unfixed. In this way , it’ s very difficult for other clients to get the latest IP address of this client for access. DDNS (Dynamic DNS) server provides a fixed d oma in name for DDNS client and maps its late st IP address to this do[...]

  • Page 102

    -96- The following items are displayed on this screen:  Dyndns DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of Dyndns for register . Password: Enter the password of your DDNS account. Domain Name: Enter the Domain Name that you registered with your[...]

  • Page 103

    -97- Figure 4-57 NO-IP DDNS The following items are displayed on this screen:  No-IP DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of No-IP for register . Password: Enter the password of your DDNS account. Domain Name: Enter the Domain Name that you[...]

  • Page 104

    -98- DDNS St atus: Dis plays the current status of DDNS service  Offline: DDNS service is disabled.  Connecting: Client is connecting to the server.  Online: DDNS works normally.  Authorization fails: The Account Name or Password is incorrect. Please check and enter it again.  Invalid Domain name: The Domain Name is incorrect or unr [...]

  • Page 105

    -99- The following items are displayed on this screen:  PeanutHull DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of PeanutHull for register . Password: Enter the password of your DDNS account. DDNS Service: Activate or inactivate DDNS service here. [...]

  • Page 106

    -100- Figure 4-59 Comexe DDNS The following items are displayed on this screen:  Comexe DDNS Account Name: Enter the Account Name of your DDN S account. If you have not registered, click <Go to register> to go to t he website of Comexe for register . Password: Enter the password of your DDNS account. DDNS Service: Activate or inactivate DD[...]

  • Page 107

    -101-  List of Comexe Account In this table, you can view the existing DDNS entries or edit them by the Action button. 4.7.4 UPnP Devices based on UPnP (Universal Plug and Play) protocol from dif ferent manufacturer can automatically discover and communicate with one another . If UPnP groupware are installed in the host in LA N and UPnP function[...]

  • Page 108

    -102- Note: ● When using UPnP function, ma ke sure the UPnP is enabled fo r the router , and the operating system and applications in t he host support UPnP service. ● As some Trojan and viruses c an open the specific port using UPnP service resulting in hacker attack on the host, be careful of using UPnP service. 4.8 Maintenance 4.8.1 Admin Se[...]

  • Page 109

    -103- Note: ● The factory default password and user name are both admin. ● Y ou should enter the new user name and p assword when next login if the current username and password has been changed. ● The new user name and password must not exc eed 31 chara cters in lengt h and must consist of numbers or letters. All the fi elds are case-sensiti[...]

  • Page 110

    -104- Note: ● The default Web Management Port is 80. If the port is changed, you should type “http://IP address: port” to login the router . E.g.: If the Web Management Port is changed to 88, type http://192.168.0.1:88 in the address filed to login the router . ● The new timeout period will take ef fect when next login. Application Example [...]

  • Page 111

    -105- Figure 4-63 Remote Management The following items are displayed on this screen:  Remote Management Subnet/Mask: S pecify a single IP address or network address for the hosts d esired to access the router from external network. Statu s: Activate or inactivate the entry .  List of Subnet In this list, you can view the Remote Management en[...]

  • Page 112

    -106- Figure 4-65 Export and Import The following items are displayed on this screen:  Configuration V ersion Displays the current Configur ation version of the rou ter .  Export Click the <Export> button to save the current configuration as a file to your computer . Y ou are suggested to take this measure before upgrading or modifying [...]

  • Page 113

    -107- Figure 4-66 Reboot Click the <Reboot> button to reboot the router . The configuration will not be lost after rebooting. The Internet connection will be temporarily interrupted while rebooting. Note: T o avoid damage, please don't turn off the device while rebooting. 4.8.2.4 Firmware Upgrade Choose the menu Maintenance → Managemen[...]

  • Page 114

    -108- Choose the menu Maintenance → SNMP → SNMP to load the following page. Figure 4-68 SNMP The following items are displayed on this screen:  General SNMP: Enable or disable the SNMP function. Device Name: Enter the name of the router . Location: Enter the location of the router . Cont act: Enter the name of the netwo rk administrator for [...]

  • Page 115

    -109- 4.8.4 S t atistics 4.8.4.1 Interface T raffic St atistics Interface T raf fic S tatistics screen displays the det ailed traf fic information of each port and extra information of W AN ports. Choose the menu Maintenance → St atistics → Interface T raffic St atistics to load the following page. Figure 4-69 Interface T raffic S tatistics The[...]

  • Page 116

    -1 10- Figure 4-70 IP T raf fic S tatistics The following items are displayed on this screen:  General Enable IP T raffic St atistics: Allows you to enable or disable IP T raf fic S tatistics. Enable Auto-refresh: Allows you to enable/disable refreshing the IP T raffic S tatistics automatically . The default refr esh interval is 5 seconds.  T[...]

  • Page 117

    - 111 - Figure 4-71 Diagnostics The following items are displayed on this screen:  Ping Destination IP/Domain: Enter destination IP address or Domain name here. Then select a port for testing, if you select “A uto”, the router will select the interface of destination automatically . After clickin g <S tart> button, the router will send[...]

  • Page 118

    -1 12-  T racert Destination IP/Domain: Enter destination IP address or Domain name here. Then select a port for testing, if Auto is selected, the router will select the interface of destination automatically . Af ter clicking the <S tart> button, the router will send Tr acert packet s to test the connectivity of the gateways during the jo[...]

  • Page 119

    -1 13-  List of W AN status Port: Displays the detected W AN port. Detection: Displays whether the Online Detection is enabled. W AN St atus: Display the detecting results. 4.8.6 Tim e 4.8.6.1 Ti me System T ime is the time displayed while the router is running. On this page y ou can configure the system time and the settings here will be used f[...]

  • Page 120

    -1 14-  Config Get UTC: When this option is selected, you can configure the time zone and the IP address for the NTP server . The r outer will get UTC automatically if it has connected to an NTP server .  T ime Zone: Select the time zone for the router .  Primary/Secondary NTP Server: Enter the IP address or domain name of the NTP server .[...]

  • Page 121

    -1 15- The following items are displayed on this screen:  Daylight Saving Time(DST) S t ate Show the work state of DST .  Daylight Saving Ti me(DST) Config DST St atus: Enable or disable the DST . Predefined Mode: Select a predefined DST configuration.  USA: Second Sunday in March, 02: 00 ~ First Sunday in November , 02:00.  European: L[...]

  • Page 122

    -1 16- Figure 4-75 Logs  List of Logs List of Logs displays the system log information in log buf fer .  Config Enable Auto-refresh: With this option selected, the page will refresh automatically every 5 seconds. Severity: Displays the severity level of the log information. Y ou can select a severity level to display the log information with [...]

  • Page 123

    -1 17- Level Description Severity debugging 7 Debug-level messages 4.8.8 NA T T able NA T T able correspo nds to a mapping relation, whic h displays the connection sessions in network to help user check forwarding st atus and troubleshoot network. Choose the menu Maintenance → NA T T able → NA T T able to load the following page. Figure 4-76 NA[...]

  • Page 124

    -1 18- Aging Time: Displays the time which the link last s (Unit: second). Out Link: Displays the WAN port which is used in the link. Sorted by: Select the rule for displaying the NA T T able. Y ou can click table headers to sort items.[...]

  • Page 125

    -1 19- Appendix A Hardware S pecifications St andards and Protocols IEEE 802.3, 802.3u TCP/IP , PPPoE, DHCP , ICMP , NA T , SNTP ,HTTP ,DNS One 10/100 Auto-Neg otiation W AN RJ45 port (Auto MDI/MDIX) Three adjustable 10/100M Auto-Negot iation WAN/LAN RJ45 port s (Auto MDI/MDIX) One 10/100M Auto-Nego tiation LAN RJ45 port (Auto MDI/MDIX) Port s One [...]

  • Page 126

    -120- Appendix B F AQ Q1. What can I do if I cannot access the web-based configuration page? 1. For the first login, pl ease try the following steps: 1) Make sure the cable is well connected to t he LAN port of the router . The corresponding LED should flash or be solid light. 2) Make sure the IP address of your PC is se t in the same subnet addres[...]

  • Page 127

    -121- Q3: What can I do if the router with the remote management function enabled cannot be accessed by the remote computer? 1. Make sure that the IP address of the remote com puter is in the subnet allowed to remotely access the router . 2. If the router ’s management port has been modif ied, please log into the router with the new address, such[...]

  • Page 128

    -122- Appendix C Glossary Glossary Description ALG （ Application Layer Gateway ） Application Level Gateway (A LG) is application specifi c translation agent that allows an application on a host in one address realm to connect to its counterpart running on a host in different realm transparently . ARP （ Address Resolution Protocol ） Internet[...]

  • Page 129

    -123- Glossary Description H.323 H.323 allows dissimilar communica tion devices to communicate with each other by using a standardized communication protocol. H.323 defines a comm on set of CODECs, call setup and negotiating procedures, and basic data transport methods. H HTTP （ Hypertext Transfer Protocol ） The protocol used by Web browsers an[...]

  • Page 130

    -124- Glossary Description MAC address （ Media Access Control address ） S tandardized data link layer address that is required for every port or device that connects to a LAN. Other devices in th e network use these addresses to lo cate specific ports in the network and to create and update routing tables and data structures. MAC addresses are [...]

  • Page 131

    -125- Glossary Description TCP （ T ransfer Control Protocol ） Connection-oriented transport la yer protocol that provides reliable full-duplex data transmission. TCP/IP （ T ransmission Control Protocol/ Internet Protocol ） Common name for the suite of protocols to support the construction of worldwide Inter networks. TCP and IP are the two [...]