TP-Link TL-R470T+ User Manual
  1. Manuals
  2. Brands
  3. TP-Link Manuals
  4. Wireless Router
  5. TL-R470T+
  6. User manual

TP-Link TL-R470T+ User Manual

Load balance broadband router
Hide thumbs
Table of Contents

Advertisement

Quick Links

TL-R470T+
Load Balance Broadband Router
REV3.0.1
1910010958

Advertisement

Table of Contents
loading

Related Manuals for TP-Link TL-R470T+

Summary of Contents for TP-Link TL-R470T+

  • Page 1 TL-R470T+ Load Balance Broadband Router REV3.0.1 1910010958...

  • Page 2: Fcc Statement

    COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD.

  • Page 3: Safety Information

    Продукт сертифіковано згідно с правилами системи УкрСЕПРО на відповідність вимогам нормативних документів та вимогам, що передбачені чинними законодавчими актами України. Safety Information When product has power button, the power button is one of the way to shut off the product; When ...

  • Page 4: Table Of Contents

    CONTENTS ........................1 Package Contents ....................2 Chapter 1 About this Guide Intended Readers ........................2 Conventions ...........................2 Overview of this Guide ......................2 ......................4 Chapter 2 Introduction Overview of the Router ......................4 Features..........................5 Appearance..........................6 2.3.1 Front Panel ........................6 2.3.2 Rear Panel.........................6 ..................8 Chapter 3 Quick Installation Guide Configure PC .........................8 Login ............................11 ......................17...
  • Page 5 4.5.1 NAT..........................49 4.5.2 Traffic Control ......................54 4.5.3 Session Limit ......................58 4.5.4 Load Balance......................59 4.5.5 Routing ........................64 Firewall..........................67 4.6.1 Anti ARP Spoofing ....................67 4.6.2 Attack Defense ......................70 4.6.3 MAC Filtering ......................72 4.6.4 Access Control......................73 Services ..........................79 4.7.1 PPPoE Server......................79 4.7.2 E-Bulletin .........................86 4.7.3 Dynamic DNS ......................87 4.7.4...

  • Page 6: Package Contents

    Package Contents The following items should be found in your package:  One TL-R470T+ Load Balance Broadband Router One Power cord   One Ethernet Cable  Quick Installation Guide  Resource CD Note: ● Make sure that the package contains the above items. If any of the listed items are damaged or missing, please contact with your distributor.

  • Page 7: Chapter 1 About This Guide

    Chapter 1 About this Guide This User Guide contains information for setup and management of TL-R470T+ Load Balance Broadband Router. Please read this guide carefully before operation. 1.1 Intended Readers This Guide is intended for Network Engineer and Network Administrator. 1.2 Conventions In this Guide the following conventions are used: The router or TL-R470T+ mentioned in this Guide stands for TL-R470T+ Load Balance...
  • Page 8 Appendix B FAQ Provides the possible solutions to the problems that may occur during the installation and operation of the router. Appendix C Glossary Lists the glossary used in this guide.

  • Page 9: Chapter 2 Introduction

    Chapter 2 Introduction Thanks for choosing the Load Balance Broadband Router TL-R470T+. 2.1 Overview of the Router The Load Balance Broadband Router TL-R470T+ from TP-LINK possesses excellent data processing capability and multiple powerful functions including Load Balance, Access Control, Bandwidth Control, Session Limit, PPPoE Server and so on, which consumedly meet the needs of small and medium enterprises, hotels and communities with volumes of users demanding an efficient and easy-to-manage network with high security.

  • Page 10: Features

    + Featured Link Backup to switch all the new sessions from dropped line automatically to another for keeping an always on-line network. Easy-to-use  + Providing easy-to-use GUI with clear configuration steps and detailed help information for the users to configure the router simply. + Helping administrators to monitor the whole network status and take actions to malfunctions according to the recorded log information.

  • Page 11: Appearance

    Security  Built-in firewall supporting URL/MAC Filtering  Supports Access Control  Supports Attack Defense Supports IP-MAC Binding   Supports GARP (Gratuitous ARP) 2.3 Appearance 2.3.1 Front Panel The front panel of TL-R470T+ is shown as the following figure. LEDs ...
  • Page 12 AC Power Receptacle  Connect the female connector of the power cord to this power receptacle, and the male connector to the AC power outlet. Please make sure the voltage of the power supply meets the requirement of the input voltage (100-240V~ 50/60Hz).

  • Page 13: Chapter 3 Quick Installation Guide

    Chapter 3 Quick Installation Guide After connecting the TL-R470T+ router into your network, you should configure it. This chapter describes how to configure the basic functions of your TL-R470T+ Load Balance Broadband Router. These procedures only take you a few minutes. You can access the Internet via the router immediately after it has been successfully configured.
  • Page 14 Step 2: In the next screen, right click Local Area Connection (LAN), and then select Properties. Figure 3-2 Step 3: In the next screen, select General tab, highlight Internet Protocol (TCP/IP), and then click the Properties button. Figure 3-3...
  • Page 15 Step 4: Configure the IP address as shown in Figure 3-4. After that, click OK. Figure 3-4 Note: You can configure the PC to get an IP address automatically, select “Obtain an IP address automatically” and “Obtain DNS server address automatically” in the screen above. For Windows 98 OS or earlier, the PC and router may need to be restarted.

  • Page 16: Login

    Figure 3-6 You can check it by following the steps below: Note: ● Is the connection between your PC and the router correct? The LEDs of LAN port which you link to the device and the LEDs on your PC's adapter should be lit. ●...
  • Page 17 Note: If the above screen (Figure 3-7) does not prompt, it means that your web-browser may be set to a proxy. Choose Tools menu→Internet Options→Connections→LAN Settings, in the screen that appears, cancel the Using Proxy checkbox, and click OK to finish it. After a successful login, the “Quick Setup”...
  • Page 18 Figure 3-10 WAN Port Select the connection type provided by your ISP as the Figure 3-11 shows. Three popular types are provided here. For other connection types, please refer to the 4.3.1 WAN. Figure 3-11 WAN Connection Type If you choose PPPoE, you will see the screen as the Figure 3-12 shows. Enter the Account Name and Password provided by your ISP (Internet Service Provider).
  • Page 19 Figure 3-12 WAN Connection Type - PPPoE Click <Next> to dial up, and the process will take a few minutes. The process of configuring the network parameters is shown as Figure 3-14. If you close the screen during the process, the configuration will still be continued in the background.
  • Page 20 Figure 3-14 WAN Connection Type - Dynamic IP If you choose Static IP, you should enter the detailed IP information provided by your ISP in Figure 3-15. Figure 3-15 WAN Connection Type - Static IP Then click <Next>. The process for configuring the network parameters is shown as Figure 3-16. If you close the screen during the process, the configuration will still be continued in the background.
  • Page 21 Figure 3-16 WAN Connection Type - Static IP Connecting After that, you will see the next screen. Click <Finish> to complete the quick installation or click <Continue> to configure other WAN ports. Figure 3-17 Configuration Completed -16-...

  • Page 22: Chapter 4 Configuration

    Chapter 4 Configuration 4.1 Status The Status page shows the system information, the port connection status and other information related to this router. Choose the menu Status to load the following page. Figure 4-1 Status -17-...

  • Page 23: Quick Setup

    4.2 Quick Setup Please refer to the Chapter 3 Quick Installation Guide. 4.3 Network 4.3.1 WAN 4.3.1.1 WAN Mode TL-R470T+ provides four available WAN ports. You can set the number of WAN ports on this page. Choose the menu Network→WAN→WAN Mode to load the following page. Figure 4-2 WAN Mode ...
  • Page 24 Tips: ● It’s allowed to set the IP addresses of multiple WAN ports within the same subnet. However, to guarantee a normal communication, make sure that the WAN ports can access the same network, such as Internet or a local area network. ●...
  • Page 25 Default Gateway: Optional. Enter the Gateway assigned by your ISP. MTU: MTU (Maximum Transmission Unit) is the maximum data unit transmitted by the physical network. It can be set in the range of 576-1500. The default MTU is 1500. You are recommended to keep the default value if no other MTU value is provided by your ISP.
  • Page 26 Figure 4-4 WAN – Dynamic IP The following items are displayed on this screen:  Dynamic IP Connection Type: Select Dynamic IP if your ISP assigns the IP address automatically. Click <Obtain> to get the IP address from your ISP’s server. Click <Release>...
  • Page 27 Get IP Address by The broadcast requirement may not be supported by a few ISPs. Unicast: Select this option if you can not get the IP address from your ISP even with a normal network connection. This option is not required generally.
  • Page 28 Primary DNS: Displays the IP address of your ISP’s Primary DNS. Secondary DNS: Displays the IP address of your ISP’s Secondary DNS. PPPoE If your ISP (Internet Service Provider) has provided the account information for the PPPoE connection, please choose the PPPoE/Russian PPPoE connection type (Used mainly for DSL Internet service). Figure 4-5 WAN - PPPoE -23-...
  • Page 29 The following items are displayed on this screen:  PPPoE Settings Connection Type: Select PPPoE/Russian PPPoE if your ISP provides xDSL Virtual Dial-up connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address.
  • Page 30 ISP Address: Optional. Enter the ISP address provided by your ISP. It's null by default. Optional. Enter the Service Name provided by your ISP. It's null by Service Name: default. Primary DNS: Enter the IP address of your ISP’s Primary DNS. Optional.
  • Page 31  PPPoE Status Displays the status of PPPoE connection. Status: “Disabled” indicates that the PPPoE connection type is  not applied. “Connecting” indicates that the router is obtaining the IP  parameters from your ISP. “Connected” indicates that the router has successfully ...
  • Page 32 L2TP If your ISP (Internet Service Provider) has provided the account information for the L2TP connection, please choose the L2TP/Russian L2TP connection type. Figure 4-6 WAN - L2TP -27-...
  • Page 33 The following items are displayed on this screen:  L2TP Settings Connection Type: Select L2TP/Russian L2TP if your ISP provides a L2TP connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address.
  • Page 34 IP Address: If Static IP is selected, configure the IP address of WAN port. If Dynamic IP is selected, the IP address of WAN port obtained is displayed. Subnet Mask: If Static IP is selected, configure the subnet mask of WAN port.
  • Page 35 Primary DNS: Displays the IP address of your ISP’s Primary DNS. Secondary DNS: Displays the IP address of your ISP’s Secondary DNS. PPTP If your ISP (Internet Service Provider) has provided the account information for the PPTP connection, please choose the PPTP/Russian PPTP connection type. Figure 4-7 WAN - PPTP The following items are displayed on this screen: -30-...
  • Page 36  PPTP Settings Select PPTP/Russian PPTP if your ISP provides a PPTP Connection Type: connection. Click <Connect> to dial-up to the Internet and obtain the IP address. Click <Disconnect> to disconnect the Internet and release the current IP address. Account Name: Enter the Account Name provided by your ISP.
  • Page 37 Subnet Mask: If Static IP is selected, configure the subnet mask of WAN port. If Dynamic IP is select, the subnet mask of WAN port obtained is displayed. Default Gateway: If Static IP is selected, configure the default gateway. If Dynamic IP is selected, the obtained default gateway is displayed.
  • Page 38 BigPond If your ISP (Internet Service Provider) has provided the account information for the BigPond connection, please choose the BigPond connection type. Figure 4-8 WAN – Bigpond The following items are displayed on this screen:  BigPond Settings Select BigPond if your ISP provides a BigPond connection. Click Connection Type: <Connect>...
  • Page 39 Password: Enter the Password provided by your ISP. If you are not clear, please consult your ISP. Enter the address of authentication server. It can be IP address or Auth Server: server name. Auth Domain: Enter the domain name of authentication server. It's only required when the address of Auth Server is a server name.

  • Page 40: Lan

    network is connected well. Consult your ISP if this problem remains. IP Address: Displays the IP address assigned by your ISP. Displays the Subnet Mask assigned by your ISP. Subnet Mask: Default Gateway: Displays the IP address of the default gateway assigned by your ISP.
  • Page 41 Note: If the LAN IP address is changed, you must use the new IP address to login to the router. To guarantee a normal communication, please be sure that the Gateway address and the Subnet Mask of the Hosts are consistent with that of the router accordingly. 4.3.2.2 DHCP The router with its DHCP (Dynamic Host Configuration Protocol) server enabled can automatically...

  • Page 42: Dhcp Reservation

    Lease Time: Specify the length of time the DHCP server will reserve the IP address for each computer. After the IP address expired, the client will be automatically assigned a new one. Default Gateway: Optional. Enter the Gateway address to be assigned. It is recommended to enter the IP address of the LAN port of the router.
  • Page 43 Figure 4-12 DHCP Reservation The following items are displayed on this screen:  DHCP Reservation MAC Address: Enter the MAC address of the computer for which you want to reserve the IP address. Enter the reserved IP address. IP Address: Description: Optional.

  • Page 44: Mac Address

    4.3.3 MAC Address The MAC (Media Access Control) address, as the unique identifier of the router in network, does not need to be changed commonly. Set the MAC Address for LAN port: In a complex network topology with all the ARP bound devices, if you want to use TL-R470T+ instead of the current router in a network node, you can just set the MAC address of TL-R470T+’s LAN port the same to the MAC address of the previous router, which can avoid all the devices under this network node to update their ARP binding tables.

  • Page 45: Switch

    MAC Clone: It’s only available for WAN port. Click the <Restore Factory MAC> button to restore the MAC address to the factory default value or click the <Clone Current PC’s MAC> button to clone the MAC address of the PC you are currently using to configure the router. Then click <Save>...

  • Page 46: Port Mirror

    The following items are displayed on this screen:  Statistics Displays the number of normal unicast packets received or transmitted Unicast: on the port. Broadcast: Displays the number of normal broadcast packets received or transmitted on the port. Displays the number of flow control frames received or transmitted on Pause: the port.
  • Page 47 Figure 4-15 Port Mirror The following items are displayed on this screen:  General Enable Port Mirror: Check the box to enable the Port Mirror function. If unchecked, it will be disabled. Mode: Select the mode for the port mirror function. Options include: Ingress: When this mode is selected, only the incoming packets ...

  • Page 48: Rate Control

    Tips: If both the mirrored port and the mirroring port are the LAN ports, these two LAN ports should be in the same Port VLAN. For example, if port 3 (the mirroring port) and port 4 (the mirrored port) are the LAN ports, the Port Mirror function can take effect only when port 3 and port 4 are in the same Port VLAN.

  • Page 49: Port Config

    Figure 4-16 Rate Control The following items are displayed on this screen:  Rate Control Displays the port number. Port: Ingress Limit: Specify whether to enable the Ingress Limit feature. Ingress Rate: Specify the limit rate for the ingress packets. Egress Limit: Specify whether to enable Egress Limit feature.

  • Page 50: Port Status

    Figure 4-17 Port Config The following items are displayed on this screen:  Port Config Status: Specify whether to enable the port. The packets can be transported via this port after being enabled. Flow Control: Allows you to enable/disable the Flow Control function. Select the Negotiation Mode for the port.

  • Page 51: User Group

    4.3.4.6 Port VLAN A VLAN (Virtual Local Area Network) is a network topology configured according to a logical scheme rather than the physical layout, which allows you to divide the physical LAN into multiple logical LANs so as to control the communication among the ports . The VLAN function can prevent the broadcast storm in LANs and enhance the network security.

  • Page 52: Group

    4.4.1 Group On this page you can define the group for management. Choose the menu User Group→Group to load the following page. Figure 4-20 Group Configuration The following items are displayed on this screen: Group Config  Specify a unique name for the group. Group Name: Description: Give a description for the group.

  • Page 53: View

    The following items are displayed on this screen: User Config  User Name: Specify a unique name for the user. Enter the IP Address of the user. It cannot be the network address or IP Address: broadcast address of the port. Description: Give a description to the user for identification.

  • Page 54: Advanced

    View Config  Select the desired view for configuration. View: User Name: Select the name of the desired User. Displays the Groups that the User can join. Available Group: Selected Group: Displays the Groups to which this User belongs. Select the name of the desired Group. Group Name: Group Structure: Click this button to view the tree structure of this group.

  • Page 55: Virtual Server

    Figure 4-23 NAT Setup The following items are displayed on this screen: NAPT  Enter the source port range between 2049 and 65000, the span of which Source Port Range: must be not less than 100. NAT-DMZ  NAT-DMZ: Enable or disable NAT-DMZ. NAT DMZ is a special service of NAT application, which can be considered as a default forwarding rule.
  • Page 56 Figure 4-24 Virtual Server The following items are displayed on this screen:  Virtual Server Name: Enter a name for Virtual Server entries. Up to 28 characters can be entered. Enter the service port or port range provided by router for accessing External Port: external network.

  • Page 57: Port Triggering

    Note: ● The External port and Internal Port should be set in the range of 1-65535. ● The external ports of different entries should be different, whereas the internal ports can be the same. List of Rules  In this table, you can view the information of the entries and edit them by the Action buttons. The first entry in Figure 4-24 indicates: This is a Virtual Server entry named host1, all the TCP data packets from Internet to port 65534-65535 of the router will be redirected to the port 65534-65535 of the LAN host with IP address of 192.168.0.103, and this entry is activated.
  • Page 58  Port Triggering Enter a name for Port Triggering entries. Up to 28 characters can be Name: entered. Trigger Port: Enter the trigger port number or range of port numbers. Only when the trigger port initiates connection will all the corresponding incoming ports open and provide service for the applications, otherwise the incoming ports will not open.

  • Page 59: Traffic Control

    Choose the menu Advanced→NAT→ALG to load the following page. Figure 4-26 ALG The following items are displayed on this screen:  FTP ALG: Enable or disable FTP ALG. The default setting is enabled. It is recommended to keep the default setting if no special requirement.
  • Page 60 Figure 4-27 Configuration The following items are displayed on this screen:  General Disable Bandwidth Select this option to disable Bandwidth Control. Control: Enable Bandwidth Select this option to enable Bandwidth Control all the time. Control all the time: With this option selected, the Bandwidth Control will take effect when the Enable Bandwidth Control When:...

  • Page 61: Bandwidth Control

     Interface Bandwidth Interface: Displays the current enabled WAN port(s). The Total bandwidth is equal to the sum of bandwidth of the enabled WAN ports. Displays the bandwidth of each WAN port for transmitting data. The Upstream Bandwidth: Upstream Bandwidth of WAN port can be configured on WAN page. Downstream Displays the bandwidth of each WAN port for receiving data.
  • Page 62  Bandwidth Control Rule Direction: Select the data stream direction for the entry. The direction of arrowhead indicates the data stream direction WAN-ALL means all WAN ports through which the data flow might pass. Individual WAN port cannot be selected after WAN-ALL rules are added. Group: Select the group to define the controlled users.

  • Page 63: Session Limit

    Note: ● The premise for single rule taking effect is that the bandwidth of the interface for this rule is sufficient and not used up. ● It is impossible to satisfy all the guaranteed bandwidth if the total guaranteed bandwidth specified by all Bandwidth Control rules for certain interface exceeds the physical bandwidth of this interface.

  • Page 64: Load Balance

     Session Limit Group: Select a group to define the controlled user. Max. Sessions: Enter the max. Sessions for the users. Give a description for the entry. Description: Activate or inactivate the entry. Status: List of Session Limit  You can view the information of the entries and edit them by the Action buttons. The first entry in Figure 4-29 indicates: The amount of maximum sessions for the hosts within group1 is 100 and this entry is enabled.

  • Page 65: Policy Routing

    Figure 4-31 Configuration With the box before Enable Application Optimized Routing checked, the router will consider the source IP address and destination IP address of the packets as a whole and record the WAN port they pass through. And then the packets with the same source IP address and destination IP address or destination port will be forwarded to the recorded WAN port.

  • Page 66: Link Backup

    The following items are displayed on this screen: General  Protocol: Select the protocol for the entry in the drop-down list. If the protocol you want to set is not in the list, you can add it to the list on 4.5.4.4 Protocol page.
  • Page 67 On this page, you can configure the Link Backup function based on actual need to reduce the traffic burden of WAN port and improve the network efficiency. Choose the menu Advanced→Load Balance→Link Backup to load the following page. Figure 4-33 Link Backup The following items are displayed on this screen: ...
  • Page 68 Timing: Link Backup will be enabled if the specified effective time is reached. All the traffic on the primary WAN will switch to the backup WAN at the beginning of the effective time; the traffic on the backup WAN will switch to the primary WAN at the ending of the effective time.

  • Page 69: Routing

    Figure 4-34 Protocol The following items are displayed on this screen:  Protocol Name: Enter a name to indicate a protocol. The name will display in the drop-down list of Protocol on Access Rule page. Enter the Number of the protocol in the range of 0-255. Number: ...
  • Page 70 Choose the menu Advanced→Routing→Static Route to load the following page. Figure 4-35 Static Route The following items are displayed on this screen:  Static Route Destination: Enter the destination host the route leads to. Enter the Subnet Mask of the destination network. Subnet Mask: Next Hop: Enter the gateway IP address to which the packet should be sent next.
  • Page 71 The first entry in Figure 4-35 indicates: If there are packets being sent to a device with IP address of 211.162.1.0 and subnet mask of 255.255.255.0, the router will forward the packets from WAN1 port to the next hop of 211.200.1.1. Application Example Network Requirements LAN1 is under the router and it uses network segment 192.168.0.0 /24.

  • Page 72: Firewall

    Add a static routing rule for LAN3 by referring to step 2. The static routing rules are shown in the following figure. 4.6 Firewall 4.6.1 Anti ARP Spoofing ARP (Address Resolution Protocol) is used to analyze and map IP addresses to the corresponding MAC addresses so that packets can be delivered to their destinations correctly.
  • Page 73 Figure 4-36 IP-MAC Binding The following items are displayed on this screen: General  It is recommended to check all the options. You should import the IP and MAC address of the host to List of IP-MAC Binding and enable the corresponding entry before enabling “Permit the packets matching the IP-MAC Binding entries only”.

  • Page 74: Arp Scanning

     List of Rules You can view the information of the entries and edit them by the Action buttons. The first entry in Figure 4-36 indicates: The IP address of 192.168.1.101 and MAC address of 00-19-66-83-53-CF have been bound and this entry is activated. Note: If all the entries in the binding list are disabled and “Permit the packets of IP-MAC Binding entries only”...

  • Page 75: Attack Defense

    To bind the entries in the list, check these entries and click the <Import> button, then the settings will take effect if the entries do not conflict with the existed entries. Note: If the local hosts suffered from ARP attack, you cannot add IP-MAC Binding entries on this page. Please add entries manually on 4.6.1.1 IP-MAC Binding.
  • Page 76 Figure 4-39 Attack Defense The following items are displayed on this screen:  General Flood attack is a kind of commonly used DoS (Denial of Service), Flood Defense: which including TCP SYN, UDP, ICMP and so on. It is recommended to check all the Flood Defense options and specify the corresponding thresholds.

  • Page 77: Mac Filtering

    Packet Anomaly Packet Anomaly refers to the abnormal packets. It is Defense: recommended to select all the Packet Anomaly Defense options. With this box checked, the router will record the defense logs. Enable Attack Defense Logs: MAC Filtering 4.6.3 On this page, you can control the access to the Internet of local host by specifying their MAC addresses.

  • Page 78: Access Control

     List of Rules You can view the information of the entries and edit them by the Action buttons. 4.6.4 Access Control 4.6.4.1 URL Filtering URL (Uniform Resource Locator) specifies where an identified resource is available and the mechanism for retrieving it. URL Filter functions to filter the Internet URL address, so as to provide a convenient way for controlling the access to Internet from LAN hosts.
  • Page 79  URL Filtering Rule Select the range in which the URL Filtering takes effect: Object: Group: URL Filtering will take effect to all the users in group.  ANY: URL Filtering will take effect to all the users.  Select the mode for URL Filtering. “Keywords’’ indicates that all Mode: the URL addresses including the specified keywords will be filtered.
  • Page 80 4.6.4.2 Web Filtering On this page, you can filter the desired web components. Choose the menu Firewall→Access Control→Web Filtering to load the following page. Figure 4-42 Web Filtering Check the box before Enable Web Filtering and select the web components to be filtered. 4.6.4.3 Access Rules Choose the menu Firewall→Access Control→Access Rules to load the following page.
  • Page 81 Figure 4-43 Access Rule The following items are displayed on this screen:  Access Rules Policy: Select a policy for the entry: Block: When this option is selected, the packets obeyed the rule  will not be allowed to pass through the router. Allow: When this option is selected, the packets obeyed the rule ...
  • Page 82 Interface: Select interface for the entry. The entry will take effect when the interface to which the data is flowing is selected. WAN or LAN refers to all the WAN or LAN interfaces. Source: Select the Source IP Range for the entries, including the following three ways: IP/MASK: Enter an IP address or subnet mask.
  • Page 83 Note: ● For the users in the private network and not being set access rule, the default Policy is Allow. ● To specify all IP addresses, type “0.0.0.0 / 32” in the Policy field. ● For detailed setting of subnet mask, please refer to Appendix B FAQ.

  • Page 84: Services

    Protocol: Select the protocol for the service. The system predefined protocols include TCP, UDP and TCP/UDP. Enter the start and end ports to make a destination port range for the Dest. Port: service. The start port number cannot be greater than the end port number.
  • Page 85 Figure 4-45 General The following items are displayed on this screen: General  Specify whether to enable the PPPoE Server function. PPPoE Server: Dial-up Access Only: Specify whether to enable the Dial-up Access Only function. If enabled, only the Dial-in Users and the user with Exceptional IP can access the Internet.
  • Page 86 Idle Timeout: Enter the maximum idle time. The session will be terminated after it has been inactive for this specified period. It can be 0-10080 minutes. If you want your Internet connection to remain on at all times, enter 0 in the Idle Timeout field.
  • Page 87 Figure 4-46 IP Address Pool The following items are displayed on this screen: IP Address Pool  Pool Name: Specify a unique name to the IP Address Pool for identification and management purposes. Specify the start and the end IP address for IP Pool. The start IP address IP Address Range: should not exceed the end address and the IP address ranges must not overlap.
  • Page 88 Figure 4-47 Account The following items are displayed on this screen: Account  Enter the account name. This name should not be the same with the Account Name: one in L2TP/PPTP connection settings. Password: Enter the password. IP Address Assigned Select the IP Address Assigned Mode for IP assignment.
  • Page 89 Description: Enter the description for management and search purposes. Up to 28 characters can be entered. Activate or inactivate the entry. Status: MAC Binding: Select a MAC Binding type from the pull-down list. Options include: Disable: Select this option to disable the MAC Binding function. ...
  • Page 90 Figure 4-48 Exceptional IP The following items are displayed on this screen: Exceptional IP  IP Address Range: Specify the start and the end IP address to make an exceptional IP address range. This range should be in the same IP range with LAN port of the router.

  • Page 91: E-Bulletin

    4.7.2 E-Bulletin With E-Bulletin function, bulletin information can be released to the specified users. On this page you can edit the bulletin content and specify the receiving user group. Choose the menu Services→E-Bulletin to load the following page. Figure 4-50 E-Bulletin The following items are displayed on this screen: General ...

  • Page 92: Dynamic Dns

    Enable Logs: Specify whether to log the E-Bulletin. E-Bulletin  Title: Enter a title for the bulletin. Enter the content of the bulletin. Content: Object: Select the object of this bulletin. Options include: ANY: The bulletin will be released to all the users and the PCs on the ...
  • Page 93 As many ISPs use DHCP to assign public IP addresses in WAN, the public IP address assigned to the client is unfixed. In this way, it’s very difficult for other clients to get the latest IP address of this client for access.
  • Page 94 Dyndns DDNS  Enter the Account Name of your DDNS account. If you have not registered, Account Name: click <Go to register> to go to the website of Dyndns for register. Password: Enter the password of your DDNS account. Domain Name: Enter the Domain Name that you registered with your DDNS service provider.
  • Page 95 Figure 4-52 NO-IP DDNS The following items are displayed on this screen: No-IP DDNS  Account Name: Enter the Account Name of your DDNS account. If you have not registered, click <Go to register> to go to the website of No-IP for register. Enter the password of your DDNS account.
  • Page 96 4.7.3.3 PeanutHull On this page you can configure PeanutHull DDNS client. Choose the menu Services→Dynamic DNS→PeanutHull to load the following page. Figure 4-53 PeanutHull DDNS The following items are displayed on this screen: PeanutHull DDNS  Account Name: Enter the Account Name of your DDNS account. If you have not registered, click <Go to register>...
  • Page 97 DDNS Status: Displays the current status of DDNS service Offline: DDNS service is disabled.  Connecting: client is connecting to the server.  Online: DDNS works normally.  Authorization fails: The Account Name or Password is incorrect.  Please check and enter it again. Domain Name: Displays the domain names obtained from the DDNS server.

  • Page 98: Upnp

    The following items are displayed on this screen: Comexe DDNS  Account Name: Enter the Account Name of your DDNS account. If you have not registered, click <Go to register> to go to the website of Comexe for register. Password: Enter the password of your DDNS account.

  • Page 99: Maintenance

    Figure 4-55 UPnP The following items are displayed on this screen:  General UPnP Function: Enable or disable the UPnP function globally.  List of UPnP Mapping After UPnP is enabled, all UPnP connection rules will be displayed in the list of UPnP Mapping. The NO.1 entry in Figure 4-55 indicates: TCP data received on port 12856 of the WAN port in the router will be forwarded to port 12856 in 192.168.0.101 server in LAN.
  • Page 100 Figure 4-56 Administrator The following items are displayed on this screen:  Administrator Current User Name: Enter the current user name of the router. Enter the current password of the router. Current Password: New User Name: Enter a new user name for the router. Enter a new password for the router.
  • Page 101 Figure 4-57 Login Parameter The following items are displayed on this screen:  General Web Management Port: Enter the Web Management Port for the router. Enter the Telnet Management Port for the router. Telnet Management Port: Web Idle Timeout: Enter a timeout period that the router will log you out of the Web-based Utility after a specified period (Web Idle Timeout) of inactivity.

  • Page 102: Remote Management

    Then type the corresponding port number in Web Management Port and Telnet Management Port fields as the following figure shows. Finally, start the web browser and type 210.10.10.50 in the URL field to log in the Web management page of the router. 4.8.1.3 Remote Management On this page you can configure the Remote Management function.

  • Page 103: Management

    The first entry in Figure 4-58 indicates that: The hosts with IP address in subnet of 192.168.2.0/24 are allowed to access the router and this entry is activated. 4.8.2 Management 4.8.2.1 Factory Defaults Choose the menu Maintenance→Management→Factory Defaults to load the following page. Figure 4-59 Factory Defaults Click the <Restore to Factory Defaults>...

  • Page 104: Firmware Upgrade

     Import Click the <Browse> button to locate the update file for the device, or enter the exact path to the saved file in the text box. Then click the <Import> button to restore the saved setting. Note: ● To avoid any damage, please don’t power down the router while being restored. ●...

  • Page 105: Statistics

    Note: ● After upgrading, the device will reboot automatically. ● To avoid damage, please don't turn off the device while upgrading. ● You are suggested to backup the configuration before upgrading. 4.8.3 Statistics 4.8.3.1 Interface Traffic Statistics Interface Traffic Statistics screen displays the detailed traffic information of each port and extra information of WAN ports.

  • Page 106: Diagnostics

    IP Fragment Rx: Displays the amount of IP Fragments received by WAN port. Abnormal IP Packets Rx: Displays the rate for transmitting data frames. 4.8.3.2 IP Traffic Statistics IP Traffic Statistics screen displays the detailed traffic information of each PC on LAN. Choose the menu Maintenance→Statistics→IP Traffic Statistics to load the following page.
  • Page 107 Figure 4-65 Diagnostics The following items are displayed on this screen:  Ping Destination IP/Domain: Enter destination IP address or Domain name here. Then select a port for testing, if you select “Auto”, the router will select the interface of destination automatically. After clicking <Start> button, the router will send Ping packets to test the network connectivity and reachability of the host and the results will be displayed in the box below.
  • Page 108 of destination automatically. After clicking the <Start> button, the router will send Tracert packets to test the connectivity of the gateways during the journey from the source to destination of the test data and the results will be displayed in the box below. 4.8.4.2 Online Detection On this page, you can detect the WAN port is online or not.

  • Page 109: Time

    Detection: Displays whether the Online Detection is enabled. WAN Status: Display the detecting results. Time 4.8.5 System Time is the time displayed while the Router is running. On this page you can configure the system time and the settings here will be used for other time-based functions like Access Rule, PPPoE and Logs.

  • Page 110: Logs

    Synchronize with With this option selected, the administrator PC’s clock is utilized. PC’S Clock: Note: ● If Get GMT function cannot be used properly, please add an entry with UDP port of 123 to the firewall software of the PC. ●...
  • Page 111 The Logs of switch are classified into the following eight levels. Level Description Severity The system is unusable. emergencies Action must be taken immediately. alerts Critical conditions critical Error conditions errors Warnings conditions warnings Normal but significant conditions notifications Informational messages informational Debug-level messages debugging...

  • Page 112: Appendix A Hardware Specifications

    Appendix A Hardware Specifications IEEE 802.3, 802.3u Standards and Protocols TCP/IP, PPPoE, DHCP, ICMP, NAT, SNTP,HTTP,DNS One 10/100 Auto-Negotiation WAN RJ45 port (Auto MDI/MDIX) Three adjustable 10/100M Auto-Negotiation WAN/LAN RJ45 ports (Auto Ports MDI/MDIX) One 10/100M Auto-Negotiation LAN RJ45 port (Auto MDI/MDIX) 10Base-T: UTP/STP of Cat.

  • Page 113: Appendix Bfaq

    Appendix B FAQ Q1. What can I do if I cannot access the web-based configuration page? For the first login, please try the following steps: Make sure the cable is well connected to the LAN port of the router. The corresponding LED should flash or be solid light.
  • Page 114 Q3: What can I do if the router with the remote management function enabled cannot be accessed by the remote computer? Make sure that the IP address of the remote computer is in the subnet allowed to remotely access the router. If the router’s management port has been modified, please log into the router with the new address, such as http://192.168.0.1:XX (“XX”...

  • Page 115: Appendix C Glossary

    Appendix C Glossary Glossary Description Application Level Gateway (ALG) is application specific translation agent that allows an application on a host in one ALG （ Application Layer address realm to connect to its counterpart running on a host in Gateway） different realm transparently.
  • Page 116 Glossary Description H.323 allows dissimilar communication devices to communicate with each other by using a standardized communication H.323 protocol. H.323 defines a common set of CODECs, call setup and negotiating procedures, and basic data transport methods. The protocol used by Web browsers and Web servers to HTTP（Hypertext Transfer transfer files, such as text and graphic files.
  • Page 117 Glossary Description Standardized data link layer address that is required for every port or device that connects to a LAN. Other devices in the MAC address（Media network use these addresses to locate specific ports in the Access Control address） network and to create and update routing tables and data structures.
  • Page 118 Glossary Description TCP（Transfer Control Connection-oriented transport layer protocol that provides Protocol） reliable full-duplex data transmission. TCP/IP（Transmission Common name for the suite of protocols to support the Control Protocol/ Internet construction of worldwide Internetworks. TCP and IP are the two Protocol） best-known protocols in the suite.

Table of Contents