1. Manuals
  2. Brands
  3. TeleWell Manuals
  4. Network Router
  5. TW-EAV510 AC v2
  6. User manual

TeleWell TW-EAV510 AC User Manual

Adsl2+/vdsl2 wlan 802.11ac router
Hide thumbs Also See for TW-EAV510 AC:
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual, Quick Manual
TW-EAV510 AC
ADSL2+/VDSL2 WLAN 802.11ac
Router
User Manual
V1.5
CE

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the TW-EAV510 AC and is the answer not in the manual?

Questions and answers

Related Manuals for TeleWell TW-EAV510 AC

Summary of Contents for TeleWell TW-EAV510 AC

  • Page 1 TW-EAV510 AC ADSL2+/VDSL2 WLAN 802.11ac Router User Manual V1.5...

  • Page 2: Table Of Contents

    Directory Introduction ......................... 5 Introduction to your Router ................5 Features ......................7 Physical Interface ....................8 Package Contents ..................... 8 Device Description ....................10 Basic Installation ...................... 12 Network Configuration ................... 13 Factory Default Settings ..................17 Web Interface (Username and Password) ............17 Device LAN IPv4 settings ................17 DHCP server for IPv4 ..................17 Configuration ......................17 Configuration via Web Interface .
  • Page 3 PTM(VDSL) WAN ....................32 ATM(ADSL) WAN ....................34 DSL Settings ......................35 3G/4G LTE Settings ..................... 36 VPN ........................38 PPTP ......................38 L2TP ......................47 IPSec ......................52 Services ........................57 DNS ........................57 Dynamic DNS ....................57 Firewall ....................... 58 ALG ......................58 IP/Port Filtering................... 59 MAC Filtering ....................60 Port Forwarding ..................60 URL Blocking ....................61 Domain Blocking ..................62 DMZ ......................63 DoS ........................63 UPnP ........................64 Samba ......................... 64 Printer Server ..................... 64 Advance .
  • Page 4 IP/Port Filtering................... 74 Diagnostics ......................... 75 Ping ........................75 Management ......................75 Backup/Restore ....................75 Password ......................76 Firmware Upgrade ....................76 ACL ........................77 Time Zone ......................78 Auto Reboot ....................... 78 Statistics ......................79 Interface ..................... 79 DSL ......................79 Language ......................80 Reboot ........................ 81 Logout ........................ 81...

  • Page 5: Introduction

    Introduction Introduction to your Router TW-EAV510 AC WLAN 802.11ac Router is a residential/small office gateway, especially designed for those who need to have the data, video and file sharing services beyond his home and office. It is an all-in-one advanced device integrating Wireless, Ethernet, 3G/4G/LTE, and NAS (Network Attached Storage) in one unit.
  • Page 6 Dual stack means the router is capable of running IPv4 and IPv6 in parallel during the transition period. With TeleWell IPv6 enabled devices. Virtual AP A “Virtual Access Point” is a logical entity that exists within a physical Access Point (AP).

  • Page 7: Features

    Device can be upgraded to the latest firmware through the WEB based GUI. Features Network Protocols and Features IPv4 or IPv4 / IPv6 Dual Stack NAT, DMZ and ALG IPv6 Stateless / Stateful Address Auto-configuration IPv6 Router Advertisement DHCPv6 Static Route Universal Plug and Play (UPnP) Compliant Dynamic Domain Name System (DDNS) Virtual Server, DMZ and one-to-one NAT...

  • Page 8: Physical Interface

    Switch One USB 2.0 for LTE dongle / Printer / Storage WLAN On&OFF / WPS / Factory default reset button Power switch Power jack WLAN: 2 x 5 dBi external antenna Package Contents TeleWell TW-EAV510 AC ADSL2+/VDSL2 WLAN 802.11ac Router...

  • Page 9: Important Note For Using This Router

    User Manual RJ-45 Cat. 6 STP Ethernet cable Power adapter Important note for using this router Do not use the router in high humidity or high temperatures Do not use the same power source for the router as other equipment. Do not open or repair the case yourself.

  • Page 10: Device Description

    Device Description The Front LEDs Status Meaning Steady green Power Steady Green 2.4G WiFi is ready for using Flashing Green There is no STAs association 2.4G Rapid Flashing Green There is STAs association connection and traffic 2.4G WiFi is disabled Steady Green 5G WiFi is ready for using Flashing Green...

  • Page 11: The Rear Ports

    Steady Green Device has a public IP via either static/ DHCP/ or IPCP Rapid Flashing Green IP connected and traffic passing IP or PPPoE session is idle and dropped, or DSL not connected The Rear Ports Port Meaning Connect the supplied Telephone cable to DSL port LINE Connect one end of Ethernet cable to the WAN port when connecting other fixed line modem...

  • Page 12: Basic Installation

    Basic Installation The router can be configured through your web browser. A web browser is included as a standard application in the following operating systems: Linux, Mac OS, Windows 8 / 7 / 98 / NT / 2000 / XP / Me / Vista, etc. The product provides an easy and user-friendly interface for configuration. Please check your PC network components. The TCP/IP protocol stack and Ethernet network adapter must be installed. If not, please refer to your Windows-related or other operating system manuals. There are ways to connect the router, either through an external repeater hub or connect directly to your PCs. However, make sure that your PCs have an Ethernet interface installed properly prior to connecting the router device. You ought to configure your PCs to obtain an IP address through a DHCP server or a fixed IP address that must be in the same subnet as the router. The default IP address of the router is 192.168.0.254 and the subnet mask is 255.255.255.0 (i.e. any attached PC must be in the same subnet, and have an IP address in the range of 192.168.0.1 to 192.168.0.253). The best and easiest way is to configure the PC to get an IP address automatically from the router using DHCP. If you encounter any problem accessing the router web interface it is advisable to uninstall your firewall program on your PCs, as they can cause problems accessing the IP address of the router. Users should make their own decisions on what is best to protect their network. Please follow the following steps to configure your PC network environment. Any TCP/IP capable workstation can be used to communicate with or through this router. To configure other types of workstations, please consult your manufacturer documentation.

  • Page 13: Network Configuration

    Network Configuration Configuring a PC in Windows 7 Go to Start. Click on Control Panel. Then click on Network and Internet. When the Network and Sharing Center window pops up, select and click on Change adapter settings on the left window panel. Select the Local Area Connection, and right click the icon to select Properties. IPv4:...
  • Page 14 Select Internet Protocol Version 4 (TCP/IPv4) then click Properties.
  • Page 15 In the TCP/IPv4 properties window, select the Obtain an IP address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. Click OK again in the Local Area Connection Properties window to apply the new configuration. IPv6: Select Internet Protocol Version 6 (TCP/IPv6) then click Properties...
  • Page 16 In the TCP/IPv6 properties window, select the Obtain an IPv6 address automatically and Obtain DNS Server address automatically radio buttons. Then click OK to exit the setting. Click OK again in the Local Area Connection Properties window to apply the new configuration.

  • Page 17: Factory Default Settings

    Factory Default Settings Before configuring your router, you need to settings. Web Interface (Username and Password) Administrator Username: hallinta Password: Please check the device label and it is random up to 16 characters. Attention If you have forgotten the username and/or password of the router, you can restore the device to its default setting by pressing the Reset Button more than 6 seconds. Device LAN IPv4 settings - IPv4 Address: 192.168.0.254 - Subnet Mask: 255.255.255.0 DHCP server for IPv4 - DHCP server is enabled - Start IP Address: 192.168.0.100 - IP pool counts: 100 Configuration Configuration via Web Interface Open your web browser; enter the IP address of your router, which by default is 192.168.0.254, and click ok or press ‘Enter’ key on the keyboard, a login prompt window will appear.

  • Page 18: Status

    Congratulations! You are now successfully logged in to the Firewall Router! Once you have logged on to your TW-EAV510 AC WLAN 802.11ac Router via your web browser, you can begin to set it up according to your requirements. On the configuration homepage, the left navigation pane links you directly to the setup pages, which include: Status Device The page below shows the basic system and WAN connection information.

  • Page 19: 3G/4G/Lte Info

    3G/4G/LTE Info This page shows 3G/4G/LTE network and dongle information.

  • Page 20: Lan/Wlan Clients

    LAN/WLAN Clients This page shows all connected device’s information. AP Neighbor This page shows all WLAN AP’s information around your TW-EAV510 AC.

  • Page 21: Ipv6

    IPv6 This page shows the current system status of IPv6. Ethernet Port This page shows connection status and speed of each Ethernet port.

  • Page 22: System Log

    System Log System Log: Enable or disable the system log function. Log Level: Specify the log level to be logged. Display Level: Specify the log level to be displayed. Save Log to File: Click Save button to save all system log into a file and download it from WEB browser to your PC. Clear Log: Click Reset button to clear all existing log. LAN This page allows user to set device LAN IP address and DHCP Server for your network.
  • Page 23 IP Address / Subnet Mask: The local management IP address and mask of this device which is also the default gateway IP address for all PCs in local area network. IGMP Snooping: IGMP snooping is designed to prevent hosts on a local network from receiving traffic for a multicast group they have not explicitly joined. Default is enabled. Ethernet to Wireless Blocking: When it is enabled, all connected PC on Ethernet port cannot access to any WiFi Client. DHCP Mode: Set to NONE to disable the DHCP Server function. DHCP Server is activated as default.

  • Page 24: Wlan

    IP Pool Range: Setup IP pool range that will be used for DHCP Server. User can click “Show Client” button to show information for all DHCP Clients. Max Lease Time: Setup lease time for clients, default is 86400s. Domain Name: Enter the domain name for your local area network (optional). Gateway Address: It is the IP that will be assigned and activated as DHCP client’s gateway IP. DNS option: This allows you to assign a DNS Servers to the requesting PC. MAC-Based Assignment: This page allows to make DHCP server to release the fixed IP address to specified MAC address always. WLAN WLAN 2.4GHz / 5GHz Basic Settings This page is used to configure the parameters for WLAN clients which may connect to your Access Point. Here you may change wireless encryption settings as well as wireless network parameters.

  • Page 25: Advanced Settings

    Disable WLAN Interface: The WLAN 2.4G/5G function will be disabled when it is checked. Band: Specify the mode for Wireless standard support. Mode: Default is Access Point mode. Multiple AP: This device supports up to 3 external SSIDs which can be used for different service. SSID: Network ID is used for identifying the Wireless LAN. Channel Width: Select channel bandwidth for wireless, bigger bandwidth can get higher link rate. But it also depends on interference of your environment. Control Sideband: This is available for 40MHz. Drop-down menu allows selecting upper sideband or lower sideband. Channel Number: The radio channel number. The permissible channels depend on the Regulatory Domain. The factory default setting is auto channel selection. PWR: Specify the transmitting power of your wireless signal. S: Small / M: Medium / H: High Associated Clients: Here you can view information about the wireless clients. Advanced Settings Here user can set some advanced parameters about wireless.

  • Page 26: Security

    Fragment Threshold: A threshold (in bytes) whether the packets will be fragmented and at what size. Packets succeeding the fragmentation threshold of 802.11n WLAN will be split into smaller units suitable for circuit size. While the packets smaller than fragmentation threshold will not be fragmented. Default is 2346, setting the fragmentation too low may result in poor performance. RTS Threshold: Request to Send (RTS) threshold specifies the packet size, when exceeds the size, the RTS/CTS will be triggered. The default setting of 2347(max length) will disable the RTS. Beacon Interval: The amount of time between beacon transmissions in is milliseconds. The default is 100ms and the acceptable is 20- 1024. The beacon transmissions identify the presence of an access point. Preamble Type: Set wireless LAN preamble type to long or short. Broadcast SSID: user can only enter the SSID manually for connecting if Disabled box checked. Protection: Turn off for maximized throughput. Turn on for greater security. Short GI: This would provide an 11% increase in data rates once enabled. Using the Short Guard Interval will result in higher packet error rates when the delay spread of the RF channel exceeds the SGI, or if timing synchronization between the transmitter and receiver is not precise. WMM Support: You can choose the enable or disable WMM which allows for priority of certain data over the wireless network Security Wireless security prevents unauthorized access or damage to computers using wireless network.

  • Page 27: Access Control

    SSID choice: Apply the security settings to selected SSID. Encryption: User can select one of the following authentications to secure your wireless network: None, WPA, WPA2 or WPA2 Mixed. WPA Cipher Suite: Specify what cipher suite can be used. WPA2 Cipher Suit: Specify what cipher suite can be used. Group Key Update: The period of renewal time for changing the security key automatically between wireless client and Access Point (AP). This is in seconds. Pre-Shared Key: Enter the key for your wireless security setting. Maximum length is 16 characters. Access Control The page helps user to make better security for the wireless network. Mode: Select the mode for the action that will apply to the Current Access Control List. MAC Address: Enter the WiFi client’s MAC address. Enter the Add button to add MAC address to the list. Reset: User can click this button to clear MAC address that just entered.

  • Page 28: Site Survey

    Delete Selected: Click the button to delete all selected MAC addresses in the field named Select. Delete All: Delete all the MAC address on Current Access Control List table. Site Survey The page can help user to find what WiFi channel is used by other AP and find the best channel for you by yourself. Just click Refresh button to do WLAN side survey. WPS WPS (Wi-Fi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. WPS is used to exchange the AP setting with Station and configure AP settings. This feature greatly simplifies the steps needed to create a Wi-Fi network for a residential or an office setting. The commonly known PIN method is supported to configure WPS.

  • Page 29: Status

    Status This page shows the current configuration of WiFi module.

  • Page 30: Wan

    WAN WAN Mode The page is used to configure which WAN connection mode will be used or not. Default Routing This page is used to configure the priority of each WAN connection. Top one has higher priority than lower one. If you have multi-WAN connection available, it will do auto failover and auto fallback according to the priority setting here. Ethernet WAN The page is used to configure the parameters and protocol for the Ethernet WAN port.
  • Page 31 Profile: Select the profile for configuration or new link to create a new profile. Enable VLAN: User can check this box to enable the VLAN on specify profile. VLAN ID: Assign a VLAN ID tag between 0 and 4094 802.1p_Mark: Select an 802.1p priority level between 0 and 7. Channel Mode: Select the channel mode for WAN connection. Bridge Mode: Set bridge mode to make all transparent between Ethernet and WAN or PPPoE packet only. Enable NAPT: Enable/Disable the NAT function for WAN connection. Channel: Enable/Disable the channel. Default Route: Specify the profile will be activated as default gateway for Internet connection or not. Enable QoS: Enable/Disable the QoS for WAN connection. MTU: Most ISP offers MTU value to users. Enable IGMP-Proxy: Enable/Disable the IGMP Proxy. If disabled, the IPTV will not work with NAT enabled mode. IP Protocol: Setup profile’s IP protocol to be IPv4 only, IPv6 only or IPv4/IPv6 dual stack. When Channel Mode is set to IPoE, you will have the options below.

  • Page 32: Ptm(Vdsl) Wan

    Type: Setup the WAN interface is use static IP or activate as DHCP client and get WAN IP from ISP. Local IP Address/Remote IP Address/Subnet Mask: Enter the IP address, subnet mask and gateway address that provided by your ISP. Request DNS: If this option is enabled, the device will use the DNS Server IP that assigned from ISP. It is only work when Type is set to DHCP. Primary DNS Server/Secondary DNS Server: Input the primary and secondary DNS server if necessary. When Channel Mode is set to PPPoE, you will have the options below. Username/Password: Enter the PPPoE username/password that provided by your ISP. Type: Specify the PPP connection should be always on (Continuous) or only make connection when necessary (Connect on Demand) or manually to make Connect/Disconnect. Idle Time (sec): Specify the idle time for disconnecting the PPPoE connection. Authentication Method: Specify the authentication method for PPPoE connection. When IP Protocol is set to IPv6 or IPv4/IPv6, you will have the options below. Address Mode: Specify the mode for getting or setting IPv6 address. Enable DHCPv6 Client: Pass the IPv6 address to LAN network when box checked. PTM(VDSL) WAN The page is used to configure the parameters and protocol for the VDSL2 WAN port.
  • Page 33 Profile: Select the profile for configuration or new link to create a new profile. Enable VLAN: User can check this box to enable the VLAN on specify profile. VLAN ID: Assign a VLAN ID tag between 0 and 4094 802.1p_Mark: Select an 802.1p priority level between 0 and 7. Channel Mode: Select the channel mode for WAN connection. Bridge Mode: Set bridge mode to make all transparent between Ethernet and WAN or PPPoE packet only. Enable NAPT: Enable/Disable the NAT function for WAN connection. Channel: Enable/Disable the channel. Enable QoS: Enable/Disable the QoS for WAN connection. MTU: Most ISP offers MTU value to users. Default Route: Specify the profile will be activated as default gateway for Internet connection or not. Enable IGMP-Proxy: Enable/Disable the IGMP Proxy. If disabled, the IPTV will not work with NAT enabled mode. IP Protocol: Setup profile’s IP protocol to be IPv4 only, IPv6 only or IPv4/IPv6 dual stack. When Channel Mode is set to IPoE, you will have the options below. Type: Setup the WAN interface is use static IP or activate as DHCP client and get WAN...

  • Page 34: Atm(Adsl) Wan

    IP from ISP. Local IP Address/Remote IP Address/Subnet Mask: Enter the IP address, subnet mask and gateway address that provided by your ISP. Request DNS: If this option is enabled, the device will use the DNS Server IP that assigned from ISP. It is only work when Type is set to DHCP. Primary DNS Server/Secondary DNS Server: Input the primary and secondary DNS server if necessary. When Channel Mode is set to PPPoE, you will have the options below. Username/Password: Enter the PPPoE username/password that provided by your ISP. Type: Specify the PPP connection should be always on (Continuous) or only make connection when necessary (Connect on Demand) or manually to make Connect/Disconnect. Idle Time (sec): Specify the idle time for disconnecting the PPPoE connection. Authentication Method: Specify the authentication method for PPPoE connection. When IP Protocol is set to IPv6 or IPv4/IPv6, you will have the options below. Address Mode: Specify the mode for getting or setting IPv6 address. Enable DHCPv6 Client: Pass the IPv6 address to LAN network when box checked. ATM(ADSL) WAN VPI/VCI/Encapsulation/Channel Mode: Enter the information from your ISP. Enable NAPT: Enable/Disable the NAT function for WAN connection. Channel: Enable/Disable the channel. Enable QoS: Enable/Disable the QoS for WAN connection.

  • Page 35: Dsl Settings

    Default Route: Specify the profile will be activated as default gateway for Internet connection or not. Enable IGMP-Proxy: Enable/Disable the IGMP Proxy. If disabled, the IPTV will not work with NAT enabled mode. IP Protocol: Setup profile’s IP protocol to be IPv4 only, IPv6 only or IPv4/IPv6 dual stack. When Channel Mode is set to 1483 MER, you will have the options below. Type: Setup the WAN interface is use static IP or activate as DHCP client and get WAN IP from ISP. Local IP Address/Remote IP Address/Subnet Mask: Enter the IP address, subnet mask and gateway address that provided by your ISP. Request DNS: If this option is enabled, the device will use the DNS Server IP that assigned from ISP. It is only work when Type is set to DHCP. Primary DNS Server/Secondary DNS Server: Input the primary and secondary DNS server if necessary. When Channel Mode is set to PPPoE/PPPoA, you will have the options below. Username/Password: Enter the PPPoE username/password that provided by your ISP. Type: Specify the PPP connection should be always on (Continuous) or only make connection when necessary (Connect on Demand) or manually to make Connect/Disconnect. Idle Time (sec): Specify the idle time for disconnecting the PPPoE connection. When IP Protocol is set to IPv6 or IPv4/IPv6, you will have the options below. Address Mode: Specify the mode for getting or setting IPv6 address. Enable DHCPv6 Client: Pass the IPv6 address to LAN network when box checked. DSL Settings This screen allows you to set DSL parameters. DSL knowledge is required to configure these settings. Contact your ISP to make sure that these parameters are correct.

  • Page 36: 3G/4G Lte Settings

    Please keep these settings as default from ISP, it may make DSL connection broken if set to wrong parameters. 3G/4G LTE Settings 3G/4G LTE dongle related settings can be found in this page.
  • Page 37 3G/4G LTE WAN: Enable/Disable the 3G/4G LTE dongle detection function. Network Preference: Specify the network preference you preferred. PIN Code: Enter the PIN code for your SIM card (optional). APN: Enter the APN name if required by your ISP. The default value should work with most ISPs. Dial Number: Enter the dialed number that is provided by your ISP, the default value should work with most ISPs. Authentication: Select the authentication type that is provided by your ISP. User Name: Enter the username that is provided by your ISP (optional). Password: Enter the password that is provided by your ISP (optional). NAPT: Enable/Disable the NAT. Default Route: Setup the 3G/4G LTE connection will be used as default gateway or not. MTU: Most ISP offers MTU value to users. Extra AT Command: User can issue specify the AT command after 3G/LTE modem initialized.

  • Page 38: Vpn

    VPN PPTP This page is for setting PPTP Server, Client and account. PPTP VPN: Enable/Disable PPTP function. PPTP Server Authentication Type: Setup the authentication type for client. Encryption Mode: Setup MPPE encryption for PPTP tunnel, MPPE can only be enabled when Auth. Type set to MS-CHAPV2. Assigned to Peer IP Address start from: Enter the IP address that will be assigned to remote PPTP client. The IP address cannot in DHCP IP Pool range. Local IP Address: Enter the IP address for PPTP tunnel interface. Default is set to device LAN IP address. Example: 192.168.0.254. Server Account...
  • Page 39 Name: Enter the name for this account profile. Account: Enable/Disable this account. Username: Enter the username for login authentication. Password: Enter the password for login authentication. Peer IP: Enter the peer side LAN IP address for LAN to LAN type. Peer Subnet Mask: Enter the peer side LAN subnet mask for LAN to LAN type. PPTP Client Name: Enter the name for this client rule. Server IP Address: Specify the remote PPTP server IP address or domain name. Username: Enter the username for PPTP login authentication. Password: Enter the password for PPTP login authentication. Authentication Type: Setup the authentication type for connecting to PPTP server. This setting must follow server side. Encryption Mode: Setup MPPE encryption for PPTP tunnel, MPPE can only be enabled when Auth. Type set to MS-CHAPV2. This setting must follow server side. Default Gateway: Make this PPTP tunnel as default gateway for all local traffic when it is checked. Peer IP: Enter the peer side LAN IP address for LAN to LAN type. Peer Subnet Mask: Enter the peer side LAN subnet mask for LAN to LAN type. How to for PPTP Server/Client Example 1 TW-EAV510 AC in below pic left side is activated as PPTP Server and TW-EAV510 AC in below right side is activated as PPTP Client.
  • Page 40 Remote Access TW-EAV510 (PPTP Server) 1. Go to WAN -> VPN -> PPTP, enable the PPTP VPN 2. Setup PPTP Server and press Apply button 3. Add new user account, don’t need input Peer IP/ Peer Subnet Mask. TW-EAV510 AC (PPTP Client) 1. Go to WAN -> VPN -> PPTP, enable the PPTP VPN, Setting PPTP Client as below.
  • Page 41 Click Add button to save account settings. 2. After click Add button, PPTP Client Table would add one connection, if setup all correctly VPN connection should be connected. You can also click Disconnect button to disconnect the PPTP connection. 3. Go to Status -> Device, you can check PPTP Configuration on page below, When Status shows up, you can access to remote network now.
  • Page 42 4. After press Add button, PPTP Server Table would add account as below. TW-EAV510 AC (PPTP Client) 1. Go to WAN -> VPN -> PPTP, enable the PPTP VPN, Setting PPTP Client as below. For LAN to LAN, you need to enter peer network information. Click Add button to save account settings.
  • Page 43 Example 2 TW-EAV510 is activated as PPTP Server and Windows 10 is activated as PPTP Client for Remote Access. TW-EAV510 (PPTP Server) 1. Same setting with Remote Access. 2. Don’t need input Peer IP/ Peer Subnet Mask. Windows 10 (PPTP Client) 1. Make sure PC can access internet. 2. Go to Control Panel -> Network and Internet -> Network and Sharing Center click Setup a new connection or network to add a new PPTP connection.
  • Page 44 3. Select Connect to a workplace. 4. Select No, create a new connection and click Next button for next step. 5. Select Use my Internet connection (VPN).
  • Page 45 6. Enter the PPTP Server address/domain to field named Internet address. Please make sure your domain name address is work correctly if you are use domain name instead of IP address. Click Create button finish the PPTP client settings on Windows.
  • Page 46 8. After connected, you can access remote network now. 9. If you have problem connect with PPTP VPN via PC, please check Control Panel -> Network and Internet -> Network and Sharing Center, click Change adapter settings on left side, would show VPN Connection then right click to select Properties ->...

  • Page 47: L2Tp

    L2TP This page is for setting L2TP Server, Client and Account.
  • Page 48 L2TP VPN: Enable/Disable L2TP function. L2TP Server Authentication Type: Setup the authentication type for client. Encryption Mode: Setup MPPE encryption for L2TP tunnel, MPPE can only be enabled when Auth. Type set to MS-CHAPV2. Tunnel Authentication: Enable/Disable the tunnel authentication. Secret Key: Enter the secret key for tunnel authentication. Assigned to Peer IP Address start from: Enter the IP address that will be assigned to remote L2TP client. The IP address cannot in DHCP IP Pool range. Local IP Address: Enter the IP address for L2TP tunnel interface. Default is set to device LAN IP address. Example: 192.168.0.254. Server Account Name: Enter the name for this account profile. Account: Enable/Disable this account. Username: Enter the username for login authentication. Password: Enter the password for login authentication.
  • Page 49 Peer IP: Enter the peer side LAN IP address for LAN to LAN type. Peer Subnet Mask: Enter the peer side LAN subnet mask for LAN to LAN type. L2TP Client Name: Enter the name for this client rule. Server IP Address: Specify the remote L2TP server IP address or domain name. Username: Enter the username for L2TP login authentication. Password: Enter the password for L2TP login authentication. Tunnel Authentication: Enable/Disable the tunnel authentication. Secret Key: Enter the secret key for tunnel authentication. Authentication Type: Setup the authentication type for connecting to L2TP server. This setting must follow server side. Encryption Mode: Setup MPPE encryption for L2TP tunnel, MPPE can only be enabled when Auth. Type set to MS-CHAPV2. This setting must follow server side. Default Gateway: Make this PPTP tunnel as default gateway for all local traffic when it is checked. Peer IP: Enter the peer side LAN IP address for LAN to LAN type. Peer Subnet Mask: Enter the peer side LAN subnet mask for LAN to LAN type. How to for L2TP Server/Client Example 1 TW-EAV510 AC in below pic left side is activated as L2TP Server and TW-EAV510 AC in below pic right side is activated as L2TP Client.
  • Page 50 Remote Access TW-EAV510 (L2TP Server) 4. Go to WAN -> VPN -> L2TP, enable the L2TP VPN 5. Setup L2TP Server and press Apply button 6. Add new user account, don’t need input Peer IP/ Peer Subnet Mask. Click Add button to save changes. TW-EAV510 AC (L2TP Client) 1. Go to WAN -> VPN -> L2TP, enable the L2TP VPN, Setting L2TP Client as below.
  • Page 51 3. Go to Status -> Device, you can check L2TP Configuration on page below, When Status shows up, you can access to remote network now. Below is Device Info for reference. LAN to LAN TW-EAV510 (L2TP Server) 1. Go to WAN -> VPN -> L2TP, enable the L2TP VPN. 2.

  • Page 52: Ipsec

    Click Add button to save account settings. 5. After click Add button, L2TP Client Table would add one connection, if setup all correctly VPN connection should be connected. You can also click Disconnect button to disconnect the L2TP connection. 6. Go to Status -> Device, you can check L2TP Configuration on page below, When Status shows up, you can access to remote network now.
  • Page 53 Remote IPSec Gateway Address: Enter the remote IPSec gateway address. LAN IP address: Enter the remote local IP address that will access to this IPSec tunnel. Subnet Mask: Enter the remote local subnet mask that will access to this IPSec tunnel. Local WAN IP address: Enter local WAN IP address which will be used for connecting to remote IPSec gateway address. LAN IP address: Enter the local LAN IP address that will access to this IPSec tunnel. Subnet Mask: Enter the local subnet mask that will access to this IPSec tunnel. Security Option Encapsulation Type: Select the encapsulation type for tunnel using. Pre-shared key: Enter the pre-shared key for IPSec tunnel.
  • Page 54 Advanced Options: Make it checked to modify the advanced setting for IKE phase 1 and 2. IKE Phase 1 Mode: Default is Main mode. IKE Algorithm Encryption Algorithm: Select the algorithm that will be used for tunnel connection. Integrity Algorithm: Select the algorithm that will be used for tunnel connection. Select Diffie-Hellman Group: Select the group that will be used for tunnel connection. IKE Phase 2 Security Algorithm Encryption Algorithm: Select the algorithm that will be used for tunnel connection. Integrity Algorithm: Select the algorithm that will be used for tunnel connection. Select Diffie-Hellman Group: Select the group that will be used for tunnel connection. Note: Both sides must use the same IKE phase 1 and 2 settings for creating IPSec tunnel. How to for IPsec Example Both TW-EAV510 AC are enable IPsec function. IPSec is point-to-point, no server and client distinguish.
  • Page 55 Remote Side TW-EAV510 AC 1. Go to WAN -> VPN -> IPSec, in Remote part fill in other side WAN IP or domain, router LAN IP, for Local part, isn’t necessary fill in, because system will automatically enter, input Pre-Shared Key for authenticate, like as below picture.
  • Page 56 Local Side 1. Go to WAN -> VPN -> IPSec, input other side router WAN IP like as below picture. Click Add/Save button to save changes. 2. After Add the new config, Key Life Time would add one connection, user can disable/enable or delete selected. 3. After both side setup ready, use PC launch CMD, try to ping other side PC, first time should be time out then would ping successfully.

  • Page 57: Services

    Services DNS Dynamic DNS The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing users whose ISP does not assign them a static IP address to use a domain name. This is especially useful for hosting servers via your ADSL/VDSL connection, so that anyone wishing to connect to you may use your domain name, rather than having to use your dynamic IP address, which changes from time to time. This dynamic IP address is the WAN IP address of the router, which is assigned to you by your ISP.

  • Page 58: Firewall

    Each DDNS Provide has different settings. You will first need to register and establish an account with the Dynamic DNS / No-IP/dy.fi provider using their website, for example https://dyn.com/dns/. Firewall ALG The ALG Controls enable or disable protocols over application layer.

  • Page 59: Ip/Port Filtering

    IP/Port Filtering Outgoing Default/Incoming Default Action: Specify the default action for the unmatched traffic in Current Filter Table. Direction: Specify the direction of traffic. Protocol: Specify the protocol of traffic. Rule Action: Specify what action will be applied to this rule. Source IP Address/Subnet Mask/Port: Enter the information of traffic that will be hooked by filter. Destination IP Address/Subnet Mask/Port: Enter the information of traffic that will be hooked by filter.

  • Page 60: Mac Filtering

    MAC Filtering Outgoing Default/Incoming Default Action: Specify the default action for the unmatched traffic in Current Filter Table. Direction: Specify the direction of traffic. Source MAC/Destination MAC Address: Enter the information of traffic that will be hooked by filter. Rule Action: Specify what action will be applied to this rule. Port Forwarding In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program (usually a server) incoming connections should be delivered to. Some ports have numbers that are pre-assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred to as “well-known ports”. Servers follow the well-known port assignments so clients can locate them. If you wish to run a server on your network that can be accessed from the WAN (i.e. from other machines on the Internet that are outside your local network), or any...

  • Page 61: Url Blocking

    application that can accept incoming connections (e.g. Peer-to-peer/P2P software such as instant messaging applications and P2P file-sharing applications) and are using NAT (Network Address Translation), then you will usually need to configure your router to forward these incoming connection attempts using specific ports to the PC on your network running the application. You will also need to use port forwarding if you want to host an online game server. The reason for this is that when using NAT, your publicly accessible IP address will be used by and point to your router, which then needs to deliver all traffic to the private IP addresses used by your PCs. Please see the WAN configuration section of this manual for more information on NAT. The device can be configured as a virtual server so that remote users accessing services such as Web or FTP services via the public (WAN) IP address can be automatically redirected to local servers in the LAN network. Depending on the requested service (TCP/UDP port number), the device redirects the external service request to the appropriate server within the LAN network. This part is only available when NAPT is enabled. URL Blocking If website’s URL or keyword matches the pre-defined URL/keyword here, the connection to this URL/keyword will be blocked.

  • Page 62: Domain Blocking

    Domain Blocking If any domain matches the pre-defined domain here, the connection to this domain will be blocked.

  • Page 63: Dmz

    DMZ The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP address as the DMZ Host, all incoming packets will be checked by Firewall and NAT algorithms before being passed to the DMZ host, when a packet received does not use a port number used by any other Virtual Server entries. DoS This page helps user to setup protection for DOS attack.

  • Page 64: Upnp

    UPnP This page allows user to enable/disable the UPnP function. Samba This page allows user to enable/disable the Samba server when USB storage is connected. Samba: Enable/Disable the Samba server. Server String: Descriptive string for the Samba server Printer Server The page shows the printer URL when printer is connectd to device via USB.
  • Page 65 Printer installation on Windows 10 Go to Settings -> Add printer & scanners, then click Add a printer or scanner. Select “Select a shared printer by name”, copy the printer URL that shows on device WEB GUI (Advanced -> Printer) and past it here. Click Next button and follow the instruction by Windows 10.

  • Page 66: Advance

    Advance ARP Table Details of ARP information can be found here. Routing Enter the static routing information for an entry to the routing table. Click Add button when you are finished. Enable: Checked to enable static route function. Destination/Subnet Mask: Enter the destination IP address and the subnet mask.

  • Page 67: Multicast

    Next Hop: Specify the gateway IP address for routing to next network. Metric: Metric is a policy for router to commit router, to determine the optimal route. Enter one number greater than or equal to 0. Interface: Select an interface this route associated. Multicast Multicast is one of the three network transmission modes, Unicast, Multicast, and Broadcast. It is a transmission mode that supports point-to-multipoint connections between the sender and the recipient. IGMP protocol is used to establish and maintain the relationship between IP host and the host directly connected multicast router. IGMP stands for Internet Group Management Protocol, it is a communications protocols used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and the adjacent multicast routers to establish multicast group members. IGMP Version: Enter the supported IGMP version v2 and v3, default is IGMP v2. Query Interval: Enter the periodic query interval time (sec) the multicast router sending the query message to hosts to understand the group membership information. Query Response Interval: Enter the response interval time (sec). Last Member Query Interval: Enter the last member response interval time (sec). Robustness Value: Enter the router robustness parameter, the greater the...

  • Page 68: Interface Grouping

    robustness value, the more robust the querier is. Interface Grouping Interface grouping is a function to group interfaces, known as VLAN. A Virtual LAN, is a group of hosts with the common set of requirements that communicate as if they were attached to the same broadcast domain, regardless of the physical location. Each group will perform as an independent network. IP QoS...

  • Page 69: Qos Policy

    QoS Policy IP QoS: Enable/Disable the IP QoS function. Policy: Specify the policy for queue. Total Bandwidth Limit: Specify the bandwidth of your WAN connection. QoS Classification Click the Add button to add QoS rule.
  • Page 70 Rule Name: Enter the rule name. VLAN ID: Enter the VLAN ID that will be assigned to the matched traffic. Precedence: Specify which queue will be used. DSCP: Select the DSCP mark. 802.1p: Specify the 802.1p value. IP QoS Rule by type: Select the type which will be used to hook the traffic for applying the QoS rule. WAN: Specify which WAN interface will be applied.

  • Page 71: Ipv6

    IPv6 IPv6 IPv6: Enable or Disable the IPv6 function. RADVD MaxRtrAdvInterval: The maximum time allowed between sending unsolicited multicast router advertisements from the interface, in seconds. Must be no less than 4 seconds and no greater than 1800 seconds. MinRtrAdvInterval: The minimum time allowed between sending unsolicited multicast router advertisements from the interface, in seconds. Must be no less than 3 seconds and no greater than 0.75 * MaxRtrAdvInterval. AdvManagedFlag: When set, hosts use the administered (stateful) protocol for...

  • Page 72: Dhcpv6

    address autoconfiguration in addition to any addresses autoconfigured using stateless address autoconfiguration. AdvOtherConfigFlag: When set, hosts use the administered (stateful) protocol for autoconfiguration of other (non-address) information. DHCPv6 DHCPv6 Mode: Set to DHCPServer(Auto) to assign the IPv6 address to all LAN clients or set to NONE to disable it. MLD Proxy The MLD Proxy feature provides a mechanism for a device to generate MLD membership reports for all entries or a user-defined subset of these entries on the device’s upstream interface. The MLD proxy feature enables a device to learn proxy group membership information, and forward multicast packets based upon that information. MLD Proxy: Enable or disable the MLD Proxy function.

  • Page 73: Mld Snooping

    WAN Interface: Set the upstream interface for MLD Proxy. The WAN interface must has IPv6 enabled for showing here. MLD Snooping Similar to IGMP snooping, listens in on the MLD conversation between hosts and routers by processing MLD packets sent in a multicast network, and it analyzes all MLD packets between hosts and the connected multicast routers in the network. Without MLD snooping, multicast traffic is treated in the same manner as broadcast traffic - that is, it is forwarded to all ports. With MLD snooping, multicast traffic of a group is only forwarded to ports that have members of that group. MLD Snooping: Enable or disable the MLD Snooping function. IPv6 Routing Enable: Checked to enable static route function.

  • Page 74: Ip/Port Filtering

    Destination: Enter the destination IPv6 address. Next Hop: Specify the gateway IPv6 address for routing to next network. Metric: Metric is a policy for router to commit router, to determine the optimal route. Enter one number greater than or equal to 0. Interface: Select an interface this route associated. IP/Port Filtering Outgoing Default/Incoming Default Action: Specify the default action for the unmatched traffic in Current Filter Table. Direction: Specify the direction of traffic. Protocol: Specify the protocol of traffic. Rule Action: Specify what action will be applied to this rule. Source Interface ID/Destination Interface ID: Enter the information of traffic that will be hooked by filter. Source/Destination Port: Enter the port information of traffic that will be hooked by filter.

  • Page 75: Diagnostics

    Diagnostics Ping This page will help you to diagnostic the status of your Network. You can use “Ping” methods in this page. After you input the IP address, click Go button. Management This page allows user to reboot your device. All services will be terminated during rebooting. Backup/Restore This page allows user to backup or restore the router settings to/from file.

  • Page 76: Password

    Password The administrator password can be changed by this page. Suggest to change default password for better security protection. Firmware Upgrade The firmware keeps enhancement and improvement. This page allows user to upgrade to a new firmware once it is available. Click “Upgrade(auto)” button will upgrade the up to date firmware from remote server, please make sure the Internet connection is work before clicking.

  • Page 77: Acl

    Important: Please don’t power off the router during upgrade, otherwise it may damage your router. ACL This page allows user to allow/block to access the router’s service with specify IP address or network on both LAN and WAN direction.

  • Page 78: Time Zone

    ACL Capability: The router’s all service will be opened and can be accessed by any direction if set to disable. Default is enable. Time Zone Setup the Time Zone and NTP server here to correct and sync the time on the router. Auto Reboot User can specify two time schedules to force device to reboot automatically.

  • Page 79: Statistics

    Statistics Interface This page shows the statistics of each interface. Click Reset Statistics button to reset counter. DSL This page shows more details of your xDSL line.

  • Page 80: Language

    Language This page allows user to configure the WEB GUI display language.

  • Page 81: Reboot

    Reboot Click the Reboot button to reboot the device immediately. Logout This page will force the user logout immediately by clicking Logout button.

Table of Contents