TP-Link SafeStream TL-R480T+ User Manual Download Page 90

Page: 90 / 124

-86-

Effective Time:

Specify the time for the entry to take effect.

Description:

Give a description for the entry.

Status:

Activate or inactivate the entry.

List of Rules

You can view the information of the entries and edit them by the Action buttons.

The first entry in Figure 4-56 indicates: The group1 is applied with Application Rules. You can click

<View> to view the limited applications in the popup checkbox. The effective time of this entry is

7:00-9:00 on Monday, Tuesday, Friday, Saturday and Sunday. This entry is enabled.

Note:

To set the group and group members, please refer to

4.2.1 Group

4.6.5.2 Database

On this page, you can upgrade the application database.

Choose the menu

Firewall

→

App Control

→

Database

to load the following page.

Figure 4-57 Database

The database refers to all the applications in the application list on the Application Rules page, you can

download the latest database from

http://www.tp-link.com

, Click the <Browse> button and select the

file, and then click the

button to upgrade the database.

4.7 Services

4.7.1 PPPoE Server

The Router can be configured as a PPPoE server to specify account and IP address to users in LAN and

thus you can control the dial-up of users for a high efficiency in network management.

The PPPoE configuration can be implemented on

General

IP Address Pool

Account

Exceptional

and

List of Account

pages.

Summary of Contents for SafeStream TL-R480T+

Page 1: ...TL R480T Load Balance Broadband Router Rev 5 0 0 1910010619 ...

Page 2: ...rcial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense This devi...

Page 3: ...of the Router 4 2 2 Features 5 2 3 Appearance 6 2 3 1 Front Panel 6 2 3 2 Rear Panel 7 Chapter 3 Quick Installation Guide 8 3 1 Configure PC 8 3 2 Login 11 Chapter 4 Configuration 18 4 1 Status 18 4 2 Quick Setup 18 4 3 Network 19 4 3 1 WAN 19 4 3 2 LAN 37 4 3 3 MAC Address 41 4 3 4 Switch 42 4 4 User Group 48 4 4 1 Group 49 4 4 2 User 49 4 4 3 View 50 4 5 Advanced 51 ...

Page 4: ... 3 MAC Filtering 78 4 6 4 Access Control 79 4 6 5 App Control 84 4 7 Services 86 4 7 1 PPPoE Server 86 4 7 2 E Bulletin 93 4 7 3 Dynamic DNS 94 4 7 4 UPnP 100 4 8 Maintenance 102 4 8 1 Admin Setup 102 4 8 2 Management 105 4 8 3 Statistics 107 4 8 4 Diagnostics 108 4 8 5 Time 111 4 8 6 Logs 112 Appendix A Hardware Specifications 114 Appendix B FAQ 115 Appendix C Glossary 117 ...

Page 5: ...ole Cable One Ethernet Cable Quick Installation Guide Mounting kits for installing in a standard 19 inch rack Resource CD Note Make sure that the package contains the above items If any of the listed items are damaged or missing please contact with your distributor The provided power cord may be different due to local power specifications ...

Page 6: ... menu option that is located under the Advanced menu Bold font indicates a toolbar icon menu or menu item Font indicate a button Symbols in this Guide Symbol Description Note Ignoring this type of note might result in a malfunction or damage to the device Tips This format indicates important information that helps you make better use of your device 1 3 Overview of this Guide Chapter 1 About This G...

Page 7: ... 3 Appendix B FAQ Provides the possible solutions to the problems that may occur during the installation and operation of the router Appendix C Glossary Lists the glossary used in this guide ...

Page 8: ...ick restricting of applications to save time energy Supporting URL Filtering to prevent potential hazards from visiting the malicious Web sites z Powerful Firewall Supporting One Click IP MAC Binding to avoid ARP spoofing and guarantee a network without stagnation Featured Attack Defense to protect the network from a variety of flood attack and packet anomaly attack Possessing MAC Filtering functi...

Page 9: ... non fan system design for quietness Possesses standard sized 19 inch outfit for standard rack Supports Professional 4kV common mode lightning protection Complies with IEEE 802 3 IEEE 802 3u Supports TCP IP DHCP ICMP NAT NAPT protocols Supports PPPoE SNTP HTTP DDNS UPnP NTP protocols Basic Functions Supports Static IP Dynamic IP PPPoE Russian PPPoE L2TP Russian L2TP PPTP Russian PPTP Dual Access B...

Page 10: ...properly Off There is no device linked to the corresponding port On Green Yellow There is a device linked to the corresponding port but no activity Green light indicates the corresponding port is working as a LAN port and yellow indicates WAN port Link Act WAN LAN Flashing Green Yellow There is an active device linked to the corresponding port Green light indicates the corresponding port is workin...

Page 11: ...n high frequency release the Reset button It means the Router is restored successfully The default management address of the Router is http 192 168 0 1 and the default username and the password are both admin 2 3 2 Rear Panel The rear panel of TL R480T is shown as the following figure z AC Power Receptacle Connect the female connector of the power cord to this power receptacle and the male connect...

Page 12: ... the basic functions of your TL R480T Load Balance Broadband Router These procedures only take you a few minutes You can access the Internet via the router immediately after it has been successfully configured 3 1 Configure PC Step 1 Click the Start menu on your desktop right click My Network Places and then select Properties shown in Figure 3 1 Figure 3 1 ...

Page 13: ...e next screen right click Local Area Connection LAN and then select Properties Figure 3 2 Step 3 In the next screen select General tab highlight Internet Protocol TCP IP and then click the Properties button Figure 3 3 ...

Page 14: ...ay need to be restarted Now you can run the Ping command in the command prompt to verify the network connection Please click the Start menu on your desktop select run tab type cmd in the field and then type ping 192 168 0 1 on the next screen and then press Enter If the result displayed is similar to the screen below the connection between your PC and the Router has been established Figure 3 5 If ...

Page 15: ... If the Router s IP address is 192 168 0 1 your PC s IP address must be within the range of 192 168 0 2 192 168 0 254 the gateway must be 192 168 0 1 3 2 Login Once your host PC is properly configured please proceed as follows to use the Web based Utility Start your web browser and type the private IP address of the Router in the URL field http 192 168 0 1 After that you will see the screen shown ...

Page 16: ...hat appears cancel the Using Proxy checkbox and click OK to finish it After a successful login the Quick Setup screen will pop up as the Figure 3 8 shown If it does not prompt you can click the Quick Setup on the left of the main menu Then click Next Figure 3 8 Quick Setup Select the total number of WAN ports you prefer to use as the Figure 3 9 shown Then click Next to load the WAN Port screen ...

Page 17: ...e Figure 3 10 shown and then click Next to load the WAN Connection Type screen Figure 3 10 WAN Port Select the connection type provided by your ISP as the Figure 3 11 shown Three popular types are provided here For other connection types please refer to the 4 3 1 WAN ...

Page 18: ... Provider Figure 3 12 WAN Connection Type PPPoE Click Next to dial up and the process will take a few minutes The process of configuring the network parameters is shown as Figure 3 13 If you close the screen during the process the configuration will still be continued in the background These fields are case sensitive If you have difficulty in this process please contact your ISP ...

Page 19: ...ameters for WAN port automatically The process for obtain the parameter may take a few minutes as Figure 3 14 shown If you close the screen during the process the configuration will still be continued in the background Figure 3 14 WAN Connection Type Dynamic IP 3 If you choose Static IP you should enter the detailed IP information provided by your ISP in Figure 3 15 ...

Page 20: ...close the screen during the process the configuration will still be continued in the background If you have difficulty in this process please contact your ISP Figure 3 16 WAN Connection Type Static IP Connecting After that you will see the next screen Click Finish to complete the quick installation or click Continue to configure other WAN ports ...

Page 21: ... 17 Figure 3 17 Configuration Completed ...

Page 22: ...tus page shows the system information the port connection status and other information related to this Router Choose the menu Status to load the following page Figure 4 1 Status 4 2 Quick Setup Please refer to the Chapter 3 Quick Installation Guide ...

Page 23: ...ly which can be illustrated on the following port sketch Note By default TL R480T is set to work in the mode of dual WAN ports Any change to the number of WAN ports may lead to a loss of current configurations Please be sure to backup your configurations in advance 4 3 1 2 WAN1 TL R480T provides the following six Internet connection types Static IP Dynamic IP PPPoE Russian PPPoE L2TP Russian L2TP ...

Page 24: ... instructions of WAN1 Choose the menu Network WAN WAN1 to load the configuration page 1 Static IP If a static IP address has been provided by your ISP please choose the Static IP connection type to configure the parameters for WAN port manually Figure 4 7 WAN Static IP The following items are displayed on this screen Static IP Connection Type Select Static IP if your ISP has assigned a static IP a...

Page 25: ...NS Domain Name Server If you are not clear please consult your ISP It s not allowed to access the Internet via domain name if the Primary DNS field is blank Secondary DNS Optional If a Secondary DNS Server address is available enter it Upstream Bandwidth Specify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port 2 Dynamic...

Page 26: ...r ISP s server Click Release to release the current IP address of WAN port Host Name Optional This field allows you to give a name for the Router It s blank by default MTU MTU Maximum Transmission Unit is the maximum data unit transmitted by the physical network It can be set in the range of 576 1500 The default MTU is 1500 You are recommended to keep the default value if no other MTU value is pro...

Page 27: ...on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the port Dynamic IP Status Status Displays the status of obtaining an IP address from your ISP z Disabled indicates that the Dynamic IP connection type is not applied z Connecting indicates that the Router is obtaining the IP parameters from your ISP z Connected indicates that the Router has successfully obtained the I...

Page 28: ...mary DNS Secondary DNS Displays the IP address of your ISP s Secondary DNS 3 PPPoE If your ISP Internet Service Provider has provided the account information for the PPPoE connection please choose the PPPoE connection type Used mainly for DSL Internet service ...

Page 29: ... 25 Figure 4 9 WAN PPPoE The following items are displayed on this screen PPPoE Settings ...

Page 30: ...connection always on The connection can be re established automatically when it is down z Time based Select this option to keep the connection on during the Active time you set PPPoE Advanced Settings Check here to enable PPPoE advanced settings Keep Alive Once PPPoE is connected the Router will send keep alive packets every Keep Alive Interval sec and Keep Alive Retry Times to make sure the conne...

Page 31: ...ed IP address of WAN port is displayed Subnet Address If Static IP is selected configure the subnet address of WAN port If Dynamic IP is selected the obtained subnet address of WAN port is displayed Status Displays the status of secondary connection Upstream Bandwidth Specify the bandwidth for transmitting packets on the port Downstream Bandwidth Specify the bandwidth for receiving packets on the ...

Page 32: ...P Address Displays the IP address assigned by your ISP Gateway Address Displays the Gateway Address assigned by your ISP Primary DNS Displays the IP address of your ISP s Primary DNS Secondary DNS Displays the IP address of your ISP s Secondary DNS 4 L2TP If your ISP Internet Service Provider has provided the account information for the L2TP connection please choose the L2TP connection type ...

Page 33: ...displayed on this screen L2TP Settings Connection Type Select L2TP if your ISP provides a L2TP connection Click Connect to dial up to the Internet and obtain the IP address Click Disconnect to disconnect the Internet and release the current IP address ...

Page 34: ...rminate the Internet connection by the Connect or Disconnect button It is optimum for the dial up connection charged on time z Always on Select this option to keep the connection always on The connection can be re established automatically when it is down Secondary Connection Here allows you to configure the secondary connection Dynamic IP and Static IP connection types are provided Connection Typ...

Page 35: ...ection z Disabled indicates that the L2TP connection type is not applied z Connecting indicates that the Router is obtaining the IP parameters from your ISP z Connected indicates that the Router has successfully obtained the IP parameters from your ISP z Disconnected indicates that the connection has been manually terminated or the Router gets no response from your ISP Please ensure that your sett...

Page 36: ...rmation for the PPTP connection please choose the PPTP connection type Figure 4 11 WAN PPTP The following items are displayed on this screen PPTP Settings Connection Type Select PPTP if your ISP provides a PPTP connection Click Connect to dial up to the Internet and obtain the IP ...

Page 37: ...elect this option to manually activate or terminate the Internet connection by the Connect or Disconnect button It s optimum for the dial up connection charged on time z Always on Select this option to keep the connection always on The connection can be re established automatically when it is down Secondary Connections Here allows you to configure the secondary connection Dynamic IP and Static IP ...

Page 38: ...ection z Disabled indicates that the PPTP connection type is not applied z Connecting indicates that the Router is obtaining the IP parameters from your ISP z Connected indicates that the Router has successfully obtained the IP parameters from your ISP z Disconnected indicates that the connection has been manually terminated or the Router gets no response from your ISP Please ensure that your sett...

Page 39: ...he following items are displayed on this screen BigPond Settings Connection Type Select BigPond if your ISP provides a BigPond connection Click Connect to dial up to the Internet and obtain the IP address Click Disconnect to disconnect the Internet and release the current IP address Account Name Enter the Account Name provided by your ISP If you are not clear please consult your ISP ...

Page 40: ...blished automatically when it is down MTU MTU Maximum Transmission Unit is the maximum data unit transmitted by the physical network It can be set in the range of 576 1500 The default MTU is 1500 Upstream Downstream Bandwidth Specify the Upstream Downstream Bandwidth for the port To make Load Balance and Bandwidth Control take effect please set these parameters correctly BigPond Status Status Disp...

Page 41: ...e connection at least 5 seconds after the connection is off 4 3 2 LAN 4 3 2 1 LAN On this page you can configure the parameters for LAN port of this router Choose the menu Network LAN LAN to load the following page Figure 4 13 LAN The following items are displayed on this screen LAN IP Address Enter the LAN IP address of the Router 192 168 0 1 is the default IP address The Hosts in LAN can access ...

Page 42: ...tings The following items are displayed on this screen DHCP Settings DHCP Server Enable or disable the DHCP server on your Router Select Enable to make the Router automatically assign TCP IP parameters to the computers in the LAN Start IP Address Enter the Start IP address to define a range for the DHCP server to assign dynamic IP addresses This address should be in the same IP address subnet with...

Page 43: ... port of the Router Secondary DNS Optional If a Secondary DNS Server address is available enter it 4 3 2 3 DHCP Client On this page you can view the information about all the DHCP clients connected to the Router Choose the menu Network LAN DHCP Client to load the following page Figure 4 15 DHCP Client You can view the information of the DHCP clients in this table Click the Refresh button for the u...

Page 44: ...dress In this table you can view the information of the entries and edit them by the Action buttons Up to 512 DHCP static address entries can be supported for LAN by this Router The first entry in Figure 4 16 indicates The IP address 192 168 0 101 is reserved for the computer with the MAC address 00 19 66 83 53 CF and this entry is activated Note It s recommended that users first bind the IP addre...

Page 45: ...under this network node to update their ARP binding tables Set the MAC Address for WAN port In the condition that your ISP has bound the account and the MAC address of the dial up device if you want to change the dial up device to be TL R480T you can just set the MAC address of TL R480T s WAN port the same to the MAC address of the previous dial up device for a normal Internet connection Choose th...

Page 46: ... the LAN it s not allowed to set the MAC address of the Router s LAN port to the MAC address of the current management PC 4 3 4 Switch Some basic switch port management functions are provided by TL R480T which facilitates you to monitor the traffic and manage the network effectively 4 3 4 1 Statistics Statistics screen displays the detailed traffic information of each port which allows you to moni...

Page 47: ...d frame this Router can support is 1518 bytes long and the maximum tagged frame is 1522 bytes long Oversize Displays the number of the received packets including error frames that are longer than the maximum frame Total Bytes Displays the total number of the received or transmitted packets including error frames Check the box and click the Clear button to clear the traffic statistics of the corres...

Page 48: ...ckets sent by the mirrored port will be copied to the mirroring port z Ingress Egress When this mode is selected both the incoming and outgoing packets through the mirrored port will be copied to the mirroring port Port Mirror Mirroring Port Select the Mirroring Port to which the traffic is copied Only one port can be selected as the mirroring port Mirrored Port Select the Mirrored Port from which...

Page 49: ...rk abnormity for an enterprise s network please set the Port Mirror function as below 1 Check the box before Enable Port Mirror to enable the Port Mirror function and select the Ingress Egress mode 2 Select Port 3 to be the Mirroring Port to monitor all the packets of the other ports 3 Select all the other ports to be the Mirrored Ports 4 Click the Save button to apply 4 3 4 3 Rate Control On this...

Page 50: ...ture Egress Rate Specify the limit rate for the egress packets The first entry in Figure 4 23 indicates The Ingress and Egress Limits are enabled for port 1 The Ingress and Egress Rates are 1Mbps That is the receiving rate for all the ingress packets will not exceed 1Mbps and the transmitting rate for all the egress packets will not exceed 1Mbps 4 3 4 4 Port Config On this page you can configure t...

Page 51: ...ng enabled Flow Control Allows you to enable disable the Flow Control function Negotiation Mode Select the Negotiation Mode for the port All Ports Allows you to configure the parameters for all the ports at one time 4 3 4 5 Port Status On this page you can view the current status of each port Choose the menu Network Switch Port Status to load the following page Figure 4 25 Port Status ...

Page 52: ...osts in different VLANs cannot communicate with one another directly Therefore broadcast packets are limited in a VLAN TL R480T provides the Port VLAN function which allows you to create multiple logical VLANs for the LAN ports based on their port numbers Choose the menu Network Switch Port VLAN to load the following page Figure 4 26 Port VLAN The following items are displayed on this screen Port ...

Page 53: ... on this screen Group Config Group Name Specify a unique name for the group Description Give a description for the group It s optional List of Group In this table you can view the information of the Groups and edit them by the Action buttons 4 4 2 User On this page you can configure the User for the group Choose the menu User Group User to load the following page Figure 4 28 User Configuration ...

Page 54: ...ess of the port Description Give a description to the user for identification It s optional List of User In this table you can view the information of the Users and edit them by the Action buttons 4 4 3 View On this page you can configure the User View or Group View Choose the menu User Group View to load the following page Figure 4 29 View Configuration The following items are displayed on this s...

Page 55: ...Displays the members of this group including Users and Groups 4 5 Advanced 4 5 1 NAT NAT Network Address Translation is the translation between private IP and public IP which allows private network users to visit the public network using private IP addresses With the explosion of the Internet the number of available IP addresses is not enough NAT provides a way to allow multiple private hosts to a...

Page 56: ...T application which can be considered as a default forwarding rule When NAT DMZ Pseudo DMZ is enabled all the data initiated by external network falling short of the current connections or forwarding rules will be forwarded to the preset NAT DMZ host Host IP Address Enter the IP address of the host specified as NAT DMZ server 4 5 1 2 One to One NAT On this page you can configure the One to One NAT...

Page 57: ...g is enabled Description Give a description for the entry Status Activate or inactivate the entry List of Rules In this table you can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 31 indicates The IP address of host1 in local network is 192 168 0 128 and the WAN IP address after NAT mapping is specified to be 222 135 48 128 The data packets are...

Page 58: ...atus Activate or inactivate the entry list of Rules You can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 32 indicates that This is a Multi Nets NAT entry named tplink1 The subnet under the LAN port of the Router is 192 168 2 0 24 and this entry is activated After the corresponding Static Route entry is set the hosts within this subnet can acce...

Page 59: ...le the subnet of VLAN3 is 192 168 3 0 24 The IP of VLAN for cascading the switch to the Router is 192 168 0 2 Now the hosts within VLAN2 and VLAN3 desire to access the Internet The network topology is shown as the following Configuration procedure 1 Establish the Multi Nets NAT entries with Subnet Mask of VLAN2 and VLAN3 The configured entries are as follows ...

Page 60: ... the following page The set Static Route entry is as follows 4 5 1 4 Virtual Server Virtual server can be used for setting up public services in your private network such as DNS Email and FTP Virtual server can define a service port All the service requests to this port will be transmitted to the LAN server appointed by the Router via IP address Choose the menu Advanced NAT Virtual Server to load ...

Page 61: ...etwork All requests from Internet to this service port or port range will be redirected to the specified server in local network Internal Port Specify the service port of the LAN host as virtual server Protocol Specify the protocol used for the entry Internal Server IP Enter the IP address of the specified internal server for the entry All the requests from the Internet to the specified LAN port w...

Page 62: ...ter will be redirected to the port 65534 65535 of the LAN host with IP address of 192 168 0 103 and this entry is activated 4 5 1 5 Port Triggering Some applications require multiple connections like Internet games video conferencing Internet calling P2P download and so on Port Triggering is used for those applications requiring multiple connections When an application initiates a connection to th...

Page 63: ... Incoming Port should be set in the range of 1 65535 The Incoming Port can be set in a continuous range such as 8690 8696 The Router supports up to 16 Port Triggering entries Each entry supports at most 5 groups of trigger ports and overlapping between the ports is not allowed Each entry supports at most 5 groups of incoming ports and the sum of incoming ports you set for each entry should not be ...

Page 64: ...default setting is enabled It is recommended to keep the default setting if no special requirement IPsec ALG Enable or disable IPsec ALG The default setting is enabled It is recommended to keep default if no special requirement PPTP ALG Enable or disable PPTP ALG The default setting is enabled It is recommended to keep default if no special requirement 4 5 2 Traffic Control Traffic Control functio...

Page 65: ...Bandwidth Control all the time Enable Bandwidth Control When With this option selected the Bandwidth Control will take effect when the bandwidth usage reaches the specified value Default Limit Limited Bandwidth Default Limit applies only for users that are not constrained by Bandwidth Control Rules These users share certain bandwidth with upper limit configured here Value 0 means all the remained ...

Page 66: ...ort you set must not be more than the bandwidth provided by ISP Otherwise the Traffic Control will be invalid If there are data flowing into the Router from interface A and out from interface B while the downstream bandwidth of A is different from the upstream bandwidth of B then the smaller one should be considered as the effective bandwidth and vise versa Click the View IP Traffic Statistics but...

Page 67: ...eam Bandwidth for this entry Limited Bandwidth Up Specify the Limited Upstream Bandwidth for this entry Guaranteed Bandwidth Down Specify the Guaranteed Downstream Bandwidth for this entry Limited Bandwidth Down Specify the Limited Downstream Bandwidth for this entry Effective Time Specify the time for the entry to take effect Description Give a description for the entry Status Activate or inactiv...

Page 68: ... the Router is finite If there are some local hosts transmitting too many TCP and UDP sessions to the public network the communication quality of the other local hosts will be affected thus it is necessary to limit the sessions of those hosts 4 5 3 1 Session Limit On this page you can configure the session limit to specified PCs Choose the menu Advanced Session Limit Session Limit to load the foll...

Page 69: ...entry is enabled 4 5 3 2 Session List On this page you can view the Session Limit information of hosts configured with Session Limit Choose the menu Advanced Session Limit Session List to load the following page Figure 4 39 Session List In this table you can view the session limit information of users configured with Session Limit Click the Refresh button to get the latest information 4 5 4 Load B...

Page 70: ...pplications to work properly Check the box before Enable Bandwidth Based Balance Routing and select the WAN port below Load Balance of the specified WAN port will be enabled automatically if no routing rules are set Then click the Save button to apply the settings Note The WAN ports not connecting to the Internet will not apply Intelligent Balance please do not select them 4 5 4 2 Policy Routing P...

Page 71: ...ntry which is effective only when the protocol is TCP UDP or TCP UDP The default value is 1 65535 which means any port is acceptable WAN Select the WAN port for transmitting packets Effective Time Specify the time for the entry to take effect Status Activate or inactivate the entry List of Rules You can view the information of the entries and edit them by the Action buttons The first entry in Figu...

Page 72: ... WAN Ports Displays all the WAN ports in use You can drag the light blue WAN button to primary and backup WAN list The color of WAN button changing to gray indicates that the WAN port is already in the primary and backup WAN list WAN Config The WAN port in the secondary WAN list will share the traffic for the WAN in the primary WAN list under the specified condition The primary WAN list can contai...

Page 73: ...ault effective time is from the start time of the day to the end time of the next day Status Activate or inactivate the entry List of Rules You can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 42 indicates WAN1 is the primary port and WAN2 is the backup port WAN2 will be enabled while WAN1 is failed This entry is enabled Note The same WAN port...

Page 74: ...e The system predefined protocols cannot be configured 4 5 5 Routing 4 5 5 1 Static Route Routing is the process of selecting optimized paths in a network along which to send network traffic Static Route is a kind of special routing configured by the administrator which is simple efficient and reliable Commonly used in small sized network with fixed topology Static Route does not change along with...

Page 75: ...op Enter the gateway IP address to which the packet should be sent next Interface Select the physical network interface through which this route is accessible Metric Defines the priority of the route The smaller the value is the higher the priority is The default value is 0 Keep the default value if unnecessary Description Give a description for the entry Status Activate or inactivate the entry Li...

Page 76: ...system mode is connected to LAN1 with subnet of 192 168 0 0 24 while the LAN port of another Router R1 is connected to LAN2 with network of 192 168 2 0 24 Meanwhile the WAN ports of the two routers are interconnected and within the same network Now a host under TL R480T and within network of LAN1 desires to communicate with the host within network of LAN2 You can set a Static Route entry Enter the...

Page 77: ...osts and Gateways are trusted there are high security risks during ARP Implementation Procedure in the actual complex network The attacker may send the ARP spoofing packets with false IP address to MAC address mapping entries and then the device will automatically update the ARP table after receiving wrong ARP packets which results in a breakdown of the normal communication Thus ARP defense techno...

Page 78: ...nd MAC Address Enter the MAC Address corresponding to the IP Address Description Give a description for the entry Status Activate or inactivate the entry List of Rules You can view the information of the entries and edit them by the Action buttons The first entry in Figure 4 47 indicates The IP address of 192 168 1 101 and MAC address of 00 19 66 83 53 CF have been bound and this entry is activate...

Page 79: ...tion Indicates that this entry is imported to the list on IP MAC Binding page but not effective yet Indicates that the IP and MAC address of this entry is already bound To bind the entries in the list check these entries and click the Import button then the settings will take effect if the entries do not conflict with the existed entries Note If the local hosts suffered from ARP attack you cannot ...

Page 80: ...atically removed from the list if it has not been communicated with others for a long time This period is regarded as the aging time of the ARP information 4 6 2 Attack Defense With Attack Defense function enabled the Router can distinguish the malicious packets and prevent the port scanning from external network so as to guarantee the network security Choose the menu Firewall Attack Defense Attac...

Page 81: ...creen General Flood Defense Flood attack is a kind of commonly used DoS Denial of Service which including TCP SYN UDP ICMP and so on It is recommended to check all the Flood Defense options and specify the corresponding thresholds Keep the default settings if you are not sure ...

Page 82: ...of local host by specifying their MAC addresses Choose the menu Firewall MAC Filtering MAC Filtering to load the following page Figure 4 51 MAC Filtering The following items are displayed on this screen General To control the access to Internet for hosts in you private network it is recommended to check the box before Enable MAC Filtering and select a filtering mode according to actual situation M...

Page 83: ...y for controlling the access to Internet from LAN hosts Choose the menu Firewall Access Control URL Filtering to load the following page Figure 4 52 URL Filtering The following items are displayed on this screen General To control the access to Internet for hosts in your private network you are recommended to check the box before Enable URL Filtering and select a filtering rule based on the actual...

Page 84: ...L Description Give a description for the entry List of Rules You can view the information of the entries and edit them by the Action buttons Application Example Network Requirements Prevent the local hosts from accessing Internet website www aabbcc com and downloading the files with suffix of exe Configuration Procedure Select Keywords mode and type exe in the field select URL mode and type www aa...

Page 85: ...ring to load the following page Figure 4 53 Web Filtering Check the box before Enable Web Filtering and select the web components to be filtered 4 6 4 3 Access Rules Choose the menu Firewall Access Control Access Rules to load the following page Figure 4 54 Access Rule The following items are displayed on this screen Access Rules ...

Page 86: ...fect when the interface to which the data is flowing is selected WAN or LAN refers to all the WAN or LAN interfaces Source Select the Source IP Range for the entries including the following three ways z IP MASK Enter an IP address or subnet mask 0 0 0 0 32 means any IP z Group Select a predefined group of users You can set the group on4 2 1 Group z ANY means for any users Destination Select the De...

Page 87: ...ule the default Policy is Allow To specify all IP addresses type 0 0 0 0 32 in the Policy field For detailed setting of subnet mask please refer to Appendix B FAQ 4 6 4 4 Service The Service function allows you to specify the protocol and port number to be filtered for Firewall function conveniently Protocol name and port range constitute a service type The Router predefines three commonly used se...

Page 88: ... Enter the start and end ports to make a destination port range for the service The start port number cannot be greater than the end port number List of Service You can view the information of the entries and edit them by the Action buttons Note The service types predefined by the system cannot be modified 4 6 5 App Control 4 6 5 1 Control Rules On this page you can enable the Application Rules fu...

Page 89: ...led Control Rules Object Specify the object for the entry You can select Group to limit the predefined group or select ANY to limit all the users Group If select Group as object you can select the group in the drop down list To establish new group please refer to 4 2 1 Group Application Click the Application List button to select applications from the popup checkbox The applications include IM Web...

Page 90: ... 2 1 Group 4 6 5 2 Database On this page you can upgrade the application database Choose the menu Firewall App Control Database to load the following page Figure 4 57 Database The database refers to all the applications in the application list on the Application Rules page you can download the latest database from http www tp link com Click the Browse button and select the file and then click the ...

Page 91: ...PPoE Server function Dial up Access Only Specify whether to enable the Dial up Access Only function If enabled only the Dial in Users and the user with Exceptional IP can access the Internet PPPoE User Isolation Specify whether to allow the Dial in Users to communicate with one another Primary Secondary DNS Enter the Primary Secondary DNS server address The default is 0 0 0 0 Max Sessions Specify ...

Page 92: ...e server Auth Protocol Select at least one authentication protocol for Local Authentication z PAP transferring username and password in plain text in the network is used in a less secured network z CHAP is more secured for it adopts three handshakes and does not transfer password in plain text z MS CHAP put forward by Microsoft adopts a different encryption algorithm of CHAP z MS CHAP v2 with a hi...

Page 93: ...ange Specify the start and the end IP address for IP Pool The start IP address should not exceed the end address and the IP address ranges must not overlap List of IP Pool In this table you can view the information of IP Address Pools and edit them by the Action buttons 4 7 1 3 Account On this page you can configure the PPPoE account Choose the menu Services PPPoE Server Account to load the follow...

Page 94: ... this option to assign a static IP address to the client z Dynamic Select this option to assign available IP addresses to the client automatically Static IP Address It s available on Static mode Enter a static IP address for the client IP Address Pool It s available on Dynamic mode Select an IP Address Pool to make a range to assign dynamic IPs Max Sessions Specify the maximum number of sessions f...

Page 95: ...can the account log on to the server MAC Address It is available when Manually is selected Enter the MAC address of the Host to bind with the account Session Timeout Enter a time after which the connection will be dropped To keep the connection always on enter 0 in the Session Timeout field The default is 48 If Enable Advanced Account Features is not selected the Session Timeout value is 0 by defa...

Page 96: ...tion to the exceptional IP address range for identification Status Activate or inactivate the entry List of Account In this table you can view the information of Exceptional IPs and edit them by the Action buttons 4 7 1 5 List of Account On this page you can view the detailed information of all accounts you have established Choose the menu Services PPPoE Server List of Account to load the followin...

Page 97: ...it the bulletin content and specify the receiving user group Choose the menu Services E Bulletin to load the following page Figure 4 63 E Bulletin The following items are displayed on this screen General Enable E Bulletin Specify whether to enable electronic bulletin function Interval Specify the interval to release the bulletin ...

Page 98: ...Enter the name of the bulletin s publisher Description Enter the description for the bulletin Status Activate or inactivate the entry List of E Bulletin w the existing bulletins and edit them by the Action button The No 1 entry in Figure 4 63 indicates this bulletin is released by the administrator and it is the object at the same time In this table you can vie released to the Group1 from 8am to 2...

Page 99: ...e IP address of the DDNS client has changed DDNS is usually used for the Internet users to access the private website and FTP server both of which are established based on Web server The Router as a DDNS client cannot provide DDNS service Prior to using this function be sure you have registered on the official websites of DDNS service providers for username password and domain name TL R480T Router...

Page 100: ...ays the WAN port for which Dyndns DDNS is selected DDNS Status Displays the current status of DDNS service z Offline DDNS service is disabled z Connecting client is connecting to the server z Online DDNS works normally z Authorization fails The Account Name or Password is incorrect Please check and enter it again List of DynDNS Account In this table you can view the existing DDNS entries or edit t...

Page 101: ...gistered with your DDNS service provider DDNS Service Activate or inactivate DDNS service here WAN Port Displays the WAN port for which No IP DDNS is selected DDNS Status Displays the current status of DDNS service z Offline DDNS service is disabled z Connecting client is connecting to the server z Online DDNS works normally z Authorization fails The Account Name or Password is incorrect Please ch...

Page 102: ...nutHull DDNS Account Name Enter the Account Name of your DDNS account If you have not registered click Go to register to go to the website of PeanutHull for register Password Enter the password of your DDNS account DDNS Service Activate or inactivate DDNS service here WAN Port Displays the WAN port for which PeanutHull DDNS is selected Service Type Displays the DDNS service type including Professi...

Page 103: ...er it again Domain Name Displays the domain names obtained from the DDNS server Up to 16 domain names can be displayed here List of PeanutHull Account In this table you can view the existing DDNS entries or edit them by the Action button 4 7 3 4 Comexe On this page you can configure Comexe DDNS client Choose the menu Services Dynamic DNS Comexe to load the following page Figure 4 67 Comexe DDNS Th...

Page 104: ...NS service provider Domain Name 5 Optional Enter the Domain Name that you registered with your DDNS service provider DDNS Service Activate or inactivate DDNS service here WAN Port Displays the WAN port for which Comexe DDNS is selected DDNS Status Displays the current status of DDNS service z Offline DDNS service is disabled z Connecting client is connecting to the server z Online DDNS works norma...

Page 105: ...o load the following page Figure 4 68 UPnP The following items are displayed on this screen General UPnP Function Enable or disable the UPnP function globally List of UPnP Mapping After UPnP is enabled all UPnP connection rules will be displayed in the list of UPnP Mapping The NO 1 entry in Figure 4 68 indicates TCP data received on port 12856 of the WAN port in the Router will be forwarded to por...

Page 106: ...e of the Router Current Password Enter the current password of the Router New User Name Enter a new user name for the Router New Password Enter a new password for the Router Confirm New Password Re enter the new password for confirmation Note The factory default password and user name are both admin You should enter the new user name and password when next login if the current username and passwor...

Page 107: ... after a specified period Web Idle Timeout of inactivity Telnet Idle Timeout Enter a timeout period that the Router will log the remote PCs out of the Web based Utility after a specified period Telnet Idle Timeout of inactivity Note The default Web Management Port is 80 If the port is changed you should type http IP address port to login the Router E g If the Web Management Port is changed to 88 t...

Page 108: ...b management page of the Router 4 8 1 3 Remote Management On this page you can configure the Remote Management function This feature allows managing your Router from a remote location via the Internet Choose the menu Maintenance Setup Remote Management to load the following page Figure 4 71 Remote Management The following items are displayed on this screen Remote Management Subnet Mask Specify a s...

Page 109: ...agement Factory Defaults to load the following page Figure 4 72 Factory Defaults Click the Restore to Factory Defaults button to reset all configuration settings to their default values The default IP address is 192 168 0 1 the default login user name and password are both admin 4 8 2 2 Export and Import Choose the menu Maintenance Management Export and Import to load the following page Figure 4 7...

Page 110: ... configuration file you imported varies greatly from current configurations 4 8 2 3 Reboot Choose the menu Maintenance Management Reboot to load the following page Figure 4 74 Reboot Click the Reboot button to reboot the Router The configuration will not be lost after rebooting The Internet connection will be temporarily interrupted while rebooting Note To avoid damage please don t turn off the de...

Page 111: ...h port and extra information of WAN ports Choose the menu Maintenance Statistics Interface Traffic Statistics to load the following page Figure 4 76 Interface Traffic Statistics The following items are displayed on this screen Interface Traffic Statistics Interface Displays the interface Rate Rx Displays the rate for receiving data frames Rate Tx Displays the rate for transmitting data frames Pack...

Page 112: ...ed on this screen General Enable IP Traffic Statistics Allows you to enable or disable IP Traffic Statistics Enable Auto refresh Allows you to enable disable refreshing the IP Traffic Statistics automatically The default refresh interval is 5 seconds Traffic Statistics Direction Select the direction in the drop down list to get the Flow Statistics of the specified direction IP Traffic Statistics T...

Page 113: ...tination IP Domain Enter destination IP address or Domain name here Then select a port for testing if you select Auto the Router will select the interface of destination automatically After clicking Start button the Router will send Ping packets to test the network connectivity and reachability of the host and the results will be displayed in the box below Tracert ...

Page 114: ...g items are displayed on this screen General Port Select the port to be detected Detecting Activate or inactivate Online Detection function When Online Detection is active WAN status will depend on the result of both PING and DNS Lookup When Online Detection is inactive WAN status will be detected according to physical connection status and dial up status Mode Detect automatically or Manually In A...

Page 115: ...ntenance Time Time to load the following page Figure 4 80 Time The following items are displayed on this screen Current Time System Time Displays the current date and time of the Router Time Zone Displays the current time zone of the Router Status Displays the status of time capturing Config Get GMT When this option is selected you can configure the time zone and the IP Address for the NTP Server ...

Page 116: ...system information effectively Choose the menu Maintenance Logs Logs to load the following page Figure 4 81 Logs List of Logs List of Logs displays the system log information in log buffer An entry of log contains the following four parts Config Enable Auto refresh With this option selected the page will refresh automatically every 5 seconds Severity Displays the severity level of the log informat...

Page 117: ... unusable alerts 1 Action must be taken immediately critical 2 Critical conditions errors 3 Error conditions warnings 4 Warnings conditions notifications 5 Normal but significant conditions informational 6 Informational messages debugging 7 Debug level messages ...

Page 118: ...LAN RJ45 ports Auto MDI MDIX One 10 100M Auto Negotiation LAN RJ45 port Auto MDI MDIX Ports One Console Port 10Base T UTP STP of Cat 3 or above Transmission Medium 100Base TX UTP STP of Cat 5 or above LEDs PWR SYS Link Act Speed WAN Power 100 240V 50 60Hz 0 3A Operating Temperature 0ºC 40ºC Storage Temperature 40ºC 70ºC Operating Humidity 10 90 RH Non condensing Operating Environment Storage Humid...

Page 119: ...e configuration of your Router has been changed by others especially when the Remote Web Management function is enabled You re recommended to restore your Router and reconfigure the management port number and the username as well as the password for your network security 4 If you cannot access the Router even after restoring the Router to its defaults or your login is dropped down just after a whi...

Page 120: ...ce port 4 Make sure that the NAT DMZ service is disabled Q4 Some function of the Router need to define the IP address subnet with Subnet Mask What are the common values of the Subnet Mask Subnet Mask is a 32 bit binary address used to distinguish the network address and the host address When dividing the network the different Subnet Mask defines different subnet and each subnet owns different numb...

Page 121: ... a fixed host and domain name to a dynamic Internet IP address DHCP Dynamic Host Configuration Protocol A protocol that automatically configure the TCP IP parameters for the all the PCs that are connected to a DHCP server DMZ Demilitarized Zone A Demilitarized Zone allows one local host to be exposed to the Internet for a special purpose service such as Internet gaming or videoconferencing D DNS D...

Page 122: ...ocol Network layer protocol in the TCP IP stack offering a connectionless Internetwork service IP provides features for addressing type of service specification fragmentation and reassembly and security ISP Internet Service Provider Company that provides Internet access to other companies and individuals IKE Internet Key Exchange IKE establishes a shared security policy and authenticates keys for ...

Page 123: ...etworks POP3 Post Office Protocol 3 POP3 is intended to permit a workstation to dynamically access a maildrop on a server host in a useful fashion P PPPoE Point to Point Protocol over Ethernet PPPoE is a network protocol for encapsulating Point to Point Protocol PPP frames inside Ethernet frames SMTP Simple Mail Transfer Protocol SMTP is an Internet standard for electronic mail e mail transmission...

Page 124: ...networks without enterprise class devices that permits networked devices U URL Uniform Resource Locator URL describes the access method and the location of an information resource object on the Internet V VLAN Virtual Local Area Network Group of devices on one or more LANs that are configured using management software so that they can communicate as if they were attached to the same wire when in f...

Search results

Summary of Contents for SafeStream TL-R480T+

Reviews:

Related manuals for SafeStream TL-R480T+

Brands by name

Popular brands

TP-Link SafeStream TL-R480T+, User Manual

Search results

Summary of Contents for SafeStream TL-R480T+

Reviews:

Related manuals for SafeStream TL-R480T+

Brands by name

Popular brands