TP-Link manual Advanced Security, TL-WR940N Wireless N Router

Page 65
4.9.2 Advanced Security

TL-WR940NWireless N Router

¾ALG - It is recommended to enable Application Layer Gateway (ALG) because ALG allows customized Network Address Translation (NAT) traversal filters to be plugged into the gateway to support address and port translation for certain application layer "control/data" protocols such as FTP, TFTP, H323 etc.

z

z

z

FTP ALG - To allow FTP clients and servers to transfer data across NAT, keep the default Enable.

TFTP ALG - To allow TFTP clients and servers to transfer data across NAT, keep the default Enable.

H323 ALG - To allow Microsoft NetMeeting clients to communicate across NAT, keep the default Enable.

Click the Save button to save your settings.

4.9.2 Advanced Security

Choose menu “Security Advanced Security”, you can protect the Router from being attacked by TCP-SYN Flood, UDP Flood and ICMP-Flood in the screen as shown in Figure 4-38.

Figure 4-38Advanced Security

¾Packets Statistics Interval (5~60) - The default value is 10. Select a value between 5 and 60 seconds from the drop-down list. The Packets Statistics Interval value indicates the time section of the packets statistics. The result of the statistics is used for analysis by SYN Flood,

-57-

Image 65
Contents Rev 1.1.0 TL-WR940N Wireless N RouterFCC STATEMENT COPYRIGHT & TRADEMARKSCE Mark Warning FCC RF Radiation Exposure StatementNational restrictions CountryNCC Notice Industry Canada StatementKorea Warning Statements ETSI EN 300 328 V1.7.1 DECLARATION OF CONFORMITYETSI EN 301 489-1 V1.8.12008& ETSI EN 301 489-17 EN 550222006 +A12007 EN 550241998+A12001+A22003 EN 61000-3-22006+A12009+A22009 ENChapter CONTENTSPackage Contents 4.6.5 4.15.1 TL-WR940N Wireless N Router Package ContentsSimple Installation Flexible Access ControlChapter 1.Introduction 1.1 Overview of the Router1.4.1 The Front Panel 1.3 Main Features1.4 Panel Layout 1.4.2 The Rear Panel Wireless N RouterTL-WR940N Indication¾ RESET 2.2 Installation Environment Requirements Chapter 2.Connecting the Router2.3 Connecting the Router 2.1 System RequirementsFigure 2-1 Hardware Installation of the TL-WR940N Wireless N Router 3.1 TCP/IP Configuration Chapter 3.Quick Installation GuideFigure 3-1 Success result of Ping command Please check the connection following these stepsFigure 3-2 Failure result of Ping command 1. Is the connection between your PC and the Router correct?3.2 Quick Installation Guide Figure 3-6 Choose WAN Connection Type Figure 3-5 Quick SetupFigure 3-8 Quick Setup - MAC Clone Figure 3-7 Quick Setup - PPPoEFigure 3-10 Quick Setup - Static IP Figure 3-9 Quick Setup - MAC CloneNote Dialog z PSK Password - You can enter ASCII or Hexadecimal characters Figure 3-13 Quick Setup - Finish 4.2 Status Chapter 4.Configuring the Router4.1 Login 4.4 QSS 4.3 Quick SetupPlease refer to 3.2 Quick Installation Guide Figure 4-1 Router StatusMethod One I. By PBCMethod Two The QSS Configuration Screen of Wireless Adapter Method ThreeTL-WR940N Wireless N Router II. By PIN Method Two Enter the PIN from my Router added to the network 4.5 Network4.5.1 WAN Figure 4-5 WAN - Dynamic IP Figure 4-6 WAN - Static IP Figure 4-7 WAN - PPPoE Figure 4-8 PPPoE Advanced Settings NSW / ACT - nsw.bigpond.net.au QLD - qld.bigpond.net.au Figure 4-10 L2TP Settings Figure 4-11 PPTP Settings z Static IP - Connections which use static IP address assignment z Dynamic IP - Connections which use dynamic IP address assignment4.5.3 MAC Clone 4.5.2 LANFigure 4-12 LAN Figure 4-13 MAC Address CloneOnly the PC on your LAN can use the MAC Address Clone function 4.6 Wireless4.6.1 Wireless Settings Figure 4-15 Wireless Settings ¾ Mode - Select the desired mode. The default setting is 11bgn mixed 4.6.2 Wireless Security ¾ WPA /WPA2 - Enterprise - It’s based on Radius Server Encryption - You can select either Automatic, or TKIP or AES Figure 4-20 Wireless MAC address Filtering 4.6.3 Wireless MAC Filtering4. Click the Save button to save this entry to access for Filtering Rules 4.6.4 Wireless Advanced4.6.5 Wireless Statistics This page will be refreshed automatically every 5 seconds 4.7.1 DHCP Settings4.7 DHCP ¾ Default Domain - Optional. Input the domain name of your network 4.7.3 Address Reservation 4.7.2 DHCP Clients ListTo modify or delete an existing entry 4.8 ForwardingTo Reserve IP addresses 4.8.1 Virtual Servers To set up a virtual server entryFigure 4-31 Add or Modify a Virtual Server Entry 4.8.2 Port TriggeringTo add a new rule, follow the steps below 3. Incoming Port Range cannot overlap each other 4.8.3 DMZTo assign a computer or server to be a DMZ server 4.8.4 UPnP4.9.1 Basic Security 4.9 Securityz z z Figure 4-37 Basic Security4.9.2 Advanced Security 4.9.3 Local Management Figure 4-39 Local Management 4.9.4 Remote ManagementFigure 4-40 Remote Management 4.10Parental ControlTo add a new entry, please follow the steps below 7. Click the Save button 4.11.1 Rule 4.11Access ControlFigure 4-45 Access Control Rule Management To add a new rule, please follow the steps belowFigure 4-46 Add or Modify Internet Access Control Entry Figure 4-47 Host Settings 4.11.2 HostFigure 4-49 Add or Modify a Host Entry Figure 4-48 Add or Modify a Host EntryFigure 4-50 Target Settings 4.11.3 TargetFigure 4-52 Add or Modify an Access Target Entry Figure 4-51 Add or Modify an Access Target EntryTo add a new schedule, follow the steps below 4.11.4 ScheduleFigure 4-55 Advanced Routing 4.12 Advanced RoutingFigure 4-54 Advanced Schedule Settings To add static routing entries Other configurations for the entries4.12.1 Static Routing List 4.12.2 System Routing Table 4.13Bandwidth Control4.13.2 Rules List 4.13.1 Control SettingsTo add/modify a Bandwidth Control rule, follow the steps below 4.14IP & MAC Binding Setting4.14.1 Binding Setting To modify or delete an existing entry, follow the steps below To add IP & MAC Binding entries, follow the steps belowTo find an existing entry, follow the steps below Figure 4-64 Binding SettingFigure 4-67 ARP List 4.14.2 ARP ListFigure 4-66 Find IP & MAC Binding Entry 4.15.1 Comexe.cn DDNS 4.15Dynamic DNS4.15.2 Dyndns.org DDNS To set up for DDNS, follow these instructionsFigure 4-69 Dyndns.org DDNS Settings 4.15.3 No-ip.com DDNSFigure 4-71 The System Tools menu 4.16System ToolsFigure 4-70 No-ip.com DDNS Settings To set time manually 4.16.1 Time SettingsTo set time automatically 4.16.2 DiagnosticTo set Daylight Saving 2. The time will be lost if the router is turned offFigure 4-73 Diagnostic Tools To upgrade the Routers firmware, follow these instructions below 4.16.3 Firmware Upgrade4. The Router will reboot after the upgrading has been finished 4.16.4 Factory Defaults4.16.5 Backup & Restore 4.16.6 Reboot 4.16.8 System Log 4.16.7 PasswordFigure 4-80 System Log Figure 4-81 Mail Account Settings Figure 4-82 Statistics 4.16.9 StatisticsStatistics Table 1. How do I configure the Router to access Internet by ADSL users? Appendix A FAQFigure A-4 Virtual Servers 3. I want to use Netmeeting, what do I need to do?Figure A-3 MAC Clone Figure A-6 DMZ Figure A-5 Add or Modify a Virtual server Entry4. I want to build a WEB Server on the LAN, what should I do? field of the Web browser 5. The wireless stations cannot connect to the Router1. Install TCP/IP component Appendix B Configuring the PCsNow you have two ways to configure the TCP/IP protocol below ¾ Setting IP address automaticallyshown in the Figure below Figure B-2Figure B-3 ¾ Setting IP address manuallyFigure B-4 Wireless Appendix C SpecificationsGeneral Environmental and PhysicalAppendix D Glossary identifying a wireless local area network. For the wireless devices in a network to communicate with each other, all devices must be configured with the same SSID. This is typically the configuration parameter for a wireless PC card. It corresponds to the ESSID in the wireless Access Point and to the wireless network name