Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER604W manual VPN Setting, IPsec VPN, IKE Setting,  IKE Proposal, Settings

Models: TL-ER604W

1 159

Download 159 pages 47.9 Kb

Page 138

Image 138

Figure 4-3 Link Backup

4.3.2 VPN Setting

To enable the hosts in the remote branch office (WAN: 116.31.85.133, LAN: 172.31.10.1) to access the servers in the headquarters, you can create the VPN tunnel via the TP-LINK VPN routers between the headquarters and the remote branch office to guarantee a secured communication. The following takes IPsec settings of the Router in the headquarters for example.

Moreover, you can configure the PPTP VPN Server to establish a remote mobile office, which enables the staff on business to access the FTP server and Mail server in the headquarters via PPTP dial-up connection.

4.3.2.1IPsec VPN

1)IKE Setting

To configure the IKE function, you should create an IKE Proposal firstly.

IKE Proposal

Choose the menu VPN→IKE→IKE Proposal to load the configuration page.

Settings:

Proposal Name:

proposal_IKE_1

Authentication:MD5

Encryption:3DES

DH Group:

DH2

-133-

Page 138

Image 138

TP-Link TL-ER604W manual VPN Setting, IPsec VPN, IKE Setting,  IKE Proposal, Settings

Contents

TL-ER604W Wireless N Gigabit Broadband VPN RouterCOPYRIGHT & TRADEMARKS FCC STATEMENTCE Mark Warning CONTENTS Chapter 1 About this GuideAdvanced Glossary Hardware SpecificationsChapter 4 Application Appendix A Quick Installation Guide  Resource CD Package Contents One TL-ER604W Router  One Power Adapter  One RJ45 Ethernet Cable The following items should be found in your package1.1 Intended Readers SymbolChapter 1 About this Guide 1.2 Conventions Powerful Firewall  Powerful Data Processing Capability Wireless Feature Chapter 2 Introduction Dual-WAN Ports 2.2 Features Flexible Traffic Control  Easy-to-useWireless Traffic ControlSecurity  LEDs 2.3 Appearance2.3.1 Front Panel Status Power  Reset button Wifi button 2.3.2 Rear Panel3.1.1 Status Chapter 3 Configuration3.1 Network 3.1.2 System ModeFigure 3-4 Network Topology - Classic Mode Figure 3-2 Network Topology - NAT ModeFigure 3-3 Network Topology - Non-NAT Mode Choose the menu Network→System Mode to load the following page NAT Mode 3.1.3 WAN3.1.3.1 WAN Mode  Non-NAT ModeTips 3.1.3.2 WAN1 WAN Mode 1 Static IP Static IP Connection Type 2 Dynamic IP Dynamic IP Host NameUse the following DNS Get IP Address byUnicast ServerPrimary DNS Displays the IP address of your ISP’s Primary DNS 3 PPPoEGateway Address Displays the Gateway Address assigned by your ISP Secondary DNS Displays the IP address of your ISP’s Secondary DNSSettings  PPPoE SettingsPassword Account NameSecondary Connection Service NameISP Address Subnet AddressIP Address Gateway Address4 L2TP Primary DNS L2TP Settings Connection Default GatewaySecondary the obtained DNS is displayedStatus  L2TP Status5 PPTP IP AddressPassword  PPTP SettingsServer IP Connection TypeSecondary Connection Default Gateway Primary DNS Secondary DNS Upstream BandwidthActive Mode Connection TypeStatus  PPTP Status6 BigPond IP Address BigPond Settings Status  BigPond StatusDefault Gateway IP Address3.1.4.2 DHCP 3.1.4 LAN3.1.4.1 LAN  LAN DHCP Settings 3.1.4.3 DHCP Client 3.1.4.4 DHCP Reservation DHCP Reservation Set the MAC Address for LAN port 3.1.5 MAC Address List of Reserved Address Set the MAC Address for WAN port MAC Address 3.1.6 Switch3.1.6.1 Statistics Port3.1.6.2 Port Mirror  StatisticsTips Mode Enable Port MirrorGeneral Port Mirror3.1.6.3 Rate Control Application Example Rate Control 3.1.6.4 Port Config  Port ConfigPort 3.1.6.5 Port Status 3.1.6.6 Port VLAN Port VLAN 3.2.1.1 Wireless Setting 3.2 Wireless3.2.1 Wireless Setting  Wireless Setting Wireless Parameter ModeSSID Broadcast SSIDDescription AP IsolationPeriod or above. Enter 0 to disable the updateGroup 2 WPA/WPA2Group 3 WEPor above. Enter 0 to disable the update PeriodHexadecimal and ASCII formats are 3.2.1.2 Multi-SSIDKey Format TipsSpecify a name for the wireless network  Multi-SSID Config General SSIDAP Isolation Enable/DisableGuest Network SSIDPassword EncryptionGroup Key Periodor above. Enter 0 to disable the update Auth TypeHexadecimal and ASCII formats are provided . Hexadecimal format GroupTips 3.2.1.3 WDS List of Group TipsBSSIDto be bridged Scan Parameter Key TypeKey ： 3.2.1.4 Wireless Advanced Wireless Advanced Short GIRTS Threshold 3.2.2 MAC FilteringBeacon Interval Fragmentation Rule List 3.2.3 Host Status Filtering Rules  General Host Status 3.3 User Group3.3.1 Group  General3.3.2 User  Group Config User Config  List of Group List of User  View Config3.3.3 View View3.4.1 NAT 3.4.1.1 NAT Setup3.4 Advanced  NAPT3.4.1.2 One-to-One NAT  One-to-One NAT Multi-Nets NAT 3.4.1.3 Multi-Nets NAT List of Rules  list of RulesConfiguration procedure Application Example Network Requirements3.4.1.4 Virtual Server Protocol  Virtual ServerInterface Status3.4.1.5 Port Triggering  Port Triggering List of Rules 3.4.1.6 ALG Status List of Rules  ALG 3.4.2.1 Setup3.4.2 Traffic Control FTP ALGControl all the time Default LimitControl Limited Bandwidth Control Rule Guaranteed Bandwidth3.4.2.2 Bandwidth Control DirectionLimited Bandwidth 3.4.3 Session Limit3.4.3.1 Session Limit Effective Timeentries will be disabled Enable SessionCheck here to enable Session Limit, otherwise all the Session Limit 3.4.3.2 Session List3.4.4.1 Configuration 3.4.4 Load Balance3.4.4.2 Policy Routing  General Select the WAN port for transmitting packets3.4.4.3 Link Backup  List of Rules General Timing WAN Config3.4.4.4 Protocol Failover Protocol 3.4.5 Routing3.4.5.1 Static Route  List of Protocol Static Route  List of Rules3.4.5.2 RIP Application Example List of RIP Choose the menu Advanced→Routing→RIP to load the following page General The Destination of route entry 3.4.5.3 Route TableDestination Gateway3.5.1.1 IP-MAC Binding 3.5 Firewall3.5.1 Anti ARP Spoofing  GeneralIP Address 3.5.1.2 ARP Scanning IP-MAC Binding Status3.5.1.3 ARP List 3.5.2 Attack Defense Packet Anomaly Enable AttackFlood Defense Defense3.5.4.1 URL Filtering 3.5.4 Access Control3.5.3 MAC Filtering  MAC Filtering General  URL Filtering RuleObject Mode3.5.4.2 Web Filtering 3.5.4.3 Access RulesConfiguration Procedure Application Example Network RequirementsPolicy  Access RulesService SourcePriority 3.5.4.4 Servicegroup on 3.3.1 Group DestinationName  Service List of Service Dest. Port Control Rules 3.5.5 App Control3.5.5.1 Control Rules Application3.6 VPN 3.5.5.2 Database List of Rules 3.6.1 IKE 3.6.1.1 IKE Policy IKE Policy Remote ID Type 3.6.1.2 IKE ProposalLocal ID Remote ID IKE Proposal 3.6.2 IPsec 3.6.2.1 IPsec Policy List of IKE Proposal Local Subnet  IPsec PolicyPolicy Name  GeneralPolicy Mode Remote SubnetRemote Gateway  IKE ModeAH Authentication Key-Out AH Authentication Key-InESP Authentication Key-In ESP Authentication Key-Out IPsec Proposal 3.6.2.2 IPsec Proposal List of IPsec Policy IPsec Tips List of IPsec Proposal 3.6.2.3 IPsec SA Authentication3.6.3 L2TP/PPTP Protocol General 3.6.3.1 L2TP/PPTP Tunnel L2TP/PPTP Tunnel ProtocolL2TP/PPTP Server TunnelMax Connections Pre-shard Key3.6.3.3 List of L2TP/PPTP Tunnel  List of Configurations3.6.3.2 IP Address Pool  IP Address Pool3.7 Services 3.7.1 PPPoE Server3.7.1.1 General Figure 3-70 General The following items are displayed on this screen  General3.7.1.2 IP Address Pool  IP Address PoolIP Address Assigned 3.7.1.3 Account Account Static IP Address List of Account is 48. If Enable Advanced Account Features is not selected, the3.7.1.4 Exceptional IP Status Exceptional IP 3.7.2 E-Bulletin3.7.1.5 List of Account StatusTitle Interval E-Bulletin  General List of E-Bulletin 3.7.3 Dynamic DNSPublisher Object3.7.3.1 DynDNS  Dyndns DDNS3.7.3.2 No-IP  List of DynDNS Account No-IP DDNS 3.7.3.3 PeanutHull  List of No-IP Account PeanutHull DDNS 3.7.3.4 Comexe  List of PeanutHull Account3.7.4 UPnP  Comexe DDNS List of Comexe Account 3.8.1.1 Administrator 3.8 Maintenance3.8.1 Admin Setup  List of UPnP Mapping3.8.1.2 Login Parameter  Administrator3.8.1.3 Remote Management  Remote Management General  List of Subnet 3.8.2.1 Factory Defaults3.8.2 Management Configuration Procedure3.8.2.2 Export and Import 3.8.2.3 Reboot Configuration Version  Export3.8.2.4 Firmware Upgrade 3.8.3 License Interface Traffic Statistics 3.8.4 Statistics3.8.4.1 Interface Traffic Statistics Displays the interfaceDisplays the number of packets received on the interface 3.8.4.2 IP Traffic StatisticsPackets Rx Packets Tx Traffic Statistics 3.8.5 Diagnostics3.8.5.1 Diagnostics  IP Traffic Statistics Tracert 3.8.5.2 Online Detection Ping  GeneralDNS Lookup 3.8.6 TimePing  List of WAN statusCurrent Time Config3.8.7 Logs System TimeSeverity  Config List of Logs Send System LogsChapter 4 Application 4.1 Network Requirements4.3.1.1 System Mode 4.2 Network Topology 4.3 Configurations4.3.1 Internet Setting Tips4.3.1.3 Link Backup 4.3.1.2 Internet ConnectionSettings 4.3.2 VPN Setting1 IKE Setting 4.3.2.1 IPsec VPN IKE Policy SettingsClick the Add button to apply Figure 4-4 IKE Proposal Settings 2 IPsec Setting IPsec Proposal Tips IPsec Policy SettingsproposalIPsec1 you just created 4.3.2.2 PPTP VPN Setting  IP Address PoolTips  L2TP/PPTP Tunnel SettingsL2TP/PPTPEnable ProtocolPPTP ModeServer UsernamePPTP Passwordabcdefg  Group 4.3.3 Network Management4.3.3.1 User Group  User4.3.3.2 App Control  ViewSettings 1 Enable Bandwidth Control 4.3.3.3 Bandwidth Control2 Interface Bandwidth Settings 4.3.3.4 Session Limit3 Bandwidth Control Rule Settings4.3.4 Network Security 4.3.4.1 LAN ARP Defense1 Scan and import the entries to ARP List 3 Set Attack Defense 4.3.4.2 WAN ARP Defense2 Set IP-MAC Binding Entry Manually Settings4.3.4.3 Attack Defense 4.3.4.4 Traffic Monitoring 1 Port Mirror2 Statistics Figure 4-23 IP Traffic Statistics Wireless Appendix A Hardware SpecificationsEnvironmental and Physical GeneralAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled AH （Authentication Header ） Appendix C GlossaryGlossary data authentication, and anti-replay services. ESP encapsulatesfor services such as IPSec that require keys. Before any IPSec GlossaryDescription Glossary DescriptionGlossary Descriptionenterprise