Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER604W manual  IKE Policy, Click the Add button to apply -4 IKE Proposal, Settings

Models: TL-ER604W

1 159

Download 159 pages 47.9 Kb

Page 139

Image 139

Click the <Add> button to apply.

Figure 4-4 IKE Proposal

IKE Policy

Choose the menu VPN→IKE→IKE Policy to load the configuration page.

Settings:

Policy Name:	IKE_1
Exchange Mode:	Main
IKE Proposal:	proposal_IKE_1 (you just created)
Pre-shared Key:	aabbccddee
SA Lifetime:	3600
DPD:	Enable
DPD Interval:	10

Click the <Add> button to apply.

-134-

Page 139

Image 139

TP-Link TL-ER604W manual  IKE Policy, Click the Add button to apply -4 IKE Proposal, Settings

Contents

Wireless N Gigabit Broadband VPN Router TL-ER604WFCC STATEMENT COPYRIGHT & TRADEMARKSCE Mark Warning Chapter 1 About this Guide CONTENTSAdvanced Appendix A Hardware SpecificationsChapter 4 Application GlossaryThe following items should be found in your package Package Contents One TL-ER604W Router  One Power Adapter  One RJ45 Ethernet Cable  Quick Installation Guide  Resource CD1.2 Conventions SymbolChapter 1 About this Guide 1.1 Intended ReadersChapter 2 Introduction  Powerful Data Processing Capability Wireless Feature  Powerful Firewall Easy-to-use 2.2 Features Flexible Traffic Control  Dual-WAN PortsTraffic Control WirelessSecurity Status 2.3 Appearance2.3.1 Front Panel  LEDs2.3.2 Rear Panel  Reset button Wifi button  Power3.1.1 Status Chapter 3 Configuration3.1.2 System Mode 3.1 NetworkChoose the menu Network→System Mode to load the following page Figure 3-2 Network Topology - NAT ModeFigure 3-3 Network Topology - Non-NAT Mode Figure 3-4 Network Topology - Classic Mode Classic Mode 3.1.3.1 WAN Mode NAT Mode  Non-NAT Mode1 Static IP  WAN Mode3.1.3.2 WAN1 Tips Static IP Host Name 2 Dynamic IP Dynamic IP Connection TypeServer Get IP Address byUnicast Use the following DNSSecondary DNS Displays the IP address of your ISP’s Secondary DNS 3 PPPoEGateway Address Displays the Gateway Address assigned by your ISP Primary DNS Displays the IP address of your ISP’s Primary DNSSettings  PPPoE SettingsPassword Active ModeSubnet Address Service NameISP Address Secondary ConnectionPrimary DNS Gateway Address4 L2TP IP Address L2TP Settings the obtained DNS is displayed Default GatewaySecondary ConnectionIP Address  L2TP Status5 PPTP StatusConnection Type  PPTP SettingsServer IP PasswordConnection Type Default Gateway Primary DNS Secondary DNS Upstream BandwidthActive Mode Secondary ConnectionIP Address  PPTP Status6 BigPond Status BigPond Settings IP Address  BigPond StatusDefault Gateway Status LAN 3.1.4 LAN3.1.4.1 LAN 3.1.4.2 DHCP DHCP Settings 3.1.4.4 DHCP Reservation 3.1.4.3 DHCP Client DHCP Reservation Set the MAC Address for WAN port 3.1.5 MAC Address List of Reserved Address Set the MAC Address for LAN portPort 3.1.6 Switch3.1.6.1 Statistics  MAC Address Statistics 3.1.6.2 Port MirrorTips Port Mirror Enable Port MirrorGeneral ModeApplication Example 3.1.6.3 Rate Control Rate Control  Port Config 3.1.6.4 Port ConfigPort 3.1.6.6 Port VLAN 3.1.6.5 Port Status Port VLAN  Wireless Setting 3.2 Wireless3.2.1 Wireless Setting 3.2.1.1 Wireless SettingMode  Wireless ParameterAP Isolation SSIDDescription SSID Broadcast2 WPA/WPA2 or above. Enter 0 to disable the updateGroup PeriodPeriod 3 WEPor above. Enter 0 to disable the update GroupTips 3.2.1.2 Multi-SSIDKey Format Hexadecimal and ASCII formats areSSID  Multi-SSID Config General Specify a name for the wireless networkSSID Enable/DisableGuest Network AP IsolationPeriod EncryptionGroup Key PasswordGroup Auth TypeHexadecimal and ASCII formats are provided . Hexadecimal format or above. Enter 0 to disable the updateTips 3.2.1.3 WDS List of Group TipsKey Type Scan Parameter BSSIDto be bridgedShort GI 3.2.1.4 Wireless Advanced Wireless Advanced Key ：Fragmentation 3.2.2 MAC FilteringBeacon Interval RTS Threshold General 3.2.3 Host Status Filtering Rules  Rule List General 3.3 User Group3.3.1 Group  Host Status List of Group  Group Config User Config 3.3.2 UserView  View Config3.3.3 View  List of User NAPT 3.4.1.1 NAT Setup3.4 Advanced 3.4.1 NAT One-to-One NAT 3.4.1.2 One-to-One NAT list of Rules 3.4.1.3 Multi-Nets NAT List of Rules  Multi-Nets NATApplication Example Network Requirements Configuration procedure3.4.1.4 Virtual Server Status  Virtual ServerInterface Protocol Port Triggering 3.4.1.5 Port Triggering List of Rules Status 3.4.1.6 ALG List of Rules FTP ALG 3.4.2.1 Setup3.4.2 Traffic Control  ALGLimited Default LimitControl Control all the timeDirection Guaranteed Bandwidth3.4.2.2 Bandwidth Control  Bandwidth Control RuleEffective Time 3.4.3 Session Limit3.4.3.1 Session Limit Limited Bandwidth3.4.3.2 Session List Enable SessionCheck here to enable Session Limit, otherwise all the Session Limit entries will be disabled3.4.4 Load Balance 3.4.4.1 Configuration3.4.4.2 Policy Routing Select the WAN port for transmitting packets  General List of Rules 3.4.4.3 Link Backup General Failover WAN Config3.4.4.4 Protocol Timing List of Protocol 3.4.5 Routing3.4.5.1 Static Route  Protocol List of Rules  Static RouteApplication Example 3.4.5.2 RIPChoose the menu Advanced→Routing→RIP to load the following page  List of RIP General Gateway 3.4.5.3 Route TableDestination The Destination of route entry General 3.5 Firewall3.5.1 Anti ARP Spoofing 3.5.1.1 IP-MAC BindingStatus 3.5.1.2 ARP Scanning IP-MAC Binding IP Address3.5.1.3 ARP List 3.5.2 Attack Defense Defense Enable AttackFlood Defense Packet Anomaly MAC Filtering 3.5.4 Access Control3.5.3 MAC Filtering 3.5.4.1 URL FilteringMode  URL Filtering RuleObject  GeneralApplication Example Network Requirements 3.5.4.3 Access RulesConfiguration Procedure 3.5.4.2 Web FilteringSource  Access RulesService PolicyDestination 3.5.4.4 Servicegroup on 3.3.1 Group PriorityDest. Port  Service List of Service NameApplication 3.5.5 App Control3.5.5.1 Control Rules  Control Rules3.5.5.2 Database 3.6 VPN List of Rules 3.6.1.1 IKE Policy 3.6.1 IKE IKE Policy Remote ID 3.6.1.2 IKE ProposalLocal ID Remote ID Type IKE Proposal 3.6.2.1 IPsec Policy 3.6.2 IPsec List of IKE Proposal  General  IPsec PolicyPolicy Name Local SubnetRemote Gateway Policy Mode IKE Mode Remote SubnetAH Authentication Key-Out  Manual ModeAH Authentication Key-In ESP Authentication Key-InTips 3.6.2.2 IPsec Proposal List of IPsec Policy IPsec  IPsec Proposal List of IPsec Proposal Protocol Authentication3.6.3 L2TP/PPTP 3.6.2.3 IPsec SAProtocol 3.6.3.1 L2TP/PPTP Tunnel L2TP/PPTP Tunnel  GeneralPre-shard Key TunnelMax Connections L2TP/PPTP Server IP Address Pool  List of Configurations3.6.3.2 IP Address Pool 3.6.3.3 List of L2TP/PPTP Tunnel3.7.1 PPPoE Server 3.7 Services3.7.1.1 General  General Figure 3-70 General The following items are displayed on this screen IP Address Pool 3.7.1.2 IP Address PoolStatic IP Address 3.7.1.3 Account Account IP Address AssignedStatus is 48. If Enable Advanced Account Features is not selected, the3.7.1.4 Exceptional IP  List of AccountStatus 3.7.2 E-Bulletin3.7.1.5 List of Account  Exceptional IP General Interval E-Bulletin TitleObject 3.7.3 Dynamic DNSPublisher  List of E-Bulletin Dyndns DDNS 3.7.3.1 DynDNS List of DynDNS Account 3.7.3.2 No-IP No-IP DDNS  List of No-IP Account 3.7.3.3 PeanutHull PeanutHull DDNS  List of PeanutHull Account 3.7.3.4 Comexe Comexe DDNS 3.7.4 UPnP List of Comexe Account  List of UPnP Mapping 3.8 Maintenance3.8.1 Admin Setup 3.8.1.1 Administrator Administrator 3.8.1.2 Login Parameter Remote Management 3.8.1.3 Remote Management General Configuration Procedure 3.8.2.1 Factory Defaults3.8.2 Management  List of Subnet Export 3.8.2.3 Reboot Configuration Version 3.8.2.2 Export and Import3.8.3 License 3.8.2.4 Firmware UpgradeDisplays the interface 3.8.4 Statistics3.8.4.1 Interface Traffic Statistics  Interface Traffic StatisticsPackets Tx 3.8.4.2 IP Traffic StatisticsPackets Rx Displays the number of packets received on the interface IP Traffic Statistics 3.8.5 Diagnostics3.8.5.1 Diagnostics  Traffic Statistics General 3.8.5.2 Online Detection Ping  Tracert List of WAN status 3.8.6 TimePing DNS LookupSystem Time Config3.8.7 Logs Current TimeSend System Logs  Config List of Logs Severity4.1 Network Requirements Chapter 4 ApplicationTips 4.2 Network Topology 4.3 Configurations4.3.1 Internet Setting 4.3.1.1 System Mode4.3.1.2 Internet Connection 4.3.1.3 Link Backup4.3.2.1 IPsec VPN 4.3.2 VPN Setting1 IKE Setting SettingsSettings  IKE PolicyClick the Add button to apply Figure 4-4 IKE Proposal Tips 2 IPsec Setting IPsec Proposal SettingsSettings  IPsec PolicyproposalIPsec1 you just created  IP Address Pool 4.3.2.2 PPTP VPN SettingTips Settings  L2TP/PPTP TunnelL2TP/PPTPEnable ProtocolPPTP ModeServer UsernamePPTP Passwordabcdefg  User 4.3.3 Network Management4.3.3.1 User Group  Group View 4.3.3.2 App ControlSettings 4.3.3.3 Bandwidth Control 1 Enable Bandwidth Control2 Interface Bandwidth Settings 4.3.3.4 Session Limit3 Bandwidth Control Rule Settings4.3.4.1 LAN ARP Defense 4.3.4 Network Security1 Scan and import the entries to ARP List Settings 4.3.4.2 WAN ARP Defense2 Set IP-MAC Binding Entry Manually 3 Set Attack Defense4.3.4.3 Attack Defense 1 Port Mirror 4.3.4.4 Traffic Monitoring2 Statistics Figure 4-23 IP Traffic Statistics General Appendix A Hardware SpecificationsEnvironmental and Physical WirelessAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled data authentication, and anti-replay services. ESP encapsulates Appendix C GlossaryGlossary AH （Authentication Header ）Glossary for services such as IPSec that require keys. Before any IPSecDescription Description GlossaryDescription Glossaryenterprise