Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER604W manual IPsec Setting,  IPsec Proposal, Tips, Settings, proposalIPsec1

Models: TL-ER604W

1 159

Download 159 pages 47.9 Kb

Page 140

Image 140

Figure 4-5 IKE Policy

Tips:

For the VPN Router in the remote branch office, the IKE settings should be the same as the Router in the headquarters.

2)IPsec Setting

To configure the IPsec function, you should create an IPsec Proposal firstly.

IPsec Proposal

Choose the menu VPN→IPsec→IPsec Proposal to load the following page.

Settings:

Proposal Name:	proposal_IPsec_1
Security Protocol:	ESP
ESP Authentication:	MD5
ESP Encryption:	3DES

Click the <Save> button to apply.

-135-

Page 140

Image 140

TP-Link TL-ER604W manual IPsec Setting,  IPsec Proposal, Tips, Settings, proposalIPsec1

Contents

TL-ER604W Wireless N Gigabit Broadband VPN RouterCE Mark Warning COPYRIGHT & TRADEMARKSFCC STATEMENT CONTENTS Chapter 1 About this GuideAdvanced Hardware Specifications Chapter 4 ApplicationGlossary Appendix APackage Contents  One TL-ER604W Router  One Power Adapter  One RJ45 Ethernet Cable Quick Installation Guide  Resource CD The following items should be found in your packageSymbol Chapter 1 About this Guide1.1 Intended Readers 1.2 Conventions Powerful Data Processing Capability  Wireless Feature Powerful Firewall Chapter 2 Introduction2.2 Features  Flexible Traffic Control Dual-WAN Ports  Easy-to-useSecurity WirelessTraffic Control 2.3 Appearance 2.3.1 Front Panel LEDs Status Reset button  Wifi button Power 2.3.2 Rear PanelChapter 3 Configuration 3.1.2 System Mode3.1 Network 3.1.1 StatusFigure 3-2 Network Topology - NAT Mode Figure 3-3 Network Topology - Non-NAT ModeFigure 3-4 Network Topology - Classic Mode Choose the menu Network→System Mode to load the following page3.1.3.1 WAN Mode  NAT Mode Non-NAT Mode  Classic Mode WAN Mode 3.1.3.2 WAN1Tips 1 Static IP Static IP 2 Dynamic IP  Dynamic IPConnection Type Host NameGet IP Address by UnicastUse the following DNS Server3 PPPoE Gateway Address Displays the Gateway Address assigned by your ISPPrimary DNS Displays the IP address of your ISP’s Primary DNS Secondary DNS Displays the IP address of your ISP’s Secondary DNS PPPoE Settings PasswordActive Mode SettingsService Name ISP AddressSecondary Connection Subnet AddressGateway Address 4 L2TPIP Address Primary DNS L2TP Settings Default Gateway SecondaryConnection the obtained DNS is displayed L2TP Status 5 PPTPStatus IP Address PPTP Settings Server IPPassword Connection TypeDefault Gateway Primary DNS Secondary DNS Upstream Bandwidth Active ModeSecondary Connection Connection Type PPTP Status 6 BigPondStatus IP Address BigPond Settings  BigPond Status Default GatewayStatus IP Address3.1.4 LAN 3.1.4.1 LAN3.1.4.2 DHCP  LAN DHCP Settings  DHCP Reservation 3.1.4.3 DHCP Client3.1.4.4 DHCP Reservation 3.1.5 MAC Address  List of Reserved AddressSet the MAC Address for LAN port Set the MAC Address for WAN port3.1.6 Switch 3.1.6.1 Statistics MAC Address PortTips 3.1.6.2 Port Mirror Statistics Enable Port Mirror GeneralMode Port Mirror Rate Control 3.1.6.3 Rate ControlApplication Example Port 3.1.6.4 Port Config Port Config  Port VLAN 3.1.6.5 Port Status3.1.6.6 Port VLAN 3.2 Wireless 3.2.1 Wireless Setting3.2.1.1 Wireless Setting  Wireless Setting Wireless Parameter ModeSSID DescriptionSSID Broadcast AP Isolationor above. Enter 0 to disable the update GroupPeriod 2 WPA/WPA23 WEP or above. Enter 0 to disable the updateGroup Period3.2.1.2 Multi-SSID Key FormatHexadecimal and ASCII formats are Tips Multi-SSID Config  GeneralSpecify a name for the wireless network SSIDEnable/Disable Guest NetworkAP Isolation SSIDEncryption Group KeyPassword PeriodAuth Type Hexadecimal and ASCII formats are provided . Hexadecimal formator above. Enter 0 to disable the update Group3.2.1.3 WDS  List of GroupTips TipsScan  ParameterBSSIDto be bridged Key Type3.2.1.4 Wireless Advanced  Wireless AdvancedKey ： Short GI3.2.2 MAC Filtering Beacon IntervalRTS Threshold Fragmentation3.2.3 Host Status  Filtering Rules Rule List  General3.3 User Group 3.3.1 Group Host Status  General Group Config  User Config3.3.2 User  List of Group View Config 3.3.3 View List of User View3.4.1.1 NAT Setup 3.4 Advanced3.4.1 NAT  NAPT3.4.1.2 One-to-One NAT  One-to-One NAT3.4.1.3 Multi-Nets NAT  List of Rules Multi-Nets NAT  list of RulesConfiguration procedure Application Example Network Requirements3.4.1.4 Virtual Server  Virtual Server InterfaceProtocol Status List of Rules 3.4.1.5 Port Triggering Port Triggering  List of Rules 3.4.1.6 ALGStatus 3.4.2.1 Setup 3.4.2 Traffic Control ALG FTP ALGDefault Limit ControlControl all the time LimitedGuaranteed Bandwidth 3.4.2.2 Bandwidth Control Bandwidth Control Rule Direction3.4.3 Session Limit 3.4.3.1 Session LimitLimited Bandwidth Effective TimeEnable Session Check here to enable Session Limit, otherwise all the Session Limitentries will be disabled 3.4.3.2 Session List3.4.4.2 Policy Routing 3.4.4.1 Configuration3.4.4 Load Balance  General Select the WAN port for transmitting packets General 3.4.4.3 Link Backup List of Rules WAN Config 3.4.4.4 ProtocolTiming Failover3.4.5 Routing 3.4.5.1 Static Route Protocol  List of Protocol Static Route  List of Rules3.4.5.2 RIP Application Example General  List of RIPChoose the menu Advanced→Routing→RIP to load the following page 3.4.5.3 Route Table DestinationThe Destination of route entry Gateway3.5 Firewall 3.5.1 Anti ARP Spoofing3.5.1.1 IP-MAC Binding  General3.5.1.2 ARP Scanning  IP-MAC BindingIP Address Status3.5.1.3 ARP List 3.5.2 Attack Defense Enable Attack Flood DefensePacket Anomaly Defense3.5.4 Access Control 3.5.3 MAC Filtering3.5.4.1 URL Filtering  MAC Filtering URL Filtering Rule Object General Mode3.5.4.3 Access Rules Configuration Procedure3.5.4.2 Web Filtering Application Example Network Requirements Access Rules ServicePolicy Source3.5.4.4 Service group on 3.3.1 GroupPriority Destination Service  List of ServiceName Dest. Port3.5.5 App Control 3.5.5.1 Control Rules Control Rules Application List of Rules 3.6 VPN3.5.5.2 Database 3.6.1 IKE 3.6.1.1 IKE Policy IKE Policy 3.6.1.2 IKE Proposal Local IDRemote ID Type Remote ID IKE Proposal  List of IKE Proposal 3.6.2 IPsec3.6.2.1 IPsec Policy  IPsec Policy Policy NameLocal Subnet  GeneralPolicy Mode  IKE ModeRemote Subnet Remote Gateway Manual Mode AH Authentication Key-InESP Authentication Key-In AH Authentication Key-Out3.6.2.2 IPsec Proposal  List of IPsec Policy IPsec IPsec Proposal Tips List of IPsec Proposal Authentication 3.6.3 L2TP/PPTP3.6.2.3 IPsec SA Protocol3.6.3.1 L2TP/PPTP Tunnel  L2TP/PPTP Tunnel General ProtocolTunnel Max ConnectionsL2TP/PPTP Server Pre-shard Key List of Configurations 3.6.3.2 IP Address Pool3.6.3.3 List of L2TP/PPTP Tunnel  IP Address Pool3.7.1.1 General 3.7 Services3.7.1 PPPoE Server Figure 3-70 General The following items are displayed on this screen  General3.7.1.2 IP Address Pool  IP Address Pool3.7.1.3 Account  AccountIP Address Assigned Static IP Addressis 48. If Enable Advanced Account Features is not selected, the 3.7.1.4 Exceptional IP List of Account Status3.7.2 E-Bulletin 3.7.1.5 List of Account Exceptional IP StatusInterval  E-BulletinTitle  General3.7.3 Dynamic DNS Publisher List of E-Bulletin Object3.7.3.1 DynDNS  Dyndns DDNS No-IP DDNS 3.7.3.2 No-IP List of DynDNS Account  PeanutHull DDNS 3.7.3.3 PeanutHull List of No-IP Account 3.7.3.4 Comexe  List of PeanutHull Account List of Comexe Account 3.7.4 UPnP Comexe DDNS 3.8 Maintenance 3.8.1 Admin Setup3.8.1.1 Administrator  List of UPnP Mapping3.8.1.2 Login Parameter  Administrator General 3.8.1.3 Remote Management Remote Management 3.8.2.1 Factory Defaults 3.8.2 Management List of Subnet Configuration Procedure3.8.2.3 Reboot  Configuration Version3.8.2.2 Export and Import  Export3.8.2.4 Firmware Upgrade 3.8.3 License3.8.4 Statistics 3.8.4.1 Interface Traffic Statistics Interface Traffic Statistics Displays the interface3.8.4.2 IP Traffic Statistics Packets RxDisplays the number of packets received on the interface Packets Tx3.8.5 Diagnostics 3.8.5.1 Diagnostics Traffic Statistics  IP Traffic Statistics3.8.5.2 Online Detection  Ping Tracert  General3.8.6 Time PingDNS Lookup  List of WAN statusConfig 3.8.7 LogsCurrent Time System Time Config  List of LogsSeverity Send System LogsChapter 4 Application 4.1 Network Requirements4.2 Network Topology 4.3 Configurations 4.3.1 Internet Setting4.3.1.1 System Mode Tips4.3.1.3 Link Backup 4.3.1.2 Internet Connection4.3.2 VPN Setting 1 IKE SettingSettings 4.3.2.1 IPsec VPNClick the Add button to apply Figure 4-4 IKE Proposal  IKE PolicySettings 2 IPsec Setting  IPsec ProposalSettings TipsproposalIPsec1 you just created  IPsec PolicySettings Tips 4.3.2.2 PPTP VPN Setting IP Address Pool L2TP/PPTPEnable ProtocolPPTP ModeServer UsernamePPTP Passwordabcdefg  L2TP/PPTP TunnelSettings 4.3.3 Network Management 4.3.3.1 User Group Group  UserSettings 4.3.3.2 App Control View 2 Interface Bandwidth 1 Enable Bandwidth Control4.3.3.3 Bandwidth Control 4.3.3.4 Session Limit 3 Bandwidth Control RuleSettings Settings1 Scan and import the entries to ARP List 4.3.4 Network Security4.3.4.1 LAN ARP Defense 4.3.4.2 WAN ARP Defense 2 Set IP-MAC Binding Entry Manually3 Set Attack Defense Settings4.3.4.3 Attack Defense 2 Statistics 4.3.4.4 Traffic Monitoring1 Port Mirror Figure 4-23 IP Traffic Statistics Appendix A Hardware Specifications Environmental and PhysicalWireless GeneralAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled Appendix C Glossary GlossaryAH （Authentication Header ） data authentication, and anti-replay services. ESP encapsulatesDescription for services such as IPSec that require keys. Before any IPSecGlossary Glossary Descriptionenterprise GlossaryDescription

2)IPsec Setting

IPsec Proposal

proposal_IPsec_1