Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER604W manual Application Example Network Requirements, Configuration procedure

Models: TL-ER604W

1 159

Page 63

The first entry in Figure 3-35indicates that: This is a Multi-Nets NAT entry named tplink1. The subnet under the LAN port of the Router is 192.168.2.0/24 and this entry is activated. After the corresponding Static Route entry is set, the hosts within this subnet can access the Internet through the Router via NAT.

Note:

●Multi-Nets NAT entry takes effect only when cooperating with the corresponding Static Route entries.

●For detailed setting of subnet mask, please refer to the Appendix BFAQ

Application Example:

Network Requirements

The LAN subnet of TL-ER604W is 192.168.0.0 /24, the subnet of VLAN2 under a three layer switch is 192.168.2.0 /24, while the subnet of VLAN3 is 192.168.3.0 /24. The IP of VLAN for cascading the switch to the Router is 192.168.0.2. Now the hosts within VLAN2 and VLAN3 desire to access the Internet.

The network topology is shown as the following:

Configuration procedure

1.Establish the Multi-Nets NAT entries with Subnet/Mask of VLAN2 and VLAN3.

-58-

Page 63

Image 63

TP-Link TL-ER604W manual Application Example Network Requirements, Configuration procedure

Contents

Wireless N Gigabit Broadband VPN Router TL-ER604WCOPYRIGHT & TRADEMARKS FCC STATEMENTCE Mark Warning Chapter 1 About this Guide CONTENTSAdvanced Appendix A Hardware SpecificationsChapter 4 Application GlossaryThe following items should be found in your package Package Contents One TL-ER604W Router  One Power Adapter  One RJ45 Ethernet Cable  Quick Installation Guide  Resource CD1.2 Conventions SymbolChapter 1 About this Guide 1.1 Intended ReadersChapter 2 Introduction  Powerful Data Processing Capability Wireless Feature  Powerful Firewall Easy-to-use 2.2 Features Flexible Traffic Control  Dual-WAN PortsWireless Traffic ControlSecurity Status 2.3 Appearance2.3.1 Front Panel  LEDs2.3.2 Rear Panel  Reset button Wifi button  Power3.1.1 Status Chapter 3 Configuration3.1.2 System Mode 3.1 NetworkChoose the menu Network→System Mode to load the following page Figure 3-2 Network Topology - NAT ModeFigure 3-3 Network Topology - Non-NAT Mode Figure 3-4 Network Topology - Classic Mode Classic Mode 3.1.3.1 WAN Mode NAT Mode  Non-NAT Mode1 Static IP  WAN Mode3.1.3.2 WAN1 Tips Static IP Host Name 2 Dynamic IP Dynamic IP Connection TypeServer Get IP Address byUnicast Use the following DNSSecondary DNS Displays the IP address of your ISP’s Secondary DNS 3 PPPoEGateway Address Displays the Gateway Address assigned by your ISP Primary DNS Displays the IP address of your ISP’s Primary DNSSettings  PPPoE SettingsPassword Active ModeSubnet Address Service NameISP Address Secondary ConnectionPrimary DNS Gateway Address4 L2TP IP Address L2TP Settings the obtained DNS is displayed Default GatewaySecondary ConnectionIP Address  L2TP Status5 PPTP StatusConnection Type  PPTP SettingsServer IP PasswordConnection Type Default Gateway Primary DNS Secondary DNS Upstream BandwidthActive Mode Secondary ConnectionIP Address  PPTP Status6 BigPond Status BigPond Settings IP Address  BigPond StatusDefault Gateway Status LAN 3.1.4 LAN3.1.4.1 LAN 3.1.4.2 DHCP DHCP Settings 3.1.4.3 DHCP Client 3.1.4.4 DHCP Reservation DHCP Reservation Set the MAC Address for WAN port 3.1.5 MAC Address List of Reserved Address Set the MAC Address for LAN portPort 3.1.6 Switch3.1.6.1 Statistics  MAC Address3.1.6.2 Port Mirror  StatisticsTips Port Mirror Enable Port MirrorGeneral Mode3.1.6.3 Rate Control Application Example Rate Control 3.1.6.4 Port Config  Port ConfigPort 3.1.6.5 Port Status 3.1.6.6 Port VLAN Port VLAN  Wireless Setting 3.2 Wireless3.2.1 Wireless Setting 3.2.1.1 Wireless SettingMode  Wireless ParameterAP Isolation SSIDDescription SSID Broadcast2 WPA/WPA2 or above. Enter 0 to disable the updateGroup PeriodPeriod 3 WEPor above. Enter 0 to disable the update GroupTips 3.2.1.2 Multi-SSIDKey Format Hexadecimal and ASCII formats areSSID  Multi-SSID Config General Specify a name for the wireless networkSSID Enable/DisableGuest Network AP IsolationPeriod EncryptionGroup Key PasswordGroup Auth TypeHexadecimal and ASCII formats are provided . Hexadecimal format or above. Enter 0 to disable the updateTips 3.2.1.3 WDS List of Group TipsKey Type Scan Parameter BSSIDto be bridgedShort GI 3.2.1.4 Wireless Advanced Wireless Advanced Key ：Fragmentation 3.2.2 MAC FilteringBeacon Interval RTS Threshold General 3.2.3 Host Status Filtering Rules  Rule List General 3.3 User Group3.3.1 Group  Host Status List of Group  Group Config User Config 3.3.2 UserView  View Config3.3.3 View  List of User NAPT 3.4.1.1 NAT Setup3.4 Advanced 3.4.1 NAT One-to-One NAT 3.4.1.2 One-to-One NAT list of Rules 3.4.1.3 Multi-Nets NAT List of Rules  Multi-Nets NATApplication Example Network Requirements Configuration procedure3.4.1.4 Virtual Server Status  Virtual ServerInterface Protocol3.4.1.5 Port Triggering  Port Triggering List of Rules 3.4.1.6 ALG Status List of Rules FTP ALG 3.4.2.1 Setup3.4.2 Traffic Control  ALGLimited Default LimitControl Control all the timeDirection Guaranteed Bandwidth3.4.2.2 Bandwidth Control  Bandwidth Control RuleEffective Time 3.4.3 Session Limit3.4.3.1 Session Limit Limited Bandwidth3.4.3.2 Session List Enable SessionCheck here to enable Session Limit, otherwise all the Session Limit entries will be disabled3.4.4.1 Configuration 3.4.4 Load Balance3.4.4.2 Policy Routing Select the WAN port for transmitting packets  General3.4.4.3 Link Backup  List of Rules General Failover WAN Config3.4.4.4 Protocol Timing List of Protocol 3.4.5 Routing3.4.5.1 Static Route  Protocol List of Rules  Static RouteApplication Example 3.4.5.2 RIP List of RIP Choose the menu Advanced→Routing→RIP to load the following page General Gateway 3.4.5.3 Route TableDestination The Destination of route entry General 3.5 Firewall3.5.1 Anti ARP Spoofing 3.5.1.1 IP-MAC BindingStatus 3.5.1.2 ARP Scanning IP-MAC Binding IP Address3.5.1.3 ARP List 3.5.2 Attack Defense Defense Enable AttackFlood Defense Packet Anomaly MAC Filtering 3.5.4 Access Control3.5.3 MAC Filtering 3.5.4.1 URL FilteringMode  URL Filtering RuleObject  GeneralApplication Example Network Requirements 3.5.4.3 Access RulesConfiguration Procedure 3.5.4.2 Web FilteringSource  Access RulesService PolicyDestination 3.5.4.4 Servicegroup on 3.3.1 Group PriorityDest. Port  Service List of Service NameApplication 3.5.5 App Control3.5.5.1 Control Rules  Control Rules3.6 VPN 3.5.5.2 Database List of Rules 3.6.1.1 IKE Policy 3.6.1 IKE IKE Policy Remote ID 3.6.1.2 IKE ProposalLocal ID Remote ID Type IKE Proposal 3.6.2 IPsec 3.6.2.1 IPsec Policy List of IKE Proposal  General  IPsec PolicyPolicy Name Local SubnetRemote Gateway Policy Mode IKE Mode Remote SubnetAH Authentication Key-Out  Manual ModeAH Authentication Key-In ESP Authentication Key-InTips 3.6.2.2 IPsec Proposal List of IPsec Policy IPsec  IPsec Proposal List of IPsec Proposal Protocol Authentication3.6.3 L2TP/PPTP 3.6.2.3 IPsec SAProtocol 3.6.3.1 L2TP/PPTP Tunnel L2TP/PPTP Tunnel  GeneralPre-shard Key TunnelMax Connections L2TP/PPTP Server IP Address Pool  List of Configurations3.6.3.2 IP Address Pool 3.6.3.3 List of L2TP/PPTP Tunnel3.7 Services 3.7.1 PPPoE Server3.7.1.1 General  General Figure 3-70 General The following items are displayed on this screen IP Address Pool 3.7.1.2 IP Address PoolStatic IP Address 3.7.1.3 Account Account IP Address AssignedStatus is 48. If Enable Advanced Account Features is not selected, the3.7.1.4 Exceptional IP  List of AccountStatus 3.7.2 E-Bulletin3.7.1.5 List of Account  Exceptional IP General Interval E-Bulletin TitleObject 3.7.3 Dynamic DNSPublisher  List of E-Bulletin Dyndns DDNS 3.7.3.1 DynDNS3.7.3.2 No-IP  List of DynDNS Account No-IP DDNS 3.7.3.3 PeanutHull  List of No-IP Account PeanutHull DDNS  List of PeanutHull Account 3.7.3.4 Comexe3.7.4 UPnP  Comexe DDNS List of Comexe Account  List of UPnP Mapping 3.8 Maintenance3.8.1 Admin Setup 3.8.1.1 Administrator Administrator 3.8.1.2 Login Parameter3.8.1.3 Remote Management  Remote Management General Configuration Procedure 3.8.2.1 Factory Defaults3.8.2 Management  List of Subnet Export 3.8.2.3 Reboot Configuration Version 3.8.2.2 Export and Import3.8.3 License 3.8.2.4 Firmware UpgradeDisplays the interface 3.8.4 Statistics3.8.4.1 Interface Traffic Statistics  Interface Traffic StatisticsPackets Tx 3.8.4.2 IP Traffic StatisticsPackets Rx Displays the number of packets received on the interface IP Traffic Statistics 3.8.5 Diagnostics3.8.5.1 Diagnostics  Traffic Statistics General 3.8.5.2 Online Detection Ping  Tracert List of WAN status 3.8.6 TimePing DNS LookupSystem Time Config3.8.7 Logs Current TimeSend System Logs  Config List of Logs Severity4.1 Network Requirements Chapter 4 ApplicationTips 4.2 Network Topology 4.3 Configurations4.3.1 Internet Setting 4.3.1.1 System Mode4.3.1.2 Internet Connection 4.3.1.3 Link Backup4.3.2.1 IPsec VPN 4.3.2 VPN Setting1 IKE Setting Settings IKE Policy SettingsClick the Add button to apply Figure 4-4 IKE Proposal Tips 2 IPsec Setting IPsec Proposal Settings IPsec Policy SettingsproposalIPsec1 you just created 4.3.2.2 PPTP VPN Setting  IP Address PoolTips  L2TP/PPTP Tunnel SettingsL2TP/PPTPEnable ProtocolPPTP ModeServer UsernamePPTP Passwordabcdefg  User 4.3.3 Network Management4.3.3.1 User Group  Group4.3.3.2 App Control  ViewSettings 1 Enable Bandwidth Control 4.3.3.3 Bandwidth Control2 Interface Bandwidth Settings 4.3.3.4 Session Limit3 Bandwidth Control Rule Settings4.3.4 Network Security 4.3.4.1 LAN ARP Defense1 Scan and import the entries to ARP List Settings 4.3.4.2 WAN ARP Defense2 Set IP-MAC Binding Entry Manually 3 Set Attack Defense4.3.4.3 Attack Defense 4.3.4.4 Traffic Monitoring 1 Port Mirror2 Statistics Figure 4-23 IP Traffic Statistics General Appendix A Hardware SpecificationsEnvironmental and Physical WirelessAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled data authentication, and anti-replay services. ESP encapsulates Appendix C GlossaryGlossary AH （Authentication Header ）for services such as IPSec that require keys. Before any IPSec GlossaryDescription Description GlossaryGlossary Descriptionenterprise