Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER604W manual Flood Defense, Packet Anomaly, Enable Attack, Defense Logs,  General

Models: TL-ER604W

1 159

Download 159 pages 47.9 Kb

Page 86

Image 86

Figure 3-53Attack Defense

The following items are displayed on this screen:

 General
Flood Defense:	Flood attack is a commonly used DoS (Denial of Service) attack,
	including TCP SYN, UDP, ICMP and so on. It is recommended to
	select all the Flood Defense options and specify the
	corresponding thresholds. Keep the default settings if you are not
	sure.
Packet Anomaly	Packet Anomaly refers to the abnormal packets. It is
Defense:	recommended to select all the Packet Anomaly Defense options.
Enable Attack	With this box checked, the Router will record the defense logs.
Defense Logs:
	-81-

Page 86

Image 86

TP-Link TL-ER604W manual Flood Defense, Packet Anomaly, Enable Attack, Defense Logs,  General

Contents

TL-ER604W Wireless N Gigabit Broadband VPN RouterCE Mark Warning COPYRIGHT & TRADEMARKSFCC STATEMENT CONTENTS Chapter 1 About this GuideAdvanced Glossary Hardware SpecificationsChapter 4 Application Appendix A Quick Installation Guide  Resource CD Package Contents One TL-ER604W Router  One Power Adapter  One RJ45 Ethernet Cable The following items should be found in your package1.1 Intended Readers SymbolChapter 1 About this Guide 1.2 Conventions Powerful Firewall  Powerful Data Processing Capability Wireless Feature Chapter 2 Introduction Dual-WAN Ports 2.2 Features Flexible Traffic Control  Easy-to-useSecurity WirelessTraffic Control  LEDs 2.3 Appearance2.3.1 Front Panel Status Power  Reset button Wifi button 2.3.2 Rear Panel3.1 Network Chapter 3 Configuration3.1.2 System Mode 3.1.1 StatusFigure 3-4 Network Topology - Classic Mode Figure 3-2 Network Topology - NAT ModeFigure 3-3 Network Topology - Non-NAT Mode Choose the menu Network→System Mode to load the following page Non-NAT Mode 3.1.3.1 WAN Mode NAT Mode  Classic ModeTips  WAN Mode3.1.3.2 WAN1 1 Static IP Static IP Connection Type 2 Dynamic IP Dynamic IP Host NameUse the following DNS Get IP Address byUnicast ServerPrimary DNS Displays the IP address of your ISP’s Primary DNS 3 PPPoEGateway Address Displays the Gateway Address assigned by your ISP Secondary DNS Displays the IP address of your ISP’s Secondary DNSActive Mode  PPPoE SettingsPassword SettingsSecondary Connection Service NameISP Address Subnet AddressIP Address Gateway Address4 L2TP Primary DNS L2TP Settings Connection Default GatewaySecondary the obtained DNS is displayedStatus  L2TP Status5 PPTP IP AddressPassword  PPTP SettingsServer IP Connection TypeSecondary Connection Default Gateway Primary DNS Secondary DNS Upstream BandwidthActive Mode Connection TypeStatus  PPTP Status6 BigPond IP Address BigPond Settings Status  BigPond StatusDefault Gateway IP Address3.1.4.2 DHCP 3.1.4 LAN3.1.4.1 LAN  LAN DHCP Settings  DHCP Reservation 3.1.4.3 DHCP Client3.1.4.4 DHCP Reservation Set the MAC Address for LAN port 3.1.5 MAC Address List of Reserved Address Set the MAC Address for WAN port MAC Address 3.1.6 Switch3.1.6.1 Statistics PortTips 3.1.6.2 Port Mirror Statistics Mode Enable Port MirrorGeneral Port Mirror Rate Control 3.1.6.3 Rate ControlApplication Example Port 3.1.6.4 Port Config Port Config  Port VLAN 3.1.6.5 Port Status3.1.6.6 Port VLAN 3.2.1.1 Wireless Setting 3.2 Wireless3.2.1 Wireless Setting  Wireless Setting Wireless Parameter ModeSSID Broadcast SSIDDescription AP IsolationPeriod or above. Enter 0 to disable the updateGroup 2 WPA/WPA2Group 3 WEPor above. Enter 0 to disable the update PeriodHexadecimal and ASCII formats are 3.2.1.2 Multi-SSIDKey Format TipsSpecify a name for the wireless network  Multi-SSID Config General SSIDAP Isolation Enable/DisableGuest Network SSIDPassword EncryptionGroup Key Periodor above. Enter 0 to disable the update Auth TypeHexadecimal and ASCII formats are provided . Hexadecimal format GroupTips 3.2.1.3 WDS List of Group TipsBSSIDto be bridged Scan Parameter Key TypeKey ： 3.2.1.4 Wireless Advanced Wireless Advanced Short GIRTS Threshold 3.2.2 MAC FilteringBeacon Interval Fragmentation Rule List 3.2.3 Host Status Filtering Rules  General Host Status 3.3 User Group3.3.1 Group  General3.3.2 User  Group Config User Config  List of Group List of User  View Config3.3.3 View View3.4.1 NAT 3.4.1.1 NAT Setup3.4 Advanced  NAPT3.4.1.2 One-to-One NAT  One-to-One NAT Multi-Nets NAT 3.4.1.3 Multi-Nets NAT List of Rules  list of RulesConfiguration procedure Application Example Network Requirements3.4.1.4 Virtual Server Protocol  Virtual ServerInterface Status List of Rules 3.4.1.5 Port Triggering Port Triggering  List of Rules 3.4.1.6 ALGStatus  ALG 3.4.2.1 Setup3.4.2 Traffic Control FTP ALGControl all the time Default LimitControl Limited Bandwidth Control Rule Guaranteed Bandwidth3.4.2.2 Bandwidth Control DirectionLimited Bandwidth 3.4.3 Session Limit3.4.3.1 Session Limit Effective Timeentries will be disabled Enable SessionCheck here to enable Session Limit, otherwise all the Session Limit 3.4.3.2 Session List3.4.4.2 Policy Routing 3.4.4.1 Configuration3.4.4 Load Balance  General Select the WAN port for transmitting packets General 3.4.4.3 Link Backup List of Rules Timing WAN Config3.4.4.4 Protocol Failover Protocol 3.4.5 Routing3.4.5.1 Static Route  List of Protocol Static Route  List of Rules3.4.5.2 RIP Application Example General  List of RIPChoose the menu Advanced→Routing→RIP to load the following page The Destination of route entry 3.4.5.3 Route TableDestination Gateway3.5.1.1 IP-MAC Binding 3.5 Firewall3.5.1 Anti ARP Spoofing  GeneralIP Address 3.5.1.2 ARP Scanning IP-MAC Binding Status3.5.1.3 ARP List 3.5.2 Attack Defense Packet Anomaly Enable AttackFlood Defense Defense3.5.4.1 URL Filtering 3.5.4 Access Control3.5.3 MAC Filtering  MAC Filtering General  URL Filtering RuleObject Mode3.5.4.2 Web Filtering 3.5.4.3 Access RulesConfiguration Procedure Application Example Network RequirementsPolicy  Access RulesService SourcePriority 3.5.4.4 Servicegroup on 3.3.1 Group DestinationName  Service List of Service Dest. Port Control Rules 3.5.5 App Control3.5.5.1 Control Rules Application List of Rules 3.6 VPN3.5.5.2 Database 3.6.1 IKE 3.6.1.1 IKE Policy IKE Policy Remote ID Type 3.6.1.2 IKE ProposalLocal ID Remote ID IKE Proposal  List of IKE Proposal 3.6.2 IPsec3.6.2.1 IPsec Policy Local Subnet  IPsec PolicyPolicy Name  GeneralRemote Subnet Policy Mode IKE Mode Remote GatewayESP Authentication Key-In  Manual ModeAH Authentication Key-In AH Authentication Key-Out IPsec Proposal 3.6.2.2 IPsec Proposal List of IPsec Policy IPsec Tips List of IPsec Proposal 3.6.2.3 IPsec SA Authentication3.6.3 L2TP/PPTP Protocol General 3.6.3.1 L2TP/PPTP Tunnel L2TP/PPTP Tunnel ProtocolL2TP/PPTP Server TunnelMax Connections Pre-shard Key3.6.3.3 List of L2TP/PPTP Tunnel  List of Configurations3.6.3.2 IP Address Pool  IP Address Pool3.7.1.1 General 3.7 Services3.7.1 PPPoE Server Figure 3-70 General The following items are displayed on this screen  General3.7.1.2 IP Address Pool  IP Address PoolIP Address Assigned 3.7.1.3 Account Account Static IP Address List of Account is 48. If Enable Advanced Account Features is not selected, the3.7.1.4 Exceptional IP Status Exceptional IP 3.7.2 E-Bulletin3.7.1.5 List of Account StatusTitle Interval E-Bulletin  General List of E-Bulletin 3.7.3 Dynamic DNSPublisher Object3.7.3.1 DynDNS  Dyndns DDNS No-IP DDNS 3.7.3.2 No-IP List of DynDNS Account  PeanutHull DDNS 3.7.3.3 PeanutHull List of No-IP Account 3.7.3.4 Comexe  List of PeanutHull Account List of Comexe Account 3.7.4 UPnP Comexe DDNS 3.8.1.1 Administrator 3.8 Maintenance3.8.1 Admin Setup  List of UPnP Mapping3.8.1.2 Login Parameter  Administrator General 3.8.1.3 Remote Management Remote Management  List of Subnet 3.8.2.1 Factory Defaults3.8.2 Management Configuration Procedure3.8.2.2 Export and Import 3.8.2.3 Reboot Configuration Version  Export3.8.2.4 Firmware Upgrade 3.8.3 License Interface Traffic Statistics 3.8.4 Statistics3.8.4.1 Interface Traffic Statistics Displays the interfaceDisplays the number of packets received on the interface 3.8.4.2 IP Traffic StatisticsPackets Rx Packets Tx Traffic Statistics 3.8.5 Diagnostics3.8.5.1 Diagnostics  IP Traffic Statistics Tracert 3.8.5.2 Online Detection Ping  GeneralDNS Lookup 3.8.6 TimePing  List of WAN statusCurrent Time Config3.8.7 Logs System TimeSeverity  Config List of Logs Send System LogsChapter 4 Application 4.1 Network Requirements4.3.1.1 System Mode 4.2 Network Topology 4.3 Configurations4.3.1 Internet Setting Tips4.3.1.3 Link Backup 4.3.1.2 Internet ConnectionSettings 4.3.2 VPN Setting1 IKE Setting 4.3.2.1 IPsec VPNClick the Add button to apply Figure 4-4 IKE Proposal  IKE PolicySettings Settings 2 IPsec Setting IPsec Proposal TipsproposalIPsec1 you just created  IPsec PolicySettings Tips 4.3.2.2 PPTP VPN Setting IP Address Pool L2TP/PPTPEnable ProtocolPPTP ModeServer UsernamePPTP Passwordabcdefg  L2TP/PPTP TunnelSettings  Group 4.3.3 Network Management4.3.3.1 User Group  UserSettings 4.3.3.2 App Control View 2 Interface Bandwidth 1 Enable Bandwidth Control4.3.3.3 Bandwidth Control Settings 4.3.3.4 Session Limit3 Bandwidth Control Rule Settings1 Scan and import the entries to ARP List 4.3.4 Network Security4.3.4.1 LAN ARP Defense 3 Set Attack Defense 4.3.4.2 WAN ARP Defense2 Set IP-MAC Binding Entry Manually Settings4.3.4.3 Attack Defense 2 Statistics 4.3.4.4 Traffic Monitoring1 Port Mirror Figure 4-23 IP Traffic Statistics Wireless Appendix A Hardware SpecificationsEnvironmental and Physical GeneralAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled AH （Authentication Header ） Appendix C GlossaryGlossary data authentication, and anti-replay services. ESP encapsulatesDescription for services such as IPSec that require keys. Before any IPSecGlossary Glossary Descriptionenterprise GlossaryDescription

Flood Defense:

Packet Anomaly

Defense:

Enable Attack

Defense Logs: