Manuals
/
TP-Link
/
Computer Equipment
/
Network Router
TP-Link
manual TL-ER6120 Multi-WAN VPN Router, Rev 1910010516
Models:
TL-ER6120
1
1
169
169
Download
169 pages
57.81 Kb
1
2
3
4
5
6
7
8
<
>
Specs
Install
FAQ
Maintenance
Configuration
z Reset button
Diagnostics
NAT Setup
Command Introduction
Factory Defaults
Page 1
Image 1
TL-ER6120
Multi-WAN
VPN Router
Rev: 1.0.0
1910010516
Page 2
Page 1
Image 1
Page 2
Contents
Rev 1910010516
TL-ER6120 Multi-WAN VPN Router
FCC STATEMENT
COPYRIGHT & TRADEMARKS
CE Mark Warning
Chapter 1 About this Guide
CONTENTS
Network Requirements
Chapter 4 Application
Glossary
Hardware Specifications
Appendix A
Appendix B
Package Contents
Chapter 1 About this Guide
Symbol
1.1 Intended Readers
1.2 Conventions
Specifications
Lists the hardware specifications of this Router
Appendix B FAQ
Provides the possible solutions to the problems that may occur during
z Powerful Firewall
z Powerful Data Processing Capability
Chapter 2 Introduction
2.1 Overview of the Router
z Multi-WAN Ports
2.2 Features
z Easy-to-use
Hardware
2.3.1 Front Panel
2.3 Appearance
Traffic Control
Security
z LEDs
z Reset button
Status
Indication
2.3.2 Rear Panel
z Power Socket
z Grounding Terminal
3.1 Network
Chapter 3 Configuration
3.1.1 Status
Figure 3-1 Status
3.1.2 System Mode
The TL-ER6120 Router can work in three modes NAT, Non-NAT and Classic
Figure 3-3 Network Topology - Non-NAT Mode
Figure 3-2 Network Topology - NAT Mode
z Non-NAT Mode
z NAT Mode
z Classic Mode
3.1.3.1 WAN Mode
¾ WAN Mode
3.1.3 WAN
1 Static IP
3.1.3.2 WAN1
Tips
2 Dynamic IP
¾ Static IP
¾ Dynamic IP
Get IP Address by
¾ Dynamic IP Status
Unicast
Use the following DNS
3 PPPoE
Figure 3-9 WAN - PPPoE
¾ PPPoE Settings
The following items are displayed on this screen
Connection Type Select PPPoE if your ISP provides xDSL Virtual
secondary
Optional. Enter the ISP address provided by your ISP
Connection Type
¾ PPPoE Status
IP Address
Subnet Address
IP Address
4 L2TP
Figure 3-10 WAN - L2TP
¾ L2TP Settings
The following items are displayed on this screen
Account Name Enter the Account Name provided by your ISP. If you are
If Static IP is selected, configure the subnet mask of WAN
You can select the proper Active Mode according to your
5 PPTP
¾ L2TP Status
Primary DNS/Secondary DNS Upstream Bandwidth Downstream Bandwidth
Status IP Address Primary DNS Secondary DNS
Figure 3-11 WAN - PPTP
¾ PPTP Settings
The following items are displayed on this screen
Account Name
6 BigPond
¾ PPTP Status
z “Disconnected” indicates that the connection has been
¾ BigPond Settings
Status
¾ BigPond Status
3.1.4.1 LAN
3.1.4 LAN
¾ LAN
3.1.4.2 DHCP
¾ DHCP Settings
3.1.4.4 DHCP Reservation
3.1.4.3 DHCP Client
¾ List of Reserved Address
¾ DHCP Reservation
Activate or Inactivate the corresponding entry
3.1.5.1 DMZ
3.1.5 DMZ
¾ DMZ
3.1.6 MAC Address
Tips
Set the MAC Address for WAN port
Set the MAC Address for LAN port
Set the MAC Address for DMZ port
¾ MAC Address
3.1.7.1 Statistics
3.1.7 Switch
¾ Statistics
3.1.7.2 Port Mirror
¾ Port Mirror
¾ General
Application Example
3.1.7.3 Rate Control
Tips
¾ Rate Control
3.1.7.4 Port Config
3.1.7.5 Port Status
¾ Port Config
3.1.7.6 Port VLAN
3.2 User Group
¾ Port VLAN
Tips
3.2.1 Group
¾ Group Config
3.2.2 User
¾ List of Group
3.2.3 View
¾ User Config
¾ List of User
3.3 Advanced
3.3.1.1 NAT Setup
3.3.1 NAT
¾ NAPT
¾ List of Rules
3.3.1.2 One-to-One NAT
¾ Multi-Nets NAT
3.3.1.3 Multi-Nets NAT
¾ list of Rules
Application Example Network Requirements
Configuration procedure
¾ Virtual Server
3.3.1.4 Virtual Server
¾ List of Rules
3.3.1.5 Port Triggering
¾ Port Triggering
3.3.1.6 ALG
¾ List of Rules
3.3.2 Traffic Control
3.3.2.1 Setup
¾ ALG
¾ Interface Bandwidth
3.3.2.2 Bandwidth Control
¾ List of Rules
¾ Bandwidth Control Rule
Select the data stream direction for the entry. The direction of arrowhead
3.3.3.1 Session Limit
3.3.3 Session Limit
¾ General
3.3.4 Load Balance
3.3.4.1 Configuration
3.3.3.2 Session List
¾ Session Limit
3.3.4.2 Policy Routing
¾ General
3.3.4.3 Link Backup
¾ List of Rules
¾ General
¾ List of Rules
3.3.4.4 Protocol
3.3.5.1 Static Route
3.3.5 Routing
¾ Protocol
¾ List of Protocol
¾ List of Rules
¾ Static Route
There is a network topology as the following figure shown
Application Example
¾ General
3.3.5.2 RIP
¾ List of RIP
3.3.5.3 Route Table
3.4.1 Anti ARP Spoofing
3.4 Firewall
3.4.1.1 IP-MAC Binding
¾ General
¾ IP-MAC Binding
IP Address
Status
¾ List of Rules
3.4.1.2 ARP Scanning
3.4.1.3 ARP List
3.4.2 Attack Defense
The following items are displayed on this screen
Figure 3-48 Attack Defense
¾ General
¾ MAC Filtering
3.4.3 MAC Filtering
¾ General
3.4.4.1 URL Filtering
3.4.4 Access Control
¾ List of Rules
¾ General
¾ URL Filtering Rule
Configuration Procedure
Select the mode for URL Filtering. “Keyword’’ indicates that all the
¾ List of Rules
3.4.4.2 Web Filtering
3.4.4.3 Access Rules
Select the service for the entry. Only the service belonging to the
¾ Access Rules
other service types can still pass through the Router. You can add
Select the Source IP Range for the entries, including the following
group on3.2.1 Group
Select this option to specify the priority for the added entries. The
¾ List of Rules
3.4.4.4 Service
¾ List of Service
¾ Service
3.4.5 App Control
3.4.5.1 Control Rules
¾ General
¾ Control Rules
3.4.5.2 Database
3.5 VPN
¾ List of Rules
3.5.1.1 IKE Policy
3.5.1 IKE
¾ IKE Policy
¾ List of IKE Policy
3.5.1.2 IKE Proposal
¾ IKE Proposal
3.5.2.1 IPsec Policy
3.5.2 IPsec
¾ List of IKE Proposal
Select the network mode for IPsec policy. Options include
¾ IPsec Policy
¾ General
z IKE Mode
IPsec Proposal
z Manual Mode
Incoming SPI
Key-In
¾ List of IPsec Policy IPsec
3.5.2.2 IPsec Proposal
Tips
¾ IPsec Proposal
¾ List of IPsec Proposal
3.5.2.3 IPsec SA
3.5.3 L2TP/PPTP
Authentication
3.5.3.1 L2TP/PPTP Tunnel
Protocol
Specify the working mode for this Router. Options include
¾ L2TP/PPTP Tunnel
¾ General
tunnel
TunnelSelect the network mode for the tunnel. Options include
3.5.3.2 IP Address Pool
¾ List of Configurations
¾ IP Address Pool
3.6.1 PPPoE Server
3.6 Services
3.5.3.3 List of L2TP/PPTP Tunnel
¾ List of IP Pool
3.6.1.1 General
¾ General PPPoE Server Dial-up Access Only
Idle Timeout Authentication Auth Protocol Radius Server Shared Key
3.6.1.2 IP Address Pool
¾ IP Address Pool
3.6.1.3 Account
Pool Name
IP Address Range
¾ Account
¾ List of Account
3.6.1.4 Exceptional IP
¾ Exceptional IP
3.6.1.5 List of Account
3.6.2 E-Bulletin
¾ List of Account
Enable E-Bulletin
¾ E-Bulletin
Enable Logs
¾ General
¾ List of E-Bulletin
3.6.3 Dynamic DNS
Content Object Effective Time Publisher Description Status
Tips
¾ Dyndns DDNS
3.6.3.1 DynDNS
¾ List of DynDNS Account
3.6.3.2 No-IP
¾ No-IP DDNS
¾ List of No-IP Account
3.6.3.3 PeanutHull
¾ PeanutHull DDNS
¾ List of PeanutHull Account
3.6.3.4 Comexe
¾ Comexe DDNS
¾ List of Comexe Account
3.6.4 UPnP
3.7.1 Admin Setup
3.7 Maintenance
3.7.1.1 Administrator
¾ List of UPnP Mapping
¾ Administrator
3.7.1.2 Login Parameter
Tips
¾ General
Configuration Procedure
Web Management Port Enter the Web Management Port for the Router
Application Example Network Requirements
3.7.2 Management
3.7.2.1 Factory Defaults
3.7.1.3 Remote Management
¾ Remote Management
¾ Configuration Version
3.7.2.3 Reboot
3.7.2.2 Export and Import
¾ Export
3.7.3 License
3.7.2.4 Firmware Upgrade
3.7.4.1 Interface Traffic Statistics
3.7.4 Statistics
¾ Interface Traffic Statistics
¾ Advanced WAN Information
3.7.4.2 IP Traffic Statistics
3.7.5.1 Diagnostics
3.7.5 Diagnostics
¾ IP Traffic Statistics
¾ Ping
¾ Tracert
3.7.5.2 Online Detection
¾ General
¾ List of WAN status
3.7.6 Time
¾ Current Time
3.7.7 Logs
¾ Config
¾ List of Logs
Send System Logs
Level
Description
4.1 Network Requirements
Chapter 4 Application
4.3.1 Internet Setting
4.2 Network Topology 4.3 Configurations
Tips
4.3.1.2 WAN Mode
4.3.1.1 System Mode
4.3.1.3 Internet Connection
Figure 4-4 Link Backup 131
4.3.1.4 Link Backup
Figure 4-3 WAN - Static IP
1 IKE Setting
4.3.2 VPN Setting
Settings
4.3.2.1 IPsec VPN
Tips
Policy Name
z IPsec Proposal
2 IPsec Setting
z IPsec Policy
Settings
proposalIPsec1 you just created
Tips
z IP Address Pool
4.3.2.2 PPTP VPN Setting
z L2TP/PPTP Tunnel
Settings
4.3.3.1 User Group
4.3.3 Network Management
z Group
z View
z User
Figure 4-11 Group Config
Settings
4.3.3.2 App Control
1 Enable Bandwidth Control
4.3.3.3 Bandwidth Control
Settings
3 Bandwidth Control Rule
2 Interface Bandwidth
Settings
Keep the default value
4.3.3.4 Session Limit
4.3.4 Network Security
Settings
1 Scan and import the entries to ARP List
4.3.4.1 LAN ARP Defense
2 Set IP-MAC Binding Entry Manually
3 Set Attack Defense
4.3.4.2 WAN ARP Defense
Settings
00-11-22-33-44-aa
4.3.4.4 Traffic Monitoring
4.3.4.3 Attack Defense
1 Port Mirror
2 Statistics
Figure 4-25 IP Traffic Statistics
Chapter 5 CLI
5.1 Configuration
Figure 5-3 Select the port to connect
Figure 5-2 Connection Description
Figure 5-5 Connection Properties Settings 149
Figure 5-4 Port Settings
Accessing Path
5.2 Interface Mode
Logout or Access the next
Mode
5.3 Online Help
admin
5.4 Command Introduction
TP-LINK # ip-mac set mode restrict
TP-LINK ip-mac get mode
5.4.2 ip-mac
5.4.1 ip
TP-LINK # sys export config
TP-LINK # sys restore
5.4.4 user
TP-LINK # sys import config
TP-LINK # user set password Enter old password
TP-LINK user set password Enter old password
5.4.5 history
TP-LINK # user set username Enter new username tplink
5.4.6 exit
View the history command
TP-LINK history clear
Exit CLI
Power
Appendix A Hardware Specifications
Standards
Ports
Appendix B FAQ
4. Make sure that the NAT DMZ service is disabled
Glossary
Appendix C Glossary
AH (Authentication Header )
data authentication, and anti-replay services. ESP encapsulates
Glossary
for services such as IPSec that require keys. Before any IPSec
Description
Description
Glossary
Telnet is used for remote terminal connection, enabling users to
Description
Glossary