Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER6120 manual TunnelSelect the network mode for the tunnel. Options include

Models: TL-ER6120

1 169

Download 169 pages 57.81 Kb

Page 103

tunnel.

zServer: In this mode, the Router responds the request from the remote client for establishing a tunnel.

Account Name: Enter the account name of L2TP/PPTP tunnel. It should be configured identically on server and client.

Password: Enter the password of L2TP/PPTP tunnel. It should be configured identically on server and client.

Tunnel:Select the network mode for the tunnel. Options include:

zLAN-to-LAN: Select this option when the L2TP/PPTP client is a LAN. The tunneling request is always initiated by a router.

zClient-to-LAN: Select this option when the L2TP/PPTP client is a single PC.

Max Connections: Specify the maximum connections that the tunnel can support. This item is available for Client-to-LAN tunnel type on Server mode.

WAN:Specify the WAN port to transmit the packets. This item is available for Client mode.

L2TP/PPTP Server: Enter the IP address of L2TP/PPTP server. (It’s always the WAN IP address of the remote peer of L2TP/PPTP tunnel.) This item is available for Client mode.

Encryption: Specify whether to enable the encryption for the tunnel. If enabled, the L2TP tunnel will be encrypted by IPsec, and the PPTP tunnel will be encrypted by MPPE.

Pre-shard Key: Enter the Pre-shared Key for IKE authentication. This item is available for L2TP tunnel.

Client:Enter the IP address of the client which is allowed to connect to this L2TP/PPTP server. The default IP "0.0.0.0" means any IP address is acceptable.

-98-

Image 103

TP-Link TL-ER6120 manual TunnelSelect the network mode for the tunnel. Options include

Contents

Rev 1910010516 TL-ER6120 Multi-WAN VPN RouterFCC STATEMENT COPYRIGHT & TRADEMARKSCE Mark Warning Chapter 1 About this Guide CONTENTSNetwork Requirements Chapter 4 ApplicationAppendix B Hardware SpecificationsGlossary Appendix APackage Contents 1.2 Conventions SymbolChapter 1 About this Guide 1.1 Intended ReadersProvides the possible solutions to the problems that may occur during Lists the hardware specifications of this RouterSpecifications Appendix B FAQ2.1 Overview of the Router z Powerful Data Processing Capabilityz Powerful Firewall Chapter 2 IntroductionHardware 2.2 Featuresz Multi-WAN Ports z Easy-to-useSecurity 2.3 Appearance2.3.1 Front Panel Traffic ControlIndication z Reset buttonz LEDs Status2.3.2 Rear Panel z Power Socketz Grounding Terminal 3.1 Network Chapter 3 Configuration3.1.1 Status Figure 3-1 Status 3.1.2 System ModeThe TL-ER6120 Router can work in three modes NAT, Non-NAT and Classic Figure 3-3 Network Topology - Non-NAT Mode Figure 3-2 Network Topology - NAT Modez Non-NAT Mode z NAT Mode¾ WAN Mode 3.1.3 WAN3.1.3.1 WAN Mode z Classic Mode1 Static IP 3.1.3.2 WAN1Tips 2 Dynamic IP ¾ Static IP¾ Dynamic IP Use the following DNS ¾ Dynamic IP StatusGet IP Address by Unicast3 PPPoE Connection Type Select PPPoE if your ISP provides xDSL Virtual ¾ PPPoE SettingsFigure 3-9 WAN - PPPoE The following items are displayed on this screensecondary Optional. Enter the ISP address provided by your ISPSubnet Address ¾ PPPoE StatusConnection Type IP AddressIP Address 4 L2TPAccount Name Enter the Account Name provided by your ISP. If you are ¾ L2TP SettingsFigure 3-10 WAN - L2TP The following items are displayed on this screenYou can select the proper Active Mode according to your If Static IP is selected, configure the subnet mask of WANStatus IP Address Primary DNS Secondary DNS ¾ L2TP Status5 PPTP Primary DNS/Secondary DNS Upstream Bandwidth Downstream BandwidthFigure 3-11 WAN - PPTP ¾ PPTP SettingsThe following items are displayed on this screen Account Name 6 BigPond ¾ PPTP Statusz “Disconnected” indicates that the connection has been ¾ BigPond Settings Status ¾ BigPond Status3.1.4.1 LAN 3.1.4 LAN¾ LAN 3.1.4.2 DHCP ¾ DHCP Settings3.1.4.4 DHCP Reservation 3.1.4.3 DHCP Client¾ List of Reserved Address ¾ DHCP ReservationActivate or Inactivate the corresponding entry 3.1.5.1 DMZ 3.1.5 DMZ¾ DMZ 3.1.6 MAC AddressTips ¾ MAC Address Set the MAC Address for LAN portSet the MAC Address for WAN port Set the MAC Address for DMZ port3.1.7.1 Statistics 3.1.7 Switch¾ Statistics 3.1.7.2 Port Mirror ¾ Port Mirror ¾ GeneralApplication Example 3.1.7.3 Rate ControlTips ¾ Rate Control 3.1.7.4 Port Config3.1.7.5 Port Status ¾ Port ConfigTips 3.2 User Group3.1.7.6 Port VLAN ¾ Port VLAN¾ List of Group ¾ Group Config3.2.1 Group 3.2.2 User3.2.3 View ¾ User Config¾ List of User ¾ NAPT 3.3.1.1 NAT Setup3.3 Advanced 3.3.1 NAT¾ List of Rules 3.3.1.2 One-to-One NAT¾ Multi-Nets NAT 3.3.1.3 Multi-Nets NAT¾ list of Rules Application Example Network Requirements Configuration procedure ¾ Virtual Server 3.3.1.4 Virtual Server¾ List of Rules 3.3.1.5 Port Triggering¾ Port Triggering 3.3.1.6 ALG¾ List of Rules 3.3.2 Traffic Control 3.3.2.1 Setup¾ ALG ¾ Interface Bandwidth 3.3.2.2 Bandwidth Control ¾ List of Rules ¾ Bandwidth Control RuleSelect the data stream direction for the entry. The direction of arrowhead 3.3.3.1 Session Limit 3.3.3 Session Limit¾ General ¾ Session Limit 3.3.4.1 Configuration3.3.4 Load Balance 3.3.3.2 Session List3.3.4.2 Policy Routing ¾ General 3.3.4.3 Link Backup¾ List of Rules ¾ General ¾ List of Rules 3.3.4.4 Protocol¾ List of Protocol 3.3.5 Routing3.3.5.1 Static Route ¾ Protocol¾ List of Rules ¾ Static RouteThere is a network topology as the following figure shown Application Example¾ General 3.3.5.2 RIP¾ List of RIP 3.3.5.3 Route Table3.4.1 Anti ARP Spoofing 3.4 Firewall3.4.1.1 IP-MAC Binding Status ¾ IP-MAC Binding¾ General IP Address¾ List of Rules 3.4.1.2 ARP Scanning3.4.1.3 ARP List 3.4.2 Attack DefenseThe following items are displayed on this screen Figure 3-48 Attack Defense¾ General ¾ MAC Filtering 3.4.3 MAC Filtering¾ General ¾ General 3.4.4 Access Control3.4.4.1 URL Filtering ¾ List of RulesApplication Example Network Requirements Configuration Procedure¾ URL Filtering Rule ¾ List of Rules3.4.4.2 Web Filtering 3.4.4.3 Access RulesSelect the service for the entry. Only the service belonging to the ¾ Access Rulesother service types can still pass through the Router. You can add Select the Source IP Range for the entries, including the following group on3.2.1 GroupSelect this option to specify the priority for the added entries. The ¾ List of Rules 3.4.4.4 Service3.4.5.1 Control Rules ¾ Service¾ List of Service 3.4.5 App Control¾ General ¾ Control Rules3.4.5.2 Database 3.5 VPN¾ List of Rules 3.5.1.1 IKE Policy 3.5.1 IKE¾ IKE Policy ¾ List of IKE Policy 3.5.1.2 IKE Proposal¾ IKE Proposal 3.5.2.1 IPsec Policy 3.5.2 IPsec¾ List of IKE Proposal ¾ General ¾ IPsec PolicySelect the network mode for IPsec policy. Options include z IKE Mode Key-In z Manual ModeIPsec Proposal Incoming SPI¾ List of IPsec Policy IPsec 3.5.2.2 IPsec ProposalTips ¾ IPsec Proposal ¾ List of IPsec Proposal 3.5.2.3 IPsec SAProtocol Authentication3.5.3 L2TP/PPTP 3.5.3.1 L2TP/PPTP Tunnel¾ General ¾ L2TP/PPTP TunnelSpecify the working mode for this Router. Options include TunnelSelect the network mode for the tunnel. Options include tunnel3.5.3.2 IP Address Pool ¾ List of Configurations¾ IP Address Pool ¾ List of IP Pool 3.6 Services3.6.1 PPPoE Server 3.5.3.3 List of L2TP/PPTP Tunnel3.6.1.1 General ¾ General PPPoE Server Dial-up Access OnlyIdle Timeout Authentication Auth Protocol Radius Server Shared Key 3.6.1.2 IP Address PoolIP Address Range 3.6.1.3 Account¾ IP Address Pool Pool Name¾ Account ¾ List of Account 3.6.1.4 Exceptional IP¾ Exceptional IP 3.6.1.5 List of Account 3.6.2 E-Bulletin¾ List of Account ¾ General ¾ E-BulletinEnable E-Bulletin Enable LogsTips 3.6.3 Dynamic DNS¾ List of E-Bulletin Content Object Effective Time Publisher Description Status¾ Dyndns DDNS 3.6.3.1 DynDNS¾ List of DynDNS Account 3.6.3.2 No-IP¾ No-IP DDNS ¾ List of No-IP Account 3.6.3.3 PeanutHull¾ PeanutHull DDNS ¾ List of PeanutHull Account 3.6.3.4 Comexe¾ Comexe DDNS ¾ List of Comexe Account 3.6.4 UPnP¾ List of UPnP Mapping 3.7 Maintenance3.7.1 Admin Setup 3.7.1.1 Administrator¾ Administrator 3.7.1.2 Login ParameterTips Application Example Network Requirements Configuration Procedure¾ General Web Management Port Enter the Web Management Port for the Router¾ Remote Management 3.7.2.1 Factory Defaults3.7.2 Management 3.7.1.3 Remote Management¾ Export 3.7.2.3 Reboot¾ Configuration Version 3.7.2.2 Export and Import3.7.3 License 3.7.2.4 Firmware Upgrade3.7.4.1 Interface Traffic Statistics 3.7.4 Statistics¾ Interface Traffic Statistics ¾ Advanced WAN Information 3.7.4.2 IP Traffic Statistics3.7.5.1 Diagnostics 3.7.5 Diagnostics¾ IP Traffic Statistics ¾ Ping ¾ Tracert 3.7.5.2 Online Detection¾ General ¾ List of WAN status 3.7.6 Time¾ Current Time 3.7.7 Logs ¾ Config¾ List of Logs Send System Logs LevelDescription 4.1 Network Requirements Chapter 4 Application4.3.1 Internet Setting 4.2 Network Topology 4.3 ConfigurationsTips 4.3.1.2 WAN Mode 4.3.1.1 System Mode4.3.1.3 Internet Connection Figure 4-4 Link Backup 131 4.3.1.4 Link BackupFigure 4-3 WAN - Static IP 4.3.2.1 IPsec VPN 4.3.2 VPN Setting1 IKE Setting SettingsTips Policy NameSettings 2 IPsec Settingz IPsec Proposal z IPsec PolicyproposalIPsec1 you just created TipsSettings 4.3.2.2 PPTP VPN Settingz IP Address Pool z L2TP/PPTP Tunnel4.3.3.1 User Group 4.3.3 Network Managementz Group Settings z Userz View Figure 4-11 Group ConfigSettings 1 Enable Bandwidth Control4.3.3.2 App Control 4.3.3.3 Bandwidth ControlKeep the default value 2 Interface Bandwidth3 Bandwidth Control Rule Settings4.3.3.4 Session Limit 4.3.4 Network SecuritySettings 1 Scan and import the entries to ARP List 4.3.4.1 LAN ARP Defense2 Set IP-MAC Binding Entry Manually 00-11-22-33-44-aa 4.3.4.2 WAN ARP Defense3 Set Attack Defense Settings4.3.4.4 Traffic Monitoring 4.3.4.3 Attack Defense1 Port Mirror 2 Statistics Figure 4-25 IP Traffic Statistics Chapter 5 CLI 5.1 ConfigurationFigure 5-3 Select the port to connect Figure 5-2 Connection DescriptionFigure 5-5 Connection Properties Settings 149 Figure 5-4 Port SettingsMode Accessing PathLogout or Access the next 5.2 Interface Mode5.3 Online Help admin5.4 Command Introduction TP-LINK # ip set lan address 5.4.2 ip-mac5.4.1 ip 5.4.3 sysTP-LINK # sys export config TP-LINK # sys restore5.4.4 user TP-LINK # sys import configTP-LINK # user set username Enter new username tplink TP-LINK user set password Enter old passwordTP-LINK # user set password Enter old password 5.4.5 historyExit CLI View the history command5.4.6 exit TP-LINK history clearPorts Appendix A Hardware SpecificationsPower StandardsAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled data authentication, and anti-replay services. ESP encapsulates Appendix C GlossaryGlossary AH （Authentication Header ）Glossary for services such as IPSec that require keys. Before any IPSecDescription Description GlossaryTelnet is used for remote terminal connection, enabling users to Description Glossary