Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER6120 manual IP Address Pool

Models: TL-ER6120

1 169

Download 169 pages 57.81 Kb

Page 107

Idle Timeout:

Authentication:

Auth Protocol:

Radius Server:

Shared Key:

Enter the maximum idle time. The session will be terminated after it has been inactive for this specified period. It can be 0-10080 minutes. If you want your Internet connection to remain on at all times, enter 0 in the Idle Timeout field. The default value is 30.

Select the Authentication type. It can be Local authentication and Remote authentication. Select Local authentication for authentication in PPPoE server and select Remote authentication for authentication in the remote server.

Select at least one authentication protocol for Local Authentication.

zPAP, transferring username and password in plain text in the network, is used in a less secured network.

zCHAP is more secured for it adopts three handshakes and does not transfer password in plain text.

zMS-CHAP, put forward by Microsoft, adopts a different encryption algorithm of CHAP.

zMS-CHAP v2 with a higher security is an improved version of MS-CHAP.

It is available when Remote Authentication is selected. RADIUS (Remote Authentication Dial In User Service) provides an authentication for dial-up users. Enter the Radius Server address for Remote authentication.

Enter the Shared Key for Remote authentication. It should be the same to the shared key of the Radius Server.

3.6.1.2IP Address Pool

On this page, you can define or edit the IP Address Pool.

Choose the menu Services→PPPoE Server→IP Address Pool to load the following page.

-102-

Image 107

TP-Link TL-ER6120 manual IP Address Pool, Idle Timeout Authentication Auth Protocol Radius Server Shared Key

Contents

Rev 1910010516 TL-ER6120 Multi-WAN VPN RouterCE Mark Warning COPYRIGHT & TRADEMARKSFCC STATEMENT Chapter 1 About this Guide CONTENTSNetwork Requirements Chapter 4 ApplicationAppendix B Hardware SpecificationsGlossary Appendix APackage Contents 1.2 Conventions SymbolChapter 1 About this Guide 1.1 Intended ReadersProvides the possible solutions to the problems that may occur during Lists the hardware specifications of this RouterSpecifications Appendix B FAQ2.1 Overview of the Router z Powerful Data Processing Capabilityz Powerful Firewall Chapter 2 IntroductionHardware 2.2 Featuresz Multi-WAN Ports z Easy-to-useSecurity 2.3 Appearance2.3.1 Front Panel Traffic ControlIndication z Reset buttonz LEDs Statusz Grounding Terminal z Power Socket2.3.2 Rear Panel 3.1.1 Status Chapter 3 Configuration3.1 Network The TL-ER6120 Router can work in three modes NAT, Non-NAT and Classic 3.1.2 System ModeFigure 3-1 Status Figure 3-3 Network Topology - Non-NAT Mode Figure 3-2 Network Topology - NAT Modez Non-NAT Mode z NAT Mode3.1.3 WAN 3.1.3.1 WAN Modez Classic Mode ¾ WAN ModeTips 3.1.3.2 WAN11 Static IP 2 Dynamic IP ¾ Static IP¾ Dynamic IP Use the following DNS ¾ Dynamic IP StatusGet IP Address by Unicast3 PPPoE Connection Type Select PPPoE if your ISP provides xDSL Virtual ¾ PPPoE SettingsFigure 3-9 WAN - PPPoE The following items are displayed on this screensecondary Optional. Enter the ISP address provided by your ISPSubnet Address ¾ PPPoE StatusConnection Type IP AddressIP Address 4 L2TPAccount Name Enter the Account Name provided by your ISP. If you are ¾ L2TP SettingsFigure 3-10 WAN - L2TP The following items are displayed on this screenIf Static IP is selected, configure the subnet mask of WAN You can select the proper Active Mode according to yourStatus IP Address Primary DNS Secondary DNS ¾ L2TP Status5 PPTP Primary DNS/Secondary DNS Upstream Bandwidth Downstream BandwidthThe following items are displayed on this screen ¾ PPTP SettingsFigure 3-11 WAN - PPTP Account Name z “Disconnected” indicates that the connection has been ¾ PPTP Status6 BigPond ¾ BigPond Settings Status ¾ BigPond Status¾ LAN 3.1.4 LAN3.1.4.1 LAN 3.1.4.2 DHCP ¾ DHCP Settings3.1.4.4 DHCP Reservation 3.1.4.3 DHCP ClientActivate or Inactivate the corresponding entry ¾ DHCP Reservation¾ List of Reserved Address 3.1.5.1 DMZ 3.1.5 DMZTips 3.1.6 MAC Address¾ DMZ ¾ MAC Address Set the MAC Address for LAN portSet the MAC Address for WAN port Set the MAC Address for DMZ port¾ Statistics 3.1.7 Switch3.1.7.1 Statistics 3.1.7.2 Port Mirror ¾ Port Mirror ¾ GeneralTips 3.1.7.3 Rate ControlApplication Example ¾ Rate Control 3.1.7.4 Port Config3.1.7.5 Port Status ¾ Port ConfigTips 3.2 User Group3.1.7.6 Port VLAN ¾ Port VLAN¾ List of Group ¾ Group Config3.2.1 Group 3.2.2 User¾ List of User ¾ User Config3.2.3 View ¾ NAPT 3.3.1.1 NAT Setup3.3 Advanced 3.3.1 NAT¾ List of Rules 3.3.1.2 One-to-One NAT¾ list of Rules 3.3.1.3 Multi-Nets NAT¾ Multi-Nets NAT Application Example Network Requirements Configuration procedure ¾ Virtual Server 3.3.1.4 Virtual Server¾ List of Rules 3.3.1.5 Port Triggering¾ List of Rules 3.3.1.6 ALG¾ Port Triggering ¾ ALG 3.3.2.1 Setup3.3.2 Traffic Control ¾ Interface Bandwidth 3.3.2.2 Bandwidth Control Select the data stream direction for the entry. The direction of arrowhead ¾ Bandwidth Control Rule¾ List of Rules ¾ General 3.3.3 Session Limit3.3.3.1 Session Limit ¾ Session Limit 3.3.4.1 Configuration3.3.4 Load Balance 3.3.3.2 Session List3.3.4.2 Policy Routing ¾ List of Rules 3.3.4.3 Link Backup¾ General ¾ General ¾ List of Rules 3.3.4.4 Protocol¾ List of Protocol 3.3.5 Routing3.3.5.1 Static Route ¾ Protocol¾ List of Rules ¾ Static RouteThere is a network topology as the following figure shown Application Example¾ General 3.3.5.2 RIP¾ List of RIP 3.3.5.3 Route Table3.4.1.1 IP-MAC Binding 3.4 Firewall3.4.1 Anti ARP Spoofing Status ¾ IP-MAC Binding¾ General IP Address¾ List of Rules 3.4.1.2 ARP Scanning3.4.1.3 ARP List 3.4.2 Attack Defense¾ General Figure 3-48 Attack DefenseThe following items are displayed on this screen ¾ General 3.4.3 MAC Filtering¾ MAC Filtering ¾ General 3.4.4 Access Control3.4.4.1 URL Filtering ¾ List of Rules¾ List of Rules Configuration Procedure¾ URL Filtering Rule Select the mode for URL Filtering. “Keyword’’ indicates that all the3.4.4.2 Web Filtering 3.4.4.3 Access Rulesother service types can still pass through the Router. You can add ¾ Access RulesSelect the service for the entry. Only the service belonging to the Select this option to specify the priority for the added entries. The group on3.2.1 GroupSelect the Source IP Range for the entries, including the following ¾ List of Rules 3.4.4.4 Service3.4.5.1 Control Rules ¾ Service¾ List of Service 3.4.5 App Control¾ General ¾ Control Rules¾ List of Rules 3.5 VPN3.4.5.2 Database 3.5.1.1 IKE Policy 3.5.1 IKE¾ IKE Policy ¾ List of IKE Policy 3.5.1.2 IKE Proposal¾ IKE Proposal ¾ List of IKE Proposal 3.5.2 IPsec3.5.2.1 IPsec Policy ¾ General ¾ IPsec PolicySelect the network mode for IPsec policy. Options include z IKE Mode Key-In z Manual ModeIPsec Proposal Incoming SPITips 3.5.2.2 IPsec Proposal¾ List of IPsec Policy IPsec ¾ IPsec Proposal ¾ List of IPsec Proposal 3.5.2.3 IPsec SAProtocol Authentication3.5.3 L2TP/PPTP 3.5.3.1 L2TP/PPTP Tunnel¾ General ¾ L2TP/PPTP TunnelSpecify the working mode for this Router. Options include tunnel TunnelSelect the network mode for the tunnel. Options include¾ IP Address Pool ¾ List of Configurations3.5.3.2 IP Address Pool ¾ List of IP Pool 3.6 Services3.6.1 PPPoE Server 3.5.3.3 List of L2TP/PPTP Tunnel3.6.1.1 General ¾ General PPPoE Server Dial-up Access OnlyIdle Timeout Authentication Auth Protocol Radius Server Shared Key 3.6.1.2 IP Address PoolIP Address Range 3.6.1.3 Account¾ IP Address Pool Pool Name¾ Account ¾ Exceptional IP 3.6.1.4 Exceptional IP¾ List of Account ¾ List of Account 3.6.2 E-Bulletin3.6.1.5 List of Account ¾ General ¾ E-BulletinEnable E-Bulletin Enable LogsTips 3.6.3 Dynamic DNS¾ List of E-Bulletin Content Object Effective Time Publisher Description Status¾ Dyndns DDNS 3.6.3.1 DynDNS¾ No-IP DDNS 3.6.3.2 No-IP¾ List of DynDNS Account ¾ PeanutHull DDNS 3.6.3.3 PeanutHull¾ List of No-IP Account ¾ Comexe DDNS 3.6.3.4 Comexe¾ List of PeanutHull Account ¾ List of Comexe Account 3.6.4 UPnP¾ List of UPnP Mapping 3.7 Maintenance3.7.1 Admin Setup 3.7.1.1 AdministratorTips 3.7.1.2 Login Parameter¾ Administrator Application Example Network Requirements Configuration Procedure¾ General Web Management Port Enter the Web Management Port for the Router¾ Remote Management 3.7.2.1 Factory Defaults3.7.2 Management 3.7.1.3 Remote Management¾ Export 3.7.2.3 Reboot¾ Configuration Version 3.7.2.2 Export and Import3.7.3 License 3.7.2.4 Firmware Upgrade¾ Interface Traffic Statistics 3.7.4 Statistics3.7.4.1 Interface Traffic Statistics ¾ Advanced WAN Information 3.7.4.2 IP Traffic Statistics¾ IP Traffic Statistics 3.7.5 Diagnostics3.7.5.1 Diagnostics ¾ Ping ¾ General 3.7.5.2 Online Detection¾ Tracert ¾ Current Time 3.7.6 Time¾ List of WAN status ¾ List of Logs ¾ Config3.7.7 Logs Description LevelSend System Logs 4.1 Network Requirements Chapter 4 ApplicationTips 4.2 Network Topology 4.3 Configurations4.3.1 Internet Setting 4.3.1.3 Internet Connection 4.3.1.1 System Mode4.3.1.2 WAN Mode Figure 4-3 WAN - Static IP 4.3.1.4 Link BackupFigure 4-4 Link Backup 131 4.3.2.1 IPsec VPN 4.3.2 VPN Setting1 IKE Setting SettingsTips Policy NameSettings 2 IPsec Settingz IPsec Proposal z IPsec PolicyproposalIPsec1 you just created TipsSettings 4.3.2.2 PPTP VPN Settingz IP Address Pool z L2TP/PPTP Tunnelz Group 4.3.3 Network Management4.3.3.1 User Group Settings z Userz View Figure 4-11 Group ConfigSettings 1 Enable Bandwidth Control4.3.3.2 App Control 4.3.3.3 Bandwidth ControlKeep the default value 2 Interface Bandwidth3 Bandwidth Control Rule SettingsSettings 4.3.4 Network Security4.3.3.4 Session Limit 2 Set IP-MAC Binding Entry Manually 4.3.4.1 LAN ARP Defense1 Scan and import the entries to ARP List 00-11-22-33-44-aa 4.3.4.2 WAN ARP Defense3 Set Attack Defense Settings1 Port Mirror 4.3.4.3 Attack Defense4.3.4.4 Traffic Monitoring 2 Statistics Figure 4-25 IP Traffic Statistics Chapter 5 CLI 5.1 ConfigurationFigure 5-3 Select the port to connect Figure 5-2 Connection DescriptionFigure 5-5 Connection Properties Settings 149 Figure 5-4 Port SettingsMode 5.2 Interface ModeAccessing Path Logout or Access the next5.3 Online Help admin5.4 Command Introduction 5.4.1 ip TP-LINK ip-mac get modeTP-LINK # ip-mac set mode restrict 5.4.2 ip-macTP-LINK # sys export config TP-LINK # sys restore5.4.4 user TP-LINK # sys import configTP-LINK # user set username Enter new username tplink TP-LINK user set password Enter old passwordTP-LINK # user set password Enter old password 5.4.5 historyExit CLI View the history command5.4.6 exit TP-LINK history clearPorts Appendix A Hardware SpecificationsPower StandardsAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled data authentication, and anti-replay services. ESP encapsulates Appendix C GlossaryGlossary AH （Authentication Header ）Description for services such as IPSec that require keys. Before any IPSecGlossary Telnet is used for remote terminal connection, enabling users to GlossaryDescription Description Glossary