Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER6120 manual App Control, Enable Bandwidth Control, Settings

Models: TL-ER6120

1 169

Page 144

4.3.3.2App Control

Choose the menu Firewall→App Control→Control Rules to load the configuration page. Check the box before Enable Application Control and click <Save> to apply. Then continue with the following settings:

Settings:

Object:

Group:

Application:

Group

group1

Click the <Application List> button and select the applications desired to be blocked on the popup window.

Status: Activate

Figure 4-13 App Rules

4.3.3.3Bandwidth Control

To enable Bandwidth Control, you should configure the total bandwidth of interfaces and the detailed bandwidth control rule first.

1)Enable Bandwidth Control

Choose the menu Advanced→Traffic Control→Setup to load the configuration page. Check the box before Enable Bandwidth Control and click the <Save> button to apply.

-139-

Page 144

Image 144

TP-Link TL-ER6120 manual App Control, Enable Bandwidth Control, Settings

Contents

TL-ER6120 Multi-WAN VPN Router Rev 1910010516COPYRIGHT & TRADEMARKS FCC STATEMENTCE Mark Warning CONTENTS Chapter 1 About this GuideChapter 4 Application Network RequirementsHardware Specifications GlossaryAppendix A Appendix BPackage Contents Symbol Chapter 1 About this Guide1.1 Intended Readers 1.2 ConventionsLists the hardware specifications of this Router SpecificationsAppendix B FAQ Provides the possible solutions to the problems that may occur duringz Powerful Data Processing Capability z Powerful FirewallChapter 2 Introduction 2.1 Overview of the Router2.2 Features z Multi-WAN Portsz Easy-to-use Hardware2.3 Appearance 2.3.1 Front PanelTraffic Control Securityz Reset button z LEDsStatus Indicationz Power Socket 2.3.2 Rear Panelz Grounding Terminal Chapter 3 Configuration 3.1 Network3.1.1 Status 3.1.2 System Mode Figure 3-1 StatusThe TL-ER6120 Router can work in three modes NAT, Non-NAT and Classic Figure 3-2 Network Topology - NAT Mode Figure 3-3 Network Topology - Non-NAT Modez NAT Mode z Non-NAT Mode3.1.3.1 WAN Mode z Classic Mode¾ WAN Mode 3.1.3 WAN3.1.3.2 WAN1 1 Static IPTips ¾ Static IP 2 Dynamic IP¾ Dynamic IP ¾ Dynamic IP Status Get IP Address byUnicast Use the following DNS3 PPPoE ¾ PPPoE Settings Figure 3-9 WAN - PPPoEThe following items are displayed on this screen Connection Type Select PPPoE if your ISP provides xDSL VirtualOptional. Enter the ISP address provided by your ISP secondary¾ PPPoE Status Connection TypeIP Address Subnet Address4 L2TP IP Address¾ L2TP Settings Figure 3-10 WAN - L2TPThe following items are displayed on this screen Account Name Enter the Account Name provided by your ISP. If you areYou can select the proper Active Mode according to your If Static IP is selected, configure the subnet mask of WAN¾ L2TP Status 5 PPTPPrimary DNS/Secondary DNS Upstream Bandwidth Downstream Bandwidth Status IP Address Primary DNS Secondary DNS¾ PPTP Settings Figure 3-11 WAN - PPTPThe following items are displayed on this screen Account Name ¾ PPTP Status 6 BigPondz “Disconnected” indicates that the connection has been ¾ BigPond Settings ¾ BigPond Status Status3.1.4 LAN 3.1.4.1 LAN¾ LAN ¾ DHCP Settings 3.1.4.2 DHCP3.1.4.3 DHCP Client 3.1.4.4 DHCP Reservation¾ DHCP Reservation ¾ List of Reserved AddressActivate or Inactivate the corresponding entry 3.1.5 DMZ 3.1.5.1 DMZ3.1.6 MAC Address ¾ DMZTips Set the MAC Address for LAN port Set the MAC Address for WAN portSet the MAC Address for DMZ port ¾ MAC Address3.1.7 Switch 3.1.7.1 Statistics¾ Statistics 3.1.7.2 Port Mirror ¾ General ¾ Port Mirror3.1.7.3 Rate Control Application ExampleTips 3.1.7.4 Port Config ¾ Rate Control¾ Port Config 3.1.7.5 Port Status3.2 User Group 3.1.7.6 Port VLAN¾ Port VLAN Tips¾ Group Config 3.2.1 Group3.2.2 User ¾ List of Group¾ User Config 3.2.3 View¾ List of User 3.3.1.1 NAT Setup 3.3 Advanced3.3.1 NAT ¾ NAPT3.3.1.2 One-to-One NAT ¾ List of Rules3.3.1.3 Multi-Nets NAT ¾ Multi-Nets NAT¾ list of Rules Application Example Network Requirements Configuration procedure 3.3.1.4 Virtual Server ¾ Virtual Server3.3.1.5 Port Triggering ¾ List of Rules3.3.1.6 ALG ¾ Port Triggering¾ List of Rules 3.3.2.1 Setup 3.3.2 Traffic Control¾ ALG ¾ Interface Bandwidth 3.3.2.2 Bandwidth Control ¾ Bandwidth Control Rule ¾ List of RulesSelect the data stream direction for the entry. The direction of arrowhead 3.3.3 Session Limit 3.3.3.1 Session Limit¾ General 3.3.4.1 Configuration 3.3.4 Load Balance3.3.3.2 Session List ¾ Session Limit3.3.4.2 Policy Routing 3.3.4.3 Link Backup ¾ General¾ List of Rules ¾ General 3.3.4.4 Protocol ¾ List of Rules3.3.5 Routing 3.3.5.1 Static Route¾ Protocol ¾ List of Protocol¾ Static Route ¾ List of RulesApplication Example There is a network topology as the following figure shown3.3.5.2 RIP ¾ General3.3.5.3 Route Table ¾ List of RIP3.4 Firewall 3.4.1 Anti ARP Spoofing3.4.1.1 IP-MAC Binding ¾ IP-MAC Binding ¾ GeneralIP Address Status3.4.1.2 ARP Scanning ¾ List of Rules3.4.2 Attack Defense 3.4.1.3 ARP ListFigure 3-48 Attack Defense The following items are displayed on this screen¾ General 3.4.3 MAC Filtering ¾ MAC Filtering¾ General 3.4.4 Access Control 3.4.4.1 URL Filtering¾ List of Rules ¾ GeneralConfiguration Procedure ¾ URL Filtering RuleSelect the mode for URL Filtering. “Keyword’’ indicates that all the ¾ List of Rules3.4.4.3 Access Rules 3.4.4.2 Web Filtering¾ Access Rules Select the service for the entry. Only the service belonging to theother service types can still pass through the Router. You can add group on3.2.1 Group Select the Source IP Range for the entries, including the followingSelect this option to specify the priority for the added entries. The 3.4.4.4 Service ¾ List of Rules¾ Service ¾ List of Service3.4.5 App Control 3.4.5.1 Control Rules¾ Control Rules ¾ General3.5 VPN 3.4.5.2 Database¾ List of Rules 3.5.1 IKE 3.5.1.1 IKE Policy¾ IKE Policy 3.5.1.2 IKE Proposal ¾ List of IKE Policy¾ IKE Proposal 3.5.2 IPsec 3.5.2.1 IPsec Policy¾ List of IKE Proposal ¾ IPsec Policy Select the network mode for IPsec policy. Options include¾ General z IKE Mode z Manual Mode IPsec ProposalIncoming SPI Key-In3.5.2.2 IPsec Proposal ¾ List of IPsec Policy IPsecTips ¾ IPsec Proposal 3.5.2.3 IPsec SA ¾ List of IPsec ProposalAuthentication 3.5.3 L2TP/PPTP3.5.3.1 L2TP/PPTP Tunnel Protocol¾ L2TP/PPTP Tunnel Specify the working mode for this Router. Options include¾ General TunnelSelect the network mode for the tunnel. Options include tunnel¾ List of Configurations 3.5.3.2 IP Address Pool¾ IP Address Pool 3.6 Services 3.6.1 PPPoE Server3.5.3.3 List of L2TP/PPTP Tunnel ¾ List of IP Pool¾ General PPPoE Server Dial-up Access Only 3.6.1.1 General3.6.1.2 IP Address Pool Idle Timeout Authentication Auth Protocol Radius Server Shared Key3.6.1.3 Account ¾ IP Address PoolPool Name IP Address Range¾ Account 3.6.1.4 Exceptional IP ¾ List of Account¾ Exceptional IP 3.6.2 E-Bulletin 3.6.1.5 List of Account¾ List of Account ¾ E-Bulletin Enable E-BulletinEnable Logs ¾ General3.6.3 Dynamic DNS ¾ List of E-BulletinContent Object Effective Time Publisher Description Status Tips3.6.3.1 DynDNS ¾ Dyndns DDNS3.6.3.2 No-IP ¾ List of DynDNS Account¾ No-IP DDNS 3.6.3.3 PeanutHull ¾ List of No-IP Account¾ PeanutHull DDNS 3.6.3.4 Comexe ¾ List of PeanutHull Account¾ Comexe DDNS 3.6.4 UPnP ¾ List of Comexe Account3.7 Maintenance 3.7.1 Admin Setup3.7.1.1 Administrator ¾ List of UPnP Mapping3.7.1.2 Login Parameter ¾ AdministratorTips Configuration Procedure ¾ GeneralWeb Management Port Enter the Web Management Port for the Router Application Example Network Requirements3.7.2.1 Factory Defaults 3.7.2 Management3.7.1.3 Remote Management ¾ Remote Management3.7.2.3 Reboot ¾ Configuration Version3.7.2.2 Export and Import ¾ Export3.7.2.4 Firmware Upgrade 3.7.3 License3.7.4 Statistics 3.7.4.1 Interface Traffic Statistics¾ Interface Traffic Statistics 3.7.4.2 IP Traffic Statistics ¾ Advanced WAN Information3.7.5 Diagnostics 3.7.5.1 Diagnostics¾ IP Traffic Statistics ¾ Ping 3.7.5.2 Online Detection ¾ Tracert¾ General 3.7.6 Time ¾ List of WAN status¾ Current Time ¾ Config 3.7.7 Logs¾ List of Logs Level Send System LogsDescription Chapter 4 Application 4.1 Network Requirements4.2 Network Topology 4.3 Configurations 4.3.1 Internet SettingTips 4.3.1.1 System Mode 4.3.1.2 WAN Mode4.3.1.3 Internet Connection 4.3.1.4 Link Backup Figure 4-4 Link Backup 131Figure 4-3 WAN - Static IP 4.3.2 VPN Setting 1 IKE SettingSettings 4.3.2.1 IPsec VPNPolicy Name Tips2 IPsec Setting z IPsec Proposalz IPsec Policy SettingsTips proposalIPsec1 you just created4.3.2.2 PPTP VPN Setting z IP Address Poolz L2TP/PPTP Tunnel Settings4.3.3 Network Management 4.3.3.1 User Groupz Group z User z ViewFigure 4-11 Group Config Settings1 Enable Bandwidth Control 4.3.3.2 App Control4.3.3.3 Bandwidth Control Settings2 Interface Bandwidth 3 Bandwidth Control RuleSettings Keep the default value4.3.4 Network Security 4.3.3.4 Session LimitSettings 4.3.4.1 LAN ARP Defense 1 Scan and import the entries to ARP List2 Set IP-MAC Binding Entry Manually 4.3.4.2 WAN ARP Defense 3 Set Attack DefenseSettings 00-11-22-33-44-aa4.3.4.3 Attack Defense 4.3.4.4 Traffic Monitoring1 Port Mirror 2 Statistics Figure 4-25 IP Traffic Statistics 5.1 Configuration Chapter 5 CLIFigure 5-2 Connection Description Figure 5-3 Select the port to connectFigure 5-4 Port Settings Figure 5-5 Connection Properties Settings 1495.2 Interface Mode Accessing PathLogout or Access the next Modeadmin 5.3 Online Help5.4 Command Introduction TP-LINK ip-mac get mode TP-LINK # ip-mac set mode restrict5.4.2 ip-mac 5.4.1 ipTP-LINK # sys restore TP-LINK # sys export configTP-LINK # sys import config 5.4.4 userTP-LINK user set password Enter old password TP-LINK # user set password Enter old password5.4.5 history TP-LINK # user set username Enter new username tplinkView the history command 5.4.6 exitTP-LINK history clear Exit CLIAppendix A Hardware Specifications PowerStandards PortsAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled Appendix C Glossary GlossaryAH （Authentication Header ） data authentication, and anti-replay services. ESP encapsulatesfor services such as IPSec that require keys. Before any IPSec GlossaryDescription Glossary DescriptionTelnet is used for remote terminal connection, enabling users to Glossary Description