Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER6120 manual Make sure that the NAT DMZ service is disabled

Models: TL-ER6120

1 169

Download 169 pages 57.81 Kb

Page 165

Q3: What can I do if the Router with the remote management function enabled cannot be accessed by the remote computer?

1.Make sure that the IP address of the remote computer is in the subnet allowed to remotely access the router.

2.If the router’s management port has been modified, please log into the Router with the new address, such as http://192.168.0.1:XX (“XX” is the new management port number).

3.Check to see if the management port has been mapped to the service port of the LAN host in the Virtual Server function. If so, you should make a change in the router’s management port or virtual server’s service port.

4.Make sure that the NAT DMZ service is disabled.

Q4: Some function of the Router need to define the IP address subnet with Subnet Mask. What are the common values of the Subnet Mask?

Subnet Mask is a 32-bit binary address used to distinguish the network address and the host address. When dividing the network, the different Subnet Mask defines different subnet, and each subnet owns different number of hosts.

After conversed from 32-bit binary address to decimal address, the common Subnet Mask values can be 8 (which represents the default Subnet Mask value of class A: 255.0.0.0), 16 (which represents the default Subnet Mask value of class B: 255.255.0.0), 24 (which represents the default Subnet Mask value of class C: 255.255.255.0) or 32 (which represents the default Subnet Mask value of class D: 255.255.255.255).

-160-

Image 165

TP-Link TL-ER6120 manual Make sure that the NAT DMZ service is disabled

Contents

Rev 1910010516 TL-ER6120 Multi-WAN VPN RouterCOPYRIGHT & TRADEMARKS FCC STATEMENTCE Mark Warning Chapter 1 About this Guide CONTENTSNetwork Requirements Chapter 4 ApplicationGlossary Hardware SpecificationsAppendix A Appendix BPackage Contents Chapter 1 About this Guide Symbol1.1 Intended Readers 1.2 ConventionsSpecifications Lists the hardware specifications of this RouterAppendix B FAQ Provides the possible solutions to the problems that may occur duringz Powerful Firewall z Powerful Data Processing CapabilityChapter 2 Introduction 2.1 Overview of the Routerz Multi-WAN Ports 2.2 Featuresz Easy-to-use Hardware2.3.1 Front Panel 2.3 AppearanceTraffic Control Securityz LEDs z Reset buttonStatus Indicationz Power Socket 2.3.2 Rear Panelz Grounding Terminal Chapter 3 Configuration 3.1 Network3.1.1 Status 3.1.2 System Mode Figure 3-1 StatusThe TL-ER6120 Router can work in three modes NAT, Non-NAT and Classic Figure 3-3 Network Topology - Non-NAT Mode Figure 3-2 Network Topology - NAT Modez Non-NAT Mode z NAT Modez Classic Mode 3.1.3.1 WAN Mode¾ WAN Mode 3.1.3 WAN3.1.3.2 WAN1 1 Static IPTips 2 Dynamic IP ¾ Static IP¾ Dynamic IP Get IP Address by ¾ Dynamic IP StatusUnicast Use the following DNS3 PPPoE Figure 3-9 WAN - PPPoE ¾ PPPoE SettingsThe following items are displayed on this screen Connection Type Select PPPoE if your ISP provides xDSL Virtualsecondary Optional. Enter the ISP address provided by your ISPConnection Type ¾ PPPoE StatusIP Address Subnet AddressIP Address 4 L2TPFigure 3-10 WAN - L2TP ¾ L2TP SettingsThe following items are displayed on this screen Account Name Enter the Account Name provided by your ISP. If you areIf Static IP is selected, configure the subnet mask of WAN You can select the proper Active Mode according to your5 PPTP ¾ L2TP StatusPrimary DNS/Secondary DNS Upstream Bandwidth Downstream Bandwidth Status IP Address Primary DNS Secondary DNS¾ PPTP Settings Figure 3-11 WAN - PPTPThe following items are displayed on this screen Account Name ¾ PPTP Status 6 BigPondz “Disconnected” indicates that the connection has been ¾ BigPond Settings Status ¾ BigPond Status3.1.4 LAN 3.1.4.1 LAN¾ LAN 3.1.4.2 DHCP ¾ DHCP Settings3.1.4.4 DHCP Reservation 3.1.4.3 DHCP Client¾ DHCP Reservation ¾ List of Reserved AddressActivate or Inactivate the corresponding entry 3.1.5.1 DMZ 3.1.5 DMZ3.1.6 MAC Address ¾ DMZTips Set the MAC Address for WAN port Set the MAC Address for LAN portSet the MAC Address for DMZ port ¾ MAC Address3.1.7 Switch 3.1.7.1 Statistics¾ Statistics 3.1.7.2 Port Mirror ¾ Port Mirror ¾ General3.1.7.3 Rate Control Application ExampleTips ¾ Rate Control 3.1.7.4 Port Config3.1.7.5 Port Status ¾ Port Config3.1.7.6 Port VLAN 3.2 User Group¾ Port VLAN Tips3.2.1 Group ¾ Group Config3.2.2 User ¾ List of Group¾ User Config 3.2.3 View¾ List of User 3.3 Advanced 3.3.1.1 NAT Setup3.3.1 NAT ¾ NAPT¾ List of Rules 3.3.1.2 One-to-One NAT3.3.1.3 Multi-Nets NAT ¾ Multi-Nets NAT¾ list of Rules Application Example Network Requirements Configuration procedure ¾ Virtual Server 3.3.1.4 Virtual Server¾ List of Rules 3.3.1.5 Port Triggering3.3.1.6 ALG ¾ Port Triggering¾ List of Rules 3.3.2.1 Setup 3.3.2 Traffic Control¾ ALG ¾ Interface Bandwidth 3.3.2.2 Bandwidth Control ¾ Bandwidth Control Rule ¾ List of RulesSelect the data stream direction for the entry. The direction of arrowhead 3.3.3 Session Limit 3.3.3.1 Session Limit¾ General 3.3.4 Load Balance 3.3.4.1 Configuration3.3.3.2 Session List ¾ Session Limit3.3.4.2 Policy Routing 3.3.4.3 Link Backup ¾ General¾ List of Rules ¾ General ¾ List of Rules 3.3.4.4 Protocol3.3.5.1 Static Route 3.3.5 Routing¾ Protocol ¾ List of Protocol¾ List of Rules ¾ Static RouteThere is a network topology as the following figure shown Application Example¾ General 3.3.5.2 RIP¾ List of RIP 3.3.5.3 Route Table3.4 Firewall 3.4.1 Anti ARP Spoofing3.4.1.1 IP-MAC Binding ¾ General ¾ IP-MAC BindingIP Address Status¾ List of Rules 3.4.1.2 ARP Scanning3.4.1.3 ARP List 3.4.2 Attack DefenseFigure 3-48 Attack Defense The following items are displayed on this screen¾ General 3.4.3 MAC Filtering ¾ MAC Filtering¾ General 3.4.4.1 URL Filtering 3.4.4 Access Control¾ List of Rules ¾ General¾ URL Filtering Rule Configuration ProcedureSelect the mode for URL Filtering. “Keyword’’ indicates that all the ¾ List of Rules3.4.4.2 Web Filtering 3.4.4.3 Access Rules¾ Access Rules Select the service for the entry. Only the service belonging to theother service types can still pass through the Router. You can add group on3.2.1 Group Select the Source IP Range for the entries, including the followingSelect this option to specify the priority for the added entries. The ¾ List of Rules 3.4.4.4 Service¾ List of Service ¾ Service3.4.5 App Control 3.4.5.1 Control Rules¾ General ¾ Control Rules3.5 VPN 3.4.5.2 Database¾ List of Rules 3.5.1.1 IKE Policy 3.5.1 IKE¾ IKE Policy ¾ List of IKE Policy 3.5.1.2 IKE Proposal¾ IKE Proposal 3.5.2 IPsec 3.5.2.1 IPsec Policy¾ List of IKE Proposal ¾ IPsec Policy Select the network mode for IPsec policy. Options include¾ General z IKE Mode IPsec Proposal z Manual ModeIncoming SPI Key-In3.5.2.2 IPsec Proposal ¾ List of IPsec Policy IPsecTips ¾ IPsec Proposal ¾ List of IPsec Proposal 3.5.2.3 IPsec SA3.5.3 L2TP/PPTP Authentication3.5.3.1 L2TP/PPTP Tunnel Protocol¾ L2TP/PPTP Tunnel Specify the working mode for this Router. Options include¾ General tunnel TunnelSelect the network mode for the tunnel. Options include¾ List of Configurations 3.5.3.2 IP Address Pool¾ IP Address Pool 3.6.1 PPPoE Server 3.6 Services3.5.3.3 List of L2TP/PPTP Tunnel ¾ List of IP Pool3.6.1.1 General ¾ General PPPoE Server Dial-up Access OnlyIdle Timeout Authentication Auth Protocol Radius Server Shared Key 3.6.1.2 IP Address Pool¾ IP Address Pool 3.6.1.3 AccountPool Name IP Address Range¾ Account 3.6.1.4 Exceptional IP ¾ List of Account¾ Exceptional IP 3.6.2 E-Bulletin 3.6.1.5 List of Account¾ List of Account Enable E-Bulletin ¾ E-BulletinEnable Logs ¾ General¾ List of E-Bulletin 3.6.3 Dynamic DNSContent Object Effective Time Publisher Description Status Tips¾ Dyndns DDNS 3.6.3.1 DynDNS3.6.3.2 No-IP ¾ List of DynDNS Account¾ No-IP DDNS 3.6.3.3 PeanutHull ¾ List of No-IP Account¾ PeanutHull DDNS 3.6.3.4 Comexe ¾ List of PeanutHull Account¾ Comexe DDNS ¾ List of Comexe Account 3.6.4 UPnP3.7.1 Admin Setup 3.7 Maintenance3.7.1.1 Administrator ¾ List of UPnP Mapping3.7.1.2 Login Parameter ¾ AdministratorTips ¾ General Configuration ProcedureWeb Management Port Enter the Web Management Port for the Router Application Example Network Requirements3.7.2 Management 3.7.2.1 Factory Defaults3.7.1.3 Remote Management ¾ Remote Management¾ Configuration Version 3.7.2.3 Reboot3.7.2.2 Export and Import ¾ Export3.7.3 License 3.7.2.4 Firmware Upgrade3.7.4 Statistics 3.7.4.1 Interface Traffic Statistics¾ Interface Traffic Statistics ¾ Advanced WAN Information 3.7.4.2 IP Traffic Statistics3.7.5 Diagnostics 3.7.5.1 Diagnostics¾ IP Traffic Statistics ¾ Ping 3.7.5.2 Online Detection ¾ Tracert¾ General 3.7.6 Time ¾ List of WAN status¾ Current Time ¾ Config 3.7.7 Logs¾ List of Logs Level Send System LogsDescription 4.1 Network Requirements Chapter 4 Application4.2 Network Topology 4.3 Configurations 4.3.1 Internet SettingTips 4.3.1.1 System Mode 4.3.1.2 WAN Mode4.3.1.3 Internet Connection 4.3.1.4 Link Backup Figure 4-4 Link Backup 131Figure 4-3 WAN - Static IP 1 IKE Setting 4.3.2 VPN SettingSettings 4.3.2.1 IPsec VPNTips Policy Namez IPsec Proposal 2 IPsec Settingz IPsec Policy SettingsproposalIPsec1 you just created Tipsz IP Address Pool 4.3.2.2 PPTP VPN Settingz L2TP/PPTP Tunnel Settings4.3.3 Network Management 4.3.3.1 User Groupz Group z View z UserFigure 4-11 Group Config Settings4.3.3.2 App Control 1 Enable Bandwidth Control4.3.3.3 Bandwidth Control Settings3 Bandwidth Control Rule 2 Interface BandwidthSettings Keep the default value4.3.4 Network Security 4.3.3.4 Session LimitSettings 4.3.4.1 LAN ARP Defense 1 Scan and import the entries to ARP List2 Set IP-MAC Binding Entry Manually 3 Set Attack Defense 4.3.4.2 WAN ARP DefenseSettings 00-11-22-33-44-aa4.3.4.3 Attack Defense 4.3.4.4 Traffic Monitoring1 Port Mirror 2 Statistics Figure 4-25 IP Traffic Statistics Chapter 5 CLI 5.1 ConfigurationFigure 5-3 Select the port to connect Figure 5-2 Connection DescriptionFigure 5-5 Connection Properties Settings 149 Figure 5-4 Port SettingsAccessing Path 5.2 Interface ModeLogout or Access the next Mode5.3 Online Help admin5.4 Command Introduction TP-LINK # ip-mac set mode restrict TP-LINK ip-mac get mode5.4.2 ip-mac 5.4.1 ipTP-LINK # sys export config TP-LINK # sys restore5.4.4 user TP-LINK # sys import configTP-LINK # user set password Enter old password TP-LINK user set password Enter old password5.4.5 history TP-LINK # user set username Enter new username tplink5.4.6 exit View the history commandTP-LINK history clear Exit CLIPower Appendix A Hardware SpecificationsStandards PortsAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled Glossary Appendix C GlossaryAH （Authentication Header ） data authentication, and anti-replay services. ESP encapsulatesfor services such as IPSec that require keys. Before any IPSec GlossaryDescription Glossary DescriptionTelnet is used for remote terminal connection, enabling users to Description Glossary