Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER6120 manual 3.3.1.6 ALG, ¾ Port Triggering, ¾ List of Rules

Models: TL-ER6120

1 169

Download 169 pages 57.81 Kb

Page 59

¾Port Triggering

¾Port Triggering

Name:Enter a name for Port Triggering entries. Up to 28 characters can be entered.

Trigger Port: Enter the trigger port number or range of port numbers. Only when the trigger port initiates connection will all the corresponding incoming ports open and provide service for the applications, otherwise the incoming ports will not open.

Trigger Protocol: Select the protocol used for trigger port.

Incoming Port: Enter the incoming port number or range of port numbers. The incoming port will open for follow-up connection after the trigger port initiates connection.

Incoming Protocol: Select the protocol used for incoming port.

Status:

Activate or inactivate the entry.

Note:

●The Trigger Port and Incoming Port should be set in the range of 1-65535. The Incoming Port can be set in a continuous range such as 8690-8696.

●The Router supports up to 16 Port Triggering entries. Each entry supports at most 5 groups of trigger ports and overlapping between the ports is not allowed.

●Each entry supports at most 5 groups of incoming ports and the sum of incoming ports you set for each entry should not be more than 100.

¾List of Rules

In this table, you can view the information of the entries and edit them by the Action buttons.

The first entry in Figure 3-32indicates that: This is a Port Triggering entry named host1, When the LAN host initiates a TCP request via port of 5354, the incoming port 5355 will open for TCP and UDP protocol. This entry is activated.

3.3.1.6ALG

Some special protocols such as FTP, H.323, SIP, IPsec and PPTP will work properly only when ALG (Application Layer Gateway) service is enabled.

-54-

Image 59

TP-Link TL-ER6120 manual 3.3.1.6 ALG, ¾ Port Triggering, ¾ List of Rules

Contents

Rev 1910010516 TL-ER6120 Multi-WAN VPN RouterCE Mark Warning COPYRIGHT & TRADEMARKSFCC STATEMENT Chapter 1 About this Guide CONTENTSNetwork Requirements Chapter 4 ApplicationAppendix B Hardware SpecificationsGlossary Appendix APackage Contents 1.2 Conventions SymbolChapter 1 About this Guide 1.1 Intended ReadersProvides the possible solutions to the problems that may occur during Lists the hardware specifications of this RouterSpecifications Appendix B FAQ2.1 Overview of the Router z Powerful Data Processing Capabilityz Powerful Firewall Chapter 2 IntroductionHardware 2.2 Featuresz Multi-WAN Ports z Easy-to-useSecurity 2.3 Appearance2.3.1 Front Panel Traffic ControlIndication z Reset buttonz LEDs Statusz Grounding Terminal z Power Socket2.3.2 Rear Panel 3.1.1 Status Chapter 3 Configuration3.1 Network The TL-ER6120 Router can work in three modes NAT, Non-NAT and Classic 3.1.2 System ModeFigure 3-1 Status Figure 3-3 Network Topology - Non-NAT Mode Figure 3-2 Network Topology - NAT Modez Non-NAT Mode z NAT Mode3.1.3 WAN 3.1.3.1 WAN Modez Classic Mode ¾ WAN ModeTips 3.1.3.2 WAN11 Static IP 2 Dynamic IP ¾ Static IP¾ Dynamic IP Use the following DNS ¾ Dynamic IP StatusGet IP Address by Unicast3 PPPoE Connection Type Select PPPoE if your ISP provides xDSL Virtual ¾ PPPoE SettingsFigure 3-9 WAN - PPPoE The following items are displayed on this screensecondary Optional. Enter the ISP address provided by your ISPSubnet Address ¾ PPPoE StatusConnection Type IP AddressIP Address 4 L2TPAccount Name Enter the Account Name provided by your ISP. If you are ¾ L2TP SettingsFigure 3-10 WAN - L2TP The following items are displayed on this screenIf Static IP is selected, configure the subnet mask of WAN You can select the proper Active Mode according to yourStatus IP Address Primary DNS Secondary DNS ¾ L2TP Status5 PPTP Primary DNS/Secondary DNS Upstream Bandwidth Downstream BandwidthThe following items are displayed on this screen ¾ PPTP SettingsFigure 3-11 WAN - PPTP Account Name z “Disconnected” indicates that the connection has been ¾ PPTP Status6 BigPond ¾ BigPond Settings Status ¾ BigPond Status¾ LAN 3.1.4 LAN3.1.4.1 LAN 3.1.4.2 DHCP ¾ DHCP Settings3.1.4.4 DHCP Reservation 3.1.4.3 DHCP ClientActivate or Inactivate the corresponding entry ¾ DHCP Reservation¾ List of Reserved Address 3.1.5.1 DMZ 3.1.5 DMZTips 3.1.6 MAC Address¾ DMZ ¾ MAC Address Set the MAC Address for LAN portSet the MAC Address for WAN port Set the MAC Address for DMZ port¾ Statistics 3.1.7 Switch3.1.7.1 Statistics 3.1.7.2 Port Mirror ¾ Port Mirror ¾ GeneralTips 3.1.7.3 Rate ControlApplication Example ¾ Rate Control 3.1.7.4 Port Config3.1.7.5 Port Status ¾ Port ConfigTips 3.2 User Group3.1.7.6 Port VLAN ¾ Port VLAN¾ List of Group ¾ Group Config3.2.1 Group 3.2.2 User¾ List of User ¾ User Config3.2.3 View ¾ NAPT 3.3.1.1 NAT Setup3.3 Advanced 3.3.1 NAT¾ List of Rules 3.3.1.2 One-to-One NAT¾ list of Rules 3.3.1.3 Multi-Nets NAT¾ Multi-Nets NAT Application Example Network Requirements Configuration procedure ¾ Virtual Server 3.3.1.4 Virtual Server¾ List of Rules 3.3.1.5 Port Triggering¾ List of Rules 3.3.1.6 ALG¾ Port Triggering ¾ ALG 3.3.2.1 Setup3.3.2 Traffic Control ¾ Interface Bandwidth 3.3.2.2 Bandwidth Control Select the data stream direction for the entry. The direction of arrowhead ¾ Bandwidth Control Rule¾ List of Rules ¾ General 3.3.3 Session Limit3.3.3.1 Session Limit ¾ Session Limit 3.3.4.1 Configuration3.3.4 Load Balance 3.3.3.2 Session List3.3.4.2 Policy Routing ¾ List of Rules 3.3.4.3 Link Backup¾ General ¾ General ¾ List of Rules 3.3.4.4 Protocol¾ List of Protocol 3.3.5 Routing3.3.5.1 Static Route ¾ Protocol¾ List of Rules ¾ Static RouteThere is a network topology as the following figure shown Application Example¾ General 3.3.5.2 RIP¾ List of RIP 3.3.5.3 Route Table3.4.1.1 IP-MAC Binding 3.4 Firewall3.4.1 Anti ARP Spoofing Status ¾ IP-MAC Binding¾ General IP Address¾ List of Rules 3.4.1.2 ARP Scanning3.4.1.3 ARP List 3.4.2 Attack Defense¾ General Figure 3-48 Attack DefenseThe following items are displayed on this screen ¾ General 3.4.3 MAC Filtering¾ MAC Filtering ¾ General 3.4.4 Access Control3.4.4.1 URL Filtering ¾ List of Rules¾ List of Rules Configuration Procedure¾ URL Filtering Rule Select the mode for URL Filtering. “Keyword’’ indicates that all the3.4.4.2 Web Filtering 3.4.4.3 Access Rulesother service types can still pass through the Router. You can add ¾ Access RulesSelect the service for the entry. Only the service belonging to the Select this option to specify the priority for the added entries. The group on3.2.1 GroupSelect the Source IP Range for the entries, including the following ¾ List of Rules 3.4.4.4 Service3.4.5.1 Control Rules ¾ Service¾ List of Service 3.4.5 App Control¾ General ¾ Control Rules¾ List of Rules 3.5 VPN3.4.5.2 Database 3.5.1.1 IKE Policy 3.5.1 IKE¾ IKE Policy ¾ List of IKE Policy 3.5.1.2 IKE Proposal¾ IKE Proposal ¾ List of IKE Proposal 3.5.2 IPsec3.5.2.1 IPsec Policy ¾ General ¾ IPsec PolicySelect the network mode for IPsec policy. Options include z IKE Mode Key-In z Manual ModeIPsec Proposal Incoming SPITips 3.5.2.2 IPsec Proposal¾ List of IPsec Policy IPsec ¾ IPsec Proposal ¾ List of IPsec Proposal 3.5.2.3 IPsec SAProtocol Authentication3.5.3 L2TP/PPTP 3.5.3.1 L2TP/PPTP Tunnel¾ General ¾ L2TP/PPTP TunnelSpecify the working mode for this Router. Options include tunnel TunnelSelect the network mode for the tunnel. Options include¾ IP Address Pool ¾ List of Configurations3.5.3.2 IP Address Pool ¾ List of IP Pool 3.6 Services3.6.1 PPPoE Server 3.5.3.3 List of L2TP/PPTP Tunnel3.6.1.1 General ¾ General PPPoE Server Dial-up Access OnlyIdle Timeout Authentication Auth Protocol Radius Server Shared Key 3.6.1.2 IP Address PoolIP Address Range 3.6.1.3 Account¾ IP Address Pool Pool Name¾ Account ¾ Exceptional IP 3.6.1.4 Exceptional IP¾ List of Account ¾ List of Account 3.6.2 E-Bulletin3.6.1.5 List of Account ¾ General ¾ E-BulletinEnable E-Bulletin Enable LogsTips 3.6.3 Dynamic DNS¾ List of E-Bulletin Content Object Effective Time Publisher Description Status¾ Dyndns DDNS 3.6.3.1 DynDNS¾ No-IP DDNS 3.6.3.2 No-IP¾ List of DynDNS Account ¾ PeanutHull DDNS 3.6.3.3 PeanutHull¾ List of No-IP Account ¾ Comexe DDNS 3.6.3.4 Comexe¾ List of PeanutHull Account ¾ List of Comexe Account 3.6.4 UPnP¾ List of UPnP Mapping 3.7 Maintenance3.7.1 Admin Setup 3.7.1.1 AdministratorTips 3.7.1.2 Login Parameter¾ Administrator Application Example Network Requirements Configuration Procedure¾ General Web Management Port Enter the Web Management Port for the Router¾ Remote Management 3.7.2.1 Factory Defaults3.7.2 Management 3.7.1.3 Remote Management¾ Export 3.7.2.3 Reboot¾ Configuration Version 3.7.2.2 Export and Import3.7.3 License 3.7.2.4 Firmware Upgrade¾ Interface Traffic Statistics 3.7.4 Statistics3.7.4.1 Interface Traffic Statistics ¾ Advanced WAN Information 3.7.4.2 IP Traffic Statistics¾ IP Traffic Statistics 3.7.5 Diagnostics3.7.5.1 Diagnostics ¾ Ping ¾ General 3.7.5.2 Online Detection¾ Tracert ¾ Current Time 3.7.6 Time¾ List of WAN status ¾ List of Logs ¾ Config3.7.7 Logs Description LevelSend System Logs 4.1 Network Requirements Chapter 4 ApplicationTips 4.2 Network Topology 4.3 Configurations4.3.1 Internet Setting 4.3.1.3 Internet Connection 4.3.1.1 System Mode4.3.1.2 WAN Mode Figure 4-3 WAN - Static IP 4.3.1.4 Link BackupFigure 4-4 Link Backup 131 4.3.2.1 IPsec VPN 4.3.2 VPN Setting1 IKE Setting SettingsTips Policy NameSettings 2 IPsec Settingz IPsec Proposal z IPsec PolicyproposalIPsec1 you just created TipsSettings 4.3.2.2 PPTP VPN Settingz IP Address Pool z L2TP/PPTP Tunnelz Group 4.3.3 Network Management4.3.3.1 User Group Settings z Userz View Figure 4-11 Group ConfigSettings 1 Enable Bandwidth Control4.3.3.2 App Control 4.3.3.3 Bandwidth ControlKeep the default value 2 Interface Bandwidth3 Bandwidth Control Rule SettingsSettings 4.3.4 Network Security4.3.3.4 Session Limit 2 Set IP-MAC Binding Entry Manually 4.3.4.1 LAN ARP Defense1 Scan and import the entries to ARP List 00-11-22-33-44-aa 4.3.4.2 WAN ARP Defense3 Set Attack Defense Settings1 Port Mirror 4.3.4.3 Attack Defense4.3.4.4 Traffic Monitoring 2 Statistics Figure 4-25 IP Traffic Statistics Chapter 5 CLI 5.1 ConfigurationFigure 5-3 Select the port to connect Figure 5-2 Connection DescriptionFigure 5-5 Connection Properties Settings 149 Figure 5-4 Port SettingsMode 5.2 Interface ModeAccessing Path Logout or Access the next5.3 Online Help admin5.4 Command Introduction 5.4.1 ip TP-LINK ip-mac get modeTP-LINK # ip-mac set mode restrict 5.4.2 ip-macTP-LINK # sys export config TP-LINK # sys restore5.4.4 user TP-LINK # sys import configTP-LINK # user set username Enter new username tplink TP-LINK user set password Enter old passwordTP-LINK # user set password Enter old password 5.4.5 historyExit CLI View the history command5.4.6 exit TP-LINK history clearPorts Appendix A Hardware SpecificationsPower StandardsAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled data authentication, and anti-replay services. ESP encapsulates Appendix C GlossaryGlossary AH （Authentication Header ）Description for services such as IPSec that require keys. Before any IPSecGlossary Telnet is used for remote terminal connection, enabling users to GlossaryDescription Description Glossary