Manuals / TP-Link / Computer Equipment / Network Router

TP-Link TL-ER6120 manual Service, ¾ List of Rules

Models: TL-ER6120

1 169

Download 169 pages 57.81 Kb

Page 86

3.4.4.4Service

¾List of Rules

You can view the information of the entries and edit them by the Action buttons. The smaller the value is, the higher the priority is.

The first entry in Figure 3-52indicates: The TELNET packets transmitted from the hosts within the network of 192.168.0.0/24 will be not allowed to pass through the Router at 8:00-20:00 from Tuesday to Saturday.

Note

●For the users in the private network and not being set access rule, the default Policy is Allow.

●To specify all IP addresses, type “0.0.0.0 / 32” in the Policy field.

● For detailed setting of subnet mask, please refer to Appendix B FAQ.

3.4.4.4Service

The Service function allows you to specify the protocol and port number i to be filtered for Firewall function conveniently. Protocol name and port range constitute a service type. The Router predefines three commonly used services such as HTTP, FTP and TELNET and you can also add customized services if needed.

Choose the menu Firewall→Access Control→Service to load the following page.

Figure 3-53 Service

-81-

Image 86

TP-Link TL-ER6120 manual Service, ¾ List of Rules

Contents

TL-ER6120 Multi-WAN VPN Router Rev 1910010516CE Mark Warning COPYRIGHT & TRADEMARKSFCC STATEMENT CONTENTS Chapter 1 About this GuideChapter 4 Application Network RequirementsAppendix A Hardware SpecificationsGlossary Appendix BPackage Contents 1.1 Intended Readers SymbolChapter 1 About this Guide 1.2 ConventionsAppendix B FAQ Lists the hardware specifications of this RouterSpecifications Provides the possible solutions to the problems that may occur duringChapter 2 Introduction z Powerful Data Processing Capabilityz Powerful Firewall 2.1 Overview of the Routerz Easy-to-use 2.2 Featuresz Multi-WAN Ports HardwareTraffic Control 2.3 Appearance2.3.1 Front Panel SecurityStatus z Reset buttonz LEDs Indicationz Grounding Terminal z Power Socket2.3.2 Rear Panel 3.1.1 Status Chapter 3 Configuration3.1 Network The TL-ER6120 Router can work in three modes NAT, Non-NAT and Classic 3.1.2 System ModeFigure 3-1 Status Figure 3-2 Network Topology - NAT Mode Figure 3-3 Network Topology - Non-NAT Modez NAT Mode z Non-NAT Mode¾ WAN Mode 3.1.3.1 WAN Modez Classic Mode 3.1.3 WANTips 3.1.3.2 WAN11 Static IP ¾ Static IP 2 Dynamic IP¾ Dynamic IP Unicast ¾ Dynamic IP StatusGet IP Address by Use the following DNS3 PPPoE The following items are displayed on this screen ¾ PPPoE SettingsFigure 3-9 WAN - PPPoE Connection Type Select PPPoE if your ISP provides xDSL VirtualOptional. Enter the ISP address provided by your ISP secondaryIP Address ¾ PPPoE StatusConnection Type Subnet Address4 L2TP IP AddressThe following items are displayed on this screen ¾ L2TP SettingsFigure 3-10 WAN - L2TP Account Name Enter the Account Name provided by your ISP. If you areYou can select the proper Active Mode according to your If Static IP is selected, configure the subnet mask of WANPrimary DNS/Secondary DNS Upstream Bandwidth Downstream Bandwidth ¾ L2TP Status5 PPTP Status IP Address Primary DNS Secondary DNSThe following items are displayed on this screen ¾ PPTP SettingsFigure 3-11 WAN - PPTP Account Name z “Disconnected” indicates that the connection has been ¾ PPTP Status6 BigPond ¾ BigPond Settings ¾ BigPond Status Status¾ LAN 3.1.4 LAN3.1.4.1 LAN ¾ DHCP Settings 3.1.4.2 DHCP3.1.4.3 DHCP Client 3.1.4.4 DHCP ReservationActivate or Inactivate the corresponding entry ¾ DHCP Reservation¾ List of Reserved Address 3.1.5 DMZ 3.1.5.1 DMZTips 3.1.6 MAC Address¾ DMZ Set the MAC Address for DMZ port Set the MAC Address for LAN portSet the MAC Address for WAN port ¾ MAC Address¾ Statistics 3.1.7 Switch3.1.7.1 Statistics 3.1.7.2 Port Mirror ¾ General ¾ Port MirrorTips 3.1.7.3 Rate ControlApplication Example 3.1.7.4 Port Config ¾ Rate Control¾ Port Config 3.1.7.5 Port Status¾ Port VLAN 3.2 User Group3.1.7.6 Port VLAN Tips3.2.2 User ¾ Group Config3.2.1 Group ¾ List of Group¾ List of User ¾ User Config3.2.3 View 3.3.1 NAT 3.3.1.1 NAT Setup3.3 Advanced ¾ NAPT3.3.1.2 One-to-One NAT ¾ List of Rules¾ list of Rules 3.3.1.3 Multi-Nets NAT¾ Multi-Nets NAT Application Example Network Requirements Configuration procedure 3.3.1.4 Virtual Server ¾ Virtual Server3.3.1.5 Port Triggering ¾ List of Rules¾ List of Rules 3.3.1.6 ALG¾ Port Triggering ¾ ALG 3.3.2.1 Setup3.3.2 Traffic Control ¾ Interface Bandwidth 3.3.2.2 Bandwidth Control Select the data stream direction for the entry. The direction of arrowhead ¾ Bandwidth Control Rule¾ List of Rules ¾ General 3.3.3 Session Limit3.3.3.1 Session Limit 3.3.3.2 Session List 3.3.4.1 Configuration3.3.4 Load Balance ¾ Session Limit3.3.4.2 Policy Routing ¾ List of Rules 3.3.4.3 Link Backup¾ General ¾ General 3.3.4.4 Protocol ¾ List of Rules¾ Protocol 3.3.5 Routing3.3.5.1 Static Route ¾ List of Protocol¾ Static Route ¾ List of RulesApplication Example There is a network topology as the following figure shown3.3.5.2 RIP ¾ General3.3.5.3 Route Table ¾ List of RIP3.4.1.1 IP-MAC Binding 3.4 Firewall3.4.1 Anti ARP Spoofing IP Address ¾ IP-MAC Binding¾ General Status3.4.1.2 ARP Scanning ¾ List of Rules3.4.2 Attack Defense 3.4.1.3 ARP List¾ General Figure 3-48 Attack DefenseThe following items are displayed on this screen ¾ General 3.4.3 MAC Filtering¾ MAC Filtering ¾ List of Rules 3.4.4 Access Control3.4.4.1 URL Filtering ¾ GeneralSelect the mode for URL Filtering. “Keyword’’ indicates that all the Configuration Procedure¾ URL Filtering Rule ¾ List of Rules3.4.4.3 Access Rules 3.4.4.2 Web Filteringother service types can still pass through the Router. You can add ¾ Access RulesSelect the service for the entry. Only the service belonging to the Select this option to specify the priority for the added entries. The group on3.2.1 GroupSelect the Source IP Range for the entries, including the following 3.4.4.4 Service ¾ List of Rules3.4.5 App Control ¾ Service¾ List of Service 3.4.5.1 Control Rules¾ Control Rules ¾ General¾ List of Rules 3.5 VPN3.4.5.2 Database 3.5.1 IKE 3.5.1.1 IKE Policy¾ IKE Policy 3.5.1.2 IKE Proposal ¾ List of IKE Policy¾ IKE Proposal ¾ List of IKE Proposal 3.5.2 IPsec3.5.2.1 IPsec Policy ¾ General ¾ IPsec PolicySelect the network mode for IPsec policy. Options include z IKE Mode Incoming SPI z Manual ModeIPsec Proposal Key-InTips 3.5.2.2 IPsec Proposal¾ List of IPsec Policy IPsec ¾ IPsec Proposal 3.5.2.3 IPsec SA ¾ List of IPsec Proposal3.5.3.1 L2TP/PPTP Tunnel Authentication3.5.3 L2TP/PPTP Protocol¾ General ¾ L2TP/PPTP TunnelSpecify the working mode for this Router. Options include TunnelSelect the network mode for the tunnel. Options include tunnel¾ IP Address Pool ¾ List of Configurations3.5.3.2 IP Address Pool 3.5.3.3 List of L2TP/PPTP Tunnel 3.6 Services3.6.1 PPPoE Server ¾ List of IP Pool¾ General PPPoE Server Dial-up Access Only 3.6.1.1 General3.6.1.2 IP Address Pool Idle Timeout Authentication Auth Protocol Radius Server Shared KeyPool Name 3.6.1.3 Account¾ IP Address Pool IP Address Range¾ Account ¾ Exceptional IP 3.6.1.4 Exceptional IP¾ List of Account ¾ List of Account 3.6.2 E-Bulletin3.6.1.5 List of Account Enable Logs ¾ E-BulletinEnable E-Bulletin ¾ GeneralContent Object Effective Time Publisher Description Status 3.6.3 Dynamic DNS¾ List of E-Bulletin Tips3.6.3.1 DynDNS ¾ Dyndns DDNS¾ No-IP DDNS 3.6.3.2 No-IP¾ List of DynDNS Account ¾ PeanutHull DDNS 3.6.3.3 PeanutHull¾ List of No-IP Account ¾ Comexe DDNS 3.6.3.4 Comexe¾ List of PeanutHull Account 3.6.4 UPnP ¾ List of Comexe Account3.7.1.1 Administrator 3.7 Maintenance3.7.1 Admin Setup ¾ List of UPnP MappingTips 3.7.1.2 Login Parameter¾ Administrator Web Management Port Enter the Web Management Port for the Router Configuration Procedure¾ General Application Example Network Requirements3.7.1.3 Remote Management 3.7.2.1 Factory Defaults3.7.2 Management ¾ Remote Management3.7.2.2 Export and Import 3.7.2.3 Reboot¾ Configuration Version ¾ Export3.7.2.4 Firmware Upgrade 3.7.3 License¾ Interface Traffic Statistics 3.7.4 Statistics3.7.4.1 Interface Traffic Statistics 3.7.4.2 IP Traffic Statistics ¾ Advanced WAN Information¾ IP Traffic Statistics 3.7.5 Diagnostics3.7.5.1 Diagnostics ¾ Ping ¾ General 3.7.5.2 Online Detection¾ Tracert ¾ Current Time 3.7.6 Time¾ List of WAN status ¾ List of Logs ¾ Config3.7.7 Logs Description LevelSend System Logs Chapter 4 Application 4.1 Network RequirementsTips 4.2 Network Topology 4.3 Configurations4.3.1 Internet Setting 4.3.1.3 Internet Connection 4.3.1.1 System Mode4.3.1.2 WAN Mode Figure 4-3 WAN - Static IP 4.3.1.4 Link BackupFigure 4-4 Link Backup 131 Settings 4.3.2 VPN Setting1 IKE Setting 4.3.2.1 IPsec VPNPolicy Name Tipsz IPsec Policy 2 IPsec Settingz IPsec Proposal SettingsTips proposalIPsec1 you just createdz L2TP/PPTP Tunnel 4.3.2.2 PPTP VPN Settingz IP Address Pool Settingsz Group 4.3.3 Network Management4.3.3.1 User Group Figure 4-11 Group Config z Userz View Settings4.3.3.3 Bandwidth Control 1 Enable Bandwidth Control4.3.3.2 App Control SettingsSettings 2 Interface Bandwidth3 Bandwidth Control Rule Keep the default valueSettings 4.3.4 Network Security4.3.3.4 Session Limit 2 Set IP-MAC Binding Entry Manually 4.3.4.1 LAN ARP Defense1 Scan and import the entries to ARP List Settings 4.3.4.2 WAN ARP Defense3 Set Attack Defense 00-11-22-33-44-aa1 Port Mirror 4.3.4.3 Attack Defense4.3.4.4 Traffic Monitoring 2 Statistics Figure 4-25 IP Traffic Statistics 5.1 Configuration Chapter 5 CLIFigure 5-2 Connection Description Figure 5-3 Select the port to connectFigure 5-4 Port Settings Figure 5-5 Connection Properties Settings 149Logout or Access the next 5.2 Interface ModeAccessing Path Modeadmin 5.3 Online Help5.4 Command Introduction 5.4.2 ip-mac TP-LINK ip-mac get modeTP-LINK # ip-mac set mode restrict 5.4.1 ipTP-LINK # sys restore TP-LINK # sys export configTP-LINK # sys import config 5.4.4 user5.4.5 history TP-LINK user set password Enter old passwordTP-LINK # user set password Enter old password TP-LINK # user set username Enter new username tplinkTP-LINK history clear View the history command5.4.6 exit Exit CLIStandards Appendix A Hardware SpecificationsPower PortsAppendix B FAQ 4. Make sure that the NAT DMZ service is disabled AH （Authentication Header ） Appendix C GlossaryGlossary data authentication, and anti-replay services. ESP encapsulatesDescription for services such as IPSec that require keys. Before any IPSecGlossary Telnet is used for remote terminal connection, enabling users to GlossaryDescription Glossary Description