42 Basic Security | TP-Link TL-WR843ND manual

Figure 4-42 Basic Security

TL-WR843ND300Mbps Wireless AP/Client Router User Guide

Figure 4-42 Basic Security

Firewall - A firewall protects your network from the outside world. Here you can enable or disable the Router’s firewall.

SPI Firewall - SPI (Stateful Packet Inspection, also known as dynamic packet filtering) helps to prevent cyber attacks by tracking more state per session. It validates that the traffic passing through the session conforms to the protocol. SPI Firewall is enabled by factory default. If you want all the computers on the LAN exposed to the outside world, you can disable it.

VPN - VPN Passthrough must be enabled if you want to allow VPN tunnels using IPSec, PPTP, or L2TP protocols to pass through the Router’s firewall.

PPTP Passthrough - Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point Protocol (PPP) to be tunneled through an IP network. To allow PPTP tunnels to pass through the Router, keep the default, Enabled.

L2TP Passthrough - Layer 2 Tunneling Protocol (L2TP) is the method used to enable Point-to-Point sessions via the Internet on the Layer 2 level. To allow L2TP tunnels to pass through the Router, keep the default, Enabled.

IPSec Passthrough - Internet Protocol Security (IPSec) is a suite of protocols for ensuring private, secure communications over Internet Protocol (IP) networks, through the use of cryptographic security services. To allow IPSec tunnels to pass through the Router, keep the default, Enabled.

ALG - It is recommended to enable Application Layer Gateway (ALG) because ALG allows customized Network Address Translation (NAT) traversal filters to be plugged into the gateway to support address and port translation for certain application layer "control/data"

- 62 -

Image 70

TP-Link manual TL-WR843ND 300Mbps Wireless AP/Client Router User Guide, 42 Basic Security

Contents

TL-WR843ND 300Mbps Wireless AP/Client Router Rev 1.0.0 COPYRIGHT & TRADEMARKS FCC STATEMENT Canadian Compliance Statement FCC RF Radiation Exposure StatementCE Mark Warning Industry Canada Statement Korea Warning Statements Safety InformationNCC Notice ETSI EN 300 328 V1.7.1 Product Description 300Mbps Wireless AP/Client RouterDECLARATION OF CONFORMITY ETSI EN 301 489-1 V1.8.12008& ETSI EN 301 489-17 EN EN Chapter 2. Connecting the Router CONTENTSPackage Contents Chapter 3. Quick Installation Guide 4.7.5 Appendix C Specifications Appendix A FAQAppendix B Configuring the PC Appendix D Glossary TL-WR843ND 300Mbps Wireless AP/Client Router User Guide Package Contents Note 1.1 Overview of the Router Flexible Access ControlChapter 1. Introduction Incredible Speed Simple Installation 1.3 Main Features1.2 Conventions Name 1.4 Panel Layout1.4.1 The Front Panel Indication  Used as RESET button 1.4.2 The Rear Panel  Used as WPS button 2.3 Connecting the Router Chapter 2. Connecting the Router2.2 Installation Environment Requirements 2.1 System Requirements b Standard Wireless Router Mode a WISP Client Router Mode Figure 2-3 Wall-mount Install Chapter 3. Quick Installation Guide 3.1 TCP/IP Configuration Please check the connection following these steps 3.2 Quick Installation Guide Enter key 300Mbps Wireless AP/Client Router User Guide TL-WR843ND Figure 3-7 WAN Connection Type 3.2.1 Configuration for Router ModeFigure 3-8 MAC Clone Figure 3-9 Quick Setup - PPPoE Figure 3-10 Quick Setup - Static IP Note Figure 3-11 Quick Setup - Wireless  PSK Password - You can enter ASCII or Hexadecimal characters 3.2.2 Configuration for Client Router Mode4.7 Wireless b If you choose PPPoE, you will see this page shown in Figure The IP parameters should have been provided by your ISP Figure 3-15 Static IP  Survey - Click this button, you can survey the AP which runs nearby  Note Figure 3-17 AP List Figure 3-18 Quick Setup - Wireless Figure 3-19 Finish 4.1 Login Chapter 4. Configuring the Router4.2 Status Please refer to 3.2 Quick Installation Guide 4.3 Quick SetupFigure 4-1 Router Status I. Use the Wi-Fi Protected Setup Button 4.4 WPS II. Enter the client device’s PIN on the Router III. Enter the Router’s PIN on your client device 4.5 Working Mode Figure 4-5 Working Mode 4.6 Network 4.6.1 WAN  Host Name - This option specifies the Host Name of the Router Figure 4-9 WAN - PPPoE  Disabled - The Secondary Connection is disabled by default, so there is PPPoE connection only. This is recommended Figure 4-10 PPPoE Advanced Settings NSW / ACT - nsw.bigpond.net.au TL-WR843ND 300Mbps Wireless AP/Client Router User Guide TL-WR843ND 300Mbps Wireless AP/Client Router User Guide Figure 4-13 PPTP Settings  Dynamic IP - Connections which use dynamic IP address assignment 4.6.2 MAC Clone Static IP - Connections which use static IP address assignment 4.6.3 LAN Only the PC on your LAN can use the MAC Address Clone function 4.7.1 Wireless Settings 4.7 Wireless4.7.1.1. Wireless Settings on Router Mode Note Dialog  Mode - Select the desired mode. The default setting is 11bgn mixed  With the Antenna in the upright position  In an elevated location such as a high shelf Away from large metal surfaces 4.7.1.2. Wireless Settings on WISP Client Router Mode Figure 4-18 Wireless Settings Figure 4-19 AP List  Note 4.7.2 Wireless Security Figure 4-21 Wireless Security ∙ Encryption - You can select either Automatic, or TKIP or AES TL-WR843ND 300Mbps Wireless AP/Client Router User Guide 4.7.3 Wireless MAC Filtering 4.7.4 Wireless Advanced To modify or delete an existing entry Figure 4-27 Wireless Advanced 4.7.5 Wireless Statistics This page will be refreshed automatically every 5 seconds 4.8.1 DHCP Settings 4.8 DHCP 4.8.2 DHCP Client List 4.8.3 Address Reservation Figure 4-32 Address Reservation To Reserve an IP addressFigure 4-33 Add or Modify an Address Reservation Entry 4.9 Forwarding 4.9.1 Virtual Servers To set up a virtual server entry 4.9.2 Port Triggering To add a new rule, follow the steps below 4.9.3 DMZ 3 Incoming Ports cannot overlap each other 4.9.4 UPnP To assign a computer or server to be a DMZ server 4.10Security 4.10.1 Basic Security Figure 4-42 Basic Security 4.10.2 Advanced Security 4.10.3 Local Management 4.10.4 Remote Management Figure 4-44 Local Management Figure 4-46 Parental Control Settings 4.11 Parental ControlFigure 4-45 Remote Management To add a new entry, please follow the steps below  Modify - Here you can edit or delete an existing entry Click Add New... button 4.12Access Control 4.12.1 Rule There are two methods to add a new rule Method One If the MAC Address is selected, you can see the following item If the IP Address is selected, you will see the following items Method Two Figure 4-55 Add Internet Access Control Entry 4.12.2 Host Figure 4-56 Host Settings 4.12.3 Target Figure 4-59 Target Settings Figure 4-60 Add or Modify an Access Target Entry Figure 4-61 Add or Modify an Access Target Entry 4.12.4 Schedule To add a new schedule, follow the steps below Figure 4-63 Advanced Schedule Settings 4.13Advanced RoutingFigure 4-64 Advanced Routing Menu 4.13.1 Static Routing To add static routing entries, follow the steps below 4.14 Bandwidth Control 4.13.2 System Routing Table 4.14.1 Control Settings 4.14.2 Rules List 4.15 IP & MAC Binding 4.15.1 Binding SettingsTo add a Bandwidth Control rule, follow the steps below Figure 4-72 Binding Settings To add IP & MAC Binding entries, follow the steps belowTo modify or delete an existing entry, follow the steps below Figure 4-73 IP & MAC Binding Settings 4.15.2 ARP List To find an existing entry, follow the steps below 4.16 Dynamic DNS 4.16.1 Comexe.cn DDNS To set up for DDNS, follow these instructions 4.16.2 Dyndns.org DDNS Figure 4-77 Dyndns.org DDNS Settings 4.16.3 No-ip.com DDNSFigure 4-78 No-ip.com DDNS Settings 4.17.1 Time Settings 4.17 System Tools To set time manually To set Daylight Saving 4.17.2 DiagnosticTo set time automatically 2 The time will be lost if the router is turned off Figure 4-81 Diagnostic Tools 4.17.3 Firmware Upgrade To upgrade the Routers firmware, follow these instructions below 4.17.5 Backup & Restore 4.17.4 Factory Defaults4 The Router will reboot after the upgrading has been finished 4.17.6 Reboot 4.17.7 Password 4.17.8 System Log Figure 4-88 System Log 4.17.9 Statistics    Statistics Table UDP Tx 300Mbps Wireless AP/Client Router User GuideReset SYN Tx Appendix A FAQ 1. How do I configure the Router to access Internet by ADSL users? 3. I want to use NetMeeting, what do I need to do? Figure A-5 Add or Modify a Virtual server Entry 4. I want to build a WEB Server on the LAN, what should I do? Figure A-7 Basic Security 5. The wireless stations cannot connect to the Router Appendix B Configuring the PC 1. Configure TCP/IP component shown in the Figure below  Setting IP address automaticallyNow you have two ways to configure the TCP/IP protocol below Figure B-2  Setting IP address manually Figure B-3 Now click OK to keep your settings General Appendix C SpecificationsWireless Environmental and Physical Appendix D Glossary hosts to the Internet over an always-on connection by simulating a dial-up connection