TP-LINK ARCHER C5400 (02) PDF MANUAL


Post questions, comments, reviews or errors in the comment box below.

Your File is Ready … Download PDF

CLICK HERE TO DOWNLOAD TP-LINK ARCHER C5400 (02) PDF MANUAL


PDF Content Summary: Archer C5400 User Guide AC5400 Wireless Tri-band MU-MIMO Gigabit Router REV1.0.0 1910011516 Contents About This Guide ...............................................................................................1 Chapter 1. Get to Know About You Router . . . . . . . . . . . . . . . . . . . . . . . . . . 2 1. 1. Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 2. Main Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 1. 3. Panel Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 3. 1. Top View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 1. 3. 2. The Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Chapter 2. Connect the Hardware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 2. 1. Position Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 2. 2. Connect Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Chapter 3. Log into Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Chapter 4. Set Up Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 4. 1. Quick Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 4. 2. Manually Configure Your Internet Connection Settings . . . . . . . . . . . . . . . . . . . . . 18 4. 3. Setting Up an IPv6 Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22 Chapter 5. Guest Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 5. 1. Create Guest Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 5. 2. Customize Guest Network Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 Chapter 6. USB Application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 6. 1. Local Storage Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 6. 1. 1. Access the USB Disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 6. 1. 2. Customize Your Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 6. 2. Remote Access via FTP Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 6. 2. 1. Access the USB Disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 6. 2. 2. Customize Your Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 6. 3. Media Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 6. 3. 1. Access the USB Disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 6. 3. 2. Customize Your Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 6. 4. Printer Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 6. 5. 3G/4G Networking Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Chapter 7. Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Chapter 8. QoS (Quality of Service). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 8. 1. Prioritize Internet Traffic with QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 8. 2. Update the Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Chapter 9. Network Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 9. 1. Protect the Network from Cyber Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 9. 2. Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 9. 3. IP & MAC Binding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Chapter 10. NAT Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 10. 1. Share Local Resources in the Internet by Virtual Server. . . . . . . . . . . . . . . . . . . . . . 63 10. 2. Open Ports Dynamically by Port Triggering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 10. 3. Make Applications Free from Port Restriction by DMZ . . . . . . . . . . . . . . . . . . . . . . 65 10. 4. Make Xbox Online Games Run Smoothly by UPnP . . . . . . . . . . . . . . . . . . . . . . . . . . 66 Chapter 11. VPN Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 11. 1. Use OpenVPN to Access Your Home Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69 11. 2. Use PPTP VPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70 Chapter 12. Customize Your Network Settings . . . . . . . . . . . . . . . . . . . . . . 75 12. 1. Change the LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76 12. 2. Configure to Support IPTV Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76 12. 3. Specify DHCP Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 12. 4. Set Up a Dynamic DNS Service Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 12. 5. Create Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 12. 6. Specify Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82 12. 7. Use WPS for Wireless Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 12. 7. 1. Set the Router’s PIN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 12. 7. 2. Use the WPS Wizard for Wi-Fi Connections . . . . . . . . . . . . . . . . . . . . . . . . . . 85 12. 8. Schedule Your Wireless Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Chapter 13. Manage the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 13. 1. Set Up System Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 13. 2. Test the Network Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 13. 3. Upgrade the Firmware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 13. 4. Backup and Restore Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 13. 5. Change the Administrator Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 13. 6. Password Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93 13. 7. Local Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94 13. 8. Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95 13. 9. System Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 13. 10. Monitor the Internet Traffic Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98 13. 11. Control LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99 FAQ .................................................................................................................. 101 Specifications ................................................................................................ 114 About This Guide This guide provides details of each function and shows how to configure the router appropriate to your needs. In addition to this guide, a Quick Installation Guide is also released with each TP-LINK router, you are suggested to configure your router for quick Internet setup by following the published Quick Installation Guide before you get started with a further configuration. Conventions In this guide the following conventions are used: Convention Description router Stands for AC5400 Wireless Tri-Band MU-MIMO Gigabit Router without any explanation. parameters Parameters provided in the screenshots are just references for setting up the device, which may differ from the actual situation. You can set the parameters according to your demand. screenshots The demonstrated screenshots may look a little different from the actual web page of your device due to the various firmware versions. Please just configure your product based on the actual web page. Blue Italic Hyperlinks are in blue italic. You can click to redirect to a website or a specific section. Blue Contents to be emphasized and texts on the web page are in blue, including the menus, items, buttons, etc. > The menu structures to show the path to load the corresponding page. For example, Advanced > Wireless > MAC Filtering means the MAC Filtering function page is under the Wireless menu that is located in the Advanced tab. Note: Ignoring this type of note might result in a malfunction or damage to the device. Tips: Indicates important information that helps you make better use of your device. symbols on the web page • click to edit the corresponding entry. • click to delete the corresponding entry. • click to enable or disable the corresponding entry. 1 Chapter 1 Get to Know About You Router This chapter introduces what the router can do and shows its main features and appearance. This chapter contains the following sections: • Product Overview • Main Features • Panel Layout Chapter 1 Get to Know About You Router 1. 1. Product Overview What This Product Does TP-LINK’s Archer C5400 integrates 4-port Switch, Firewall, NAT-router and Wireless AP. Powered by Multi-User MIMO technology, the Archer C5400 delivers exceptional range and speed, which can fully meet the need of Small Office/Home Office (SOHO) networks and the users demanding higher networking performance. Your wireless connections are radio band selectable to avoid interference in your area, and the four built-in Gigabit ports supply high-speed connection to your wired devices. 802.11ac - The Next Generation of Wi-Fi TP-LINK’s Archer C5400 comes with the next generation Wi-Fi standard – 802.11ac, backward compatible with 802.11n and 3 times faster than wireless N speeds. With higher power efficiency and robust security, 802.11ac is the perfect way to accelerate a home multimedia network and solve congestion that multiple devices may cause. 3166Mbps Concurrent Trinal Band - More Bandwidth, Less Interference With 2166Mbps wireless speeds over the crystal clear 5GHz band and 1000Mbps over the 2.4GHz band, Archer C5400 offers you the flexibility of three dedicated networks and ensures amazing wireless performance. Simple tasks such as sending e-mails or web browsing can be handled by the 2.4GHz band while bandwidth intensive tasks like online gaming or HD video streaming can be processed by the 5GHz band – all at the same time. Multifunctional USB Port – Easy Storage and Sharing Using the Archer C5400’s multi-functional USB 3.0 port, you can share a printer with multiple computers and devices on your network and can also share files & media at home or via the FTP server while away from home. Guest Network Guest Network Access provides secure Wi-Fi access for guests sharing your home or office network in a controlled manner without exposing private Wi-Fi access codes or other personal data. IPv6 Supported Archer C5400 supports IPv6, which is the foundation of the next generation of the Internet and enables a range of new services and improved user experience. Parental Control Parental Controls allow parents or administrators to deploy restricted access for children or staff. With URL blocking, you can easily set up a black or white list to limit the level of web access. 3 Chapter 1 Get to Know About You Router Tether APP TP-LINK Tether provides the easiest way to access and manage your router with your wireless devices. 1. 2. Main Features • Supports 802.11ac Muti-User MIMO • Supports 802.11ac - The next generation of Wi-Fi, compatible with 802.11n • Simultaneous 2.4GHz 1000Mbps and 5GHz 2166Mbps connections for 3166Mbps of total available bandwidth • 8 dual band fixed external antennas and high power amplifiers provide stable signals and optimal wireless coverage • Provides WPA/WPA2, WPA-PSK/WPA2-PSK authentication, TKIP/AES encryption security • Supporting Dynamic IP/Static IP/PPPoE/PPTP/L2TP Internet access • Supports USB Storage Sharing, Print Server, FTP Server, Media Server. Shares a printer locally and files & media with networked devices or remotely via FTP server • Built-in NAT and DHCP server supporting static IP address distributing • Guest Network access provides secure Wi-Fi access for guests sharing your home or office network • Parental Controls allow parents or administrators to establish restricted access policies for children or staff • Quality of Service (QoS) makes it easier for you to manage the bandwidth of devices connected to the router • Supports IP/MAC filter and URL filter, Access Control list • SPI and NAT firewall protects end-user devices from potential attacks from the Internet • Easy one-touch WPA wireless security encryption with the WPS button • Wi-Fi On/Off Button allows users to turn their wireless radio on or off • Supports firmware upgrade and Web management • Supports Virtual Server, DMZ host and Port Triggering • Supports Dynamic DNS, UPnP and Static Routing • Provides Automatic-connection and Scheduled Connection on certain time to the Internet • Supports system log and Traffic Statistics • Supports IPv6 4 Chapter 1 Get to Know About You Router 1. 3. Panel Layout 1. 3. 1. Top View The router’s LEDs (view from left to right) are located on the front. You can check the router’s working status by following the LED Explanation table. LED Explanation Name Status Indication (Power) On System initialization completes. Flashing System initialization or firmware upgrade is in process. Do not disconnect or power off the router. Off Power is off. (2.4GHz Wireless) On The 2.4GHz wireless band is working properly. Off The 2.4 GHz wireless band is disabled. ( 5GHz-1 Wireless) On The 5GHz-1 wireless band is working properly. Off The 5GHz-1 wireless band is disabled. ( 5GHz-2 Wireless) On The 5GHz-2 wireless band is working properly. Off The 5GHz-1 wireless band is disabled. (Ethernet) On At least one Ethernet port is connected. Off No Ethernet port is connected. 5 Chapter 1 Get to Know About You Router LED Explanation Name Status Indication (Internet) Blue On Internet is available. Orange On The router’s Internet port is connected, but the Internet is not available. Off The router’s Internet port is not connected. (WPS) On/Off Turns On when a WPS synchronization is established and automatically turns Off about 5 minutes later. Flashing A wireless device is trying to connect to the network via WPS. This process may take up to 2 minutes. (USB) On The USB device is identified and ready to use. Flashing The USB device is being identified. Off No USB device is plugged into the USB port or the USB device is not identified or USB device has been safely ejected. The following buttons (view from left to right) are also located on the front panel. Button Description Buttons Description (LED Button) Press the LED button for about 1 second to turn on or off the LEDs of your router. 1. 3. 2. The Back Panel (Wi-Fi Button) Press this Wi-Fi button for about 2 seconds to turn on or off the wireless function of your router. (WPS Button) Press this WPS button, and immediately press the WPS button on your client device. The WPS LED of the router should change from flashing to solid on, indicating successful WPS connection. 6 Chapter 1 Get to Know About You Router The following parts (view from left to right) are located on the rear panel. Item Description Reset Button Press this button for about 7 seconds to reset the router. USB 2.0 Port Connect your USB 2.0 storage device or USB 2.0 printer to this port. Internet Port This port is where you’ll connect to the DSL/Cable modem, or Ethernet. Ethernet Ports (1/2/3/4) Connect your Etherent devices, like PCs, to these ports. USB 3.0 Port Connect your USB 3.0 storage device or USB 3.0 printer to this port. Power On/Off Button Press this button to power on or off the router. Power Port This port is where you will connect the power socket via the provided power adapter. 7 Chapter 2 Connect the Hardware This chapter contains the following sections: • Position Your Router • Connect Your Router Chapter 2 Connect the Hardware 2. 1. Position Your Router • The Product should not be located where it will be exposed to moisture or excessive heat. • Place the router in a location where it can be connected to the various devices as well as to a power source. • Make sure the cables and power cord are safely placed out of the way so they do not create a tripping hazard. • The router can be placed on a shelf or desktop. • Keep away from the strong electromagnetic radiation and the device of electromagnetic sensitive. 2. 2. Connect Your Router 1. Follow the steps below to connect your router. If your Internet connection is through an Ethernet cable from the wall instead of through a DSL / Cable / Satellite modem, connect the Ethernet cable directly to the router’s Internet port, then follow steps 5 and 6 to complete the hardware connection. Router Power adapter Modem 2 1 ) Place the router horizontally and extend the antennas to the maximum angle. Note: For best performance, horizontal installation is recommended. Antenna direction and position can affect performance in vertical installation situations. 2 ) Turn off the modem, and remove the backup battery if it has one. Internet 1 2 3 4 3 5 9 Chapter 2 Connect the Hardware 3 ) Connect the modem to the Internet port on your router with an Ethernet cable. 4 ) Turn on the modem, and then wait about 2 minutes for it to restart. 5 ) Turn on the router. 6 ) Verify that the following LEDs are on and stable before continuing with the configuration. Power 2.4GHz 5GHz-1 5GHz-2 Internet On On On On On Tips: 1. If all the LEDs are off, press the LED On/Off button for about 2 seconds, then check the LEDs again in a few seconds. 2. Connect your computer to the router. • Method 1: Wired Turn off the Wi-Fi on your computer and connect the devices as shown below. Ethernet cable • Method 2: Wirelessly Connect wirelessly by using the SSID (Network Name) and Wireless Password/PIN printed on the product label at the bottom of the router. • Method 3: Use the WPS button Wireless devices that support WPS, including Android phones, tablets, most USB network cards, can be connected to your router through this method. (WPS is not supported by IOS devices.) Note: The WPS function cannot be configured if the wireless function of the router is disabled. Also, the WPS function will be disabled if your wireless encryption is WEP. Please make sure the wireless function is enabled and is configured with the appropriate encryption before configuring the WPS. 1. Tab the WPS icon on the device’s screen. 2. Immediately press the WPS button on your router. for about 1 second, then check the LEDs again. 2. If the 2.4GHz, 5GHz-1, and 5GHz-2 LEDs are off, press the Wi-Fi On/Off button 10 Chapter 2 Connect the Hardware Close 11 Chapter 3 Log into Your Router Chapter 3 Log into Your Router With a Web-based utility, it is easy to configure and manage the rouer. The Web-based utility can be used on any Windows, Macintosh or UNIX OS with a Web browser, such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari. Follow the steps below to log into your router. 1. Set up the TCP/IP Protocol in Obtain an IP address automatically mode on your computer. 2. Visit tplinkwifi.net, and log in with the username and password you‘ve set for the router. The default one is admin for both username and password. Note: If the login window does not appear, please refer to FAQ. 13 Chapter 4 Set Up Internet Connection This chapter introduces how to connect your router to the Internet. The router is equipped with a web-based Quick Setup wizard. It has many ISP information built in, automates many of the steps and verifies that those steps have been successfully completed. Furthermore, you can also set up an IPv6 connection if your ISP provided IPv6 service. This chapter contains the following sections: • Quick Setup • Manually Configure Your Internet Connection Settings • Setting Up an IPv6 Internet Connection Chapter 4 Set Up Internet Connection 4. 1. Quick Setup The Quick Setup Wizard will guide you through the process to set up your router to access the Internet. Tips: If you need the IPv6 Internet connection, please refer to the section of 4. 3. Setting Up an IPv6 Internet Connection. Follow the steps below to set up your router to access the Internet. 1. Visit tplinkwifi.net, and log in with the username and password you‘ve set for the router. 2. Click Quick Setup on the top of the page. 3. Select your Region and Time Zone from the drop-down list and click Next. Note: For the Wi-Fi products marketed in the U.S., you are not required to choose your region. 4. Click Auto Detect and the router will detect your connection type automatically. Note: You can also choose the connection type manually. Contact your ISP if you are not sure about the Internet connection information. • If you use DSL line and you are only provided an account name and a password by your ISP, choose PPPoE. • If you use cable TV or fiber cable, choose Dynamic IP. • If you are provided more information such as IP address, Subnet Mask and Default Gateway, choose Static IP. 15 Chapter 4 Set Up Internet Connection 5. In this case, the router automatically detects Dynamic IP as the connection type. Click Next. 6. Follow the instructions on the page to decide whether to clone MAC Address. Click Next. 7. Configure your wireless settings and click Next. 16 Chapter 4 Set Up Internet Connection Note: 1. You may customize your 2.4GHz/5GHz-1/5GHz-2 SSID and password. Once done, the wireless connection will disconnect automatically, and you must then use the new SSID/password to regain access to the Internet. 2. Tick Hide SSID if you want to hide this wireless network name. 8. Confirm the information and click Save. 9. Click Test Internet Connection. If you successfully connect to the Internet, the screen will display as follows. 17 Chapter 4 Set Up Internet Connection 10. Now your computer and Wi-Fi devices can connect to the Internet! Tips: You can connect your computer to the router’s Etherent port using an Ethernet cable to join the local area network. You can also find and select the wireless network name on your Wi-Fi device to join the Wi-Fi network. 4. 2. Manually Configure Your Internet Connection Settings In this part, you can check your current Internet connection settings. You can also modify the settings according to the service information provided by your ISP. Follow the steps below to check or modify your Internet connection settings. 1. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 2. Go to Basic > Internet. 3. Select your Internet connection type from the drop-down list. Note: If you are unsure what your connection type is, click Auto Detect. Since different connection types need different cables and connection information, you can also refer to the demonstrations in Step 4 to judge your connection type. 4. Follow the instructions on the page to continue the configuration. Parameters on the figures are just used for demonstration. 1 ) If you choose Dynamic IP, you need to select whether to clone the MAC address or not. Dynamic IP users are usually equipped with cable TV or fiber cable. 18 Chapter 4 Set Up Internet Connection 2 ) If you choose Static IP, enter the information provided by your ISP in the corresponding fields. 3 ) If you choose PPPoE, enter the username and password provided by your ISP. PPPoE users usually have DSL cable. 19 Chapter 4 Set Up Internet Connection 4 ) If you choose L2TP, enter the username and password and choose the Secondary Connection provided by your ISP. Different parameters are needed according to the Secondary Connection. 5 ) If you choose PPTP, enter the username, password and choose the Secondary Connection provided by your ISP. Different parameters are needed according to the Secondary Connection. 20 Chapter 4 Set Up Internet Connection 5. Click Save to make the settings take effect. To check your Internet connection, click Network Map on the left of the page. Note: It may take 1-2 minutes to make the settings valid. 6. After the connection succeed, the screen will display as follows. Here we take PPPoE as an example. Tips: 1. If your Internet connection type is BigPond Cable, please go to Advanced > Network > Internet. 2. If you use Dynamic IP and PPPoE and you are provided any other parameters that are not required on the page, please go to Advanced > Network > Internet to complete the configuration. 3. If you still cannot connect to the Internet, refer to FAQ for further instructions. 21 Chapter 4 Set Up Internet Connection 4. 3. Setting Up an IPv6 Internet Connection Your ISP provides information about one of the following Internet connection types: PPPoE, Dynamic IP(SLAAC/DHCPv6), Static IP, 6to4 tunnel, Pass-Through (Bridge). 1. Visit tplinkwifi.net, then log in with the username and password you set for the router. 2. Go to Advanced > IPv6. 3. Select the Internet connection type provided by ISP. Tips: If you do not know what your Internet connection type is, contact your ISP or judge according to already known information provided by your ISP. 4. Fill in information as required by different connection type. (Red blanks must be filled.) 1 ) Static IP: Fill in blanks and click Save. 22 Chapter 4 Set Up Internet Connection 2 ) Dynamic IP(SLAAC/DHCPv6): Click Advanced to have more configuration if ISP requires. Click Save to save the settings and then click Renew to finish the configuration. 3 ) PPPoE: Fill in the Username and Password. Click Advanced to have more configuration if ISP requires. Click Save to save the settings and then click Connect to finish the configuration. 23 Chapter 4 Set Up Internet Connection 4 ) 6to4 Tunnel: An IPv4 Internet connection type is a prerequisite for this connection type. (4. 2) Click Advanced to have more configuration if ISP requires. Click Save to save the settings and then click Connect to finish the configuration. 5 ) Pass-Through (Bridge): Click Save and skip to step 6. 24 Chapter 4 Set Up Internet Connection 5. Configure LAN ports. Windows users are recommended to choose from the first two types. Fill in Address Prefix provided by ISP, and click Save to save the settings. Tips: Find Help on the management interface to know more about items. 6. Click Status to check whether you succeed or not. The following figure is an example of a successful PPPoE configuration. Tips: Visit FAQ if there is no Internet connection. 25 Chapter 5 Guest Network This function allows you to provide Wi-Fi access for guests without disclosing your main network. When you have guests in your house, apartment, or workplace, you can create a guest network for them. In addition, you can limit the network authorities for guests to ensure network security and privacy. This chapter contains the following sections: • Create Guest Network • Customize Guest Network Options Chapter 5 Guest Network 5. 1. Create Guest Network 1. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 2. Go to Advanced > Guest Network. 3. Create a 2.4GHz, 5GHz-1 and/or 5GHz-2 guest network according to your needs. 1 ) Enable Guest Network of 2.4GHz Wireless, 5GHz-1 Wireless and/or 5GHz-2 Wireless. 2 ) Set an easy-to-identify SSID. Don‘t select Hide SSID unless you want your guests and other people to manually input this SSID for Wi-Fi access. 3 ) Set Security to WPA/WPA2 Personal, keep the default Version and Encryption values, and set an easy-to-remember Password. 4. Click Save. Now your guests can access your guest network using the SSID and password you’ve set! Tips: To view guest network information, go to Advanced > Status and find the Guest Network section. 27 Chapter 5 Guest Network 5. 2. Customize Guest Network Options 1. Visit tplinkwifi.net, and log in with the username and password you set for the router. 2. Go to Advanced > Guest Network. 3. Customize guest network options according to your needs. • Allow guests to see each other Tick this checkbox to allow the clients in your guest network to access each other. • Allow guests to access my local network Tick this checkbox to allow the clients in your guest network to access your local network, not just Internet access. 4. Click Save. Now users in your guest network can enjoy only the network authorities you’ve assigned! Tips: To view guest network information, go to Advanced > Status and find the Guest Network section. 28 Chapter 6 USB Application This chapter describes how to share and access USB devices connected to the router among different clients. The router only supports USB external flash drives, hard drives, USB printers and USB 3G/4G modems. This chapter contains the following sections: • Local Storage Sharing • Remote Access via FTP Server • Media Sharing • Printer Sharing • 3G/4G Networking Sharing Chapter 6 USB Application 6. 1. Local Storage Sharing Share your USB storage devices with different users on the network. 6. 1. 1. Access the USB Disk 1. Connect Your USB Disk Insert your USB storage device into the router’s USB port directly or using a USB cable. Wait several seconds until the USB LED becomes solid on. Tips: • If you use USB hubs, make sure no more than 4 devices are connected to the router. • If the USB storage device requires using bundled external power, make sure the external power has been connected. • If you use a USB hard drive, make sure its file system is FAT32 or NTFS. • Before you physically disconnect a USB device from the router, safely remove it to avoid data damage: Go to Advanced > USB Settings > Device Settings and click . 2. Access Your USB Disk By default, all the network clients can access all folders on your USB disk. Refer to the following table for access instructions. You can also customize your sharing content and set a sharing account by referring to Customize Your Settings. Windows computer ➢ Method 1: Go to Computer > Network, then click the Network Server Name (C5400_share by default) in the Computer section. Note: Operations in different systems are similar. Here we take Windows 7 as an example. s 30 Chapter 6 USB Application Windows computer ➢ Method 2: Open the Windows Explorer (or go to Computer) and type the server address \\tplinkwifi.net or ftp://tplinkwifi.net in the address bar, then press [Enter]. 4 ) When prompted, select the Guest radio box. (If you have set up a username and a password to deny anonymous access to the USB disks, you should select the Registered User radio box. To learn how to set up an account for the access, refer to To Set up Authentication for Data Security.) Pad Use a third-party app for network files management. Tips: You can also access your USB disk by using your Network/Media Server Name as the server address. Refer to To Customize the Address of the USB Disk to learn more. Mac 1 ) Select Go > Connect to Server 2 ) Type the server address smb://tplinkwifi.net 3 ) Click Connect. 31 Chapter 6 USB Application 6. 1. 2. Customize Your Settings ➢ To Only Share Specific Content By default, Share All is enabled so all content on the USB disk is shared. If you want to only share specific folders, follow the steps below: 1. Visit tplinkwifi.net, then log in with the username and password you‘ve set for the router. 2. Go to Basic > USB Settings > Sharing Access. Focus on the Folder Sharing section. 3. Click the button to disable Share All, then click Add to add a new sharing folder. 4. Select the Volume Name and Folder Path, then enter a Folder Name as you like. 5. Decide the way you share the folder: • Allow Guest Network Access: If you tick this check box, guest network users can access this folder. • Enable Authentication: If you tick this check box, you will be required to use a username and password to access the folder. Refer to To Set up Authentication for Data Security to learn more. • Enable Write Access: If you tick this check box, network clients can modify the folder. 32 Chapter 6 USB Application • Enable Media Sharing: If you tick this check box, you can view photos, play music and watch movies in the folder directly from DLNA-supported devices. Refer to Media Sharing to learn more. 6. Click OK. Tips: The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you do not need to share. ➢ To Set up Authentication for Data Security If you enable Authentication, network clients will be required to enter the username and password you set when accessing the USB disk. 1. Visit tplinkwifi.net, then log in with the username and password you’ve set for the router. 2. Go to Advanced > USB Settings > Sharing Access. Focus on the Sharing Account section. 3. Choose Use Default Account (admin) or Use New Account and click Save. 4. Enable Authentication to apply the account you just set. • If you leave Share All enabled, click the button to enable Authentication for all folders. 33 Chapter 6 USB Application Note: Due to Windows credential mechanism, you might be unable to access the USB disk after changing Authentication settings. Please log out from Windows and try to access again. For more details, please refer to FAQ. ➢ To Customize the Address of the USB Disk You can customize the server name and use the name to access your USB disk. 1. Visit tplinkwifi.net, then log in with the username and password you’ve set for the router. 2. Go to Advanced > USB Settings > Sharing Access. Focus on the Sharing Settings section. 3. Make sure Network Neighborhood is ticked, and enter a Network/Media Server Name as you like, such as My-Share, then click Save. • If Share All is disabled, enable Authentication for specific folders. 34 Chapter 6 USB Application 3. Now you can access the USB disk by visiting \\My-Share (for Windows) or smb:// My-Share (for Mac). 6. 2. Remote Access via FTP Server You can access your USB disk outside the local area network. For example: • Share photos and other large files with your friends without logging in to (and paying for) a photo-sharing site or email system. • Get a safe backup for the materials for a presentation. • Remove the files on your camera’s memory card from time to time during the journey. Note: If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), you cannot use this feature because private addresses are not routed on the Internet. 6. 2. 1. Access the USB Disk 1. Connect Your USB Disk Insert your USB storage device into the router’s USB port directly or using a USB cable. Wait several seconds until the USB LED becomes solid on. Tips: • If you use USB hubs, make sure no more than 4 devices are connected to the router. • If the USB storage device requires using bundled external power, make sure the external power has been connected. • If you use a USB hard drive, make sure its file system is FAT32 or NTFS. • Before you physically disconnect a USB device from the router, safely remove it to avoid data damage: Select Advanced > USB Settings > Device Settings and click . 2. Enable Authentication for Data Security 35 Chapter 6 USB Application It is strongly recommended that you set and apply a sharing account for data security. 1 ) Visit tplinkwifi.net, then log in with the username and password you’ve set for the router. 2 ) Go to Advanced > USB Settings > Sharing Access. Focus on the Sharing Account section. 3 ) Choose to Use default Account (admin) or Use New Account and click Save. 4 ) Enable Authentication to apply the sharing account. • If you leave Share All enabled, click the button to enable Authentication for all folders. • If Share All is disabled, enable Authentication for specific folders. 36 Chapter 6 USB Application 3. Enable the FTP (via Internet) Select the check box to enable FTP (via Internet), then click Save. 4. Access Your USB Disk via Internet Now different clients with Internet connection can access the USB disk: 37 Chapter 6 USB Application Computer 1 ) Open the Windows Explorer (or go to Computer, only for Windows users) or open a web browser. 2 ) Type the server address in the address bar: Type in ftp://<WAN IP address of the router>:<port number> (such as ftp://59.40.2.243:21). If you have specified the domain name of the router, you can also type in ftp://<domain name>:<port number> (such as ftp://MyDomainName:21) The Address Bar of the Windows Explorer (Windows 7) 3 ) Press [Enter] on the keyboard. 4 ) Access with the username and password you’ve set in Step 2 Enable Authentication for Data Security. Tips: You can also access the USB disk via a third-party app for network files management, which can resume broken file transfers. Pad Use a third-party app for network files management. Tips: Refer to Set Up a Dynamic DNS Service Account to learn how to set up a domain name for you router. 6. 2. 2. Customize Your Settings ➢ To Only Share Specific Content By default, Share All is enabled so all content on the USB disk is shared. If you want to only share specific folders, follow the steps below: 1. Visit tplinkwifi.net, then log in with the username and password you’ve set for the router. 2. Go to Basic > USB Settings > Sharing Access. Focus on the section of Folder Sharing. Click the button to disable Share All, then click Add to add a new sharing folder. 3. Select the Volume Name and Folder Path, then specify the Folder Name as you like. 4. Tick Enable Authentication. If you allow network clients to modify this folder, Tick Enable Write Access. 38 Chapter 6 USB Application 5. Click OK. Tips: The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you do not need to share. 6. 3. Media Sharing The feature of Media Sharing allows you to view photos, play music and watch movies stored on the USB disk directly from DLNA-supported devices, such as your computer, pad and PS2/3/4. 39 Chapter 6 USB Application 6. 3. 1. Access the USB Disk 1. Connect Your USB Disk Insert your USB storage device into the router’s USB port directly or using a USB cable. Wait several seconds until the USB LED becomes solid on. Tips: • If you use USB hubs, make sure no more than 4 devices are connected to the router. • If the USB storage device requires using bundled external power, make sure the external power has been connected. • If you use a USB hard drive, make sure its file system is FAT32 or NTFS. • Before you physically disconnect a USB device from the router, safely remove it to avoid data damage: Go to Advanced > USB Settings > Device Settings and click . 2. Play the Media on Your USB Disk Now the DLNA-supported devices (such as your computer and pad) connected to the router can detect and play the media files on the USB disks. Windows computer Go to Computer > Network, then click the Media Server Name (C5400_share by default) in the Media Devices section. Note: Here we take Windows 7 as an example. Pad Use a third-party DLNA-supported player. 40 Chapter 6 USB Application 6. 3. 2. Customize Your Settings ➢ To Only Share Specific Content By default, Share All is enabled so all content on the USB disk is shared. If you want to only share specific folders, follow the steps below: 1. Visit tplinkwifi.net, then log in with the username and password you’ve set for the router. 2. Go to Basic > USB Settings > Sharing Access. Focus on the Folder Sharing section. 3. Click the button to disable Share All, then click Add to add a new sharing folder. 4. Select the Volume Name and Folder Path, then enter a Folder Name as you like. 5. Tick Enable Media Sharing and click OK. Tips: The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you do not need to share. 41 Chapter 6 USB Application 6. 4. Printer Sharing The Printer Sharing feature helps you share a printer with different computers connected to the router. Note: Printers unlisted on this page may be incompatible with the router: tp-link.com/common/compatible/print-server/. 1. Install the Driver of the Printer Make sure you have installed the driver of the printer on each computer that needs printer service. If you do not have the driver, contact the printer manufacturer. 2. Connect the Printer Cable a printer to the USB port with the USB cable. Wait several seconds until the USB LED becomes solid on. 3. Install the TP-LINK USB Printer Controller Utility TP-LINK USB Printer Controller Utility helps you access the shared printer. Download and install the utility on each computer that needs printer service. 1 ) Visit tp-link.com/app/usb/. 2 ) Click PC Utility (for Windows users) or Mac Utility to download the installation file and uncompress it. 3 ) Open the uncompressed folder, then click TP-LINK USB Printer Controller Setup (for Windows users) or TP-Link UDS Printer Controller Installer (for Mac users) to install the utility. 4. Access the Printer You should set the shared printer as Auto-Connect Printer on every computer that needs printer service.

1 ) Double-click the icon on your desktop to launch the USB Printer Controller.

2 ) Highlight the printer you share. 42 Chapter 6 USB Application Mac 3 ) Click the Auto-Connect for printing tab to pull down a list, then select Set Auto- Connect Printer. Windows Windows Mac 43 Chapter 6 USB Application 4 ) Select the printer you share, then click Apply. Windows Mac 44 Chapter 6 USB Application 5 ) You will see the printer marked as Auto-Connect Printer. Now you can print with this printer. Mac Tips: The Print Server also allows different clients to share the scan feature of MFPs (Multi-Function Printers). To scan with TP-LINK USB Printer Controller, right-click the printer and select Network Scanner. Then, a scanning window will pop up. Finish the scanning process by following the on-screen instructions. 6. 5. 3G/4G Networking Sharing If you have a 3G/4G USB modem, the router can be used as a 3G/4G wireless router to share the 3G/4G network to local users. When the original network service fails, your router will be directly connected to the 3G/4G network. Follow the steps below to set your 3G/4G network: 1. Plug your USB modem into the USB port of your router. 2. Visit tplinkwifi.net, then log in with the username and password you’ve set for the router. 3. Go to Advanced > USB Settings > 3G/4G. Windows 45 Chapter 6 USB Application 4. Verify that your USB 3G/4G modem is successfully identified at the top of the page. 5. Verify that the router has correctly recognized your Region and Mobile ISP. If so, you have successfully set the 3G/4G network. Otherwise, select the Region and Mobile ISP manually, or select the box of Set the Dial Number, APN, Username and Password manually and enter the information provided by your 3G/4G network service provider. 6. Select the Connection Mode if needed. The default mode is Connect Automatically. You can choose Connect on Demand or Connect Manually. 46 Chapter 6 USB Application • If you choose Connect Manually, you need to click the Connect or Disconnect button to manually turn on or off the 3G/4G Internet. The network will automatically turn off when there is no Internet request in Max Idle Time. • If you choose Connect on Demand, the network will automatically turn off when there is no Internet request in Max Idle Time, and turn on again when you attempt to access the Internet. 7. Click Save to make the settings effective. Note: 1. If your SIM/UIM card’s PIN protection is enabled, you need to enter the PIN on the page. The SIM/UIM card will be locked if you enter the wrong PIN three times. 2. Do not change the Authentication Type, MTU Size and DNS Servers unless necessary. 47 Chapter 7 Parental Controls This function allows you to block inappropriate, explicit and malicious websites, and controls access to specified websites at specified time. Chapter 7 Parental Controls I I want want to: Control what types of websites my children or other home network users can visit and even the times of day they are allowed to access the Internet. For example, I want to allow my children’s devices (e.g. a computer or a tablet) to access only tp-link.com and Wikipedia.org from 18:00 (6PM) to 22:00 (10PM) at the weekend and not other times. How can I 1. Visit tplinkwifi.net, and log in with the username and do that? password you’ve set for the router. 2. Go to Advanced > Parental Controls and enable Parental Controls. 3. Click Add. And then Click View Existing Devices, and select the access device. Or, input the Device Name and MAC Address manually. 4. Click the icon to set the Internet Access Time. Drag the cursor over the appropriate cell(s) and click OK. 49 Chapter 7 Parental Controls 5. Enter a Description for the entry. Keep the Enable This Entry checkbox available. Click OK. 6. Select Whitelist as the restriction policy. Tips: 1. In Blacklist mode, the controlled devices cannot access any websites containing the specified keywords during the Internet Access Time period. 2. In Whitelist mode, the controlled devices can only access websites containing the specified keywords during the Internet Access Time period. 7. Click . Enter a keyword or a website and click Save. You can add up to 32 keywords for either Blacklist or Whitelist. Below are some sample entries to allow access. • Enter a web address (e.g. wikipedia.org) or a web address keyword (e.g. wikipedia) to only allow or block access to the websites containing that keyword. • Specify the domain suffix (eg. .edu or .org) to allow access only to the websites with that suffix. • If you wish to block all Internet browsing access, do not add any keyword to the Whitelist. 50 Chapter 7 Parental Controls Now you can control your children’s Internet access according to your needs. Done! 51 Chapter 8 QoS (Quality of Service) This chapter introduces how to create a QoS rule to specify prioritization of traffic and minimize the impact caused when the connection is under heavy load. This chapter contains the following sections: • Prioritize Internet Traffic with Quality of Service • Update the Database Chapter 8 QoS (Quality of Service) 8. 1. Prioritize Internet Traffic with QoS QoS (Quality of Service), is designed to ensure the efficient operation of the network when the network overload or congestion. I want to: Specify priority levels for some devices or applications. For example, I have several devices that are connected to my wireless network. I would like to: • Set my ftp server with faster surfing speed; • Set my phone an intermediate speed on the Internet. How can I 1. Enable QoS and set bandwidth allocation. do that? 1 ) Visit tplinkwifi.net, and log in with the username and password you‘ve set for the router. 2 ) Go to Advanced > QoS > Settings. 3 ) Select the Enable QoS checkbox. 4 ) Input the maximum upload and download bandwidth provided by your service provider. 1Mbps is equal to 1000Kbps. 5 ) Click Advanced and drag the scroll bar to set the bandwidth priority percentage. Note: Add each priority up no more than 100%. High priority is greater than Middle priority, and middle priority is greater than Low priority. 6 ) Click Save. 2. Add QoS Rules. 53 Chapter 8 QoS (Quality of Service) Tips: If your application isn’t listed on the screen, scroll down and click Custom Application to add application manually. • Name: Enter a name for your applicaiton. • Protocol: Select the protocol for your application, if your are not sure, select ALL. • Port: Enter the destination port for your application, usually each application has a fixed port, please ensure you enter the correct the port. In this case, the destination port for ftp is 21. 2 ) Set a middle priority rule for the phone. a . Click Add in the Middle Priority section. 1 ) Set a high priority rule for the ftp server. a . Click Add in the High Priority section. b . Select By Application and then select ftp in the list. Scroll down and click OK. 54 Chapter 8 QoS (Quality of Service) b . Select By Device and then click View Existing Devices. d . Click OK. Tips: If you want to delete a QoS rule, click to remove the responding rule from the list. Done! Now QoS is implemented to Prioritize Internet Traffic. 8. 2. Update the Database This function can help to add or update the applications of the router supports. If the applications you need are not listed in the Application list, you can try to download the new version and upgrade. New database versions are posted at tp-link.com and can be downloaded for free. 1. Download the latest QoS database from our website ( tp-link.com). 2. Go to Advanced > QoS > Database. Click Browse to select the database upgrade file, then click Upgrade. Wait until the upgrade is completed and do not operate during the process. c . Choose the respective device from the list. 55 Chapter 8 QoS (Quality of Service) 56 Chapter 9 Network Security This chapter guides you on how to protect your home network from cyber attacks and unauthorized users by implementing these three network security functions. You can protect your home network against DoS (Denial of Service) attacks from flooding your network with server requests using DoS Protection, block or allow specific client devices to access your network using Access Control, or you can prevent ARP spoofing and ARP attacks using IP & MAC Binding function. This chapter contains the following sections: • Protect the Network from Cyber Attacks • Access Control • IP & MAC Binding Chapter 9 Network Security 9. 1. Protect the Network from Cyber Attacks The SPI (Stateful Packet Inspection) Firewall and DoS (Denial of Service) Protection protect the router from cyber attacks. The SPI Firewall can prevent cyber attacks and validate the traffic that is passing through the router based on the protocol. This function is enabled by default, and it’s recommended to keep the default setting. DoS Protection can protect your home network against DoS attacks from flooding your network with server requests. Follow the steps below to configure DoS Protection. 1. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 2. Go to Advanced > Security > Settings. 3. Enable DoS Protection. 4. Set the level (Off, Low, Middle or High) of protection for ICMP-FLOOD Attack Filtering, UDP-FlOOD Attack Filtering and TCP-SYN-FLOOD Attack Filtering. • ICMP-FLOOD Attack Filtering - Enable to prevent the Internet Control Message Protocol (ICMP) flood attack. • UDP-FlOOD Attack Filtering - Enable to prevent the User Datagram Protocol (UDP) flood attack. • TCP-SYN-FLOOD Attack Filtering - Enable to prevent the Transmission Control Protocol-Synchronize (TCP-SYN) flood attack. Tips: The level of protection is based on the traffic packets number. The protection will be triggered immediately when the number of packets exceeds the preset threshold value (the value can be set on Advanced > System Tools > System Parameters > DoS Protection Level Settings), and the vicious host will be displayed in the Blocked DoS Host List. 58 Chapter 9 Network Security 5. Select Ignore Ping Packet From WAN/LAN Port if you want to ignore the ping packets from WAN/LAN port. 6. Click Save to make the settings effective. 9. 2. Access Control Access Control is used to block or allow specific client devices to access your network (via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed devices (Whitelist). I want to: Block or allow specific client devices to access my network (via wired or wireless). How can I 1. Visit tplinkwifi.net, and log in with the username and do that? password you’ve set for the router. 2. Go to Advanced > Security > Access Control. 3. Enable Access Control. 4. Select the access mode to either block (recommended) or allow the device(s) in the list. To block specific device(s) 1 ) Select Blacklist and click Save. 2 ) Select the device(s) to be blocked in the Devices Online table by ticking the box. 59 Chapter 9 Network Security 3 ) Click Block above the Devices Online table. The selected devices will be added to Devices in Blacklist automatically. 3 ) Click OK. Now you can block or allow specific client devices to access your network (via wired or wireless) using the Blacklist or Whitelist. Done! To allow specific device(s) 1 ) Select Whitelist and click Save. 2 ) Click Add in Devices in Whitelist section. Enter the Device Name and MAC Address (You can copy and paste the information from the following list if the device is connected to your network). 60 Chapter 9 Network Security 9. 3. IP & MAC Binding IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind network device’s IP address to its MAC address. This will prevent ARP Spoofing and other ARP attacks by denying network access to an device with matching IP address in the Binding list, but unrecognized MAC address. I want to: Prevent ARP spoofing and ARP attacks. How can I 1. Visit tplinkwifi.net, and log in with the username and do that? password you’ve set for the router. 2. Go to Advanced > Security > IP & MAC Binding. 3. Enable ARP Binding. Done! 4. Bind your device(s) according to your need. To bind the connected device(s): Click 2 ) Enter the MAC address and IP address that you want to bind. 3 ) Tick the Enable This Entry check box and click OK. Now you don’t need to worry about ARP spoofing and ARP attacks! to add the corresponding device to the Binding List. To bind the unconnected device 1 ) Click Add in Binding List section. 61 Chapter 10 NAT Forwarding Router’s NAT (Network Address Translation) feature makes the devices in the LAN use the same public IP address to communicate in the Internet, which protect the local network by hiding IP addresses of the devices. However, it also brings about the problem that external host cannot initiatively communicate with the specified device in the local network. With forwarding feature the router can penetrate the isolation of NAT and allows the external hosts in the Internet to initiatively communicate with the devices in the local network, thus to realize some special functions. TP-LINK router includes four forwarding rules. If two or more rules are set, the priority of implementation from high to low is Virtual Servers, Port Triggering, UPNP and DMZ. This chapter contains the following sections: • Share Local Resources in the Internet by Virtual Server • Open Ports Dynamically by Port Triggering • Make Applications Free from Port Restriction by DMZ • Make Xbox Online Games Run Smoothly by UPnP Chapter 10 NAT Forwarding 10. 1. Share Local Resources in the Internet by Virtual Server When you build up a server in the local network and want to share it on the Internet, Virtual Server can realize the service and provide it to the Internet users. At the same time virtual server can keep the local network safe as other services are still invisible from the Internet. Virtual server can be used for setting up public services in your local network, such as HTTP, FTP, DNS, POP3/SMTP and Telnet. Different service uses different service port. Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and port 110 in POP3 service. Please verify the service port number before the configuration.

I want to: Share my personal website I’ve built in local network with my friends through the Internet. For example, the personal website has been built in my home PC (192.168.0.100). I hope that my friends in the Internet can visit my website in some way. The PC is connected to the router with the WAN IP address 218.18.232.154. Router Personal Website LAN WAN: 218.18.232.154 Home How can I do that? 1. Assign a static IP address to your PC, for example 192.168.0.100.

2. Visit tplinkwifi.net, and log in with the username and password you‘ve set for the router. 3. Go to Advanced > NAT Forwarding > Virtual Servers. 4. Click Add. Click View Existing Services and select HTTP. The external port, internal port and protocol will be automatically filled with contents. Enter the PC’s IP address 192.168.0.100 in the Internal IP field. 5. Click OK to save the settings. 63 Chapter 10 NAT Forwarding Tips: 3. It is recommended to keep the default settings of Internal Port and Protocol if you are not clear about which port and protocol to use. 4. If the service you want to use is not in the Service Type, you can enter the corresponding parameters manually. You should verify the port number that the service needs. 5. You can add multiple virtual server rules if you want to provide several services in a router. Please note that the External Port should not be overlapped. Done! Users in the Internet can enter WAN IP (in this example: 218.18.232.154) to visit your personal website. Tips: 1. WAN IP should be a public IP address. For the WAN IP is assigned dynamically by ISP, it is recommended to apply and register a domain name for the WAN refer to 12. 4. Set Up a Dynamic DNS Service Account. Then you can use domain name to visit the website. 2. If you have changed the default External Port, you should use WAN IP: External Port or domain name: External Port to visit the website. 10. 2. Open Ports Dynamically by Port Triggering Port triggering can specify a triggering port and its corresponding external ports. When a host in the local network initiates a connection to the triggering port, all the external ports will be opened for subsequent connections. The router can record the IP address of the host. When the data from the Internet return to the external ports, the router can forward them to the corresponding host. Port triggering is mainly applied to online games, VoIPs and video players. Common applications include MSN Gaming Zone, Dialpad and Quick Time 4 players, etc. Follow the steps below to configure the port triggering rules: 64 Chapter 10 NAT Forwarding 1. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 2. Go to Advanced > NAT Forwarding > Port Triggering and click Add. 3. Click View Existing Applications, and select the desired application. The external port, internal port and protocol will be automatically filled with contents. The following picture takes application MSN Gaming Zone as an example. 4. Click OK to save the settings. Tips: 1. You can add multiple port triggering rules according to your network need. 2. The triggering ports can not be overlapped. 3. If the application you need is not listed in the Existing Applications list, please enter the parameters manually. You should verify the external ports the application uses first and enter them into External Port field according to the format the page displays. 10. 3. Make Applications Free from Port Restriction by DMZ When a PC is set to be a DMZ (Demilitarized Zone) host in the local network, it is totally exposed to the Internet, which can realize the unlimited bidirectional communication between internal hosts and external hosts. The DMZ host becomes a virtual server with all ports opened. When you are not clear about which ports to open in some special applications, such as IP camera and database software, you can set the PC to be a DMZ host. 65 Chapter 10 NAT Forwarding Note: DMZ is more applicable in the situation that users are not clear about which ports to open. When it is enabled, the DMZ host is totally exposed to the Internet, which may bring some potential safety hazard. If DMZ is not in use, please disable it in time. I want to: Make the home PC join the Internet online game without port restriction. For example, due to some port restriction, when playing the online games, you can login normally but cannot join a team with other players. To solve this problem, set your PC as a DMZ with all ports opened. How can I 1. Assign a static IP address to your PC, for example do that? 192.168.0.100. 2. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 3. Go to Advanced > NAT Forwarding > DMZ and select the checkbox to enable DMZ. 4. Enter the IP address 192.168.0.100 in the DMZ Host IP Address filed. Done! 5. Click Save to save the settings. The configuration is completed. You’ve set your PC to a DMZ host and now you can make a team to game with other players. 10. 4. Make Xbox Online Games Run Smoothly by UPnP UPnP (Universal Plug and Play) protocol allows the applications or host devices to automatically find the front-end NAT device and send request to it to open the corresponding ports. With UPnP enabled, the applications or host devices in the both sides of NAT device can freely communicate with each other realizing the seamless connection of the network. You may need to enable the UPnP if you want to use applications for multiplayer gaming, peer-to-peer connections, real-time communication (such as VoIP or telephone conference) or remote assistance, etc. 66 Chapter 10 NAT Forwarding Tips: 1. UPnP is enabled by default in this router. 2. Only the application supporting UPnP protocol can use this feature. 3. UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc. Some of operating system need to install the UPnP components). For example, when you connect your Xbox to the router which has connected to the Internet to play online games, UPnP will send request to the router to open the corresponding ports allowing the following data penetrating the NAT to transmit. Therefore, you can play Xbox online games without a hitch.

Xbox Router LAN WAN

If necessary, you can follow the steps to change the status of UPnP. 1. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 2. Go to Advanced > NAT Forwarding > UPnP and toggle on or off according to your needs. 67 Chapter 11 VPN Server The VPN (Virtual Private Networking) Server allows you to access your home network in a secured way through Internet when you are out of home. The router offers two ways to setup VPN connection: OpenVPN and PPTP (Point to Point Tunneling Protocol) VPN. OpenVPN is somewhat complex but with greater security and more stable. It is suitable for restricted environment, such as campus network and company intranet. PPTP VPN is more easily used and its speed is faster, it’s compatible with most operating systems and also supports mobile devices. Its security is poor and your packets may be cracked easily, and PPTP VPN connection may be prevented by some ISP. Please choose the appropriate VPN server connection type according to your needs. This chapter contains the following sections: • Use OpenVPN to Access Your Home Network • Use PPTP VPN to Access Your Home Network Chapter 11 VPN Server 11. 1. Use OpenVPN to Access Your Home Network In the OpenVPN connection, the home network can act as a server, and the remote client can access the server through the router which acts as an OpenVPN Server gateway. To use the VPN feature, you should enable OpenVPN Server on your router, and install and run VPN client software on the remote client. Please follow the steps below to set up an OpenVPN connection. Step1. Set up OpenVPN Server on Your Router 1. Visit tplinkwifi.net, and log in with the username and password you‘ve set for the router. 2. Go to Advanced > VPN Server > OpenVPN. And then Select Enable VPN Server. Note: 1. Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static IP address for router’s WAN port and synchronize your System Time with Internet. 2. The first time you configure the OpenVPN Server, you may need to Generate a certificate before you enable the VPN Server. 3. Select the Servive Type (communication protocol) for OpenVPN Server: UDP, TCP. 4. Enter a VPN Service Port to which a VPN client connects, and the port number should be between 1024 and 65535. 5. In VPN Subnet/Netmask field, enter the range of IP addresses that can be leased to the client by the OpenVPN server. 6. Select your Client Access type., select Home Network Only if you only want the remote client to access your home network, select Internet and Home Network if the remote client also want to access Internet through VPN Server. 69 Chapter 11 VPN Server 7. Click Save. 8. Click Generate to generate a new certificate. Note: If you have already generated one, please skip this step, or click Generate to update the certificate. 9. Click Export to save the OpenVPN configuration file. Remote client will use this configuration file to access your router. Step 2. Configure OpenVPN Connection on Your Remote Client 1. Visit openvpn.net/index.php/download/community-downloads.html to download the OpenVPN software, and install it on your client where you want to run the OpenVPN client utility. Note: You need to install the OpenVPN client utility on each client that you plan to use for VPN connections to your router. Mobile devices should download third-party app from Google Play or APP Store. 2. After the installation, copy the file exporting from your router to OpenVPN client utility’s “config” folder (for Windows): C:\Program Files\OpenVPN\config. The path is depending on where the OpenVPN client utility is installed on. 3. Run the OpenVPN client utility and connect it to OpenVPN Server. 11. 2. Use PPTP VPN to Access Your Home Network PPTP VPN Server is used to create a VPN connection for remote client. To use the VPN feature, you should enable PPTP VPN Server on your router, and configure the PPTP connection on the remote client. Please follow the steps below to set up a PPTP VPN connection. Step 1. Set up PPTP VPN Server on Your Router 1. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 2. Go to Advanced > VPN Server > PPTP VPN. And then select Enable VPN Server. 70 Chapter 11 VPN Server Note: Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static IP address for router’s WAN port and synchronize your System Time with Internet. 3. In the Client IP Address filed, enter the range of IP addresses (up to 10 clients) that can be leased to the client by the PPTP VPN server. 4. Enter the Username and Password to authenticate clients to the PPTP VPN server. 5. Click Save. Step 2. Configure PPTP VPN Connection on Your Remote Client Remote client can use Windows built-in PPTP software or third-party PPTP software to connect to PPTP Server. Here we use Windows built-in PPTP software as an example. 1. Go to Start > Control Panel > Network and Internet > Network and Sharing Center. 2. Select Set up a new connection or network. 71 Chapter 11 VPN Server 3. Select Connect to a workplace and click Next. 4. Select Use my Internet connection (VPN). 72 Chapter 11 VPN Server 5. Enter the WAN IP address of the router (for example: 218.18.1.73) in the Internet address field. Click Next. 6. Enter the User name and Password, it’s the username and password you have set on your router, and click Connect. 73 Chapter 11 VPN Server 7. The PPTP VPN connection is created and ready to use. 74 Chapter 12 Customize Your Network Settings This chapter guides you on how to configure advanced networking features that are available for this router. This chapter contains the following sections: • Change the LAN Settings • Configure to Support IPTV Service • Specify DHCP Server Settings • Set Up a Dynamic DNS Service Account • Create Static Routes • Specify Wireless Settings • Use WPS for Wireless Connection • Schedule Your Wireless Function Chapter 12 Customize Your Network Settings 12. 1. Change the LAN Settings The router is preset with a default LAN IP 192.168.0.1, which you can use to log in to its web-based management page. The LAN IP address together with the Subnet Mask also defines the subnet that the connected devices are on. If the IP address conflicts with another device on your local network or your network requires a specific IP subnet, you can change it. 1. Visit tplinkwifi.net, and log in with the username and password you’ve set for the router. 2. Go to Advanced > Network > LAN. 3. Type in a new IP Address appropriate to your needs. And Leave the Subnet Mask as the default settings. 4. Click Save. Note: If you have set the Virtual Server, DMZ or DHCP address reservation, and the new LAN IP address is not in the same subnet with the old one, then you should reconfigure them. 12. 2. Configure to Support IPTV Service I want to: Configure IPTV setup to enable Internet / IPTV / Phone service provided by my Internet Service Provider (ISP). How can 1. Visit tplinkwifi.net, and log in with the username and I do that? password you’ve set for the router. 2. Go to Advanced > Network > IPTV. 3. If your ISP provide the networking service based on IGMP technology, e.g., British Telecom(BT) and Talk Talk in UK: 1 ) Tick the IGMP Proxy checkbox and select the IGMP Version, either V2 or V3, according to the information provided by your ISP. 76


FREE ENGLISH PDF

OPERATING INSTRUCTIONS

USER GUIDE - USER MANUAL

OWNER GUIDE - OWNER MANUAL

REFERENCE GUIDE - REFERENCE MANUAL

INSTRUCTION GUIDE - INSTRUCTION MANUAL

Leave a Reply