TENDA TECHNOLOGY D301, D151 Users Manual
Wireless Modem Router User Guide
- 51 -
_________________________________________________________________________________________________
Warning!
DMZ servers pose a security risk. A computer designated as the DMZ server loses much of the protection of the firewall
and is exposed to exploits from the Internet.
_________________________________________________________________________________________________
4.2.5 Security
This section explains the following information:
• IP Filtering
• MAC Filtering
IP Filtering
Outgoing IP Filtering Setup
By default, all outgoing IP traffic from LAN is allowed, but some IP traffic can be BLOCKED by setting up filters.
Choose Add or Remove to configure outgoing IP filters.
Choose Add to enter the following screen:
Wireless Modem Router User Guide
- 52 -
This screen allows you to create a filter rule to identify outgoing IP traffic by specifying a new filter name and at least
one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click
'Apply/Save' to save and activate the filter.
Filter Name: Enter a descriptive filtering name.
IP Version: Select either IPv4 or IPv6.
Protocol: TCP/UDP, TCP, UDP and ICMP are available for your option.
Source IP address [/prefix length]: Enter the LAN IP address to be filtered.
Source Port (port or port: port): Specify a port number or a range of ports used by LAN PCs to access Internet. If
you are unsure, leave it blank.
Destination IP address [/prefix length]: Specify the external network IP address to be accessed by specified LAN
PCs.
Destination Port (port or port:port): Specify a port number or a range of ports used by LAN PCs to access external
network.
Incoming IP Filtering Setup
When the firewall is enabled on a WAN or LAN interface, all incoming IP traffic is BLOCKED. However, some IP
traffic can be ACCEPTED by setting up filters.
Choose Add or Remove to configure incoming IP filters.
Click Add to enter the following screen:
Wireless Modem Router User Guide
- 53 -
This screen allows you to create a filter rule to identify incoming IP traffic by specifying a new filter name and at least
one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click
Apply/Save to save and activate the filter.
IP Version: Select either IPv4 or IPv6.
Protocol: TCP/UDP, TCP, UDP and ICMP are available for your option.
Source IP address [/prefix length]: Enter the Internal IP address [/prefix length] to be filtered.
Source Port (port or port: port): Specify a port number or a range of ports used by PCs from external network to
access your internal network.
Destination IP address [/prefix length]: Specify the internal network IP address [/prefix length] to be accessed by
the specified PCs from external network.
Destination Port (port or port:port): Specify a port number or a range of ports used by PCs from external network
to access your internal network.
MAC Filtering
A bridge WAN service is needed to configure this service.
MAC Filtering is only effective on ATM PVCs configured in Bridge mode. FORWARDED means that all MAC layer
frames will be FORWARDED except those matching with any of the specified rules in the following table. BLOCKED
means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the
following table.
Choose Add or Remove to configure MAC filtering rules.
_________________________________________________________________________________________________
Warning!
Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED
AUTOMATICALLY! You will need to create new rules for the new policy.
_________________________________________________________________________________________________
Wireless Modem Router User Guide
- 54 -
Click Add to enter the following screen:
Here you can create a filter to identify the MAC layer frames by specifying at least one condition below. If multiple
conditions are specified, all of them take effect. Click Save/Apply to save and activate the filter.
Protocol Type: Select a protocol type from the drop-down list.
Destination MAC Address: Enter the destination MAC address apply the MAC filtering rule to which you wish to
apply the MAC filtering rule.
Source MAC Address: Enter the source MAC address to which you wish to apply the MAC filtering rule.
Frame Direction: Select a frame direction from the drop-down list.
WAN Interfaces: Select a WAN interface from the drop-down list.
4.2.6 Parental Control
This section explains the following information:
• Time Restriction
• URL Filter
Time Restriction
Click Parental Control -> Time Restriction -> Add to enter the following screen.
Here you can add time of day restriction that an attached LAN device can access Internet.
The 'Browser's MAC Address' automatically displays the MAC address of the LAN device where the browser is running.
To restrict other LAN device, click the "Other MAC Address" button and enter the MAC address of the other LAN
device.
User Name: Enter a user name.
Browser's MAC Address: Automatically adds the MAC address of the attached LAN device where the browser is
Wireless Modem Router User Guide
- 55 -
running.
Other MAC Address: Specify the MAC address of the computer that you want to apply Internet access restriction.
Days of the week: Click to select the days of the week during which you wish to restrict Internet access.
Start Blocking Time/ End Blocking Time: Specify time of day restriction to an attached LAN device. Within this
specified time length of the day, this LAN device will be blocked from Internet.
Apply/Save: Click to Apply/Save your settings.
URL Filter
Here you can add URL access restriction to specific LAN PCs.
Select the URL List Type (Exclude or Include) first and then click Add to enter the screen below for configuring the list
entries. Maximum 100 entries can be configured.
URL Address: Enter the URLs that a specific LAN PC cannot access.
Port Number: Specify the port number used by the web server. The default is 80, which is the standard protocol for web
servers.
Enter the URL address and port number then click "Apply/Save" to add the entry to the URL filter.
Wireless Modem Router User Guide
- 56 -
_________________________________________________________________________________________________
Note:
If you have accessed the URL before you include it in a URL filter rule, you must reboot the router and erase it from your
PC to activate this URL filter rule. To erase the domain name from your PC, click Start -> Run, enter cmd and then type
ipconfig /flushdns.
_________________________________________________________________________________________________
4.2.7 Quality of Service
This section explains the following:
• QoS Queue
• QoS Classification
If Enable QoS checkbox is selected, choose a default DSCP mark to automatically mark incoming traffic without
reference to a particular classifier. Click Apply/Save button to save it.
Enable QoS: Check/uncheck to enable/disable the QoS feature.
_________________________________________________________________________________________________
Note:
1. If Enable Qos checkbox is not selected, all QoS will be disabled for all interfaces.
2. The default DSCP mark is used to mark all egress packets that do not match any classification rules.
_________________________________________________________________________________________________
QoS Queue
In ATM mode, maximum 8 queues can be configured.
In PTM mode, maximum 8 queues can be configured.
For each Ethernet interface, maximum 4 queues can be configured.
For each Ethernet WAN interface, maximum 4 queues can be configured.
To add a queue, click the Add button.
To remove queues, check their remove-checkboxes, then click the Remove button.
The Enable button will scan through every queues in the table. Queues with enable-checkbox checked will be enabled.
Wireless Modem Router User Guide
- 57 -
Queues with enable-checkbox un-checked will be disabled.
The enable-checkbox also shows status of the queue after page reload.
Note that if WMM function is disabled in Wireless Page, queues related to wireless will not take effects.
To add a queue, click the Add button to enter the following screen.
Here you can configure a QoS queue and add it to a selected layer2 interface.
QoS Classification
To add a rule, click the Add button.
To remove rules, check their remove-checkboxes, then click the Remove button.
The Enable button will scan through every rules in the table. Rules with enable-checkbox checked will be enabled.
Rules with enable-checkbox un-checked will be disabled.
The enable-checkbox also shows status of the rule after page reload.
If you disable WMM function in Wireless Page, classification related to wireless will not take effects.
Wireless Modem Router User Guide
- 58 -
To add a rule, click the Add button to enter the following screen.
Here you can create a traffic class rule to classify the ingress traffic into a priority queue and optionally mark the DSCP
or Ethernet priority of the packet.
Click Apply/Save to save and activate the rule.
4.2.8 Routing
This section explains the following:
• Default Gateway
• Static Route
Default Gateway
Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be
used according to the priority with the first being the highest and the last one the lowest priority if the WAN interface is
connected. Priority order can be changed by removing all and adding them back in again.
Selected Default Gateway Interfaces: Displays the selected dfault gteway iterfaces. Select a WAN interface and
click the button to move it to the Available Routed WAN Interfaces box.
Available Routed WAN Interfaces: Displays the available routed WAN interfaces. Select a WAN interface and
click the button to add it to the Selected Default Gateway Interfaces box.
Apply/Save: Click to save and activate your settings.
Wireless Modem Router User Guide
- 59 -
Static Route
Static routes provide additional routing information to your router. Typically, you do not need to add static routes.
However, when there are several routers in the network, you may want to set up static routing. Static routing determines
the path of the data in your network. You can use this feature to allow users on different IP domains to access the Internet
via this device. It is not recommended to use this setting unless you are familiar with static routing. In most cases,
dynamic routing is recommended, because this feature allows the router to detect the physical changes of the network
layout automatically. If you want to use static routing, make sure the router’s DHCP function is disabled.
Click Add to enter the following screen:
IP Version: Select either IPv4 or IPv6.
Destination IP address/prefix length: Enter the destination IP address and prefix length of the final destination.
Interface: Select an interface from the drop-down list.
Gateway IP address: Enter the gateway IP address, which must be a router on the same LAN segment as the
router.
Metric: Enter a number in the Metric field. This stands for the number of routers between your network and the
destination.
Apply /Save: Click to apply and save your settings.
Wireless Modem Router User Guide
- 60 -
_________________________________________________________________________________________________
Note:
1. Destination IP address cannot be on the same IP segment as WAN or LAN segment as the router.
2. Only configure additional static routes for unusual cases such as multiple routers or multiple IP subnets located on
your network. Wrong static routes may lead to network failure.
3. For system created route, the 'Remove' checkbox is disabled.
_________________________________________________________________________________________________
4.2.9 DNS
DNS Server (Static DNS)
The DNS server translates domain names to numeric IP addresses. It is used to look up site addresses based on their
names.
Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system.
Here you can configure the WAN DNS address:
For IPv4:
-Click the Select DNS Server Interface from available WAN interfaces option
-OR select the Use the following Static DNS IP address option and enter static DNS server IP addresses for the system
And then click Apply/Save.
For IPv6:
-Select Obtain IPv6 DNS info from a WAN interface and Select a configured WAN interface for the IPv6 DNS server
information.
-Select Use the following Static IPv6 DNS address and enter the static IPv6 DNS server Addresses.
And then click Apply/Save.
_________________________________________________________________________________________________
Note:
1. DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used
according to the priority with the first being the higest and the last one the lowest priority if the WAN interface is
connected. Priority order can be changed by removing all and adding them back in again.
Wireless Modem Router User Guide
- 61 -
2. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses
must be entered.
3. If you cannot locate the static DNS server IP information, ask your ISP to provide it.
4. The default settings are recommended if you are unsure about the DNS server addresses. If a wrong DNS server
address is configured, webpages may not be open.
_________________________________________________________________________________________________
Dynamic DNS (DDNS)
If your Internet service provider (ISP) gave you a static (fixed) public IP address, you can register a domain name and
have that name associated with your IP address by public Domain Name Servers (DNS). However, if your ISP gave you
a dynamic (changing) public IP address, you cannot predict what your IP address will be, and the address can change
frequently. In this case, you can use a commercial Dynamic DNS service. It lets you register your domain to their IP
address and forwards traffic directed at your domain to your frequently changing IP address.If your ISP assigns a private
WAN IP address (such as 192.168.x.x or 10.x.x.x), the Dynamic DNS service does not work because private addresses
are not routed on the Internet.
Click Advanced Setup -> DNS -> Dynamic DNS to enter the Dynamic DNS screen.
Click the Add button to configure the DDNS settings.
D-DNS Provider: Select your DDNS service provider from the drop-down menu.
- 62 -
Hostname: Enter the DDNS domain name registered with your DDNS service provider.
Interface: Specify a WAN connection interface.
User Name: Enter the DDNS user name registered with your DDNS service provider.
Password: Enter the DDNS Password registered with your DDNS service provider.
Click Apply/Save to save your settings.
4.2.10 DSL
Wireless Modem Router User Guide
This screen provides multiple ASDL modulation modes to meet diversified environments. You can also select phone line
pair and Capability.
DSL parameter configurations must be supported by ISP to take effect. Actual parameters (see Statistics-xDSL) resulted
from the negotiation between your router and ISP. Wrong configurations may fail your Internet access.
The best DSL configurations are the factory defaults. Only change them if you are instructed by your ISP or our
technical staff when your router fails to negotiate with ISP in DSL (ATM) mode. Usually, this failure can be identified
and confirmed if the ADSL LED on the device keeps displaying a slow or quick blinking light.
Check the checkbox next to a modulation to enable it and then click Apply/Save.
Advanced Settings: Click to enter the Advanced Settings screen as below.
Wireless Modem Router User Guide
- 63 -
Here you can select the test mode and tone.
_________________________________________________________________________________________________
Tip:
If you are unsure about the ADSL parameters, please apply the factory default settings.Wrong configurations may fail
your Internet access.
_________________________________________________________________________________________________
4.2.11 UPnP
UPnP (Universal Plug and Play) allows Windows based systems to configure the device for various Internet applications
automatically. UPnP devices can automatically discover the services from other registered UPnP devices on the network.
If you use applications such as multiplayer gaming, peer-to-peer connections, or real-time communications, such as
instant messaging or remote assistance (a feature in Windows XP), you should enable UPnP.
Enable UPnP: Check/uncheck to enable/disable the UPnP feature.
_________________________________________________________________________________________________
Note:
UPnP is activated only when there is a live WAN service with NAT enabled.
_________________________________________________________________________________________________
- 64 -
4.2.12 Print Server (Available only in D301)
This page allows you to enable / disable printer support.
Enable on-board print server: Check/uncheck to enable / disable the printer support.
Printer name: Enter a descriptive name of your printer.
Make and model: Enter the make and model of your printer.
Apply/Save: Click to apply and save your settings.
Wireless Modem Router User Guide
4.2.13 Storage Service (Available only in D301)
The Storage service allows you to use Storage devices with the modem router to be more easily accessed.
This section explains the following:
• Storage Device Info
• User Account
Storage Device Info
This screen displays the information of the storage device as seen on the screenshot below.
- 65 -
User Account
This section allows you to Add, or Remove User Accounts.
To add a user account:
1. Click Add to enter the following screen:
Wireless Modem Router User Guide
2. Enter the user name, password and volume name on which the home directory is to be created.
3. Click Apply/Save to apply and save your settings.
To remove an existing user account:
1. Check Remove next to the user account.
2. Click the Remove button.
4.1.14 Interface Grouping
Interface Grouping supports multiple ports to PVC and bridging groups. Each group will perform as an independent
network. To support this feature, you must create mapping groups with appropriate LAN and WAN interfaces using the
Wireless Modem Router User Guide
- 66 -
Add button. The Remove button will remove the grouping and add the ungrouped interfaces to the Default group. Only
the default group has IP interface.
Click Add to enter the screen below:
Group Name: The name of a configured rule.
WAN Interface used in the grouping: WAN connection to which the interface grouping rules apply.
Available LAN Interfaces: LAN interfaces that can be used for interface grouping.
Grouped LAN Interfaces: LAN interfaces that use specified WAN interface.
To create a new interface group:
1. Enter the Group name and the group name must be unique and select either 2. (dynamic) or 3. (static) below:
2. If you like to automatically add LAN clients to a WAN Interface in the new group add the DHCP vendor ID string.
By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID (DHCP option 60)
will be denied an IP address from the local DHCP server.
3. Select interfaces from the available interface list and add it to the grouped interface list using the arrow buttons to
create the required mapping of the ports. Note that these clients may obtain public IP addresses.
4. Click Apply/Save button to make the changes effective immediately.
_________________________________________________________________________________________________
Note:
If a vendor ID is configured for a specific client device, please REBOOT the client device attached to the modem to
allow it to obtain an appropriate IP address.
_________________________________________________________________________________________________
Loading...