Step 5: Here you can configure the NAT. If you are not an advanced user, the default settings are recommended and then click Next.
Step 6: To configure the Default Gateway interface when using IPv6, select the interface that you want to configure with
the WAN gateway address in Selected WAN Interface box. Then click Next.
Step 7: To configure the WAN DNS address, check the Obtain IPv6 DNS info from a WAN interface option, or select
the Use the following Static IPv6 DNS address option to enter the static DNS server IPv6 addresses provided by your
ISP. At last, click Next.
76
Step 8: Here you can view your configurations. Click Apply/Save to save your settings if everything is correctly set.
When the IPoE connection is successful, you can access the Internet.
Bridging
If you wish to initiate a dialup directly from your PC for Internet access or enjoy the entire Internet connection (instead
of sharing it with others), you can select the Bridging and create a dialup program from your PC.
Step 1: Click Advanced Setup > WAN Service and then click the Add button.
Step 2: Select the ETH interface you added just now from the pull-down menu in the figure below. Click Next.
Step 3: Select Bridging. Edit the Enter Service Description. This field is optional. It is recommended that you keep the
77
default. And click Next.
Step 4: Here you can view your configurations. Click Apply/Save to save your settings if everything is correctly set.
After the bridging connection is successful, initiate a dialup directly from your PC for Internet access.
78
4.2.3 LAN Setup
Here you can configure the LAN IP Address and subnet mask. This IP address is to be used to access the device’s
settings through a web browser. Be sure to make a note of any changes you apply to this page.
This part includes the following information:
IPv4
IPv6 Autoconfig
IPv4
IP Address: The device's LAN IP address. The default setting is 192.168.1.1.
Subnet Mask: The LAN subnet mask of the device. Combined with the IP address, the IP Subnet Mask allows a device
to know which other addresses are local to it, and which must be reached through a gateway or modem router. You can
change the subnet mask to fit your network.
Enable IGMP Snooping: Check to enable the IGMP Snooping. It is recommended to keep the default settings.
Disable DHCP Server: Click to disable the DHCP Server.
Enable DHCP Server: Click to enable the DHCP Server.
Start IP Address: Specify the start of the range for the pool of IP addresses in the same subnet as the router.
End IP Address: Specify the end of the range for the pool of IP addresses in the same subnet as the router.
79
Leased Time: The lease time is a time length that the IP address is assigned to each device before it is refreshed.
Static IP Lease List: Displays a list of devices with reserved static IP addresses.
Add Entries: Click to add a static IP lease entry. A maximum 32 entries can be configured.
Remove Entries: Click to remove a static IP lease entry.
Configure the second IP Address and Subnet Mask for LAN interface: If you want to configure two IP addresses for
the LAN interface, you can check this option and enter the second IP Address and Subnet Mask manually.
Apply/Save: After you configure all the needed settings, click this button to apply and save them.
DHCP (Dynamic Host Configuration Protocol) assigns an IP address to each device on the LAN/private network. When
you enable the DHCP Server, the DHCP Server will automatically allocate an unused IP address from the IP address pool
specified in this screen to the requesting device as long as the device is set to "Obtain an IP Address Automatically". By
default, DHCP is enabled.
IPv6 Autoconfig
Static LAN IPv6 Address Configuration
Interface Address (prefix length is required): Enter the interface address.
1. IPv6 address can only be Aggregatable Global Unicast Addresses and Unique Local Address. Link-Local Unicast
Addresses and Multicast Addresses are not permitted.
2. The IPv6 address must be entered with a prefix length.
Enable DHCPv6 Server:Check to enable the DHCPv6 Server.
Stateless: If selected, IPv6 clients will generate IPv6 addresses automatically based on the Prefix Delegation's IPv6 prefix and their own MAC addresses.
Stateful: Stateful DHCPv6 is supported based on the assumption of prefix length less than 64. Select this option and configure the start/end interface ID and leased time. The router will automatically assign IPv6 addresses to IPv6 clients.
Leased Time (hour): The lease time is a time length that the IP address is assigned to each device before it is refreshed.
Start interface ID/End interface ID: Specify the start/end interface ID Interface ID does NOT support ZERO COMPRESSION "::". Please enter the complete information. For example: Please enter "0:0:0:2" instead of "::2".
Enable RADVD: The RADVD (Router Advertisement Daemon) implements link-local advertisements of IPv6 router
addresses and IPv6 routing prefixes using the Neighbor Discovery Protocol (NDP) and is used by system administrators
in stateless autoconfiguration methods of network hosts on Internet Protocol version 6 networks. Check the checkbox to
enable the RADVD.
Enable ULA Prefix Advertisement: If enabled, the router will advertise ULA prefix periodically
Randomly Generate: If selected, address prefix can be automatically generated.
Statically Configure: If you select this option, you need to manually configure the address prefix and life time.
Prefix: Specify the prefix.
Preferred Life Time (hour): Specify the preferred life time in hour.
Valid Life Time (hour): Specify the valid life time in hour.
Enable MLD Snooping: MLD is used by IPv6 routers for discovering multicast listeners on a directly attached link. If
disabled on layer2 devices, IPv6 multicast data packets will be broadcast on the entire layer2; if enabled, these packets
will be multicast to only specified recipient instead of being broadcast on the entire layer2.
If you change the LAN IP address of the device, the current connection to the device will be stopped. You must use the
new IP address to log in to the device. Be sure to write the new address on a sticky label and attach it to the bottom of the
unit. You will need the new address to log in to the device in the future.
The Virtual Server is useful for web servers, ftp servers, e-mail servers, gaming and other specialized Internet
applications. When you enable the Virtual Server, the communication requests from the Internet to your router’s WAN
port will be forwarded to the specified LAN IP address.
To enter the virtual server screen, click NAT > Virtual Server and then click the Add button to add rules.
Use Interface: Select a WAN connection to which you wish to apply the rules. When there is only one WAN connection
available, the rules will be automatically applied to it.
Service Name:
- Select a Service: Allows you to select an existing service from the drop-down list.
- Custom Service: Allows you to customize a service.
Server IP Address: Enter the IP address of your local computer that will provide this service.
External Starting Port and External Ending Port: These are the starting number and ending number for the public
82
ports at the Internet interface.
Protocol: Select the protocol from the Protocol drop-down list. If you are unsure, select TCP/UDP.
Internal Starting Port and Internal Ending Port: These are the starting number and ending number for the ports of a
computer on the router’s local area network (LAN).
If you have enabled the UPnP functionality on both the router and your PC that is attached to one of the LAN port of the
router, you will be prompted on the Virtual Server page that the UPnP interface is being used.
- An FTP server (using the default port number of 21) at the IP address of 192.168.1.100
- A web server (using the default port number of 8080) at the IP address of 192.168.1.110
And want your friends on the Internet to access the FTP server and web server via default ports. To access your FTP or
web server from the Internet, a remote user has to know the WAN IP address of your router. In this example, we assume
the WAN IP address of your router is 183.37.227.201. Then follow instructions below:
To configure the router to make your local FTP server public:
Procedure
1. Click NAT > Virtual Server to enter it and then click the Add button.
2. Select FTP Server that you wish to host on your network from the Select a Service drop-down list. The port
number (21) used by this service will then be automatically populated.
- Or if you wish to define the service yourself, enter a descriptive name in the Custom Service, say My FTP, and
then manually enter the port number (21) used by this service in the Internal Starting Port, Internal Ending Port,
External Starting Port and External Ending Port fields.
3. Select a protocol from the Protocol drop-down list. If you are unsure, select TCP/UDP.
4. In the Server IP Address field, enter the last digit of the IP address of your local computer that offers this service.
Here in this example, we enter 100.
5. Click .
Your friends on the Internet will then be able to access your FTP server simply by "ftp://183.37.227.201:21".
83
To configure your router to make your local web server public:
Procedure
1. Click NAT > Virtual Server to enter it and then click the Add button.
2. Select Web Server (HTTP) that you wish to host on your network from the Select a Service drop-down list. The
port number (8080) used by this service will then be automatically populated.
- Or if you wish to define the service yourself, enter a descriptive name in the Custom Service, say My Web Server
(HTTP), and then manually enter the port number (8080) used by this service in the Internal Starting Port,
Internal Ending Port, External Starting Port and External Ending Port fields.
3. Select a protocol from the Protocol drop-down list. If you are unsure, select TCP/UDP.
4. In the Server IP Address field, enter the last digit of the IP address of your local computer that offers this service.
Here in this example, we enter 110.
5. Click .
Now you can view your configurations as seen in the screenshot below. Your friends on the Internet will then be able to
access the web server simply by entering "http://183.37.227.201:8080" in his browser.
1. The "Internal Port End" cannot be modified directly. Normally, it is set to the same value as "External Port End".
However, if you modify "Internal Port Start", then "Internal Port End" will be set to the same value as "Internal Port
Start".
2. If the service or game you wish to host on your network is not included in the list, manually add it in the Custom
Service field and then add the port number used by it to the Internal Starting Port, Internal Ending Port, External Starting Port and External Ending Port fields.
Some applications such as games, video conferencing, remote access applications and others require that specific ports in
the Router's firewall be opened for access by the applications. Port Trigger dynamically opens up the 'Open Ports' in the
firewall when an application on the LAN initiates a TCP/UDP connection to a remote party using the 'Triggering Ports'.
The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN
side using the 'Open Ports'.
To enter the Port Triggering screen, click NAT > Port Triggering and then click the Add button to add rules.
You can configure the port settings from this screen by selecting an existing application or creating your own (Custom
application) and click Save/Apply to add it.
Use Interface: Select a WAN connection to which you wish to apply the rules. When there is only one WAN connection
available, the rules will be automatically applied to it.Application Name: Two options are available:
Select an application: Select one from the drop-down list directly.
- Custom application: Custom application by yourself.
Trigger Port Start/Trigger Port End: The port range for an application to initiate connections.
Trigger Protocol: Select the protocol from the drop-down list. If you are unsure, select TCP/UDP.
Open Port Start/ Open Port End: These are the starting number and ending number for the ports that will be
85
automatically opened by the built-in firewall when connections initiated by an application are established.
DMZ Host
The default DMZ (De-Militarized Zone) host feature is helpful when you are using some online games and
videoconferencing applications that are not compatible with NAT (Network Address Translation).
DMZ Host IP Address: The IP Address of the device for which the router’s firewall will be disabled. Be sure to assign a
static IP Address to that device. The DMZ host should be connected to a LAN port of the device. Be sure to assign a
static IP address to that DMZ host.
Warning!
DMZ servers pose a security risk. A computer designated as the DMZ server loses much of the protection of the firewall
and is exposed to exploits from the Internet.
UPnP
UPnP (Universal Plug and Play) allows Windows based systems to configure the device for various Internet applications
automatically. UPnP devices can automatically discover the services from other registered UPnP devices on the network.
If you use applications such as multiplayer gaming, peer-to-peer connections, or real-time communications, like instant
messaging or remote assistance (a feature in Windows XP), you should enable UPnP.
86
Enable UPnP: Check/uncheck to enable/disable the UPnP feature.
By default, all outgoing IP traffic from LAN is allowed, but some IP traffic can be BLOCKED by setting up filters.
Choose Add or Remove to configure outgoing IP filters.
Choose Add to enter the following screen:
87
This screen allows you to create a filter rule to identify outgoing IP traffic by specifying a new filter name and at least
one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click
to save and activate the filter.
Filter Name: Enter a descriptive filtering name.
IP Version: Support IPv4.
Protocol: TCP/UDP, TCP, UDP and ICMP are available for your option.
Source IP address [/prefix length]: Enter the LAN IP address to be filtered.
Source Port (port or port: port): Specify a port number or a range of ports used by LAN PCs to access the
Internet. If you are unsure, leave it blank.
Destination IP address [/prefix length]: Specify the external network IP address to be accessed by specified LAN
PCs.
Destination Port (port or port:port): Specify a port number or a range of ports used by LAN PCs to access external
network.
Incoming IP Filtering Setup
When the firewall is enabled on a WAN or LAN interface, all incoming IP traffic is BLOCKED. However, some IP
traffic can be ACCEPTED by setting up filters.
Choose Add or Remove to configure incoming IP filters.
88
Click Add to enter the following screen:
This screen allows you to create a filter rule to identify incoming IP traffic by specifying a new filter name and at least
one condition below. All of the specified conditions in this filter rule must be satisfied for the rule to take effect. Click
to save and activate the filter.
IP Version: Select IP version.
Protocol: TCP/UDP, TCP, UDP and ICMP are available for your option.
Source IP address [/prefix length]: Enter the Internal IP address [/prefix length] to be filtered.
Source Port (port or port: port): Specify a port number or a range of ports used by PCs from external network to
access your internal network.
Destination IP address [/prefix length]: Specify the internal network IP address [/prefix length] to be accessed by
the specified PCs from external network.
Destination Port (port or port:port): Specify a port number or a range of ports used by PCs from external network
to access your internal network.
MAC Filtering
A bridge WAN service is needed to configure this service.
MAC Filtering is only effective on ATM PVCs configured in Bridge mode. FORWARDED means that all MAC layer
frames will be forwarded except those matching with any of the specified rules in the following table. BLOCKED means
that all MAC layer frames will be blocked except those matching with any of the specified rules in the following table.
Choose Add or Remove to configure MAC filtering rules.
Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED
AUTOMATICALLY! You will need to create new rules for the new policy.
Here you can create a filter to identify the MAC layer frames by specifying at least one condition below. If multiple
conditions are specified, all of them take effect. Click Save/Apply to save and activate the filter.
Protocol Type: Select a protocol type from the drop-down list.
Destination MAC Address: Enter the MAC address of data frame being restricted to arrive.
Source MAC Address: Enter the MAC address of data frame being restricted to come.
Frame Direction: Select a frame direction from the drop-down list.
WAN Interfaces: Select a WAN interface from the drop-down list.
4.2.6 Parental Control
This section explains the following information:
90
• Time Restriction
• URL Filter
Time Restriction
Click Parental Control > Time Restriction > Add to enter the following screen.
Here you can add time of day restriction that an attached LAN device can access the Internet.
The Browser's MAC Address automatically displays the MAC address of the LAN device where the browser is running.
To restrict other LAN device, check the "Other MAC Address" option and enter its MAC address.
User Name: Enter a user name.
Browser's MAC Address: Automatically adds the MAC address of the attached LAN device where the browser is
running.
Other MAC Address: Specify the MAC address of the computer that you want to apply Internet access restriction.
Days of the week: Click to select the days of the week during which you wish to restrict Internet access.
Start Blocking Time/ End Blocking Time: Specify time of day restriction to an attached LAN device. Within this
specified time length of the day, this LAN device will be blocked from the Internet.
Apply/Save: Click to save and apply your settings.
URL Filter
Here you can add URL access restriction to specific LAN PCs.
91
Select the URL List Type (Exclude or Include) first and then click Add to enter the screen below for configuring the list
entries.
URL Address: Enter a specific URL or a key word of domain name in this field.
If you have accessed the URL before you include it in a URL filter rule, you must reboot the router and erase it from
your PC to activate this URL filter rule. To erase the domain name from your PC:
1. Click the keys +R on the keyboard to enable “Run” dialog, and type cmd > click OK.
(Note that different operation systems may have different ways to enable “Run”; Windows is taken a guide here.)
92
2. Then type ipconfig /flushdns and hit Enter on the keyboard.
When multiple devices each of which requests a different bandwidth attach to the modem router, to ensure the attached
devices obtaining a fair bandwidth and getting a fluent Internet experience, set a bandwidth control rule.
Check Enable Bandwidth Control to enable this feature.
93
Description: Name the bandwidth control rule as you like.
IP Address Range: Type the IP address range of target hosts. Follow the example.
If you want to set one host, follow the example.
Max Upstream Speed (Kbps): Set the upstream speed as your actual bandwidth need.
Max Downstream Speed (Kbps): Set the downstream speed as your actual bandwidth need.
Status: Enable or Disable.
After you have edited the details of the bandwidth control rule, click first to save and then click to
activate the settings.
4.2.8 Routing
This section explains the following:
• Default Gateway
• Static Route
Default Gateway
Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be
used according to the priority with the first being the highest and the last one the lowest priority if the WAN interface is
connected. Priority order can be changed by removing all and adding them back in again.
Selected Default Gateway Interfaces: Displays the selected default gateway interfaces. Select a WAN interface
and click the button to move it to the Available Routed WAN Interfaces box.
94
Available Routed WAN Interfaces: Displays the available routed WAN interfaces. Select a WAN interface and
click the button to add it to the Selected Default Gateway Interfaces box.
Apply/Save: Click to save and activate your settings.
Static Route
Static routes provide additional routing information to your router. Typically, you do not need to add static routes.
However, when there are several routers in the network, you may want to set up static routing. Static routing determines
the path of the data in your network. You can use this feature to allow users on different IP domains to access the Internet
via this device. It is not recommended to use this setting unless you are familiar with static routing. In most cases,
dynamic routing is recommended, because this feature allows the router to detect the physical changes of the network
layout automatically.
Click Add to enter the following screen:
IP Version: Select IP version.
Destination IP address/prefix length: Enter the destination IP address and prefix length of the final destination.
Interface: Select an interface from the drop-down list.
Gateway IP address: Enter the gateway IP address, which must be a router on the same LAN segment as the
95
router.
Metric: Enter a number in the Metric field. This stands for the number of routers between your network and the
destination.
Apply /Save: Click to apply and save your settings.
1. Destination IP address cannot be on the same IP segment as WAN or LAN segment as the router.
2. Only configure additional static routes for unusual cases such as multiple routers or multiple IP subnets located on
your network. Wrong static routes may lead to network failure.
3. For system created route, the “Remove” checkbox is disabled.
The DNS server translates domain names to numeric IP addresses. It is used to look up site addresses based on their
names. If the DNS server works incorrectly, Internet access will be blocked.
DNS server is configured when you are setting up your Internet connectivity. So, you do not have to finish DNS server
setup here unless your network works false.
For IPv4
①Click Advanced Setup > DNS > DNS Server, and enter the screen below.
96
②Check the Select DNS Server Interface from available WAN interfaces optionif the device gets a DNS
address automatically from an upstream device.Or select the Use the following Static DNS IP addressoption and
enter static DNS server address provided by your ISP.
③Click Apply/Save at the bottom of the page.
For IPv6
① Click Advanced Setup > DNS > DNS Server, and enter the screen below.
② Select the Obtain IPv6 DNS info from a WAN interface option if the device gets a DNS server address from
the upstream device automatically. And select a configured WAN interface for the IPv6 DNS server information.
Or select the Use the following Static IPv6 DNS address option and enter the static IPv6 DNS server address
provided by your ISP.
③Click Apply/Save.
NOTE
1. In ATM mode, if only a single PVC with IPoA or static IPoE protocol is configured, Static DNS server IP addresses
must be entered.
2. If you are not clear about the static DNS server IP information, ask your ISP to provide it.
3. The default settings are recommended if you are unsure about the DNS server addresses. If a wrong DNS server
address is configured, webpages may not be open.
Dynamic DNS (DDNS)
If your Internet service provider (ISP) gave you a static (fixed) public IP address, you can register a domain name and
have that name associated with your IP address by public Domain Name Servers (DNS). However, if your ISP gave you
a dynamic (changing) public IP address, you cannot predict what your IP address will be, and the address can change
frequently. In this case, you can use a commercial Dynamic DNS service. It allows you to register your domain to their
IP address and forward traffic directed at your domain to your frequently changing IP address. If your ISP assigns a
private WAN IP address (such as 192.168.x.x or 10.x.x.x), the Dynamic DNS service does not work because private
97
addresses are not routed on the Internet.
Click Advanced Setup > DNS > Dynamic DNS to enter the Dynamic DNS screen.
Click to configure the DDNS settings.
D-DNS Provider: Select your DDNS service provider from the drop-down menu.
Hostname: Enter the DDNS domain name registered with your DDNS service provider.
Interface: Specify a WAN connection interface.
Username: Enter the DDNS user name registered with your DDNS service provider.
Password: Enter the DDNS Password registered with your DDNS service provider.
①Select dyn.com from the D-DNS provider drop-down menu.
98
② Enter the hostname. Here is “tenda.dyndns.org” for example.
③ Specify a WAN connection interface.
DynDNS Settings
④ Enter your DynDNS username. Here is “tenda”
for example.
⑤ Enter the password of DynDNS account.
Here is “123456789” for example.
⑥ Click to save your configuration.
4.2.10 DSL
This screen provides multiple ASDL modulation modes to meet diversified environments. You can also select phone line
pair and Capability.
DSL parameter configurations must be supported by ISP to take effect. Actual parameters (see Statistics-DSL) resulted
from the negotiation between your router and ISP. Wrong configurations may fail your Internet access.
The best DSL configurations are the factory defaults. Only change them with the support of your ISP or our technical
staff when your router fails to negotiate with ISP in DSL (ATM) mode.
99
Check the checkbox next to a modulation to enable it and then click .
Advanced Settings: Click it to enter the Advanced Settings screen as below.