TP-LINK CR500 User Manual
Archer CR500
User Guide
AC1200 Wireless Dual Band
DOCSIS 3.0 Cable Modem Router
REV1.0.0 1910011916
Contents
About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Chapter 1. Get to Know About Your Modem Router . . . . . . . . . . . . . . . . 2
1. 1. Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. Product Appearance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. 1. Front Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. 2. Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Chapter 2. Quick Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2. 1. Position Your Modem Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2. 2. Connect Your Modem Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2. 3. Activate Your Modem Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 3. Log into Your Modem Router. . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 4. Congure Internet Connections . . . . . . . . . . . . . . . . . . . . . . . 12
4. 1. Set Up an IPv6 Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4. 2. Test Internet Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4. 3. More Operation Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4. 3. 1. Bridge Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 5. Network Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
5. 1. Control Clients’ Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
5. 1. 1. Wireless MAC Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
5. 1. 2. Deny Access By IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
5. 1. 3. Deny Access By MAC Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
5. 1. 4. Deny Access By Port Number . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
5. 1. 5. Allow Access By Passthrough Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
5. 2. Use Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
5. 3. Email Local Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
5. 4. Record Log in a Remote Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Chapter 6. USB Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
6. 1. Local Storage Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
6. 1. 1. Access the USB Disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
6. 1. 2. Customize Your Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
6. 2. Remote Access via FTP Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
6. 2. 1. Access the USB Disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
6. 2. 2. Customize Your Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
6. 3. Media Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
6. 3. 1. Access the USB Disk . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
6. 3. 2. Customize Your Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
6. 4. Printer Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Chapter 7. Parental Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Chapter 8. Guest Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
8. 1. Create a Network for Guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
8. 2. Customize Guest Network Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Chapter 9. NAT Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
9. 1. Share Local Resources in the Internet by Port Forwarding. . . . . . . . . . . . . . . . . . . 53
9. 2. Open Ports Dynamically by Port Triggers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
9. 3. Free Applications from Port Restriction by DMZ . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Chapter 10. Specify Your Network Settings . . . . . . . . . . . . . . . . . . . . . . . . 57
10. 1. Internet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
10. 2. LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
10. 2. 1. Change the LAN IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
10. 2. 2. Use the Modem Router as a DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . 59
10. 3. Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
10. 3. 1. Specify Basic Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
10. 3. 2. Use WPS for Wireless Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
10. 3. 3. View Wireless Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
10. 3. 4. Advanced Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
10. 4. Set Up a Dynamic DNS Service Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Chapter 11. Administrate Your Network . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
11. 1. View Basic Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
11. 1. 1. View System Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
11. 1. 2. View Device Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
11. 1. 3. View Connection Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
11. 2. Set System Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
11. 3. Back up and Restore Conguration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
11. 4. Change the Administrator Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
11. 5. Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
11. 6. System Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Appendix: Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
About This Guide
This guide is a complementation of Quick Installation Guide. The Quick Installation
Guide instructs you on quick Internet setup, and this guide provides details of each
function and shows you the way to configure these functions appropriate to your
needs.
When using this guide, please notice that features of the router may vary slightly
depending on the model and software version you have, and on your location, language,
and Internet service provider. All screenshots, images, parameters and descriptions
documented in this guide are used for demonstration only.
Conventions
In this guide, the following conventions are used:
Convention
Blue Italic
Blue
>
Note:
Tips:
Symbols on the
web page
Description
Hyperlinks are in blue italic. You can click to redirect to a website or a specific
section.
Contents to be emphasized and texts on the web page are in blue, including the
menus, items, buttons, etc.
The menu structures to show the path to load the corresponding page. For
example, Advanced > Wireless 2.4GHz > MAC Filtering
function page is under the Wireless 2.4GHz menu that is located in the Advanced
tab.
Ignoring this type of note might result in a malfunction or damage to the device.
Indicates important information that helps you make better use of your device.
•
click to edit the corresponding entry.
•
click to delete the corresponding entry.
•
click to enable or disable the corresponding entry.
means the MAC Filtering
More Info
• The latest software, management app and utility can be found at Download Center at
http://www.tp-link.com/support.
• The Quick Installation Guide (QIG) can be found where you find this guide or inside
the package of the router.
• Specifications can be found on the product page at http://www.tp-link.com.
• A Technical Support Forum is provided for you to discuss our products at
http://forum.tp-link.com.
• Our Technical Support contact information can be found at the Contact Technical
Support page at http://www.tp-link.com/support.
1
Chapter 1
Get to Know About Your Modem Router
This chapter introduces the modem router and shows its appearance.
This chapter contains the following sections:
• Product Overview
• Product Appearance
Chapter 1
Get to Know About Your Modem Router
1. 1. Product Overview
TP-LINK’s Cable Modem Router is a combined wired/wireless network connection
device with integrated wireless router and DOCSIS 3.0 modem, reducing hassle of
configuration and saving space.
With Ethernet ports and antennas, the modem router provides wired and wireless
access for multiple computers and mobile devices.
With various features and functions, the modem router is the perfect hub of your home
or business network.
1. 2. Product Appearance
1. 2. 1. Front Panel
The front panel provides LEDs. You can check the modem router’s working status by
following the LED Explanation table.
LED Status
On Power is on.
Power
Off
Power is off. Please ensure that the power adapter is
connected correctly.
Indication
3
Chapter 1
Get to Know About Your Modem Router
LED Status
Downstream
Upstream
Internet
Indication
Green
White The modem router is synchronized with one channel.
Flashing The modem router is scanning for downstream channels.
Off
Green
White The modem router is synchronized with one channel.
Flashing
Off
On The network is available with a successful Internet connection.
Off
Flashing The modem router is initializing.
The modem router is synchronized with more than one
channel.
The initialization is not started, or has failed. Please refer to
Note 1 for troubleshooting.
The modem router is synchronized with more than one
channel.
The modem router is ranging or registering for upstream
channels.
The initialization is not started, or has failed. Please refer to
Note 1for troubleshooting.
No successful Internet connection is available. Please refer to
Note 2 for troubleshooting.
On At least one LAN port is connected.
LAN
Off No LAN port is connected.
On The wireless network is enabled.
Wireless
Off The wireless network is disabled.
On/Off
WPS
The LED stays on for 5 minutes when a WPS connection is
established before it turns off.
Flashing WPS connection is in progress. This may take up to 2 minutes.
On A USB device is detected and ready to use.
USB on the back
panel
Off No USB device is plugged in to the USB port.
Flashing A USB device is being detected.
Note:
1. If the Downstream LED or Upstream LED is off, check your Internet connection first. Refer to Connect Your Modem
Router for more information about how to make Internet connection correctly. If you have already made a right
connection, contact your ISP to make sure your Internet service is available now.
2. If the Internet LED is off, check your Downstream LED and Upstream LED first. If they are also off, please refer to
Note 1. If the downstream LED and Upstream LED are ON, check your Internet configuration. You may need to
check this part of information with your ISP and make sure everything have been input correctly.
4
Chapter 1
1. 2. 2. Back Panel
Get to Know About Your Modem Router
The back panel provides buttons and connection ports. Refer to the following for
detailed instructions.
Item
With the modem router powered on, use a pin to press and hold the Reset
Reset Button
WPS Button Press to start a WPS synchronization.
WiFi ON/OFF Button Press to turn the Wi-Fi on or off.
USB1 and USB2 Ports For connecting to USB storage devices or USB printers.
LAN1, LAN2, LAN3,
and LAN4 Ports
Cable Port For connecting to a coaxial cable.
DC Port
Power On/Off Button Press to power on or off the modem router.
button for at least 8 seconds. And the modem router will restore to its factory
default settings.
For connecting to your PCs or other Ethernet network devices.
For connecting the modem router to power socket via the provided power
adapter.
Description
5
Chapter 2
Quick Start
This chapter contains the following sections:
• Position Your Modem Router
• Connect Your Modem Router
• Activate Your Modem Router
Chapter 2
Quick Start
2. 1. Position Your Modem Router
With the modem router, you can access your network from anywhere within the wireless
network coverage. However, the wireless signal strength and coverage vary depending
on the actual environment of your modem router. Many obstacles may limit the range
of the wireless signal, for example, concrete structures or thick walls.
For your safety and best Wi-Fi performance, please:
• Do Not locate the modem router in the place where it will be exposed to moisture or
excessive heat.
• Keep away from the strong electromagnetic radiation and the device of
electromagnetic sensitive.
• Place the modem router where it can be connected to the various devices as well as
to a power source.
• Make sure the cables and power cord are safely placed out of the way to avoid a
tripping hazard.
Tips: The modem router can be placed on a shelf or desktop.
2. 2. Connect Your Modem Router
Before connecting the device, please make sure your broadband cable service provided
by your ISP is available. If there is any problem, please contact your ISP. Also, keep your
hands dry during connection. Follow the steps below to connect your modem router.
1. Connect the coaxial cable and power adapter to the modem router, then power on
your modem router.
Internet
Coaxial cablePower adapter
7
Chapter 2
Quick Start
2. Wait for about 1 minute until the following LEDs are solid on.
3. Connect your computer to the modem router.
Method 1: Wired
Connect your computer’s Ethernet port to a LAN port on the modem router via an
Ethernet cable.
Method 2: Wireless
Connect wirelessly by using the default SSID (Wireless Network Name) and Wireless
Password printed on the product label of the modem router.
Method 3: Use the WPS button
Wireless devices that support WPS, including Android phones, tablets, most USB
network cards, can be connected to your router through this method. (WPS is not
supported by iOS devices.)
Note:
The WPS function cannot be configured if the wireless function of the modem router is disabled. Also, the WPS
function will be disabled if your wireless encryption is WEP. Please make sure the wireless function is enabled and is
configured with the appropriate encryption before configuring the WPS.
1 ) Tab the WPS icon on the device’s screen.
2 ) Immediately press the WPS button on your modem router.
3 ) The WPS LED flashes for about two minutes during the WPS process.
4 ) When the WPS LED is on, the client device has successfully connected to the
modem router.
8
Chapter 2
SSID
Quick Start
2. 3. Activate Your Modem Router
1. Get your Internet service account information and the modem router’s Information
Card ready.
Information Card
Serial Number
MAC Address
Wi-Fi Password/PIN
2. Make sure your computer is set to dynamically obtain an IP address. If not, refer to
Appendix: Troubleshooting for instructions.
3. Launch a web browser, and visit any website. You will be automatically redirected
to your service provider’s self-activation page.
4. Follow the on-screen self-activation instructions to activate the modem router.
If you have any problem activating your modem router, call your ISP’s customer
service .
Contact information of major cable ISPs:
Bright House: 1-855-222-0102
Charter: 1-888-438-2427
Comcast: 1-855-OK-BEGIN (1-855-652-3446)
Cox: 1-888-556-1193
Time Warner Cable: 1-888-892-2253
The contact information listed might change. You can also find the contact information in your
monthly Internet service billing statement.
5. After activating your modem router successfully, wait for about 10 minutes till
these LEDs
Note:
1. If you are unable to access the Internet, refer to Appendix: Troubleshooting > T4 for instructions.
2. The product should be connected to cable distribution system that grounded (earthed) in accordance with ANSI/
NFPA 70, the National Electrical Code (NEC), in particular Section 820.93 - Grounding of Outer Conductive Shield
of a Coaxial Cable.
become solid on, then you can enjoy the Internet.
9
Chapter 3
Log into Your Modem Router
Chapter 3
Log into Your Modem Router
With a web management page, it is easy to configure and manage the modem router.
The web management page can be used on any Windows, Macintosh or UNIX OS with
a Web browser, such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari.
Follow the steps below to log into your modem router.
1. If the TCP/IP Protocol on your computer is set to the static (fixed) IP address,
you need to change it to obtain an IP address automatically. Refer to Appendix:
Troubleshooting > T7 to configure your computer.
2. Launch a web browser and go to http://tplinkmodem.net or http://192.168.1.1. Use
admin for both username and password, then click Log in.
Note: If the login page does not appear, please refer to Appendix: Troubleshooting > T3.
11
Chapter 4
Configure Internet Connections
This chapter introduces how to manually configure your Internet settings. Furthermore,
you can also set up an IPv6 connection if your ISP provides IPv6 service.
This chapter includes the following sections:
• Set Up an IPv6 Connection
• Test Internet Connectivity
• More Operation Modes
Chapter 4
Congure Internet Connections
4. 1. Set Up an IPv6 Connection
If your ISP has provided a line that supports IPv6 connection as well as some detailed
IPv6 parameters, you can manually set up an IPv6 connection.
Follow the steps below to set up an IPv6 connection:
1. Make sure you have set up an IPv4 connection by referring to Quick Start before
setting up an IPv6 connection.
2. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
3. Go to Advanced > Network > IPv6 LAN Settings. In the DHCPv6 Server Settings
section, configure the following parameters provided by your ISP.
• DHCPv6 Server: Select the checkbox to enable DHCPv6 server.
• Start Address: Enter a value for the DHCPv6 server to start with when issuing IP
addresses.
13
Chapter 4
Congure Internet Connections
• Number of addresses: Enter a value between 0-255 for DHCPv6 server preference. The
default value is 255.
• Valid Lifetime: The Valid Lifetime is the amount of time in which a network user will
be allowed connection to the modem router with their current dynamic IP address.
Enter the amount of time, in seconds, then the user will be assigned this dynamic
IP address. After the dynamic IP address has expired, the user will be automatically
assigned a new dynamic IP address. The default is 3600 seconds.
• Rapid Commit: Select the checkbox to enable the prefix fast distribution function.
• Unicast: Select the checkbox to enable the unicast function. The default setting is
disabled.
• Stateless DHCPv6: Stateless DHCPv6 is a combination of “stateless Address
Autoconfiguration” and “Dynamic Host Configuration Protocol for IPv6” and is
specified by RFC3736. Select the checkbox to enable this function.
4. Click Save to make the settings effective. Now IPv6 service is available for your
network.
4. 2. Test Internet Connectivity
After manually setting up the Internet connection, you need to test the Internet
connectivity. The modem router provides two diagnostic tools to help you locate the
malfunction.
1. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
2. Go to Advanced > System Tools > Diagnostics.
14
Chapter 4
Congure Internet Connections
3. Select Ping or Traceroute as the Diagnostic tool and enter the parameters according
to your needs.
• Ping is used to test the connectivity between the router and the tested host,
and measure the round-trip time.
IP Address: Enter the IP address that you want to ping.
Ping Packet Size: Enter the size of the ping packet you want to use.
Ping Count: Enter the number of times you want to ping the target device.
Ping Interval: Enter the time period between each ping.
• Traceroute is used to display the route (path) your router has passed to reach
the tested host, and measure transit delays of packets across an Internet
Protocol network.
IP Address/ Domain Name: Enter the IP Address or Domain Name you want to
trace.
Max Hops: Enter the max number of hops.
Data Size: Enter the size of data you want to use.
Base Port: Enter the port number to send packets.
Resolve Host: To resolve the host name to the IP address you can select ON
from the drop-down list. The default status is OFF.
4. Click Start Test to check the connectivity of the Internet. The page will display the
result of diagnosis.
Tips:
1. (For Ping only) Click Abort Test to end the connectivity of the Internet.
2. Click Clear Results to delete the logs.
15
Chapter 4
Congure Internet Connections
4. 3. More Operation Modes
The modem router supports two operation modes: Router Mode and Bridge Mode.
The modem router uses the Router Mode by default, and you can change the mode
according to your needs.
4. 3. 1. Bridge Mode
In this mode, the modem router can be configured to act as a bridging device between
your LAN and your ISP. Bridges are devices that enable two or more networks to
communicate as if they are two segments of the same physical LAN. If you were in
Bridge Mode, change the computer setting to obtain an IP address automatically. You
could log into the web management page at 192.168.100.1.
16
Chapter 5
Network Security
This chapter guides you on how to protect your home network from unauthorized
users by implementing the following network security functions. You can control
certain client devices’ access to the Internet, block certain data from getting through
your network, and get notified when a threat emerges or view log events.
• Control Clients’ Access
• Use Firewall
• Email Local Log
• Record Log in a Remote Server
Chapter 5
Network Security
5. 1. Control Clients’ Access
With the following functions,you can control wireless client devices’ access to the
Internet by Wireless MAC Filtering; you can also deny clients’ access by using clients’
IP address, MAC address and port number; meanwhile, you can allow clients’ access by
configuring Passthrough Options..
5. 1. 1. Wireless MAC Filtering
This function exploits the uniqueness of the MAC (Medium Access Control) address,
a unique 12-digit hexadecimal address (for example, D8:5D:4C:B4:46:EA) of every
network device, to determine if the device can or cannot access your wireless network.
I want to:
How can I
do that?
Prevent unauthorized users from accessing my wireless network
by utilizing the network device’s MAC address.
For example, I have a computer that is connected to my wireless
network. Now, an unknown device (an intruder) is also using my
wireless network, which affects my Internet speed. I would like
to control my wireless network with the following capabilities:
• My computer is always allowed to access the wireless network.
• The unknown device is not allowed to access the wireless
network.
• I don’t have to keep changing my wireless password as often.
1. Visit http://tplinkmodem.net, and log in with the username
(admin) and password (admin or the one customized by
you).
2. Go to Advanced > Wireless 2.4G or Wireless 5G > MAC
Filtering.
3. Select the wireless interface you want to configure and
enable MAC Filtering.
18
Chapter 5
Network Security
4. Select the filtering rule to either block (recommended) or
allow the device(s) in the list.
Done!
To block/allow specific device(s)
1 ) Select Block List (All devices in this list can not access this
router.) or Allow List (Only device in this list can access
this router.) and click Save.
2 ) Click Add.
3 ) Enter the MAC Address manually.
4 ) Click OK.
Now MAC Filtering is implemented to protect your wireless
network.
5. 1. 2. Deny Access By IP Address
If you want to deny clients’ access by IP address, follow the steps below to configure IP
Filtering:
19
Chapter 5
Network Security
1. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
2. Go to Advanced > NAT Forwarding > IP Filtering, click Add.
3. Enter the Start IP and End IP of the clients that cannot access this router. For example,
clients with the IP address of 192.168.1.20 to 192.168.1.30 cannot access the router.
4. Select Enable this Entry.
5. Click OK to save the settings.
5. 1. 3. Deny Access By MAC Address
If you want to deny clients’ access by MAC address, follow the steps below to configure
MAC Filtering:
1. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
2. Go to Advanced > NAT Forwarding > MAC Filtering, click Add.
20
Chapter 5
Network Security
3. Enter the MAC Address of the client that cannot access this router. For example,
clients with the MAC address of 00:23:45:67:89:AB cannot access the router.
4. Click OK to save the settings.
5. 1. 4. Deny Access By Port Number
If you want to deny access by using port numbers, follow the steps below to configure
Port Filtering:
1. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
2. Go to Advanced > NAT Forwarding > Port Filtering, click Add.
3. Enter the Start Port and End Port to deny access. Packets whose destination port
is within the specified port range will not be transmitted to the WAN side. For
example, if Start Port is 1 and End Port is 35, packets destined to Port 1 to Port 35
will all be denied.
4. Select the Protocol used for the specified ports, either TCP, UDP, or Both (all protocols
supported by the modem router).
5. Select Enable this entry.
6. Click OK to save the settings.
5. 1. 5. Allow Access By Passthrough Options
Passthrough Options allow specific services and clients to pass through the modem
router.
¾ To allow specific services to pass through the modem router:
21
Chapter 5
Network Security
1. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
2. Go to Advanced > NAT Forwarding > Options.
3. Follow the explanations to enable the corresponding options. It is recommended
to keep the default settings.
• IPSec Passthrough: Internet Protocol Security (IPSec) is a suite of protocols for ensuring
private, secure communications over Internet Protocol (IP) networks, through the use
of cryptographic security services. To allow IPSec tunnels to pass through the modem
router, enable IPSec Passthrough.
• PPTP Passthrough: Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point
Protocol (PPP) to be tunneled through an IP network. To allow PPTP tunnels to pass
through the modem router, enable PPTP Passthrough.
• Multicast Enable: Multicasting allows a single transmission to simultaneously reach
specific within your local network. Select the checkbox to enable multicasting.
• UPnP Enable: UPnP (Universal Plug and Play) protocol allows the applications or host
devices in the both sides of NAT device can freely communicate with each other
realizing the seamless connection of the network. You may need to enable the UPnP if
you want to use applications for multiplayer gaming, peer-to-peer connections, realtime communication (such as VoIP or telephone conference) or remote assistance,
etc. Select the checkbox to enable UPnP. This feature is enabled by default.
• FTP ALG Enable: To allow FTP clients and servers to transfer data across NAT, enable
FTP ALG Enable.
• TFTP ALG Enable: To allow TFTP clients and servers to transfer data across NAT, enable
TFTP ALG Enable.
22
Chapter 5
Network Security
• H225 ALG Enable: To allow H225 clients and servers to transfer data across NAT, enable
H225 ALG Enable.
• PPTP ALG Enable: To allow PPTP clients and servers to transfer data across NAT, enable
PPTP ALG Enable.
• SIP ALG Enable: To allow SIP clients and servers to transfer data across NAT, enable SIP
ALG Enable.
4. Click Save.
¾ To allow specific clients to pass through the modem router:
1. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
2. Go to Advanced > NAT Forwarding > Options, and find the PassThrough Mac
Addresses section.
3. Enter the MAC Address of the client whose IP address is assigned directly by the
server PC instead of the NAT gateway on the router.
4. Click OK to save the settings.
5. 2. Use Firewall
1. Visit http://tplinkmodem.net, and log in with the username (admin) and password
(admin or the one customized by you).
2. Go to Advanced > Firewall > Basic.
3. Configure the basic firewall settings according to the following explanations:
23
Loading...