Page 1
User Guide
AC2600 Wireless Dual Band Gigabit Router
EC440-G4u
1910020863 REV1.0.0
Page 2
Contents
About This Guide .........................................................................................................1
Chapter 1. Get to Know Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
1. 1. Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. Physical Appearance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. 1. Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. 2. Back Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Chapter 2. Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
2. 1. Position Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2. 2. Connect Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 3. Log In to Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 4. Set Up Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
4. 1. Use Quick Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4. 2. Manually Set Up Your Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4. 3. Set Up an IPv6 Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Chapter 5. Multi-SSID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Chapter 6. USB Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
6. 1. Access the USB Storage Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
6. 1. 1. Access the USB Device Locally . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
6. 1. 2. Access the USB Device Remotely . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
6. 1. 3. View USB Storage Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
6. 1. 4. Customize the Access Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
6. 2. Media Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Chapter 7. Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Chapter 8. QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Chapter 9. Network Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
9. 1. Firewall & DoS Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Page 3
9. 2. Service Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
9. 3. Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
9. 4. IP & MAC Binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Chapter 10. NAT Forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
10. 1. Translate Address and Port by ALG. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
10. 2. Share Local Resources over the Internet by Virtual Server. . . . . . . . . . . . . . . . . . . 48
10. 3. Open Ports Dynamically by Port Triggering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
10. 4. Make Applications Free from Port Restriction by DMZ . . . . . . . . . . . . . . . . . . . . . . . 50
10. 5. Make Xbox Online Games Run Smoothly by UPnP . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Chapter 11. VPN Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
11. 1. Use OpenVPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
11. 2. Use PPTP VPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Chapter 12. Customize Your Network Settings. . . . . . . . . . . . . . . . . . . . . . . 60
12. 1. Change LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
12. 1. 1. Change the LAN IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
12. 1. 2. Use the Router as a DHCP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
12. 1. 3. Reserve LAN IP Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
12. 2. Configure IPv6 LAN Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63
12. 2. 1. Configure the RADVD Address Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
12. 2. 2. Configure the DHCPv6 Server Address Type . . . . . . . . . . . . . . . . . . . . . . 64
12. 3. Set Up a Dynamic DNS Service Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
12. 4. Create Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
12. 5. Set Up the IPv6 Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
12. 5. 1. Use the Public IPv6 Tunnel Service-6to4 . . . . . . . . . . . . . . . . . . . . . . . . . . 69
12. 5. 2. Specify the IPv6 Tunnel with Parameters Provided by Your ISP. . . . . 70
12. 6. Specify Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
12. 6. 1. Specify Basic Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
12. 6. 2. View Wireless Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
12. 6. 3. Advanced Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
12. 7. Use WPS for Wireless Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .75
12. 7. 1. Method 1: Use the WPS button. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
12. 7. 2. Method 2: Use the WPS button on the web management page . . . . 75
12. 7. 3. Method 3: Enter the router’s PIN on your client device . . . . . . . . . . . . . 75
12. 7. 4. Method 4: Enter the client device’s PIN on the router . . . . . . . . . . . . . . 76
12. 8. Schedule Your Wireless Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Page 4
Chapter 13. Manage Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
13. 1. Set System Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
13. 2. Test Internet Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
13. 3. Update the Firmware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
13. 4. Back Up and Restore Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
13. 5. Administration Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
13. 5. 1. Change the Login Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
13. 5. 2. Local Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
13. 5. 3. Remote Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
13. 5. 4. ICMP Ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
13. 6. System Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
13. 7. CWMP Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
13. 8. SNMP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
13. 9. Monitor the Internet Traffic Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
FAQ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Page 5
About This Guide
This guide is a complement to Quick Installation Guide. The Quick Installation Guide
provides instructions for quick internet setup, while this guide contains details of each
function and demonstrates how to configure them.
Please note that features of your router may vary slightly depending on the model
and software version you have, and on your location, language and internet service
provider. All images, parameters and descriptions documented in this guide are used
for demonstration only.
Conventions
In this guide the following conventions are used:
Convention Description
Underlined
Teal
>
Note:
Tips:
Symbols on the
web page
Hyperlinks are in teal and underlined. You can click to redirect to a website or a
specific section.
Key information appears in teal, including management page text such as
menus, items, buttons and so on.
The menu structures to show the path to load the corresponding page. For
example,
function page is under the Wireless menu that is located in the Advanced tab.
Ignoring this type of note might result in a malfunction or damage to the device.
Indicates important information that helps you make better use of your device.
•
•
•
•
Advanced > Wireless > Wireless Settings means the Wireless Settings
click to edit the corresponding entry.
click to delete the corresponding entry.
click to enable or disable the corresponding entry.
click to view more information about items on the page.
More Info
The latest firmware is available from the Download Center at www.tp-link.com/support.
The Quick Installation Guide can be found where you find this guide or inside the
package of the router.
Specifications can be found on the product page at
http://www.tp-link.com.
A Technical Support Forum is provided for you to discuss our products at
http://forum.tp-link.com.
Our Technical Support contact information can be found at the
Support
page at www.tp-link.com/support.
Contact Technical
1
Page 6
Chapter 1
Get to Know Your Router
This chapter introduces what the router can do and shows its appearance.
It contains the following sections:
Product Overview
•
• Physical Appearance
Page 7
Chapter 1
Get to Know Your Router
1. 1. Product Overview
The TP-Link router is designed to fully meet the need of Small Office/Home Office
(SOHO) networks and users demanding higher networking performance. The powerful
antennas ensure continuous Wi-Fi signal to all your devices while boosting widespread
coverage throughout your home, and the built-in Ethernet ports supply high-speed
connection to your wired devices.
Moreover, it is simple and convenient to set up and use the TP-Link router due to its
intuitive web interface.
1. 2. Physical Appearance
1. 2. 1. Front Panel
The router’s front panel contains LEDs and buttons. You can check the router’s working
status by following the LED Explanation table.
3
Page 8
Chapter 1
LED Explanation
Item Status Indication
Get to Know Your Router
On Power is on.
Power
2.4G
5G
Internet
WAN
LAN
WPS
Flashing
Off Power is off.
On The 2.4GHz wireless band is enabled.
Off The 2.4GHz wireless band is disabled.
On The 5GHz wireless band is enabled.
Off The 5GHz wireless band is disabled.
On Internet service is available.
Orange On
Off The router’s WAN port is unplugged.
On The router’s WAN port is connected.
Off The router’s WAN port is unplugged.
On
Off No powered-on device is connected to the router’s LAN port.
On/Off
Flashing WPS connection is in progress. This may take up to 2 minutes.
The system is starting up or the router is updating the firmware.
Do not disconnect or power off your router.
The router’s WAN port is connected, but the internet service
is unavailable.
At least a powered-on device is connected to the router’s LAN
port.
Turns on when a WPS synchronization is established and
automatically turns off about 5 minutes later.
On The USB device connected to the USB1 port is ready to use.
USB1
USB2
Flashing A USB device connected to the USB1 port is being identified.
Off No device is plugged into the USB1 port.
On The USB device connected to the USB2 port is ready to use.
Flashing A USB device connected to the USB2 port is being identified.
Off No device is plugged into the USB2 port.
The Wi-Fi button, WPS button and LED button are also located on the front panel.
• Wi-Fi button:
5GHz Wi-Fi.
Press and hold the Wi-Fi button for about two seconds to turn on or off the 2.4GHz and
• WPS button: Press and hold the WPS button for about two seconds to start a WPS synchronization.
• LED button: Press and hold the LED button for about two seconds to turn on or off all LEDs.
4
Page 9
Chapter 1
1. 2. 2. Back Panel
Get to Know Your Router
The router’s back panel contains the connection ports and buttons. Refer to the
following table for detailed instructions.
Item Description
WAN For connecting to a DSL/Cable modem, or an Ethernet jack.
LAN1, LAN2, LAN3,
LAN4
Reset
USB2 For connecting to a USB2.0 storage device.
USB1
On/Off The switch for the power. Press it to power on or off the router
Power For connecting the router to a power socket via the provided power adapter.
For connecting your PC or other Ethernet network devices to the router.
Press and hold down the Reset button for at least 5 seconds to reset the router
to its factory default settings.
For connecting to a USB3.0 storage device. It is also compatible with USB 2.0
devices.
5
Page 10
Chapter 2
Connect the Hardware
This chapter contains the following sections:
•
Position Your Router
• Connect Your Router
Page 11
Chapter 2
SB1
On/Off
Po
Connect the Hardware
2. 1. Position Your Router
• The product should not be located in a place where it will be exposed to moisture or
excessive heat.
• Place the router in a location where it can be connected to multiple devices as well as
to a power source.
• Make sure the cables and power cord are safely placed out of the way so they do not
create a tripping hazard.
• The router can be placed on a shelf or desktop.
• Keep the router away from strong devices with strong electromagnetic interference,
such as Bluetooth devices, cordless phones and microwaves.
2. 2. Connect Your Router
Follow the steps below to connect your router.
If your internet connection is through an Ethernet cable from the wall instead of through
a DSL / Cable / Satellite modem, connect the Ethernet cable directly to the router’s WAN
port as Step2B, and then follow Step 4 and 5 to complete the hardware connection.
Power Adapter
Power Adapter
Internet
1
2
WAN
LAN 1
LAN 2
LAN 3
3
4
LAN 4
Reset
USB2
USB1
On/Off
Power
1. Turn off the modem, and remove the backup battery if it has one.
2. Connect the modem to the router’s WAN port with an Ethernet cable.
3. Turn on the modem, and then wait about 2 minutes for it to restart.
4. Connect the power adapter to the router.
5. Verif y that the following LEDs are on and solid before continuing with the configuration.
7
Page 12
Chapter 2
C
e
W
n
Connect the Hardware
Power
On
2.4G
On
5G
On
Internet
On
Note: If the 2.4G LED and 5G LED are off, please press the WiFi button for 2 seconds and check the LEDs again a few
seconds later.
6. Connect your computer to the router.
• Method 1: Wired
Turn off the Wi-Fi on your computer and connect the devices as shown below.
WAN
LAN 1
LAN 2
LAN 3
LAN Ports
LAN 4
Reset
USB2
USB1
On/Off
Power
Ethernet cable
• Method 2: Wireless
1 ) Find the SSID (Network Name) and Wireless Password printed on the label at
the bottom of the router.
2 ) Click the network icon of your computer or go to Wi-Fi Settings of your smart
device, and then select the SSID to join the network.
Smart DeviceComputer
Wi-Fi
onnections are availabl
ireless Network Connectio
TP-Link_2.4G_XXXX
TP-Link_5G_XXXX
Connect automatically Connect
OR
< Settings
Wi-Fi
CHOOSE A NETWORK...
TP-Link_2.4G_XXXX
TP-Link_5G_XXXX
Other...
• Method 3: Use the WPS button
Wireless devices that support WPS, including Android phones, tablets, most USB
network cards, can be connected to your router through this method.
Note:
• WPS is not supported by iOS devices.
8
Page 13
Chapter 2
Connect the Hardware
• The WPS function cannot be configured if the wireless function of the router is disabled. Also, the WPS function
will be disabled if your wireless encryption is WEP. Please make sure the wireless function is enabled and is
configured with the appropriate encryption before configuring the WPS.
1 ) Tab the WPS icon on the device’s screen. Here we take an Android phone as an
example.
2 ) Within two minutes, press and hold the WPS button on your router for about
two seconds.
WLAN
On
TP-Link
HomeNetwork
2ƱFH
TP-Link_123
TP-Link_ABC
MyHome
Test
Close to
9
Page 14
Chapter 3
Log In to Your Router
Page 15
Chapter 3
Log In to Your Router
With a web-based utility, it is easy to configure and manage the router. The web-based
utility can be used on any Windows, Macintosh or UNIX OS with a Web browser, such as
Microsoft the Internet Explorer, Mozilla Firefox or Apple Safari.
Follow the steps below to log in to your router.
1. Set up the TCP/IP Protocol in
Obtain an IP address automatically mode on your
computer.
2. Visit
http://tplinkwifi.net, and create a login password for secure management. Then
enter the password again in the login page and click
Log in to get log in to your router.
Note:
If the login window does not appear, please refer to the FAQ section.
11
Page 16
Chapter 4
Set Up Internet Connection
This chapter introduces how to connect your router to the internet. The router is
equipped with a web-based Quick Setup wizard. It has necessary ISP information built
in, automates many of the steps and verifies that those steps have been successfully
completed. Furthermore, you can also set up an IPv6 connection if your ISP provides
IPv6 service.
It contains the following sections:
Use Quick Setup Wizard
•
• Manually Set Up Your Internet Connection
• Set Up an IPv6 Internet Connection
Page 17
Chapter 4
Set Up Internet Connection
4. 1. Use Quick Setup Wizard
The Quick Setup Wizard will guide you through the process to set up your router.
Tips:
If you need the IPv6 internet connection, please refer to the section of Set Up an IPv6 Internet Connection.
Follow the steps below to set up your router.
1. Visit
2. Click
http://tplinkwifi.net, and log in with the password you set for the router.
Quick Setup on the top of the page. Then follow the step-by-step instructions
to connect your router to the internet.
Note:
If you have changed the preset wireless network name (SSID) and wireless password during the Quick Setup process, all
your wireless devices must use the new SSID and password to connect to the router.
4. 2. Manually Set Up Your Internet Connection
In this part, you can check your current internet connection settings. You can also
modify the settings according to the service information provided by your ISP.
Follow the steps below to check or modify your internet connection settings.
1. Visit
2. Go to
3. Select your internet connection type from the drop-down list.
http://tplinkwifi.net, and log in with the password you set for the router.
Basic > Internet.
Note:
If you are unsure of what your connection type is, you can consult your ISP. Since different connection types require
different cables and connection information, you can also refer to the demonstrations in Step 4 to determine your
connection type.
4. Follow the instructions on the page to continue the configuration. Parameters on the
figures are just used for demonstration.
1 ) If you choose
Dynamic IP, you just need to click Save the make the settings
effective. Dynamic IP users are usually equipped with a cable TV or fiber cable.
13
Page 18
Chapter 4
Set Up Internet Connection
2 ) If you choose Static IP, enter the information provided by your ISP in the
corresponding fields.
3 ) If you choose PPPoE, enter the Username and Password provided by your ISP.
PPPoE users usually have DSL cable modems.
5. Click Save to make the settings effective, and you can refer to Test Internet
Connectivity
Note:
It may take 1-2 minutes to make the settings effective.
to test the Internet connection.
14
Page 19
Chapter 4
Tips:
1. You can check your internet connection by clicking Network Map on the left of the page.
2. If you use Dynamic IP and PPPoE and you are provided with any other parameters that are not required on the page,
please go to Advanced > Network > Internet to complete the configuration.
3. If you still cannot access the internet, refer to the FAQ section for further instructions.
Set Up Internet Connection
4. 3. Set Up an IPv6 Internet Connection
If your ISP provides information about one of the following IPv6 internet connection
types: PPPoE, Dynamic IP(SLAAC/DHCPv6) and Static IP, you can manually set up an
IPv6 connection.
If your ISP provides an IPv4-only connection or IPv6 tunnel service, permit IPv6
connection by referring to
Set Up the IPv6 Tunnel.
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > Network > Internet.
3. Select your WAN Interface Name (Status should be Connected) and click the (Edit)
icon.
4. Scroll down the page, enable
IPv6, and configure the IPv6 parameters.
• Addressing Type: Consult your ISP for the addressing type (DHCPv6 or SLAAC).
SLAAC is the most commonly used addressing type.
•
IPv6 Gateway: Keep the default setting.
Note: If your ISP has provided the IPv6 address, click Advanced to reveal more settings. You can check the
detailed settings of IPv6 and enter the parameters provided by your ISP.
15
Page 20
Chapter 4
Set Up Internet Connection
5. Click Save to make the settings effective. Now IPv6 service is available for your
network.
16
Page 21
Chapter 5
Multi-SSID
Multi-SSID function allows you to provide Wi-Fi access for your visitors without disclosing
your main network. When you have guests in your house, apartment, or workplace, you
can create a multi-SSID network for them. In addition, you can customize the network
settings to ensure network security and privacy.
Page 22
Chapter 5
¾ To create a multi-SSID network:
Multi-SSID
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you set for the router.
Basic > Multi-SSID or Advanced > Wireless > Multi-SSID.
3. Create the multi-SSID network as needed.
1 ) Click the 2.4GHz or 5GHz to set the 2.4GHz or 5GHz wireless network. You can
create three multi-SSID wireless networks at most in each wireless band.
2 ) Select the
3 ) Enter a new
sensitive. Don‘t select
Enable check box to create the corresponding multi-SSID network.
Network Name (SSID) or use the default name, this field is case-
Hide SSID unless you want your guests to manually input
the SSID for Wi-Fi access.
4 ) Select the
(Recommended)
See each other: Select the Allow guests to see each other check box if you
•
Security option for the multi-SSID network, WPA/WPA2 Personal
is recommended, and you can set a password the network.
want to allow the wireless clients on your multi-SSID network to communicate
with each other via methods such as network neighbors and Ping.
•
Access my local network: Select the Allow guests to access my local network
check box if you want to allow the wireless clients on your multi-SSID network
to communicate with the devices connected to your router’s LAN ports or main
network via methods such as network neighbors and Ping.
18
Page 23
Chapter 5
Multi-SSID
• USB storage sharing: Select the Allow guests to access my USB storage sharing
check box if you want the guests on your multi-SSID network to access your
USB device connected to the router.
4. Click
Save to make the settings effective. Now your guests can access your multi-
SSID network using the SSID and password if any.
Tips:
To view multi-SSID network information, go to Advanced > Status and locate the Multi-SSID panel.
19
Page 24
Chapter 6
USB Settings
This chapter describes how to use the USB port to share files and media from the USB
storage devices over your home network locally, or remotely through the internet.
The router supports USB external flash drives and hard drives.
This chapter contains the following sections:
Access the USB Storage Device
•
• Media Sharing
Page 25
Chapter 6
USB Settings
6. 1. Access the USB Storage Device
Insert your USB storage device into the router’s USB port and then access files stored
there locally or remotely.
Tips:
• If you use USB hubs, make sure no more than 4 devices are connected to the router.
• If the USB storage device requires using bundled external power, make sure the external power has been connected.
• If you use a USB hard drive, make sure its file system is FAT32 or NTFS. Some routers also support the HFS+ and exFAT
file systems.
• Before you physically disconnect a USB device from the modem router, safely remove it to avoid data damage: Go to
Advanced > USB Sharing > USB Storage Device and click
6. 1. 1. Access the USB Device Locally
Insert your USB storage device into the modem router’s USB port and then refer to the
following table to access files stored on your USB storage device:
¾ Method 1:
.
Windows
Computer
Go to
(
1. Operations in different systems are similar. Here we take Windows 7 as an example.
2. Network Server Name can be customized on the web management page.
Computer > Network, then click the Network Server Name
model number by default) in the Computer section.
Note:
21
Page 26
Chapter 6
USB Settings
¾ Method 2:
Windows
Computer
Open the
address
press
Windows Explorer (or go to Computer) and type the server
\\tplinkwifi.net or ftp://tplinkwifi.net in the address bar, then
Enter.
¾ Method 3:
Install an SFTP client (File Zilla) in your computer and configure
the protocol parameters (enter the LAN address of the router and
account username and password
admin).
1 ) Select Go > Connect to Server
Mac
Smart
Device
2 ) Type the server address smb://tplinkwifi.net
3 ) Click Connect
4 ) When prompted, select the Guest radio box. (If you have set up
a username and a password to deny anonymous access to the
USB disks, you should select the
learn how to set up an account for the access, refer to
Authentication for Data Security
Registered User radio box. To
To Set up
.)
Use a third-party app for network files management.
22
Page 27
Chapter 6
USB Settings
6. 1. 2. Access the USB Device Remotely
You can access your USB disk outside the local area network. For example, you can:
• Share photos and other large files with your friends without logging in to (and paying
for) a photo-sharing site or email system.
• Get a safe backup for the materials for a presentation.
• Remove the files on your camera’s memory card from time to time during your journey.
Note:
If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), you cannot use this feature because
private addresses are not routed on the internet.
Follow the steps below to configure remote access settings.
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > USB Sharing > Sharing Access page.
3. Select the
FTP (via Internet) check box and click Save.
4. Refer to the following table to access your USB disk remotely.
23
Page 28
Chapter 6
USB Settings
1 ) Open the Windows Explorer (or go to Computer, only for
Windows users) or open a web browser.
Windows
Computer
2 ) Type the server address
Type in
(such as
ftp://<WAN IP address of the router>:<port number>
ftp://59.40.2.243:21). If you have specified the
domain name of the router, you can also type in
name>:<port number>
The Address Bar of the Windows Explorer (Windows 7)
in the address bar:
ftp://<domain
(such as ftp://MyDomainName:21)
3 ) Press Enter on the keyboard.
4 ) Access with the username and password you set in
Authentication for Data Security
Tips:
You can also access the USB disk via a third-party app for network files management, which
can resume broken file transfers.
.
To Set up
Smart
Device
Tips:
Click Set Up a Dynamic DNS Service Account to learn how to set up a domain name for your modem router.
Use a third-party app for network files management.
6. 1. 3. View USB Storage Device
¾ To View USB Storage Device Status
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > USB Sharing > USB Storage Device or Basic > USB Sharing >
USB Storage Device
.
24
Page 29
Chapter 6
USB Settings
• Scan: Usually, router will automatically detect any newly inserted USB device. If
you find that your USB device is not listed in the USB Storage Device table, you
can click
•
Active: By default, the newly inserted USB device is accessible to all network
clients, you can click the active icon
Scan to refresh the web page with the updated information.
to hide the corresponding USB device
from access.
•
Operation: Click the button to take the USB device offline before
you remove the USB device physically.
6. 1. 4. Customize the Access Settings
By default, all the network clients can access all folders on your USB disk. You can
customize your sharing settings by setting a sharing account, sharing specific contents
and setting a new sharing address on the router’s web management page.
1. Visit
http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > USB Sharing > Sharing Access page.
¾ To Customize the Address of the USB Disk
You can customize the server name and use the name to access your USB disk.
1. In the
Sharing Settings section, make sure Network Neighborhood is selected, and
enter a Network/Media Server Name as you like, such as
MyShare, then click Save.
2. Now you can access the USB disk by visiting \\MyShare (for Windows) or smb://
MyShare
(for Mac).
¾ To Only Share Specific Content
1. Focus on the
Folder Sharing section. Turn off Share All , then click Add to add a new
sharing folder.
25
Page 30
Chapter 6
USB Settings
2. Select the Volume Name and Folder Path, then enter a Folder Name as you like.
3. Decide the way you share the folder:
•
Enable Authentication: By default, authentication is disabled for this folder
sharing, and you can select this check box to enable authentication and you
will be required to log in to the Sharing Account to access the USB disk. Refer
to
To Set up Authentication for Data Security to learn more.
•
Enable Write Access: If you select this check box, network clients can modify
this folder.
•
Enable Media Sharing: Select this check box to enable media sharing for this
folder, and you can view photos, play music and watch movies stored on the
USB disk directly from DLNA-supported devices. Refer to
Media Sharing to
learn more.
4. Click
OK to make the settings effective.
26
Page 31
Chapter 6
Tips:
The router can share 32 folders at most. You can click
want to share.
on the page to detach the corresponding folder you do not
USB Settings
¾ To Set up Authentication for Data Security
You can set up authentication for your USB device so that network clients will be
required to enter the username and password when accessing the USB disk.
1. In the
Sharing Account section, choose Use Default Account or Use New Account.
The user name is
account. If your choose
admin and the password is the login password for the default
Use New Account, you can create a new username and a
password.
Note:
For Windows users, do not set the sharing username the same as the Windows username. Otherwise, Windows
credential mechanism may cause the following problems:
• If the sharing password is also the same as the Windows password, authentication will not work since the
Windows system will automatically use its account information for USB access.
• If the sharing password is different from the Windows password, the Windows system will be unable to
remember your credentials and you will always be required to enter the sharing password for USB access.
2. Enable authentication to apply the account you just set.
• If you want to enable authentication for all folders, simply leave
Enable Authentication turned on.
Share All and
27
Page 32
Chapter 6
USB Settings
• If you want to enable authentication for specific folders, disable Share All and
click
Add to specify the folders by selecting the Enable Authentication check
box.
Note:
Due to Windows credential mechanism, you might be unable to access the USB disk after changing Authentication
settings. Please log out from the Windows and try to access again. Or you can change the address of the USB disk by
referring to To Customize the Address of the USB Disk
.
6. 2. Media Sharing
The feature of Media Sharing allows you to view photos, play music and watch movies
stored on the USB disk directly from DLNA-supported devices, such as your computer,
pad and PS2/3/4.
1. When your USB disk is inserted into the router, your DLNA-supported devices (such
as your computer and pad) connected to the router can detect and play the media
files on the USB disk.
2. Refer to the following table for detailed instructions.
28
Page 33
Chapter 6
Windows
Computer
USB Settings
• Go to Computer > Network, then click the Media Server Name (model
number by default) in the
Note:
Here we take Windows 7 as an example.
Media Devices section.
Smart
Device
• Use a third-party DLNA-supported player.
29
Page 34
Chapter 7
Parental Controls
This function allows you to block inappropriate, explicit and malicious websites, and
control access to specified websites at specified time.
Page 35
Chapter 7
Parental Controls
I want to:
How can I
do that?
Control what types of websites my children or other home
network users can visit and the time of day they are allowed to
access the internet.
For example, I want to allow my children’s devices (e.g. a computer
or a tablet) to access only www.tp-link.com and Wikipedia.org
from 18:00 (6 PM) to 22:00 (10 PM) on the weekdays and not
other time.
1. Visit
2. Go to
3. Click Add. And then Click View Existing Devices, and select
http://tplinkwifi.net, and log in with the password you
set for the router.
Advanced > Parental Controls and enable Parental
Controls
the connected device(s). Or, input the
Address
.
Device Name and MAC
manually.
4. Click the icon to set the Effective Time. Drag the cursor
over the appropriate cell(s) and click
OK.
31
Page 36
Chapter 7
Parental Controls
5. Enter a Description for the entry, select the Enable This Entry
check box, and then click OK.
6. Enable Content Restriction, and select Whitelist as the
restriction policy.
Tips:
• With Blacklist selected, the controlled devices cannot access any websites
containing the specified keywords during the Internet Access Time period.
• With Whitelist selected, the controlled devices can only access websites
containing the specified keywords during the Internet Access Time period.
7. Click Add a New Keyword and enter “www.tp-link.com” and
“Wikipedia.org” as the keywords and click
Save.
32
Page 37
Chapter 7
Parental Controls
8. You can add up to 32 keywords for either Blacklist or Whitelist.
Below are some sample entries for your reference.
• For Whitelist: Enter a web address (e.g. wikipedia.org) to allow access
only to its related websites. If you wish to block all Internet browsing
access, do not add any keyword to the
•
For Blacklist: Specify a web address (e.g. wikipedia.org), a web address
keyword (e.g. wikipedia) or a domain suffix (e.g. .edu or .org) to block
access only to the websites containing that keyword or suffix.
Whitelist.
Done!
Now you can control your children’s internet access as needed.
33
Page 38
Chapter 8
QoS
This chapter explains how to create the QoS (Quality of Service) rule to prioritize your
online activities, which minimizes the impact caused by heavy internet traffic.
Page 39
Chapter 8
QoS
Prioritize Internet Traffic with QoS
QoS (Quality of Service) is designed to ensure the efficient operation of the network
when network congestion is encountered.
I want to:
How can I
do that?
Specify the upstream and the downstream bandwidths used by
the devices connected to my router.
1. Enable QoS function and set bandwidth control method.
1 ) Visit
2 ) Go to
http://tplinkwifi.net, and log in with the password you
set for the router.
Advanced > QoS > Basic Settings, and enable QoS
of Upstream
and QoS of Downstream.
3 ) Select a Scheduler Algorithm as the network scheduling
discipline for upstream and downstream.
•
SP: Strict priority algorithm.
WRR: Weighted round robin algorithm.
•
4 ) Enter the maximum upload and download speed
bandwidth provided by your internet service provider in
the corresponding
5 ) Click
2. Specify the control mode for upstream and downstream.
1 ) Go to
Save to make the settings effective.
Advanced > QoS > SP/WRR Settings, and click Add
to create a queues for your network.
Total Bandwidth boxes.
35
Page 40
Chapter 8
QoS
2 ) Select the data flow direction, Upstream or Downstream.
3 ) Select a
the scheduler algorithm, or enter the
Precedence for the queue if you select SP as
Weight if you select
WRR as the scheduler algorithm.
•
Precedence: The queue’s packets get through network
more quickly with higher precedence. It ranges from 1
to 8, value1 is the highest precedence.
•
Weight: It is the queue’s quota bandwidth, calculated as
percentage of the total bandwidth.
4 ) Enter a description for the queue in the
5 ) Select
select
Enable this entry. For WRR algorithm, you can
Enable force weight if you want to always keep the
Queue Name box.
bandwidth quota for the queue even when it is idle.
6 ) Click
OK to make the settings effective.
7 ) Repeat step 1) - 6) to set other queues according to your
needs.
Tips:
You can click the icon
corresponding entry.
in the SP/WRR settings table to disable the
36
Page 41
Chapter 8
QoS
3. Set the flow classification based on the queues you set.
1 ) Go to
Advanced > QoS > Flow Classification, and click
Add to create a new class.
2 ) Enter a description for the class in the
and select the
Order.
Class Name box
• Order: Each packet can match only one flow
classification. Matching is started from the lower order
to the higher order.
3 ) Specify the classification criteria. The ingress interface
type is necessary and unique for each class. You can
enter other matching information according to your
needs.
• Ingress Interface: Select the interface you want to
control. 2.4GHz and 5.0GHz wireless networks are
regarded as an ingress interface respectively.
4 ) Specify the classification results.
37
Page 42
Chapter 8
QoS
• Queue: Select the queue you want to apply to this class.
•
Enable Policer: Select this check box to specify the
Committed Rate and Committed Burst Size if needed.
Done!
5 ) Click
OK to make the settings effective.
6 ) Repeat step 1)-5) to set other flow classes according to
your needs.
QoS is implemented to prioritize your internet traffic.
38
Page 43
Chapter 9
Network Security
This chapter guides you on how to protect your home network from unauthorized
users by implementing network security functions. You can block or allow specific
client devices to access your wireless network using MAC Filtering, or using Access
Control for wired and wireless networks, or you can prevent ARP spoofing and ARP
attacks by using IP & MAC Binding.
This chapter contains the following sections:
Firewall & DoS Protection
•
• Service Filtering
• Access Control
• IP & MAC Binding
Page 44
Chapter 9
Network Security
9. 1. Firewall & DoS Protection
DoS Protection can protect your home network against DoS attacks from flooding your
network with server requests. Follow the steps below to configure DoS Protection.
1. Visit
http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > Security > Firewall & DoS Protection.
Note: DoS Protection and Traffic Statistics must be enabled at the same time, you can go to Advanced > System
Tools > Traffic Statistics to enable traffic statistics function.
3. Enable DoS Protection.
4. Set the protection level (
Flood Attack Filtering
ICMP-Flood Attack Filtering - Enable to prevent the ICMP (Internet Control
•
Low, Middle or High) for ICMP-Flood Attack Filtering, UDP-
and TCP-Flood Attack Filtering.
Message Protocol) flood attack.
•
•
5. Click
UDP-Flood Attack Filtering - Enable to prevent the UDP (User Datagram
Protocol) flood attack.
TCP-Flood Attack Filtering - Enable to prevent the TCP (Transmission Control
Protocol) flood attack.
Save to make the settings effective.
40
Page 45
Chapter 9
Tips:
1. The level of protection is based on the number of traffic packets. You can specify the level under DoS Protection
Level Settings.
Network Security
2. The protection will be triggered immediately when the number of packets exceeds the preset threshold value,
and the vicious host will be displayed in the Blocked DoS Host List.
9. 2. Service Filtering
With Service Filtering, you can prevent certain users from accessing the specified
service, and even block internet access completely.
1. Visit
2. Go to
3. Enable
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > Security > Service Filtering.
Service Filtering.
4. Click Add.
41
Page 46
Chapter 9
5. Select a Service Type from the drop-down list and the following four fields will be
automatically filled in. Select
and enter the information manually.
Custom when your desired service type is not listed,
Network Security
6. Specify the IP address(es) that this filtering rule will apply to.
7. Click
Note: If you want to disable an entry, click the icon.
OK to make the settings effective.
9. 3. Access Control
Access Control is used to block or allow specific client devices to access your network
(via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed
devices (Whitelist).
I want to:
How can I
do that?
Block or allow specific client devices to access my network (via
wired or wireless).
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you
set for the router.
Advanced > Security > Access Control and enable
Access Control.
42
Page 47
Chapter 9
Network Security
3. Select the access mode to either block (recommended) or
allow the device(s) to access your network.
To block specific device(s):
1 ) Select
Blacklist and click Save.
2 ) Select the device(s) to be blocked in the Online Devices
table (or click the Add under the Devices in Blacklist and
enter the
3 ) Click
devices will be added to
Device Name and MAC Address manually).
Block above the Online Devices table. The selected
Devices in Blacklist automatically.
To allow specific device(s):
1 ) Select
Whitelist and click Save.
2 ) Click Add in the Devices in Whitelist section.
43
Page 48
Chapter 9
Network Security
3 ) Enter the Device Name and MAC Address. (You can copy
and paste the information from
the device is connected to your network.)
Online Devices table if
Done!
4 ) Click
Now you can block or allow specific client devices to access
your network (via wired or wireless) by
OK.
Blacklist or Whitelist.
9. 4. IP & MAC Binding
IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind
a network device’s IP address to its MAC address. This will prevent ARP spoofing and
other ARP attacks by denying network access to a device with a matching IP address in
the Binding list, but an unrecognized MAC address.
I want to:
How can I
do that?
Prevent ARP spoofing and ARP attacks.
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you
set for the router.
Advanced > Security > IP & MAC Binding and enable IP
& MAC Binding
.
44
Page 49
Chapter 9
Network Security
3. Bind your device(s) according to your needs.
To bind the connected device(s):
1 ) Select the device(s) to be bound in the
2 ) Click
Bind to add to the Binding List.
ARP List.
To bind the unconnected device:
1 ) Click
Add.
2 ) Enter the MAC Address and IP Address that you want to
bind.
3 ) Select the
entry and click
Enable This Entry check box to enable the
OK.
Done!
Enjoy the internet without worrying about ARP spoofing and
ARP attacks.
45
Page 50
Chapter 10
NAT Forwarding
Router’s NAT (Network Address Translation) feature makes the devices in the LAN
use the same public IP address to communicate in the internet, which protects the
local network by hiding IP addresses of the devices. However, it also brings about the
problem that external host cannot initiatively communicate with the specified device in
the local network.
The router can use a forwarding feature to remove the isolation of NAT and allow external
internet hosts to initiatively communicate with the devices in the local network, thus
enabling some special features.
TP-Link router includes four forwarding rules. If two or more rules are set, the priority
of implementation from high to low is Virtual Servers, Port Triggering, UPNP and DMZ.
This chapter contains the following sections:
Translate Address and Port by ALG
•
• Share Local Resources over the Internet by Virtual Server
• Open Ports Dynamically by Port Triggering
• Make Applications Free from Port Restriction by DMZ
• Make Xbox Online Games Run Smoothly by UPnP
Page 51
Chapter 10
NAT Forwarding
10. 1. Translate Address and Port by ALG
ALG (Application Layer Gateway) allows customized NAT (Network Address Translation)
traversal filters to be plugged into the gateway to support address and port translation
for certain application layer “control/data” protocols: FTP, TFTP etc. Enabling ALG is
recommended.
Visit
http://tplinkwifi.net, and log in with the password you set for the router. Go to
Advanced > NAT Forwarding > ALG.
• PPTP Pass-through: If enabled, it allows Point-to-Point sessions to be tunneled
through an IP network and passed through the router.
•
L2TP Pass-through: If enabled, it allows Layer 2 Point-to-Point sessions to be tunneled
through an IP network and passed through the router.
•
IPSec Pass-through: If enabled, it allows IPSec (Internet Protocol Security) to
be tunneled through an IP network and passed through the router. IPSec uses
cryptographic security services to ensure private and secure communications over
IP networks.
FTP ALG: If enabled, it allows FTP (File Transfer Protocol) clients and servers to transfer
•
data via NAT.
•
TFTP ALG: If enabled, it allows TFTP (Trivial File Transfer Protocol) clients and servers
to transfer data via NAT.
•
H323 ALG: If enabled, it allows Microsoft NetMeeting clients to communicate via NAT.
•
RTSP ALG: If selected, it allows media player clients to communicate with streaming
media servers via NAT.
•
SIP ALG: If enabled, it allows clients communicate with SIP (Session Initiation Protocol)
servers via NAT.
47
Page 52
Chapter 10
NAT Forwarding
10. 2. Share Local Resources over the Internet by
Virtual Server
When you build up a server in the local network and want to share it on the internet,
Virtual Server can realize the service and provide it to the internet users. At the same
time virtual server can keep the local network safe as other services are still invisible
from the internet.
Virtual server can be used for setting up public services in your local network, such as
HTTP, FTP, DNS, POP3/SMTP and Telnet. Different service uses different service port.
Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and
port 110 in POP3 service. Please verify the service port number before configuration.
I want to:
How can I
do that?
Share my personal website I’ve built in a local network with my
friends through the internet.
For example, the personal website has been built on my home
PC (192.168.0.100). I hope that my friends can visit my website.
The PC is connected to the router with the WAN IP address
218.18.232.154.
Personal Website
Home
LAN
Router
WAN: 218.18.232.154
1. Assign a static IP address to your PC, for example
192.168.0.100.
2. Visit
http://tplinkwifi.net, and log in with the password you
set for the router.
3. Go to
Advanced > NAT Forwarding > Virtual Servers, click
Add.
48
Page 53
Chapter 10
NAT Forwarding
Done!
4. Click View Existing Applications, and choose HTTP. The
external port, internal port and protocol will be automatically
filled in. Enter the PC’s IP address 192.168.0.100 in the
Internal IP field.
5. Click
Tips:
1. It is recommended to keep the default settings of Internal Port and Protocol
if you are not clear about which port and protocol to use.
2. If the service you want to use is not in the Service Type, you can enter the
corresponding parameters manually. You should verify the port number
that the service needs.
3. You can add multiple virtual server rules if you want to provide several
services from a router. Please note that the External Por t cannot be
overlapped.
OK to make the settings effective.
Internet users can enter http://WAN IP (in this example:
http://218.18.232.154) to visit your personal website.
Tips:
1. For a WAN IP that is assigned dynamically by ISP, it is recommended to apply
and register a domain name for the WAN by DDNS, go to Set Up a Dynamic
DNS Service Account for more information. Then you can use http://domain
name to visit the website.
2. If you have changed the default External Port, you should use http://WAN
IP: External Port or http://domain name: External Port to visit the website.
10. 3. Open Ports Dynamically by Port Triggering
Port triggering can specify a triggering port and its corresponding external ports.
When a host in the local network initiates a connection to the triggering port, all the
external ports will be opened for subsequent connections. The router can record the IP
49
Page 54
Chapter 10
NAT Forwarding
address of the host. When the data from the internet returns to the external ports, the
router can forward them to the corresponding host. Port triggering is mainly applied
to online games, VoIPs and video players. Common applications include MSN Gaming
Zone, Dialpad, Quick Time 4 players, and so on.
Follow the steps below to configure the port triggering rules:
1. Visit
http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > NAT Forwarding > Port Triggering and click Add.
3. Click View Existing Applications, and select the desired application. The triggering
port and protocol, the external port and protocol will be automatically filled in. Here
we take
MSN Gaming Zone as an example.
4. Click OK to make the settings effective.
Tips:
1. You can add multiple port triggering rules according to your network needs.
2. If the application you need is not listed in the Existing Applications list, you can enter the parameters manually. You
should verify the external ports the application uses first and enter them into External Port field according to the
format suggested.
10. 4. Make Applications Free from Port Restriction
by DMZ
When a PC is set to be a DMZ (Demilitarized Zone) host in the local network, it is totally
exposed to the internet, which can realize the unlimited bidirectional communication
between internal hosts and external hosts. The DMZ host becomes a virtual server with
50
Page 55
Chapter 10
all ports opened. When you are not clear about which ports to open in some special
applications, like IP camera and database software, you can set the PC to be a DMZ
host.
Note:
DMZ is most applicable when you don’t know which ports to open. When it is enabled, the DMZ host is totally exposed
to the internet, which may bring some potential safety hazards. If DMZ is not in use, please disable it in time.
NAT Forwarding
I want to:
How can I
do that?
Make the home PC join the internet online game without port
restriction.
For example, due to some port restriction, when playing the
online games, you can log in normally but cannot join a team
with other players. To solve this problem, set your PC as a DMZ
with all ports opened.
1. Assign a static IP address to your PC, for example
192.168.0.100.
2. Visit
3. Go to
http://tplinkwifi.net, and log in with the password you
set for the router.
Advanced > NAT Forwarding > DMZ and select the
Enable check box to turn on DMZ.
4. Enter the IP address 192.168.0.100 in the DMZ Host IP
Done!
Address
5. Click
The configuration is completed. You’ve set your PC to a DMZ
host and now you can join a team to game with other players.
box.
Save to make the settings effective.
10. 5. Make Xbox Online Games Run Smoothly by
UPnP
UPnP (Universal Plug and Play) protocol allows the applications or host devices
to automatically find the front-end NAT device and send request to it to open the
corresponding ports. With UPnP enabled, the applications or host devices in the both
sides of NAT device can freely communicate with each other realizing the seamless
51
Page 56
Chapter 10
NAT Forwarding
connection of the network. You need to enable the UPnP if you want to use applications
such as multiplayer gaming, peer-to-peer connections, real-time communication (for
example, VoIP or telephone conference), or remote assistance.
Tips:
1. UPnP is enabled by default in this router.
2. Only the application supporting UPnP protocol can use this feature.
3. UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc. Some
operating systems need to install the UPnP components).
For example, when you connect your Xbox to the router which has connected to
the internet to play online games, UPnP will send request to the router to open the
corresponding ports allowing the following data penetrating the NAT to transmit.
Therefore, you can play Xbox online games without a hitch.
LAN
RouterXbox
WAN
You can follow the steps to change the status of UPnP.
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you set for your router.
Advanced > NAT Forwarding > UPnP, and enable or disable UpnP according
to your needs.
52
Page 57
Chapter 11
VPN Server
The VPN (Virtual Private Networking) Server allows you to access your home network in
a secured way through internet when you are out of home. The router offers two ways
to setup VPN connection: OpenVPN and PPTP (Point to Point Tunneling Protocol) VPN.
OpenVPN is somewhat complex but with greater security and more stable. It is suitable
for restricted environment, such as campus network and company intranet.
PPTP VPN is more easily used and its speed is faster, it’s compatible with most operating
systems and also supports mobile devices. Its security is poor and your packets may
be cracked easily, and PPTP VPN connection may be prevented by some ISP.
This chapter contains the following sections, you can choose the appropriate VPN
server connection type as needed.
•
Use OpenVPN to Access Your Home Network
• Use PPTP VPN to Access Your Home Network
Page 58
Chapter 11
VPN Server
11. 1. Use OpenVPN to Access Your Home Network
In the OpenVPN connection, the home network can act as a server, and the remote
device can access the server through the router which acts as an OpenVPN Server
gateway. To use the VPN feature, you should enable OpenVPN Server on your router,
and install and run VPN client software on the remote device. Please follow the steps
below to set up an OpenVPN connection.
Router Home Network Remote Device
Step1. Set Up OpenVPN Server on Your Router
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
Note:
1. Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a
2. The first time you configure the OpenVPN Server, you may need to Generate a certificate before you enable the VPN
Advanced > VPN > OpenVPN, and select Enable VPN Server.
static IP address for router’s WAN port and synchronize your System Time with internet.
Server.
3. Select the Service Type (communication protocol) for OpenVPN Server: UDP, TCP.
4. Enter a VPN
Service Port to which a VPN device connects, and the port number
should be between 1024 and 65535.
5. In the
VPN Subnet/Netmask fields, enter the range of IP addresses that can be leased
to the device by the OpenVPN server.
54
Page 59
Chapter 11
VPN Server
6. Select your Client Access type. Select Home Network Only if you only want the
remote device to access your home network; select
Internet and Home Network if
you also want the remote device to access internet through the VPN Server.
7. Click
8. Click
Note:
If you have already generated one, please skip this step, or click Generate to update the certificate.
Save.
Generate to get a new certificate.
9. Click Export to save the OpenVPN configuration file which will be used by the remote
device to access your router.
Step 2. Configure OpenVPN Connection on Your Remote Device
1. Visit http://openvpn.net/index.php/download/community-downloads.html to
download the OpenVPN software, and install it on your device where you want to run
the OpenVPN client utility.
Note:
You need to install the OpenVPN client utility on each device that you plan to apply the VPN function to access your
router. Mobile devices should download a third-party app from Google Play or Apple App Store.
2. After the installation, copy the file exported from your router to the OpenVPN client
utility’s “config” folder (for example,
C:\Program Files\OpenVPN\config on Windows).
The path depends on where the OpenVPN client utility is installed.
3. Run the OpenVPN client utility and connect it to OpenVPN Server.
Tips:
You can go to Advanced > VPN > VPN Connections to view the clients that are currently connected to the OpenVPN
servers.
11. 2. Use PPTP VPN to Access Your Home Network
PPTP VPN Server is used to create a VPN connection for remote device. To use the VPN
feature, you should enable PPTP VPN Server on your router, and configure the PPTP
connection on the remote device. Please follow the steps below to set up a PPTP VPN
connection.
55
Page 60
Chapter 11
VPN Server
Step 1. Set Up PPTP VPN Server on Your Router
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
Note:
Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static
IP address for router’s WAN port and synchronize your System Time with internet.
Advanced > VPN Server > PPTP VPN, and select Enable VPN Server.
3. In the Client IP Address filed, enter the range of IP addresses (up to 10) that can be
leased to the devices by the PPTP VPN server.
4. Enter the
5. Click
Username and Password to authenticate clients to the PPTP VPN server.
Save to make the settings effective.
Step 2. Configure PPTP VPN Connection on Your Remote Device
The remote device can use the Windows built-in PPTP software or a third-party PPTP
software to connect to PPTP Server. Here we use the
Windows built-in PPTP software
as an example.
1. Go to
2. Select
Start > Control Panel > Network and Internet > Network and Sharing Center.
Set up a new connection or network.
56
Page 61
Chapter 11
VPN Server
3. Select Connect to a workplace and click Next.
4. Select Use my Internet connection (VPN).
57
Page 62
Chapter 11
VPN Server
5. Enter the internet IP address of the router (for example: 218.18.1.73) in the Internet
address
field. Click Next.
6. Enter the User name and Password you have set for the PPTP VPN server on your
router, and click
Connect.
58
Page 63
Chapter 11
VPN Server
7. The PPTP VPN connection is created and ready to use.
Tips:
You can go to Advanced > VPN > VPN Connections to view the clients that are currently connected to the PPTP VPN
servers.
59
Page 64
Chapter 12
Customize Your Network
Settings
This chapter introduces how to change the default settings or adjust the basic
configuration of the router using the web management page.
It contains the following sections:
Change LAN Settings
•
• Configure IPv6 LAN Settings
• Set Up a Dynamic DNS Service Account
• Create Static Routes
• Set Up the IPv6 Tunnel
• Specify Wireless Settings
• Use WPS for Wireless Connection
• Schedule Your Wireless Function
Page 65
Chapter 12
Customize Your Network Settings
12. 1. Change LAN Settings
12. 1. 1. Change the LAN IP Address
The router is preset with a default LAN IP 192.168.0.1, which you can use to log in to
its web management page. The LAN IP address together with the Subnet Mask also
defines the subnet that the connected devices are on. If the IP address conflicts with
another device in your local network or your network requires a specific IP subnet, you
can change it.
Follow the steps below to change your IP address.
1. Visit
2. Go to
3. Enter a new IP Address appropriate to your needs.
4. Select the Subnet Mask from the drop-down list. The subnet mask together with
5. Keep
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > Network > LAN Settings page and select IPv4.
the IP address identifies the local IP subnet.
IGMP Snooping enabled by default. IGMP snooping is the process of listening
to IGMP (Internet Group Management Protocol) network traffic. The function
prevents hosts on a local network from receiving traffic for a multicast group they
have not explicitly joined.
6. You can configure the router’s
through which you can also access the web management page.
7. Keep the rest settings as default.
8. Click
Save to make the settings effective.
Second IP and Subnet Mask for LAN interface
12. 1. 2. Use the Router as a DHCP Server
You can configure the router to act as a DHCP server to assign IP addresses to its clients.
To use the DHCP server function of the router, you must configure all computers on the
LAN to obtain an IP Address automatically.
61
Page 66
Chapter 12
Customize Your Network Settings
Follow the steps below to configure DHCP server.
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > Network > LAN Settings page and select IPv4.
3. Enable DHCP function and select DHCP Server.
4. Specify the IP Address Pool, the start address and end address must be on the
same subnet with LAN IP. The router will assign addresses within this specified
range to its clients. It is from 192.168.0.100 to 192.168.0.199 by default.
5. Enter a value for the
Address Lease Time. The Address Lease Time is the amount
of time in which a DHCP client can lease its current dynamic IP address assigned
by the router. After the dynamic IP address expires, the user will be automatically
assigned a new dynamic IP address. The default is 1440 minutes.
6. Keep the rest settings as default and click
Note:
1. The router can be configured to work as a DHCP Relay. A DHCP relay is a computer that forwards DHCP data
between computers that request IP addresses and the DHCP server that assigns the addresses. Each of the device’s
interfaces can be configured as a DHCP relay. If it is enabled, the DHCP requests from local PCs will be forwarded to
the DHCP server that runs on WAN side.
2. You can also appoint IP addresses within a specified range to devices of the same type by using Condition Pool
feature. For example, you can assign IP addresses within the range (192.168.1.50 to192.168.1.80) to Camera devices,
thus facilitating the network management. Enable DHCP feature and configure the parameters according to your
situation on the Advanced > Network > LAN Settings page.
Save.
12. 1. 3. Reserve LAN IP Addresses
You can view and add a reserved address for a client. When you specify an IP address
for a device on the LAN, that device will always receive the same IP address each time
when it accesses the DHCP server. If there are some devices in the LAN that require
permanent IP addresses, please configure Address Reservation on the router for the
purpose.
Follow the steps below to reserve an IP address for your devices.
62
Page 67
Chapter 12
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > Network > LAN Settings page and select IPv4.
3. Scroll down to locate the Address Reservation section and click Add to add an
address reservation entry for your device.
Customize Your Network Settings
4. Enter the MAC Address of the device for which you want to reserve IP address.
5. Specify the IP address which will be reserved by the router.
6. Check to
Enable This Entry and click OK to make the settings effective.
12. 2. Configure IPv6 LAN Settings
Based on the IPv6 protocol, the router provides two ways to assign IPv6 LAN addresses:
• Configure the RADVD (Router Advertisement Daemon) address type
• Configure the DHCPv6 Server address type
12. 2. 1. Configure the RADVD Address Type
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > Network > LAN Settings.
3. Select IPv6 to configure IPv6 LAN parameters.
63
Page 68
Chapter 12
Customize Your Network Settings
1 ) Select the RADVD as the address type to make the router assign IPv6 address
prefixes to hosts.
Note:
Do not select the Enable check boxes to enable RDNSS and ULA Prefix unless required by your ISP. Otherwise
you may not be able to access the IPv6 network. For more information about RDNSS and ULA Prefix, contact
our technical support.
2 ) Keep Site Prefix Type as the setting Delegated. If your ISP has provided a
specific IPv6 site prefix, select
3 ) Keep
WAN Connection as the default setting.
Static and enter the prefix.
4. Click Save to make the settings effective.
12. 2. 2. Configure the DHCPv6 Server Address Type
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
3. Select
Advanced > Network > LAN Settings.
IPv6 to configure IPv6 LAN parameters.
64
Page 69
Chapter 12
Customize Your Network Settings
1 ) Select the DHCPv6 Server as the address type to make the router assign IPv6
addresses to hosts.
2 ) Specify the
Starting/Ending IPv6 Address for the IPv6 suffixes. The router will
generate IPv6 addresses within the specified range.
3 ) Keep
4 ) Keep
5 ) Keep
4. Click
Address Lease Time as the default setting.
Site Prefix Type as the default setting Delegated. If your ISP has provided
a specific IPv6 site prefix, select
Static and enter the prefix.
WAN Connection as the default setting.
Save to make the settings effective.
12. 3. Set Up a Dynamic DNS Service Account
Most ISPs (Internet service providers) assign a dynamic IP address to the router and
you can use this IP address to access your router remotely. However, the IP address
can change any time and you don’t know when it changes. In this case, you might need
the DDNS (Dynamic Domain Name Server) feature on the router to allow you and your
friends to access your router and local servers (FTP, HTTP, etc.) using domain name, in
no need of checking and remembering the IP address.
Note:
DDNS does not work if the ISP assigns a private WAN IP address (such as 192.168.1.x) to the router.
To set up DDNS, please follow the instructions below:
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
Advanced > Network > Dynamic DNS.
3. Select the Service Provider (Dyndns or NO-IP).
65
Page 70
Chapter 12
Customize Your Network Settings
4. Log in with your DDNS account, select a service provider and click Go to register ...
Enter the username, password and domain name of the account (such as lisa.ddns.
net).
5. Click Log in and Save.
Tips:
If you want to use a new DDNS account, please log out first, then log in with the new account.
12. 4. Create Static Routes
A static route is a pre-determined path that network information must travel to reach
a specific host or network. Data from one point to another will always follow the same
path regardless of other considerations. Normal internet usage does not require this
setting to be configured.
I want to:
Visit multiple networks and multiple servers at the same time.
For example, in a small office, my PC can surf the internet, but I
also want to visit my company’s server. Now I have a switch and
another router. I connect the devices as shown in the following
figure so that the physical connection between my PC and my
company’s server is achieved. To surf the internet and visit my
company’s network at the same time, I need to configure the
static routing.
66
Page 71
Chapter 12
Customize Your Network Settings
How can I
do that?
Router A
LAN: 192.168.0.1
Switch
192.168.0.100
Router B
LAN: 192.168.0.2
PC
Company’s server
WAN: 172.30.30.100
172.30.30.1
1. Make sure the routers use different LAN IP addresses on the
same subnet. Disable Router 2’s DHCP function.
2. Visit
http://tplinkwifi.net, and log in with the password you
set for the router.
3. Go to
current
Advanced > Network > Static Routing. Select your
WAN Interface and click Save.
4. Click Add to add a new static routing entry. Finish the settings
according to the following explanations:
67
Page 72
Chapter 12
Customize Your Network Settings
• Network Destination: The destination IP address that you
want to assign to a static route. This IP address cannot be on
the same subnet with the WAN IP or LAN IP of the router. In
the example, the IP address of the company network is the
destination IP address, so here enters 172.30.30.1.
Done!
Subnet Mask: Determines the destination network with the
•
destination IP address. If the destination is a single IP address,
enter 255.255.255.255; otherwise, enter the subnet mask of
the corresponding network IP. In the example, the destination
network is a single IP, so here enters 255.255.255.255.
•
Gateway: The IP address of the gateway device to which the
data packets will be sent. This IP address must be on the
same subnet with the router’s IP which sends out the data. In
the example, the data packets will be sent to the LAN port of
Router 2 and then to the Server, so the default gateway should
be 192.168.0.2.
•
Interface: Determined by the port (WAN/LAN) that sends
out the data packets. In the example, the data is sent to the
gateway through the LAN port, so LAN should be selected.
5. Select the
6. Click
Enable This Entry check box to enable this entry.
Save to save the settings.
Open a web browser on your PC. Enter the company server’s IP
address to visit the company network.
68
Page 73
Chapter 12
Customize Your Network Settings
12. 5. Set Up the IPv6 Tunnel
The IPv6 Tunnel feature helps you obtain IPv6 resources based on an IPv4 WAN
connection or vice versa.
IPv6 Tunnel is a transition mechanism that enables IPv6-only hosts to reach IPv4
services or vice versa and allows isolated IPv6 hosts and networks to reach each other
over IPv4-only infrastructure before IPv6 completely supplants IPv4. It is a temporary
solution for networks that do not support native dual-stack, where both IPv6 and IPv4
run independently.
The router provides four tunneling mechanisms:
methods of setting up 6rd and DS-Lite tunnel are similar.
6to4, 6rd, DS-Lite and MAP-T. The
12. 5. 1. Use the Public IPv6 Tunnel Service-6to4
The 6to4 tunnel is a kind of public service. If there are any 6to4 servers on your network,
you can use this mechanism to access IPv6 service. If your ISP provides you with an
IPv4-only connection but you want to visit IPv6 websites, you can try to set up a 6to4
tunnel.
I want to:
How can I
do that?
Set up the IPv6 tunnel though my ISP doesn’t provide me with
the tunnel service.
1. Visit
2. Go to
3. Enable IPv6 Tunnel, and select 6to4 as the tunneling
http://tplinkwifi.net, and log in with the password you
set for the router.
Advanced > Network > IPv6 Tunnel.
mechanism and select a WAN connection from the dropdown list, then click
Save.
Done!
Note:
If there is no available WAN connection to choose, make sure you have
connected to the internet and the connection type is not Bridge.
Now you can visit the IPv6 websites with the 6to4 tunnel.
69
Page 74
Chapter 12
Note:
If you still can’t access IPv6 resources, it may means that no 6to4 public server was found in your network. You can
contact your ISP to sign up for IPv6 connection service.
Customize Your Network Settings
12. 5. 2. Specify the IPv6 Tunnel with Parameters Provided by Your ISP
I want to:
How can I
How can I
do that?
do that?
Specify the IPv6 tunnel with the parameters provided by my
tunnel service provider.
1. Visit
http://tplinkwifi.net, and log in with the password you
set for the router.
2. Go to
3. Enable
Advanced > Network > IPv6 Tunnel.
IPv6 Tunnel, and select the Tunneling Mechanism
(6rd, DS-Lite or MAP-T, we take 6rd as an example) and select
a WAN connection from the drop-down list.
4. According to the parameters provided by your ISP, choose
Auto or Manual as the configuration type. More parameters
are needed if you choose
5. Click
Save to make the settings effective.
Manual.
Note:
If there is no available WAN connection to choose, make sure you have
connected to the internet and the connection type is not Bridge.
Done!
Tips:
The way to set up DS-Lite tunnel is similar to that of 6rd tunnel. If you are provided with an IPv6-only WAN connection
and have signed up for DS-Lite tunnel service, specify the DS-Lite tunnel by referring to the steps above.
Now you can visit the IPv6 websites with the 6rd tunnel.
70
Page 75
Chapter 12
Customize Your Network Settings
12. 6. Specify Wireless Settings
12. 6. 1. Specify Basic Wireless Settings
The router’s wireless network name (SSID) and password, and security option are preset
in the factory. The preset SSID and password can be found on the label of the router.
You can customize the wireless settings according to your needs.
http://tplinkwifi.net, and log in with the password you set for the router.
Visit
¾ To enable or disable the wireless function:
1. Go to
Basic > Wireless.
2. The wireless radio is enabled by default. If you want to disable the wireless function
of the router, just clear the
Enable check boxes. In this case, all the wireless settings
will be invalid.
Tips:
You can also go to Advanced
and 5GHz page.
> Wireless > Wireless Settings to disable the corresponding wireless function in the 2.4GHz
¾ To change the wireless network name (SSID) and wireless password:
1. Go to
2. Enter a new SSID in the
Basic > Wireless.
Network Name (SSID) field and a new password in the
Password field. Both fields are case-sensitive.
Note:
If you change the wireless settings with a wireless device, you will be disconnected when the settings are effective.
Please write down the new SSID and password for future use.
¾ To hide SSID:
1. Go to
2. Select
Basic > Wireless.
Hide SSID, and your SSID won’t display when you scan for local wireless
networks on your wireless device and you need to manually join the network.
¾ To change the mode or channel:
Advanced > Wireless >Wireless Settings, and click the 2.4GHz or 5GHz.
Go to
Mode: Select a transmission mode according to your wireless client devices. It is
recommended to just leave it as default.
• 802.11n only: Select only if all of your wireless clients are 802.11n devices.
• 802.11gn mixed: Select if you are using both 802.11g and 802.11n wireless clients.
• 802.11bgn mixed: Select if you are using a mix of 802.11b, 11g, and 11n wireless
clients.
71
Page 76
Chapter 12
Note: When 802.11n only mode is selected, only 802.11n wireless stations can connect to the router. It is strongly
recommended that you select 802.11bgn mixed, and all of 802.11b, 802.11g, and 802.11n wireless stations can connect
to the router.
Customize Your Network Settings
• 802.11ac only (5GHz): Select only if all of your wireless clients are 802.11ac devices.
• 802.11ac/n mixed (5GHz): Select if you are using both 802.11ac and 802.11n wireless
clients.
• 802.11a/n/ac mixed (5GHz): Select if you are using a mix of 802.11a, 802.11n and
802.11ac wireless clients. It is strongly recommended that you select 11a/n/ac mixed.
Channel: Select the channel you want to use from the drop-down list. This field
determines which operating frequency will be used. It is not necessary to change the
wireless channel unless you notice interference problems with another nearby access
point.
Channel Width: Select the channel width from the drop-down list. The default setting is
Auto, which can adjust the channel width for your clients automatically.
Transmit Power: Select Low, Middle, or High to specify the data transmit power. The
default and recommended setting is
High.
¾ To change the security option:
1. Go to
2. Select the wireless network
3. Select an option from the
Advanced > Wireless > Wireless Settings.
2.4GHz or 5GHz.
Security drop-down list. We recommend you don’t change
the default settings unless necessary. If you select other options, configure the
related parameters according to the help page.
12. 6. 2. View Wireless Information
¾ To view the detailed wireless network settings:
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
3. Click 2.4GHz or 5GHz to view the wireless details.
Advanced > Status page. You will find the Wireless panel.
72
Page 77
Chapter 12
Tips: You can also see the wireless details by clicking the router icon on Basic> Network Map.
Customize Your Network Settings
¾ To view the detailed information of the connected wireless clients:
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
Advanced > Wireless > Statistics page.
3. You can view the detailed information of the wireless clients, including its connection
type and security option as well as the packets transmitted.
Tips: You can also see the wireless details by clicking the wireless clients icon on Basic > Network Map.
12. 6. 3. Advanced Wireless Settings
Advanced wireless settings are for those who want more network controls. If you are
not familiar with the settings on this page, it’s strongly recommended that you keep the
provided default values; otherwise it may result in lower wireless network performance.
1. Visit
2. Go to Advanced > Wireless > Advanced Settings.
http://tplinkwifi.net, and log in with the password you set for your router.
73
Page 78
Chapter 12
Customize Your Network Settings
• Beacon Interval: Enter a value between 100 and 1000 in milliseconds to determine the
duration between which beacon packets are broadcasted by the router to synchronize
the wireless network. The default is 100 milliseconds.
•
RTS Threshold: Enter a value between 1 and 2346 to determine the packet size of
data transmission through the router. By default, the RTS (Request to Send) Threshold
size is 2346. If the packet size is greater than the preset threshold, the router sends
Request to Send frames to a particular receiving station and negotiates the sending
of a data frame, or else the packet will be sent immediately.
•
DTIM Interval: Enter a value between 1 and 255 to determine the interval of the
Delivery Traffic Indication Message (DTIM). 1 indicates the DTIM Interval is the same
as
Beacon Interval.
Group Key Update Period: Enter the number of seconds to control the time interval
•
for the encryption key automatic renewal. The default is 0, indicating no key renewal.
•
WMM: This feature guarantees the packets with high-priority messages being
transmitted preferentially. WMM is enabled compulsively under 802.11n or 802.11ac
mode.
Short GI: This feature is enabled by default and recommended to increase the data
•
capacity by reducing the Guard Interval (GI) time.
•
AP Isolation: Select this check box to enable the AP Isolation feature that allows you
to confine and restrict all wireless devices on your network from interacting with each
other, but still able to access the internet. AP isolation is disabled by default.
•
Airtime Fairness Feature: Enable this feature if you want to sacrifice some of the
networking time from the slow devices, so that your faster devices can have better
quality of service.
74
Page 79
Chapter 12
Customize Your Network Settings
12. 7. Use WPS for Wireless Connection
You can use WPS (Wi-Fi Protected Setup) to add a new wireless device to your existing
network quickly and easily.
12. 7. 1. Method 1: Use the WPS button
Use this method if your client device has a WPS button.
1. Press and hold the WPS button of the router for about 2 seconds.
2. Press the WPS button of the client device directly.
3. The WPS LED flashes for about 2 minutes during the WPS process.
4. When the WPS LED is on, the client device has successfully connected to the router.
12. 7. 2. Method 2: Use the WPS button on the web management page
Use this method if your client device has a WPS button.
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > Wireless > WPS, locate the WPS Settings section and select
2.4GHz or 5GHz according to your needs.
3. Make sure the Enable WPS is turned on, and then click Connect.
4. Press the WPS button of the client device directly.
5. The WPS LED of the router flashes for about 2 minutes during the WPS process.
6. When the WPS LED is on, the client device has successfully connected to the
router.
12. 7. 3. Method 3: Enter the router’s PIN on your client device
Use this method if your client device asks for the router’s PIN.
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
75
Page 80
Chapter 12
Customize Your Network Settings
2. Go to Advanced > Wireless > WPS, locate the Router PIN section and select 2.4GHz
or
5GHz according to your needs.
3. Make sure the Enable Router’s PIN is turned on, and take a note of the current PIN
of the router. You can also click the
Generate button to get a new PIN.
4. On the client device, enter the router’s PIN. (The default PIN is also printed on the
label of the router.)
5. The WPS LED flashes for about two minutes during the WPS process.
6. When the WPS LED is on, the client device has successfully connected to the router.
Note:
1. The WPS LED on the router will light on for five minutes if the device has been successfully added to the network.
2. The WPS function cannot be configured if the wireless function of the router is disabled. Please make sure the
wireless function is enabled before configuring the WPS.
12. 7. 4. Method 4: Enter the client device’s PIN on the router
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
3. Make sure the
4. Enter the client device’s PIN, and then click the Connect button.
5.
Advanced > Wireless > WPS, locate the WPS Settings section and select
2.4GHz or 5GHz according to your needs.
Enable WPS is turned on, and then select PIN Number.
Device has been added successfully! or similar information will appear on the web
management page, which means the client device has successfully connected to
the router. And the WPS LED on the router will light on for five minutes.
76
Page 81
Chapter 12
Customize Your Network Settings
12. 8. Schedule Your Wireless Function
You can automatically turn off your wireless network when you do not need the wireless
connection.
1. Visit
http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > Wireless > Wireless Schedule.
3. Enable the Wireless Schedule function.
4. Drag the pointer to select the time when you want your wireless network off, and
then click
Save to make the settings effective
Note:
1. Make sure that the time of the router is correct before using this function. For details, refer to Set System Time.
2. The wireless LED will turn off if the corresponding wireless network is disabled.
3. The wireless network will be automatically turned on after the time period you set.
77
Page 82
Chapter 13
Manage Your Router
This chapter introduces how to change the system settings and administrate your
router’s network.
It contains the following sections:
Set System Time
•
• Test Internet Connectivity
• Update the Firmware
• Back Up and Restore Configuration Settings
• Administration Management
• System Log
• CWMP Settings
• SNMP Settings
• Monitor the Internet Traffic Statistics
Page 83
Chapter 13
Manage Your Router
13. 1. Set System Time
System time is the time displayed while the router is running. The system time you
configure here will be used for other time-based functions like Parental Controls and
Wireless Schedule. You can manually set how to get the system time.
Follow the steps below to set your system time.
1. Visit
2. Go to
3. Configure the system time using the following methods:
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > System Tools > Time Settings page.
Manually: Select your time zone, enter the date and select the local time.
Get from PC: Click this button if you want to use the current time of your PC.
Get from the Internet: Click this button if you want to get time from the internet.
Make sure your router can access the internet before you select this way to get
system time.
4. Click
Save to make the settings effective.
13. 2. Test Internet Connectivity
Diagnostics is used to test the connectivity between the router and the host or other
network devices.
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you set for your router.
Advanced > System Tools > Diagnostics.
79
Page 84
Chapter 13
Manage Your Router
3. Click Start to test the internet connectivity and you will find the test results in the
gray box.
13. 3. Update the Firmware
TP-Link is dedicated to improving product features, giving you a better network
experience.
We will inform you through the web management page if there’s any update firmware
available for your router. The latest firmware can also be downloaded from the
page of our website
Note:
1. Make sure that you have a stable connection between the router and your computer. It is NOT recommended to
upgrade the firmware wirelessly.
2. Back up your router configuration before upgrading the firmware.
3. DO NOT turn off the router during the firmware upgrade.
www.tp-link.com for free.
You can follow the steps below to manually update the firmware.
1. Download the latest firmware file for the router from our website
2. Visit
3. Go to
4. Focus on the
5. Focus on the
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > System Tools > Firmware Upgrade.
Device Information section. Make sure the downloaded firmware file
matches with the
Hardware Version.
Local Upgrade section. Click Browse to locate the downloaded new
firmware file, and click
Upgrade.
www.tp-link.com.
Support
80
Page 85
Chapter 13
6. Wait a few minutes for the upgrading and rebooting.
Manage Your Router
13. 4. Back Up and Restore Configuration Settings
The configuration settings are stored as a configuration file in the router. You can back
up the configuration file to your computer for future use and restore the router to a
previous settings from the backup file when needed. Moreover, if needed you can erase
the current settings and reset the router to its default factory settings.
1. Visit
2. Go to
Click
file will be stored to your computer.
1. Click
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > System Tools > Backup & Restore.
¾ To back up configuration settings:
Backup to save a copy of the current settings to your local computer. A conf.bin
¾ To restore configuration settings:
Browse to locate the backup configuration file stored on your computer, and
click
Restore
2. Wait a few minutes for the restoring and rebooting.
¾ To reset the router to factory default settings:
1. Click
Factory Restore to reset the router.
81
Page 86
Chapter 13
Manage Your Router
2. Wait a few minutes for the restoring and rebooting.
Note:
1. During the resetting process, do not turn off the router.
2. We strongly recommend you back up the current configuration settings before resetting the router.
13. 5. Administration Management
13. 5. 1. Change the Login Password
The account management feature allows you to change your login password of the web
management page.
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > System Tools > Administration page. Locate the Account
Management
section.
3. Enter the old password, then a new password twice (both case-sensitive).
4. Click
Save to make the settings effective.
5. Use the new password for future logins.
13. 5. 2. Local Management
You can control the local devices’ authority to manage the router via Local Management
feature. By default all local connected devices are allowed to manage the router. You
can also specify one device to manage the router and enable local management over
a more secure way, HTTPS.
82
Page 87
Chapter 13
Manage Your Router
Follow the steps below to allow only the specific device to manage the router via the
local management over HTTPS.
1. Visit
http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > System Tools > Administration, and locate the Local Management
section.
3. Keep the
Port as the default setting. Enable Management over HTTPS and keep the
Port for HTTPS as the default setting. Enter the IP address or MAC address of the
local device to manage the router.
4. Click Save.
Now, you can manage the router over both HTTP (
(
https://tplinkwifi.net).
http://tplinkwifi.net) and HTTPS
Note:
If you want all local devices can manage the router, just leave the IP/MAC Address field blank.
13. 5. 3. Remote Management
By default, the remote devices are not allowed to manage the router from the internet.
You can enable remote management over HTTP and/or HTTPS if needed. HTTPS is a
more secure way to access the router.
Note:
If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), you cannot use the remote management
feature because private addresses are not routed on the internet.
Follow the steps below to allow remote devices to manage the router over HTTPS.
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to
Management
Advanced > System Tools > Administration, and locate the Remote
section.
83
Page 88
Chapter 13
Manage Your Router
3. Enable Remote Management and Remote Management via HTTPS to allow for
HTTPS connection. Keep the
Port as the default setting.
4. Set the client device allowed for remote management. Select All to allow all remote
devices to manage the router. If you just want to allow a specific device to manage
the router, select
Only the Following IP/MAC Address and enter the IP/MAC address
of the remote device.
5. Click
Save.
All devices or the specific device on the internet can log in to your router using the
address displayed on the
Manage This Router via the Address field to manage the
router.
Tips:
1. If you were warned about the certificate when visiting the web management page remotely, click Trust (or a
similar option) to continue. To avoid this warning, you can download and install the certificate on the router’s web
management page at Advanced > System Tools > Administration.
2. The router’s WAN IP is usually a dynamic IP. Please refer to Set Up a Dynamic DNS Service Account if you want to log
in to the router through a domain name.
13. 5. 4. ICMP Ping
ICMP (Internet Control Message Protocol) Ping is used to diagnose the network by
sending ICMP echo request packets to the target remote or local host and waiting for
an ICMP response.
You can control the router’s replies to ICMP Ping requests.
1. Visit
http://tplinkwifi.net, and log in with the password you set for the router.
84
Page 89
Chapter 13
2. Go to Advanced > System Tools > Administration, and locate the ICMP Ping section.
3. Specify the ICMP Ping reply options.
•
•
Remote: Select it if you want the computers on a public network to ping the
router’s WAN IP address.
Local: Enabled by default, if enabled, the computers on a private network can
ping the router’s LAN IP address.
Manage Your Router
4. Click
Save to make the settings effective.
13. 6. System Log
System Log can help you know what happened to your router, facilitating you to locate
the malfunctions. For example when your router does not work properly, you may need
to save the system log and send it to the technical support for troubleshooting.
1. Visit
2. Click Advanced > System Tools > System Log page.
http://tplinkwifi.net, and log in with the password you set for the router.
¾ To view the system logs:
You can view specific system logs by selecting the log type and level.
Refresh to refresh the log list.
Click
¾ To save the system logs:
You can save the system logs to your local computer or a remote server.
Save Log to save the logs in a txt file to your computer.
Click
85
Page 90
Chapter 13
Click Log Settings to set the storage path of logs.
• Save Locally: Select this option to cache the system log to the router’s local memory,
select the minimum level of system log to be saved from the drop-down list. The logs
will be shown in the table in descending order on the System Log page.
Manage Your Router
•
Save Remotely: Select this option to send the system log to a remote server, select
the minimum level of system log to be saved from the drop-down list and enter the
information of the remote server. If the remote server has a log viewer client or a sniffer
tool implemented, you can view and analyze the system log remotely in real-time.
13. 7. CWMP Settings
The router supports CWMP (CPE WAN Management Protocol), also called TR-069. This
collects information, performs diagnostics and configures the devices automatically
via ACS (Auto-Configuration Server).
1. Visit
2. Go to
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > System Tools > CWMP Settings.
86
Page 91
Chapter 13
Manage Your Router
• CWMP: Enable or disable the CWMP (CPE WAN Management Protocol) function.
•
Inform: Enable or disable the function of sending an inform message to the ACS (Auto
Configuration Server) periodically.
•
Inform Interval: Set the time interval in seconds when the Inform message will be sent
to the ACS.
•
ACS URL: Enter the web address of the ACS which is provided by your ISP.
•
ACS Username/Password: Enter the username/password to log in to the ACS server.
•
Interface used by TR-069 client: Select which interface to be used by the TR-069
client.
•
Connection Request Authentication: Select this check box to enable authentication
for the connection request.
•
Username/Password: Enter the username/password for the ACS server to log in to
the router.
•
Path: Enter the path for the ACS server to log in to the router.
Port: Enter the port that connects to the ACS server.
•
•
URL: Enter the URL that connects to the ACS server.
87
Page 92
Chapter 13
• Get RPC Methods: Click to get the methods to support CWMP.
Click
Save to make the settings effective.
Manage Your Router
13. 8. SNMP Settings
SNMP (Simple Network Management Protocol) is widely used in network management
for network monitoring. It allows management applications to retrieve status updates
and statistics from the SNMP agent within this device. In this way, net work administrators
can easily search and modify the information on any node on the network. Meanwhile,
they can locate faults promptly and implement the fault diagnosis, capacity planning
and report generating.
SNMP Agent is an application running on the modem router that performs the
An
operational role of receiving and processing SNMP messages, sending responses to
the SNMP manager, and sending traps when an event occurs. So a router contains
SNMP “agent” software can be monitored and/or controlled by SNMP Manager using
SNMP messages.
1. Visit
2. Go to Advanced > System Tools > SNMP Settings.
• Enable SNMP Agent/SNMP Agent for WAN: Turn on to enable the built-in SNMP agent
that allows the router to operate as the operational role in receiving and processing
of SNMP messages, sending responses to the SNMP manager, and triggering SNMP
traps when an event occurs.
http://tplinkwifi.net, and log in with the password you set for the router.
Read-only Community: Displays the default public community string that protects the
•
router from unauthorized access.
88
Page 93
Chapter 13
• Write Community: Displays the default write community string that protects the router
from unauthorized changes.
•
System Name: Displays the administratively-assigned name for this managed device.
•
System Description: Displays the textual description of the managed device. This
value should include the full name and version identification of the system’s hardware
type, software operating-system, and networking software.
•
System Location: Displays the physical location of this device (for example, the
telephone closet, 3rd floor).
•
System Contact: Displays the textual identification of the contact person for this
managed device, together with information on how to contact this person.
•
Trap Manager IP: Displays the IP address of the host to receive the traps.
Manage Your Router
You are suggested to keep the default settings. Click
Save to make the settings effective.
13. 9. Monitor the Internet Traffic Statistics
The Traffic Statistics page displays the network traffic of the LAN, WAN and WLAN sent
and received packets, allowing you to monitor the volume of internet traffic statistics.
1. Visit
2. Go to Advanced > System Tools > Traffic Statistics.
3. Toggle on
http://tplinkwifi.net, and log in with the password you set for the router.
Enable Traffic Statistics to enable traffic statistics function, you can view
the total number of packets and bytes received and transmitted by the router within
the selected
Statistics Interval. This function is disabled by default.
4. You can refer to Traffic Statistics List for the detailed information about the traffic
usage of all devices.
89
Page 94
FAQ
Q1. What should I do if I forget my wireless password?
The default wireless password is printed on the label of the router. If the password has
been changed:
1. Connect your computer to the router using an Ethernet cable.
2. Visit
3. Go to
http://tplinkwifi.net, and log in with the password you set for the router.
Basic > Wireless to retrieve or reset your wireless password.
Q2. What should I do if I forget my web management password?
• Press and hold the Reset button of the router for at least 5 seconds until all LEDs turn
on momentarily to reset the router to its factory default settings, and then visit
tplinkwifi.net
Note: You’ll need to reconfigure the router to surf the internet once the router is reset, and please mark down your new
password for future use.
to create a new login password.
http://
Q3. What should I do if I cannot log in to the router’s web management
page?
This can happen for a variety of reasons. Please try the methods below to log in again.
• Make sure your computer is connected to the router correctly and the corresponding
LED indicator(s) light up.
• Make sure the IP address of your computer is configured as
automatically
• Make sure
and Obtain DNS server address automatically.
http://tplinkwifi.net or http://192.168.0.1 is correctly entered.
Obtain an IP address
• Check your computer’s settings:
1 ) Go to
status and tasks
2 ) Click
3 ) Click
Start > Control Panel > Network and Internet, and click View network
.
Internet Options on the bottom left.
Connections and select Never dial a connection.
90
Page 95
4 ) Click LAN settings and deselect the following three options and click OK.
5 ) Go to Advanced > Restore advanced settings, click OK to save the settings.
91
Page 96
• Use another web browser or computer to log in again.
• Reset the router to factory default settings and try again. If login still fails, please
contact the technical support.
Note: You’ll need to reconfigure the router to surf the internet once the router is reset.
Q4. What should I do if I cannot access the internet even though the
configuration is finished?
1. Visit http://tplinkwifi.net, and log in with the password you set for the router.
2. Go to Advanced > Status to check internet status:
As the following images shows, if IP Address is a valid one, please try the methods
below and try again:
92
Page 97
• Your computer might not recognize any DNS server addresses. Please manually
configure the DNS server.
1 ) Go to
2 ) Enter 8.8.8.8 as Primary DNS, click
Tips: 8.8.8.8 is a safe and public DNS server operated by Google.
Advanced > Network > LAN Settings.
Save.
• Restart the modem and the router.
1 ) Power off your modem and router, and leave them off for 1 minute.
2 ) Power on your modem first, and wait about 2 minutes until it gets a solid cable
or internet light.
3 ) Power on the router.
4 ) Wait another 1 or 2 minutes and check the internet access.
• Reset the router to factory default settings and reconfigure the router.
• Upgrade the firmware of the router.
93
Page 98
• Check the TCP/IP settings on the particular device if all other devices can get internet
from the router.
As the following image shows, if the IP Address is 0.0.0.0, please try the methods
below and try again:
• Make sure the physical connection between the router and the modem is proper.
• Clone the MAC address of your computer.
1 ) Visit
2 ) Go to
3 ) Choose an option as needed (enter the MAC address if
Tips:
• Some ISP will register the MAC address of your computer when you access the internet for the first time
• The MAC addresses of a computer in wired connection and wireless connection are different.
http://tplinkwifi.net, and log in with the password you set for the router.
Advanced > Network > Internet and click the edit icon to find the MAC
Clone
section.
Use Custom MAC
Address
through their Cable modem, if you add a router into your network to share your internet connection, the ISP will
not accept it as the MAC address is changed, so we need to clone your computer’s MAC address to the router.
is selected), and click OK.
• Modify the LAN IP address of the router.
94
Page 99
Note:
Most TP-Link routers use 192.168.0.1/192.168.1.1 as their default LAN IP address, which may conflict with the IP
range of your existing ADSL modem/router. If so, the router is not able to communicate with your modem and you
can’t access the internet. To resolve this problem, we need to change the LAN IP address of the router to avoid
such conflict, for example, 192.168.2.1.
1 ) Visit http://tplinkwifi.net, and log in with the password you set for the router.
2 ) Go to
Advanced > Network > LAN Settings.
3 ) Modify the LAN IP address as the follow image shows. Here we take 192.168.2.1
as an example.
4 ) Click
Save.
• Restart the modem and the router.
1 ) Power off your modem and router, and leave them off for 1 minute.
2 ) Power on your modem first, and wait about 2 minutes until it get a solid cable
or internet light.
3 ) Power on the router.
4 ) Wait another 1 or 2 minutes and check the internet access.
• Double check the internet connection type.
1 ) Confirm your internet connection type, which can be learned from the ISP.
2 ) Visit
3 ) Go to
4 ) Select your
5 ) Click
http://tplinkwifi.net, and log in with the password you set for the router.
Basic > Internet.
Internet Connection Type and fill in other parameters.
Save.
95
Page 100
6 ) Restart the modem and the router again.
• Please upgrade the firmware of the router.
If you’ve tried every method above but still cannot access the internet, please contact
the technical support.
Q5. What should I do if I cannot find my wireless network or I cannot
connect the wireless network?
If you fail to find any wireless network, please follow the steps below:
• Make sure the wireless function of your device is enabled if you’re using a laptop with
built-in wireless adapter. You can refer to the relevant document or contact the laptop
manufacturer.
• Make sure the wireless adapter driver is installed successfully and the wireless
adapter is enabled.
• On Windows 7 or higher
1 ) If you see the message
wireless function is disabled or blocked somehow.
2 ) Click
• On Windows XP
1 ) If you see the message
2 ) Exit the wireless configuration tool (the TP-Link Utility, for example).
3 ) Select and right click on
4 ) Expand
5 ) Right click
Troubleshoot and windows might be able to fix the problem by itself.
this is usually because windows configuration utility is disabled or you are
running another wireless configuration tool to connect the wireless.
Computer Management window.
Services and Applications > Services, find and locate Wireless Zero
Configuration
in the Services list on the right side.
Wireless Zero Configuration, and then select Properties.
No connections are available, it is usually because the
Windows cannot configure this wireless connection,
My Computer on desktop, select Manage to open
96
Loading...