
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered
trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are
trademarks or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to
make any derivative such as translation, transformation, or adaptation without permission
from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2007 TP-LINK TECHNOLOGIES
CO., Ltd. All rights reserved.
i

FCC STATEMENT
This equipment has been tested and found to comply with the limits for a class B digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation.
This equipment generates, uses and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful interference to
radio communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the
user is encouraged to try to correct the interference by one or more of the following
measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the receiver
is connected.
• Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following
two conditions:
(1) This device may not cause harmful interference.
(2) This device must accept any interference received, including interference that may
cause undesired operation.
EC DECLARATION OF CONFORMITY (EUROPE)
In compliance with the EMC Directive 89/336/EEC, Low Voltage Directive 2006/95/EC,
this product meets the requirements of the following standards:
• EN55022
• EN55024
• EN60950
SAFETY NOTICES
¾ Do not use this product near water, for example, in a wet basement or near a
swimming pool.
¾ Avoid using this product during an electrical storm. There may be a remote risk of
electric shock from lightning.
ii

COMMENT
Package contents ..........................................................................................1
Chapter 1. About this Guide ........................................................................ 2
1.1 Purposes............................................................................................................. 2
1.2 Conventions........................................................................................................ 2
1.3 Overview of this User Guide ............................................................................... 2
Chapter 2. Introduction ................................................................................ 3
2.1 Overview of the Router ....................................................................................... 3
2.2 Features.............................................................................................................. 3
2.3 Panel Layout....................................................................................................... 4
2.3.1 The Front Panel .................................................................................................. 4
2.3.2 The LEDs ............................................................................................................ 4
2.3.3 The Rear Panel................................................................................................... 4
Chapter 3. Connecting the Router ..............................................................6
3.1 System Requirements......................................................................................... 6
3.2 Installation Environment Requirements .............................................................. 6
3.3 Connecting the Router........................................................................................ 6
Chapter 4. Quick Installation Guide ............................................................ 8
4.1 TCP/IP configuration........................................................................................... 8
4.2 Quick Installation Guide...................................................................................... 9
Chapter 5. Configuring the Router............................................................13
5.1 Login ................................................................................................................. 13
5.2 Status................................................................................................................ 13
5.3 Quick Setup ...................................................................................................... 14
5.4 Network............................................................................................................. 14
5.4.1 LAN ................................................................................................................... 14
5.4.2 WAN.................................................................................................................. 15
5.4.3 MAC Clone........................................................................................................ 21
5.5 DHCP................................................................................................................ 22
5.5.1 DHCP Settings.................................................................................................. 22
5.5.2 DHCP Clients List ............................................................................................. 23
5.5.3 Address Reservation ........................................................................................ 23
5.6 Forwarding........................................................................................................ 25
5.6.1 Virtual Servers .................................................................................................. 25
5.6.2 Port Triggering .................................................................................................. 26
5.6.3 DMZ .................................................................................................................. 28
5.6.4 UPnP................................................................................................................. 29
5.7 Security............................................................................................................. 29
5.7.1 Firewall.............................................................................................................. 30
5.7.2 IP Address Filtering........................................................................................... 30
5.7.3 Domain Filtering................................................................................................ 32
iii iv

5.7.4 MAC Filtering .................................................................................................... 34
5.7.5 Remote Management ....................................................................................... 35
5.7.6 Ping from WAN ................................................................................................. 36
5.8 Static Routing ................................................................................................... 36
5.9 System Tools .................................................................................................... 37
5.9.1 Firmware ........................................................................................................... 37
5.9.2 Factory Defaults................................................................................................ 38
5.9.3 Reboot .............................................................................................................. 39
5.9.4 Password .......................................................................................................... 39
5.9.5 Log .................................................................................................................... 40
Appendix A: FAQ ......................................................................................41
Appendix B: Configuring the PCs ...........................................................44
Appendix C: Specifications .....................................................................49
Appendix D: Glossary ..............................................................................50
Appendix E: Contact Information............................................................51

TL-R402M Cable/DSL Router User Guide
Package contents
The following contents should be found in your box:
¾ One TL-R402M Cable/DSL Router
¾ One AC power Adapter for TL-R402M Cable/DSL Router
¾ Quick Installation Guide
¾ One Resource CD for TL-R402M Cable/DSL Router, including:
• This User Guide
• Other Helpful Information
Note: If any of the listed contents are damaged or missing, please contact the retailer from whom
you purchased the TL-R402M Cable/DSL Router for assistance.
-1-

TL-R402M Cable/DSL Router User Guide
Chapter 1. About this Guide
Thank you for choosing the TL-R402M Cable/DSL Router. This router provides dedicated
solutions for Small Office/Home Office (SOHO) networks. With your network all connected, your
local network can share Internet access, files and fun for multiple PCs through one ISP account.
It is an easy, web-based setup for installation and management. Even though you may not be
familiar with the router, this guide will make configuring the router easy. Before installing the
router, please look through this guide to get to know all the router’s functions.
1.1 Purposes
This Guide tells you how to use the TL-R402M Cable/DSL Router.
1.2 Conventions
The router mentioned in this guide stands for TL-R402M Cable/DSL Router.
The font of Aril + Bold in this guide stands for particular:
• The name that appears in web based utility screen
• The name of the prompt dialog box
The font of Aril + Bold in this guide stands for ping command
1.3 Overview of this User Guide
Chapter 1: About this Guide
Chapter 2: Introduction
Chapter 3: Connecting the Router
Chapter 4: Quick Installation Guide
Chapter 5: Configuring the Router
Appendix A: FAQ
Appendix B: Configuring the PCs
Appendix C: Specifications
Appendix D: Glossary
Appendix E: Contact Information
2

TL-R402M Cable/DSL Router User Guide
Chapter 2. Introduction
2.1 Overview of the Router
The TL-R402M Cable/DSL Router integrates a 4-port switch, firewall, and NAT-router. Its design is
dedicated to Small Office/Home Office (SOHO) network solutions. The TL-R402M Cable/DSL Router
will allow you to connect your network better than ever, sharing Internet Access, files and fun, easily
and securely.
The TL-R402M Cable/DSL Router provides flexible access control so that parents or network
administrators can establish restricted access policies for children or staff. It has built-in NAT and
DHCP server supporting static IP address distributing. It supports Virtual Server and DMZ host for
Port Triggering needs, and remote management and log so that network administrators can manage
and monitor the network on real time. It also supports VPN pass-through for sensitive data secure
transmission.
The TL-R402M Cable/DSL Router is easy-to-manage.
Quick Setup is supported and friendly help
messages are provided for every step. So you can configure it quickly and share Internet access,
files and fun comfortably.
2.2 Features
¾ Complies with IEEE802.3, IEEE802.3u standards
¾ Ignores Ping packets from WAN or LAN ports
¾ Ethernet connection to a WAN device, such as a Cable modem or DSL modem
¾ Shares data and Internet access for the network, connecting Internet through PPPoE on
demand and disconnecting when idle
¾ Built-in NAT and DHCP server supporting static IP address distributing
¾ Built in 4-port 10/100Mbps switch
¾ Built-in firewall supporting IP address filtering, Domain Name filtering, and MAC address
filtering
¾ Supports Virtual Server, Port Triggering, and DMZ host
¾ Supports TCP/IP, PPPoE,L2TP, DHCP, ICMP, NAT
¾ Supports UPnP, Static Routing, VPN pass-through
¾ Supports firmware upgrade
¾ Supports Remote and Web management
3

TL-R402M Cable/DSL Router User Guide
2.3 Panel Layout
2.3.1 The Front Panel
The front panel of the TL-R402M consists of several LED indicators, which is designed to indicate
connections.
2.3.2 The LEDs
1-4/WAN
2.3.2 The LEDs describes the LEDs on the front panel of the router.
Figure 2-1
Name Action Description
M1
M2
Not lit The router works properly
Lit up The router has a hardware error
Not lit The router has a hardware error
Lit up The router has a hardware error
Flashing The router works properly
Not lit There is no device linked to the corresponding port
Lit up
Flashing There is an active device linked to the corresponding port
There is a device linked to the corresponding port but no
activity
M1 and M2 are flashing,
synchronously, the router is
restoring the factory default
settings.
2.3.3 The Rear Panel
The rear panel contains the following features.
Factory Default Reset button
There are two ways to reset the router's factory defaults:
1. Use the Factory Defaults function on System Tools → Factory Defaults page in the
router's Web-based Utility.
2. Use the Factory Default Reset button: First, turn off the router's power. Second, press the
default reset button, then turn on the router's power, and hold the reset button until the M1
and M2 LED flash simultaneously (about 3 seconds). At last, release the reset button and
wait for the router to reboot.
4

TL-R402M Cable/DSL Router User Guide
Note:
Ensure the router is powered on before it restarts completely.
¾ WAN RJ45 port for connecting the router to a cable, DSL modem or Ethernet
¾ Four LAN 10/100Mbps RJ45 ports for connecting the router to the local PCs
¾ AC power socket: only use the power adapter supplied with the TL-R402M Cable/DSL Router,
use of a different adapter may result in product damage.
Figure 2-2 Rear Panel sketch
5

TL-R402M Cable/DSL Router User Guide
Chapter 3. Connecting the Router
3.1 System Requirements
¾ Broadband Internet Access Service (DSL/Cable/Ethernet)
¾ One DSL/Cable modem that has an RJ45 connector (It’s not necessary if you connect the
router to Ethernet)
¾ Each PC on the LAN needs a working Ethernet Adapter and an Ethernet cable with RJ45
connectors
¾ TCP/IP protocol must be installed on each PC
¾ Web browser, such as Microsoft Internet Explorer 5.0 or later, Netscape Navigator 6.0 or later
3.2 Installation Environment Requirements
¾ Not in direct sunlight or near a heater or heating vent
¾ Not cluttered or crowded. There should be at least 2 inches (5 cm) of clear space on all sides
of the router
¾ Well ventilated (especially if it is in a closet)
¾ Operating temperature: 0℃~40℃ (32℉~104℉)
¾ Operating Humidity: 10%~90%RH, Non-condensing
3.3 Connecting the Router
Before you install the router, you should connect your PC to the Internet through your broadband
service successfully. If there is any problem, please contact with your ISP for help. After that,
please install the router according to the following steps. Don't forget to pull out the power plug
and keep your hands dry.
1. Power off your PC(s), Cable/DSL modem, and the router.
2. Connect the PC(s) and all Switches/Hubs on your LAN to the LAN Ports on the router, shown
in figure 3-1.
3. Connect the DSL/Cable modem to the WAN port on the router, shown in figure 3-1.
4. Connect the AC power adapter to the AC power socket on the router, and the other end into
an electrical outlet. The router will start to work automatically.
5. Power on your PC(s) and Cable/DSL modem.
6

TL-R402M Cable/DSL Router User Guide
Figure 3-1 Hardware Installation of the TL-R402M Cable/DSL Router
7

TL-R402M Cable/DSL Router User Guide
Chapter 4. Quick Installation Guide
After connecting the TL-R402M router into your network, you should configure it. This chapter
describes how to configure the basic functions of your TL-R402M Cable/DSL Router. These
procedures only take you a few minutes. You can access the Internet via the router immediately
after it has been successfully configured.
4.1 TCP/IP configuration
The default IP address of the TL-R402M Cable/DSL Router is 192.168.1.1, and the default
Subnet Mask is 255.255.255.0. These values can be seen from the LAN, and can be changed as
your desire. As an example, we use the default values for description in this guide.
Connect the local PCs to the LAN ports on the router. There are then two means to configure the
IP address for your PCs.
¾ Configure the IP address manually (Recommended)
1) Set up the TCP/IP Protocol for your PC(s).
2) Configure the network parameters. The IP address is 192.168.1.xxx ("xxx" is from 2 to
254), Subnet Mask is 255.255.255.0, and Gateway is 192.168.1.1 (The router's default
IP address)
¾ Obtain an IP address automatically
1) Set up the TCP/IP Protocol in "Obtain an IP address automatically" mode on your PC(s).
2) Power off the router and PC(s). Then turn on the router, and restart the PC(s). The
built-in DHCP server will assign IP addresses for the PC(s).
Note:
If you need instructions as to how to do this, please refer to
Now, you can run the Ping command in the command prompt to verify the network connection
between your PC(s) and the router. The following example is in Windows 2000.
Open a command prompt, and type ping 192.168.1.1, and then press Enter.
Appendix B: "Configuring the PCs."
Figure 4-1 Successful result of Ping command
If the result displayed is similar to what is shown in
and the router has been established.
8
Figure 4-1, the connection between your PC

TL-R402M Cable/DSL Router User Guide
Figure 4-2 Failed result of Ping command
If the result displayed is similar to what shown in
connected to the router. If so, refer to the following steps for a solution.
1 Is the connection between your PC and the router correct?
Note:
The Link/Act LEDs of LAN port on the router and LEDs on your PC's adapter should be lit.
2 Is the TCP/IP configuration for your PC correct?
Note:
If the router's IP address is 192.168.1.1, your PC's IP address must be within the range of
192.168.1.2 ~ 192.168.1.254, the gateway must be 192.168.1.1.
Figure 4-2 it means that your PC has not
4.2 Quick Installation Guide
With a Web-based (Internet Explorer or Netscape® Navigator) utility, the TL-R402M Cable/DSL
Router is easy to configure and manage. The Web-based utility can be used on any Windows,
Macintosh or UNIX OS with a web browser.
Connect to the router by typing http://192.168.1.1 in the address field of web browser.
Figure 4-3 Login to the router
After a moment, a login window will appear similar to that shown in Figure 4-4. Enter admin for
the User Name and Password, both in lower case letters. Then click the OK button or press the
Enter key.
9

TL-R402M Cable/DSL Router User Guide
Figure 4-4 Login Windows
Note:
If the above screen does not prompt, it means that your web-browser has been set to a proxy. Go
to Tools menu>Internet Options>Connections>LAN Settings, in the screen that appears,
cancel the Using Proxy checkbox, and click OK to finish it.
If the User Name and Password are correct, you can configure the router using the web browser.
Please click the Quick Setup link on the left of the main menu and the Quick Setup screen will
appear.
Figure 4-5 Quick Setup
Click Next, the Choose WAN Connection Type page will appear, shown in
Figure 4-6.
10

TL-R402M Cable/DSL Router User Guide
Figure 4-6 Choose WAN Connection Type
The router supports three popular ways to connect to Internet. Please select one compatible with
your ISP, click Next to enter the necessary network parameters.
If you choose "PPPoE", you will see this page shown in
Figure 4-7:
Figure 4-7 Quick Setup - PPPoE
¾ User Name and Password - Enter the User Name and Password provided by your ISP.
These fields are case sensitive. If you have difficulty with this process, please contact your
ISP
If you choose "Dynamic IP", the router will automatically receive the IP parameters from your ISP
without needing to enter any parameters.
If you Choose "Static IP", the Static IP settings page will appear, shown in
Figure 4-8:
Figure 4-8 Quick Setup - Static IP
¾ IP Address - This is the WAN IP address as seen by external users on the Internet (including
your ISP). Enter the IP address into the field
11

TL-R402M Cable/DSL Router User Guide
¾ Subnet Mask - The Subnet Mask is used for the WAN IP address, it is usually 255.255.255.0
¾ Default Gateway - Enter the gateway into the box if required
¾ Primary DNS - Enter the DNS Server IP address into the boxes if required
¾ Secondary DNS - If your ISP provides another DNS server, enter it into this field
Note:
The IP parameters should have been provided by your ISP.
Click the Next button, then you will see the Finish page:
Figure 4-9 Quick Setup - Finish
After finishing all configurations of basic network parameters, please click Finish button to exit
this Quick Setup.
12

TL-R402M Cable/DSL Router User Guide
Chapter 5. Configuring the Router
This chapter describes each web page's key functions.
5.1 Login
After your successful login, you can configure and manage the router. There are eight main
menus on the left of the web-based utility. Submenus will be available after you click one of the
main menus. The eight main menus are: Status, Quick Setup, Network, DHCP, Forwarding,
Security, Static Routing and System Tools. On the right of the web-based utility, there are the
detailed explanations and instructions for the corresponding page. To apply any settings you have
altered on the page, please click the Save button.
There are the detailed explanations for each web page's key functions below.
5.2 Status
The Status page displays the router's current status and configuration. All information is
read-only.
LAN
This field displays the current settings or information for the LAN, including the MAC address, IP
address and Subnet Mask.
WAN
These parameters apply to the WAN port of the router, including MAC address, IP address,
Subnet Mask, Default Gateway, DNS server and WAN connection type. If PPPoE is chosen
as the WAN connection type, the Disconnect button will be shown here while you are accessing
the Internet. You can also cut the connection by clicking the button. If you have not connected to
the Internet, a Connect button will be shown, you can then establish the connection by clicking
the button.
Traffic Statistics
This field displays the router's traffic statistics.
System Up Time
The time of the router running from the time it is powered on or is reset.
13

TL-R402M Cable/DSL Router User Guide
Figure 5-1 Router Status
5.3 Quick Setup
Please refer to Section 4.2: "Quick Installation Guide."
5.4 Network
- Network
y LAN
y WAN
y MAC Clone
Figure 5-2 The Network menu
There are three submenus under the Network menu (shown in
Clone. Click any of them, and you will be able to configure the corresponding function. The
detailed explanations for each submenu are provided below.
5.4.1 LAN
Figure 5-2): LAN, WAN and MAC
You can configure the IP parameters of the LAN on this page.
14

TL-R402M Cable/DSL Router User Guide
Figure 5-3 LAN
¾ MAC Address - The physical address of the router, as seen from the LAN. The value can't
be changed
¾ IP Address - Enter the IP address of your router in dotted-decimal notation (factory default:
192.168.1.1)
¾ Subnet Mask - An address code that determines the size of the network. Normally use
255.255.255.0 as the subnet mask
Note:
1. If you change the IP address of the LAN, you must use the new IP address to login to the
router.
2. If the new LAN IP Address you set is not in the same subnet, the IP Address pool in the
DHCP sever will not take effect, until they are re-configured.
3. If the new LAN IP Address you set is not in the same subnet, the Virtual Server and DMZ
Host may change accordingly at the same time, you’d better re-configure it as well.
5.4.2 WAN
You can configure the WAN port parameters on this page.
First, please choose the WAN Connection Type (Dynamic IP/Static IP/PPPoE/L2TP) to the
Internet. The default type is PPPoE. If you aren’t given any login parameters (fixed IP address,
logging ID, etc), please select Dynamic IP. If you are given a fixed IP (static IP), please select
Static IP. If you are given a user name and a password, please select PPPoE. If your ISP
provides L2TP connection, please select L2TP option. If you are not sure which connection type
you use currently, please contact your ISP with the correct information.
1. If you choose Dynamic IP, the router will automatically get IP parameters from your ISP. You
can see the page as follows (
Figure 5-4):
15

TL-R402M Cable/DSL Router User Guide
Figure 5-4 WAN - Dynamic IP
This page displays the WAN IP parameters assigned dynamically by your ISP, including IP
address, Subnet Mask, Default Gateway, etc. Click the Renew button to renew the IP parameters
from your ISP. Click the Release button to release the IP parameters.
¾ MTU Size: The normal MTU (Maximum Transmission Unit) value for most Ethernet
networks is 1500 Bytes. For some ISPs you need to reduce the MTU. But this is rarely
required, and should not be done unless you are sure it is necessary for your ISP connection
¾ If your ISP gives you one or two DNS addresses, select Use These DNS Servers and enter
the primary and secondary addresses into the correct fields. Otherwise, the DNS servers will
be assigned dynamically from ISP
¾ Get IP with Unicast DHCP: A few ISPs' DHCP servers do not support the broadcast
applications. If you cannot get the IP address normally, you can choose this option. (You
generally need not check this option)
Note:
If you get Address not found errors when you go to a Web site, it is likely that your DNS servers
are set up improperly. You should contact your ISP to get DNS server addresses.
2. If you choose Static IP, you should have fixed IP parameters specified by your ISP. The
Static IP settings page will appear, shown in
Figure 5-5:
16

TL-R402M Cable/DSL Router User Guide
Figure 5-5 WAN - Static IP
You should type the following parameters into the spaces provided:
¾ IP Address - Enter the IP address in dotted-decimal notation provided by your ISP
¾ Subnet Mask - Enter the subnet Mask in dotted-decimal notation provided by your ISP,
usually is 255.255.255.0
¾ Default Gateway: (Optional) Enter the gateway IP address in dotted-decimal notation
provided by your ISP
¾ MTU Size - The normal MTU (Maximum Transmission Unit) value for most Ethernet
networks is 1500 Bytes. For some ISPs you may need to modify the MTU. But this is rarely
required, and should not be done unless you are sure it is necessary for your ISP connection
¾ Primary DNS - (Optional) Type the DNS address in dotted-decimal notation provided by
your ISP
¾ Secondary DNS - (Optional) Type another DNS address in dotted-decimal notation
provided by your ISP if provided
3. If you choose PPPoE, you should enter the following parameters (
Figure 5-6):
Figure 5-6 WAN - PPPoE
¾ User Name/Password - Enter the User Name and Password provided by your ISP. These
fields are case-sensitive
17

TL-R402M Cable/DSL Router User Guide
¾ Connect on Demand - You can configure the router to disconnect your Internet connection
after a specified period of inactivity (Max Idle Time). If your Internet connection has been
terminated due to inactivity, Connect on Demand enables the router to automatically
re-establish your connection as soon as you attempt to access the Internet again. If you
wish to activate Connect on Demand, click the radio button. If you want your Internet
connection to remain active at all times, enter 0 in the Max Idle Time field. Otherwise, enter
the number of minutes you want to have elapsed before your Internet connection
terminates.
Caution:
Sometimes the connection cannot be disconnected although you specify a time to Max Idle
Time. This is because there may still be active applications in the background, which may
cause fee accounted by your ISP.
¾ Connect Automatically - Connect automatically after the router is disconnected. To use
this option, click the radio button
¾ Connect Manually - You can configure the router to make it connect or disconnect
manually. After a specified period of inactivity (Max Idle Time), the router will disconnect
your Internet connection, and not be able to re-establish your connection automatically as
soon as you attempt to access the Internet again. To use this option, click the radio button. If
you want your Internet connection to remain active at all times, enter 0 in the Max Idle Time
field. Otherwise, enter the number in minutes that you wish to have the Internet connecting
last unless a new link is requested
Caution:
Sometimes the connection cannot be disconnected although you specify a time to Max Idle
Time. This is because there may still be active applications in the background, which may
cause fee accounted by your ISP.
Click the Connect button to connect immediately, Click the Disconnect button to disconnect
immediately.
Click the Advanced Settings button to set up the advanced option, the page shown in
will then appear:
18
Figure 5-7

TL-R402M Cable/DSL Router User Guide
Figure 5-7 PPPoE Advanced Settings
¾ Packet MTU - The default MTU size is 1492 bytes, which is usually fine. For some ISPs, you
need modify the MTU. This should not be done unless you are sure it is necessary for your
ISP
¾ Service Name/AC Name - The service name and AC (Access Concentrator) name, this
should not be done unless you are sure it is necessary for your ISP
¾ ISP Specified IP Address - If you know that your ISP does not automatically transmit your
IP address to the router during login, click “Use the IP Address specified by ISP” check
box and enter the IP address in dotted-decimal notation, which your ISP provided
¾ Detect Online Interval - The default value is 0, you can input the value between 0 and 120.
The router will detect Access Concentrator online at every interval between seconds. If the
value is 0, it means do not detect
¾ DNS IP Address - If you know that your ISP does not automatically transmit DNS
addresses to the router during login, click “Use the following DNS servers” checkbox and
enter the IP address in dotted-decimal notation of your ISP’s primary DNS server. If a
secondary DNS server address is available, enter it as well.
Click the Save button to save your settings
4. If you choose L2TP, you should enter the following parameters (
19
Figure 5-8):

TL-R402M Cable/DSL Router User Guide
Figure 5-8 WAN – L2TP
For more details, please refer to your ISP.
¾ User Name/Password - Enter the User Name and Password provided by your ISP. These
fields are case-sensitive
¾ Connect/Disconnect - Click the button, you can handle the on-line connection or
disconnection
¾ Dynamic IP/Static IP - Enter the IP address in dotted-decimal notation provided by your ISP
¾ Server IP Address/Name - Please type the correct Server IP Address/Name which your
ISP provided
¾ MTU Size (in bytes) - The default value is 1460, which is usually fine. For some ISPs, you
need modify the MTU. This should not be done unless you are sure it is necessary for your
ISP
¾ Max Idle Time - If you want your Internet connection to remain active at all times, enter 0 in
the Max Idle Time field. Otherwise, enter the number of minutes you want to have elapsed
before your Internet connection terminates. (This setting is available just for “Connect on
demand” and “Connect Manually”)
¾ Connect on demand - You can configure the router to disconnect your Internet connection
after a specified period of the Internet connectivity (Max Idle Time). If your Internet
connection has been terminated due to inactivity, Connect on Demand enables the router
to automatically re-establish your connection as soon as you attempt to access the Internet
again. If you wish to activate Connect on Demand, click the radio button. If you want your
20

TL-R402M Cable/DSL Router User Guide
Internet connection to remain active at all times, enter 0 in the Max Idle Time field.
Otherwise, enter the number of minutes you want to have elapsed before your Internet
connection terminates
¾ Connect Automatically - Connect automatically after the router is disconnected
¾ Connect Manually - You can configure the router to make it connect or disconnect
manually. After a specified period of inactivity (Max Idle Time), the router will disconnect
your Internet connection, and not be able to re-establish your connection automatically as
soon as you attempt to access the Internet again. To use this option, click the radio button. If
you want your Internet connection to remain active at all times, enter 0 in the Max Idle Time
field. Otherwise, enter the number in minutes that you wish to have the Internet connecting
last unless a new link requested
5.4.3 MAC Clone
You can configure the MAC address of the WAN port on this page, Figure 5-9:
Figure 5-9 MAC Address Clone
Some ISPs require that you register the MAC address of your adapter, which is connected to your
cable, DSL modem or Ethernet during installation. You do not generally need to change anything
here.
¾ WAN MAC Address - This field displays the current MAC address of the WAN port, which is
used for the WAN port. If your ISP requires that you register the MAC address, please enter
the correct MAC address into this field. The format for the MAC address is
XX-XX-XX-XX-XX-XX (X is any hexadecimal digit)
¾ Your PC's MAC Address - This field displays the MAC address of the PC that is managing
the router. If the MAC address is required, you can click the Clone MAC Address button
and this MAC address will fill in the WAN MAC Address field
¾ Click Restore Factory MAC to restore the MAC address of WAN port to the factory default
value
¾ Click the Save button to save your settings
Note:
1 Only the PC(s) on your LAN can use the MAC Address Clone feature.
2 If you click the Save button, the router will prompt you to reboot.
21

5.5 DHCP
- DHCP
Figure 5-10 the DHCP menu
TL-R402M Cable/DSL Router User Guide
y DHCP settings
y DHCP Clients List
y Address Reservation
There are three submenus under the DHCP menu (shown in
Figure 5-10): DHCP Settings,
DHCP Clients List and Address Reservation. Click any of them, and you will be able to
configure the corresponding function. The detailed explanations for each submenu are provided
below.
5.5.1 DHCP Settings
The router is set up by default as a DHCP (Dynamic Host Configuration Protocol) server, which
provides the TCP/IP configuration for all the PCs that are connected to the router on the LAN. The
DHCP Server can be configured on the page (shown in
Figure 5-11):
Figure 5-11 DHCP Settings
¾ DHCP Server - Enable or Disable the DHCP server. If you disable the Server, you must
have another DHCP server within your network or else you must manually configure the
computer
¾ Start IP Address - This field specifies the first of the addresses in the IP address pool.
192.168.1.100 is the default start address
¾ End IP Address - This field specifies the last of the addresses in the IP address pool.
192.168.1.199 is the default end address
¾ Address Lease Time - The Address Lease Time is the amount of time a network user will
be allowed connection to the router with their current dynamic IP address. Enter the amount
of time, in minutes, which the user will be "leased" this dynamic IP address. The range of the
time is 1 ~ 2880 minutes. The default value is 120 minutes
22

TL-R402M Cable/DSL Router User Guide
¾ Default Gateway - (Optional.) Suggest to input the IP address of the LAN port of the router,
default value is 192.168.1.1
¾ Default Domain - (Optional.) Input the domain name of your network
¾ Primary DNS - (Optional.) Input the DNS IP address provided by your ISP. Or consult your
ISP
¾ Secondary DNS - (Optional.) Input the IP address of another DNS server if your ISP
provides two DNS servers
Note:
To use the DHCP server function of the router, you must configure all computers on the LAN as
"Obtain an IP Address automatically" mode. This function will take effect until the router reboots.
5.5.2 DHCP Clients List
This page shows Client Name, MAC Address, Assigned IP and Lease Time for each DHCP
Client attached to the router (
Figure 5-12):
Figure 5-12 DHCP Clients List
¾ Index - The index of the DHCP Client
¾ Client Name - The name of the DHCP client
¾ MAC Address - The MAC address of the DHCP client
¾ Assigned IP - The IP address that the router has allocated to the DHCP client
¾ Lease Time - The time of the DHCP client leased. Before the time is up, DHCP client will
request to renew the lease automatically
You cannot change any of the values on this page. To update this page and to show the current
attached devices, click on the Refresh button.
5.5.3 Address Reservation
When you specify a reserved IP address for a PC on the LAN, that PC will always receive the
same IP address each time it accesses the DHCP server. Reserved IP addresses should be
assigned to servers that require permanent IP settings. This page is used for address reservation
(shown in
Figure 5-13).
23

TL-R402M Cable/DSL Router User Guide
Figure 5-13 Address Reservation
¾ MAC Address - The MAC address of the PC of which you want to reserve IP address
¾ Assigned IP Address - The IP address of the router reserved
To Reserve IP addresses:
1. Enter the MAC address (The format for the MAC address is XX-XX-XX-XX-XX-XX.) and IP
address in dotted-decimal notation of the computer you wish to add.
2. Click the Save button when finished.
To modify A Reserved IP address:
1. Select the reserved address entry as you desire, and modify it. If you wish to delete the entry,
make all of the entry fields blank.
2. Click the Save button.
To delete all Reserved IP addresses:
1 Click the Clear All button.
2 Click the Save button.
3 Click the Next button to go to the next page and Click the Previous button to return the
previous page.
Note:
The function won't take effect until the router reboots.
24

TL-R402M Cable/DSL Router User Guide
5.6 Forwarding
- Forwarding
y Virtual Servers
y Port Triggering
y DMZ
y UPnP
Figure 5-14 the Forwarding menu
There are four submenus under the Forwarding menu (shown in Figure 5-14): Virtual Servers,
Port Triggering, DMZ and UPnP. Click any of them, and you will be able to configure the
corresponding function. The detailed explanations for each submenu are provided below.
5.6.1 Virtual Servers
Virtual servers can be used for setting up public services on your LAN, such as DNS, Email and
FTP. A virtual server is defined as a service port, and all requests from Internet to this service port
will be redirected to the computer specified by the server IP. Any PC that was used for a virtual
server must have a static or reserved IP address because its IP address may change when using
the DHCP function. You can set up virtual servers on this page, shown in
Figure 5-15:
Figure 5-15 Virtual Servers
¾ Service Port - The numbers of External Ports. You can type a service port or a range of
service ports (the format is XXX – YYY, XXX is Start port, YYY is End port)
¾ IP Address - The IP address of the PC running the service application
¾ Protocol - The protocol used for this application, either TCP, UDP, or All (all protocols
supported by the router)
¾ Enable - The Enable checkbox to enable the virtual server entry
¾ Common Service Port - Some common services already listed in the pull-down list
25

TL-R402M Cable/DSL Router User Guide
To setup a virtual server entry:
1. Select the service you want to use from the Common Service Port list, select the ID you
want to use, and click the Copy to button. If the Common Service Port list does not have
the service that you want to use, type the number of the service port or service port range in
the Service Port box.
2. Type the IP address of the computer in the Server IP Address box.
3. Select the protocol used for this application, either TCP,UDP, or All.
4. Select the Enable checkbox to enable the virtual server.
5. Click the Save button.
Note:
It is possible that you have a computer or server that has more than one type of available service.
If so, select another service, and enter the same IP address for that computer or server.
To modify a virtual server entry:
1. Select the entry you want to modify
2. Modify the information from the Service Port, the IP Address boxes, and the Protocol
pull-down list.
3. Click the Save button.
To delete a service entry:
1. Clear the entry's all information except for the Protocol pull-down list.
2. Click the Save button.
To delete all service entries:
1. Click the Clear All button.
2. Click the Save button.
3. 3.Click the Next button to go to the next page and Click the Previous button to return the
previous page.
Note:
If you set the virtual server of the service port as 80, you must set the web management port on
Security –> Remote Management page to be any value except 80 such as 8080. Or else there
will be a conflict to disable the virtual server.
5.6.2 Port Triggering
Some applications require multiple connections, like Internet games, video conferencing, Internet
calling and so on. These applications cannot work with a pure NAT router. Port Triggering is used
for some of these applications that can work with an NAT router. You can set up Port Triggering
on this page shown in
Figure 5-16:
26

TL-R402M Cable/DSL Router User Guide
Figure 5-16 Port Triggering
Once configured, operation is as follows:
1. A local host makes an outgoing connection using a destination port number defined in the
Trigger Port field.
2. The router records this connection, opens the incoming port or ports associated with this
entry in the Port Triggering table, and associates them with the local host.
3. When necessary the external host will be able to connect to the local host using one of the
ports defined in the Incoming Ports field.
¾ Trigger Port - The port for outgoing traffic. An outgoing connection using this port will
"Trigger" this rule
¾ Trigger Protocol - The protocol used for Trigger Ports, either TCP,UDP, or All (all protocols
supported by the router)
¾ Incoming Ports Range - The port or port range used by the remote system when it
responds to the outgoing request. A response using one of these ports will be forwarded to
the PC that triggered this rule. You can input at most 5 groups of ports (or port section).
Every group of ports must be apart with ",". For example, 2000-2038, 2050-2051, 2085,
3010-3030
¾ Incoming Protocol - The protocol used for Incoming Ports Range, either TCP or UDP, or
ALL (all protocols supported by the router)
¾ Enable - The Enable checkbox enables port forwarding for the application
¾ Common Applications - Some popular applications already listed in the pull-down list
To add a new rule, enter the following data on the Port Triggering screen
1. Enter a port number used by the application when it generates an outgoing request.
2. Select the protocol used for Trigger Port from the pull-down list, either TCP, UDP, or All.
3. Enter the range of port numbers used by the remote system when it responds to the PC's
request.
4. Select the protocol used for Incoming Ports Range from the pull-down list, either TCP,
UDP, or All.
5. Select the Enable checkbox to enable.
6. Click the Save button to save the new rule.
27

TL-R402M Cable/DSL Router User Guide
There are many popular applications in the Popular Application list. You can select it and the ID,
then click the Copy to button, the application will fill in the Trigger Port, incoming Ports Range
boxes and select the Enable checkbox. It has the same effect as adding a new rule.
Modifying an existing rule:
1. Edit the entry as desired.
2. Click the Save button.
Deleting an existing rule:
1. Clear all the content in the Trigger Port field, the Open Port field and the Enable
checkbox.
2. Click the Save button.
To delete all rules:
1 Click the Clear All button.
2 Click the Save button
Note:
¾ When the trigger connection is released, the according opening ports will be closed
¾ Each rule allowed to be used only by one host on LAN synchronously. The trigger connection
of other hosts on LAN will be refused
¾ Incoming Port Range cannot overlap each other
5.6.3 DMZ
The DMZ host feature allows one local host to be exposed to the Internet for a special-purpose
service such as Internet gaming or videoconferencing. DMZ host forwards all the ports at the
same time. Any PC whose port is being forwarded must have its DHCP client function disabled
and should have a new static IP address assigned to it because its IP address may change when
using the DHCP function. You can set up DMZ host on this page shown in
Figure 5-17 DMZ
To assign a computer or server to be a DMZ server:
1. Click the Enable radio button
2. Enter the local host IP address in the DMZ Host IP Address field
3. Click the Save button.
Figure 5-17:
Note:
After you set the DMZ host, the firewall related to the host will not work.
28

TL-R402M Cable/DSL Router User Guide
5.6.4 UPnP
The Universal Plug and Play (UPnP) feature allows the devices, such as Internet computers, to
access the local host resources or devices as needed. UPnP devices can be automatically
discovered by the UPnP service application on the LAN. You can configure UPnP on this page
shown in
¾ Enable UPnP - UPnP can be enabled or disabled by clicking the Enable or Disable button.
¾ Current UPnP Settings Table - this table displays the current UPnP information
¾ App Description - The description provided by the application in the UPnP request
¾ External Port - External port, which the router opened for the application
¾ Protocol - Which type of protocol is opened
¾ Internal Port - Internal port, which the router opened for local host
¾ IP Address - The UPnP device that is currently accessing the router
¾ Status - Either Enabled or Disabled, “Enabled” means that port is still active, otherwise, the
Click Refresh to update the Current UPnP Settings List.
Figure 5-18:
Figure 5-18 UPnP Settings
As allowing this may present a risk to security, this feature is disabled by default
port is inactive
5.7 Security
- Security
y Firewall
y IP Filter
y Domain Filter
y MAC
y Remote
Management
y Ping from WAN
Figure 5-19 The Security menu
There are six submenus under the Security menu (shown in
Filtering, Domain Filtering, MAC Filtering, Remote Management and Ping from WAN. Click
any of them, and you will be able to configure the corresponding function. The detailed
explanations for each submenu are provided below.
29
Figure 5-19): Firewall, IP Address

TL-R402M Cable/DSL Router User Guide
5.7.1 Firewall
Using the Firewall page (shown in Figure 5-20), you can turn the general firewall switch on or off.
The default setting for the switch is off. If the general firewall switch is off, even if IP Address
Filtering, DNS Filtering and MAC Filtering are enabled, their settings are ineffective.
Figure 5-20 Firewall Settings
¾ Enable Firewall - The general firewall switch is on or off
¾ Enable IP Address Filtering - Set IP Address Filtering is enabled or disabled. There are
two default filtering rules of IP Address Filtering, either Allow or Deny passing through the
router
¾ Enable Domain Filtering - Set Domain Filtering as enabled or disabled
¾ Enable MAC Filtering - Set MAC Address Filtering is enabled or disabled. You can select
the default filtering rules of MAC Address Filtering, either Allow or Deny accessing the router
5.7.2 IP Address Filtering
The IP Address Filtering feature allows you to control Internet Access by specific users on your
LAN based on their IP addresses. The IP Address Filtering is set on this page,
Figure 5-21:
30

TL-R402M Cable/DSL Router User Guide
Figure 5-21 IP Address Filtering
To disable the IP Address Filtering feature, keep the default setting, Disabled. To set up an IP
Address Filtering entry, click Enable Firewall and Enable IP Address Filtering on the Firewall
page, and click the Add New… button. The page "Add or Modify an IP Address Filtering entry
" will appear shown in
Figure 5-22:
Figure 5-22 Add or Modify an IP Address Filtering Entry
To create or modify an IP Address Filtering entry, please follow these instructions:
1 LAN IP Address - Type a LAN IP address or a range of LAN IP addresses in the field, in
dotted-decimal notation format. For example, 192.168.1.20 - 192.168.1.30. Keep the field
open, which means all LAN IP addresses have been put into the field.
2 LAN Port - Type a LAN Port or a range of LAN ports in the field. For example, 1030 - 2000.
Keep the field open, which means all LAN ports have been put into the field.
3 WAN IP Address - Type a WAN IP address or a range of WAN IP addresses in the field, in
dotted-decimal notation format. For example, 61.145.238.6 – 61.145.238.47. Keep the field
open, which means all WAN IP addresses have been put into the field.
4 WAN Port - Type a WAN Port or a range of WAN Ports in the field. For example, 25 – 110.
Keep the field open, which means all WAN Ports have been put into the field.
5 Protocol - Select which protocol is to be used, either TCP, UDP, or All (all protocols
supported by the router).
6 Pass - Select either Allow or Deny through the router.
7 Status - Select Enabled or Disabled for this entry on the Status pull-down list.
31

TL-R402M Cable/DSL Router User Guide
8 Click the Save button to save this entry.
To add additional entries, repeat steps 1-8.
When finished, click the Return button to return to IP Address Filtering page.
To modify or delete an existing entry:
1. Find the desired entry in the table.
2. Click Modify or Delete as desired on the Modify column.
3. Click the Enable All button to enable all entries.
4. Click the Disable All button to disable all entries.
5. Click the Delete All button to delete all entries
You can change the entry’s order as desired. Fore entries are before hind entries. Enter the ID
number in the first box you want to move and another ID number in the second box you want to
move to, and then click the Move button to change the entry’s order.
6. Click the Next button to go to the next page and click the Previous button to return to the
previous page.
For example:
If you desire to block E-mail received and sent by the IP address 192.168.1.7 on your local
network, and wish to make the PC with IP address 192.168.1.8 unable to visit the website of IP
address 202.96.134.12, while other PCs have no limit. First, enable the Firewall and IP Address
Filtering on the Firewall page, then, you should specify the Default IP Address Filtering Rule
"Deny these PCs with effective rules to access the Internet" on the Firewall page and the
following IP address filtering list on this page:
5.7.3 Domain Filtering
The Domain Filtering page (shown in Figure 5-23) allows you to control access to certain websites
on the Internet by specifying their domains or key words.
32

TL-R402M Cable/DSL Router User Guide
Figure 5-23 Domain Filtering
Before adding a Domain Filtering entry, you must ensure that Enable Firewall and Enable
Domain Filtering have been selected on the Firewall page. To Add a Domain filtering entry, click
the Add New… button. The page " Add or Modify a Domain Filtering entry " will appear, shown
Figure 5-24:
in
Figure 5-24 Add or Modify a Domain Filtering entry
To add or modify a Domain Filtering entry, follow these instructions:
1. Domain Name - Type the domain or key word as desired in the field. A blank in the domain
field means all websites on the Internet. For example:
2. Status - Select Enabled or Disabled for this entry on the Status pull-down list.
3. Click the Save button to save this entry.
To add additional entries, repeat steps 1-3.
When finished, click the Return button to return to the Domain filtering page.
To Modify or delete an existing entry:
1. Find the desired entry in the table.
2. Click Modify or Delete as desired on the Edit column.
3. Click the Enable All button to enable all entries.
4. Click the Disable All button to disable all entries.
5. Click the Delete All button to delete all entries.
6. Click the Next button to go to the next page and the Previous button to return to the previous
page.
www.xxyy.com.cn, .net.
For example:
33

TL-R402M Cable/DSL Router User Guide
if you want to block the PCs on your LAN from accessing websites www.xxyy.com.cn,
www.aabbcc.com and websites with .net at the end on the Internet while no limit for other
websites. First, enable the Firewall and Domain
the following Domain filtering list:
Filtering on the Firewall page, then, specify
5.7.4 MAC Filtering
Like the IP Address Filtering page, the MAC Address Filtering page (shown in Figure 5-25) allows
you to control access to the Internet by users on your local network based on their MAC
addresses.
Figure 5-25 MAC Address Filtering
Before setting up MAC Filtering entries, you must ensure that Enable Firewall and Enable MAC
Filtering have been selected on the Firewall page. To Add a MAC Address filtering entry, click the
Add New… button. The page " Add or Modify a MAC Address Filtering entry" will appear,
shown in
To add or modify a MAC Address Filtering entry, follow these instructions:
1. Enter the appropriate MAC address into the MAC Address field. The format of the MAC
Figure 5-26:
Figure 5-26 Add or Modify a MAC Address Filtering entry
34

TL-R402M Cable/DSL Router User Guide
address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). For example:
00-0E-AE-B0-00-0B.
2. Type the description of the PC in the Description field. Fox example: John’s PC.
3. Status - Select Enabled or Disabled for this entry on the Status pull-down list.
4. Click the Save button to save this entry.
To add additional entries, repeat steps 1-4.
When finished, click the Return button to return to the MAC Address Filtering page.
To Modify or delete an existing entry:
1. Find the desired entry in the table.
2. Click Modify or Delete as desired on the Edit column.
3. Click the Enable All button to enable all entries.
4. Click the Disable All button to disable all entries.
5. Click the Delete All button to delete all entries.
6. Click the Next button to go to the next page and click the Previous button to return to the
previous page.
Fox example:
If you want to block the PCs with MAC addresses 00-0A-EB-00-07-BE and 00-0A-EB-00-07-5F to
access the Internet, first, enable the Firewall and MAC Address Filtering on the Firewall page,
then, you should specify the Default MAC Address Filtering Rule "Deny these PCs with effective
rules to access the Internet" on the Firewall page and the following MAC Address filtering list on
this page:
5.7.5 Remote Management
You can configure the Remote Management function on this page shown in Figure 5-27. This
feature allows you to manage your Router from a remote location, via the Internet.
Figure 5-27 Remote Management
¾ Web Management Port - Web browser access normally uses the standard HTTP service
port 80. This router’s default remote management web port number is 80. For greater
security, you can change the remote management web interface to a custom port by
35

TL-R402M Cable/DSL Router User Guide
entering that number in the box provided. Choose a number between 1024 and 65534, but
do not use the number of any common service port
¾ Remote Management IP Address - This is the current address you will use when
accessing your router from the Internet. The default IP address is 0.0.0.0. It means this
function is disabled. To enable this function, change the default IP address to another IP
address as desired
To access the router, you will type your router's WAN IP address into your browser's address (in
IE) or Location (in Navigator) box, followed by a colon and the custom port number. For example,
if your Router's WAN address is 202.96.12.8 and you use port number 8080, enter in your
browser: http://202.96.12.8:8080. You will be asked for the router's password. After successfully
entering the password, you will be able to access the router's web-based utility.
Note:
Be sure to change the router's default password to a very secure password.
5.7.6 Ping from WAN
Figure 5-28 Ping from WAN
¾ Ignore Ping Packet from WAN Port - Enable or Disable ignore ping packet from WAN port.
If enabled, the ping packet from the Internet cannot access the router
5.8 Static Routing
A static route is a pre-determined path that network information must travel to reach a specific
host or network. To add or delete a route, work in the area under the Static Routing page (shown
Figure 5-29).
in
To add static routing entries:
Figure 5-29 Static Routing
36

TL-R402M Cable/DSL Router User Guide
1. Enter the following data:
¾ Destination IP Address - The Destination IP Address is the address of the network or
host that you want to assign to a static route
¾ Subnet Mask - The Subnet Mask determines which portion of an IP address is the network
portion, and which portion is the host portion
¾ Gateway - This is the IP address of the gateway device that allows for contact between the
router and the network or host
2. Click the Enable checkbox.
3. Repeat steps 1-2 until you are finished.
4. If you are finished. Click the Save button to save it.
To modify an existing entry:
1. Modify the entry’s Destination IP Address, Subnet Mask and Gateway.
2. Click the Save button.
To delete an existing entry:
1. Select the entry as you desire and make all of its fields blank.
2. Click the Save button.
To delete all the entries:
1. Click the Clear All button.
2. Click the Save button.
Note:
You can set up to 8 entries.
5.9 System Tools
- System Tools
y Firmware
y Factory Defaults
y Reboot
y Password
y Log
Figure 5-30 System Tools menu
There are five submenus under the System Tools menu (shown in
Factory Defaults, Reboot, Password and Log. Click any of them, and you will be able to
configure the corresponding function. The detailed explanations for each submenu are provided
below.
Figure 5-30): Firmware,
5.9.1 Firmware
The page (shown in Figure 5-31) allows you to upgrade to the latest version of firmware for the
router.
37

TL-R402M Cable/DSL Router User Guide
Figure 5-31 Firmware Upgrade
New firmware versions are posted at www.tp-link.com and can be downloaded for free. If the
router is not experiencing difficulties, there is no need to download a more recent firmware version,
unless the version has a new feature that you want to use.
Note:
When you upgrade the router's firmware, you may lose its configuration settings, so make sure
you write down the router settings before you upgrade its firmware.
To upgrade the router's firmware, follow these instructions:
1. Download a more recent firmware upgrade file from the TP-LINK website (
www.tp-link.com).
2. Run a TFTP Server on a PC on your LAN, and take the file in the TFTP server’s path.
3. Type the downloaded file name into the File Name box.
4. Type the IP address of the PC that runs the TFTP server in the TFTP Server’s IP Address
field.
5. Click the Upgrade button.
¾ Firmware Version - displays the current firmware version
¾ Hardware Version - displays the current hardware version. The hardware version of the
upgrade file must accord with the current hardware version
Note:
¾ Do not turn off the router or press the Reset button while the firmware is being upgraded
¾ The router will reboot after the upgrading has been finished
5.9.2 Factory Defaults
This page (shown in Figure 5-32) allows you to restore the factory default settings for the router.
Figure 5-32 Restore Factory Default
Click the Restore button to reset all configuration settings to their default values.
38

TL-R402M Cable/DSL Router User Guide
¾ The default User Name: admin
¾ The default Password: admin
¾ The default IP Address: 192.168.1.1
¾ The default Subnet Mask: 255.255.255.0
Note:
Any settings you have saved will be lost when the default settings are restored.
5.9.3 Reboot
This page (shown in Figure 5-33) allows you to reboot the router.
Figure 5-33 Reboot the router
Click the Reboot button to reboot the router.
Some settings of the router will take effect only after rebooting, which include:
¾ Change LAN IP Address. (System will reboot automatically)
¾ MAC Clone (system will reboot automatically)
¾ DHCP service function
¾ Static address assignment of DHCP server
¾ Web Service Port of the router
¾ Upgrade the firmware of the router (system will reboot automatically)
¾ Restore the router's settings to factory default (system will reboot automatically)
5.9.4 Password
This page (shown in Figure 5-34) allows you to change the factory default user name and
password of the router.
Figure 5-34 Password
39

TL-R402M Cable/DSL Router User Guide
It is strongly recommended that you change the factory default user name and password of the
router. All users who try to access the router's web-based utility will be prompted for the router's
user name and password.
Note:
¾ The new user name and password must not exceed 14 characters in length and must not
include any spaces. Enter the new Password twice to confirm it
¾ Click the Save button when finished
¾ Click the Clear All button to clear all
5.9.5 Log
This page (shown in Figure 5-35) allows you to query the Logs of the router.
Figure 5-35 System Log
The router can keep logs of all traffic. You can query the logs to find what happened to the router.
¾ Click the Refresh button to refresh the logs
¾ Click the Clear Log button to clear all the logs
40

TL-R402M Cable/DSL Router User Guide
Appendix A: FAQ
1. How do I configure the router to access Internet by ADSL users?
1) First, configure the ADSL modem configured in RFC1483 bridge model.
2) Connect the Ethernet cable from your ADSL modem to the WAN port on the router. The
telephone cord plugs into the Line port of the ADSL modem.
3) Login to the router, click the “Network” menu on the left of your browser, and click "WAN"
submenu. On the WAN page, select “PPPoE” for WAN Connection Type. Type user
name in the “User Name” field and password in the “Password” field, finish by clicking
“Connect”.
Figure 1 PPPoE Connection Type
4) If your ADSL lease is in “pay-according-time” mode, select “Connect on Demand” or
“connect Manually” for Internet connection mode. Type an appropriate number for “Max
Idle Time” to avoid wasting paid time. Otherwise, you can select “Auto-connecting” for
Internet connection mode.
Figure 2 PPPoE Connection Mode
Note:
¾ Sometimes the connection cannot be disconnected although you specify a time to Max Idle
Time, since some applications visit the Internet continually in the background.
¾ If you are a Cable user, please configure the router following the above steps.
2. How do I configure the router to access Internet by Ethernet users?
1) Login to the router, click the “Network” menu on the left of your browser, and click "WAN"
submenu. On the WAN page, select “Dynamic IP” for "WAN Connection Type", finish by
clicking “Save”.
2) Some ISPs require that you register the MAC address of your adapter, which is
connected to your cable or DSL modem during installation. If your ISP requires MAC
register, login to the router and click the "Network" menu link on the left of your browser,
and then click "MAC Clone" submenu link. On the "MAC Clone" page, if your PC’s MAC
address is a proper MAC address, click the "Clone MAC Address" button and your PC’s
41

TL-R402M Cable/DSL Router User Guide
MAC address will fill in the "WAN MAC Address" field. Or else, type the MAC address
into the "WAN MAC Address" field. The format for the MAC address is
XX-XX-XX-XX-XX-XX. Then click the "Save" button. It will take effect after rebooting.
Figure 3 MAC Clone
3. I want to use Netmeeting, what do I need to do?
1) If you start Netmeeting as a sponsor, you don’t need to do anything with the router.
2) If you start as a responsor, you need configure Virtual Server or DMZ Host.
3) How to configure Virtual Server: Login to the router, click the “Forwarding” menu on the
left of your browser, and click " Virtual Servers" submenu. On the "Virtual Server" page,
enter “1720” into the blank below the “Service Port”, and your IP address below the IP
Address, assuming 192.168.1.169 for an example, remember to “Enable” and “Save”.
Figure 4 Virtual Server
Note:
Your opposite side should call your WAN IP, which is displayed on the “Status” page.
4) How to enable DMZ Host: Login to the router, click the “Forwarding” menu on the left of
your browser, and click "DMZ" submenu. On the "DMZ" page, click “Enable” radio and
type your IP address into the “DMZ Host IP Address” field, using 192.168.1.169 as an
example, remember to click the "Save” button.
42

TL-R402M Cable/DSL Router User Guide
Figure 5 DMZ
4. I want to build a WEB Server on the LAN, what should I do?
1) Because the WEB Server port 80 will interfere with the WEB management port 80 on the
router, you must change the WEB management port number to avoid interference.
2) To change the WEB management port number: Login to the router, click the “Security”
menu on the left of your browser, and click "Remote Management" submenu. On the
"Remote Management" page, type a port number except 80, such as 88, into the "Web
Management Port" field. Click “Save” and reboot the router.
Figure 6 Remote Management
Note:
If the above configuration takes effect, to configure to the router by typing
http://192.168.1.1:88 (the router’s LAN IP address: Web Management Port) in the
address field of the web browser.
3) Login to the router, click the “Forwarding” menu on the left of your browser, and click the
"Virtual Servers" submenu. On the "Virtual Server" page, enter “80” into the blank below
the “Service Port”, and your IP address below the IP Address, assuming 192.168.1.188
for an example, remember to “Enable” and “Save”.
Figure 7 Virtual Server
43

TL-R402M Cable/DSL Router User Guide
Appendix B: Configuring the PCs
In this section, we’ll introduce how to install and configure the TCP/IP correctly in Windows 95/98.
First make sure your Ethernet Adapter is working, refer to the adapter’s manual if needed.
1. Install TCP/IP component
1) On the Windows taskbar, click the Start button, point to Settings, and then click Control
Panel.
2) Double-click the Network icon, click on the Configuration tab in the appearing Network
window.
3) Click on the Add button. Select Protocol, and then click Add.
Figure 8 Add Network Protocol
4) Under Manufacturers on Select Network Protocol page, highlight Microsoft. Under
Network Protocols, highlight TCP/IP. Click OK. TCP/IP protocol will take effect after
reboot.
Figure 9 Select Network Protocol
2. Configure TCP/IP for your computer
1) On the Windows taskbar, click the Start button, point to Settings, and then click Control
Panel.
2) Double-click the Network icon, highlight the bound TCP/IP tab in the Network window
that appears. An example is shown in the following figure:
44

TL-R402M Cable/DSL Router User Guide
Figure 10 Configuration tab
3) Click on Properties. The following TCP/IP Properties window will display and the IP
Address tab is open on this window by default.
4) Now you have two ways to configure the TCP/IP protocol below:
Assigned by DHCP Sever
1 Select Obtain an IP address automatically, as shown in the figure below:
Figure 11 IP Address tab
2 Do not type anything into the New gateway field on the Gateway tab.
45

TL-R402M Cable/DSL Router User Guide
Figure 12 Gateway tab
3 Chose Disable DNS on the DNS configuration tab, as shown in the following figure:
Figure 13 DNS Configuration tab
Setting IP address manually
1 Select Specify an IP address on IP Address tab, as shown in the following figure. If the
router's LAN IP address is 192.168.1.1, type IP address is 192.168.1.x (x is from 2 to 254),
and subnet mask is 255.255.255.0.
46

TL-R402M Cable/DSL Router User Guide
Figure 14 IP Address tab
2 Type the router’s LAN IP address (the default IP is 192.168.1.1) into the New gateway field
on the Gateway tab, and click on the Add button, as shown in the figure:
Figure 15 Gateway tab
3 On the DNS Configuration tab, click Enable DNS radio, and type your computer name in to
the Host field and a Domain (such as szonline.com) into the Domain field. In the DNS
Server Search Order field you can type the DNS server IP address, which has been
provided by your ISP, and click Add button. Shown below:
47

TL-R402M Cable/DSL Router User Guide
Figure 16 DNS Configuration tab
Now:
All the configurations are finished; it will take effect after reboot.
48

TL-R402M Cable/DSL Router User Guide
Appendix C: Specifications
General
Standards IEEE 802.3, IEEE 802.3u
Protocols TCP/IP, PPPoE, DHCP, ICMP, NAT
Ports One 10/100M Auto-Negotiation WAN RJ45 port. Four 10/100M
Auto-Negotiation LAN RJ45 ports supporting Auto MDI/MDIX
Cabling Type 10BASE-T: UTP category 3, 4, 5 cable (maximum 100m)
EIA/TIA-568 100Ω STP (maximum 100m)
100BASE-TX: UTP category 5, 5e cable (maximum 100m)
EIA/TIA-568 100Ω STP (maximum 100m)
Power Power Supply: External Power Adapter, AC 9V~50-60Hz 0.8A
Consumption : 3.1W(max)
LEDs M1, M2, LAN(1-4), WAN,
Safety & Emissions FCC, CE
Environmental and Physical
Operating Temp.
Operating Humidity 10% - 90% RH, Non-condensing
Dimensions (W×D×H) 6.3×4.0×1.1 inch. (160×102×28 mm)
0℃~40℃ (32℉~104℉)
49

TL-R402M Cable/DSL Router User Guide
Appendix D: Glossary
¾ DDNS (Dynamic Domain Name System) - The capability of assigning a fixed host and
domain name to a dynamic Internet IP address.
¾ DHCP (Dynamic Host Configuration Protocol) - A protocol that automatically configure the
TCP/IP parameters for the all the PCs that are connected to a DHCP server.
¾ DMZ (Demilitarized Zone) - A Demilitarized Zone allows one local host to be exposed to the
Internet for a special-purpose service such as Internet gaming or videoconferencing.
¾ DNS (Domain Name Server) - An Internet Server that translates the names of websites into
IP addresses.
¾ Domain Name - A descriptive name for an address or group of addresses on the Internet.
¾ DoS (Denial of Service) - A hacker attack designed to prevent your computer or network from
operating or communicating.
¾ DSL (Digital Subscriber Line) - A technology that allows data to be sent or received over
existing traditional phone lines.
¾ ISP (Internet Service Provider) - A company that provides access to the Internet
¾ MTU (Maximum Transmission Unit) - The size in bytes of the largest packet that can be
transmitted.
¾ NAT (Network Address Translation) - NAT technology translates IP addresses of a local area
network to a different IP address for the Internet.
¾ PPPoE (Point to Point Protocol over Ethernet) - PPPoE is a protocol for connecting remote
hosts to the Internet over an always-on connection by simulating a dial-up connection.
¾ L2TP (Layer 2 Tunneling Protocol) - The L2TP Protocol is used for integrating multi-protocol
dial-up services into existing Internet Service Providers Point of Presence.
50

TL-R402M Cable/DSL Router User Guide
Appendix E: Contact Information
For help with the installation or operation of the TP-LINK TL-R402M Cable/DSL Router, please
contact us.
http://www.tp-link.com
51