TP-Link VR2100 User Manual

User Guide
AC2100 Wireless MU-MIMO VDSL/ADSL Modem Router
Archer VR2100
REV1.0.0 1910012725
Contents
About This Guide .........................................................................................................1
Chapter 1. Get to Know Your Modem Router. . . . . . . . . . . . . . . . . . . . . . . . . .3
1. 1. Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1. 2. 1. Top Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1. 2. 2. Back Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
1. 2. 3. Side Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 2. Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
2. 1. Position Your Modem Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
2. 2. Connect Your Modem Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 3. Log In to Your Modem Router . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 4. Set Up Internet Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4. 1. Use Quick Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
4. 2. Manually Set Up an Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
4. 3. Test Internet Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4. 4. Set Up an IPv6 Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4. 5. More Operation Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
4. 5. 1. Wireless Router Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
4. 5. 2. 3G/4G Router Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Chapter 5. TP-Link Cloud Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
5. 1. Register a TP-Link ID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
5. 2. Change Your TP-Link ID Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
5. 3. Manage the User TP-Link IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
5. 3. 1. Add an TP-Link ID to Manage the Router . . . . . . . . . . . . . . . . . . . . . . . . . . 23
5. 3. 2. Remove TP-Link ID(s) From Managing the Router . . . . . . . . . . . . . . . . . . 23
5. 4. Manage the Router via TP-Link Tether App . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
5. 4. 1. Install the Tether App on Your Smartphones or Tablets . . . . . . . . . . . . 24
Chapter 6. OneMeshTM with Seamless Roaming. . . . . . . . . . . . . . . . . . . . . 25
6. 1. Set Up a OneMeshTM Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
6. 2. Manage Devices in the OneMeshTM Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Chapter 7. IPTV . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Chapter 8. Guest Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
8. 1. Create a Network for Guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
8. 2. Customize Guest Network Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Chapter 9. USB Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
9. 1. Access the USB Storage Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
9. 1. 1. Access the USB Device Locally . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
9. 1. 2. Access the USB Device Remotely . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
9. 1. 3. Customize the Access Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
9. 2. Media Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
9. 3. 3G/4G Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
9. 3. 1. As a Backup Solution for Internet Access . . . . . . . . . . . . . . . . . . . . . . . . . 43
9. 3. 2. As the Only Way to Access the Internet . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Chapter 10. Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Chapter 11. QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
11. 1. Prioritize Internet Traffic with QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
11. 2. Update the Database . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Chapter 12. Network Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
12. 1. Firewall & DoS Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
12. 2. Service Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
12. 3. Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
12. 4. IP & MAC Binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
12. 5. IPv6 Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Chapter 13. NAT Forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
13. 1. Translate Address and Port by ALG. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
13. 2. Share Local Resources over the Internet by Virtual Server. . . . . . . . . . . . . . . . . . . 65
13. 3. Open Ports Dynamically by Port Triggering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
13. 4. Make Applications Free from Port Restriction by DMZ . . . . . . . . . . . . . . . . . . . . . . . 67
13. 5. Make Xbox Online Games Run Smoothly by UPnP . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Chapter 14. VPN Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
14. 1. Use OpenVPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
14. 2. Use PPTP VPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
14. 3. Use IPSec VPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Chapter 15. Specify Your Network Settings. . . . . . . . . . . . . . . . . . . . . . . . . . 80
15. 1. LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
15. 1. 1. Change the LAN IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
15. 1. 2. Use the Modem Router as a DHCP Server. . . . . . . . . . . . . . . . . . . . . . . . . 82
15. 1. 3. Reserve LAN IP Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
15. 2. IPv6 LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
15. 2. 1. Configure the RADVD Address Type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
15. 2. 2. Configure the DHCPv6 Server Address Type . . . . . . . . . . . . . . . . . . . . . . 84
15. 3. Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
15. 3. 1. Specify Basic Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
15. 3. 2. Use WPS for Wireless Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
15. 3. 3. Schedule Your Wireless Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
15. 3. 4. View Wireless Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
15. 3. 5. Advanced Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
15. 4. Set Up a Dynamic DNS Service Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
15. 5. Create Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
15. 6. Set Up the IPv6 Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
15. 6. 1. Use the Public IPv6 Tunnel Service-6to4 . . . . . . . . . . . . . . . . . . . . . . . . . . 96
15. 6. 2. Specify the 6rd Tunnel with Parameters Provided by Your ISP . . . . . . 97
Chapter 16. Administrate Your Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
16. 1. Set System Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
16. 2. Control LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100
16. 3. Update the Firmware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101
16. 3. 1. Online Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .101
16. 3. 2. Local Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102
16. 4. Back up and Restore Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102
16. 5. Reboot the Modem Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .103
16. 6. Change the Administrator Account. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104
16. 7. Local Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
16. 8. Remote Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
16. 9. System Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .107
16. 10. Monitor the Internet Traffic Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .108
16. 11. CWMP Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109
16. 12. SNMP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111
Appendix: Troubleshooting ............................................................................... 113

About This Guide

This guide is a complement to Quick Installation Guide. The Quick Installation Guide provides instructions for quick internet setup, while this guide contains details of each function and demonstrates how to configure them in typical scenarios.
Features available in the modem router may vary by model and software version. Modem router availability may also vary by region or ISP. All images, steps, and descriptions in this guide are only examples and may not reflect your actual modem router experience.
Conventions
In this guide, the following conventions are used:
Convention
Underline
Teal
>
Note:
Tips:
Symbols on
the web page
Description
Hyperlinks are in teal and underlined. You can click to redirect to a website or a specific section.
Key information appears in teal, including management page text such as menus, items, buttons and so on.
The menu structures to show the path to load the corresponding page. For example, Advanced > Wireless > MAC Filtering function page is under the Wireless menu that is located in the Advanced tab.
Ignoring this type of note might result in a malfunction or damage to the device.
Indicates important information that helps you make better use of your device.
click to edit the corresponding entry.
click to delete the corresponding entry.
click to enable or disable the corresponding entry.
click to view more information about items on the page.
Speed/Coverage Disclaimer
means the MAC Filtering
Maximum wireless signal rates are the physical rates derived from IEEE Standard 802.11 specifications. Range, coverage, and maximum quantity of connected devices are based on test results under normal usage conditions. Actual wireless data throughput, wireless coverage, and quantity of connected devices are not guaranteed and will vary as a result of 1) environmental factors, including building materials, physical objects, and obstacles, 2) network conditions, including local interference, volume and density of traffic, product location, network complexity, and network overhead, and 3) client limitations, including rated performance, location, connection quality, and client condition.
*Use of MU-MIMO requires clients to also support MU-MIMO.
1
More Info
• The latest firmware and management app are available from the Download Center at
https://www.tp-link.com/support/download/.
• The Quick Installation Guide (QIG) can be found where you find this guide or inside the product packaging.
• Specifications can be found on the product page at
• TP-Link Community is provided for you to share knowledge and discuss our products at
https://community.tp-link.com.
• Our Technical Support contact information can be found at the Contact Technical
Support
page at https://www.tp-link.com/support.
https://www.tp-link.com.
2
Chapter 1

Get to Know Your Modem Router

This chapter introduces the modem router by detailing its main features and appearance.
It contains the following sections:
Product Overview
Physical Appearance
Chapter 1

1. 1. Product Overview

TP-Link’s modem router is a combined wired/wireless network connection device with wireless router and DSL modem capabilities.
With DSL and LAN/WAN ports, the modem router is compatible with DSL connections and fiber/cable access.
Ethernet ports and adjustable antennas enable the modem router to provide wired and wireless access for multiple computers and mobile devices.
With an array of additional features, the modem router is the perfect hub for your home or business network.

1. 2. Physical Appearance

1. 2. 1. Top Panel

LED On/Off Button
The modem router’s LEDs are located on the top panel. You can check the modem router’s working status by following the LED Explanation table.
It also provides the LED On/Off button. You can press the button to turn on/off the LEDs without affecting the modem router’s function.
4
Chapter 1
LED Explanation
Name Status
Power
DSL
Internet
Wireless 2.4GHz
/
Wireless 5GHz
Indication
On The system has started up successfully.
Flashing
Off
On DSL synchronization is complete.
Flashing DSL synchronization is in progress.
Off
On Internet service is available.
Orange
Off
On The wireless 2.4GHz/5GHz band is working properly.
Off The wireless 2.4GHz/5GHz band is disabled.
The system is starting up or firmware is being upgraded. Do not disconnect or power off your modem router.
Power is off. Please ensure that the power adapter is connected correctly.
DSL synchronization failed. Please refer to Note 1 for troubleshooting.
Internet connection is correct but internet service is unavailable. Please refer to Note 2 for troubleshooting.
Internet connection is incorrect, DSL synchronization failed, or the modem router is operating in Bridge mode. Please refer to Note 3 for troubleshooting.
On
LAN
At least one LAN port is connected to a powered-on device.
Off No LAN port is connected to a powered-on device.
On The USB device is ready to use.
USB
Flashing The USB device is being identified.
Off No USB device is plugged into the USB port.
On
A wireless device has been successfully added to the network by WPS.
WPS handshaking is in process and will continue for
WPS
Flashing
about 2 minutes. Please press the WPS button on other wireless devices that you want to add to the network while the LED is flashing.
Off
Note:
1. If the DSL LED is off, please check your internet connection. Refer to Connect Your Modem Router for more
information about how to connect to the internet correctly. If you have already made a successful connection, please
contact your ISP to make sure your internet service is available now.
2. If the Internet LED is orange, please check your internet configuration. You may need to check this information with
your ISP and make sure everything has been input correctly.
A wireless device has failed to be added to the network by WPS.
5
Chapter 1
3. If the Internet LED is off, please check your DSL LED first. If your DSL LED is also off, please refer to Note 1. If your
DSL LED is ON, reconnect your modem router correctly by referring to related guide.

1. 2. 2. Back Panel

The modem router’s back panel shows the ports, buttons and antennas. Refer to the following for detailed instructions.
Item
Power Port
LAN1, LAN2, LAN3,
LAN4/WAN Port
Reset Button
DSL Port
Antennas
For connecting the modem router to a power socket via the provided power adapter.
For connecting the modem router to your PC or other Ethernet network devices. In wireless router mode, the LAN4/WAN port is used for connecting to a Cable/FTTH/VDSL/ADSL device.
Press and hold down for 8 seconds to reset the modem router into factory default settings.
For connecting the modem router to the internet. Connect the port to the splitter or directly connect the port to the phone jack via a phone cable. For details, please refer to Connect Your Modem Router.
Used for wireless data transmission. Position them upright for the best performance.
Description
6
Chapter 1

1. 2. 3. Side Panel

The modem router’s side panel shows the buttons and ports. Refer to the following for detailed instructions.
Item
USB Port For connecting to a USB storage device or a USB printer.
Wi-Fi Button Press to turn both 2.4GHz and 5GHz Wi-Fi on or off.
WPS Button Press to start a WPS synchronization.
Power On/Off
Button
The switch for the power. Press it to power on or off the modem router.
Description
7
Chapter 2

Connect the Hardware

This chapter contains the following sections:
Position Your Modem Router
Connect Your Modem Router
Chapter 2

2. 1. Position Your Modem Router

With the modem router, you can access your network from anywhere within the wireless network coverage. However, the wireless signal strength and coverage varies depending on the environment your modem router is in. Obstacles may limit the range of the wireless signal, for example, concrete structures, thick walls.
For best Wi-Fi performance, and to keep your network secure:
• Do not locate the modem router in a place where it will be exposed to moisture or excessive heat.
• Keep the product away from strong electromagnetic radiation and devices that emit electromagnetic waves.
• Place the modem router in a location where it can be connected to the various devices as well as to a power source.
• Make sure the cables and power cord are safely placed out of the way so they do not create a tripping hazard.
Generally, the modem router is placed on a horizontal surface, such as a shelf or desktop. The device also can be mounted on the wall as shown below.
84
A(2/1)
4.69
13.09
5.54
3
10
1.5
截面 A-A
A
D
H
A
NOTE:
4.69mm<D<10mm H<3mm
Note:
The diameter of the screw is 4.69mm<D<10mm, and the distance of two screws is 84mm. The screw that project from
the wall need around 8mm based, and the length of the screw need to be at least 20mm to withstand the weight of the
product.
A

2. 2. Connect Your Modem Router

Follow the steps below to connect your modem router.
1. Connect the DSL line and power adapter. The electrical outlet shall be installed near the device and shall be easily accessible.
9
Chapter 2
Power
DSL
Phone Jack
Phone Cable
Power Adapter
1
Attach the antennas.
Verify that the following LEDs
5
turn stable before continuing
with the conguration.
Power On DSL On
2
LINE
PHONE
MODEM
Phone (Optional)
4
DSL Splitter
If you don’t need the phone service, just directly connect the modem router to the phone jack with the provided phone cable, then follow steps 4 and 5 to complete the hardware connection.
Push in the Power button on the side panel to turn on the modem router.
Phone Cable
Power LAN2LAN1 LAN3 LAN4/WAN
Modem Router
DSL
30° 30°
3
Notes:
1. The DSL LED takes about 1 to 2 minutes to stabilize.
2. We recommend that the outside two antennas be outward at about 30 degrees.
2. Connect your computer to the modem router.
Method 1: Wired
Connect your computer’s Ethernet port to the LAN port on the modem router via the Ethernet cable.
Method 2: Wirelessly
Use the default SSID (Wireless Network Name) and Wireless Password printed on the included Wi-Fi Info Card or on the product label of the modem router to connect wirelessly.
Method 3: Use the WPS button
Wireless devices that support WPS, including Android phones, tablets, most USB network cards, can be connected to your router through this method. (WPS is not supported by iOS devices.)
Note:
The WPS function cannot be configured if the wireless function of the router is disabled. Also, the WPS function will be
disabled if your wireless encryption is WEP. Please make sure the wireless function is enabled and is configured with the
appropriate encryption before configuring the WPS.
1 ) Tap the WPS icon on the device’s screen.
2 ) Immediately press the WPS button on your modem router.
3 ) The WPS LED flashes for about two minutes during the WPS process.
4 ) When the WPS LED stabilizes and remains on, the client device has successfully
connected to the modem router.
10
Chapter 2
11
Chapter 3

Log In to Your Modem Router

Chapter 3
Log In to Your Modem Router
With the web management page, it is easy to configure and manage the modem router. The web management page can be used on any Windows, Macintosh or UNIX OS with a Web browser, such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari.
Follow the steps below to log in to your modem router.
1. If the TCP/IP Protocol on your computer is set to the static (fixed) IP address, you need to change its settings to obtain an IP address automatically. Refer to
Troubleshooting
to configure your computer.
Appendix:
2. Launch a web browser and go to http://tplinkmodem.net or http://192.168.1.1. Create a strong password and click
Let’s Get Started to log in.
Note:
If you have registered a TP-Link ID and bind your cloud router to it, the login password you created here should be
ineffective. Please log in to the cloud router using your TP-Link ID.
13
Chapter 4

Set Up Internet Connections

This chapter introduces how to connect your modem router to the internet. The modem router is equipped with a web-based Quick Setup wizard. It has many ISP information built in, automates many of the steps and verifies that those steps have been successfully completed. Furthermore, you can also set up an IPv6 connection if your ISP provides IPv6 service.
This chapter includes the following sections:
Use Quick Setup Wizard
Manually Set Up an Internet Connection
Test Internet Connectivity
Set Up an IPv6 Connection
More Operation Modes
Chapter 4
Set Up Internet Connections

4. 1. Use Quick Setup Wizard

1. Visit http://tplinkmodem.net, and log in with the password you set for the modem
router.
2. Click
Quick Setup on the top of the page. Then follow the step-by-step instructions
to connect your router to the internet.
3. To enjoy a more complete service from TP-Link (remote management, TP-Link DDNS, etc.), log in with your TP-Link ID or click
Register Now to get one. Then follow
the instructions to bind the modem router to your TP-Link ID.
Note:
1. To learn more about the TP-Link Cloud service, please refer to the TP-Link Cloud section.
2. If you do not want to register a TP-Link ID for now, you may click Log In Later to proceed.
3. If you have changed the preset wireless network name (SSID) and wireless password during the Quick Setup process,
all your wireless devices must use the new SSID and password to connect to the router.

4. 2. Manually Set Up an Internet Connection

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the modem router.
2. Go to automatically filled in. For some ISPs, you may need to manually specify some information provided. If you can’t find your ISP in the enter the information provided by your ISP.
Basic > Internet page. Select your ISP, and related information will be
ISP List, select Other and then
15
Chapter 4
Set Up Internet Connections
3. Click Save to make the settings effective, and you can refer to Test Internet
Connectivity
to test the internet connection.
Tips: You can view and edit all internet connection settings on the Advanced > Network > Internet page.

4. 3. Test Internet Connectivity

After manually setting up the internet connection, you need to test the internet connectivity. The modem router provides a diagnostic tool to help you locate the source of any problems.
1. Visit
2. Go to
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the modem router.
Advanced > System Tools > Diagnostics page.
16
Chapter 4
Set Up Internet Connections
3. Click Start to test the internet connectivity and you will see the test result in the gray box.

4. 4. Set Up an IPv6 Connection

If your ISP has provided a DSL line that supports IPv6 connection as well as some detailed IPv6 parameters, you can manually set up an IPv6 connection.
If your ISP provides an IPv4-only connection or IPv6 tunnel service, permit IPv6 connection by referring to
Follow the steps below to set up an IPv6 connection:
1. Make sure you have set up an IPv4 connection either manually or by using the Quick Setup wizard before setting up an IPv6 connection.
2. Visit
3. Go to
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the modem router.
Advanced > Network > Internet page.
Set Up the IPv6 Tunnel.
4. Select your WAN Interface Name (Status should be Connect) and click the (Edit) icon.
17
Chapter 4
Set Up Internet Connections
5. Scroll down the page, enable IPv6, and configure the IPv6 parameters.
Addressing Type: Consult your ISP for the addressing type (DHCP or SLAAC).
SLAAC is the most commonly used addressing type.
IPv6 Gateway: Keep the default setting as Current Connection.
Note: If your ISP has provided the IPv6 address, click Advanced to reveal more settings. Check to use IPv6
specified by ISP and enter the parameters provided by your ISP.
6. Click Save to make the settings effective. Now IPv6 service is available for your network.

4. 5. More Operation Modes

The modem router supports two more operation modes: Wireless Router mode and 3G/4G Router mode. You can change the mode according to your needs.

4. 5. 1. Wireless Router Mode

If you already have a modem or your internet comes via an Ethernet jack on the wall, you can set up the modem router as a regular wireless router to share the internet.
1. Find the WAN port (labeled as LAN4/WAN) on the modem router, and connect it to your existing modem or the Ethernet jack on the wall. Then connect the power adapter and turn on the modem router. If you connect an existing modem, reboot it to get the modem router connected to the internet.
2. Connect your computer to the modem router. For details, refer to
Modem Router
3. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
.
set for the modem router.
4. Go to
Advanced > Operation Mode, select the Wireless Router Mode, and click
Save. The modem router will reboot.
Connect Your
18
Chapter 4
Set Up Internet Connections
5. Go to Basic > Internet, select the Connection Type, and enter the information provided by your ISP.
6. Click Save to make the settings effective.
Tips:
1. You can view and edit all internet connections on Advanced > Network > Internet page.
2. In the Wireless Router Mode, you can also permit IPv6 connection by setting up an IPv6 connection or the IPv6 tunnel
just as in the DSL Modem Router Mode. For details, refer to Set Up an IPv6 Connection and Set Up the IPv6 Tunnel.

4. 5. 2. 3G/4G Router Mode

The modem router can be used as a 3G/4G wireless router if you have a 3G/4G USB modem. There are two ways to use your 3G/4G network:
• As a backup solution for internet access
Use this way if you have set up an internet connection successfully and want to use the 3G/4G network as a backup network. Your modem router will be directly connected to the 3G/4G network when the original network service fails. For detailed instructions, refer to
• As the only way to access the internet
Use this way if wired internet access is not available and you can only use the 3G/4G network to access the internet. For detailed instructions, refer to
Access the Internet
In the 3G/4G Router Mode, you can also permit IPv6 connection by setting up the IPv6 tunnel just as in the DSL Modem
Router Mode. For details, refer to Set Up the IPv6 Tunnel.
As a Backup Solution for Internet Access.
As the Only Way to
.
Tips:
19
Chapter 5

TP-Link Cloud Service

TP-Link Cloud service provides a better way to manage your cloud devices. Log in to your router with a TP-Link ID, and you can easily monitor and manage your home network when you are out and about via the Tether app on your smartphone or tablet. To ensure that your router stays new and gets better over time, the TP-Link Cloud will notify you when an important firmware upgrade is available. Surely you can also manage multiple TP-Link Cloud devices with a single TP-Link ID.
This chapter introduces how to register a new TP-Link ID, bind or unbind TP-Link IDs to manage your router, and the Tether app with which you can manage your home network no matter where you may find yourself.
It contains the following sections:
Register a TP-Link ID
Change Your TP-Link ID Information
Manage the User TP-Link IDs
Manage the Router via TP-Link Tether App
Chapter 5
TP-Link Cloud Service

5. 1. Register a TP-Link ID

If you have skipped the registration during the Quick Setup process, you can:
1. Visit http://tplinkmodem.net, and log in with the password you set for the router.
2. Go to
Basic > TP-Link Cloud.
3. Click Register Now and follow the instructions to register a TP-Link ID.
4. After activating your TP-Link ID, come back to the TP-Link Cloud page to log in. The
first-time login TP-Link ID will be bound automatically to your cloud router as an
Admin.
Note:
• Once the router is bound to your TP-Link ID, you need to log in to the router with the TP-Link ID.
• The TP-Link ID also can be registered via the TP-Link Tether app. Please refer to Install the Tether App on Your
Smartphones or Tablets to install the app. Launch the app, tap in the top-left corner of the screen and tap Login,
and then click New User to register a new one.
• If you want to unbind the admin TP-Link ID from your router, please go to Basic > TP-Link Cloud, click Unbind in the
Device Information section.

5. 2. Change Your TP-Link ID Information

Follow the steps below to change your email address and password of your TP-Link ID as needed.
1. Visit
2. Go to
Change your email address
1. Click
2. Enter the password of your TP-Link ID, then the new email address. And click
http://tplinkmodem.net, and log in with your TP-Link ID.
Basic > TP-Link Cloud, and focus on the Account Information section.
behind the Email.
Save.
21
Chapter 5
Change your password
TP-Link Cloud Service
1. Click
2. Enter the current password, then a new password twice. And click Save.
behind the Password.

5. 3. Manage the User TP-Link IDs

The first-time login TP-Link ID will be bound automatically to your router as an Admin account. An admin account can add or remove other TP-Link IDs to the same router as
Users. Admin account and User accounts both can monitor and manage the router
locally or remotely, except that user accounts cannot:
• Reset the router to factory default settings from the web management page or Tether app.
• Add/remove other TP-Link IDs to/from the router.
22
Chapter 5
TP-Link Cloud Service

5. 3. 1. Add an TP-Link ID to Manage the Router

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID.
2. Go to Basic > TP-Link Cloud, and focus on the Bound Accounts section.
3. Click
Note:
If you need another TP-Link ID, please refer to Install the Tether App on Your Smartphones or Tablets to install the app.
Launch the app, tap in the top-left corner of the screen and tap Login, and then click New User to register a new one.
, enter another TP-Link ID as needed and click Save.
4. The new TP-Link ID will be displayed in the Bound Accounts table as a User.

5. 3. 2. Remove TP-Link ID(s) From Managing the Router

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID.
2. Go to Basic > TP-Link Cloud, and focus on the Bound Accounts section.
3. Check the box(es) of the TP-Link ID(s) you want to remove and click
Unbind.
23
Chapter 5
TP-Link Cloud Service

5. 4. Manage the Router via TP-Link Tether App

5. 4. 1. Install the Tether App on Your Smartphones or Tablets

The Tether app runs on iOS and Android devices like smartphones and tablets.
1. Open the Apple App Store or Google Play and search the key word TP-Link Tether or simply scan the QR code to download and install the app.
OR
2. Connect your device to the router’s wireless network.
3. Launch the Tether app, select the model of your router and log in with your TP-Link
ID or the password you set for the router.
4. Manage your router as needed.
24
Chapter 6
TM
OneMesh
with Seamless
Roaming
This chapter introduces the TP-Link OneMeshTM feature.
It contains the following sections:
Set Up a OneMesh
Manage Devices in the OneMeshTM Network
TM
Network
Chapter 6
OneMeshTM with Seamless Roaming
TP-Link OneMeshTM router and TP-Link OneMeshTM extenders work together to form one unified Wi-Fi network. Walk through your home and stay connected with the fastest possible speeds thanks to OneMesh’s seamless coverage.
Unified Wi-Fi Network
Router and extenders share the same wireless settings, including network name, password, access control settings and more.
Seamless Roaming
Devices automatically switch between your router and extenders as you move through your home for the fastest possible speeds.
Easy Setup and Management
Set up a OneMeshTM network with a push of WPS buttons. Manage all network devices on the Tether app or at your router’s web management page.
Unified OneMeshTM Network
RN ET
IN TE
SAME
Network Name & Password
for Seamless Roaming

6. 1. Set Up a OneMeshTM Network

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID or the password you set
for the router.
2. Go to
Basic > OneMesh or Advanced > Wireless > OneMesh.
26
Chapter 6
Note:
Early firmware versions may not support OneMeshTM. If you can’t find the OneMesh page, please upgrade your router
to the latest firmware version. For upgrade instructions, refer to Upgrade the Firmware.
OneMeshTM with Seamless Roaming
3. Connect one or more OneMeshTM extenders to this router by following the setup
instructions in the extenders’ manuals.
Note:
To check full list of TP-Link OneMeshTM devices, visit https://www.tp-link.com/onemesh/compatibility.
4. If you have set up an extender to join the OneMeshTM network, it will be listed in the
Devices in OneMesh Network list. Otherwise, you need to find it in the Available
TM
OneMesh Devices
list and click Add to add it to the OneMesh
network.
Now your router and extenders successfully form one OneMeshTM network!

6. 2. Manage Devices in the OneMeshTM Network

In a OneMeshTM network, you can manage all mesh devices and clients on your router’s web page.
27
Chapter 6
OneMeshTM with Seamless Roaming
To view all mesh devices and clients in the OneMeshTM network:
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you set
for the router.
2. Go to
3. Click the
Basic > Network Map.
Mesh Devices, Wired Clients, or Wireless Clients icon to view the related
device or client list.
To manage each OneMeshTM device in the network:
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you set
for the router.
2. Go to
Basic > OneMesh or Advanced > Wireless > OneMesh.
28
Chapter 6
OneMeshTM with Seamless Roaming
3. Click a OneMesh
TM
device to view the device information, or click <number> Clients
to view the clients connected to this device.
On the
Device Info page, you can:
Click Manage Device to redirect to the web mangement page of this OneMesh
device.
Click
Leave OneMesh to delete this device from the OneMeshTM network.
TM
29
Chapter 7

IPTV

IPTV is the abbreviation of Internet Protocol Television. The service can only be delivered through the Internet, and our modem router provides a specific LAN port for IPTV.
By automatically separating IPTV from Internet surfing, you can enjoy a high quality of video streaming and fast browsing speeds at the same time.
Chapter 7
I want to:
Configure the modem router to enable Internet Protocol Television (IPTV) Services.
For example, I already bought IPTV service, but this service can only be delivered
through the Internet. Therefore, I need to configure my modem router first.
How can I do that?
1. Visit
2. Go to
3. Check Enable to enable IPTV function.
4. Select your ISP from the
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > IPTV to open the configuration page.
Profile drop-down listand and then the VLAN ID will be
automatically filled in. If your ISP is not listed, select VLAN ID using the parameters provided by your IPTV service provider.
Others and then configure your
5. Select a connection type from the connection. If you select Bridge, specify a LAN port for the IPTV connection and connect the set-top box to this port.
6. Click
Save to make the settings effective.
Profile drop-down listand according to your IPTV
Done!
Modem router configuration is complete! You may still need to configure settings on your set-top box before enjoying your IPTV service.
31
Chapter 8

Guest Network

This function allows you to provide Wi-Fi access for guests without disclosing your main network. When you have guests in your house, apartment, or workplace, you can create a guest network for them. In addition, you can assign network authorities and bandwidth for guests to ensure network security, privacy, and fluency.
Create a Network for Guests
Customize Guest Network Options
Chapter 8
Guest Network

8. 1. Create a Network for Guests

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
3. Create 2.4GHz and 5GHz guest network according to your needs.
1 ) Enable 2.4GHz Wireless or 5GHz Wireless or enable both according to your
2 ) Set an easy-to-identify SSID. Don‘t select
Advanced > Guest Network. Locate the Wireless Settings section.
needs.
Hide SSID unless you want your
guests and other people to manually input this SSID for Wi-Fi access.
3 ) Set
4. Click password you set!
Tips:
To view guest network information, go to Advanced > Status and find the Guest Network section.
Security to WPA/WPA2 Personal, keep the default Version and Encryption
values, and set an easy-to-remember password. 2.4GHz and 5GHz guest networks share the same password.
Save. Now your guests can access your guest network using the SSID and

8. 2. Customize Guest Network Options

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Guest Network.
33
Chapter 8
Guest Network
3. Assign network authorities and bandwidth according to your needs.
Allow Guests to Access Each Other
Select this check box to allow the clients in your guest network to access each other’s files.
Allow Guests to Access My Local Network
Select this check box to allow the clients in your guest network to access your local network, not just the internet.
Allow Guests to Access My USB Storage Sharing
Select this check box to allow the clients in your guest network to access your router’s USB storage sharing.
Enable QoS for Guest Network
Select this check box to set the QoS Priority of the guest network. This option is available only when QoS is enabled on the
Advanced > QoS page.
4. Click Save. Now users in your guest network can enjoy only the network authorities at the priority you assigned!
Tips:
To view guest network information, go to Advanced > Status and find the Guest Network section.
34
Chapter 9

USB Settings

This chapter describes how to use the USB ports to share files, media and a printer from the USB storage devices over your home network locally, or remotely through the internet.
The modem router supports USB external flash drives, hard drives and USB printers.
This chapter contains the following sections:
Access the USB Storage Device
Media Sharing
3G/4G Settings
Chapter 9
USB Settings

9. 1. Access the USB Storage Device

Insert your USB storage device into the modem router’s USB port and then access files stored there locally or remotely.
Tips:
• If you use USB hubs, make sure no more than 4 devices are connected to the modem router.
• If the USB storage device requires using bundled external power, make sure the external power has been
connected.
• If you use a USB hard drive, make sure its file system is FAT32 or NTFS. Some modem routers also support
the HFS+ and exFAT file systems.
• Before you physically disconnect a USB device from the modem router, safely remove it to avoid data
damage: Go to

9. 1. 1. Access the USB Device Locally

Insert your USB storage device into the modem router’s USB port and then refer to the following table to access files stored on your USB storage device:
Advanced > USB Sharing > USB Storage Device and click
.
Windows
computer
Method 1:
Go to (
ARCHER_model number by default) in the Computer section.
1. Operations in different systems are similar. Here we take Windows 7 as an example.
2. Network Server Name can be customized on the web management page.
Computer > Network, then click the Network Server Name
Note:
36
Chapter 9
USB Settings
Method 2:
Windows
computer
Open the address bar, then press
Windows Explorer (or go to Computer) and type the server
\\tplinkmodem.net or ftp://tplinkmodem.net in the address
Enter.
1 ) Select Go > Connect to Server
2 ) Type the server address smb://tplinkmodem.net
3 ) Click Connect
Mac
4 ) When prompted, select the Guest radio box. (If you have set up
a username and a password to deny anonymous access to the
Tablet
USB disks, you should select the learn how to set up an account for the access, refer to
Authentication for Data Security
Tips:
You can also use the FTP, http and SFTP methods to access the USB storage device.
Use a third-party app for network files management.
Registered User radio box. To
To Set up
.)

9. 1. 2. Access the USB Device Remotely

You can access your USB disk outside the local area network. For example, you can:
37
Chapter 9
USB Settings
• Share photos and other large files with your friends without logging in to (and paying
for) a photo-sharing site or email system.
• Get a safe backup for the materials for a presentation.
• Save and remove the files on your camera’s memory card during your travels.
Note:
If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), you cannot use this feature because
private addresses are not routed on the internet.
Follow the steps below to configure remote access settings.
1. Visit http://tplinkmodem.net, then log in with your TP-Link ID or the password you set for the modem router.
2. Go to
Settings
3. Select the check box to enable
Internet)
Advanced > USB Sharing > USB Storage Device page and locate the Sharing
section.
FTP (via Internet), or https (via Internet), or SFTP (via
, then click Save.
4. Refer to the following table to access your USB disk remotely.
38
Chapter 9
USB Settings
1 ) Open the Windows Explorer (or go to Computer, only for
Windows users) or open a web browser.
Windows
computer
2 ) Type the server address
in the address bar:
Type in ftp://<WAN IP address of the modem router>:<port
number>
(such as ftp://59.40.2.243:21). If you have specified the domain name of the modem router, you can also type in
ftp://<domain name>:<port number> (such as ftp://
MyDomainName:21
)
3 ) Press Enter on the keyboard.
4 ) Access with the username and password you set in
Authentication for Data Security
Tips:
You can also access the USB disk via a third-party app for network files management, which
can resume broken file transfers.
.
To Set up
Tablet
Tips:
Click
Set Up a Dynamic DNS Service Account to learn how to set up a domain name for your modem router.
Use a third-party app for network files management.

9. 1. 3. Customize the Access Settings

By default, all the network clients can access all folders on your USB disk. You can customize your sharing settings by setting a sharing account, sharing specific contents and setting a new sharing address on the modem router’s web management page.
1. Visit
2. Go to
To Customize the Address of the USB Disk
You can customize the server name and use the name to access your USB disk.
1. On the
http://tplinkmodem.net, then log in with your TP-Link ID or the password you
set for the modem router.
Advanced > USB Sharing > USB Storage Device page.
Sharing Settings part, make sure Network Neighborhood is ticked, and enter
a Network/Media Server Name as you like, such as
MyShare, then click Save.
39
Chapter 9
USB Settings
2. Now you can access the USB disk by visiting \\MyShare (for Windows) or smb://
MyShare
(for Mac).
To Only Share Specific Content
1. Focus on the
Folder Sharing section. Click the button to disable Share All, then click
Add to add a new sharing folder.
2. Select the Volume Name and Folder Path, then enter a Folder Name as you like.
3. Decide the way you share the folder:
40
Chapter 9
USB Settings
Enable Authentication: Select to enable authentication for this folder sharing,
and you will be required to log in to the Sharing Account to access the USB disk. Refer to
To Set up Authentication for Data Security to learn more.
Enable Write Access: If you tick this check box, network clients can modify this
folder.
Enable Media Sharing: Tick to enable media sharing for this folder, and you can
view photos, play music and watch movies stored on the USB disk directly from DLNA-supported devices. Refer to
Media Sharing to learn more.
4. Click
Tips:
The modem router can share eight volumes at most. You can click on the page to detach the corresponding volume
you do not need to share.
Save.
To Set up Authentication for Data Security
You can set up authentication for your USB device so that network clients will be required to enter the username and password when accessing the USB disk.
1. Under
Sharing Account, choose Use Default Account or Use New Account. The
username and password are both admin for the default account. If your choose
Use New Account, you have to customize the username and a password.
Note:
For Windows users, do not set the sharing username the same as the Windows username. Otherwise, Windows
credential mechanism may cause the following problems:
• If the sharing password is also the same as the Windows password, authentication will not work since the Windows
system will automatically use its account information for USB access.
• If the sharing password is different from the Windows password, the Windows system will be unable to remember
your credentials and you will always be required to enter the sharing password for USB access.
41
Chapter 9
USB Settings
2. Specify the folder(s) to enable authentication.
If you want to enable authentication for all folders, leave Share All enabled, and
toggle on
Enable Authentication.
If you want to enable authentication for specific folders, disable Share All and
click
Add to specify the folders, and select Enable Authentication.
Note:
Due to Windows credential mechanism, you might be unable to access the USB disk after changing Authentication
settings. Please log out from the Windows and try to access again. Or you can change the address of the USB disk by
referring to To Customize the Address of the USB Disk.

9. 2. Media Sharing

Media Sharing allows you to view photos, play music and watch movies stored on the USB disk directly from DLNA-supported devices, such as your computer, tablet or games console.
1. When your USB disk is inserted into the modem router, your DLNA-supported devices (such as your computer and tablet) connected to the modem router can
detect and play the media files on the USB disks.
42
Chapter 9
2. Refer to the following table for detailed instructions.
• Go to Computer > Network, then click the Media Server Name (Archer_
model number by default) in the Media Devices section.
Note:
Here we take Windows 7 as an example.
Windows
Computer
USB Settings
Smart
device
• Use a third-party DLNA-supported player.

9. 3. 3G/4G Settings

The modem router can be used as a 3G/4G wireless router if you have a 3G/4G USB modem. There are two ways to use your 3G/4G network:
• As a backup solution for internet access
• As the only way to access the internet

9. 3. 1. As a Backup Solution for Internet Access

Using 3G/4G network as a backup solution for internet access, your modem router will be directly connected to the 3G/4G network when the original network service fails.
Follow the steps below to set your 3G/4G network as a backup for internet access:
43
Chapter 9
USB Settings
1. Plug your USB modem into the USB port of your modem router.
2. Visit http://tplinkmodem.net, then log in with your TP-Link ID or the password you
set for the modem router.
3. Go to
Advanced > USB Settings > 3G/4G Settings, and select the box of Enable
3G/4G as a backup solution for Internet access
.
4. Verify that your 3G/4G USB Modem is successfully identified.
Note:
The 3G/4G USB modem will not be identified if it is incompatible with the modem router. Find the 3G/4G Compatibility List
on the web page: http://www.tp-link.com/en/comp-list.html. If your USB modem is incompatible, contact our technical
support.
5. Verify that the modem router has correctly recognized your Mobile ISP. When your
Mobile ISP is correct, you have successfully set 3G/4G network as a backup solution
for internet access. Otherwise, select the box
and Password manually
and enter the information provided by your 3G/4G network
Set the Dial Number, APN, Username
service provider.
6. Click
7. Click
Advanced to have more configurations if needed.
Save to make the settings effective.
44
Chapter 9
USB Settings

9. 3. 2. As the Only Way to Access the Internet

If you want the 3G/4G network to be your only way to access the internet, follow the steps below to configure:
1. Plug your USB modem into the USB port of your modem router.
2. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the modem router.
3. Go to
4. Click
Advanced > Operation Mode and choose 3G/4G Router Mode.
Save and when the modem router is successfully rebooted, the settings will
be effective.
5. Go to
Advanced > USB Sharing > 3G/4G Settings.
6. Verify that your 3G/4G USB Modem is successfully detected.
Note:
If your 3G/4G USB modem is incompatible with the modem router, it will not be identified. Find the 3G/4G Compatibility
List on the web page: http://www.tp-link.com/en/comp-list.html. If your USB modem is incompatible, contact our
technical support.
7. Verify that the modem router has correctly recognized your Mobile ISP. When your
Mobile ISP is correct, you can enjoy the internet! Otherwise, select the box Set the Dial Number, APN, Username and Password manually
and enter the information
provided by your 3G/4G network service provider.
8. Select the
Connection Mode. The default mode is Always on. You can choose
Connect on demand or Connect manually.
45
Chapter 9
USB Settings
If you choose Connect manually, you need to click the Connect or Disconnect
button to manually turn on or off the internet.
If you choose Connect on demand, the network will automatically turn off when
there is no internet request in
Max Idle Time, and turn on again when you try to
connect to the internet.
9. Click
10. Click
Advanced to have more configurations if needed.
Save to make the settings effective.
46
Chapter 10

Parental Controls

This function allows you to block inappropriate, explicit and malicious websites and limit internet access during specified time periods.
Chapter 10
Parental Controls
I want to:
Control what types of websites my children or other home network users can visit and the time of day they are allowed to access the internet.
For example, I want to allow my children’s devices (for example, a computer or a tablet)
to access only www.tp-link.com and wikipedia.org from 18:00 (6PM) to 22:00 (10PM) on weekdays and not other time.
How can I do that?
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Basic or Advanced > Parental Controls and enable Parental Controls.
3. Click Add.
48
Chapter 10
Parental Controls
4. Click Scan, and add the device to be controlled. Or, enter the Device Name and
MAC Address manually.
5. Click the cell(s) and click
Note: The time of Parental Controls is based on the system time of the modem router. Please go to Advanced > System
Tools > Time Settings to set the correct time..
icon to set the Effective Time. Drag the cursor over the appropriate
OK.
6. Enter a Description for the entry.
7. Select the check box to enable this entry and click
8. Enable
Content Restriction and select the restriction mode.
OK.
49
Chapter 10
Parental Controls
1 ) In Blacklist mode, the controlled devices cannot access any websites containing
the specified keywords during the Effective Time period.
2 ) In
Whitelist mode, the controlled devices can only access websites containing
the specified keywords during the Effective Time period.
9. Click Add a New Keyword. You can add many keywords for both Blacklist and Whitelist. Below are some sample entries to allow access.
1 ) Enter a web address (for example, www.tp-link.com) or a web address keyword
(for example, wikipedia) to only allow or block access to the websites containing that keyword.
2 ) Specify the domain suffix (for example, .edu or .org) to allow access only to the
websites with that suffix.
10. Enter the keywords or websites you want to add and click Save.
Done!
Now you can control your children’s internet access according to your needs.
50
Chapter 11
QoS
This chapter explains how to create a QoS (Quality of Service) rule to prioritize your online activities, which minimizes the impact caused by heavy internet traffic.
It contains the following sections:
Prioritize Internet Traffic with QoS
Update the Database
Chapter 11
QoS

11. 1. Prioritize Internet Traffic with QoS

QoS (Quality of Service) is designed to ensure the efficient operation of the network when network congestion is encountered.
I want to:
Specify priority levels for some devices or applications.
For example, I have several devices that are connected to my wireless network. I would
like to set an intermediate speed on the internet for my phone.
How can I do that?
1. Enable QoS and set bandwidth allocation.
1 ) Visit
2 ) Go to
3 ) Select
4 ) Choose your
5 ) Input the maximum upload and download bandwidth provided by your internet
6 ) If you want to prioritize the IPTV traffic, select
7 ) Click
8 ) Click
http://tplinkmodem.net, and log in with your TP-Link ID or the password
you set for the router.
Advanced > QoS > Settings.
Enable QoS.
Line Type.
service provider. 1Mbps equals to 1000Kbps.
Enable, the IPTV Priority will be
high.
Advanced and drag the scroll bar to set the bandwidth priority percentage.
Save.
2. Add a middle priority QoS rule for the phone.
1 ) Click Add in the Middle Priority area and then select By Device and click Scan.
52
Chapter 11
2 ) Choose the respective device from the list.
3 ) Click Save.
QoS
3. Refer to the steps above to apply other QoS rules if any.
Note:
If you want to delete a QoS rule, click to remove the responding rule from the list.
Done!
Now QoS is implemented to prioritize internet traffic.

11. 2. Update the Database

This function can help to add or update the applications the router supports. If the applications you need are not listed in the Application list, you can try to download the new version and upgrade the database. New database versions are posted at
www.tp-link.com and can be downloaded for free.
1. Download the latest QoS database from our website (
2. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you set
for the router.
www.tp-link.com).
53
Chapter 11
QoS
3. Go to Advanced > QoS > Database. Click Browse to select the database upgrade file,
and then click
Upgrade. Wait until the upgrade is complete and do not operate the
router during the process.
54
Chapter 12

Network Security

This chapter guides you on how to protect your home network from unauthorized users by implementing these five network security functions. You can protect the router from cyber attacks using the Firewall, prevent certain users from accessing the specified service, and even block internet access completely using Service Filtering, or use Access Control to block or allow specific client devices to access your network. Or you can prevent ARP spoofing and ARP attacks by using IP & MAC Binding and you can protect your IPv6 network by preventing access from the internet using IPv6 Firewall.
Firewall & DoS Protection
Service Filtering
Access Control
IP & MAC Binding
IPv6 Firewall
Chapter 12
Network Security

12. 1. Firewall & DoS Protection

The SPI (Stateful Packet Inspection) Firewall and DoS (Denial of Service) Protection protect the router from cyber attacks.
The SPI Firewall can prevent cyber attacks and validate the traffic that is passing through the router based on the protocol. This function is enabled by default, and it’s recommended to keep the default settings.
DoS Protection can protect your home network against DoS attacks from flooding your network with server requests. Follow the steps below to configure DoS Protection.
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Security > Firewall & DoS Protection.
3. Enable DoS Protection.
4. Set the level (Low, Middle or High) of protection for ICMP-Flood Attack Filtering,
UDP-Flood Attack Filtering and TCP-Flood Attack Filtering.
ICMP-Flood Attack Filtering - Enable to prevent the ICMP (Internet Control
Message Protocol) flood attack.
UDP-Flood Attack Filtering - Enable to prevent the UDP (User Datagram
Protocol) flood attack.
TCP-Flood Attack Filtering - Enable to prevent the TCP (Transmission Control
Protocol) flood attack.
5. Click
Tips:
1. The level of protection is based on the number of traffic packets. Specify the level at DoS Protection Level Settings.
Save.
56
Chapter 12
2. The protection will be triggered immediately when the number of packets exceeds the preset threshold value, and
the vicious host will be displayed in the Blocked DoS Host List.
Network Security

12. 2. Service Filtering

With Service Filtering, you can prevent certain users from accessing the specified service, and even block internet access completely.
1. Visit
2. Go to
3. Toggle on
4. Click Add.
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Security > Service Filtering.
Service Filtering.
57
Chapter 12
Network Security
5. Select a Service Type from the drop-down list and the following four fields will be auto-populated. Select enter the information manually.
6. Specify the IP address(es) that this filtering rule will apply to.
7. Click
Note: If you want to disable this entry, click the icon.
Save.
Custom when your desired service type is not listed, and

12. 3. Access Control

Access Control is used to block or allow specific client devices to access your network (via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed devices (Whitelist).
I want to:
Block or allow specific client devices to access my network (via wired or wireless).
How can I do that?
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Security > Access Control and enable Access Control.
58
Chapter 12
Network Security
3. Select the access mode to either block (recommended) or allow the device(s) in the list.
To block specific device(s)
1 ) Select
2 ) Select the device(s) to be blocked in the
3 ) Click
to
Blacklist and click Save.
Online Devices table.
Block above the Online Devices table. The selected devices will be added
Devices in Blacklist automatically.
To allow specific device(s)
1 ) Select
2 ) Click
Whitelist and click Save.
Add.
59
Chapter 12
1 ) Click San and the Device Name and MAC Address will be automatically filled in.
Or enter the
Network Security
Device Name and MAC Address manually.
2 ) Click
Save.
Done!
Now you can block or allow specific client devices to access your network (via wired or wireless) using the
Blacklist or Whitelist.

12. 4. IP & MAC Binding

IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind a network device’s IP address to its MAC address. This will prevent ARP spoofing and other ARP attacks by denying network access to a device with a matching IP address in the Binding list, but an unrecognized MAC address.
I want to:
Prevent ARP spoofing and ARP attacks.
How can I do that?
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
3. Bind your device(s) according to your needs.
Advanced > Security > IP & MAC Binding and enable IP & MAC Binding.
60
Chapter 12
To bind the connected device(s)
Network Security
1 ) Select the device(s) to be bound in the
2 ) Click
To bind the unconnected device
1 ) Click
2 ) Enter the MAC Address and IP Address that you want to bind.
3 ) Select the check box to enable the entry and click
Bind to add to the Binding List.
Add.
ARP List.
OK.
Done!
Enjoy the internet without worrying about ARP spoofing and ARP attacks.

12. 5. IPv6 Firewall

IPv6 Firewall protects your IPv6 network by preventing access from the internet. However, when you are hosting a service, such as a file sharing server in your local network, you can choose to allow access to the server from the internet by adding entries on this page. This feature is available only when you’ve set up an IPv6 connection.
1. Visit
2. Go to
3. Click
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Security > IPv6 Firewall.
Add.
61
Chapter 12
Network Security
4. Select an interface name from the drop-down list. Interface names are names of the internet connections you have set up.
5. Click
Scan to select a service from the list to automatically populate the Port field
with an appropriate port number. It is recommended to keep the default Port if you are unsure about which one to use. If the service is not listed, manually enter the
Service Type and the Port number (e.g., 21 or 21-25).
6. Click
Scan to select the local host device running the service. If the device is not
listed, enter its global IPv6 address in the
Internal IP field
7. Select a protocol for the service from the drop-down list.
8. Tick
Note: If you want to disable this entry, click the icon.
Enable This Entry and click Save.
62
Chapter 13

NAT Forwarding

Modem router’s NAT (Network Address Translation) feature makes the devices in the LAN use the same public IP address to communicate in the internet, which protects the local network by hiding IP addresses of the devices. However, it also brings about the problem that external host cannot initiatively communicate with the specified device in the local network.
The modem router can use a forwarding feature to remove the isolation of NAT and allow external internet hosts to intuitively communicate with the devices in the local network, thus enabling some special features.
TP-Link modem router includes four forwarding rules. If two or more rules are set, the priority of implementation from high to low is Virtual Servers, Port Triggering, UPNP and DMZ.
This chapter contains the following sections:
Translate Address and Port by ALG
Share Local Resources over the Internet by Virtual Server
Open Ports Dynamically by Port Triggering
Make Applications Free from Port Restriction by DMZ
Make Xbox Online Games Run Smoothly by UPnP
Chapter 13
NAT Forwarding

13. 1. Translate Address and Port by ALG

ALG (Application Layer Gateway) allows customized NAT (Network Address Translation) traversal filters to be plugged into the gateway to support address and port translation for certain application layer “control/data” protocols: FTP, TFTP, H323 etc. Enabling ALG is recommended.
1. Visit
2. Go to
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > NAT Forwarding > ALG.
PPTP Pass-through: If enabled, it allows Point-to-Point sessions to be tunneled through an IP network and passed through the router.
L2TP Pass-through: If enabled, it allows Layer 2 Point-to-Point sessions to be tunneled
• through an IP network and passed through the router.
IPSec Pass-through: If enabled, it allows IPSec (Internet Protocol Security) to
be tunneled through an IP network and passed through the router. IPSec uses cryptographic security services to ensure private and secure communications over IP networks.
FTP ALG: If enabled, it allows FTP (File Transfer Protocol) clients and servers to transfer
data via NAT.
TFTP ALG: If enabled, it allows TFTP (Trivial File Transfer Protocol) clients and servers
to transfer data via NAT.
H323 ALG: If enabled, it allows Microsoft NetMeeting clients to communicate via NAT.
SIP ALG: If enabled, it allows clients communicate with SIP (Session Initiation Protocol)
servers via NAT.
64
Chapter 13
NAT Forwarding
RTSP ALG: If enabled, it allows RTSP (Real-Time Stream Protocol) clients and servers to transfer data via NAT.
13. 2. Share Local Resources over the Internet by
Virtual Server
When you build up a server in the local network and want to share it on the internet, Virtual Server can realize the service and provide it to the internet users. At the same time virtual server can keep the local network safe as other services are still invisible from the internet.
Virtual server can be used for setting up public services in your local network, such as HTTP, FTP, DNS, POP3/SMTP and Telnet. Different service uses different service port. Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and port 110 in POP3 service. Please verify the service port number before the configuration.
I want to:
Share my personal website I’ve built in a local network with my friends through the internet.
For example, the personal website has been built on my home PC (192.168.1.100). I
hope that my friends can visit my website. The PC is connected to the modem router with the WAN IP address 218.18.232.154.
Personal Website
Home
Modem Router
LAN
WAN: 218.18.232.154
How can I do that?
1. Assign a static IP address to your PC, for example 192.168.1.100.
2. Visit http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
3. Go to
Advanced > NAT Forwarding > Virtual Servers, click Add.
65
Chapter 13
NAT Forwarding
4. Click Scan, and choose HTTP. The external port, internal port and protocol will be
automatically filled with contents. Enter the PC’s IP address 192.168.1.100 in the
Internal IP field.
5. Click Save to save the settings.
Tips:
1. It is recommended to keep the default settings of Internal Port and Protocol if you are not clear about which port and
protocol to use.
2. If the service you want to use is not in the Service Type, you can enter the corresponding parameters manually. You
should verify the port number that the service needs.
3. You can add multiple virtual server rules if you want to provide several services from a modem router. Please note that
the External Por t cannot be overlapped.
Done!
Internet users can enter your personal website.
Tips:
1. For a WAN IP that is assigned dynamically by ISP, it is recommended to apply and register a domain name for the
WAN by DDNS, go to Set Up a Dynamic DNS Service Account for more information. Then you can use http://domain
name to visit the website.
2. If you have changed the default External Port, you should use http://WAN IP: External Port or http://domain name:
External Port to visit the website.
http://WAN IP (in this example: http://218.18.232.154) to visit

13. 3. Open Ports Dynamically by Port Triggering

Port triggering can specify a triggering port and its corresponding external ports. When a host in the local network initiates a connection to the triggering port, all the external ports will be opened for subsequent connections. The modem router can record the IP
66
Chapter 13
NAT Forwarding
address of the host. When the data from the internet returns to the external ports, the modem router can forward them to the corresponding host. Port triggering is mainly applied to online games, VoIPs and video players. Common applications include MSN Gaming Zone, Dialpad, Quick Time 4 players, and so on.
Follow the steps below to configure the port triggering rules:
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > NAT Forwarding > Port Triggering and click Add.
3. Click Scan, and select the desired application. The triggering port and protocol, the
external port and protocol will be automatically filled with contents. Here we take
MSN Gaming Zone as an example.
4. Click Save to save the settings.
Tips:
1. You can add multiple port triggering rules according to your network need.
2. If the application you need is not listed in the Existing Applications list, please enter the parameters manually. You
should verify the external ports the application uses first and enter them into External Port field according to the
format the page displays.
13. 4. Make Applications Free from Port Restriction
by DMZ
When a PC is set to be a DMZ (Demilitarized Zone) host in the local network, it is totally exposed to the internet, which can realize the unlimited bidirectional communication
67
Chapter 13
between internal hosts and external hosts. The DMZ host becomes a virtual server with all ports opened. When you are not clear about which ports to open in some special applications, like IP camera and database software, you can set the PC to be a DMZ host.
Note:
DMZ is most applicable when you don’t know which ports to open. When it is enabled, the DMZ host is totally exposed
to the internet, which may bring some potential safety hazard. If DMZ is not in use, please disable it in time.
NAT Forwarding
I want to:
Make the home PC join the internet online game without port restriction.
For example, Due to some port restriction, when playing the online games, you can
login normally but cannot join a team with other players. To solve this problem, set your PC as a DMZ with all ports opened.
How can I do that?
1. Assign a static IP address to your PC, for example 192.168.1.100.
2. Visit
3. Go to
4. Enter the IP address 192.168.1.100 in the DMZ Host IP Address filed.
5. Click Save to save the settings.
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > NAT Forwarding > DMZ and select the checkbox to enable DMZ.
Done!
The configuration is completed. You’ve set your PC to a DMZ host and now you can make a team to game with other players.
13. 5. Make Xbox Online Games Run Smoothly by
UPnP
UPnP (Universal Plug and Play) protocol allows the applications or host devices to automatically find the front-end NAT device and send request to it to open the corresponding ports. With UPnP enabled, the applications or host devices in the both sides of NAT device can freely communicate with each other realizing the
68
Chapter 13
NAT Forwarding
seamless connection of the network. You may need to enable the UPnP if you want to use applications such as multiplayer gaming, peer-to-peer connections, real-time communication (for example, VoIP or telephone conference), or remote assistance.
Tips:
1. UPnP is enabled by default in this modem router.
2. Only the application supporting UPnP protocol can use this feature.
3. UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc. Some of
operating system need to install the UPnP components).
For example, when you connect your Xbox to the modem router which has connected to
the internet to play online games, UPnP will send request to the modem router to open the corresponding ports allowing the following data penetrating the NAT to transmit. Therefore, you can play Xbox online games without a hitch.
LAN
WAN
Modem RouterXbox
If necessary, you can follow the steps to change the status of UPnP.
1. Visit
2. Go to
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the modem router;
Advanced > NAT Forwarding > UPnP and toggle on or off according to your
needs.
69
Chapter 14

VPN Server

The VPN (Virtual Private Networking) Server allows you to access your home network in a secured way through the internet when you are out of the house. The router offers three ways to setup VPN connection: OpenVPN, PPTP (Point to Point Tunneling Protocol) VPN and IPSec (Internet Protocol Security) VPN.
OpenVPN is somewhat complex but with greater security and more stability. It is suitable for restricted environment, such as campus network and company intranet.
PPTP VPN is easier to use and its speed is faster. It’s compatible with most operating systems and also supports mobile devices. However, its security is poor and packets may be cracked easily. PPTP VPN may be blocked by some ISPs.
IPSec (IP Security) is a set of services and protocols defined by IETF (Internet Engineering Task Force) to provide high security for IP packets and prevent attacks.
This chapter contains the following sections, please choose the appropriate VPN server connection type according to your needs.
Use OpenVPN to Access Your Home Network
Use PPTP VPN to Access Your Home Network
Use IPSec VPN to Access Your Home Network
Chapter 14
VPN Server

14. 1. Use OpenVPN to Access Your Home Network

In an OpenVPN connection, the home network can act as a server, and the remote device can access the server through the router which acts as an OpenVPN Server gateway. To use the VPN feature, you should enable OpenVPN Server on your router, install and run VPN client software on the remote device. Please follow the steps below to set up an OpenVPN connection.
Step 1. Set up OpenVPN Server on Your Router
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you set
for the router.
2. Go to
Note:
• Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or
assign a static IP address for your router’s WAN port and synchronize your System Time via the internet.
• The first time you configure the OpenVPN Server, you may need to
enable the VPN Server.
Advanced > VPN > OpenVPN, and select Enable VPN Server.
Generate a certificate before you
3. Select the Service Type (communication protocol) for OpenVPN Server: UDP, TCP.
4. Enter a VPN
Service Port to which a VPN device connects. The port number should
be between 1024 and 65535.
5. In the
VPN Subnet/Netmask fields, enter the range of IP addresses that can be leased
to the device by the OpenVPN server.
71
Chapter 14
VPN Server
6. Select your Client Access type. Select Home Network Only if you only want the
remote device to access your home network; select
Internet and Home Network if
you also want the remote device to access the internet through the VPN Server.
7. Click
8. Click
Note:
If you have already generated one, please skip this step, or click Generate to update the certificate.
Save.
Generate to get a new certificate.
9. Click Export to save the OpenVPN configuration file which will be used by the remote
device to access your router.
Step 2. Configure OpenVPN Connection on Your Remote Device
1. Visit
download the OpenVPN software, and install it on your device where you want to run the OpenVPN client utility.
http://openvpn.net/index.php/download/community-downloads.html to
Note:
You need to install the OpenVPN client utility on each device that you want to be able to use the VPN function. Mobile
devices should download a third-party app from Google Play or Apple App Store.
2. After the installation, copy the file exported from your router to the OpenVPN client
utility’s “config” folder (for example,
C:\Program Files\OpenVPN\config on Windows).
The path depends on where the OpenVPN client utility is installed.
3. Run the OpenVPN client utility and connect it to OpenVPN Server.

14. 2. Use PPTP VPN to Access Your Home Network

PPTP VPN Server is used to create a VPN connection for remote devices. To use the VPN feature, you should enable PPTP VPN Server on your router, and configure the PPTP connection on the remote device. Please follow the steps below to set up a PPTP VPN connection.
Step 1. Set up PPTP VPN Server on Your Router
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you set
for the router.
2. Go to Advanced > VPN > PPTP VPN, and select Enable VPN Server.
72
Chapter 14
Note:
Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static
IP address for router’s WAN port and synchronize your System Time with internet.
VPN Server
3. In the Client IP Address field, enter the range of IP addresses (up to 10) that can be
leased to the devices by the PPTP VPN server.
4. Enter the
5. Click
Username and Password to authenticate clients to the PPTP VPN server.
Save.
Step 2. Configure PPTP VPN Connection on Your Remote Device
The remote device can use the Windows built-in PPTP software or a third-party PPTP software to connect to PPTP Server. Here we use the as an example.
1. Go to
2. Select
Start > Control Panel > Network and Internet > Network and Sharing Center.
Set up a new connection or network.
Windows built-in PPTP software
3. Select Connect to a workplace and click Next.
73
Chapter 14
VPN Server
4. Select Use my Internet connection (VPN).
5. Enter the internet IP address of the router (for example: 218.18.1.73) in the Internet
address
field. Click Next.
74
Chapter 14
VPN Server
6. Enter the Username and Password you have set for the PPTP VPN server on your
router, and click
Connect.
7. The PPTP VPN connection is created and ready to use.
75
Chapter 14
Modem router 1
LAN: 192.168.1.1
WAN: 219.134.112.246
PC 1
Subnetmask: 255.255.255.0
WAN: 219.134.112.247
Modem Router 2
PC 2
LAN: 192.168.2.1
Subnetmask: 255.255.255.0
Site A Site B
VPN Server

14. 3. Use IPSec VPN to Access Your Home Network

IPSec VPN is used to create a VPN connection between local and remote networks. To use IPSec VPN, you should check that both local and remote routers support IPSec VPN feature. Then, follow the steps below to set up an IPSec VPN connection.
1. The typical VPN topology is here. Site A refers to local network, and Site B refers to
the remote network that is to be connected. Record Site A and Site B’s LAN and WAN IP addresses before you start configuration.
2. Configuration on Site A (local network).
1 ) Visit
2 ) Go to Advanced > VPN > IPSec VPN, and click Add.
http://tplinkmodem.net, and log in with your TP-Link ID or the password
you set for the router.
76
Chapter 14
VPN Server
3 ) In the IPSec Connection Name column, specify a name.
4 ) In the
5 ) Configure
In the as an example. Input the LAN IP range of Site A in the and input
6 ) Configure
In the
Address VPN
7 ) Select the
Remote IPSec Gateway (URL) column, Enter Site B’s WAN IP address.
Site A’s LAN.
Tunnel access from local IP addresses column, we take Subnet Address
IP Address for VPN column,
Subnet Mask of Site A.
Site B’s LAN.
Tunnel access from remote IP addresses column, we take Subnet
as an example. Input the LAN IP range of Site B in the IP Address for
column, and input Subnet Mask of Site B.
Key Exchange Method for the policy. We select Auto(IKE) here.
77
Chapter 14
VPN Server
8 ) Enter the Pre-Shared Key for IKE authentication. Then keep Perfect Forward
Secrecy
Note: Make sure Site A and Site B use the same key.
enabled.
9 ) Leave the Advanced Settings as default value. Then click Save.
Note: The Status column is Down after the configuration, and it will change to UP only when Site A and Site B are
communicating via the VPN connection.
3. Configuration on Site B (remote network). Refer to step 2 configuration on Site A
and make sure that Site A and Site B use the same
Forward Secrecy
settings.
pre-shared keys and Perfect
4. Check the VPN connection. You can ping site B’ LAN IP from your computer in site
A to verify that the IPSec VPN connection is set up correctly.
Tips: To check the VPN connection, you can do the following.
1. On the host in Site A, press [Windows Logo] + [R] to open Run dialog. Input “cmd” and hit OK.
2. In the CLI window, type in “ping 192.168.2.x” (“192.168.2.x” can be IP address of any host in Site B). Then press [Enter].
3. If Ping proceeds successfully (gets replies from host in Site B), the IPSec connection is working properly now.
5. Now IPSec VPN is implemented to establish a connection.
78
Chapter 14
Note:
1. The product supports a maximum of ten simultaneous connections.
2. If one of the site has been offline for a while, for example, if Site A has been disconnected, on Site B you need to click
Disable and then click Enable after Site A back on line in order to re-establish the IPSec tunnel.
VPN Server
79
Chapter 15

Specify Your Network Settings

This chapter introduces how to change the default settings or adjust the basic configuration of the modem router using the web management page.
It contains the following sections:
LAN Settings
IPv6 LAN Settings
Wireless Settings
Set Up a Dynamic DNS Service Account
Create Static Routes
Set Up the IPv6 Tunnel
Chapter 15
Specify Your Network Settings

15. 1. LAN Settings

15. 1. 1. Change the LAN IP Address

The modem router is preset with a default LAN IP 192.168.1.1, which you can use to log in to its web management page. The LAN IP address together with the Subnet Mask also defines the subnet that the connected devices are on. If the IP address conflicts with another device in your local network or your network requires a specific IP subnet, you can change it.
Follow the steps below to change your IP address.
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Note:
If you have created an interface group, you can configure different IPv4 LAN settings for the default and created interface
groups.
Advanced > Network > LAN Settings page and select IPv4.
3. Type in a new IP Address appropriate to your needs.
4. Select the
Subnet Mask from the drop-down list. The subnet mask together with
the IP address identifies the local IP subnet.
5. Keep
IGMP Snooping enabled by default. IGMP snooping is the process of listening
to IGMP (Internet Group Management Protocol) network traffic. The function prevents hosts on a local network from receiving traffic for a multicast group they have not explicitly joined.
6. You can configure the modem router’s
Second IP and Subnet Mask for LAN interface
through which you can also access the web management page.
7. Leave the rest of the default settings as they are.
8. Click Save to make the settings effective.
81
Chapter 15
Specify Your Network Settings

15. 1. 2. Use the Modem Router as a DHCP Server

You can configure the modem router to act as a DHCP server to assign IP addresses to its clients. To use the DHCP server function of the modem router, you must configure all computers on the LAN to obtain an IP Address automatically.
Follow the steps below to configure DHCP server.
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Note:
If you have created an interface group, you can configure different IPv4 LAN settings for the default and created interface
groups.
Advanced > Network > LAN Settings page and select IPv4.
3. Select DHCP to enable the DHCP function and select DHCP Server.
4. Specify the
IP Address Pool, the start address and end address must be on the
same subnet with LAN IP. The modem router will assign addresses within this specified range to its clients. It is from 192.168.1.100 to 192.168.1.199 by default.
5. Enter a value for the
Address Lease Time. The Address Lease Time is the amount of
time in which a DHCP client can lease its current dynamic IP address assigned by the modem router. After the dynamic IP address expires, the user will be automatically assigned a new dynamic IP address. The default is 1440 minutes.
6. Keep the rest of the settings as default and click
Note:
1. The modem router can be configured to work as a DHCP Relay. A DHCP relay is a computer that forwards DHCP data
between computers that request IP addresses and the DHCP server that assigns the addresses. Each of the device’s
interfaces can be configured as a DHCP relay. If it is enabled, the DHCP requests from local PCs will be forwarded to
the DHCP server that runs on WAN side.
2. You can also appoint IP addresses within a specified range to devices of the same type by using Condition Pool
feature. For example, you can assign IP addresses within the range (192.168.1.50 to192.168.1.80) to Camera devices,
thus facilitating the network management. Enable DHCP feature and configure the parameters according to your
situation on the
Advanced > Network > LAN Settings page.
Save.
82
Chapter 15
Specify Your Network Settings

15. 1. 3. Reserve LAN IP Addresses

You can view and add a reserved address for a client. When you specify an IP address for a device on the LAN, that device will always receive the same IP address each time when it accesses the DHCP server. If there are some devices in the LAN that require permanent IP addresses, please configure Address Reservation on the router for the purpose.
Follow the steps below to reserve an IP address for your device.
1. Visit
2. Go to
3. Scroll down to locate the Address Reservation table and click Add to add an address
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Network > LAN Settings page and select IPv4.
reservation entry for your device.
4. Click Scan and select the device for which you want to reserve IP address. Then the
MAC Address and IP Address fields will be automatically filled in.
5. Specify the IP address which will be reserved by the router.
6. Check to
Enable this entry and click Save to make the settings effective.

15. 2. IPv6 LAN Settings

Based on the IPv6 protocol, the modem router provides two ways to assign IPv6 LAN addresses:
• Configure the RADVD (Router Advertisement Daemon) address type
• Configure the DHCPv6 Server address type
83
Chapter 15
Specify Your Network Settings

15. 2. 1. Configure the RADVD Address Type

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Network > LAN Settings.
3. Select IPv6 to configure IPv6 LAN parameters.
Note:
If you have created an interface group, you can configure IPv6 LAN settings for the default interface group only.
1 ) Select the RADVD address type to make the modem router assign IPv6 address
prefixes to hosts.
Note:
Do not select the Enable RDNSS and Enable ULA Prefix check boxes unless required by your ISP. Otherwise
you may not be able to access the IPv6 network. For more information about RDNSS and ULA Prefix, contact
our technical support.
2 ) Keep Site Prefix Type as the default value Delegated. If your ISP has provided a
specific IPv6 site prefix, select
3 ) Keep
WAN Connection as the default value.
Static and enter the prefix.
4. Click Save to make the settings effective.

15. 2. 2. Configure the DHCPv6 Server Address Type

1. Visit http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
3. Select
Advanced > Network > LAN Settings.
IPv6 to configure IPv6 LAN parameters.
84
Chapter 15
Note:
If you have created an interface group, you can configure IPv6 LAN settings for the default interface group only.
Specify Your Network Settings
1 ) Select the DHCPv6 Server address type to make the modem router assign
IPv6 addresses to hosts.
2 ) Specify the
Starting/Ending IPv6 Address for the IPv6 suffixes. The modem
router will generate IPv6 addresses within the specified range.
3 ) Keep
4 ) Keep
5 ) Keep
Address Lease Time as the default value.
Site Prefix Type as the default value Delegated. If your ISP has provided a
specific IPv6 site prefix, select
Static and enter the prefix.
WAN Connection as the default value.
4. Click Save to make the settings effective.

15. 3. Wireless Settings

15. 3. 1. Specify Basic Wireless Settings

The modem router’s wireless network name (SSID) and password, and security option are preset in the factory. The preset SSID and password can be found on the product label. You can customize the wireless settings according to your needs.
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Basic > Wireless page.
85
Chapter 15
Specify Your Network Settings
To enable or disable the wireless function:
Enable the
2.4 GHz or 5GHz Wireless Network. If you don’t want to use the wireless
function, just deselect the box. If you disable the wireless function, all the wireless settings won’t be effective.
To change the wireless network name (SSID) and wireless password:
Enter a new SSID using up to 32 characters. The value is case-sensitive.
Note:
If you use a wireless device to change the wireless settings, you will be disconnected after the new settings are effective.
Please write down the new SSID and password for future use.
To hide SSID:
Select Hide SSID, and your SSID will not be broadcast. Your SSID won’t display on your wireless device when you scan for local wireless network list and you need to manually join the network.
To use the Smart Connect function:
The smart connect function lets you to enjoy a more high-speed network by assigning your devices to best wireless bands based on actual conditions to balance network demands.
1. Go to
2. Enable
3. Keep the default or set a new SSID and password, and click
Advanced > Wireless > Wireless Settings.
Smart Connect.
Save. This SSID and
password will be applied both for 2.4GHz and 5GHz wireless networks.
86
Chapter 15
Specify Your Network Settings
To change the mode or channel:
Go to
Advanced > Wireless > Wireless Settings page and select the wireless network
2.4GHz or 5GHz.
Mode: Select the desired mode.
• 802.11n only: Select only if all of your wireless clients are 802.11n devices.
• 802.11gn mixed: Select if you are using both 802.11g and 802.11n wireless clients.
• 802.11bgn mixed: Select if you are using a mix of 802.11b, 11g, and 11n wireless
clients.
Note: When 802.11n only mode is selected, only 802.11n wireless stations can connect to the modem router. It is
strongly recommended that you select 802.11bgn mixed, and all of 802.11b, 802.11g, and 802.11n wireless stations
can connect to the modem router.
• 802.11ac/n mixed (5GHz): Select if you are using both 802.11ac and 802.11n wireless
clients.
• 802.11a/n/ac mixed (5GHz): Select if you are using a mix of 802.11a, 802.11n and
802.11ac wireless clients. It is strongly recommended that you select 11a/n/ac mixed.
Channel: Select the channel you want to use from the drop-down list. This field
determines which operating frequency will be used. It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point.
87
Chapter 15
Channel Width: Select the channel width from the drop-down list. The default setting is Auto, which can adjust the channel width for your clients automatically.
Transmit Power: Select Low, Middle, or High to specify the data transmit power. The
default and recommended setting is High.
To change the security option:
Specify Your Network Settings
1. Go to
2. Select the wireless network
3. Select an option from the Security drop-down list. The router provides four options,
None, WPA/WPA2 Personal (Recommended), WPA/WPA2 Enterprise, WEP. WPA2 uses the newest standard and the security level is the highest. We recommend you don’t change the default settings unless necessary.
Advanced > Wireless > Wireless Settings page.
2.4GHz or 5GHz.

15. 3. 2. Use WPS for Wireless Connection

You can use WPS (Wi-Fi Protected Setup) to add a new wireless device to your existing network quickly and easily.
Method 1: Use the WPS button
Use this method if your client device has a WPS button.
1. Press the WPS button the modem router for 1 second.
2. Press the WPS button of the client device directly.
3. The WPS LED flashes for about 2 minutes during the WPS process.
4. When the WPS LED is on, the client device has successfully connected to the
modem router.
Method 2: Use the WPS button on the web management page
Use this method if your client device has a WPS button.
1. Visit
2. Go to
3. Click Start WPS on the page.
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Wireless > WPS page.
88
Chapter 15
Specify Your Network Settings
4. Press the WPS button of the client device directly.
5. The WPS LED of the router flashes for about 2 minutes during the WPS process.
6. When the WPS LED is on, the client device has successfully connected to the
modem router.
Method 3: Enter the modem router’s PIN on your client device
Use this method if your client device asks for the modem router’s PIN.
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Wireless > WPS page. Click Method Two--PIN.
3. Take a note of the Current PIN of the modem router. You can also click the Generate
button to get a new PIN.
4. On the client device, enter the modem router’s PIN. (The default PIN is also printed
on the label of the modem router.)
5. The WPS LED flashes for about two minutes during the WPS process.
6. When the WPS LED is on, the client device has successfully connected to the
modem router.
Note:
1. The WPS LED on the modem router will light on for five minutes if the device has been successfully added to the
network.
2. The WPS function cannot be configured if the wireless function of the modem router is disabled. Please make sure
the wireless function is enabled before configuring WPS.
Method 4: Enter the client device’s PIN on the modem router
1. Visit
2. Go to
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Wireless > WPS page. Click Method Two--PIN.
89
Chapter 15
Specify Your Network Settings
3. Select Client’s PIN.
4. Enter the client device’s PIN in the field. Then click the Connect button.
5.
Device has been added successfully! will appear on the above screen, which means
the client device has successfully connected to the modem router.

15. 3. 3. Schedule Your Wireless Function

You can automatically turn off your wireless network (both 2.4GHz and 5GHz) when you do not need the wireless connection.
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Wireless > Wireless Schedule page.
3. Toggle on the button to enable the Wireless Schedule feature.
4. Click Add to set the Wireless Off Time, and click Save to save the settings.
5. Repeat steps 3 and 4 to set another entry.
Note:
1. Make sure that the time of the router is correct before using this function. For details, refer to Set System Time.
2. If you just set time for one wireless band, the other wireless band is still always on, so set time for both of the two
bands to schedule your whole wireless network.
3. The wireless LED (2.4GHz , 5GHz) will turn off if the corresponding wireless network is disabled.
4. The wireless network will be automatically turned on after the time period you set.
90
Chapter 15

15. 3. 4. View Wireless Information

To view the detailed wireless network settings:
Specify Your Network Settings
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Status page. You can see the Wireless box.
3. Select 2.4GHz or 5GHz to view the wireless details.
Tips: You can also see the wireless details by clicking the router icon on Basic> Network Map.
To view the detailed information of the connected wireless clients:
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Wireless > Statistics page.
3. You can view the detailed information of the wireless clients, including its connected
wireless band and security option as well as the packets transmitted.
Tips: You can also see the wireless details by clicking the wireless clients icon on Basic > Network Map.

15. 3. 5. Advanced Wireless Settings

Advanced wireless settings are for those who have a network concept. If you are not familiar with the settings on this page, it’s strongly recommended that you keep the provided default values; otherwise it may result in lower wireless network performance.
1. Visit
2. Go to
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Wireless > Advanced Settings page.
91
Chapter 15
Beacon Interval: Enter a value between 25 and 1000 in milliseconds to determine the
duration between which beacon packets are broadcasted by the router to synchronize the wireless network. The default is 100 milliseconds.
Specify Your Network Settings
RTS Threshold: Enter a value between 1 and 2346 to determine the packet size of
data transmission through the router. By default, the RTS (Request to Send) Threshold size is 2346. If the packet size is greater than the preset threshold, the router sends Request to Send frames to a particular receiving station and negotiates the sending of a data frame, or else the packet will be sent immediately.
DTIM Interval: Enter a value between 1 and 255 to determine the interval of the
Delivery Traffic Indication Message (DTIM). 1 indicates the DTIM Interval is the same
Beacon Interval.
as
Group Key Update Period: Enter the number of seconds to control the time interval
for the encryption key automatic renewal. The default is 0, indicating no key renewal.
WMM: This feature guarantees the packets with high-priority messages being
transmitted preferentially. WMM is enabled compulsively under 802.11n or 802.11ac mode.
Short GI: This feature is enabled by default and recommended to increase the data
capacity by reducing the Guard Interval (GI) time.
AP Isolation: Select this check box to enable the AP Isolation feature that allows you
to confine and restrict all wireless devices on your network from interacting with each other, but still able to access the internet. AP isolation is disabled by default.

15. 4. Set Up a Dynamic DNS Service Account

Most ISPs (Internet service providers) assign a dynamic IP address to the router and you can use this IP address to access your router remotely. However, the IP address can change any time and you don’t know when it changes. In this case, you might need
92
Chapter 15
Specify Your Network Settings
the DDNS (Dynamic Domain Name Server) feature on the router to allow you and your friends to access your router and local servers (FTP, HTTP, etc.) using domain name, in no need of checking and remembering the IP address.
Note: DDNS does not work if the ISP assigns a private WAN IP address (such as 192.168.1.x) to the modem router.
To set up DDNS, please follow the instructions below:
1. Visit
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
2. Go to
Advanced > Network > Dynamic DNS.
3. Select the DDNS service provider (TP-Link, Dyndns or NO-IP).
4. To use TP-Link DDNS service, you should log in with your TP-Link ID.
5. If you choose other DDNS service, you should also log in with your DDNS account,
select a service provider and click
Go to register ... Enter the username, password
and domain name of the account (such as lisa.ddns.net).
6. Click Log in and Save.
Tips: If you want to use a new DDNS account, please Logout first, then login with the new account.

15. 5. Create Static Routes

A static route is a pre-determined path that network information must travel to reach a specific host or network. Data from one point to another will always follow the same path regardless of other considerations. Normal internet usage does not require this setting to be configured.
I want to:
Visit multiple networks and multiple servers at the same time.
For example, in a small office, my PC can surf the internet, but I also want to visit my
company’s server. Now I have a switch and another router. I connect the devices as
93
Chapter 15
Specify Your Network Settings
shown in the following figure so that the physical connection between my PC and my company’s server is achieved. To surf the internet and visit my company’s network at the same time, I need to configure the static routing.
Modem router
LAN: 192.168.1.1
Switch
192.168.1.100
Router 2
WAN: 172.30.30.100
LAN: 192.168.1.2
My PC
Company’s server
172.30.30.1
How can I do that?
1. Make sure the routers use different LAN IP addresses on the same subnet. Disable
Router 2’s DHCP function.
2. Visit
3. Go to
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Network > Static Routing. Select your current WAN Interface and
click
Save.
4. Click Add to add a new static routing entry. Finish the settings according to the
following explanations:
94
Chapter 15
Network Destination: The destination IP address that you want to assign to a static route. This IP address cannot be on the same subnet with the WAN IP or LAN IP of the router. In the example, the IP address of the company network is the destination IP address, so here enters 172.30.30.1.
Specify Your Network Settings
Subnet Mask: Determines the destination network with the destination IP
address. If the destination is a single IP address, enter 255.255.255.255; otherwise, enter the subnet mask of the corresponding network IP. In the example, the destination network is a single IP, so here enters 255.255.255.255.
Gateway: The IP address of the gateway device to which the data packets
• will be sent. This IP address must be on the same subnet with the router’s IP which sends out the data. In the example, the data packets will be sent to the LAN port of Router 2 and then to the Server, so the default gateway should be
192.168.1.2.
Interface: Determined by the port (WAN/LAN) that sends out the data packets.
In the example, the data is sent to the gateway through the LAN port, so LAN should be selected.
5. Select the check box to enable this entry.
6. Click
Save to save the settings.
Done!
Open a web browser on your PC. Enter the company server’s IP address to visit the company network.

15. 6. Set Up the IPv6 Tunnel

The IPv6 Tunnel feature helps you obtain IPv6 resources based on an IPv4 WAN connection or vice versa.
95
Chapter 15
Specify Your Network Settings
IPv6 Tunnel is a transition mechanism that allows isolated IPv6 hosts and networks to reach each other over IPv4-only infrastructure before IPv6 completely supplants IPv4. It is a temporary solution for networks that do not support native dual-stack, where both IPv6 and IPv4 run independently.
The modem router provides three tunneling mechanisms:
6to4, 6rd and DS-Lite. The
way to set up 6rd and DS-Lite tunnel are similar.

15. 6. 1. Use the Public IPv6 Tunnel Service-6to4

The 6to4 tunnel is a kind of public service. If there are any 6to4 servers on your network, you can use this mechanism to access IPv6 service. If your ISP provides you with an IPv4-only connection but you want to visit IPv6 websites, you can try to set up a 6to4 tunnel.
I want to:
Set up the IPv6 tunnel though my ISP doesn’t provide me with the tunnel service.
How can I do that?
1. Visit
2. Go to
3. Tick the check box, select 6to4 as the tunneling mechanism and select a WAN
http://tplinkmodem.net, and log in with your TP-Link ID or the password you
set for the router.
Advanced > Network > IPv6 Tunnel.
connection from the drop-down list, then click
Save.
Note:
If there is no available WAN connection to choose, make sure you have connected to the internet and the connection
type is not Bridge.
Done!
Now you can visit the IPv6 websites with the 6to4 tunnel.
Note:
Still not being able to access IPv6 resources means that not any 6to4 public server was found in your network. You can
contact your ISP to sign up for IPv6 connection service.
96
Loading...