TP Link Technologies C4000 AC4000 MU-MIMO Tri-Band Wi-Fi Router User Manual TE7C4000 1214

TP-Link Technologies Co., Ltd. AC4000 MU-MIMO Tri-Band Wi-Fi Router TE7C4000 1214

UserManual.wiki >

TP Link Technologies >

C4000 User Manual

TE7C4000_User manual_1214

REV2.0.0 1910012258User GuideAC4000 MU-MIMO Tri-Band Wi-Fi RouterArcher C4000

ContentsAbout This Guide .........................................................................................................1Chapter 1. Get to Know About Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . .21. 1. Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31. 2. Appearance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31. 2. 1. The Back Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31. 2. 2. The Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4Chapter 2. Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62. 1. Position Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72. 2. Connect Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7Chapter 3. Log In to Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10Chapter 4. Set Up Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124. 1. Use Quick Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134. 2. Manually Set Up Your Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134. 3. Set Up the Router as an Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174. 4. Set Up an IPv6 Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19Chapter 5. TP-Link Cloud Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 235. 1. Register a TP-Link ID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245. 2. Change Your TP-Link ID Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245. 3. Manage the User TP-Link IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 255. 3. 1. Add TP-Link ID to Manage the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265. 3. 2. Remove TP-Link ID(s) from Managing the Router . . . . . . . . . . . . . . . . . . . . . . 265. 4. Manage the Router via the TP-Link Tether App . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27Chapter 6. Guest Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 286. 1. Create a Network for Guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 296. 2. Set Portal Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 306. 3. Customize Guest Network Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32Chapter 7. USB Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337. 1. Access the USB Storage Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

7. 1. 1. Access the USB Device Locally. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347. 1. 2. Access the USB Device Remotely . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357. 1. 3. Customize the Access Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 377. 2. Media Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417. 3. Printer Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41Chapter 8. HomeCare – Parental Controls, QoS, Antivirus. . . . . . . . . . . 458. 1. Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 468. 1. 1. Scenario 1: Setting Up Access Restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . 468. 1. 2. Scenario 2: Monitoring Internet Usage. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488. 2. QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498. 3. Antivirus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50Chapter 9. Network Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 529. 1. Firewall . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 539. 2. Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 539. 3. IP & MAC Binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55Chapter 10. NAT Forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5610. 1. Share Local Resources on the Internet by Virtual Servers. . . . . . . . . . . . . . . . . . . . 5710. 2. Open Ports Dynamically by Port Triggering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5810. 3. Make Applications Free from Port Restriction by DMZ . . . . . . . . . . . . . . . . . . . . . . . 5910. 4. Make Xbox Online Games Run Smoothly by UPnP . . . . . . . . . . . . . . . . . . . . . . . . . . . 60Chapter 11. VPN Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6211. 1. Use OpenVPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6311. 2. Use PPTP VPN to Access Your Home Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64Chapter 12. Customize Your Network Settings. . . . . . . . . . . . . . . . . . . . . . . 7012. 1. Change the LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7112. 2. Set Up Link Aggregation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7112. 3. Configure to Support IPTV Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7212. 4. Specify DHCP Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7312. 5. Set Up a Dynamic DNS Service Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7512. 6. Create Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7612. 7. Specify Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7812. 8. Use WPS for Wireless Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8112. 8. 1. Set the Router’s PIN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8112. 8. 2. Use the WPS Wizard for Wi-Fi Connections. . . . . . . . . . . . . . . . . . . . . . . . . . 82

12. 9. Schedule Your Wireless Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82Chapter 13. Manage the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8413. 1. Set Up System Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8513. 2. Control LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8613. 3. Test the Network Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8713. 4. Test Your Internet Speed. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8813. 5. Upgrade the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8913. 5. 1. Online Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9013. 5. 2. Manual Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9013. 5. 3. Restore Interrupted Upgrade After Power Failure . . . . . . . . . . . . . . . . . . . . 9113. 6. Backup and Restore Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9113. 7. Change the Administrator Account. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9313. 8. Password Recovery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9313. 9. Local Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9413. 10. Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9513. 11. System Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9613. 12. Monitor the Internet Traffic Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98FAQ ............................................................................................................................. 100

1About This GuideThis guide is a complement of Quick Installation Guide. The Quick Installation Guide instructs you on quick internet setup, and this guide provides details of each function and shows you the way to configure these functions appropriate to your needs. When using this guide, please notice that features of the router may vary slightly depending on the model and software version you have, and on your location, language, and internet service provider. All screenshots, images, parameters and descriptions documented in this guide are used for demonstration only.ConventionsIn this guide the following conventions are used:Convention DescriptionUnderlined Underlined words or phrases are hyperlinks. You can click to redirect to a website or a specific section. Teal Contents to be emphasized and texts on the web page are in teal, including the menus, items, buttons, etc.>The menu structures to show the path to load the corresponding page. For example, Advanced > Wireless > MAC Filtering means the MAC Filtering function page is under the Wireless menu that is located in the Advanced tab.Note: Ignoring this type of note might result in a malfunction or damage to the device.Tips: Indicates important information that helps you make better use of your device.symbols on the web page• click to edit the corresponding entry.• click to delete the corresponding entry.• click to enable or disable the corresponding entry.• click to view more information about items on the page.More InfoThe latest software, management app and utility can be found at Download Center at http://www.tp-link.com/support.The Quick Installation Guide can be found where you find this guide or inside the package of the router.Specifications can be found on the product page at http://www.tp-link.com.A Technical Support Forum is provided for you to discuss our products at http://forum.tp-link.com.Our Technical Support contact information can be found at the Contact Technical Support page at http://www.tp-link.com/support.

Chapter 1Get to Know About Your RouterThis chapter introduces what the router can do and shows its appearance. It chapter contains the following sections:• Product Overview• Appearance

3Chapter 1 Get to Know About Your Router1. 1. Product OverviewThe TP-LINK router is designed to fully meet the need of Small Office/Home Office (SOHO) networks and users demanding higher networking performance. The powerful antennas ensure continuous Wi-Fi signal to all your devices while boosting widespread coverage throughout your home, and the built-in Ethernet ports supply high-speed connection to your wired devices.Moreover, it is simple and convenient to set up and use the TP-LINK router due to its intuitive web interface and the powerful Tether app. 1. 2. Appearance1. 2. 1. The Back PanelThe router’s ports (view from left to right) are located on the rear panel.Item DescriptionUSB 3.0 Port For connecting to a USB 3.0 device or a USB 3.0 printer. It is also compatiblewith USB 2.0 devices.Internet Port For connecting to a DSL/Cable modem, or an Ethernet jack.Ethernet Ports (1/2/3/4) For connecting your PC or other wired devices to the router.USB 2.0 Port For connecting to a USB 2.0 device or a USB 2.0 printer.

4Chapter 1 Get to Know About Your RouterItem DescriptionReset Button Press this button for more than 5 seconds to reset the router to its factory default settings.Power On/Off Button Press this button to power on or off the router.Power Port For connecting the router to power socket via the provided power adapter.Antennas Used for wireless operation and data transmit. Upright them for the best Wi-Fi performance.1. 2. 2. The Front PanelThe router’s LEDs and buttons (view from left to right) are located on the front panel. You can check the router’s working status by following the LED Explanation table.LED ExplanationName Status Indication (Power)On The system has started up successfully.Flashing The system is starting up or the firmware is being upgraded. Do not disconnect or power off your router.Off Power is off. (2.4GHz Wireless)On The 2.4GHz wireless band is enabled.Off The 2.4GHz wireless band is disabled. (5GHz-1 Wireless)On The 5GHz-1 wireless band is enabled.Off The 5GHz-1 wireless band is disabled. (5GHz-2 Wireless)On The 5GHz-2 wireless band is enabled.Off The 5GHz-2 wireless band is disabled. (Ethernet)On At least one powered-on device is connected to the router’s Ethernet port.Off No powered-on device is connected to the router’s Ethernet port. (Internet)Blue On The internet is available.Orange On The router’s Internet port is connected, but the internet is not available.Off The router’s Internet port is unplugged.

5Chapter 1 Get to Know About Your RouterName Status Indication (WPS)On/Off This light remains on for 5 minutes when a WPS connection is established, then turns off.Flashing WPS connection is in progress. This may take up to 2 minutes. (USB)On The inserted USB device is ready to use.Flashing A USB device is being identified.Off No device is plugged into the USB port.Button ExplanationItem Description (Wi-Fi Button) Press and hold the WiFi button for about 2 seconds to turn on or off the wireless function of your router. (WPS Button) Press this WPS button to enable the WPS function. (LED Button) Press the LED button for about 1 second to turn on or off the LEDs of your router.

Chapter 2Connect the HardwareThis chapter contains the following sections:• Position Your Router• Connect Your Router

7Chapter 2 Connect the Hardware2. 1. Position Your Router• The product should not be located in a place where it will be exposed to moisture or excessive heat.• Place the router in a location where it can be connected to multiple devices as well as to a power source.• Make sure the cables and power cord are safely placed out of the way so they do not create a tripping hazard.• The router can be placed on a shelf or desktop.• Keep the router away from devices with strong electromagnetic interference, such as Bluetooth devices, cordless phones and microwaves.2. 2. Connect Your RouterFollow the steps below to connect your router.If your internet connection is through an Ethernet cable from the wall instead of through a DSL / Cable / Satellite modem, connect the Ethernet cable directly to the router’s Internet port, and then follow Step 1, 5 and 6 to complete the hardware connection.ModemPower adapterRouterPower adapter5Internet24311. Install the antennas.2. Turn off the modem, and remove the backup battery if it has one.

8Chapter 2 Connect the Hardware3. Connect the modem to your router’s Internet port with an Ethernet cable.4. Turn on the modem, and then wait about 2 minutes for it to restart.5. Connect the power adapter to the router and turn on the router.6. Confirm that the following LEDs are on and solid to verify the hardware is connected correctly.OnInternet5GHz-1On5GHz-2OnPowerOn2.4GHzOnNote:• If all the LEDs are off, press the LED On/Off button for about 1 second, and then check the LEDs again.• If the 2.4GHz, 5GHz-1, and 5GHz-2 LEDs are off, press the Wi-Fi On/Off button for about 1 second and all the three LEDs should turn solid on.7. Connect your computer to the router.• Method 1: WiredTurn off the Wi-Fi on your computer and connect the devices as shown below.Ethernet cable• Method 2: Wirelessly1 ) Find the SSID (Network Name) and Wireless Password printed on the label at the bottom of the router.2 ) Click the network icon of your computer or go to Wi-Fi Settings of your smart device, and then select the SSID to join the network.Connections are availableWireless Network ConnectionConnect automatically ConnectTP-Link_XXXXTP-Link_XXXX_5G_2TP-Link_XXXX_5G_1Wi-FiWi-Fi TP-Link_XXXXTP-Link_XXXX_5G_2TP-Link_XXXX_5G_1CHOOSE A NETWORK...Other...< SettingsORSmart DeviceComputer

9Chapter 2 Connect the Hardware• Method 3: Use the WPS buttonWireless devices that support WPS, including Android phones, tablets, and most USB network cards, can be connected to your router through this method.Note:• WPS is not supported by iOS devices.• The WPS function cannot be configured if the wireless function of the router is disabled. Also, the WPS function will be disabled if your wireless encryption is WEP. Please make sure the wireless function is enabled and is configured with the appropriate encryption before configuring the WPS.1 ) Tab the WPS icon on the device’s screen. Here we take an Android phone for instance.2 ) Within two minutes, press the WPS button on your router. WLANOnTP-LinkMyHomeDavidHomeNetworkTP-Link_HomeTP-Link_RouterTestclose to

11Chapter 3 Log In to Your RouterWith a web-based utility, it is easy to configure and manage the router. The web-based utility can be used on any Windows, Mac OS or UNIX OS with a Web browser, such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari.Follow the steps below to log in to your router.1. Set up the TCP/IP Protocol in Obtain an IP address automatically mode on your computer. 2. Visit http://tplinkwifi.net, and create a login password for secure management purposes. Then click Let’s Get Started to log in.Note: • If the login window does not appear, please refer to the FAQ Section.• If you have registered a TP-Link ID and bound your cloud router to it, the login password you created here will be invalid. Please log in to the cloud router using your TP-Link ID.

Chapter 4Set Up Internet ConnectionThis chapter introduces how to connect your router to the internet. The router is equipped with a web-based Quick Setup wizard. It has necessary ISP information built in, automates many of the steps and verifies that those steps have been successfully completed. Furthermore, you can also set up an IPv6 connection if your ISP provides IPv6 service. It contains the following sections:• Use Quick Setup Wizard• Manually Set Up Your Internet Connection• Set Up the Router as an Access Point• Set Up an IPv6 Internet Connection

13Chapter 4 Set Up Internet Connection4. 1. Use Quick Setup WizardThe Quick Setup Wizard will guide you to set up your router.Tips:If you need the IPv6 internet connection, please refer to the section of Set Up an IPv6 Internet Connection.Follow the steps below to set up your router.1. Visit http://tplinkwifi.net, and log in with the password you set for the router.2. Click Quick Setup on the top of the page. Then follow the step-by-step instructions to connect your router to the internet.3. To enjoy a more complete service from TP-Link (remote management, TP-Link DDNS, and more.), log in with your TP-Link ID or click Resigter Now to get one. Then follow the instructions to bind the cloud router to your TP-Link ID.Note:• To learn more about the TP-Link Cloud service, please refer to the TP-Link Cloud Service section.• If you do not want to register a TP-Link ID now, you may click Log In Later to proceed.• If you have changed the preset wireless network name (SSID) and wireless password during the Quick Setup process, all your wireless devices must use the new SSID and password to connect to the router.4. 2. Manually Set Up Your Internet Connection In this part, you can check your current internet connection settings. You can also modify the settings according to the service information provided by your ISP.Follow the steps below to check or modify your internet connection settings.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Basic > Internet.3. Select your internet connection type from the drop-down list.

14Chapter 4 Set Up Internet ConnectionNote:If you are unsure of what your connection type is, click Auto Detect. Since different connection types require different cables and connection information, you can also refer to the demonstrations in Step 4 to determine your connection type.4. Follow the instructions on the page to continue the configuration. Parameters on the figures are just used for demonstration. 1 ) If you choose Dynamic IP, you need to select whether to clone the MAC address. Dynamic IP users are usually equipped with a cable TV or fiber cable. 2 ) If you choose Static IP, enter the information provided by your ISP in the corresponding fields.

15Chapter 4 Set Up Internet Connection 3 ) If you choose PPPoE, enter the username and password provided by your ISP. PPPoE users usually have DSL cable modems. 4 ) If you choose L2TP, enter the username and password and choose the Secondary Connection provided by your ISP. Different parameters are needed according to the Secondary Connection you have chosen.

16Chapter 4 Set Up Internet Connection 5 ) If you choose PPTP, enter the username and password, and choose the Secondary Connection provided by your ISP. Different parameters are needed according to the Secondary Connection you have chosen. 5. Click Save.6. To check your internet connection, click Network Map on the left of the page. After the connection succeeds, the screen will display as follows. Here we take PPPoE as an example.

17Chapter 4 Set Up Internet ConnectionNote: It may take 1-2 minutes to make the settings valid. Tips: • If your internet connection type is BigPond Cable, please go to Advanced > Network > Internet to set your router.• If you use Dynamic IP and PPPoE and you are provided with any other parameters that are not required on the page, please go to Advanced > Network > Internet to complete the configuration.• If you still cannot access the internet, refer to the FAQ section for further instructions.4. 3. Set Up the Router as an Access PointThe router can work as an access point, transforming your existing wired network to a wireless one.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > Operation Mode, select Access Point and click Save. The router will reboot and switch to Access Point mode.

18Chapter 4 Set Up Internet Connection3. After rebooting, connect the router to your existing wired router via an Ethernet cable.4. Log in again to the web management page http://tplinkwifi.net, and click Quick Setup. 5. Configure your wireless settings and click Next.6. Confirm the information and click Save. Now, you can enjoy Wi-Fi.

19Chapter 4 Set Up Internet ConnectionTips: • Functions, such as Parental Controls, Qos and NAT Forwarding, are not supported in the Access Point mode.• Functions, such as Guest Network and USB Settings, are the same as those in the Router mode.4. 4. Set Up an IPv6 Internet ConnectionYour ISP provides information about one of the following IPv6 internet connection types: PPPoE, Dynamic IP(SLAAC/DHCPv6), Static IP, 6to4 tunnel, Pass-Through (Bridge).1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > IPv6. 3. Enable IPv6 and select the internet connection type provided by your ISP.Tips:If you do not know what your internet connection type is, contact your ISP or judge according to the already known information provided by your ISP.4. Fill in information as required by different connection types. Red blanks must be filled in.1 ) Static IP: Fill in blanks and click Save.

20Chapter 4 Set Up Internet Connection2 ) Dynamic IP(SLAAC/DHCPv6): Click Advanced to input further information if your ISP requires. Click Save and then click Renew.3 ) PPPoE: By default, the router uses the IPv4 account to connect to the IPv6 server. Click Advanced to input further information if your ISP requires. Click Save and then click Connect.Note: If your ISP provides two separate accounts for the IPv4 and IPv6 connections, please untick the Use the same session with IPv4 connection checkbox and manually enter the username and password for the IPv6 connection.

21Chapter 4 Set Up Internet Connection4 ) 6to4 Tunnel: An IPv4 internet connection type is a prerequisite for this connection type (Manually Set Up Your Internet Connection). Click Advanced to input further information if your ISP requires. Click Save and then click Connect.5 ) Pass-Through (Bridge): Click Save and skip to Step 6.

22Chapter 4 Set Up Internet Connection5. Configure LAN ports. Windows users are recommended to choose from the first two types. Fill in Address Prefix provided by your ISP, and click Save.Tips:Find Help on the web management page to know more about items.6. Click Status to check whether you have successfully set up an IPv6 connection. The following figure is an example of a successful PPPoE configuration.Tips: Visit the FAQ section if there is no internet connection.

Chapter 5TP-Link Cloud ServiceTP-Link Cloud service provides a better way to manage your cloud devices. Log in to your router with a TP-Link ID, and you can easily monitor and manage your home network when you are out and about via the Tether app on your smartphone or tablet. To ensure that your router stays new and gets better over time, the TP-Link Cloud will notify you when an important firmware upgrade is avaliable. Surely you can also manage multiple TP-Link Cloud devices with a single TP-Link ID.This chapter introduces how to register a new TP-Link ID, bind or unbind TP-Link IDs to manage your router, and the Tether app with which you can manage your home network no matter where you may find yourself. It contains the following sections:• Register a TP-Link ID• Change Your TP-Link ID Information• Manage the User TP-Link IDs• Manage the Router via the TP-Link Tether App

24Chapter 5 TP-Link Cloud Service5. 1. Register a TP-Link IDIf you have skipped the registration during the Quick Setup process, you can：1. Visit http://tplinkwifi.net, and log in with the password you set for the router.2. Go to Basic > TP-Link Cloud.3. Click Register Now and follow the instructions to register a TP-Link ID.4. After activating your TP-Link ID, come back to the TP-Link Cloud page to log in. The TP-Link ID used to log in to the router for the first time will be automatically bound as an Admin. Note:• To learn more about the Admin and User TP-Link ID, refer to Manage the User TP-Link IDs.• Once the router is bound to your TP-Link ID, you need to log in to the router with the TP-Link ID. • Once you have registered a TP-Link ID on the web management page, you can only register another TP-Link ID via the Tether APP. Please refer to Manage the Router via the TP-Link Tether App to install the app and register a new one.• If you want to unbind the admin TP-Link ID from your router, please go to Basic > TP-Link Cloud, an click Unbind in the Device Information section.5. 2. Change Your TP-Link ID InformationFollow the steps below to change your email address and password of your TP-Link ID as needed.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID.2. Go to Basic > TP-Link Cloud, and focus on the Account Information section. ¾To change your email address:1. Click behind the Email.2. Enter the password of your TP-Link ID, then a new email address. And click Save.

25Chapter 5 TP-Link Cloud Service ¾To change your password:1. Click behind the Password.2. Enter the current password, then a new password twice. And click Save.5. 3. Manage the User TP-Link IDsThe TP-Link ID used to log in to the router for the first time will be automatically bound as the Admin account. An admin account can add or remove other TP-Link IDs to or from the same router as Users. All accounts can monitor and manage the router locally or remotely, but user accounts cannot:• Reset the router to its factory default settings either on the web management page or in the Tether app.

26Chapter 5 TP-Link Cloud Service• Add/remove other TP-Link IDs to/from the router.5. 3. 1. Add TP-Link ID to Manage the Router1. Visit http://tplinkwifi.net, and log in with your TP-Link ID.2. Go to Basic > TP-Link Cloud, and focus on the Bound Accounts section.3. Click , enter another TP-Link ID as needed and click Save.Note:If you need another TP-Link ID, please register a new one via the Tether app.Please refer to Manage the Router via the TP-Link Tether App to install the app and register a new TP-Link ID.4. The new TP-Link ID will be displayed in the Bound Accounts table as a User.5. 3. 2. Remove TP-Link ID(s) from Managing the Router1. Visit http://tplinkwifi.net, and log in with your TP-Link ID.2. Go to Basic > TP-Link Cloud, and focus on the Bound Accounts section.3. Tick the checkbox(es) of the TP-Link ID(s) you want to remove and click Unbind.

27Chapter 5 TP-Link Cloud Service5. 4. Manage the Router via the TP-Link Tether AppThe Tether app runs on iOS and Android devices, such as smartphones and tablets.1. Launch the Apple App Store or Google Play store and search “TP-Link Tether” or simply scan the QR code to download and install the app.OR2. Connect your device to the router’s wireless network.3. Launch the Tether app, select the model of your router and log in with your TP-Link ID or the password your set for the router. 4. Manage your router as needed.Note:If you need to remotely access your router from your smart devices, you need:• Log in with your TP-Link ID. If you don’t have one, refer to Register a TP-Link ID.• Make sure your smartphone or tablet can access the internet with cellular data or a Wi-Fi network.

Chapter 6Guest NetworkThis function allows you to provide Wi-Fi access for guests without disclosing your main network. When you have guests in your house, apartment, or workplace, you can create a guest network for them. In addition, you can customize guest network options to ensure network security and privacy.It contains the following sections:• Create a Network for Guests• Customize Guest Network Options

29Chapter 6 Guest Network6. 1. Create a Network for Guests 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > Guest Network. Locate the Wireless section.3. Create a guest network as needed.1 ) Enable 2.4GHz Wireless network, 5GHz-1 Wireless or 5GHz-2 Wireless network.2 ) Customize the SSID. Don‘t select Hide SSID unless you want your guests to manually input the SSID for guest network access.3 ) Select the Security type.• If No security is selected, no password is needed to access your guest network.• If WAP/WPA2-Personal is selected, keep the default Version and Encryption values, and customize your own password.• If Portal is selected, please refer to Set Portal Authentication to personalize the anthentication login page for your guests. 4. Click Save. Now your guests can access your guest network using the SSID and password you set!Tips:To view guest network information, go to Advanced > Status and locate the Guest Network section.

30Chapter 6 Guest Network6. 2. Set Portal AuthenticationImagine that you run a small shop and provide a guest network for your customers. You want to seize every opportunity to promote your shop, which makes portal authentication an excellent choice. Customers will be directed to a web page for access verification, on which your personalized promotion is displayed. Moreover, you can specify a web link so that the newly connected guest will be redirected to, for example, the official website of your shop.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > Guest Network. Focus on the Wireless section, and select Portal for Security.3. Select the Authentication Type.• Simple Password – Specify a password for authentication (8-16 alphanumeric or “_” characters are allowed).• No Authentication – Guests can access the network without any authentication.4. Specify the Authentication Timeout. When a guest’s authentication expires, they have to reconnect to the network.5. (Optional) Enable Redirect and enter the desired web link. The newly connected guest will be redirected to the website you have specified.

32Chapter 6 Guest Network6. 3. Customize Guest Network Options1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > Guest Network. Locate the Settings section.3. Customize guest network options according to your needs.• Allow guests to see each otherTick this checkbox if you want to allow the wireless clients on your guest network to communicate with each other via methods such as network neighbors and Ping. • Allow guests to access my local network Tick this checkbox if you want to allow the wireless clients on your guest network to communicate with the devices connected to your router’s LAN ports or main network via methods such as network neighbors and Ping. 4. Click Save. Now you can ensure network security and privacy!Tips:To view guest network information, go to Advanced > Status and locate the Guest Network section.

Chapter 7USB SettingsThis chapter describes how to use the USB ports to share files, media and a printer from the USB storage devices over your home network locally, or remotely through the internet.The router supports USB external flash drives, hard drives and USB printers.It contains the following sections:• Access the USB Storage Device• Media Sharing• Printer Sharing

34Chapter 7 USB Settings7. 1. Access the USB Storage DeviceInsert your USB storage device into the router’s USB port and then access files stored there locally or remotely.Tips:• If you use USB hubs, make sure no more than 4 devices are connected to the router.• If the USB storage device requires using bundled external power, make sure the external power has been connected.• If you use a USB hard drive, make sure its file system is FAT32, exFat, NTFS or HFS+.• Before you physically disconnect a USB device from the router, safely remove it to avoid data damage: Go to Advanced > USB Settings > Device Settings and click .7. 1. 1. Access the USB Device LocallyInsert your USB storage device into the router’s USB port and then refer to the following table to access files stored on your USB storage device.Windows computer ¾Method 1:Go to Computer > Network, then click the Network Server Name (TP-SHARE by default) in the Computer section.Note:Operations in different systems are similar. Here we take Windows 7 as an example.

$35Chapter 7 USB SettingsWindows computer ¾Method 2:Open the Windows Explorer (or go to Computer) and type the server address \\tplinkwifi.net or ftp://tplinkwifi.net in the address bar, then press Enter.Mac1 ) Select Go > Connect to Server.2 ) Type the server address smb://tplinkwifi.net.3 ) Click Connect.4 ) When prompted, select the Guest radio box. (If you have set up a username and a password to deny anonymous access to the USB disks, you should select the Registered User radio box. To learn how to set up an account for the access, refer to To Set up Authentication for Data Security.)Tablet Use a third-party app for network files management.Tips:You can also access your USB disk by using your Network/Media Server Name as the server address. Refer to To Customize the Address of the USB Disk to learn more.7. 1. 2. Access the USB Device RemotelyYou can access your USB disk outside the local area network. For example, you can:$

36Chapter 7 USB Settings• Share photos and other large files with your friends without logging in to (and paying for) a photo-sharing site or email system.• Get a safe backup for the materials for a presentation.• Remove the files on your camera’s memory card from time to time during the journey.Note:If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), you cannot use this feature because private addresses are not routed on the Internet.Follow the steps below to configure remote access settings.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > USB Settings > Sharing Access page.3. Tick the FTP(via Internet) checkbox, and then click Save.4. Refer to the following table to access your USB disk remotely.

37Chapter 7 USB SettingsComputer1 ) Open the Windows Explorer (or go to Computer, only for Windows users) or open a web browser.2 ) Type the server address in the address bar:Type in ftp://<WAN IP address of the router>:<port number> (such as ftp://59.40.2.243:21). If you have specified the domain name of the router, you can also type in ftp://<domain name>:<port number> (such as ftp://MyDomainName:21)3 ) Press Enter on the keyboard.4 ) Access with the username and password you set in To Set up Authentication for Data Security.Tips:You can also access the USB disk via a third-party app for network files management, which can resume broken file transfers. Tablet Use a third-party app for network files management.Tips:Click Set Up a Dynamic DNS Service Account to learn how to set up a domain name for you router.7. 1. 3. Customize the Access SettingsBy default, all the network clients can access all folders on your USB disk. You can customize your sharing settings by setting a sharing account, sharing specific contents and setting a new sharing address on the router’s web management page.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > USB Settings > Sharing Access page. ¾To Customize the Address of the USB DiskYou can customize the server name and use the name to access your USB disk.1. On the Sharing Settings part, make sure Network Neighborhood is ticked, and enter a Network/Media Server Name as you like, such as MyShare, then click Save.

$38Chapter 7 USB Settings2. Now you can access the USB disk by visiting \\MyShare (for Windows) or smb://MyShare (for Mac). ¾To Only Share Specific Content1. Focus on the Folder Sharing section. Click the button to disable Share All, then click Add to add a new sharing folder.2. Select the Volume Name and Folder Path, then enter a Folder Name as you like.3. Decide the way you share the folder:$

39Chapter 7 USB Settings• Enable Authentication: Tick to enable authentication for this folder sharing, and you will be required to log in to the Sharing Account to access the USB disk. Refer to To Set up Authentication for Data Security to learn more.• Enable Write Access: If you tick this checkbox, network clients can modify this folder.• Enable Media Sharing: Tick to enable media sharing for this folder, and you can view photos, play music and watch movies stored on the USB disk directly from DLNA-supported devices. Click Media Sharing to learn more.4. Click OK.Tips:The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you do not need to share. ¾To Set up Authentication for Data SecurityYou can set up authentication for your USB device so that network clients will be required to enter username and password when accessing the USB disk.1. On the Sharing Account part, Choose Use Default Account or Use New Account. The username and password are both admin for default account. If your choose Use New Account, you have to customize the username and a password.

40Chapter 7 USB SettingsNote:For Windows users, do not set the sharing username the same as the Windows username. Otherwise, Windows credential mechanism may cause the following problems:• If the sharing password is also the same as the Windows password, authentication will not work since the Windows will automatically use its account information for USB access.• If the sharing password is different from the Windows password, the Windows will be unable to remember your credentials and you will always be required to enter the sharing password for USB access. 2. Enable Authentication to apply the account you just set.• If you leave Share All enabled, click the button to enable Authentication for all folders.• If Share All is disabled, enable Authentication for specific folders.Note:Due to Windows credential mechanism, you might be unable to access the USB disk after changing Authentication settings. Please log out from the Windows and try to access again. Or you can change the address of the USB disk by referring to To Customize the Address of the USB Disk.

41Chapter 7 USB Settings7. 2. Media SharingThe feature of Media Sharing allows you to view photos, play music and watch movies stored on the USB disk directly from DLNA-supported devices, such as your computer, tablet and PS2/3/4.1. When your USB disk is inserted into the router, your DLNA-supported devices (such as your computer and pad) connected to the router can detect and play the media files on the USB disks.2. Refer to the following table for detailed instructions. Windows Computer• Go to Computer > Network, then click the Media Server Name (Model number-share by default) in the Media Devices section.Note:Here we take Windows 7 as an example.Tablet • Use a third-party DLNA-supported player.7. 3. Printer SharingThe feature of Printer Sharing helps you share a printer with different computers connected to the router.Note:Printers unlisted on this page may be incompatible with the router: http://www.tp-link.com/common/compatible/print-server/.1. Install the Driver of the Printer

42Chapter 7 USB SettingsMake sure you have installed the driver of the printer on each computer that needs printer service.If you do not have the driver, contact the printer manufacturer.2. Connect the PrinterCable a printer to the USB port with the USB cable. Wait several seconds until the USB LED becomes solid on.3. Install the TP-Link USB Printer Controller UtilityTP-Link USB Printer Controller Utility helps you access the shared printer. Download and Install the utility on each computer that needs printer service.1 ) Visit http://www.tp-link.com/app/usb/.2 ) Click PC Utility (for Windows users) or Mac Utility to download the installation file and uncompress it.3 ) Open the uncompressed folder, then click TP-Link USB Printer Controller Setup (for Windows users) or TP-Link UDS Printer Controller Installer (for Mac users) to install the utility.4. Access the PrinterYou should set the shared printer as Auto-Connect Printer on every computer that needs printer service.1 ) Double-click the icon on your desktop to launch the USB Printer Controller.2 ) Highlight the printer you share.Windows

43Chapter 7 USB SettingsMac3 ) Click the Auto-Connect for printing tab to pull down a list, then select Set Auto-Connect Printer. Windows Mac4 ) Select the printer you share, then click Apply. Windows

44Chapter 7 USB Settings Mac5 ) You will see the printer marked as Auto-Connect Printer. Now you can print with this printer. WindowsMacTips:The Print Server also allows different clients to share the scan feature of MFPs (Multi-Function Printers). To scan with TP-Link USB Printer Controller, right-click the printer and select Network Scanner. Then, a scanning window will pop up. Finish the scanning process by following on-screen instructions.

Chapter 8HomeCare – Parental Controls, QoS, AntivirusTP-Link HomeCareTM powered by Trend MicroTM provides a kit of features to help you create a personalized network that caters for the whole family. You can ensure appropriate internet access for everyone with Parental Controls, save bandwidth for the things that matter with QoS and keep your network secure with built-in Antivirus.It contains the following sections:• Parental Controls• QoS• Antivirus

50Chapter 8 HomeCare – Parental Controls, QoS, Antivirus3. In the Application Priority tab, click Gaming to prioritize this online activity. The default is Standard, with no application prioritized.4. In the Device Priority tab, find your computer and toggle on Priority. Click the entry in the Timing column and select 2 hours as the duration you want the device to be prioritized for.Yo u can now enjoy playing games without lag on your computer for the next 2 hours.8. 3. AntivirusYour router supports built-in Antivirus powered by Trend MicroTM. It provides malicious content filtering and intrusion prevention for your home network, as well as a quarantine for infected devices. An active database protects every connected device from external threats.Antivirus includes the following protection: • Malicious Content Filter Blocks malicious websites listed in Micro Trend’s database. The database is automatically updated so new malicious websites are blocked when they go live.• Intrusion Prevention System Done!

51Chapter 8 HomeCare – Parental Controls, QoS, AntivirusIdentifies and blocks potential threats from attackers and fixes vulnerabilities in the network. • Infected Device Quarantine Prevents infected devices from sending your sensitive information to clients outside your network or spreading security threats. ¾To access your router’s Antivirus settings:1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Basic > HomeCare > Antivirus or Advanced > Security > Antivirus.3. Choose the protection types you want to enable. It is recommended to keep them all enabled to ensure the best protection for your network.4. Click to view threats that have been detected and resolved.

Chapter 9Network SecurityThis chapter guides you on how to protect your home network from cyber attacks and unauthorized users by implementing these three network security functions. You can block or allow specific client devices to access your network using Access Control, or you can prevent ARP spoofing and ARP attacks using IP & MAC Binding.It contains the following sections:• Firewall• Access Control• IP & MAC Binding

53Chapter 9 Network Security9. 1. FirewallThe SPI (Stateful Packet Inspection) Firewall protects the router from cyber attacks and validates the traffic that is passing through the router based on the protocol. This function is enabled by default.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > Security > Firewall.3. It’s recommended to keep the default settings. If necessary, deselect the corresponding checkbox and click Save.9. 2. Access ControlAccess Control is used to block or allow specific client devices to access your network (via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed devices (Whitelist).Block or allow specific client devices to access my network (via wired or wireless).1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > Security > Access Control.3. Enable Access Control.4. Select the access mode to either block (recommended) or allow the device(s) in the list.To block specific device(s):1 ) Select Blacklist and click Save.I want to:How can I do that?

54Chapter 9 Network Security2 ) Select the device(s) to be blocked in the Online Devices table by ticking the checkbox(es).3 ) Click Block above the Online Devices table. The selected devices will be added to Devices in Blacklist automatically.To allow specific device(s):1 ) Select Whitelist and click Save.2 ) Click Add in the Devices in Whitelist section. Enter the Device Name and MAC Address (You can copy and paste the information from the Online Devices list if the device is connected to your network).3 ) Click OK.Now you can block or allow specific client devices to access your network (via wired or wireless) using the Blacklist or Whitelist.Done!

55Chapter 9 Network Security9. 3. IP & MAC BindingIP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind network device’s IP address to its MAC address. This will prevent ARP Spoofing and other ARP attacks by denying network access to a device with matching IP address in the Binding list, but unrecognized MAC address.Prevent ARP spoofing and ARP attacks.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > Security > IP & MAC Binding. 3. Enable ARP Binding.4. Bind your device(s) according to your need.To bind the connected device(s): Click to add the corresponding device to the Binding List.To bind the unconnected device:1 ) Click Add in the Binding List section.2 ) Enter the MAC address and IP address that you want to bind. Enter a Description for this binding entry.3 ) Tick the Enable This Entry checkbox and click OK.Now you don’t need to worry about ARP spoofing and ARP attacks!I want to:How can I do that?Done!

Chapter 10NAT ForwardingThe router’s NAT (Network Address Translation) feature makes devices on the LAN use the same public IP address to communicate with devices on the internet, which protects the local network by hiding IP addresses of the devices. However, it also brings about the problem that an external host cannot initiatively communicate with a specified device on the local network.With the forwarding feature the router can penetrate the isolation of NAT and allows devices on the internet to initiatively communicate with devices on the local network, thus realizing some special functions.The TP-Link router supports four forwarding rules. If two or more rules are set, the priority of implementation from high to low is Virtual Servers, Port Triggering, UPNP and DMZ.It contains the following sections:• Share Local Resources on the Internet by Virtual Servers• Open Ports Dynamically by Port Triggering• Make Applications Free from Port Restriction by DMZ• Make Xbox Online Games Run Smoothly by UPnP

57Chapter 10 NAT Forwarding10. 1. Share Local Resources on the Internet by Virtual ServersWhen you build up a server on the local network and want to share it on the internet, Virtual Servers can realize the service and provide it to internet users. At the same time Virtual Servers can keep the local network safe as other services are still invisible from the internet.Virtual Servers can be used for setting up public services on your local network, such as HTTP, FTP, DNS, POP3/SMTP and Telnet. Different services use different service ports. Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and port 110 in POP3 service. Please verify the service port number before the configuration.Share my personal website I’ve built in local network with my friends through the internet.For example, the personal website has been built on my home PC (192.168.0.100). I hope that my friends on the internet can visit my website in some way. The PC is connected to the router with the WAN IP address 218.18.232.154.Personal WebsiteHomeRouterWAN: 218.18.232.154LAN1. Assign a static IP address to your PC, for example 192.168.0.100.2. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.3. Go to Advanced > NAT Forwarding > Virtual Servers.4. Click Add. Click View Existing Services and select HTTP. The External Port, Internal Port and Protocol will be automatically filled in. Enter the PC’s IP address 192.168.0.100 in the Internal IP field.5. Click OK.I want to:How can I do that?INTERNET

58Chapter 10 NAT ForwardingTips:• It is recommended to keep the default settings of Internal Port and Protocol if you are not clear about which port and protocol to use.• If the service you want to use is not in the Service Type, you can enter the corresponding parameters manually. You should verify the port number that the service needs.• You can add multiple virtual server rules if you want to provide several services in a router. Please note that the External Port should not be overlapped.Users on the internet can enter http:// WAN IP (in this example: http:// 218.18.232.154) to visit your personal website.Tips:• The WAN IP should be a public IP address. For the WAN IP is assigned dynamically by the ISP, it is recommended to apply and register a domain name for the WAN referring to Set Up a Dynamic DNS Service Account. Then users on the internet can use http:// domain name to visit the website.• If you have changed the default External Port, you should use http:// WAN IP: External Port or http:// domain name: External Port to visit the website.10. 2. Open Ports Dynamically by Port TriggeringPort Triggering can specify a triggering port and its corresponding external ports. When a host on the local network initiates a connection to the triggering port, all the external ports will be opened for subsequent connections. The router can record the IP address of the host. When the data from the internet return to the external ports, the router can forward them to the corresponding host. Port Triggering is mainly applied to online games, VoIPs, video players and common applications including MSN Gaming Zone, Dialpad and Quick Time 4 players, etc. Follow the steps below to configure the Port Triggering rules:1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > NAT Forwarding > Port Triggering and click Add.Done!

59Chapter 10 NAT Forwarding3. Click View Existing Applications, and select the desired application. The Triggering Port, External Port and Protocol will be automatically filled in. The following picture takes application MSN Gaming Zone as an example.4. Click OK.Tips:• You can add multiple port triggering rules according to your network need.• The triggering ports can not be overlapped.• If the application you need is not listed in the Existing Applications list, please enter the parameters manually. You should verify the external ports the application uses first and enter them into External Port field according to the format the page displays.10. 3. Make Applications Free from Port Restriction by DMZWhen a PC is set to be a DMZ (Demilitarized Zone) host on the local network, it is totally exposed to the internet, which can realize the unlimited bidirectional communication between internal hosts and external hosts. The DMZ host becomes a virtual server with all ports opened. When you are not clear about which ports to open in some special applications, such as IP camera and database software, you can set the PC to be a DMZ host.

60Chapter 10 NAT ForwardingNote:When DMZ is enabled, the DMZ host is totally exposed to the internet, which may bring some potential safety hazards. If DMZ is not in use, please disable it in time.Make the home PC join the internet online game without port restriction.For example, due to some port restriction, when playing the online games, you can login normally but cannot join a team with other players. To solve this problem, set your PC as a DMZ host with all ports open.1. Assign a static IP address to your PC, for example 192.168.0.100.2. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.3. Go to Advanced > NAT Forwarding > DMZ and select Enable DMZ.4. Enter the IP address 192.168.0.100 in the DMZ Host IP Address filed.5. Click Save.The configuration is completed. You’ve set your PC to a DMZ host and now you can make a team to game with other players.10. 4. Make Xbox Online Games Run Smoothly by UPnPThe UPnP (Universal Plug and Play) protocol allows applications or host devices to automatically find the front-end NAT device and send request to it to open the corresponding ports. With UPnP enabled, the applications or host devices on the local network and the internet can freely communicate with each other thus realizing the seamless connection of the network. You may need to enable the UPnP if you want to use applications for multiplayer gaming, peer-to-peer connections, real-time communication (such as VoIP or telephone conference) or remote assistance, etc.I want to:How can I do that?Done!

61Chapter 10 NAT ForwardingTips:• UPnP is enabled by default in this router.• Only the application supporting UPnP protocol can use this feature.• UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc. Some of operating system need to install the UPnP components).For example, when you connect your Xbox to the router which has connected to the internet to play online games, UPnP will send request to the router to open the corresponding ports allowing the following data penetrating the NAT to transmit. Therefore, you can play Xbox online games without a hitch.XBOX RouterInternetLAN WANIf necessary, you can follow the steps to change the status of UPnP.1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > NAT Forwarding > UPnP and toggle on or off according to your needs.

Chapter 11VPN ServerThe VPN (Virtual Private Networking) Server allows you to access your home network in a secured way through internet when you are out of home. The router offers two ways to setup VPN connection: OpenVPN and PPTP (Point to Point Tunneling Protocol) VPN. OpenVPN is somewhat complex but with greater security and more stable. It is suitable for restricted environment, such as campus network and company intranet. PPTP VPN is more easily used and its speed is faster, it’s compatible with most operating systems and also supports mobile devices. Its security is poor and your packets may be cracked easily, and PPTP VPN connection may be prevented by some ISP. It contains the following sections, please choose the appropriate VPN server connection type as needed.• Use OpenVPN to Access Your Home Network• Use PPTP VPN to Access Your Home Network

63Chapter 11 VPN Server11. 1. Use OpenVPN to Access Your Home NetworkIn the OpenVPN connection, the home network can act as a server, and the remote device can access the server through the router which acts as an OpenVPN Server gateway. To use the VPN feature, you should enable OpenVPN Server on your router, and install and run VPN client software on the remote device. Please follow the steps below to set up an OpenVPN connection.Step1. Set up OpenVPN Server on Your Router1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > VPN Server > OpenVPN, and select Enable VPN Server.Note:• Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static IP address for router’s WAN port and synchronize your System Time with internet.• The first time you configure the OpenVPN Server, you may need to Generate a certificate before you enable the VPN Server.3. Select the Servive Type (communication protocol) for OpenVPN Server: UDP, TCP.4. Enter a VPN Service Port to which a VPN device connects, and the port number should be between 1024 and 65535.5. In the VPN Subnet/Netmask fields, enter the range of IP addresses that can be leased to the device by the OpenVPN server.

$64Chapter 11 VPN Server6. Select your Client Access type. Select Home Network Only if you only want the remote device to access your home network; select Internet and Home Network if you also want the remote device to access internet through the VPN Server.7. Click Save.8. Click Generate to get a new certificate. Note:If you have already generated one, please skip this step, or click Generate to update the certificate.9. Click Export to save the OpenVPN configuration file which will be used by the remote device to access your router.Step 2. Configure OpenVPN Connection on Your Remote Device1. Visit http://openvpn.net/index.php/download/community-downloads.html to download the OpenVPN software, and install it on your device where you want to run the OpenVPN client utility.Note:You need to install the OpenVPN client utility on each device that you plan to apply the VPN funxtion to access your router. Mobile devices should download a third-party app from Google Play or Apple App Store.2. After the installation, copy the file exported from your router to the OpenVPN client utility’s “config” folder (for example, C:\Program Files\OpenVPN\config on Windows). The path depends on where the OpenVPN client utility is installed.3. Run the OpenVPN client utility and connect it to OpenVPN Server.11. 2. Use PPTP VPN to Access Your Home NetworkPPTP VPN Server is used to create a VPN connection for remote device. To use the VPN feature, you should enable PPTP VPN Server on your router, and configure the PPTP connection on the remote device. Please follow the steps below to set up a PPTP VPN connection.Step 1. Set up PPTP VPN Server on Your Router1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router.2. Go to Advanced > VPN Server > PPTP VPN, and select Enable VPN Server.$