TP-Link TL-ER6120 TL-ER6120 User Guide
TP-Link TL-ER6120 Manual
 |
View all TP-Link TL-ER6120 manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link TL-ER6120 manual content summary:
- TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 1
TL-ER6120 Multi-WAN VPN Router Rev: 1.0.0 1910010516 - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 2
TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2011 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved. http://www.tp-link.com FCC STATEMENT This equipment has been tested if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 3
...2 1.3 Overview of this Guide ...2 Chapter 2 Introduction ...4 2.1 Overview of the Router ...4 2.2 Features...5 2.3 Appearance...6 2.3.1 Front Panel ...6 2.3.2 Rear Panel...8 Chapter 3 Configuration ...9 3.1 Network...9 3.1.1 Status...9 3.1.2 System Mode...10 3.1.3 WAN ...13 3.1.4 LAN...31 - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 4
...76 3.4.5 App Control...82 3.5 VPN...84 3.5.1 IKE...85 3.5.2 IPsec...89 3.5.3 L2TP/PPTP...96 3.6 Services ...100 3.6.1 PPPoE Server...100 3.6.2 E-Bulletin ...106 3.6.3 Dynamic DNS ...108 3.6.4 UPnP ...113 3.7 Maintenance ...114 3.7.1 Admin Setup ...114 3.7.2 Management...117 3.7.3 License ...119 - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 5
4.2 Network Topology...129 4.3 Configurations...129 4.3.1 Internet Setting ...129 4.3.2 VPN Setting ...132 4.3.3 Network Management 137 4.3.4 Network Security...141 Chapter 5 CLI...147 5.1 Configuration...147 5.2 Interface Mode ...150 5.3 Online Help ...151 5.4 Command Introduction...152 5.4.1 ip - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 6
¾ One power cord ¾ One console cable ¾ One ground cable ¾ Two mounting brackets and other fittings ¾ Installation Guide ¾ Resource CD for TL-ER6120 Router, including: • This User Guide • Other Helpful Information Note: Make sure that the package contains the above items. If any of the listed items - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 7
Chapter 4 Application Chapter5 CLI Introduces the guide structure and conventions. Introduces the features and appearance of TL-ER6120 router. Introduces how to configure the Router via Web management page. Introduces the practical application of the Router on the enterprise network. Introduces how - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 8
Appendix A Hardware Specifications Appendix B FAQ Appendix C Glossary Lists the hardware specifications of this Router. Provides the possible solutions to the problems that may occur during the installation and operation of the router. Lists the glossary used in this guide. -3- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 9
for choosing the SafeStreamTM Multi-WAN VPN Router TL-ER6120. 2.1 Overview of the Router The SafeStreamTM Multi-WAN VPN Router TL-ER6120 from TP-LINK possesses excellent data processing capability and multiple powerful functions including IPsec/PPTP/L2TP VPN, Load Balance, Access Control, Bandwidth - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 10
. + Supporting remote management to manage the Router from remote places. 2.2 Features Hardware ¾ Embedded with MIPS64 network processor with frequency of 500MHz ¾ Equipped with 128MB DDRII high-speed RAM ¾ 1 fixed gigabit WAN port (port 1), 3 adjustable gigabit WAN/LAN ports, 1 LAN/DMZ port (port - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 11
MAC address of LAN, WAN, DMZ port ¾ Supports Logs, Statistics, Time setting ¾ Supports Remote and Web management ¾ Supports Diagnostic (Ping/Tracert) and Online Detection VPN ¾ Supports IPsec VPN and provides up to 100 IPsec VPN tunnels ¾ Supports IPSec VPN in LAN-to-LAN or Client-to-LAN ¾ Provides - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 12
5 The DMZ port is for connecting the Router to the servers Console / The Console port is for connecting with the serial port of a computer or terminal to monitor and configure the Router z Reset button Use the button to restore the Router to the factory defaults. With the Router powered on, use - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 13
Reset button. If the SYS LED is flashing with a high frequency about two or three seconds, it means the Router is restored successfully. 2.3.2 Rear Panel The rear panel of TL-ER6120 is shown as the following figure. z Power Socket Connect the female connector of the power cord to this power socket - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 14
Chapter 3 Configuration 3.1 Network 3.1.1 Status The Status page shows the system information, the port connection status and other information related to this Router. Choose the menu Network→Status to load the following page. -9- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 15
Figure 3-1 Status 3.1.2 System Mode The TL-ER6120 Router can work in three modes: NAT, Non-NAT and Classic. If your Router is hosting your local network's connection to the Internet with a network topology as the Figure 3-2 shown, you can set it to NAT mode. -10- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 16
network environment with a network topology as the Figure 3-3 shown, and forwards the packets between these two networks by the Routing rules, you can set it to Non-NAT mode. Figure 3-3 Network Topology - Non-NAT Mode If your Router is connected in a combined network topology as the Figure 3-4 shown - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 17
. Incoming traffic is translated back for delivery within the internal network. However, the Router will drop all the packets whose source IP addresses are in different subnet of LAN port. For example: If the LAN port of the Router is set to 192.168.0.1 for IP address and 255.255.255.0 for the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 18
WAN 3.1.3.1 WAN Mode TL-ER6120 provides four available WAN ports. You can set the number of WAN ports on this page. Choose the menu Network→WAN→WAN Mode to load the following page. ¾ WAN Mode WAN Ports: Figure 3-6 WAN Mode Select the total number of WAN ports you prefer to use. And the Router - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 19
default, TL-ER6120 is set to work in the mode of dual WAN ports. 2) Any change to the number of WAN ports may lead to a loss of current configurations. Please be sure to backup your configurations in advance. 3) The DMZ port will not be available if four WAN ports are enabled. 3.1.3.2 WAN1 TL-ER6120 - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 20
the Subnet Mask assigned by your ISP. Default Gateway: Optional. Enter the Gateway assigned . The default MTU is 1500. It is recommended to keep the default value if port. Downstream Bandwidth: Specify the bandwidth for receiving packets on the port. 2) Dynamic IP If your ISP (Internet Service - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 21
the IP address from your ISP's server. Click to release the current IP address of WAN port. Host Name: Optional. This field allows you to give a name for the Router. It's blank by default. MTU: MTU (Maximum Transmission Unit) is the maximum data unit transmitted by the physical network - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 22
that the Router has successfully obtained the IP parameters from your ISP. z "Disconnected" indicates that the IP address has been manually released or the request of the Router gets no response from your ISP. Please check your network connection and consult your ISP if this problem remains. -17 - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 23
the IP address of your ISP's Primary DNS. Secondary DNS: Displays the IP address of your ISP's Secondary DNS. 3) PPPoE If your ISP (Internet Service Provider) has provided the account information for the PPPoE connection, please choose the PPPoE connection type (Used mainly for DSL Internet - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 24
Figure 3-9 WAN - PPPoE The following items are displayed on this screen: ¾ PPPoE Settings Connection Type: Select PPPoE if your ISP provides xDSL Virtual Dial-up connection. Click < - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 25
Name: Optional. Enter the Service Name provided by your ISP. It's null by default. Primary DNS: Enter the IP address of your ISP's Primary DNS. Secondary DNS: Optional. Enter the IP address of your ISP's Secondary DNS. Secondary Connection: Here allows you to configure the secondary -20- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 26
configure the IP address of WAN port. If Dynamic IP is selected, the obtained IP address of WAN port is displayed. Subnet Address: If Static IP is selected, configure the subnet address of WAN port the connection has been manually terminated or the request of the Router has no response from your - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 27
this problem remains. IP Address: Displays the IP address assigned by your ISP. Gateway Address the IP address of your ISP's Secondary DNS. 4) L2TP If your ISP (Internet Service Provider) has provided the account information for the L2TP connection, please choose the L2TP connection type. -22- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 28
Figure 3-10 WAN - L2TP The following items are displayed on this screen: ¾ L2TP Settings Connection Type: Select L2TP if your ISP provides a L2TP connection. Click to dial- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 29
, the IP address of WAN port obtained is displayed. Subnet Mask: If Static IP is selected, configure the subnet mask of WAN port. If Dynamic IP is select, the subnet mask of WAN port obtained is displayed. Default Gateway: If Static IP is selected, configure the default gateway. If Dynamic IP - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 30
. z "Disconnected" indicates that the connection has been manually terminated or the request of the Router has no response from your ISP. Please ensure that your settings are correct and your network is connected well. Consult your ISP if this problem remains. IP Address: Displays the IP address - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 31
Figure 3-11 WAN - PPTP The following items are displayed on this screen: ¾ PPTP Settings Connection Type: Select PPTP if your ISP provides a PPTP connection. Click to dial- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 32
IP is selected, the IP address of WAN port obtained is displayed. If Static IP is selected, configure the subnet mask of WAN port. If Dynamic IP is select, the subnet mask of WAN port obtained is displayed. If Static IP is selected, configure the default gateway. If Dynamic IP is selected, the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 33
. z "Disconnected" indicates that the connection has been manually terminated or the request of the Router has no response from your ISP. Please ensure that your settings are correct and your network is connected well. Consult your ISP if this problem remains. IP Address: Displays the IP address - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 34
the current IP address. Account Name: Enter the Account Name provided by your ISP. If you are not clear, please consult your ISP. Password: Enter the Password provided by your ISP. If you are not clear, please consult your ISP. Auth Server: Enter the address of authentication server. It can - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 35
according to your need. z Manual: Select this option to manually activate or terminate the Internet connection default MTU is 1500. Upstream/Downstream Specify the Upstream/Downstream Bandwidth for the Bandwidth: port has been manually terminated or the request of the Router has no response - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 36
page, you can configure the parameters for LAN port of this router. Choose the menu Network→LAN→LAN to load the following page. Figure 3-12 LAN The following items are displayed on this screen: ¾ LAN IP Address: Enter the LAN IP address of the Router. 192.168.0.1 is the default IP address. The - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 37
Router with its DHCP (Dynamic Host Configuration DHCP server on your Router. To enable the Router to assign the TCP/IP IP address subnet with the Router's LAN IP address. The default address is 192.168.0.2. End IP address subnet with the Router's LAN IP address. The default address is 192.168.0.254. - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 38
of the LAN port of the Router. Default Domain: Optional. Enter clients connected to the Router. Choose the menu Network→LAN→DHCP Client to load the following page. Figure 3-14 DHCP Client You can view the information of the DHCP clients in this table. Click the Refresh button for the updated - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 39
view the information of the entries and edit them by the Action buttons. Up to 512 DHCP static address entries can be supported for LAN and DMZ separately by this Router. The first entry in Figure 3-15 indicates: The IP address 192.168.0.101 is reserved for the computer with the MAC - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 40
fewer default firewall restrictions than the LAN does. TL-ER6120 provides a DMZ port to allow all the local hosts connected to this port to be exposed to the Internet for some special-purpose services, such - Private Mode 3.1.5.1 DMZ This page allows you to configure the DMZ port of TL-ER6120. -35- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 41
IP Address: Enter the IP address of DMZ port. Subnet Mask: Enter the Subnet Mask of DMZ port. Tips: The DHCP service, DHCP Client and DHCP Reservation functions are available when the DMZ port is enabled. For the configuration instructions, please refer to section 3.1.4.1 to.3.1.4.4. Note: When - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 42
node, you can just set the MAC address of TL-ER6120 's LAN port the same to the MAC address of the previous router, which can avoid all the devices under this network node to update their ARP binding tables. Set the MAC Address for WAN port: In the condition that your ISP has bound the account - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 43
to set the MAC address of the Router's LAN port to the MAC address of the current management PC. 3.1.7 Switch Some basic switch port management functions are provided by TL-ER6120, which facilitates you to monitor the traffic and manage the network effectively. 3.1.7.1 Statistics Statistics screen - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 44
untagged frame this Router can support is 1518 forward copies of packets from one/multiple ports (mirrored port) to a specific port (mirroring port). Usually, the mirroring port is connected to a data diagnose device, which is used to analyze the mirrored packets for monitoring and troubleshooting - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 45
be copied to the mirroring port. ¾ Port Mirror Mirroring Port: Mirrored Port: Select the Mirroring Port to which the traffic is copied. Only one port can be selected as the mirroring port. Select the Mirrored Port from which the traffic is mirrored. One or multiple ports can be selected as the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 46
sent by port 1, port 2, port 3 and port 5 (mirrored ports) will be copied to port 4 (mirroring port). Tips: If both the mirrored port and the mirroring port are the LAN ports, these two LAN ports should be in the same Port VLAN. For example, if port 3 (the mirroring port) and port 4 (the mirrored - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 47
for the ingress packets of Flood mode will not exceed 1Mbps, and the transmitting rate for all the egress packets will not exceed 1Mbps. 3.1.7.4 Port Config On this page, you can configure the basic parameters for the ports. Choose the menu Network→Switch→Port Config to load the following page. -42- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 48
enabled. Flow Control: Allows you to enable/disable the Flow Control function. Negotiation Mode: Select the Negotiation Mode for the port. All Ports: Allows you to configure the parameters for all the ports at one time. 3.1.7.5 Port Status On this page, you can view the current status of each - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 49
packets are limited in a VLAN. TL-ER6120 provides the Port VLAN function, which allows you to create multiple logical VLANs for the LAN ports based on their port numbers. Choose the menu Network→Switch→Port VLAN to load the following page. Figure 3-25 Port VLAN The following items are displayed - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 50
3.2.1 Group On this page you can define the group for management. Choose the menu User Group→Group to load the following page. Figure 3-26 Group Configuration The following items are displayed on this screen: ¾ Group Config Group Name: Specify a unique name for the group. Description: Give a - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 51
the user. It cannot be the network address or broadcast address of the port. Give a description to the user for identification. It's optional. In Available Group: Selected Group: Group Name: Select the desired view for configuration. Select the name of the desired User. Displays the Groups that - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 52
page, you can set up the NAT function. Choose the menu Advanced→NAT→NAT Setup to load the following page. Figure 3-29 NAT Setup The following items are displayed on this screen: ¾ NAPT Source Port Range: Enter the source port range between 2049 and 65000, the span of which must be not less than - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 53
checkbox and Translated IP Address in the second checkbox. TL-ER6120 allows mapping from LAN port to WAN port and DMZ in LAN Mode. Interface: Select an interface for forwarding data packets. DMZ Forwarding: Enable or disable DMZ Forwarding. The packets transmitted to the Translated IP Address - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 54
in Figure 3-29 indicates: The IP address of host1 in local network is 1.1.1.1 and the WAN IP address after NAT mapping is specified to be 2.2.2.2. The data packets are transmitted from WAN1 port. DMZ Forwarding and this entry are both activated. Note: One-to-One NAT entries take effect only when - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 55
entry named tplink1. The subnet under the LAN port of the Router is 192.168.2.0/24 and this entry is TL-ER6120 is 192.168.0.0 /24, the subnet of VLAN2 under a three layer switch is 192.168.2.0 /24, while the subnet of VLAN3 is 192.168.3.0 /24. The IP of VLAN for cascading the switch to the Router - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 56
Establish the Multi-Nets NAT entries with Subnet/Mask of VLAN2 and VLAN3. The configured entries are as follows: 2. Then set the corresponding Static Route entry, enter the IP address of the interface connecting the Router and the three layer switch into the Next Hop field. Choose the menu Advanced - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 57
Virtual Server entries. Up to 28 characters can be entered. External Port: Enter the service port or port range provided by Router for accessing external network. All requests from Internet to this service port or port range will be redirected to the specified server in local network. Internal - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 58
buttons. The first entry in Figure 3-31 indicates: This is a Virtual Server entry named host1, all the TCP data packets from Internet to port 65534-65535 of the Router will be redirected to the port 65534-65535 of the LAN host with IP address of 192.168.0.103, and this entry is activated - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 59
such as 8690-8696. ● The Router supports up to 16 Port Triggering entries. Each entry supports at most 5 groups of trigger ports and overlapping between the ports is not allowed. ● Each entry supports at most 5 groups of incoming ports and the sum of incoming ports you set for each entry should not - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 60
recommended to keep default if no special requirement. 3.3.2 Traffic Control Traffic Control functions to control the bandwidth by configuring rules for limiting various data flows. In this way, the network bandwidth can be reasonably distributed and utilized. 3.3.2.1 Setup Choose the menu Advanced - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 61
Control When: bandwidth usage reaches the specified value. ¾ Default Limit Limited Bandwidth: Default Limit applies only for users that are not constrained by Bandwidth Control Rules. These users share certain bandwidth with upper limit configured here. Value 0 means all the remained bandwidth is - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 62
The Downstream Bandwidth of WAN port can be configured on WAN page. Note: ● The Upstream/Downstream Bandwidth of WAN port you set must not be more than the bandwidth provided by ISP. Otherwise the Traffic Control will be invalid. ● If there are data flowing into the Router from interface A and out - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 63
of arrowhead indicates the data stream direction The DMZ port displays in the drop-down list only when the DMZ port is enabled. WAN-ALL means all WAN ports through which the data flow might pass. Individual WAN port cannot be selected after WAN-ALL rules are added. Group: Select the group to - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 64
certain interface exceeds the physical bandwidth of this interface. ● When DMZ port is disabled, it is only allowed deleting operation to the related rules. 3.3.3 Session Limit The amount of TCP and UDP sessions supported by the Router is finite. If there are some local hosts transmitting too many - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 65
the button to get the latest information. 3.3.4 Load Balance On this part, you can configure how the traffic load is shared by the WAN ports to optimize the resource utilization. 3.3.4.1 Configuration Choose the menu Advanced→Load Balance→Configuration to load the following page. -60- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 66
checked, the Router will consider the source IP address and destination IP address of the packets as a whole and record the WAN port they pass through. And then the packets with the same source IP address and destination IP address or destination port will be forwarded to the recorded WAN port. This - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 67
default value is 1 - 65535, which means any port is acceptable. WAN: Select the WAN port forwarded from WAN1 port, regardless of the port and protocol. This entry is activated d and will take effect at 8 am to 10 pm from Monday to Friday. 3.3.4.3 Link Backup With Link Backup function, the Router - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 68
On this page, you can configure the Link Backup function based on actual need to reduce the traffic burden of WAN port and improve the network efficiency. Choose the menu Advanced→Load Balance→Link Backup to load the following page. Figure 3-40 Link Backup The following items are displayed on this - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 69
to the primary and secondary WAN lists at the same time, and one WAN port should be added to only one list. 3.3.4.4 Protocol On this page, you can specify the protocol for routing rules conveniently. A protocol constitutes of the name and number. The Router predefines three commonly used protocols - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 70
network along which to send network traffic. Static Route is a kind of special routing configured by the administrator, which is simple, efficient, and reliable. Commonly used in small should modify the static route information manually as long as the network topology or link status is changed. -65- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 71
route is accessible. Metric: Defines the priority of the route. The smaller the value is, the higher the priority is. The default value is 0. Keep the default value if unnecessary. Description: Give a description for the entry. Status: Activate or inactivate the entry. ¾ List of Rules You can - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 72
.31.70.28 and subnet mask of 255.255.255.0, the Router will forward the packets from WAN1 port to the next hop of 116.10.1.254. Application Example There is a network topology as the following figure shown: If the LAN port of TL-ER6120（with Non-NAT or Classic system mode）is connected to LAN1 - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 73
optimal path. With features of easy configuration, management and implementation, it is widely used Router has not sent route information in 180 seconds, the RIP of the other routers would set the distance to this Router TL-ER6120 supports both RIPv1 version and RIPv2 version, thus you can configure - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 74
supports multicast and broadcast. Password If RIPv2 is enabled, set the Password Authentication according to the actual Authentication: network situation, and the password the Router will select WAN1 which is in the same network with the destination IP as next hop and forward data via this port. - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 75
. The attacker may send the ARP spoofing packets with false IP address-to-MAC address mapping entries, and then the device will automatically update the ARP table after receiving wrong ARP packets, which results in a breakdown of the normal communication. Thus, ARP defense technology is generated to - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 76
the device will be replaced. You can set the packets sending rate in the Interval field. Check the box before Enable ARP Logs, and the Router will send ARP logs to the specified server. The IP address of server is the Server IP set on 3.7.7 Logs. ¾ IP-MAC Binding IP Address - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 77
entries only" option is selected and saved, the WEB management page of the Router cannot be login. At the moment, you should restore the Router to factory default and login again. 3.4.1.2 ARP Scanning ARP Scanning feature enables the Router to scan the IP address and corresponding MAC address and - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 78
manually on 3.4.1.1 IP-MAC Binding. 3.4.1.3 ARP List On this page, the IP-MAC information of the hosts which communicated with the Router recently will be saved in the ARP list. Choose the menu Firewall→Anti ARP Spoofing→ARP List to load the following page. Figure 3-47 ARP List The configurations - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 79
Attack Defense The following items are displayed on this screen: ¾ General Flood Defense: Flood attack is a kind of commonly used DoS (Denial of Service), which including TCP SYN, UDP, ICMP and so on. It is recommended to check all the Flood Defense options and specify the corresponding thresholds - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 80
Anomaly refers to the abnormal packets. It is recommended to select all the Packet Anomaly Defense options. Enable Attack With this box checked, the Router will record the defense logs. Defense Logs: 3.4.3 MAC Filtering On this page, you can control the access to the Internet of local host by - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 81
Description: Give a description for the entry. ¾ List of Rules You can view the information of the entries and edit them by the Action buttons. 3.4.4 Access Control 3.4.4.1 URL Filtering URL (Uniform Resource Locator) specifies where an identified resource is available and the mechanism for - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 82
Example: Network Requirements: Prevent the local hosts from accessing Internet website www.aabbcc.com and downloading the files with suffix of "exe". Configuration Procedure: Select Keywords mode and type "exe" in the field, select URL mode and type "www.aabbcc.com" as the following figure - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 83
3.4.4.2 Web Filtering On this page, you can filter the desired web components. Choose the menu Firewall→Access Control→Web Filtering to load the following page. Figure 3-51 Web Filtering Check the box before Enable Web Filtering and select the web components to be filtered. 3.4.4.3 Access Rules - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 84
to pass through the Router. Service: Select the service for the entry. Only the service belonging to the specified service type is limited by the FTP for Service, the packets of other service types can still pass through the Router. You can add new service types on 3.4.4.4 Service. Interface - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 85
Source: Destination: Effective Time: Description: Priority: DMZ refers to all the WAN, LAN or DMZ interfaces. Select the Source IP Range for the entries, including the following three ways: y IP the added entries. The latest enabled entry will be displayed at the end of the list by default. -80- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 86
refer to Appendix B FAQ. 3.4.4.4 Service The Service function allows you to specify the protocol and port number i to be filtered for Firewall function conveniently. Protocol name and port range constitute a service type. The Router predefines three commonly used services such as HTTP, FTP and - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 87
. The system predefined protocols include TCP, UDP and TCP/UDP. Dest. Port: Enter the start and end ports to make a destination port range for the service. The start port number cannot be greater than the end port number. ¾ List of Service You can view the information of the entries and edit them - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 88
: Click the button to select applications from the popup checkbox. The applications include IM, Web IM, SNS, P2P, Media, Basic and Proxy. The default setting is to limit all the applications in the application list except for Basic and Proxy. -83- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 89
on the Application Rules page, you can download the latest database from http://www.tp-link.com, Click the button and select the file, and then click the button to upgrade the database. 3.5 VPN VPN (Virtual Private Network) is a private network established via the public network - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 90
Router, the tunneling topology implemented by encapsulating packets is transparent to users. The tunneling protocols supported by TL-ER6120 contain Layer 3 IPsec and Layer 2 L2TP/PPTP. 3.5.1 IKE In the IPsec VPN Internet Security Association and Key Management Protocol), Oakley Key Determination - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 91
Policy Name: Specify a unique name to the IKE policy for identification and management purposes. The IKE policy can be applied to IPsec policy. Exchange Mode: Select the IKE Exchange Mode in phase 1, and ensure the remote VPN peer uses the same mode. z Main: Main mode provides identity protection - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 92
: uses a name as the ID. Local ID: The local WAN IP will be inputted automatically if IP Address type is selected. the local device as the ID in IKE negotiation Remote ID Type: Select the remote ID type for IKE negotiation. IP Address: uses VPN→IKE→IKE Proposal to load the following page. -87- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 93
items are displayed on this screen: ¾ IKE Proposal Proposal Name: Specify a unique name to the IKE proposal for identification and management purposes. The IKE proposal can be applied to IPsec proposal. Authentication: Select the authentication algorithm for IKE negotiation. Options include - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 94
edit them by the action buttons. 3.5.2 IPsec IPsec (IP Security) is a set of services and protocols defined by IETF (Internet Engineering Task Force) to provide high security for IP packets can define and edit the IPsec policy. Choose the menu VPN→IPsec→IPsec Policy to load the following page. -89- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 95
are displayed on this screen: ¾ General You can enable/disable IPsec function for the Router here. ¾ IPsec Policy Policy Name: Specify a unique name to the IPsec policy. Up LAN-to-LAN: Select this option when the client is a network. z Client-to-LAN: Select this option when the client is a -90- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 96
IP address of this WAN port. Remote Gateway: Enter the Remote Gateway. It can be IP address or Domain name. Policy Mode: Select the negotiation mode for the policy. z IKE: The parameters for the VPN tunnel are generated automatically via IKE negotiations. z Manual: All settings (including the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 97
must match the outbound ESP authentication key at the other end of the tunnel, and vice versa. ESP Encryption Specify the inbound ESP Encryption Key manually if ESP Key-In: protocol is used in the corresponding IPsec Proposal. The inbound key here must match the outbound ESP encryption key at - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 98
Specify the outbound AH Authentication Key manually if Key-Out: AH protocol is remote subnet is 192.168.3.0/24 and this tunnel is using IKE automatic negotiation. It is enabled. Tips: ● 0.0.0.0.0/32 indicates all IP addresses. ● Refer to Appendix Troubleshooting 5 for the configuration - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 99
Specify a unique name to the IPsec Proposal for identification and management purposes. The IPsec proposal can be applied to IPsec policy. in addition to origin authentication, data integrity, and anti-replay services. AH Authentication: Select the algorithm used to verify the integrity - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 100
Proposals and edit them by the action buttons. 3.5.2.3 IPsec SA This page displays the information of the IPsec SA (Security Association). Choose the menu VPN→IPsec→IPsec SA to load the following page. Figure 3-61 IPsec SA Figure 3-61 displays the connection status of the NO.1 entry in the List - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 101
and the default gateway of remote peer are 172.30.70.151 and 172.30.70.161 respectively. Security protocol and other parameters for IPsec tunnel and the remote router should be configured the same. As Security Association is unidirectional, an ingoing SA and an outgoing SA are created to protect - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 102
hello packets. ¾ L2TP/PPTP Tunnel Protocol: Select the protocol for VPN tunnel. Options include L2TP and PPTP. Mode: Specify the working mode for this Router. Options include: z Client: In this mode, the device sends a request to the remote L2TP/PPTP server initiatively for establishing a -97- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 103
tunnel. z Server: In this mode, the Router responds the request from the remote client for establishing a tunnel. Account Name: Enter the account name of L2TP/PPTP tunnel. It should be configured identically on server and client. Password: Enter the password of L2TP/PPTP tunnel. It should be - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 104
in Figure 3-62 indicates: this tunnel is encapsulated by using L2TP. Its user name is test, the password can be configured, and the Router is configured in Client mode. The remote server is 172.30.70.161 and the remote subnet is 192.168.2.0/24. This entry is enabled. 3.5.3.2 IP Address Pool On this - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 105
VPN→L2TP value in client corresponds Services 3.6.1 PPPoE Server The Router can be configured as a PPPoE server to specify account and IP address to users in LAN and thus you can control the dial-up of users for a high efficiency in network management. The PPPoE configuration - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 106
General On this page, you can configure PPPoE function globally. Choose the menu Services→PPPoE Server→General to load the following . The default is 256. Max Echo-Requests: Specify the maximum number of Echo-Requests sent by the server to wait for response. The default is 10. The link will be - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 107
not transfer password in plain text. z MS-CHAP, put forward by Microsoft, adopts a different encryption algorithm of CHAP. z MS-CHAP v2 with a higher security is an improved version of MS-CHAP. It is available when Remote Authentication is selected. RADIUS (Remote Authentication Dial In User Service - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 108
Pool Pool Name: Specify a unique name to the IP Address Pool for identification and management purposes. IP Address Range: ¾ List of IP Pool Specify the start and the end page, you can configure the PPPoE account. Choose the menu Services→PPPoE Server→Account to load the following page. -103- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 109
with the one in L2TP/PPTP connection settings. Password: Enter the password. IP Address Assigned Mode: Select the IP Address client. The default value is 1. Expiration Date: Specify the Expiration Date of the account. The default is 2099-1-1. Description: Enter the description for management - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 110
to the server. It is available when Manually is selected. Enter the MAC address of the default is 48. If Enable Advanced Account Features is not selected, the Session Timeout value is 0 by default. specify the Exceptional IP. Choose the menu Services→PPPoE Server→Exceptional IP to load the following - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 111
range. This range should be in the same IP range with LAN port or DMZ port of the Router. The start IP address should not exceed the end address and detailed information of all accounts you have established. Choose the menu Services→PPPoE Server→List of Account to load the following page. Figure - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 112
Figure 3-70 E-Bulletin The following items are displayed on this screen: ¾ General Enable E-Bulletin: Specify whether to enable electronic bulletin function. Interval: Specify the interval to release the bulletin. Enable Logs: Specify whether to log the E-Bulletin. ¾ E-Bulletin Title: Enter - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 113
is enabled. Tips: For the configuration for groups and users, please refer to the User Group section. 3.6.3 Dynamic DNS DDNS (Dynamic DNS) service allows you to assign a fixed domain name to a dynamic WAN IP address, which enables the Internet hosts to access the Router or the hosts in LAN using - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 114
, password and domain name. TL-ER6120 Router offers PeanutHull DDNS client, Dyndns DDNS client, NO-IP DDNS client and Comexe DDNS client. The Dynamic DNS can be implemented on DynDNS DDNS, No-IP DDNS, Peanuthull DDNS and Comexe DDNS pages. 3.6.3.1 DynDNS On this page, you can configure DynDNS client - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 115
-IP On this page you can configure NO-IP DDNS client. Choose the menu Services→Dynamic DNS→No-IP to load the following page. Figure 3-72 NO-IP DDNS The following items are displayed on this screen: ¾ No-IP DDNS Account Name: Password: Domain Name: DDNS Service: WAN Port: Enter the Account Name of - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 116
this page you can configure PeanutHull DDNS client. Choose the menu Services→Dynamic DNS→PeanutHull to load the following page. Figure 3-73 PeanutHull DDNS The following items are displayed on this screen: ¾ PeanutHull DDNS Account Name: Password: DDNS Service: WAN Port: Service Type: Enter the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 117
service z Offline: DDNS service is disabled. z Connecting: client is connecting to the server. z Online: DDNS works normally. z Authorization fails: The Account Name or Password Comexe On this page you can configure Comexe DDNS client. Choose the menu Services→Dynamic DNS→Comexe to load the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 118
DDNS service here. Displays the WAN port for which Comexe DDNS is selected. Displays the current status of DDNS service z Offline: DDNS service is disabled. z Connecting: client is connecting to the server. z Online: DDNS works normally. z Authorization fails: The Account Name or Password is - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 119
will be displayed in the list of UPnP Mapping. Up to 64 UPnP service connections are supported in TL-ER6120. The NO.1 entry in Figure 3-75 indicates: TCP data received on port 12856 of the WAN port in the Router will be forwarded to port 12856 in 192.168.0.101 server in LAN. Note: ● When using UPnP - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 120
new user name and password must not exceed 31 characters in length and must consist of numbers or letters. All the fields are case-sensitive. 3.7.1.2 Login Parameter On this page, you can configure and modify the Web and Telnet port. Choose the menu Maintenance→Admin Setup→Login Parameter to load - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 121
to manage the Router with IP address of 210.10.10.50 remotely. Configuration Procedure Type 210.10.10.0/24 in the Subnet/Mask field on Remote Management page and enable the entry as the following figure shows. Then type the corresponding port number in Web Management Port and Telnet Management Port - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 122
On this page you can configure the Remote Management function. This feature allows managing your Router from a remote location via the Internet. Choose the menu Maintenance→Setup→Remote Management to load the following page. Figure 3-78 Remote Management The following items are displayed on - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 123
. Note: 1. To avoid any damage, please don't power down the Router while being restored. 2. Configurations may be lost if the configuration file you imported varies greatly from current configurations. 3.7.2.3 Reboot Choose the menu Maintenance→Management→Reboot to load the following page. -118- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 124
the menu Maintenance→Management →Firmware Upgrade to load the following page. Figure 3-82 Firmware Upgrade To upgrade the Router is to get more functions and better performance. Go to http://www.tp-link.com to download the updated firmware. Type the path and file name of the update file into the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 125
3-83 License 3.7.4.1 Interface Traffic Statistics Interface Traffic Statistics screen displays the detailed traffic information of each port and extra information of WAN ports. Choose the menu Maintenance→Statistics→Interface Traffic Statistics to load the following page. Figure 3-84 Interface - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 126
. Displays the interface. Displays the amount of IP Fragments received by WAN port. Displays the rate for transmitting data frames. 3.7.4.2 IP Traffic Statistics IP /disable refreshing the IP Traffic Statistics automatically. The default refresh interval is 5 seconds. ¾ Traffic Statistics -121- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 127
of corresponding PCs. Sorted by: Select the rule for displaying the traffic information. 3.7.5 Diagnostics 3.7.5.1 Diagnostics This Router provides Ping test and Tracert test functions for network diagnose. Choose the menu Maintenance→Diagnostics→Diagnostics to load the following page. -122- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 128
destination IP address or Domain name here. Then select a port for testing, if you select "Auto", the Router will select the interface of destination automatically. After clicking button, the Router will send Ping packets to test the network connectivity and reachability of the host and the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 129
as destination for PING detection, DNS server of WAN port will be selected as destination for DNS Lookup. In Manual Mode, you can configure the destination for PING and DNS Lookup manually. Ping: Enter the destination IP for Ping in Manual mode. 0.0.0.0 means PING detection is disabled. -124 - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 130
DNS server in Manual mode. 0.0.0.0 means DNS Lookup is disabled. Displays the detected WAN port. Displays whether the Online Detection is enabled. Display the detecting results. 3.7.6 Time System Time is the time displayed while the Router is running. On this page you can configure the system time - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 131
Get GMT: Manual: Synchronize PC'S Clock: with When this option is selected, you can configure the time zone and the IP Address for the NTP Server. The Router will get GMT automatically if it has connected to a NTP Server. z Time Zone: Select your local time. z Primary/Secondary NTP Server: Enter - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 132
Send System Logs: Select Send System Logs and specify the server IP, then the new added logs will be sent to the specified server. The Logs of switch are classified into the following eight levels. Severity emergencies alerts Level Description 0 The system is unusable. 1 Action must be taken - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 133
the branch offices, allow the staff on business to access the Mail Server and FTP Server in LAN, and provide the remote access services for the cooperated partners. ¾ Network Management To avoid some of the staff using IM/P2P application at the working time to occupy a lot of network bandwidth - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 134
be in the same subnet of the LAN port of this Router. (The default subnet of LAN port is 192.168.0.0/24.). The IP address of your PC can be obtained automatically or configured manually. To access the configuration utility, open a web-browser and type in the default address http://192.168.0.1 in the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 135
. Figure 4-2 WAN Mode 4.3.1.3 Internet Connection Configure the Static IP connection type for the WAN1 and WAN2 ports of the Router. Choose the menu Network→WAN→WAN1 to load the following page. Select the Static IP connection type and enter the IP address, Subnet Mask and Default Gateway provided by - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 136
Backup Set the connection of WAN1 as the primary link, the connection of WAN 2 as the secondary link. Choose the menu Advanced→Load Balance→Link Backup to load the configuration page. Select WAN1 as Primary WAN, WAN2 as Backup WAN, select the Failover mode as Figure 4-4 shown, and then click the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 137
tunnel via the TP-LINK VPN routers between the headquarters and the remote branch office to guarantee a secured communication. The following takes IPsec settings of the Router in the headquarters for example. Moreover, you can configure the PPTP VPN Server to establish a remote mobile office, which - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 138
created) Pre-shared Key: aabbccddee SA Lifetime: 3600 DPD: Enable DPD Interval: 10 Click the button to apply. Figure 4-7 IKE Policy Tips: For the VPN Router in the remote branch office, the IKE settings should be the same as the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 139
3DES Click the button to apply. Figure 4-8 IPsec Proposal z IPsec Policy Choose the menu VPN→IPsec→IPsec Policy to load the configuration page. Settings: IPsec: Policy Name: Status: Mode Local Subnet: Remote Subnet: Enable IPsec_1 Activate LAN-to-LAN 192.168.0.0/24 172.31.10.0/24 -134- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 140
WAN: WAN1 Remote Gateway: 116.31.85.133 Exchange Mode IKE IKE Policy: 4-9 IPsec Policy Tips: For the VPN Router in the remote branch office, the IPsec settings should be consistent with the Router in the headquarters. The Remote Gateway of the remote Router should be set to the IP address - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 141
following page. Check the box of Enable VPN-to-Internet to allow the PPTP clients to access the local enterprise network and the Internet. Then continue with the following settings for the PPTP Tunnel. Settings: L2TP/PPTP: Protocol: Mode: Username: Password: Enable PPTP Server PPTP abcdefg -136- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 142
4.3.3 Network Management To manage the enterprise network effectively and forbid the Hosts within the IP range of 192.168.0.30-192.168.0.50 to use IM/P2P application, you can set up a User Group and specify the network bandwidth limit and session limit for this group. The detailed configurations are - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 143
Config z User Choose the menu User Group→User to load the configuration page. Click the button to enter the batch processing screen - Batch z View Choose the menu User Group→View to load the configuration page. Add all the Users you just created into the Group 1 and click the button to - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 144
the menu Firewall→App Control→Control Rules to load the configuration page. Check the box before Enable Application Control and click App Rules 4.3.3.3 Bandwidth Control To enable Bandwidth Control, you should configure the total bandwidth of interfaces and the detailed bandwidth control rule first - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 145
Figure 4-14 Bandwidth Setup 2) Interface Bandwidth Choose the menu Network→WAN→WAN1 to load the configuration page. Configure the Upstream Bandwidth the menu Advanced→Traffic Control→Bandwidth Control to load the configuration page. Then continue with the following settings: Settings: Direction - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 146
Session Limit Choose the menu Advanced→Session Limit→Session Limit to load the configuration page. Check the box before Enable Session Limit and click the and Packet Anomaly Defense. Moreover, you can enable Port Mirror function and Statistics function to monitor the real-time traffic of the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 147
by ARP Scanning. For some special items not bound, you can bind them manually. 1) Scan and import the entries to ARP List Specify ARP Scanning range. Choose the menu Firewall→Anti ARP Spoofing→ARP Scanning to load the configuration page. No ARP attack in the local network is the premise of ARP - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 148
ARP attack, you can bind the default gateway and IP address of WAN port. Obtain the MAC address of WAN port by ARP Scanning first. Choose the menu Firewall→Anti ARP Spoofing→ARP Scanning to load the configuration page. Enter the default gateway of the WAN port such as 58.51.128.254 in the Scanning - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 149
Traffic Monitoring 1) Port Mirror Choose the menu Network→Switch→Port Mirror to load the configuration page. Check the box before Enable Port Mirror and select the Ingress&Egress mode. Select the Port 5 for the Mirroring Port and the Port 3 and the Port 4 for the Mirrored ports. Click the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 150
Figure 4-23 Port Mirror 2) Statistics Choose the menu Maintenance→Statistics to load the page. Load the Interface Traffic Statistics page to view the traffic statistics of each physical interface of the Router as Figure 4-23 shows. Figure 4-24 Interface Traffic Statistics Load the IP Traffic - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 151
Figure 4-25 IP Traffic Statistics After all the above steps, the enterprise network will be operated based on planning. -146- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 152
Chapter 5 CLI TL-ER6120 provides a Console port for CLI (Command Line Interface) configuration, which enables you to configure the Router by accessing the CLI from console (such as Hyper Terminal) or Telnet. The following part will introduce the steps to access CLI via Hyper Terminal - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 153
Figure 5-2 Connection Description 4. Select the port (The default port is COM1) to connect in Figure 5-3, and click OK. Figure 5-3 Select the port to connect 5. Configure the port selected in the step above as the following Figure 5-4 shows. Configure Bits per second as 115200, Data bits as 8, - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 154
Figure 5-4 Port Settings 6. Choose File → Properties → Settings on the Hyper Terminal window as Figure 5-5 shows, then choose VT100 or Auto detect for Emulation and click OK. Figure 5-5 Connection Properties Settings -149- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 155
Log in the Router The CLI of TL-ER6120 offers two command modes: User EXEC Mode and Privileged EXEC Mode. User EXEC Mode only allows users to do some simple operations such as view the system information, while Privileged EXEC Mode allows you to manage and configure the Router. Thus different users - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 156
Console port). Enter the disable command to return to User EXEC mode. As Figure 5-7 shown: 5.3 Online Help Figure 5-7 Interface Mode TL-ER6120 functions with CLI Online Help: 1) Type a question mark to get all commands of this view and their brief description in either mode. TP-LINK > ←Type - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 157
carriage return will display, which indicates this command can be executed. TP-LINK # enable ←Press Space and ? button 5.4 Command Introduction TL-ER6120 provides a number of CLI commands for users to manage the Router and user information. For better understanding, each command is followed by - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 158
lan Lan Ip: 192.168.0.1 Lan Mask: 255.255.255.0 Get the configuration information of LAN port. TP-LINK # ip set lan address 192.168.0.20 TP-LINK # ip set lan mask 255.255.0.0 Set the LAN IP address of the Router as 192.168.0.20. Operation succeeded! Indicates the operation is successful. It will - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 159
?[Y/N] TP-LINK # sys restore Restore to factory default. Y means YES, N means NO. This command will restore system, Continue?[Y/N] TP-LINK # sys export config Server address: [192.168.1.101]192.168.1.100 Username: [admin]ftp Password: [admin]ftp File name: [config.bin] Export the configuration - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 160
The current CPU Usage of the system will display. TP-LINK # sys update Server address: [192.168.1.101] Username: [admin] Password: [admin] File name: [update.bin] Upgrade the firmware. Try to get the update file < update.bin > ... Get update file < update bin > succeed, file size is 2298608 bytes - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 161
password: Modify the password of the Guest. TP-LINK # user get Username: admin Password: admin Query the user name and password of the Administrator. TP-LINK # user set password Enter old password: Enter new password: Confirm new password: Modify the password of the Administrator. TP-LINK - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 162
> history 1. history 2. sys show 3. history View the history command. TP-LINK > history clear 1. history 2. sys show 3. history 4. history clear Clear the history command. 5.4.6 exit The exit command is used to exit the system only when logging in by Telnet. TP-LINK > exit Exit CLI. -157- - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 163
/MDIX) One 10/100/1000M Auto-Negotiation LAN RJ45 port (Auto MDI/MDIX) One Console Port 10Base-T: UTP/STP of Cat. 3 or above Transmission Medium 100Base-TX: UTP/STP of Cat. 5 or above 1000Base-T: UTP/STP of Cat.5e, Cat.6 LEDs PWR, SYS, Link/Act, Speed, WAN, DMZ Power 100-240V~ 50/60Hz 0.6A - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 164
255.255.0 for the Subnet Mask. 3) Test the connection between your PC and TL-ER6120 via Ping command. 4) If you still cannot access the configuration page, please restore your Router to its factory default settings and try to log in again. 2. If your management port has been changed, please log into - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 165
allowed to remotely access the router. 2. If the router's management port has been modified, please log into the Router with the new address, such as http://192.168.0.1:XX ("XX" is the new management port number). 3. Check to see if the management port has been mapped to the service port of the - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 166
the TCP/IP parameters Configuration Protocol） for the all the PCs that are connected to a DHCP server. D A Demilitarized Zone allows one local host to be exposed to the DMZ（Demilitarized Zone） Internet for a special-purpose service such as Internet gaming or videoconferencing. DNS（Domain Name - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 167
a common set of CODECs, call setup and negotiating procedures, and basic data for services (such as IPSec) that require keys. Before any IPSec traffic can be passed, each Router/firewall Media Standardized data link layer address that is required for every Access Control address） port or device that - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 168
/ Internet Protocol） Common name for the suite of protocols to support the construction of worldwide Internetworks. TCP and IP are the two in the suite. Telnet is used for remote terminal connection, enabling users to Telnet（Telecommunication log in to remote systems and use resources as if they - TP-Link TL-ER6120 | TL-ER6120 User Guide - Page 169
configured (using management software) so that they can communicate as VLAN（ VPN （Virtual Private Network） Enables IP traffic to travel securely over a public TCP/IP network by encrypting all traffic from one network to another. Data communications network that serves users across a broad W WAN
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
 |
 |
TL-ER6120
Multi-WAN VPN Router
Rev: 1.0.0
1910010516