Home » TP-Link Manuals » Bridges & Routers » TP-Link TL-ER6020 » Manual Viewer

TP-Link TL-ER6020 TL-ER6020 v1 User Guide - Page 94

Local Subnet, Remote Subnet, Remote Gateway, Policy Mode, IKE Policy, IPsec Proposal

Add to My Manuals
Save this manual to your list of manuals

Page 94 highlights

Mode: Local Subnet: Remote Subnet: WAN: Remote Gateway: Policy Mode:  IKE Mode IKE Policy: IPsec Proposal: PFS: Select the network mode for IPsec policy. Options include:  LAN-to-LAN: Select this option when the client is a network.  Client-to-LAN: Select this option when the client is a host. Specify IP address range on your local LAN to identify which PCs on your LAN are covered by this policy. It's formed by IP address and subnet mask. Specify IP address range on your remote network to identify which PCs on the remote network are covered by this policy. It's formed by IP address and subnet mask. Specify the local WAN port for this Policy. The "Remote Gateway" of the remote peer should be set to the IP address of this WAN port. Enter the Remote Gateway. It can be IP address or Domain name. Select the negotiation mode for the policy.  IKE: The parameters for the VPN tunnel are generated automatically via IKE negotiations.  Manual: All settings (including the keys) for the VPN tunnel are manually inputted and no key negotiation is needed. It is available when IKE is selected as the negotiation mode. Specify the IKE policy. If there is no policy selection, add new policy on VPN→IKE→IKE Policy page. Select IPsec Proposal on IKE mode. Up to four IPsec Proposals can be selected on IKE mode. Select the PFS (Perfect Forward Security) for IKE mode to enhance security. This setting should match the remote peer. With PFS feature, IKE negotiates to create a new key in -89-

Section	Page
Package Contents	6
Chapter 1 About this Guide	7
1.1 Intended Readers	7
1.2 Conventions	7
1.3 Overview of this Guide	7
Chapter 2 Introduction	9
2.1 Overview of the Router	9
2.2 Features	10
2.3 Appearance	11
2.3.1 Front Panel	11
2.3.2 Rear Panel	13
Chapter 3 Configuration	14
3.1 Network	14
3.1.1 Status	14
3.1.2 System Mode	14
3.1.3 WAN	17
3.1.4 LAN	34
3.1.4.1 LAN	34
3.1.4.2 DHCP	34
3.1.4.3 DHCP Client	36
3.1.4.4 DHCP Reservation	36
3.1.5 DMZ	37
3.1.5.1 DMZ	38
3.1.6 MAC Address	39
3.1.7 Switch	41
3.1.7.1 Statistics	41
3.1.7.2 Port Mirror	42
3.1.7.3 Rate Control	44
3.1.7.4 Port Config	45
3.1.7.5 Port Status	46
3.1.7.6 Port VLAN	47
3.2 User Group	47
3.2.1 Group	48
3.2.2 User	48
3.2.3 View	49
3.3 Advanced	50
3.3.1 NAT	50
3.3.1.1 NAT Setup	50
3.3.1.2 One-to-One NAT	51
3.3.1.3 Multi-Nets NAT	52
3.3.1.4 Virtual Server	55
3.3.1.5 Port Triggering	57
3.3.1.6 ALG	59
3.3.2 Traffic Control	59
3.3.2.1 Setup	60
3.3.2.2 Bandwidth Control	61
3.3.3 Session Limit	63
3.3.3.1 Session Limit	63
3.3.3.2 Session List	64
3.3.4 Load Balance	64
3.3.4.1 Configuration	64
3.3.4.2 Policy Routing	65
3.3.4.3 Link Backup	66
3.3.4.4 Protocol	68
3.3.5 Routing	69
3.3.5.1 Static Route	69
3.3.5.2 RIP	71
3.3.5.3 Route Table	73
3.4 Firewall	74
3.4.1 Anti ARP Spoofing	74
3.4.1.1 IP-MAC Binding	74
3.4.1.2 ARP Scanning	76
3.4.1.3 ARP List	77
3.4.2 Attack Defense	77
3.4.3 MAC Filtering	79
3.4.4 Access Control	80
3.4.4.1 URL Filtering	80
3.4.4.2 Web Filtering	82
3.4.4.3 Access Rules	82
3.4.4.4 Service	84
3.4.5 App Control	86
3.4.5.1 Control Rules	86
3.4.5.2 Database	87
3.5 VPN	88
3.5.1 IKE	88
3.5.1.1 IKE Policy	89
3.5.1.2 IKE Proposal	91
3.5.2 IPsec	92
3.5.2.1 IPsec Policy	93
3.5.2.2 IPsec Proposal	96
3.5.2.3 IPsec SA	98
3.5.3 L2TP/PPTP	99
3.5.3.1 L2TP/PPTP Tunnel	99
3.5.3.2 IP Address Pool	102
3.5.3.3 List of L2TP/PPTP Tunnel	103
3.6 Services	103
3.6.1 PPPoE Server	103
3.6.1.1 General	103
3.6.1.2 IP Address Pool	105
3.6.1.3 Account	106
3.6.1.4 Exceptional IP	108
3.6.1.5 List of Account	109
3.6.2 E-Bulletin	109
3.6.3 Dynamic DNS	111
3.6.3.1 DynDNS	112
3.6.3.2 No-IP	113
3.6.3.3 PeanutHull	114
3.6.3.4 Comexe	116
3.6.4 UPnP	117
3.7 Maintenance	118
3.7.1 Admin Setup	118
3.7.1.1 Administrator	118
3.7.1.2 Login Parameter	119
3.7.1.3 Remote Management	120
3.7.2 Management	121
3.7.2.1 Factory Defaults	121
3.7.2.2 Export and Import	121
3.7.2.3 Reboot	122
3.7.2.4 Firmware Upgrade	123
3.7.3 License	123
3.7.4 Statistics	124
3.7.4.1 Interface Traffic Statistics	124
3.7.4.2 IP Traffic Statistics	125
3.7.5 Diagnostics	126
3.7.5.1 Diagnostics	126
3.7.5.2 Online Detection	128
3.7.6 Time	129
3.7.7 Logs	130
Chapter 4 Application	132
4.1 Network Requirements	132
4.2 Network Topology	133
4.3 Configurations	133
4.3.1 Internet Setting	133
4.3.1.1 System Mode	134
4.3.1.2 Internet Connection	134
4.3.1.3 Link Backup	134
4.3.2 VPN Setting	135
4.3.2.1 IPsec VPN	135
4.3.2.2 PPTP VPN Setting	139
4.3.3 Network Management	141
4.3.3.1 User Group	141
4.3.3.2 App Control	142
4.3.3.3 Bandwidth Control	143
4.3.3.4 Session Limit	145
4.3.4 Network Security	145
4.3.4.1 LAN ARP Defense	146
4.3.4.2 WAN ARP Defense	147
4.3.4.3 Attack Defense	148
4.3.4.4 Traffic Monitoring	148
Chapter 5 CLI	151
5.1 Configuration	151
5.2 Interface Mode	154
5.3 Online Help	155
5.4 Command Introduction	157
5.4.1 ip	157
5.4.2 ip-mac	157
5.4.3 sys	158
5.4.4 user	159
5.4.5 history	160
5.4.6 exit	161
Appendix A Hardware Specifications	162
Appendix B FAQ	163