Home » TP-Link Manuals » Bridges & Routers » TP-Link TL-ER6120 » Manual Viewer

TP-Link TL-ER6120 TL-ER6120 User Guide - Page 96

Local Subnet, Remote Subnet, Remote Gateway, Policy Mode, IKE Policy, IPsec Proposal

Add to My Manuals
Save this manual to your list of manuals

Page 96 highlights

host. Local Subnet: Specify IP address range on your local LAN to identify which PCs on your LAN are covered by this policy. It's formed by IP address and subnet mask. Remote Subnet: Specify IP address range on your remote network to identify which PCs on the remote network are covered by this policy. It's formed by IP address and subnet mask. WAN: Specify the local WAN port for this Policy. The "Remote Gateway" of the remote peer should be set to the IP address of this WAN port. Remote Gateway: Enter the Remote Gateway. It can be IP address or Domain name. Policy Mode: Select the negotiation mode for the policy. z IKE: The parameters for the VPN tunnel are generated automatically via IKE negotiations. z Manual: All settings (including the keys) for the VPN tunnel are manually input and no key negotiation is needed. z IKE Mode IKE Policy: It is available when IKE is selected as the negotiation mode. Specify the IKE policy. If there is no policy selection, add new policy on VPN→IKE→IKE Policy page. IPsec Proposal: Select IPsec Proposal on IKE mode. Up to four IPsec Proposals can be selected on IKE mode. PFS: Select the PFS (Perfect Forward Security) for IKE mode to enhance security. This setting should match the remote peer. With PFS feature, IKE negotiates to create a new key in Phase2. As it is independent of the key created in Phase1, this key can be secure even when the key in -91-

Section	Page
Package Contents	6
Chapter 1 About this Guide	7
1.1 Intended Readers	7
1.2 Conventions	7
1.3 Overview of this Guide	7
Chapter 2 Introduction	9
2.1 Overview of the Router	9
2.2 Features	10
2.3 Appearance	11
2.3.1 Front Panel	11
2.3.2 Rear Panel	13
Chapter 3 Configuration	14
3.1 Network	14
3.1.1 Status	14
3.1.2 System Mode	15
3.1.3 WAN	18
3.1.3.1 WAN Mode	18
3.1.3.2 WAN1	19
3.1.4 LAN	36
3.1.4.1 LAN	36
3.1.4.2 DHCP	37
3.1.4.3 DHCP Client	38
3.1.4.4 DHCP Reservation	38
3.1.5 DMZ	40
3.1.5.1 DMZ	40
3.1.6 MAC Address	41
3.1.7 Switch	43
3.1.7.1 Statistics	43
3.1.7.2 Port Mirror	44
3.1.7.3 Rate Control	46
3.1.7.4 Port Config	47
3.1.7.5 Port Status	48
3.1.7.6 Port VLAN	49
3.2 User Group	49
3.2.1 Group	50
3.2.2 User	50
3.2.3 View	51
3.3 Advanced	52
3.3.1 NAT	52
3.3.1.1 NAT Setup	52
3.3.1.2 One-to-One NAT	53
3.3.1.3 Multi-Nets NAT	54
3.3.1.4 Virtual Server	57
3.3.1.5 Port Triggering	58
3.3.1.6 ALG	59
3.3.2 Traffic Control	60
3.3.2.1 Setup	60
3.3.2.2 Bandwidth Control	62
3.3.3 Session Limit	64
3.3.3.1 Session Limit	64
3.3.3.2 Session List	65
3.3.4 Load Balance	65
3.3.4.1 Configuration	65
3.3.4.2 Policy Routing	66
3.3.4.3 Link Backup	67
3.3.4.4 Protocol	69
3.3.5 Routing	70
3.3.5.1 Static Route	70
3.3.5.2 RIP	73
3.3.5.3 Route Table	74
3.4 Firewall	75
3.4.1 Anti ARP Spoofing	75
3.4.1.1 IP-MAC Binding	75
3.4.1.2 ARP Scanning	77
3.4.1.3 ARP List	78
3.4.2 Attack Defense	78
3.4.3 MAC Filtering	80
3.4.4 Access Control	81
3.4.4.1 URL Filtering	81
3.4.4.2 Web Filtering	83
3.4.4.3 Access Rules	83
3.4.4.4 Service	86
3.4.5 App Control	87
3.4.5.1 Control Rules	87
3.4.5.2 Database	89
3.5 VPN	89
3.5.1 IKE	90
3.5.1.1 IKE Policy	90
3.5.1.2 IKE Proposal	92
3.5.2 IPsec	94
3.5.2.1 IPsec Policy	94
3.5.2.2 IPsec Proposal	98
3.5.2.3 IPsec SA	100
3.5.3 L2TP/PPTP	101
3.5.3.1 L2TP/PPTP Tunnel	101
3.5.3.2 IP Address Pool	104
3.5.3.3 List of L2TP/PPTP Tunnel	105
3.6 Services	105
3.6.1 PPPoE Server	105
3.6.1.1 General	106
3.6.1.2 IP Address Pool	107
3.6.1.3 Account	108
3.6.1.4 Exceptional IP	110
3.6.1.5 List of Account	111
3.6.2 E-Bulletin	111
3.6.3 Dynamic DNS	113
3.6.3.1 DynDNS	114
3.6.3.2 No-IP	115
3.6.3.3 PeanutHull	116
3.6.3.4 Comexe	117
3.6.4 UPnP	118
3.7 Maintenance	119
3.7.1 Admin Setup	119
3.7.1.1 Administrator	119
3.7.1.2 Login Parameter	120
3.7.1.3 Remote Management	122
3.7.2 Management	122
3.7.2.1 Factory Defaults	122
3.7.2.2 Export and Import	123
3.7.2.3 Reboot	123
3.7.2.4 Firmware Upgrade	124
3.7.3 License	124
3.7.4 Statistics	125
3.7.4.1 Interface Traffic Statistics	125
3.7.4.2 IP Traffic Statistics	126
3.7.5 Diagnostics	127
3.7.5.1 Diagnostics	127
3.7.5.2 Online Detection	129
3.7.6 Time	130
3.7.7 Logs	131
Chapter 4 Application	133
4.1 Network Requirements	133
4.2 Network Topology	134
4.3 Configurations	134
4.3.1 Internet Setting	134
4.3.1.1 System Mode	135
4.3.1.2 WAN Mode	135
4.3.1.3 Internet Connection	135
4.3.1.4 Link Backup	136
4.3.2 VPN Setting	137
4.3.2.1 IPsec VPN	137
4.3.2.2 PPTP VPN Setting	141
4.3.3 Network Management	142
4.3.3.1 User Group	142
4.3.3.2 App Control	144
4.3.3.3 Bandwidth Control	144
4.3.3.4 Session Limit	146
4.3.4 Network Security	146
4.3.4.1 LAN ARP Defense	147
4.3.4.2 WAN ARP Defense	148
4.3.4.3 Attack Defense	149
4.3.4.4 Traffic Monitoring	149
Chapter 5 CLI	152
5.1 Configuration	152
5.2 Interface Mode	155
5.3 Online Help	156
5.4 Command Introduction	157
5.4.1 ip	158
5.4.2 ip-mac	158
5.4.3 sys	158
5.4.4 user	160
5.4.5 history	161