TP-LINK TL-ER5120 Bedienungsanleitung

TL-ER5120 Gigabit Load Balance Broadband Router Rev: 1.0.0 1910010517

-5- + Featured Link Backup to switch all the new sessions from dropped line automatically to another for keeping an always on-line network. z Easy-t

-95- DDNS Status: Displays the current status of DDNS service z Offline: DDNS service is disabled. z Connecting: client is connecting to the serve

-96- DDNS Status: Displays the current status of DDNS service z Offline: DDNS service is disabled. z Connecting: client is connecting to the serve

-97- Domain Name 1: Enter the Domain Name that you registered with your DDNS service provider. Domain Name 2: Optional. Enter the Domain Name that

-98- Figure 3-66 UPnP The following items are displayed on this screen: ¾ General UPnP Function: Enable or disable the UPnP function globally. ¾

-99- Figure 3-67 Password The following items are displayed on this screen: ¾ Administrator Current User Name: Enter the current user name of the

-100- ¾ General Web Management Port: Enter the Web Management Port for the Router. Telnet Management Port: Enter the Telnet Management Port for th

-101- 3.6.1.3 Remote Management On this page you can configure the Remote Management function. This feature allows managing your Router from a remot

-102- 3.6.2.2 Export and Import Choose the menu Maintenance→Management→Export and Import to load the following page. Figure 3-71 Export and Import

-103- Figure 3-72 Reboot Click the <Reboot> button to reboot the Router. The configuration will not be lost after rebooting. The Internet co

-104- Figure 3-74 Interface Traffic Statistics The following items are displayed on this screen: ¾ Interface Traffic Statistics Interface: Display

-6- ¾ Supports Bandwidth Control ¾ Supports Session Limit Security ¾ Built-in firewall supporting URL/MAC Filtering ¾ Supports Access Control ¾ Su

-105- Figure 3-75 IP Traffic Statistics The following items are displayed on this screen: ¾ General Enable IP Traffic Statistics: Allows you to ena

-106- Figure 3-76 Diagnostics The following items are displayed on this screen: ¾ Ping Destination IP/Domain: Enter destination IP address or Doma

-107- ¾ Tracert Destination IP/Domain: Enter destination IP address or Domain name here. Then select a port for testing, if Auto is selected, the R

-108- DNS Lookup: Enter the IP address of DNS server in Manual mode. 0.0.0.0 means DNS Lookup is disabled. ¾ List of WAN status Port: Displays the

-109- Get GMT: When this option is selected, you can configure the time zone and the IP Address for the NTP Server. The Router will get GMT automati

-110- Send System Logs: Select Send System Logs and specify the server IP, then the new added logs will be sent to the specified server. The Logs of

-111- Chapter 4 Application 4.1 Network Requirements The company has established the server farms in the headquarters to provide the Web, Mail and

-112- enables you to set the connection of WAN1 as the main line and the connection of WAN2 as the backup line, which allows the Router to switch to

-113- Figure 4-3 WAN – Static IP 4.2.1.4 Link Backup Set the connection of WAN1 as the primary link, the connection of WAN 2 as the secondary lin

-114- 4.2.2 Network Management To manage the enterprise network effectively and forbid the Hosts within the IP range of 192.168.0.30-192.168.0.50 to

-7- linked device is running at 10Mbps On The port is working in WAN mode WAN Off The port is working in LAN mode On The port is working in DMZ mo

-115- Figure 4-6 User Config - Batch z View Choose the menu User Group→View to load the configuration page. Add all the Users you just created int

-116- Figure 4-7 App Rules 4.2.2.3 Bandwidth Control To enable Bandwidth Control, you should configure the total bandwidth of interfaces and the

-117- 2) Interface Bandwidth Choose the menu Network→WAN→WAN1 to load the configuration page. Configure the Upstream Bandwidth and Downstream Bandwid

-118- Max. Sessions: 250 Status: Activate Click the <Add> button to apply. Figure 4-11 Session Limit 4.2.3 Network Security You can enable t

-119- Figure 4-13 Scanning Result Choose the menu Firewall→Anti ARP Spoofing→IP-MAC Binding to load the configuration page. Select the ARP entries n

-120- Figure 4-15 IP-MAC Binding 4.2.3.2 WAN ARP Defense To prevent the WAN ARP attack, you can bind the default gateway and IP address of WAN port

-121- Figure 4-16 Attack Defense 4.2.3.4 Traffic Monitoring 1) Port Mirror Choose the menu Network→Switch→Port Mirror to load the configuration pag

-122- Figure 4-17 Port Mirror 2) Statistics Choose the menu Maintenance→Statistics to load the page. Load the Interface Traffic Statistics page to v

-123- Figure 4-19 IP Traffic Statistics After all the above steps, the enterprise network will be operated based on planning.

-124- Chapter 5 CLI TL-ER5120 provides a Console port for CLI (Command Line Interface) configuration, which enables you to configure the Router by a

-8- Note: Please use only the power cord provided with this Router.

-125- Figure 5-2 Connection Description 4. Select the port (The default port is COM1) to connect in Figure 5-3, and click OK. Figure 5-3 Select th

-126- Figure 5-4 Port Settings 6. Choose File → Properties → Settings on the Hyper Terminal window as Figure 5-5 shows, then choose VT100 or Auto de

-127- 7. The DOS prompting “TP-LINK>” will appear after pressing the Enter button in the Hyper Terminal window as Figure 5-6 shows. Figure 5-6 L

-128- port). Use the enable command to access Privileged EXEC mode. Privileged EXEC Mode Use the enable command to enter this mode from User EXEC mo

-129- ip - Display or Set the IP configuration ip-mac - Display or Set the IP mac bind configuration sys - System manager user - User con

-130- 5.4.1 ip The ip command is used to view or configure the IP address and subnet mask of the interfaces. View command can be used in both User E

-131- TP-LINK # sys reboot This command will reboot system, Continue?[Y/N] Reboot the system. Y means YES, N means NO. TP-LINK # sys restore

-132- TP-LINK # sys import config Server address: [192.168.1.101] Username: [admin] Password: [admin] File name: [config.bin] Import the conf

-133- TP-LINK > user set password Enter old password: Enter new password: Confirm new password: Modify the password of the Guest. TP-LIN

-134- TP-LINK > history 1. history 2. sys show 3. history View the history command. TP-LINK > history clear 1. history 2. sys show 3

-9- Chapter 3 Configuration 3.1 Network 3.1.1 Status The Status page shows the system information, the port connection status and other informatio

-135- Appendix A Hardware Specifications Standards IEEE 802.3、IEEE 802.3u、IEEE 802.3x、TCP/ IP、DHCP、ICMP、NAT、PPPoE、SNTP、HTTP、DNS One 10/100/1000M Aut

-136- Appendix B FAQ Q1. What can I do if I cannot access the web-based configuration page? 1. For the first login, please try the following steps:

-137- Q3: What can I do if the Router with the remote management function enabled cannot be accessed by the remote computer? 1. Make sure that t

-138- Appendix C Glossary Glossary Description DSL (Digital Subscriber Line) A technology that allows data to be sent or received over existing t

-139- Glossary Description H.323 H.323 allows dissimilar communication devices to communicate with each other by using a standardized communicatio

-140- Glossary Description structures. MAC addresses are 6 bytes long and are controlled by the IEEE. MTU（Maximum Transmission Unit） The size in b

-141- Glossary Description Protocol） processing and retransmission be handled by other protocols. UPnP（Universal Plug and Play） UPnP is a set of n

-10- Figure 3-1 Status 3.1.2 System Mode The TL-ER5120 Router can work in three modes: NAT, Non-NAT and Classic. If your Router is hosting your loc

-11- Figure 3-2 Network Topology - NAT Mode If your Router is connecting the two networks of different areas in a large network environment with a n

-12- Figure 3-4 Network Topology – Classic Mode Choose the menu Network→System Mode to load the following page. Figure 3-5 System Mode You can sele

-13- source IP address can be transported by NAT, whereas the packet with 20.31.76.80 as its source IP address will be dropped. z Non-NAT Mo

-14- port sketch. Note: 1) By default, TL-ER5120 is set to work in the mode of dual WAN ports. 2) Any change to the number of WAN ports may lead

-I- COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Oth

-15- Figure 3-7 WAN – Static IP The following items are displayed on this screen: ¾ Static IP Connection Type: Select Static IP if your ISP has a

-16- Secondary DNS: Optional. If a Secondary DNS Server address is available, enter it. Upstream Bandwidth: Specify the bandwidth for transmitting pa

-17- Connection Type: Select Dynamic IP if your ISP assigns the IP address automatically. Click <Obtain> to get the IP address from your ISP’s

-18- your ISP. z “Disabled” indicates that the Dynamic IP connection type is not applied. z “Connecting” indicates that the Router is obtaining the

-19- Figure 3-9 WAN - PPPoE The following items are displayed on this screen: ¾ PPPoE Settings Connection Type: Select PPPoE if your ISP provides

-20- Account Name: Enter the Account Name provided by your ISP. If you are not clear, please consult your ISP. Password: Enter the Password provided

-21- connection. Dynamic IP and Static IP connection types are provided. Connection Type: Select the secondary connection type. Options include Disab

-22- this problem remains. IP Address: Displays the IP address assigned by your ISP. Gateway Address: Displays the Gateway Address assigned by your I

-23- Figure 3-10 WAN - L2TP The following items are displayed on this screen: ¾ L2TP Settings Connection Type: Select L2TP if your ISP provides a

-24- not clear, please consult your ISP. Password: Enter the Password provided by your ISP. Server IP: Enter the Server IP provided by your ISP. MTU:

-II- CONTENTS Package Contents...1 Cha

-25- Primary DNS/Secondary DNS: If Static IP is selected, configure the DNS. If Dynamic IP is selected, the obtained DNS is displayed. Upstream Ban

-26- Figure 3-11 WAN - PPTP The following items are displayed on this screen: ¾ PPTP Settings Connection Type: Select PPTP if your ISP provides a

-27- Account Name: Enter the Account Name provided by your ISP. If you are not clear, please consult your ISP. Password: Enter the Password provided

-28- displayed. Primary DNS/Secondary DNS: If Static IP is selected, configure the DNS. If Dynamic IP is selected, the obtained DNS is displayed. U

-29- The following items are displayed on this screen: ¾ BigPond Settings Connection Type: Select BigPond if your ISP provides a BigPond connecti

-30- Auth Domain: Enter the domain name of authentication server. It's only required when the address of Auth Server is a server name. Auth Mode

-31- IP Address: Displays the IP address assigned by your ISP. Subnet Mask: Displays the Subnet Mask assigned by your ISP. Default Gateway: Displays

-32- 3.1.4.2 DHCP The Router with its DHCP (Dynamic Host Configuration Protocol) server enabled can automatically assign an IP address to the compu

-33- Default Gateway: Optional. Enter the Gateway address to be assigned. It is recommended to enter the IP address of the LAN port of the Router. De

-34- Figure 3-15 DHCP Reservation The following items are displayed on this screen: ¾ DHCP Reservation MAC Address: Enter the MAC address of the

-III- 3.3.3 Session Limit ...59 3.3.4 Load

-35- 3.1.5 DMZ DMZ (Demilitarized Zone) is a network which has fewer default firewall restrictions than the LAN does. TL-ER5120 provides a DMZ port

-36- Choose the menu Network→DMZ→DMZ to load the following page. Figure 3-18 DMZ The following items are displayed on this screen: ¾ DMZ Status:

-37- Set the MAC Address for LAN port: In a complex network topology with all the ARP bound devices, if you want to change to use TL-ER5120 instead o

-38- to apply. Note: To avoid a conflict of MAC address on the LAN, it’s not allowed to set the MAC address of the Router’s LAN port to the MAC add

-39- Unicast: Displays the number of normal unicast packets received or transmitted on the port. Broadcast: Displays the number of normal broadcast p

-40- Figure 3-21 Port Mirror The following items are displayed on this screen: ¾ General Enable Port Mirror:Check the box to enable the Port Mirror

-41- The entry in Figure 3-21 indicates: The outgoing packets sent by port 1, port 2, port 3 and port 5 (mirrored ports) will be copied to port 4 (mi

-42- Figure 3-22 Rate Control The following items are displayed on this screen: ¾ Rate Control Port: Displays the port number. Ingress Limit: S

-43- Figure 3-23 Port Config The following items are displayed on this screen: ¾ Port Config Status: Specify whether to enable the port. The packet

-44- 3.1.7.6 Port VLAN A VLAN (Virtual Local Area Network) is a network topology configured according to a logical scheme rather than the physical l

-IV- 5.1 Configuration...124 5.2

-45- 3.2.1 Group On this page you can define the group for management. Choose the menu User Group→Group to load the following page. Figure 3-26 G

-46- ¾ User Config User Name: Specify a unique name for the user. IP Address: Enter the IP Address of the user. It cannot be the network address o

-47- Group Structure: Click this button to view the tree structure of this group. All the members of this group will be displayed, including Users a

-48- NAT-DMZ: Enable or disable NAT-DMZ. NAT DMZ is a special service of NAT application, which can be considered as a default forwarding rule. When

-49- The first entry in Figure 3-29 indicates: The IP address of host1 in local network is 1.1.1.1 and the WAN IP address after NAT mapping is specif

-50- The first entry in Figure 3-30 indicates that: This is a Multi-Nets NAT entry named tplink1. The subnet under the LAN port of the Router is 192.

-51- Configuration procedure 1. Establish the Multi-Nets NAT entries with Subnet/Mask of VLAN2 and VLAN3. The configured entries are as follows: 2

-52- 3.3.1.4 Virtual Server Virtual server can be used for setting up public services in your private network, such as DNS, Email and FTP. Virtual s

-53- Status: Activate or inactivate the entry. Note: ● The External port and Internal Port should be set in the range of 1-65535. ● The external

-54- ¾ Port Triggering Name: Enter a name for Port Triggering entries. Up to 28 characters can be entered. Trigger Port: Enter the trigger port nu

-1- Package Contents The following items should be found in your box: ¾ One TL-ER5120 Router ¾ One power cord ¾ One console cable ¾ Two mounting

-55- Choose the menu Advanced→NAT→ALG to load the following page. Figure 3-33 ALG The following items are displayed on this screen: ¾ ALG FTP ALG:

-56- Figure 3-34 Configuration The following items are displayed on this screen: ¾ General Disable Bandwidth Control: Select this option to disable

-57- Interface: Displays the current enabled WAN port(s). The Total bandwidth is equal to the sum of bandwidth of the enabled WAN ports. Upstream Ban

-58- ¾ Bandwidth Control Rule Direction: Select the data stream direction for the entry. The direction of arrowhead indicates the data stream direct

-59- Note: ● The premise for single rule taking effect is that the bandwidth of the interface for this rule is sufficient and not used up. ● It i

-60- Enable Session Limit: Check here to enable Session Limit, otherwise all the Session Limit entries will be disabled. ¾ Session Limit Group: Sele

-61- Figure 3-38 Configuration With the box before Enable Application Optimized Routing checked, the Router will consider the source IP address and

-62- The following items are displayed on this screen: ¾ General Protocol: Select the protocol for the entry in the drop-down list. If the protocol

-63- On this page, you can configure the Link Backup function based on actual need to reduce the traffic burden of WAN port and improve the network e

-64- Timing: Link Backup will be enabled if the specified effective time is reached. All the traffic on the primary WAN will switch to the backup WAN

-2- Chapter 1 About this Guide This User Guide contains information for setup and management of TL-ER5120 Router. Please read this guide carefully b

-65- Figure 3-41 Protocol The following items are displayed on this screen: ¾ Protocol Name: Enter a name to indicate a protocol. The name will di

-66- Choose the menu Advanced→Routing→Static Route to load the following page. Figure 3-42 Static Route The following items are displayed on this sc

-67- The first entry in Figure 3-42 indicates: If there are packets being sent to a device with IP address of 172.31.70.28 and subnet mask of 255.255

-68- The distance of RIP refers to the hop counts that a data packet passes through before reaching its destination, the value range of which is 1–15

-69- Authentication: network situation, and the password should not be more than 15 characters. All Interfaces: Here you can operate all the interfac

-70- Flags: The Flags of route entry. The Flags describe certain characteristics of the route. Logical Interface: The logical interface of route entr

-71- Figure 3-45 IP-MAC Binding The following items are displayed on this screen: ¾ General It is recommended to check all the options. You should

-72- ¾ List of Rules You can view the information of the entries and edit them by the Action buttons. The first entry in Figure 3-45 indicates: The

-73- Indicates that the IP and MAC address of this entry is already bound. To bind the entries in the list, check these entries and click the <Im

-74- Figure 3-48 Attack Defense The following items are displayed on this screen: ¾ General Flood Defense: Flood attack is a kind of commonly us

-3- Appendix A Hardware Specifications Lists the hardware specifications of this Router. Appendix B FAQ Provides the possible solutions to the prob

-75- not sure. Packet Anomaly Defense: Packet Anomaly refers to the abnormal packets. It is recommended to select all the Packet Anomaly Defense opti

-76- Description: Give a description for the entry. ¾ List of Rules You can view the information of the entries and edit them by the Action button

-77- ¾ URL Filtering Rule Object: Select the range in which the URL Filtering takes effect: z ANY: URL Filtering will take effect to all the user

-78- 3.4.4.2 Web Filtering On this page, you can filter the desired web components. Choose the menu Firewall→Access Control→Web Filtering to load

-79- Figure 3-52 Access Rule The following items are displayed on this screen: ¾ Access Rules Policy: Select a policy for the entry: y Block: W

-80- DMZ refers to all the WAN, LAN or DMZ interfaces. Source: Select the Source IP Range for the entries, including the following three ways: y IP/

-81- ¾ List of Rules You can view the information of the entries and edit them by the Action buttons. The smaller the value is, the higher the prior

-82- The following items are displayed on this screen: ¾ Service Name: Enter a name for the service. The name should not be more than 28 characters

-83- Figure 3-54 Application Rules The following items are displayed on this screen: ¾ General Check the box before Enable Application Control to m

-84- Effective Time: Specify the time for the entry to take effect. Description: Give a description for the entry. Status: Activate or inactivate the

-4- Chapter 2 Introduction Thanks for choosing the Gigabit Load Balance Broadband Router TL-ER5120. 2.1 Overview of the Router The Gigabit Load Bal

-85- 3.5.1.1 General On this page, you can configure PPPoE function globally. Choose the menu Services→PPPoE Server→General to load the following

-86- Idle Timeout: Enter the maximum idle time. The session will be terminated after it has been inactive for this specified period. It can be 0-1008

-87- Figure 3-57 IP Address Pool The following items are displayed on this screen: ¾ IP Address Pool Pool Name: Specify a unique name to the IP Add

-88- Figure 3-58 Account The following items are displayed on this screen: ¾ Account Account Name: Enter the account name. This name should not be

-89- Status: Activate or inactivate the entry. MAC Binding: Select a MAC Binding type from the pull-down list. Options include: z Disable: Select th

-90- IP Address Range: Specify the start and the end IP address to make an exceptional IP address range. This range should be in the same IP range wi

-91- Figure 3-61 E-Bulletin The following items are displayed on this screen: ¾ General Enable E-Bulletin: Specify whether to enable electronic bul

-92- Content: Enter the content of the bulletin. Object: Select the object of this bulletin. Options include: z ANY: The bulletin will be released t

-93- DNS database. Therefore, the users can use the same domain name to access the DDNS client even if the IP address of the DDNS client has changed.

-94- DDNS Status: Displays the current status of DDNS service z Offline: DDNS service is disabled. z Connecting: client is connecting to the serve