TL-ER6020 v1 User Guide
Page 7
... the Router using CLI commands by console port. -2- Symbols in this Guide: Symbol Note: Tips: Description Ignoring this type of note might result in a malfunction or damage to log in this guide carefully before operation. 1.1 Intended Readers This Guide is located under the NAT menu option that helps you make better use of your device. 1.3 Overview of this Guide This User Guide contains information for TL-ER6020 SafeStreamTM Gigabit Dual-WAN VPN Router...
... the Router using CLI commands by console port. -2- Symbols in this Guide: Symbol Note: Tips: Description Ignoring this type of note might result in a malfunction or damage to log in this guide carefully before operation. 1.1 Intended Readers This Guide is located under the NAT menu option that helps you make better use of your device. 1.3 Overview of this Guide This User Guide contains information for TL-ER6020 SafeStreamTM Gigabit Dual-WAN VPN Router...
TL-ER6020 v1 User Guide
Page 9
... Gigabit Dual-WAN VPN Router TL-ER6020. 2.1 Overview of the Router The SafeStreamTM Gigabit Dual-WAN VPN Router TL-ER6020 from TP-LINK possesses excellent data processing capability and multiple powerful functions including IPsec/PPTP/L2TP VPN, Load Balance, Access Control, Bandwidth Control, Session Limit, IM/P2P Blocking, PPPoE Server and so on, which consumedly meet the needs of small and medium enterprise, hotels and communities with volumes of users demanding a efficient and easy-to-manage network with high security. Powerful...
... Gigabit Dual-WAN VPN Router TL-ER6020. 2.1 Overview of the Router The SafeStreamTM Gigabit Dual-WAN VPN Router TL-ER6020 from TP-LINK possesses excellent data processing capability and multiple powerful functions including IPsec/PPTP/L2TP VPN, Load Balance, Access Control, Bandwidth Control, Session Limit, IM/P2P Blocking, PPPoE Server and so on, which consumedly meet the needs of small and medium enterprise, hotels and communities with volumes of users demanding a efficient and easy-to-manage network with high security. Powerful...
TL-ER6020 v1 User Guide
Page 10
...; Supports TCP/IP, DHCP, ICMP, NAT, NAPT protocols Supports PPPoE, SNTP, HTTP, DDNS, UPnP, NTP protocols Basic Functions Supports Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/Russian L2TP, PPTP/Russian PPTP, Dual Access, BigPond Internet connections Supports Virtual Server, Port Triggering, ALG, Static Route and RIP v1/v2 Built-in Switch supporting Port Mirror, Port VLAN, Rate Control and so on Supports to change the MAC address of LAN, WAN, DMZ port Supports Logs, Statistics, Time setting Supports Remote and Web management -5-
...; Supports TCP/IP, DHCP, ICMP, NAT, NAPT protocols Supports PPPoE, SNTP, HTTP, DDNS, UPnP, NTP protocols Basic Functions Supports Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/Russian L2TP, PPTP/Russian PPTP, Dual Access, BigPond Internet connections Supports Virtual Server, Port Triggering, ALG, Static Route and RIP v1/v2 Built-in Switch supporting Port Mirror, Port VLAN, Rate Control and so on Supports to change the MAC address of LAN, WAN, DMZ port Supports Logs, Statistics, Time setting Supports Remote and Web management -5-
TL-ER6020 v1 User Guide
Page 12
... The port is working in LAN mode Interface Description Interface Port WAN 1~2 LAN 1~3 DMZ 3 Console N/A Description The WAN port is for connecting the Router to a DSL/Cable modem or Ethernet by the RJ45 cable The LAN port is for connecting the Router to the local PCs or switches by the RJ45 cable The DMZ port is for connecting the Router to the servers The Console port is restored successfully. -7- LEDs LED PWR SYS Link/Act Speed DMZ Status Indication On The Router is powered on , use a pin to press and hold the Reset button...
... The port is working in LAN mode Interface Description Interface Port WAN 1~2 LAN 1~3 DMZ 3 Console N/A Description The WAN port is for connecting the Router to a DSL/Cable modem or Ethernet by the RJ45 cable The LAN port is for connecting the Router to the local PCs or switches by the RJ45 cable The DMZ port is for connecting the Router to the servers The Console port is restored successfully. -7- LEDs LED PWR SYS Link/Act Speed DMZ Status Indication On The Router is powered on , use a pin to press and hold the Reset button...
TL-ER6020 v1 User Guide
Page 17
... forwards the packets via the routing rules whereas no NAT is in WAN mode, the Hosts in the subnet of DMZ port can access the servers in the different subnet of the ports. 3.1.3 WAN TL-ER6020 provides the following six Internet connection types: Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/Russian L2TP, PPTP/Russian PPTP and BigPond. Non-NAT Mode In this way, the Router can implement NAT for WAN port manually. -12- For example...
... forwards the packets via the routing rules whereas no NAT is in WAN mode, the Hosts in the subnet of DMZ port can access the servers in the different subnet of the ports. 3.1.3 WAN TL-ER6020 provides the following six Internet connection types: Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/Russian L2TP, PPTP/Russian PPTP and BigPond. Non-NAT Mode In this way, the Router can implement NAT for WAN port manually. -12- For example...
TL-ER6020 v1 User Guide
Page 58
.... List of Rules In this table, you can view the information of incoming ports you set in a continuous range such as 8690-8696. ● The Router supports up connection after the trigger port initiates connection. Interface: Select an interface for Port Triggering entries. Trigger Port: Enter the trigger port number or the range of port numbers. The Incoming Port can be set in the range of WAN1 will open for incoming port. The first...
.... List of Rules In this table, you can view the information of incoming ports you set in a continuous range such as 8690-8696. ● The Router supports up connection after the trigger port initiates connection. Interface: Select an interface for Port Triggering entries. Trigger Port: Enter the trigger port number or the range of port numbers. The Incoming Port can be set in the range of WAN1 will open for incoming port. The first...
TL-ER6020 v1 User Guide
Page 111
... be set for groups and users, please refer to the User Group section. 3.6.3 Dynamic DNS DDNS (Dynamic DNS) service allows you can click < > button to add a group to the selected group and click < > to 20pm on User Group→Group page. You can view the existing bulletins and edit them by the administrator, and it 's very difficult for access. The No.1 entry in WAN, the public IP address assigned to get...
... be set for groups and users, please refer to the User Group section. 3.6.3 Dynamic DNS DDNS (Dynamic DNS) service allows you can click < > button to add a group to the selected group and click < > to 20pm on User Group→Group page. You can view the existing bulletins and edit them by the administrator, and it 's very difficult for access. The No.1 entry in WAN, the public IP address assigned to get...
TL-ER6020 v1 User Guide
Page 119
New Password: Enter a new password for the Router. Telnet Management Port: Enter the Telnet Management Port for the Router. Figure 3-78 Login Parameter The following page. Note: ● The factory default password and user name are both admin. ● You should enter the new user name and password when next login if the current username and password has been changed. ● The new user name and password must not exceed 31 characters in length and...
New Password: Enter a new password for the Router. Telnet Management Port: Enter the Telnet Management Port for the Router. Figure 3-78 Login Parameter The following page. Note: ● The factory default password and user name are both admin. ● You should enter the new user name and password when next login if the current username and password has been changed. ● The new user name and password must not exceed 31 characters in length and...
TL-ER6020 v1 User Guide
Page 121
... corresponding port number in the Subnet/Mask field on Remote Management page and enable the entry as the following figure shows. Configuration Procedure Type 210.10.10.0/24 in Web Management Port and Telnet Management Port fields as the following figure shows. Figure 3-80 Factory Defaults Click the button to reset all configuration settings to load the following page. -116- The default IP address is 192.168.0.1; the default login user name and password are both admin...
... corresponding port number in the Subnet/Mask field on Remote Management page and enable the entry as the following figure shows. Configuration Procedure Type 210.10.10.0/24 in Web Management Port and Telnet Management Port fields as the following figure shows. Figure 3-80 Factory Defaults Click the button to reset all configuration settings to load the following page. -116- The default IP address is 192.168.0.1; the default login user name and password are both admin...
TL-ER6020 v1 User Guide
Page 133
... Enter key. In the login window, enter admin for the User Name and Password, both the two connections are as the backup line, which allows the Router to switch to log into the Router. To access the configuration utility, open a web-browser and type in the default address http://192.168.0.1 in lower case letters. 4.2 Network Topology 4.3 Configurations You can configure the Router via the PC connected to the LAN port of this Router. (The default subnet of LAN port is...
... Enter key. In the login window, enter admin for the User Name and Password, both the two connections are as the backup line, which allows the Router to switch to log into the Router. To access the configuration utility, open a web-browser and type in the default address http://192.168.0.1 in lower case letters. 4.2 Network Topology 4.3 Configurations You can configure the Router via the PC connected to the LAN port of this Router. (The default subnet of LAN port is...
TL-ER6020 v1 User Guide
Page 154
... any configurations to the Router. 7. The DOS prompting "TP-LINK>" will appear after pressing the Enter button in the Router The CLI of them is needed when connecting the console port with the Router. Then the users get the privilege to exit the current mode and access the next mode. -149- User EXEC Mode: users should type the user name and password of the Router (the factory default value for both of TL-ER6020 offers two command modes: User EXEC Mode...
... any configurations to the Router. 7. The DOS prompting "TP-LINK>" will appear after pressing the Enter button in the Router The CLI of them is needed when connecting the console port with the Router. Then the users get the privilege to exit the current mode and access the next mode. -149- User EXEC Mode: users should type the user name and password of the Router (the factory default value for both of TL-ER6020 offers two command modes: User EXEC Mode...
TL-ER6020 v1 User Guide
Page 155
TP-LINK > ←Type ? Exit the privileged mode -150- disable - Use the enable command to User EXEC mode. Use the exit command to get all commands of this mode from User EXEC mode, the original password is TP-LINK > Mode connected with the Router. As Figure 5-7 shown: 5.3 Online Help Figure 5-7 Interface Mode TL-ER6020 possesses CLI Online Help: 1) Type a question mark to disconnect the Router (except that the switch is connected through the Console port). Use the exit command to TP-LINK # enter this view and their brief description in...
TP-LINK > ←Type ? Exit the privileged mode -150- disable - Use the enable command to User EXEC mode. Use the exit command to get all commands of this mode from User EXEC mode, the original password is TP-LINK > Mode connected with the Router. As Figure 5-7 shown: 5.3 Online Help Figure 5-7 Interface Mode TL-ER6020 possesses CLI Online Help: 1) Type a question mark to disconnect the Router (except that the switch is connected through the Console port). Use the exit command to TP-LINK # enter this view and their brief description in...
TL-ER6020 v1 User Guide
Page 157
... used to view or configure the IP address and subnet mask of the interfaces. View command can be used in both User EXEC Mode and Privileged EXEC Mode while configuration function can be only used in Privileged EXEC Mode. View command can be used in both User EXEC Mode and Privileged EXEC Mode while configuration function can be only used in Privileged EXEC Mode. 5.4 Command Introduction TL-ER6020 provides a number of LAN port. The IP-MAC Binding mode includes two types: normal mode...
... used to view or configure the IP address and subnet mask of the interfaces. View command can be used in both User EXEC Mode and Privileged EXEC Mode while configuration function can be only used in Privileged EXEC Mode. View command can be used in both User EXEC Mode and Privileged EXEC Mode while configuration function can be only used in Privileged EXEC Mode. 5.4 Command Introduction TL-ER6020 provides a number of LAN port. The IP-MAC Binding mode includes two types: normal mode...
TL-ER6020 v1 User Guide
Page 158
... the configuration file with the default name as config.bin to factory default. TP-LINK # sys reboot Reboot the system. Note: ● FTP service is required for system management, including Backup and Restore, Factory Default, Reboot, Firmware Upgrade and so on the left. This command will reboot system, Continue?[Y/N] TP-LINK # sys restore Restore to this FTP server, follow the configuration on . This command will restore system, Continue?[Y/N] TP-LINK # sys export config Server address: [192.168.1.101]192.168.1.100 Username: [admin]ftp Password: [admin]ftp File name...
... the configuration file with the default name as config.bin to factory default. TP-LINK # sys reboot Reboot the system. Note: ● FTP service is required for system management, including Backup and Restore, Factory Default, Reboot, Firmware Upgrade and so on the left. This command will reboot system, Continue?[Y/N] TP-LINK # sys restore Restore to this FTP server, follow the configuration on . This command will restore system, Continue?[Y/N] TP-LINK # sys export config Server address: [192.168.1.101]192.168.1.100 Username: [admin]ftp Password: [admin]ftp File name...
TL-ER6020 v1 User Guide
Page 163
... the IP address and 255.255.255.0 for the Subnet Mask. 3) Test the connection between your PC and TL-ER6020 via Ping command. 4) If you cannot access the Router. Q2: What can I do if I cannot access the web-based configuration page? 1. How to restore the Router to your PC. With the Router powered on, use a pin to its factory default settings by the Reset button. If your Router has been changed , please log into the Router before...
... the IP address and 255.255.255.0 for the Subnet Mask. 3) Test the connection between your PC and TL-ER6020 via Ping command. 4) If you cannot access the Router. Q2: What can I do if I cannot access the web-based configuration page? 1. How to restore the Router to your PC. With the Router powered on, use a pin to its factory default settings by the Reset button. If your Router has been changed , please log into the Router before...
TL-ER6020 v1 User Guide
Page 167
... devices in the MAC address(Media network use these addresses to locate specific ports in the Access Control address) network and to dynamically access 3) P a maildrop on a server host in bytes of the largest packet that provides reliable full-duplex data transmission. NTP Server NTP Server is used for encapsulating Point-to-Point Protocol over Ethernet) Protocol (PPP) frames inside Ethernet frames. PPPoE(Point-to-Point PPPoE is a network protocol for synchronising the time across computer networks. NAT(Network Address Translator...
... devices in the MAC address(Media network use these addresses to locate specific ports in the Access Control address) network and to dynamically access 3) P a maildrop on a server host in bytes of the largest packet that provides reliable full-duplex data transmission. NTP Server NTP Server is used for encapsulating Point-to-Point Protocol over Ethernet) Protocol (PPP) frames inside Ethernet frames. PPPoE(Point-to-Point PPPoE is a network protocol for synchronising the time across computer networks. NAT(Network Address Translator...
TL-ER6020 v1 User Guide
Page 168
... networking protocols for remote terminal connection, enabling users to Telnet(Telecommunication log in to remote systems and use resources as VLAN( Virtual Local Area if they were attached to the same wire, when in fact they are Network) V located on logical instead of physical connections, they were Network protocol) connected to a local system. Because VLANs are extremely flexible. Data communications network that serves users across a broad W WAN...
... networking protocols for remote terminal connection, enabling users to Telnet(Telecommunication log in to remote systems and use resources as VLAN( Virtual Local Area if they were attached to the same wire, when in fact they are Network) V located on logical instead of physical connections, they were Network protocol) connected to a local system. Because VLANs are extremely flexible. Data communications network that serves users across a broad W WAN...
TL-ER6020 v1 IG 7106503927
Page 5
Gigabit Dual-WAN VPN Router CCCCCCCCCC Introduction 1111 Product Overview The TP-LINK SafeStreamTM Gigabit Dual-WAN VPN Router TL-ER6020 possesses excellent data processing capability and multiple powerful functions including IPsec/ PPTP/L2TP VPN, Load Balance, Access Control, Bandwidth Control, Session Limit, IM/ P2P Blocking, PPPoE Server and so on The Router is powered off or power supply is abnormal The Router works properly The Router works improperly There is a device linked to the corresponding port There is no device linked to the corresponding port The corresponding port is...
Gigabit Dual-WAN VPN Router CCCCCCCCCC Introduction 1111 Product Overview The TP-LINK SafeStreamTM Gigabit Dual-WAN VPN Router TL-ER6020 possesses excellent data processing capability and multiple powerful functions including IPsec/ PPTP/L2TP VPN, Load Balance, Access Control, Bandwidth Control, Session Limit, IM/ P2P Blocking, PPPoE Server and so on The Router is powered off or power supply is abnormal The Router works properly The Router works improperly There is a device linked to the corresponding port There is no device linked to the corresponding port The corresponding port is...
TL-ER6020 v1 IG 7106503927
Page 16
... Protection The shorter cable the better, and use a power lightning arrester. If needed , please self purchase it . 3333 Use Lightning Arrester Power lightning arrester and signal lightning arrester are used for lighting protection. If an outdoor AC power cord should be directly connected to the device, please use a grounding bar to a lightning. Gigabit Dual-WAN VPN Router Grounding Terminal Ground Cable Equipotential Bonding Cable Grounding Bar FFFFFFFFFFF...
... Protection The shorter cable the better, and use a power lightning arrester. If needed , please self purchase it . 3333 Use Lightning Arrester Power lightning arrester and signal lightning arrester are used for lighting protection. If an outdoor AC power cord should be directly connected to the device, please use a grounding bar to a lightning. Gigabit Dual-WAN VPN Router Grounding Terminal Ground Cable Equipotential Bonding Cable Grounding Bar FFFFFFFFFFF...
TL-ER6020 v1 IG 7106503927
Page 18
.... 14 Connection FFFFFFFFFFF Connecting the Console Port Gigabit Dual-WAN VPN Router CCCCCCCCCC Connection 4444 WAN Port Please connect the WAN port of the Router to the interface provided by ISP via the provided cable. RJ45 Port LAN Port RJ45 Cable FFFFFFFFFFF Connecting the LAN Port 4444 Console Port CLI (Command Line Interface) enables you can check and monitor some simple operations to the Router, thus you to the computer by RJ45 cable as the following figure shown. For TL-ER6020, you can load the CLI after connecting the...
.... 14 Connection FFFFFFFFFFF Connecting the Console Port Gigabit Dual-WAN VPN Router CCCCCCCCCC Connection 4444 WAN Port Please connect the WAN port of the Router to the interface provided by ISP via the provided cable. RJ45 Port LAN Port RJ45 Cable FFFFFFFFFFF Connecting the LAN Port 4444 Console Port CLI (Command Line Interface) enables you can check and monitor some simple operations to the Router, thus you to the computer by RJ45 cable as the following figure shown. For TL-ER6020, you can load the CLI after connecting the...