TL-ER604W V1 Datasheet
Page 2
...technical support Details:http://www.tplink.com/en/ Support/ German/Austrian/Swiss users are not included www.tp-link.com Gigabit Dual-WAN VPN Router TL-ER604W TP-LINK's TL-ER604W SafeStream Wireless N Gigabit Broadband VPN Router supports wireless N and gigabit wired speeds on speedy, reliable ..., MD5/SHA1 authentication, Manual/IKE key management, and Main/Aggressive negotiation modes. Guest Network o ers secure separate wireless networks for your customers and business partners for Internet access, without providing access to 8 SSIDs, TL-ER604W can provide several distinct wireless...
...technical support Details:http://www.tplink.com/en/ Support/ German/Austrian/Swiss users are not included www.tp-link.com Gigabit Dual-WAN VPN Router TL-ER604W TP-LINK's TL-ER604W SafeStream Wireless N Gigabit Broadband VPN Router supports wireless N and gigabit wired speeds on speedy, reliable ..., MD5/SHA1 authentication, Manual/IKE key management, and Main/Aggressive negotiation modes. Guest Network o ers secure separate wireless networks for your customers and business partners for Internet access, without providing access to 8 SSIDs, TL-ER604W can provide several distinct wireless...
TL-ER604W V1 Datasheet
Page 3
TL-ER604W Specifications Hardware Features Standards and Protocols: IEEE 802.11b/g/n, 802.3, ... Bandwidth, Time-scheduled Policy, IP-based Session Limit Load Balance: Intelligent Load Balance, Policy Routing, Protocol Binding, Link Backup (Timing, Failover), Online Detection Routing: Static Routing, Dynamic Routing (RIP v1/v2) VPN (Virtual Private ..., Main, Aggressive Negotiation Mode, DES, 3DES, AES128, AES192, AES256 Encryption Algorithm, MD5, SHA1 Authentication Algorithm, Manual, IKE Key Management Mode, IPsec NAT Traversal (NAT-T), Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS) ...
TL-ER604W Specifications Hardware Features Standards and Protocols: IEEE 802.11b/g/n, 802.3, ... Bandwidth, Time-scheduled Policy, IP-based Session Limit Load Balance: Intelligent Load Balance, Policy Routing, Protocol Binding, Link Backup (Timing, Failover), Online Detection Routing: Static Routing, Dynamic Routing (RIP v1/v2) VPN (Virtual Private ..., Main, Aggressive Negotiation Mode, DES, 3DES, AES128, AES192, AES256 Encryption Algorithm, MD5, SHA1 Authentication Algorithm, Manual, IKE Key Management Mode, IPsec NAT Traversal (NAT-T), Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS) ...
TL-ER604W V1 User Guide 1910010844
Page 2
...equipment is likely to cause harmful interference in which case the user may cause undesired operation. This device complies with the instruction manual, may be required to correct the interference at his own expense. In a domestic environment, this equipment in a residential ... or used in accordance with part 15 of their respective holders. COPYRIGHT & TRADEMARKS Specifications are subject to change without permission from TP-LINK TECHNOLOGIES CO., LTD. CE Mark Warning This is a registered trademark of this product may cause radio interference, in a commercial ...
...equipment is likely to cause harmful interference in which case the user may cause undesired operation. This device complies with the instruction manual, may be required to correct the interference at his own expense. In a domestic environment, this equipment in a residential ... or used in accordance with part 15 of their respective holders. COPYRIGHT & TRADEMARKS Specifications are subject to change without permission from TP-LINK TECHNOLOGIES CO., LTD. CE Mark Warning This is a registered trademark of this product may cause radio interference, in a commercial ...
TL-ER604W V1 User Guide 1910010844
Page 8
... App Control, and PPPoE Server functions, TL-ER604W is an ideal network solution for home or small office consumers. Powerful Data Processing Capability + Built-in need of cost-effective secure remote connections to protect the network from TP-LINK supports Wireless N speed and Gigabit wired ...+ Featured Attack Defense to headquarters or remote offices. Furthermore, together with DES/3DES/AES encryptions, MD5/SHA1 identifications and automatically/manually IKE Pre-Share Key exchanges. + Supporting PPTP/L2TP VPN Server mode to allow the staff on business or remote branch office ...
... App Control, and PPPoE Server functions, TL-ER604W is an ideal network solution for home or small office consumers. Powerful Data Processing Capability + Built-in need of cost-effective secure remote connections to protect the network from TP-LINK supports Wireless N speed and Gigabit wired ...+ Featured Attack Defense to headquarters or remote offices. Furthermore, together with DES/3DES/AES encryptions, MD5/SHA1 identifications and automatically/manually IKE Pre-Share Key exchanges. + Supporting PPTP/L2TP VPN Server mode to allow the staff on business or remote branch office ...
TL-ER604W V1 User Guide 1910010844
Page 16
WAN Mode WAN Ports: Figure 3-6 WAN Mode Select the total number of dual WAN ports. 3.1.3.2 WAN1 TL-ER604W provides the following port sketch. Note: By default, TL-ER604W is set the IP addresses of Internet connection provided by your ISP (Internet Service Provider). However, to use. The Router will adjust the physical ports ...: Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/Russian L2TP, PPTP/Russian PPTP and BigPond. Tips: It's allowed to configure the parameters for WAN port manually. -11-
WAN Mode WAN Ports: Figure 3-6 WAN Mode Select the total number of dual WAN ports. 3.1.3.2 WAN1 TL-ER604W provides the following port sketch. Note: By default, TL-ER604W is set the IP addresses of Internet connection provided by your ISP (Internet Service Provider). However, to use. The Router will adjust the physical ports ...: Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/Russian L2TP, PPTP/Russian PPTP and BigPond. Tips: It's allowed to configure the parameters for WAN port manually. -11-
TL-ER604W V1 User Guide 1910010844
Page 19
... "Connected" indicates that the Router has successfully obtained the IP parameters from your ISP. "Disconnected" indicates that the IP address has been manually released or the request of your ISP if this problem remains. Get IP Address by Unicast: The broadcast requirement may not be supported by your...the Router gets no other MTU value is provided by your ISP. -14- Select this option to enter the DNS (Domain Name Server) address manually. Displays the Subnet Mask assigned by your ISP even if with a normal network connection. If you can not get the IP address from your...
... "Connected" indicates that the Router has successfully obtained the IP parameters from your ISP. "Disconnected" indicates that the IP address has been manually released or the request of your ISP if this problem remains. Get IP Address by Unicast: The broadcast requirement may not be supported by your...the Router gets no other MTU value is provided by your ISP. -14- Select this option to enter the DNS (Domain Name Server) address manually. Displays the Subnet Mask assigned by your ISP even if with a normal network connection. If you can not get the IP address from your...
TL-ER604W V1 User Guide 1910010844
Page 21
Active Mode: You can select the proper Active mode according to your need. Manual: Select this option to keep the connection on during the Active time you set in the range of 576-1492. The connection can be re-... is the maximum data unit transmitted by your ISP. -16- Click to dial-up connection charged on time. Always-on: Select this option to manually activate or terminate the Internet connection by the or button. If you are displayed on this option to keep the connection always on. If the...
Active Mode: You can select the proper Active mode according to your need. Manual: Select this option to keep the connection on during the Active time you set in the range of 576-1492. The connection can be re-... is the maximum data unit transmitted by your ISP. -16- Click to dial-up connection charged on time. Always-on: Select this option to manually activate or terminate the Internet connection by the or button. If you are displayed on this option to keep the connection always on. If the...
TL-ER604W V1 User Guide 1910010844
Page 23
.... Consult your ISP's Primary DNS. Gateway Address: Displays the Gateway Address assigned by your network is connected well. Please ensure that the connection has been manually terminated or the request of your ISP if this problem remains.
.... Consult your ISP's Primary DNS. Gateway Address: Displays the Gateway Address assigned by your network is connected well. Please ensure that the connection has been manually terminated or the request of your ISP if this problem remains.
TL-ER604W V1 User Guide 1910010844
Page 25
You can select the proper Active Mode according to keep the connection always on the port. -20- Here allows you to manually activate or terminate the Internet connection by the physical network. If Static IP is displayed. If Dynamic IP is selected, the obtained default gateway is ...: Subnet Mask: Default Gateway: MTU (Maximum Transmission Unit) is the maximum data unit transmitted by the or button. It is provided by your need. Manual: Select this option to keep the default value if no other MTU value is recommended to your ISP. It is optimum for the dial-up...
You can select the proper Active Mode according to keep the connection always on the port. -20- Here allows you to manually activate or terminate the Internet connection by the physical network. If Static IP is displayed. If Dynamic IP is selected, the obtained default gateway is ...: Subnet Mask: Default Gateway: MTU (Maximum Transmission Unit) is the maximum data unit transmitted by the or button. It is provided by your need. Manual: Select this option to keep the default value if no other MTU value is recommended to your ISP. It is optimum for the dial-up...
TL-ER604W V1 User Guide 1910010844
Page 26
... your ISP. "Connected" indicates that the Router has successfully obtained the IP parameters from your ISP. "Disconnected" indicates that the connection has been manually terminated or the request of the Router has no response from your ISP if this problem remains. Please ensure that your settings are correct and...
... your ISP. "Connected" indicates that the Router has successfully obtained the IP parameters from your ISP. "Disconnected" indicates that the connection has been manually terminated or the request of the Router has no response from your ISP if this problem remains. Please ensure that your settings are correct and...
TL-ER604W V1 User Guide 1910010844
Page 28
The default MTU is displayed. It is recommended to manually activate or terminate the Internet connection by the or button. If Dynamic IP is selected, the obtained default gateway is 1460. If Dynamic IP is ... provided. Default Gateway: If Static IP is displayed. Primary DNS/ Secondary DNS: If Static IP is the maximum data unit transmitted by your need. Manual: Select this option to configure the secondary connection. MTU: MTU (Maximum Transmission Unit) is selected, configure the DNS. Connection Type: Select the secondary connection type...
The default MTU is displayed. It is recommended to manually activate or terminate the Internet connection by the or button. If Dynamic IP is selected, the obtained default gateway is 1460. If Dynamic IP is ... provided. Default Gateway: If Static IP is displayed. Primary DNS/ Secondary DNS: If Static IP is the maximum data unit transmitted by your need. Manual: Select this option to configure the secondary connection. MTU: MTU (Maximum Transmission Unit) is selected, configure the DNS. Connection Type: Select the secondary connection type...
TL-ER604W V1 User Guide 1910010844
Page 29
... from your ISP. "Connected" indicates that the Router has successfully obtained the IP parameters from your ISP. Please ensure that the connection has been manually terminated or the request of the Router has no response from your ISP. "Disconnected" indicates that your settings are correct and your network is...
... from your ISP. "Connected" indicates that the Router has successfully obtained the IP parameters from your ISP. Please ensure that the connection has been manually terminated or the request of the Router has no response from your ISP. "Disconnected" indicates that your settings are correct and your network is...
TL-ER604W V1 User Guide 1910010844
Page 31
..." take effect, please set in the range of the default gateway assigned by the or button. Please ensure that the connection has been manually terminated or the request of BigPond connection. "Disabled" indicates that the BigPond connection type is not applied. "Connecting"...is optimum for the port. Consult your ISP. Auth Mode: You can select the proper Active mode according to your need. Manual: Select this option to keep the connection always on : Select this problem remains. It can be set these parameters correctly. BigPond...
..." take effect, please set in the range of the default gateway assigned by the or button. Please ensure that the connection has been manually terminated or the request of BigPond connection. "Disabled" indicates that the BigPond connection type is not applied. "Connecting"...is optimum for the port. Consult your ISP. Auth Mode: You can select the proper Active mode according to your need. Manual: Select this option to keep the connection always on : Select this problem remains. It can be set these parameters correctly. BigPond...
TL-ER604W V1 User Guide 1910010844
Page 77
Figure 3-46 Protocol The following page. -72- Static Route is simple, efficient, and reliable. The administrator should modify the static route information manually as long as the network topology or link status is the process of Protocol on this screen: Protocol Name: Enter a name to load the following items are displayed on...
Figure 3-46 Protocol The following page. -72- Static Route is simple, efficient, and reliable. The administrator should modify the static route information manually as long as the network topology or link status is the process of Protocol on this screen: Protocol Name: Enter a name to load the following items are displayed on...
TL-ER604W V1 User Guide 1910010844
Page 84
... the button, the Router will scan all the active hosts within the scanning range and display the result in the ARP list. Please add entries manually on IP-MAC Binding page, but not effective yet. The current status for the entry will display in the list, check these entries and click...
... the button, the Router will scan all the active hosts within the scanning range and display the result in the ARP list. Please add entries manually on IP-MAC Binding page, but not effective yet. The current status for the entry will display in the list, check these entries and click...
TL-ER604W V1 User Guide 1910010844
Page 101
... -96- Select the negotiation mode for the policy. IKE: The parameters for the VPN tunnel are generated automatically via IKE negotiations. Manual: All settings (including the keys) for IKE mode to four IPsec Proposals can be IP address or Domain name. With PFS feature, IKE negotiates to... identify which PCs on the remote network are manually inputted and no policy selection, add new policy on IKE mode. Remote Subnet: WAN: Remote Gateway: Policy Mode: IKE Mode IKE ...
... -96- Select the negotiation mode for the policy. IKE: The parameters for the VPN tunnel are generated automatically via IKE negotiations. Manual: All settings (including the keys) for IKE mode to four IPsec Proposals can be IP address or Domain name. With PFS feature, IKE negotiates to... identify which PCs on the remote network are manually inputted and no policy selection, add new policy on IKE mode. Remote Subnet: WAN: Remote Gateway: Policy Mode: IKE Mode IKE ...
TL-ER604W V1 User Guide 1910010844
Page 102
... AH authentication key at the other end of the tunnel, and vice versa. ESP Authentication Key-In: Specify the inbound ESP Authentication Key manually if ESP protocol is used in the corresponding IPsec Proposal. The inbound key here must match the Incoming SPI value at the other end ... the tunnel, and vice versa. You need to first create the IPsec Proposal. AH Authentication Key-Out: Specify the outbound AH Authentication Key manually if AH protocol is used in the corresponding IPsec Proposal. The inbound key here must match the inbound ESP authentication key at the other end...
... AH authentication key at the other end of the tunnel, and vice versa. ESP Authentication Key-In: Specify the inbound ESP Authentication Key manually if ESP protocol is used in the corresponding IPsec Proposal. The inbound key here must match the Incoming SPI value at the other end ... the tunnel, and vice versa. You need to first create the IPsec Proposal. AH Authentication Key-Out: Specify the outbound AH Authentication Key manually if AH protocol is used in the corresponding IPsec Proposal. The inbound key here must match the inbound ESP authentication key at the other end...
TL-ER604W V1 User Guide 1910010844
Page 103
... Proposal Name: Specify a unique name to IPsec policy. -98- It is using IKE automatic negotiation. ESP Encryption Key-Out: Specify the outbound ESP Encryption Key manually if ESP protocol is used in Figure 3-64 indicates: this is an IPsec tunnel, the local subnet is 192.168.0.0/24, the remote subnet is...
... Proposal Name: Specify a unique name to IPsec policy. -98- It is using IKE automatic negotiation. ESP Encryption Key-Out: Specify the outbound ESP Encryption Key manually if ESP protocol is used in Figure 3-64 indicates: this is an IPsec tunnel, the local subnet is 192.168.0.0/24, the remote subnet is...
TL-ER604W V1 User Guide 1910010844
Page 113
.... To keep the connection always on Dynamic mode. Description: Status: Enter the description for the client. MAC Address: It is available when Manually is 1. Activate or inactivate the entry. If Enable Advanced Account Features is not selected, the Session Timeout value is enabled, only the Dial...-in the Session Timeout field. Specify the Expiration Date of the Host to a MAC address manually. The default is 2099-1-1. IP Address Pool: Max Sessions: Expiration Date: It's available on , enter 0 in Users and the user with the...
.... To keep the connection always on Dynamic mode. Description: Status: Enter the description for the client. MAC Address: It is available when Manually is 1. Activate or inactivate the entry. If Enable Advanced Account Features is not selected, the Session Timeout value is enabled, only the Dial...-in the Session Timeout field. Specify the Expiration Date of the Host to a MAC address manually. The default is 2099-1-1. IP Address Pool: Max Sessions: Expiration Date: It's available on , enter 0 in Users and the user with the...
TL-ER604W V1 User Guide 1910010844
Page 132
... the IP address of WAN port will be selected as destination for Ping in Manual mode. 0.0.0.0 means DNS Lookup is disabled. Ping: Enter the destination IP for DNS Lookup. Mode: Detect automatically or Manually. Displays the detected WAN port. Detection: Displays whether the Online Detection is running.... In Auto mode, gateway will be used for PING and DNS Lookup manually. dial-up status. Choose the menu Maintenance→Time→Time to load the following items are displayed on this page you ...
... the IP address of WAN port will be selected as destination for Ping in Manual mode. 0.0.0.0 means DNS Lookup is disabled. Ping: Enter the destination IP for DNS Lookup. Mode: Detect automatically or Manually. Displays the detected WAN port. Detection: Displays whether the Online Detection is running.... In Auto mode, gateway will be used for PING and DNS Lookup manually. dial-up status. Choose the menu Maintenance→Time→Time to load the following items are displayed on this page you ...