TL-R600VPN V1 User Guide
Page 5
Configuring the Router 13 4.1 Status...13 4.2 Quick Setup ...15 4.3 Network...15 4.3.1 WAN ...15 4.3.2 LAN...24 4.3.3 MAC Clone ...25 4.4 DHCP...26 4.4.1 DHCP Settings ...26 4.4.2 DHCP Clients List...27 4.4.3 Address Reservation ...27 4.5 Forwarding...29 4.5.1 Virtual Servers...29 4.5.2 Port Triggering...31 4.5.3 DMZ...33 4.5.4 UPnP ...33 4.6 Security...34 4.6.1 Basic Security...34 4.6.2 ...
Configuring the Router 13 4.1 Status...13 4.2 Quick Setup ...15 4.3 Network...15 4.3.1 WAN ...15 4.3.2 LAN...24 4.3.3 MAC Clone ...25 4.4 DHCP...26 4.4.1 DHCP Settings ...26 4.4.2 DHCP Clients List...27 4.4.3 Address Reservation ...27 4.5 Forwarding...29 4.5.1 Virtual Servers...29 4.5.2 Port Triggering...31 4.5.3 DMZ...33 4.5.4 UPnP ...33 4.6 Security...34 4.6.1 Basic Security...34 4.6.2 ...
TL-R600VPN V1 User Guide
Page 6
... ...48 4.9 PPTP VPN Server ...49 4.9.1 Server Settings...49 4.9.2 Account Settings ...50 4.9.3 Connection Status ...51 4.10 Static Routing ...51 4.11 Bandwidth Control ...52 4.11.1 Control Settings...52 4.11.2 Rule List...53 4.12 IP & MAC Binding ...54 4.12.1 Binding Setting ...54 4.12.2 ARP List...56 4.13 Dynamic DNS...Dyndns DDNS ...57 4.13.2 PeanutHull DDNS...58 4.13.3 Comexe DDNS...58 4.13.4 No-IP DDNS ...59 4.14 System Tools ...60 4.14.1 Time Settings ...61 4.14.2 Diagnostic Tools...62 4.14.3 Firmware...62 4.14.4 Factory Defaults ...63 4.14.5 Backup and Restore...64 4.14.6 Reboot ...65 4....
... ...48 4.9 PPTP VPN Server ...49 4.9.1 Server Settings...49 4.9.2 Account Settings ...50 4.9.3 Connection Status ...51 4.10 Static Routing ...51 4.11 Bandwidth Control ...52 4.11.1 Control Settings...52 4.11.2 Rule List...53 4.12 IP & MAC Binding ...54 4.12.1 Binding Setting ...54 4.12.2 ARP List...56 4.13 Dynamic DNS...Dyndns DDNS ...57 4.13.2 PeanutHull DDNS...58 4.13.3 Comexe DDNS...58 4.13.4 No-IP DDNS ...59 4.14 System Tools ...60 4.14.1 Time Settings ...61 4.14.2 Diagnostic Tools...62 4.14.3 Firmware...62 4.14.4 Factory Defaults ...63 4.14.5 Backup and Restore...64 4.14.6 Reboot ...65 4....
TL-R600VPN V1 User Guide
Page 7
... restricted access policies based on the time of the Router The TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router from the actual situation. Introduction 1.1 Overview of day for setting up the product, which may differ from TP-LINK provides multiple VPN protocols and high VPN performance. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Chapter 1. Anymore, web...
... restricted access policies based on the time of the Router The TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router from the actual situation. Introduction 1.1 Overview of day for setting up the product, which may differ from TP-LINK provides multiple VPN protocols and high VPN performance. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Chapter 1. Anymore, web...
TL-R600VPN V1 User Guide
Page 9
TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Method one: Use the Factory Defaults function on System Tools -> Factory Defaults page in the following will instruct ... is powered on , use this product during an electrical storm. And then release the button and wait the router to reboot to its factory default settings. ) Note: 1) Please use only the power cord provided with this Router. 2) Ensure the router is in a closet) ¾ Operating temperature: 0℃~40℃ (32℉...
TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Method one: Use the Factory Defaults function on System Tools -> Factory Defaults page in the following will instruct ... is powered on , use this product during an electrical storm. And then release the button and wait the router to reboot to its factory default settings. ) Note: 1) Please use only the power cord provided with this Router. 2) Ensure the router is in a closet) ¾ Operating temperature: 0℃~40℃ (32℉...
TL-R600VPN V1 User Guide
Page 16
... main menu and the "Quick Setup" screen will appear. Choose Tools menu→Internet Options→Connections→LAN Settings, in the screen that your web-browser may be set to a proxy. Figure 3-9 10 TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide ) Note: Figure 3-7 If the above screen (Figure 3-7) does not prompt, it...
... main menu and the "Quick Setup" screen will appear. Choose Tools menu→Internet Options→Connections→LAN Settings, in the screen that your web-browser may be set to a proxy. Figure 3-9 10 TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide ) Note: Figure 3-7 If the above screen (Figure 3-7) does not prompt, it...
TL-R600VPN V1 User Guide
Page 19
Besides this, you want to know more about this chapter and configure advanced settings though the Web-based Utility. There are main menus on the left of the main menus. For advanced users, if you can configure the function. .... To apply any settings you have altered on the right of the Web-based Utility. All information is recommended to use of its functions adequately, you click one of the Web-based Utility. On the center of the web-based Utility, you can refer to read -only. 13 TL-R600VPN SafeStreamTM Gigabit Broadband...
Besides this, you want to know more about this chapter and configure advanced settings though the Web-based Utility. There are main menus on the left of the main menus. For advanced users, if you can configure the function. .... To apply any settings you have altered on the right of the Web-based Utility. All information is recommended to use of its functions adequately, you click one of the Web-based Utility. On the center of the web-based Utility, you can refer to read -only. 13 TL-R600VPN SafeStreamTM Gigabit Broadband...
TL-R600VPN V1 User Guide
Page 22
... get the IP address normally, you can choose this option. (You don't need to get 'Address not found' errors when you are set up improperly. But this option generally). 16 TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-3 ¾ MTU Size - Otherwise, the DNS servers will be done unless you go...
... get the IP address normally, you can choose this option. (You don't need to get 'Address not found' errors when you are set up improperly. But this option generally). 16 TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-3 ¾ MTU Size - Otherwise, the DNS servers will be done unless you go...
TL-R600VPN V1 User Guide
Page 25
... last unless a new link is requested. ) Note: 1) If you are sure it connect or disconnect manually. Figure 4-6 ¾ MTU Size- The service name and AC (Access Concentrator) name should not be able to re-establish your ISP. ¾ Service Name/AC Name - TL-R600VPN SafeStreamTM Gigabit Broadband VPN ...1480 bytes, which may still be disconnected although you want your Internet connection to Max Idle Time. You can configure the router to set the system time on System Tools→Time screen, will disconnect your Internet connection, and not be done unless you are sure it...
... last unless a new link is requested. ) Note: 1) If you are sure it connect or disconnect manually. Figure 4-6 ¾ MTU Size- The service name and AC (Access Concentrator) name should not be able to re-establish your ISP. ¾ Service Name/AC Name - TL-R600VPN SafeStreamTM Gigabit Broadband VPN ...1480 bytes, which may still be disconnected although you want your Internet connection to Max Idle Time. You can configure the router to set the system time on System Tools→Time screen, will disconnect your Internet connection, and not be done unless you are sure it...
TL-R600VPN V1 User Guide
Page 30
... before your Internet connection to the router. 2) If the new LAN IP Address you set is not in the same subnet, the IP Address pools in the DHCP sever will ...Normally use 255.255.255.0 as you specify a time to have the Internet connecting last unless a new link requested. ) Note: Sometimes the connection cannot be changed. ¾ IP Address - To use this option...LAN Choose menu "Network→LAN", you can configure the router to access the Internet again. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide enter the number of minutes you want your Internet connection ...
... before your Internet connection to the router. 2) If the new LAN IP Address you set is not in the same subnet, the IP Address pools in the DHCP sever will ...Normally use 255.255.255.0 as you specify a time to have the Internet connecting last unless a new link requested. ) Note: Sometimes the connection cannot be changed. ¾ IP Address - To use this option...LAN Choose menu "Network→LAN", you can configure the router to access the Internet again. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide enter the number of minutes you want your Internet connection ...
TL-R600VPN V1 User Guide
Page 32
The router is set up by default as a DHCP (Dynamic Host Configuration Protocol) server, which provides the TCP/IP configuration for each submenu are provided below . This field specifies the end address in the IP address pool. TL-R600VPN SafeStreamTM Gigabit Broadband VPN ...Router User Guide 4.4 DHCP Choose menu "DHCP", the next submenus are connected to configure the corresponding function. This field specifies the first address in the IP address pool. The detailed explanations for all the PCs that are shown below . 4.4.1 DHCP Settings...
The router is set up by default as a DHCP (Dynamic Host Configuration Protocol) server, which provides the TCP/IP configuration for each submenu are provided below . This field specifies the end address in the IP address pool. TL-R600VPN SafeStreamTM Gigabit Broadband VPN ...Router User Guide 4.4 DHCP Choose menu "DHCP", the next submenus are connected to configure the corresponding function. This field specifies the first address in the IP address pool. The detailed explanations for all the PCs that are shown below . 4.4.1 DHCP Settings...
TL-R600VPN V1 User Guide
Page 33
...the lease automatically. 4.4.3 Address Reservation Choose menu "DHCP→Address Reservation", you must configure all computers on the LAN, that require permanent IP settings. 27 Input the domain name of your ISP provides two DNS servers. (Optional) ) Note: To use the DHCP server function of time ... If you can consult your ISP. Suggest inputting the IP address of the LAN port of the DHCP client ¾ Assigned IP - TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide ¾ Address Lease Time - This field displays the IP address that the router has allocated to...
...the lease automatically. 4.4.3 Address Reservation Choose menu "DHCP→Address Reservation", you must configure all computers on the LAN, that require permanent IP settings. 27 Input the domain name of your ISP provides two DNS servers. (Optional) ) Note: To use the DHCP server function of time ... If you can consult your ISP. Suggest inputting the IP address of the LAN port of the DHCP client ¾ Assigned IP - TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide ¾ Address Lease Time - This field displays the IP address that the router has allocated to...
TL-R600VPN V1 User Guide
Page 35
... must have a static or a reserved IP address because its IP address may change when using the DHCP function. This field displays the protocol used for setting up public services on your LAN, such as a service port, and all protocols supported by the server IP. A virtual server is End port). ¾ IP... the IP address of service ports (the format is XX-YY or XX, XX is Start port, YY is defined as DNS, Email and FTP. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Click the Previous button to view the information in the previous screen, click the Next button to view...
... must have a static or a reserved IP address because its IP address may change when using the DHCP function. This field displays the protocol used for setting up public services on your LAN, such as a service port, and all protocols supported by the server IP. A virtual server is End port). ¾ IP... the IP address of service ports (the format is XX-YY or XX, XX is Start port, YY is defined as DNS, Email and FTP. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Click the Previous button to view the information in the previous screen, click the Next button to view...
TL-R600VPN V1 User Guide
Page 36
... Previous button to view the information in the previous screen, click the Next button to view the information in the next screen. ) Note: If you set the web management port on a computer or server; Click the Enable All button to enable all the entries. Figure 4-19 Step 3: After that you...that you must set the virtual server of the service port as 80, you configure more than one type of available service on System Tools -> Remote Management screen to be any value except 80 such as shown in Figure 4-18: Click the Delete button to delete the entry. TL-R600VPN SafeStreamTM Gigabit ...
... Previous button to view the information in the previous screen, click the Next button to view the information in the next screen. ) Note: If you set the web management port on a computer or server; Click the Enable All button to enable all the entries. Figure 4-19 Step 3: After that you...that you must set the virtual server of the service port as 80, you configure more than one type of available service on System Tools -> Remote Management screen to be any value except 80 such as shown in Figure 4-18: Click the Delete button to delete the entry. TL-R600VPN SafeStreamTM Gigabit ...
TL-R600VPN V1 User Guide
Page 39
... in Figure 4-23). DMZ host forwards all the ports at the same time. You can be exposed to update the Current UPnP Settings List before viewing the information. UPnP devices can click Refresh to the Internet for a special-purpose service such as needed. The Universal...function disabled and should have a new static IP address assigned to access the local host resources or devices as Internet gaming or videoconferencing. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide 4.5.3 DMZ Choose menu "Forwarding→DMZ", you can view the information about UPnP in the...
... in Figure 4-23). DMZ host forwards all the ports at the same time. You can be exposed to update the Current UPnP Settings List before viewing the information. UPnP devices can click Refresh to the Internet for a special-purpose service such as needed. The Universal...function disabled and should have a new static IP address assigned to access the local host resources or devices as Internet gaming or videoconferencing. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide 4.5.3 DMZ Choose menu "Forwarding→DMZ", you can view the information about UPnP in the...
TL-R600VPN V1 User Guide
Page 49
...and the remote VPN peer uses the same mode. z AES128: Uses the AES algorithm and 128-bit key for identity protection. The DH Group sets the strength of arbitrary length and generates a 128-bit message digest. z Main: Main mode provides identity protection and exchanges more information, which ...with lower security, which applies to be used in bits. z AES192: Uses the AES algorithm and 192-bit key for IKE negotiation. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-38 ¾ Policy Name: The unique name to scenarios with higher requirement for encryption.
...and the remote VPN peer uses the same mode. z AES128: Uses the AES algorithm and 128-bit key for identity protection. The DH Group sets the strength of arbitrary length and generates a 128-bit message digest. z Main: Main mode provides identity protection and exchanges more information, which ...with lower security, which applies to be used in bits. z AES192: Uses the AES algorithm and 192-bit key for IKE negotiation. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-38 ¾ Policy Name: The unique name to scenarios with higher requirement for encryption.
TL-R600VPN V1 User Guide
Page 51
TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-40 ¾ IPSec: Enable or disable IPsec and click save to apply. ¾ Policy Name: The unique ... IPsec entry: Step 1: Click Add New.../Modify shown in Figure 4-40, you will see a new screen shown in Figure 4-41. Then enable or disable the settings. 45 It's formed by IP address and subnet mask. ¾ Exchange Mode: The negotiation mode for identification and management purposes. ¾ Local Subnet: The IP...
TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-40 ¾ IPSec: Enable or disable IPsec and click save to apply. ¾ Policy Name: The unique ... IPsec entry: Step 1: Click Add New.../Modify shown in Figure 4-40, you will see a new screen shown in Figure 4-41. Then enable or disable the settings. 45 It's formed by IP address and subnet mask. ¾ Exchange Mode: The negotiation mode for identification and management purposes. ¾ Local Subnet: The IP...
TL-R600VPN V1 User Guide
Page 52
... are covered by this policy. It's formed by IP address and subnet mask. ¾ Remote Gateway: Enter the Remote Gateway. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-41 ¾ Policy Name: Enter the unique name to the IPsec policy for identification...the policy. The default value is selected as the negotiation mode. Exchange Mode: Select the negotiation mode for IPsec. z Manual: All settings (including the keys) for the VPN tunnel are generated automatically via IKE negotiations. z IKE: The parameters for IPsec policy. Authentication Algorithm:...
... are covered by this policy. It's formed by IP address and subnet mask. ¾ Remote Gateway: Enter the Remote Gateway. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide Figure 4-41 ¾ Policy Name: Enter the unique name to the IPsec policy for identification...the policy. The default value is selected as the negotiation mode. Exchange Mode: Select the negotiation mode for IPsec. z Manual: All settings (including the keys) for the VPN tunnel are generated automatically via IKE negotiations. z IKE: The parameters for IPsec policy. Authentication Algorithm:...
TL-R600VPN V1 User Guide
Page 53
...) for IPsec policy. This setting should match the remote peer. Authentication Algorithm: Select the Authentication Algorithm for IKE mode to create a new key in the corresponding IPsec Proposal. The Incoming SPI here must match the outbound AH 47 With PFS feature, IKE negotiates to enhance security. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router...
...) for IPsec policy. This setting should match the remote peer. Authentication Algorithm: Select the Authentication Algorithm for IKE mode to create a new key in the corresponding IPsec Proposal. The Incoming SPI here must match the outbound AH 47 With PFS feature, IKE negotiates to enhance security. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router...
TL-R600VPN V1 User Guide
Page 55
... menu "PPTP VPN Server→Server Settings", you will be able to protect data flows for each tunnel after IPsec tunnel is unidirectional, an ingoing SA and an outgoing SA are different. Enable or disable the PPTP Server. 49 As Security Association is successfully established. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User...
... menu "PPTP VPN Server→Server Settings", you will be able to protect data flows for each tunnel after IPsec tunnel is unidirectional, an ingoing SA and an outgoing SA are different. Enable or disable the PPTP Server. 49 As Security Association is successfully established. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User...
TL-R600VPN V1 User Guide
Page 56
... the end IP address to define a range for the server's IP assignment. 4.9.2 Account Settings Choose the menu PPTP VPN Server→Account Settings, you will be encrypted by MPPE. ¾ IP Range Start - Figure 4-46 Step 3: Click the Save button. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide ¾ MPPE Encryption - Step 2: Enter...
... the end IP address to define a range for the server's IP assignment. 4.9.2 Account Settings Choose the menu PPTP VPN Server→Account Settings, you will be encrypted by MPPE. ¾ IP Range Start - Figure 4-46 Step 3: Click the Save button. TL-R600VPN SafeStreamTM Gigabit Broadband VPN Router User Guide ¾ MPPE Encryption - Step 2: Enter...