TP-Link TL-ER6020 Manuale utente

TL-ER6020

Gigabit Dual-WAN VPN Router

REV1.0.1

1910010852

-I-

Specifications are subject to change without notice. is a registered trademark of

TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks of their

respective holders.

No part of the specifications may be reproduced in any form or by any means or used to make any

derivative such as translation, transformation, or adaptation without permission from TP-LINK

reserved.

http://www.tp-link.com

FCC STATEMENT

This equipment has been tested and found to comply with the limits for a Class A digital device,

pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection

against harmful interference when the equipment is operated in a commercial environment. This

equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in

accordance with the instruction manual, may cause harmful interference to radio communications.

Operation of this equipment in a residential area is likely to cause harmful interference in which case

the user will be required to correct the interference at his own expense.

This device complies with part 15 of the FCC Rules. Operation is subject to the following two

conditions:

1) This device may not cause harmful interference.

2) This device must accept any interference received, including interference that may cause

undesired operation.

Any changes or modifications not expressly approved by the party responsible for compliance could

void the user’s authority to operate the equipment.

CE Mark Warning

This is a class A product. In a domestic environment, this product may cause radio interference, in

which case the user may be required to take adequate measures.

-II-

CONTENTS

Package Contents..................................................................................................................1

Chapter 1 About this Guide ...................................................................................................2

1.1 Intended Readers ..................................................................................................................2

1.2 Conventions ...........................................................................................................................2

1.3 Overview of this Guide...........................................................................................................2

Chapter 2 Introduction ..........................................................................................................4

2.1 Overview of the Router ..........................................................................................................4

2.2 Features.................................................................................................................................5

2.3 Appearance............................................................................................................................6

2.3.1 Front Panel ................................................................................................................6

2.3.2 Rear Panel.................................................................................................................8

Chapter 3 Configuration ........................................................................................................9

3.1 Network..................................................................................................................................9

3.1.1 Status.........................................................................................................................9

3.1.2 System Mode.............................................................................................................9

3.1.3 WAN ........................................................................................................................12

3.1.4 LAN..........................................................................................................................29

3.1.5 DMZ.........................................................................................................................32

3.1.6 MAC Address...........................................................................................................34

3.1.7 Switch ......................................................................................................................36

3.2 User Group ..........................................................................................................................42

3.2.1 Group.......................................................................................................................43

3.2.2 User .........................................................................................................................43

3.2.3 View.........................................................................................................................44

3.3 Advanced .............................................................................................................................45

3.3.1 NAT..........................................................................................................................45

3.3.2 Traffic Control ..........................................................................................................54

-III-

3.3.3 Session Limit ...........................................................................................................58

3.3.4 Load Balance...........................................................................................................59

3.3.5 Routing ....................................................................................................................64

3.4 Firewall.................................................................................................................................69

3.4.1 Anti ARP Spoofing ...................................................................................................69

3.4.2 Attack Defense ........................................................................................................72

3.4.3 MAC Filtering ...........................................................................................................74

3.4.4 Access Control.........................................................................................................75

3.4.5 App Control..............................................................................................................81

3.5 VPN......................................................................................................................................83

3.5.1 IKE...........................................................................................................................83

3.5.2 IPsec........................................................................................................................87

3.5.3 L2TP/PPTP..............................................................................................................94

3.6 Services ...............................................................................................................................98

3.6.1 PPPoE Server..........................................................................................................98

3.6.2 E-Bulletin ...............................................................................................................104

3.6.3 Dynamic DNS ........................................................................................................106

3.6.4 UPnP .....................................................................................................................112

3.7 Maintenance ......................................................................................................................113

3.7.1 Admin Setup ..........................................................................................................113

3.7.2 Management..........................................................................................................116

3.7.3 License ..................................................................................................................118

3.7.4 Statistics.................................................................................................................119

3.7.5 Diagnostics ............................................................................................................121

3.7.6 Time.......................................................................................................................124

3.7.7 Logs.......................................................................................................................125

Chapter 4 Application........................................................................................................127

4.1 Network Requirements.......................................................................................................127

-IV-

4.2 Network Topology...............................................................................................................128

4.3 Configurations....................................................................................................................128

4.3.1 Internet Setting ......................................................................................................128

4.3.2 VPN Setting ...........................................................................................................130

4.3.3 Network Management............................................................................................136

4.3.4 Network Security....................................................................................................140

Chapter 5 CLI ................................................................................................................146

5.1 Configuration......................................................................................................................146

5.2 Interface Mode ...................................................................................................................149

5.3 Online Help ........................................................................................................................150

5.4 Command Introduction.......................................................................................................152

5.4.1 ip............................................................................................................................152

5.4.2 ip-mac....................................................................................................................152

5.4.3 sys .........................................................................................................................153

5.4.4 user........................................................................................................................154

5.4.5 history ....................................................................................................................155

5.4.6 exit .........................................................................................................................156

Appendix A Hardware Specifications ...........................................................................157

Appendix B FAQ .........................................................................................................158

Appendix C Glossary ..................................................................................................160

-1-

Package Contents

The following items should be found in your package:

One TL-ER6020 Router

One Power Cord

One Console Cable

Two mounting brackets and other fittings

Installation Guide

Resource CD

Note:

Make sure that the package contains the above items. If any of the listed items is damaged or missing,

please contact with your distributor.

-2-

Chapter 1 About this Guide

This User Guide contains information for setup and management of TL-ER6020 Router. Please read

this guide carefully before operation.

1.1 Intended Readers

This Guide is intended for Network Engineer and Network Administrator.

1.2 Conventions

In this Guide the following conventions are used:

The Router or TL-ER6020 mentioned in this Guide stands for TL-ER6020 SafeStream Gigabit

Dual-WAN VPN Router without any explanation.

Menu Name→Submenu Name→Tab page indicates the menu structure. Advanced→NAT

→Basic NAT means the Basic NAT page under the NAT menu option that is located under the

Advanced menu.

Bold font indicates a toolbar icon, menu or menu item.

<Font> indicate a button.

Symbols in this Guide:

Symbol Description

Note:

Ignoring this type of note might result in a malfunction or damage to the

device.

Tips:

This format indicates important information that helps you make better use of

your device.

1.3 Overview of this Guide

Chapter 1 About This Guide Introduces the guide structure and conventions.

Chapter 2 Introduction Introduces the features and appearance of TL-ER6020 router.

Chapter 3 Configurations Introduces how to configure the Router via Web management page.

Chapter 4 Application Introduces the practical application of the Router on the enterprise

network.

Chapter5 CLI Introduces how to log in and set up the Router using CLI commands by

console port.

-3-

Appendix A Hardware

Specifications

Lists the hardware specifications of this Router.

Appendix B FAQ Provides the possible solutions to the problems that may occur during

the installation and operation of the router.

Appendix C Glossary Lists the glossary used in this guide.

-4-

Chapter 2 Introduction

Thanks for choosing the SafeStream Gigabit Dual-WAN VPN Router TL-ER6020.

2.1 Overview of the Router

The SafeStream Gigabit Dual-WAN VPN Router TL-ER6020 from TP-LINK possesses excellent data

processing capability and multiple powerful functions including IPsec/PPTP/L2TP VPN, Load Balance,

Access Control, Bandwidth Control, Session Limit, IM/P2P Blocking, PPPoE Server and so on, which

consumedly meet the needs of small and medium enterprise, hotels and communities with volumes of

users demanding a efficient and easy-to-manage network with high security.

Powerful Data Processing Capability

+ Built-in ARM 32 network processor and 128MB DDRII high-speed RAM allows the stability and

reliability for operation.

Virtual Private Network (VPN)

+ Providing comprehensive IPsec VPN with DES/3DES/AES encryptions, MD5/SHA1

identifications and automatically/manually IKE Pre-Share Key exchanges.

+ Supporting PPTP/L2TP VPN Server mode to allow the staff on business or remote branch office

to access the headquarter network.

Online Behavior Management

+ Complete Functions of Access Rules can allow managers to select the network service levels to

block or allow applications of FTP downloading, Email, Web browsing and so on.

+ Deploying One-Click restricting of IM/P2P applications to save time & energy while reserving

exceptional groups for certain users.

+ Supporting URL Filtering to prevent potential hazards from visiting the malicious Web sites.

Powerful Firewall

+ Supporting One-Click IP-MAC Binding to avoid ARP spoofing and guarantee a network without

stagnation.

+ Featured Attack Defense to protect the network from a variety of flood attack and packet

anomaly attack.

+ Possessing MAC Filtering function to block the access of illegal hosts.

Flexible Traffic Control

+ Featured Bandwidth Control with flexible bandwidth management to automatically control the

bandwidth of the host in bi-direction to avoid bandwidth over occupation, as well as optimize

bandwidth usage.

+ Supporting Session Limit to avoid the complaint of a few people to force whole sessions.

-5-

Dual-WAN Ports

+ Providing two 10/100/1000M WAN ports for users to connect two Internet lines for bandwidth

expansion.

+ Supporting multiple Load Balance modes, including Bandwidth Based Balance Routing,

Application Optimized Routing, and Policy Routing to optimize bandwidth usage.

+ Featured Link Backup to switch all the new sessions from dropped line automatically to another

for keeping an always on-line network.

Easy-to-use

+ Providing easy-to-use GUI with clear configuration steps and detailed help information for the

users to configure the Router simply.

+ Helping administrators to monitor the whole network status and take actions to malfunctions

according to the recorded log information.

+ Supporting remote management to manage the Router from remote places.

2.2 Features

Hardware

2 gigabit WAN ports, 2 gigabit LAN ports, 1 gigabit LAN/DMZ port and 1 Console port

Built-in high-quality power supply with non-fan system design for quietness

Possesses standard-sized, 19-inch outfit for standard rack

Supports Professional 4kV common mode lightning protection

Complies with IEEE 802.3, IEEE 802.3u, IEEE 802.3ab standards

Supports AH, ESP, IKE, PPP protocols

Supports TCP/IP, DHCP, ICMP, NAT, NAPT protocols

Supports PPPoE, SNTP, HTTP, DDNS, UPnP, NTP protocols

Basic Functions

Supports Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/Russian L2TP, PPTP/Russian

PPTP, Dual Access, BigPond Internet connections

Supports Virtual Server, Port Triggering, ALG, Static Route and RIP v1/v2

Built-in Switch supporting Port Mirror, Port VLAN, Rate Control and so on

Supports to change the MAC address of LAN, WAN, DMZ port

Supports Logs, Statistics, Time setting

Supports Remote and Web management

Indice

Altri manuali TP-Link Router di rete

TP-Link

TP-Link TL-WR820N Manuale utente

TP-Link

TP-Link TL-WA860RE Manuale utente

TP-Link

TP-Link Archer C9 Manuale utente

TP-Link

TP-Link Archer C2 Manuale utente

TP-Link

TP-Link TD-VG5612 Scheda tecnica

TP-Link

TP-Link TD-8841 Manuale utente

TP-Link

TP-Link Archer D7 Manuale utente

TP-Link

TP-Link Archer C5400X Manuale utente

TP-Link

TP-Link TL-WDR3600 Manuale utente

TP-Link

TP-Link TD-W8970B Manuale utente

TP-Link

TP-Link Archer C8 Manuale utente

TP-Link

TP-Link ARCHER C60 Manuale utente

TP-Link

TP-Link TD-W8101G Manuale utente

TP-Link

TP-Link SafeStream TL-ER6020 Manuale utente

TP-Link

TP-Link TL-WA820RE Manuale utente

TP-Link

TP-Link TL-R860 Manuale utente

TP-Link

TP-Link TL-WR945N Manuale utente

TP-Link

TP-Link TD-W8151N Manuale utente

TP-Link

TP-Link Archer C20 Manuale utente

TP-Link

TP-Link TD-8816 Manuale utente

TP-Link

TP-Link WR850N Manuale utente

TP-Link

TP-Link Deco S1900 Manuale utente

TP-Link

TP-Link M7000 Manuale utente

TP-Link

TP-Link Arher C3200 Manuale utente

Manuali Router di rete popolari di altre marche

Allnet

Allnet ALL0333AU Manuale utente

HomeSeer

HomeSeer HT-SEL Manuale utente

Sercomm

Sercomm Genesis OC3505D Manuale utente

Billion

Billion BIPAC 5102 Series Manuale utente

Motorola

Motorola MR1900 Manuale utente

Digi

Digi IX14 Manuale utente

Cisco

Cisco NCS 540 Manuale

XAVi

XAVi X8821e Manuale utente

BEC

BEC 6200WZL Manuale utente

MikroTik

MikroTik hAP ac3 Series Manuale utente

Korenix

Korenix JetNet 5428G Series Manuale utente

NETGEAR

NETGEAR FS526T - Switch Manuale utente

Korenix

Korenix JetNet 5710G Series Manuale utente

Automated Logic

Automated Logic ZN551 Manuale del proprietario

Cisco

Cisco ASR 1000 Series Manuale dell'operatore

EnGenius

EnGenius ESR-9710 Manuale utente

Cisco

Cisco 805 Series Istruzioni operative e di sicurezza

LevelOne

LevelOne FBR-1416 Manuale utente