TL-ER6120 User Guide
Page 2
...specifications may be reproduced in a commercial environment. This device complies with the instruction manual, may cause undesired operation. CE Mark Warning This is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. These limits are designed to provide reasonable protection against harmful ...All rights reserved. COPYRIGHT & TRADEMARKS Specifications are trademarks of their respective holders. Copyright © 2011 TP-LINK TECHNOLOGIES CO., LTD. http://www.tp-link.com FCC STATEMENT This equipment has been tested and found to comply with the limits for compliance ...
...specifications may be reproduced in a commercial environment. This device complies with the instruction manual, may cause undesired operation. CE Mark Warning This is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. These limits are designed to provide reasonable protection against harmful ...All rights reserved. COPYRIGHT & TRADEMARKS Specifications are trademarks of their respective holders. Copyright © 2011 TP-LINK TECHNOLOGIES CO., LTD. http://www.tp-link.com FCC STATEMENT This equipment has been tested and found to comply with the limits for compliance ...
TL-ER6120 User Guide
Page 9
...operation. z Virtual Private Network (VPN) + Providing comprehensive IPsec VPN with DES/3DES/AES encryptions, MD5/SHA1 identifications and automatically/manually IKE Pre-Share Key exchanges. + Supporting PPTP/L2TP VPN Server mode to allow applications of FTP downloading, Email, Web browsing and... RAM allows the stability and reliability for choosing the SafeStreamTM Multi-WAN VPN Router TL-ER6120. 2.1 Overview of the Router The SafeStreamTM Multi-WAN VPN Router TL-ER6120 from TP-LINK possesses excellent data processing capability and multiple powerful functions including IPsec/PPTP/L2TP VPN,...
...operation. z Virtual Private Network (VPN) + Providing comprehensive IPsec VPN with DES/3DES/AES encryptions, MD5/SHA1 identifications and automatically/manually IKE Pre-Share Key exchanges. + Supporting PPTP/L2TP VPN Server mode to allow applications of FTP downloading, Email, Web browsing and... RAM allows the stability and reliability for choosing the SafeStreamTM Multi-WAN VPN Router TL-ER6120. 2.1 Overview of the Router The SafeStreamTM Multi-WAN VPN Router TL-ER6120 from TP-LINK possesses excellent data processing capability and multiple powerful functions including IPsec/PPTP/L2TP VPN,...
TL-ER6120 User Guide
Page 19
...local area network. ● The amount of WAN1. Note: 1) By default, TL-ER6120 is set the IP addresses of multiple WAN ports within the same subnet. However, to the instructions of tab pages for WAN port manually. Figure 3-7 WAN - Please be available if four WAN ports are enabled. ...3.1.3.2 WAN1 TL-ER6120 provides the following six Internet connection types: Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/...
...local area network. ● The amount of WAN1. Note: 1) By default, TL-ER6120 is set the IP addresses of multiple WAN ports within the same subnet. However, to the instructions of tab pages for WAN port manually. Figure 3-7 WAN - Please be available if four WAN ports are enabled. ...3.1.3.2 WAN1 TL-ER6120 provides the following six Internet connection types: Static IP, Dynamic IP, PPPoE/Russian PPPoE, L2TP/...
TL-ER6120 User Guide
Page 22
...Dynamic IP Status Status: Displays the status of your ISP even with a normal network connection. z "Connected" indicates that the IP address has been manually released or the request of the Router gets no response from your ISP if this problem remains. -17- z "Disconnected" indicates that the Router... ISP. Please check your network connection and consult your ISP. Select this option to enter the DNS (Domain Name Server: Server) address manually. This option is available, enter it. Use the following DNS Select this option if you are not clear, please consult your ISP. ...
...Dynamic IP Status Status: Displays the status of your ISP even with a normal network connection. z "Connected" indicates that the IP address has been manually released or the request of the Router gets no response from your ISP if this problem remains. -17- z "Disconnected" indicates that the Router... ISP. Please check your network connection and consult your ISP. Select this option to enter the DNS (Domain Name Server: Server) address manually. This option is available, enter it. Use the following DNS Select this option if you are not clear, please consult your ISP. ...
TL-ER6120 User Guide
Page 25
... Active mode according to your ISP's Secondary DNS. MTU: MTU (Maximum Transmission Unit) is provided by the physical network. It is recommended to manually activate or terminate the Internet connection by your ISP's Primary DNS. Enter the ISP address provided by default. Service Name: Optional. It's null...null by your ISP. Enter the IP address of your ISP. Secondary Connection: Here allows you set in the range of 576-1492. z Manual: Select this option to keep the default value if no other MTU value is the maximum data unit transmitted by your ISP. z Always-on:...
... Active mode according to your ISP's Secondary DNS. MTU: MTU (Maximum Transmission Unit) is provided by the physical network. It is recommended to manually activate or terminate the Internet connection by your ISP's Primary DNS. Enter the ISP address provided by default. Service Name: Optional. It's null...null by your ISP. Enter the IP address of your ISP. Secondary Connection: Here allows you set in the range of 576-1492. z Manual: Select this option to keep the default value if no other MTU value is the maximum data unit transmitted by your ISP. z Always-on:...
TL-ER6120 User Guide
Page 26
... the bandwidth for transmitting packets on the port. ¾ PPPoE Status Status: Displays the status of PPPoE connection. z "Connected" indicates that the connection has been manually terminated or the request of WAN port is obtaining the IP parameters from your ISP. Dynamic IP and Static IP connection types are correct and...
... the bandwidth for transmitting packets on the port. ¾ PPPoE Status Status: Displays the status of PPPoE connection. z "Connected" indicates that the connection has been manually terminated or the request of WAN port is obtaining the IP parameters from your ISP. Dynamic IP and Static IP connection types are correct and...
TL-ER6120 User Guide
Page 29
...It can be re-established automatically when it is provided by your ISP. The connection can select the proper Active Mode according to manually activate or terminate the Internet connection by the physical network. IP Address: If Static IP is displayed. If Dynamic IP is selected...obtained is selected, configure the IP address of WAN port. MTU: MTU (Maximum Transmission Unit) is selected, configure the default gateway. z Manual: Select this option to configure the secondary connection. Default Gateway: If Static IP is the maximum data unit transmitted by the or button. ...
...It can be re-established automatically when it is provided by your ISP. The connection can select the proper Active Mode according to manually activate or terminate the Internet connection by the physical network. IP Address: If Static IP is displayed. If Dynamic IP is selected...obtained is selected, configure the IP address of WAN port. MTU: MTU (Maximum Transmission Unit) is selected, configure the default gateway. z Manual: Select this option to configure the secondary connection. Default Gateway: If Static IP is the maximum data unit transmitted by the or button. ...
TL-ER6120 User Guide
Page 30
Primary If Static IP is not applied. Upstream Bandwidth: Specify the bandwidth for receiving packets on the port. z "Disconnected" indicates that the connection has been manually terminated or the request of your ISP's Secondary DNS. 5) PPTP If your ISP (Internet Service Provider) has provided the account information for the PPTP connection, ...
Primary If Static IP is not applied. Upstream Bandwidth: Specify the bandwidth for receiving packets on the port. z "Disconnected" indicates that the connection has been manually terminated or the request of your ISP's Secondary DNS. 5) PPTP If your ISP (Internet Service Provider) has provided the account information for the PPTP connection, ...
TL-ER6120 User Guide
Page 32
... keep the connection always on time. Enter the Server IP provided by your ISP. MTU (Maximum Transmission Unit) is -27- z Manual: Select this option to configure the secondary connection. If Dynamic IP is selected, the obtained default gateway is the maximum data unit transmitted... by the physical network. The connection can select the proper Active mode according to manually activate or terminate the Internet connection by the or button. Enter the Password provided by your ISP. Account Name: Password: Server IP...
... keep the connection always on time. Enter the Server IP provided by your ISP. MTU (Maximum Transmission Unit) is -27- z Manual: Select this option to configure the secondary connection. If Dynamic IP is selected, the obtained default gateway is the maximum data unit transmitted... by the physical network. The connection can select the proper Active mode according to manually activate or terminate the Internet connection by the or button. Enter the Password provided by your ISP. Account Name: Password: Server IP...
TL-ER6120 User Guide
Page 33
... and your ISP. z "Disconnected" indicates that the Router has successfully obtained the IP parameters from your ISP. displayed. z "Connected" indicates that the connection has been manually terminated or the request of your ISP if this problem remains. Consult your ISP's Primary DNS. Primary DNS: Displays the IP address of the Router...
... and your ISP. z "Disconnected" indicates that the Router has successfully obtained the IP parameters from your ISP. displayed. z "Connected" indicates that the connection has been manually terminated or the request of your ISP if this problem remains. Consult your ISP's Primary DNS. Primary DNS: Displays the IP address of the Router...
TL-ER6120 User Guide
Page 35
...select the proper Active mode according to keep the connection always on : Select this option to your ISP if this option to manually activate or terminate the Internet connection by the physical network. Consult your need. Please ensure that the BigPond connection type is connected... well. z "Connected" indicates that the connection has been manually terminated or the request of 576-1500. z "Disconnected" indicates that the Router has successfully obtained the IP parameters from your ISP...
...select the proper Active mode according to keep the connection always on : Select this option to your ISP if this option to manually activate or terminate the Internet connection by the physical network. Consult your need. Please ensure that the BigPond connection type is connected... well. z "Connected" indicates that the connection has been manually terminated or the request of 576-1500. z "Disconnected" indicates that the Router has successfully obtained the IP parameters from your ISP...
TL-ER6120 User Guide
Page 70
... to send network traffic. Commonly used in a network along with the network topology automatically. The administrator should modify the static route information manually as long as the network topology or link status is simple, efficient, and reliable. Number: Enter the Number of the protocol in the drop-down list of selecting optimized...
... to send network traffic. Commonly used in a network along with the network topology automatically. The administrator should modify the static route information manually as long as the network topology or link status is simple, efficient, and reliable. Number: Enter the Number of the protocol in the drop-down list of selecting optimized...
TL-ER6120 User Guide
Page 78
Please add entries manually on 3.4.1.1 IP-MAC Binding. 3.4.1.3 ARP List On this page, the IP-MAC information of the hosts which communicated with the Router recently will be saved ...
Please add entries manually on 3.4.1.1 IP-MAC Binding. 3.4.1.3 ARP List On this page, the IP-MAC information of the hosts which communicated with the Router recently will be saved ...
TL-ER6120 User Guide
Page 96
.... With PFS feature, IKE negotiates to four IPsec Proposals can be selected on IKE mode. Specify the IKE policy. host. z Manual: All settings (including the keys) for the VPN tunnel are manually input and no policy selection, add new policy on the remote network are covered by this policy. It's formed by...
.... With PFS feature, IKE negotiates to four IPsec Proposals can be selected on IKE mode. Specify the IKE policy. host. z Manual: All settings (including the keys) for the VPN tunnel are manually input and no policy selection, add new policy on the remote network are covered by this policy. It's formed by...
TL-ER6120 User Guide
Page 97
... in this case, the communication secrecy is used in the corresponding IPsec Proposal. Incoming SPI: Specify the Incoming SPI (Security Parameter Index) manually. Status: Activate or inactivate the entry. The inbound key here must match the outbound ESP authentication key at the other end of the...outbound AH authentication key at the other end of the tunnel, and vice versa. AH Authentication Specify the inbound AH Authentication Key manually if AH Key-In: protocol is threatened. The Incoming SPI here must match the outbound ESP encryption key at the other end...
... in this case, the communication secrecy is used in the corresponding IPsec Proposal. Incoming SPI: Specify the Incoming SPI (Security Parameter Index) manually. Status: Activate or inactivate the entry. The inbound key here must match the outbound ESP authentication key at the other end of the...outbound AH authentication key at the other end of the tunnel, and vice versa. AH Authentication Specify the inbound AH Authentication Key manually if AH Key-In: protocol is threatened. The Incoming SPI here must match the outbound ESP encryption key at the other end...
TL-ER6120 User Guide
Page 98
...authentication key at the other end of IPsec Policies and edit them by the action buttons. ESP Encryption Specify the outbound ESP Encryption Key manually if Key-Out: ESP protocol is used in the corresponding IPsec Proposal. It is used in Figure 3-59 indicates: this is an ...IPsec Policy IPsec In this table, you can view the information of the tunnel, and vice versa. AH Authentication Specify the outbound AH Authentication Key manually if Key-Out: AH protocol is enabled. Tips: ● 0.0.0.0.0/32 indicates all IP addresses. ● Refer to load the following page. -...
...authentication key at the other end of IPsec Policies and edit them by the action buttons. ESP Encryption Specify the outbound ESP Encryption Key manually if Key-Out: ESP protocol is used in the corresponding IPsec Proposal. It is used in Figure 3-59 indicates: this is an ...IPsec Policy IPsec In this table, you can view the information of the tunnel, and vice versa. AH Authentication Specify the outbound AH Authentication Key manually if Key-Out: AH protocol is enabled. Tips: ● 0.0.0.0.0/32 indicates all IP addresses. ● Refer to load the following page. -...
TL-ER6120 User Guide
Page 110
... The following page. Only from the pull-down list. To keep the connection always on to the MAC address of its first login automatically. z Manual: Select this option to the server. Options include: z Disable: Select this option to bind the account to bind with this screen: ¾ ... buttons. 3.6.1.4 Exceptional IP When the Dial-up Access Only function is 0 by default. ¾ List of the Host to a MAC address manually. Enter the MAC address of Account In this option to bind the account to the server. If Enable Advanced Account Features is not selected, the...
... The following page. Only from the pull-down list. To keep the connection always on to the MAC address of its first login automatically. z Manual: Select this option to the server. Options include: z Disable: Select this option to bind the account to bind with this screen: ¾ ... buttons. 3.6.1.4 Exceptional IP When the Dial-up Access Only function is 0 by default. ¾ List of the Host to a MAC address manually. Enter the MAC address of Account In this option to bind the account to the server. If Enable Advanced Account Features is not selected, the...
TL-ER6120 User Guide
Page 129
...the results will be detected according to load the following items are displayed on the result of destination automatically. Mode: Detect automatically or Manually. When Online Detection is inactive, WAN status will select the interface of both PING and DNS Lookup. Choose the menu Maintenance→... Online Detection is active, WAN status will be selected as destination for testing, if Auto is selected, the Router will be displayed in Manual mode. 0.0.0.0 means PING detection is online or not. In Auto mode, gateway will be detected. Ping: Enter the destination IP for ...
...the results will be detected according to load the following items are displayed on the result of destination automatically. Mode: Detect automatically or Manually. When Online Detection is inactive, WAN status will select the interface of both PING and DNS Lookup. Choose the menu Maintenance→... Online Detection is active, WAN status will be selected as destination for testing, if Auto is selected, the Router will be displayed in Manual mode. 0.0.0.0 means PING detection is online or not. In Auto mode, gateway will be detected. Ping: Enter the destination IP for ...
TL-ER6120 User Guide
Page 130
... port. Figure 3-88 Time The following page. On this screen: ¾ Current Time System Time: Displays the current date and time of DNS server in Manual mode. 0.0.0.0 means DNS Lookup is disabled. Time Zone: Displays the current time zone of time capturing -125- Displays whether the Online Detection is running. DNS...
... port. Figure 3-88 Time The following page. On this screen: ¾ Current Time System Time: Displays the current date and time of DNS server in Manual mode. 0.0.0.0 means DNS Lookup is disabled. Time Zone: Displays the current time zone of time capturing -125- Displays whether the Online Detection is running. DNS...
TL-ER6120 User Guide
Page 131
... displays the system log information in log buffer. You can configure the time zone and the IP Address for the NTP Server. Get GMT: Manual: Synchronize PC'S Clock: with When this option is selected, you can record, classify and manage the system information effectively. Note: 1. The... time will get GMT automatically if it has connected to the firewall software of Router can set the date and time manually. With this option selected, the administrator PC's clock is restarted. The Router will be used properly, please add an entry with the same...
... displays the system log information in log buffer. You can configure the time zone and the IP Address for the NTP Server. Get GMT: Manual: Synchronize PC'S Clock: with When this option is selected, you can record, classify and manage the system information effectively. Note: 1. The... time will get GMT automatically if it has connected to the firewall software of Router can set the date and time manually. With this option selected, the administrator PC's clock is restarted. The Router will be used properly, please add an entry with the same...