Home

TP-Link TD-W8960N User's Manual

1. Parental Control Quality of Service Bandwidth Control Routing Default Gateway RIP Figure 4 51 To add static routing entries 1 Click the Add button in Figure 4 51 and you will see the screen as shown in Figure 4 52 Device Info Quick Setup Routing Static Route Add Advanced Setup Layer2 Interface Enter the destination network address subnet mask gateway AND OR available WAN interface then click SaverApply to add the entry to the routing table WAN Service Bee Cece IP Version IPv4 v LAN um Destination IP address prefix length 210 1T 155 203 NAT Security Interface LAN brO v Parental Control Gateway IP Address 255 255 255 0 Quality of Service optional metric number should be greater than or equal to zero Bandwidth Control Metric Routing Default Gateway Save Apply RIP Figure 4 52 2 Enter the following data gt P Version Select the version of IP 47 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO Destination IP Address The Destination IP Address is the address of the network or host that you want to assign to a static route gt Interface Select the Interface name in the text box or else the default Use Interface will be adopted for the Static Route Gateway IP Address f you select the IPoE or IPoA mode for Interface the screen above will display this item you should type the Gateway addr
2. sseeeseseseeeeneeee nne nnn 12 Mall Feature S uii ida t oco diu dod E das tactu e pn ut UE LES PMO dcos mtm Wide The Front Pale siccis coirleXec aub ag crabe pid ola an mpalidtalee s atiasue is num dori as 1 3 2 The Back Pan T Chapter 2 Connecting the Router 2 1 System Requirements ccccecccsecceececeseecececeeeeeeeeseeeseaeeseeeeseeeseeeees 2 2 Installation Environment Requirements sssuse 2 3 Connecting the Router eseessesssssssseeseee nennen nnn nns Chapter 3 Quick Installation Guide 23 1 GContfig ring the PG uite as dts oa gue bee uuu estatus totae Ped eua 32 Quick InstallaHol GUIE iio ton tud qu DE teo SEL ERU Mediceo tend er ZAMBIE es C te enter saa teh eae tet ieee an east 2 3 QUICK Selipac uana ue eA AEE s urba US AA Advanced Selpsscen ponen ones nete o dual ee eR a Rr 4 4 41 UAV raise EI SET ace eee cmos Be RIN IVC reas stuns eee ia cigs cen epe Sut at ean E mn tum oe ececmeraerene Bed IMAC COW arcae sstaa cue E N tut di tUe dE mm a QT GEN E LE P NA pL 2d Mie eli d 4 7 Parental COM Ol sinet rptu buds Diod Role a taa tu kd i mcMERU MEE 4 4 9 Bandwidth Confolens re Donc adeunda ve Dita eu ifa ttd 25 42 10 ROUMO onerati D dad uf hat eade Di Edu o ava
3. A protocol that uses an authentication server to control network access RJ45 Registered Jack 45 An Ethernet connector that holds up to eight wires Router A networking device that connects multiple networks together RPC Remote Procedure Calls RPC is a powerful technique for constructing distributed client server based applications It is based on extending the notion of convention or local procedure calling so that the called procedure need not exist in the same address space as the calling procedure The two processes may be on the same system or they may be on different systems with a network connecting them By using RPC programmers of distributed applications avoid the details of the interface with the network The transport independence of RPC isolates the application from the physical and logical elements of the data communications mechanism and allows the application to use a variety of transports Server Any computer whose function in a network is to provide user access to files printing communications and other services SOHO Small Office Home Office Market segment of professionals who work at home or in small offices SSID A Service Set Identification is a thirty two character maximum alphanumeric key identifying a wireless local area network For the wireless devices in a network to communicate with each other all devices must be configured with the same SSID This is typically the configuration parame
4. Enable IGMP Multicast Proxy IGMP Internet Group Management Protocol is used to manage multicasting on TCP IP networks Some ISPs use IGMP to perform remote configuration for client devices such as the Router The default value is disabled and if you are not sure please contact your ISP or just leave it C1 H E s J d d e Select a preferred wan interface as the system default gateway in Figure 4 11 and click Next Device Info Routing Default Gateway Advanced Setup Layer2 Interface E Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the higest WAN Service and the last one the lowest priority if the WAN interface is connected Priority order can be changed by removing all and adding them back in again MAC Clone Selected Default Gateway Interfaces Available Routed WAN Interfaces gt gt Parental Control Quality of Service Bandwidth Control wn Figure 4 11 Configure the DNS Server Addresses on the screen below and click Next Oo 23 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI Device Info Quick Setup DNS Server Configuration Advanced Setup Layer2 Interface Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single PVC with
5. Open Ports A maximum 32 entries can beconfigured LAN ed Trigger Open Virtual Servers RR i m A Application Name Port Range Port Range WAN Interface Status Enable Disable Edit Remove Protocol Protocol Start End Stat End DMZ Host ALG t Security Parental Control Figure 4 26 gt Port Triggering Table The table indicates the information about the Port Triggering entries e Application Name This is the name of the Port Triggering It is exclusive and must be filled e Trigger It includes the Protocol and the Start and End value of the Trigger Ports e Open It includes the Protocol and the Start and End value of the Open Ports e WAN Interface The WAN Service Interface setting the Port Triggering gt Add Click the button to add a new entry gt Remove Select the check box in the table shown in Figure 4 26 and then click the Remove button then the corresponding entry will be deleted in the table To add a new Port Triggering 1 Click the Add button in Figure 4 26 and then you will see the new Port Triggering in the next screen as shown in Figure 4 27 Device Info Quick Setup NAT Port Triggering Advanced Setup Layer2 Interface E Some applications such as games video conferencing remote access applications and others require that specific ports in the Router s firewall be opened for access by the WAN Service applications You can configure the port settings from this screen by selec
6. you can Configure ATM interfaces on the screen below 18 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO Davice infa Quick Setup DSL ATM Interface Configuration Advanced Sotup Layer Inter nce Choose Add or Remove bo configure DSL ATM interfaces ETH Interface Interlace Vpi Vel Link Type Encapsulation Category Peak Cell Rate Sarstainable Coll Rate Max Bust Size Conn Mode IP Oos Sched Aly Queue Weight Group Precedence Remove WAN Sonic MAC Clone atmo 14 Eun LLC Wet MVianMiumMoade Enhet SP L1 LAM alm l 33 Eq LLC 1R VianMuxade Enabled SP tHAI am 25 BoA LLC UR VianMuxMode Enabled SP C Security 3 1 1 i i Parental Contre atm i BoA LLC JEH VianMuxMode Enabled SP L1 Qu ality ol Service lm5 B Bi Fok LLC URA VianMuxade Enabled EP ia TORRENT EMIT ame 0 m0 EBA LLC YER VianMuxMede Enabled SP o Routing atma 8 35 EoA LLC VaR VianMuxMode Enabled SP E DNS DSL UPnP Inierlace Grouping Add Renovo AM Remove Figure 4 2 gt Remove Select the check box in the table on the screen above and then click the Remove button the corresponding interface will be deleted in the table Cf Note If the interface is used by the configuration of the 4 4 2 WAN Service you need to remove the corresponding WAN Service entry first before you can remove it here Add Click the button and you can add a new interface in the next screen Device Info
7. Device Info QuickSetup Access Time Restriction Advanced Setup Layer2 Interface Amaximum 16 entries can beconfigured WAN Service MAC Clone F Days Time LAN Username MAC Status Enable Disable Edit Remove ANAT Mon Tue Wed Thu Fri Sat Sun Start Stop NAT Security Parental Control Time Restriction Figure 4 35 4 4 7 1 Time Restriction This feature allows you add time of day restriction to a special LAN device connected to the Router Device Info Quick Setup Access Time Restriction Advanced Setup Layer2 Interface a aae A maximum 16 entries can beconfigured WAN Service MAC Clone D Ti ays ime LAN Username MAC Status Enable Disable Edit Remove NAT Mon Tue Wed Thu Fri Sat Sun Start Stop COPETENBSES i child 1 00 11 22 33 44 CC x x x 220 ex 18 00 21 00 Enabled go Parental Control URL Filter Enable All Select All Figure 4 36 To add a Time Restriction entry 1 Click the Add button in Figure 4 36 and then you will see the next screen as shown in Figure 4 37 39 TD W8960N BRIO E TTE CST PAN EST RM e Te T0 mm cole E CT mm UET T ME CTTO Device Info Quick Setup Access Time Restriction Advanced Setup This page adds time of day restriction to a special LAN device connected to the Router The Browser s MAC Address automatically displays the MAC address ofthe LAN device WAN Service where the br
8. 003 Class B specifications Cet appareil num rique de la classe B est conforme la norme NMB 003 du Canada This device complies with RSS 210 of Industry Canada This Class B device meets all the requirements of the Canadian interference causing equipment regulations Cet appareil num rique de la Classe B respecte toutes les exigences du R glement sur le mat riel brouilleur du Canada Korea Warning Statements dip mauu SSF ABSA Ese Ws NCC Notice AM Tne tS ZR E TERE Yu Fuss ey HE Bs IK X Bu SE SH tse E LEE BTA HE o RODE SR re bie EAA SIR KER PE MATA MORN A DUE ZB AR THEIR AT SHIES EH Ha i JK Be DLE ESRC MRR ROB TR RN E WEARS SE TUA fH Bk Le BEE A Be OCH DC TE UE Ai PE o IIpoaykt ceptTudikoBpaHo 3riiHo c mnpaBH uaMH cHcredH YkpCEIPO Ha BIUIIOBI HiCTb BHMOTaAM HODMaTHBHHX JIOKyMeHTIB Ta BHMOT4M IO Ilepe ibaueHi YHHHHMMH 3aKOHO IABHHMH aKTAMH YkKpa nn Safety Information When product has power button the power button is one of the way to shut off the product when there is no power button the only way to completely shut off power is to disconnect the product or the power adapter from the power source e Don t disassemble the product or make repairs yourself You run the risk of electric shock and voiding the limited warranty If you need service please contact us Avoid water and wet locations This product can be used in the following countries AT BG
9. 1 Available WAN Interfaces O Use the following Static DNS IP address Primary DNS server Secondary DNS server Interface Grouping IPSec Multicast Save Apply Figure 4 55 For PPPoA PPPoE enabled PVC s please select the Obtain DNS info from a WAN interface checkbox this Router will accept automatically the first received DNS assignment from the selected configured WAN interface during the connection establishment For single PVC with IPoA static IPoE protocol please select the Use the following Static DNS IP address checkbox and enter the primary and or optional secondary DNS server IP addresses provided by your ISP Click the Apply Save button to save the new configuration 4 4 11 2 Dynamic DNS Choose Advanced Setup DNS Dynamic DNS you can see the Dynamic DNS screen this screen allows you to configure the Dynamic DNS shown in Figure 4 56 49 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT The Router offers a Dynamic Domain Name System DDNS feature DDNS lets you assign a fixed host and domain name to a dynamic Internet IP Address The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname in any of the many domains allowing your Router to be more easily accessed from various locations on the Internet Device Info Quick Setup Dynamic DNS Advanced Setup Layer2 Interface WAN Service
10. 1 2 3 4 LAN WLAN ADSL Cabling Type LED Power Internet WPS Safety amp Emissions FCC CE Frequency Band 2 4 2 4835GHz 11n up to 300Mbps Automatic Radio Data Rate 11g 54 48 36 24 18 12 9 6Mbps Automatic 11b 11 5 5 2 1Mbps Automatic Frequency Expansion DSSS Direct Sequence Spread Spectrum Modulation DBPSK DQPSK CCK OFDM 16 QAM 64 QAM WEP WPA WPA2 WPA2 PSK WPA PSK 2 0M 62dBm 10 PER 130M 64dBm 10 PER 54M 68dBm 10 PER 11M 85dBm 8 amp PER 6M 88dBm 10 PER 1M 90dBm 8 amp PER Sensitivity PER Environmental and Physical Operating 0 C 40 C 32F 104F Storage 40 C 70C 40T 158T Humidity Operating 10 90 RH Non condensing Storage 5 90 RH Non condensing Temperature 97 TD W8960N BRIO o E TEES CST SYST RM e T T0 mm cole E CT mm DET ME CT Ie Appendix D Glossary 802 11n 802 11n builds upon previous 802 11 standards by adding MIMO multiple input multiple output MIMO uses multiple transmitter and receiver antennas to allow for increased data throughput via spatial multiplexing and increased range by exploiting the spatial diversity perhaps through coding schemes like Alamouti coding The Enhanced Wireless Consortium EWC 3 was formed to help accelerate the IEEE 802 11n development process and promote a technology specification for interoperability of next generation wireless local area networking WLAN products 802 11b The 802 11b standard sp
11. 4 49 4 4 10 1 Default Gateway Choose Advanced Setup Routing Default Gateway you can see the Default Gateway Screen 46 TD W8960N BRIO Te E TEC CST PN STR M e T T0 mm cole E CT mm UE ME CTT To Device Info Quick Setup Routing Default Gateway Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the highest and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing all and adding them back in again Selected Default Gateway Interfaces Available Routed WAN Interfaces Parental Control Quality of Service Bandwidth Control Routing Static Route RIP Save Apply Figure 4 50 4 4 10 2 Static Route Choose Advanced Setup Routing Static Route You can see the Static Route screen this screen allows you to configure the static routes shown in Figure 4 51 A static route is a pre determined path that network information must travel to reach a specific host or network Device Info Quick Setup Routing Static Route Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security A maximum 32 entries can beconfigured IP Version DstlP PrefixLength _ Gateway Interface Metric Status Enable Disable Edit Remove
12. 4 fields Configure WEP Settings 1 Select Shared good from the Network Authentication drop down list The menu will change to offer the appropriate settings 2 Select 64 bit from the WEP Encryption drop down list 66 TD W8960N BRU TA Tide t te PAN BES aie I e To T 0 e M S COT V LT am O T T CIVI le 3 Select 1 from Current Network Key drop down list 4 Type in the password in the Network Key 1 field 5 Click Save Apply to save the new configuration Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management cs Note This page allows you to configure security features of the wireless LAN interface You may setup configuration manually or through Wi Fi Protected Setup VPS WPS Enable WPS Disabled Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encry
13. 88 875465 1300 88TPLINK Email support my tp link com Service time 24hrs 7 days a week Poland Tel 48 0 801 080 618 48 22 7217563 if calls from mobile phone E mail support pl gtp link com Service time Monday to Friday 9 00 AM to 5 00 PM GMT 1 or GMT 2 Daylight Saving Time Except weekends and holidays in Russian Germany Austria Federation Tel 49 1805 875465 German Service Switzerland 49 1805 TPLINK Tel 41 0 848 800998 German Service E mail support ch tp link com Fee 4 8 Rp min depending on rate of different time Service time Monday to Friday 9 00 AM to 6 00 PM GMT 1 or GMT 2 Daylight Saving Time 102 E mail support de tp link com Fee 0 14 EUR min from the German fixed phone network and up to 0 42 EUR min from mobile phone Service time Monday to Friday 9 00 AM to 6 00 PM GMT 1 or GMT 2 Daylight Saving Time in Germany Except bank holidays in Hesse
14. BRIO E TTC CST SY EST RM e Te T0 LE cole E CT mm DET T ME CT Ie 1 3 Panel Layout 1 3 1 The Front Panel The Router s LEDs are located on the front panel Figure 1 1 The Router s LEDs are located on the front panel View from left to right LED Explanation The modem router is powered on Power Off The modem router is off Please ensure that the power adapter is connected correctly ADSL line is synchronized and ready to use SP ADSL The ADSL negotiation is in progress Off ADSL synchronization fails Please refer to Note 1 for troubleshooting The network is available with a successful Internet connection There is data being transmitted or received via the Internet OfInternet There is no successful Internet connection or the modem router is A lm in Bridge mode Please refer to Note 2 for troubleshooting On Wireless i is enabled but no data is being transmitted WLAN e D router is sending or receiving data over the wireless Off Wireless function is disabled only wireless device has been successfully added to the network by WPS function WPS handshaking is in process and will continue for about 2 minutes Please press the WPS button on other wireless devices that you want to add to the network while the LED is flashing The WPS function is disabled or the wireless device fails to be added Off to the network in 2 minutes after WPS function is enabled Please refer to 4 5 2 1 WPS Setup for mo
15. BY CA jCZ DE DK EE ES FL fR eB GR fhu pE p PRU se f Rua 1 1 1 TP LINK TP LINK TECHNOLOGIES CO LTD DECLARATION OF CONFORMITY For the following equipment Product Description 300Mbps Wireless N ADSL2 Modem Router Model No TD W8960N Trademark TP LINK We declare under our own responsibility that the above products satisfy all the technical regulations applicable to the product within the scope of Council Directives Directives 1999 5 EC Directives 2004 108 EC Directives 2006 95 EC Directives 1999 519 EC Directives 2011 65 EU The above product is in conformity with the following standards or other normative documents ETSI EN 300 328 V1 7 1 2006 ETSI EN 301 489 1 V1 8 1 2008 amp ETSI EN 301 489 17 V2 1 1 2009 EN 55022 2010 EN 55024 2010 EN 61000 3 2 2006 A1 2009 A2 2009 EN 61000 3 3 2008 EN60950 1 2006 A11 2009 A1 2010 A12 2011 EN62311 2008 The product carries the CE Mark C 1588 Person is responsible for marking this declaration Yang Hongliang Product Manager of International Business Date of issue 2012 TP LINK TECHNOLOGIES CO LTD Building 24 floors 1 3 4 5 and 28 floors 1 4 Central Science and Technology Park Shennan Rd Nanshan Shenzhen China CONTENTS Package Contents coepit qe ovato eade sueta d eva uU rEulde RU SR EF TEEE Chapter 1 Product Overview eere eere nnn 1 1 Overview of the Router
16. Connect using BE Realtek RHTL8133 Family PCI Fast Eth Configure This connection uses the following items 1a aos Facket Scheduler w Metwark Mon Double click Internet T Protocol TCP IP s Description Transmission Control Protacal Intermet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected Notify me when this connection has limited or na connectivity Internet Protocol TCP IP Properties EE QE General Tou can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate P settings Select Obtain an IP G Obtain an IP address automatically address automatically OO Use the following IP address IP address Subnet mask Default gateway Select Obtain DNS server Obtain ONS server address automatically address automatically C5 Use the following ONS server addresses Preferred ONS server ee tg Alternate DAS server SaaS Click OK 91 TD W8960N BRIO Te E TTE CST PN STR e T T0 mm cole CT mm DET ME CTT To 2d Local Area Connection Properties General Authentication Advanced Connect using BB Realtek RTLS128 Family PCI Fast Ett This connection uses the following tems Jal aos Packet Scheduler tH Network Monitor
17. Connection LAN and then select Properties TD W8960N BRIO E TTC CST PN STR e T T0 mm cole E CT mm DET ME CTT To Network Connections Fie Edit View Favorites Tools Advanced Help Q Bacl P zi J2 Search Es Folders Ei Address e Network Connections LAN or High Speed Internet ae uev pH P Network Tasks Create a new connection E AE E arco Disable Set up a home or small Statue office network m Change Windows Firewall settings Qf Disable this network device Create Shortcut EN Repair this connection Jelete mij Rename this connection Rename amp O view status of this connection Change settings of this connection Repair Bridge Connections Other Places g Control Panel VJ My Network Places My Documents d My Computer Figure 3 2 Step 3 Select General tab highlight Internet Protocol TCP IP and then click the Properties button t Local Area Connection Properties General Authentication Advanced Connect using BE Realtek RTL8133 Family PC Fast Et This connection uses the following tems Chent For Microsoft Networks File and Printer Sharing For Microsoft Networks BI QoS Packet Schedule unica CC Spates Description Transmission Control Pratacal Intermet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected Notify me when this co
18. Fj DNS atm6 1 br 0 0 200 Bridge N A N A Enabled Disabled Disabled g DSL ppp0 1 pppoe D 8 35 PPPoE NIA N A Enabled Enabled Enabled o UPnP interface Groupiiia ppp1 2 pppoe D 8 35 PPPoE NIA N A Enabled Enabled Enabled o IPSec Multicast Wireless Remove All Diagnostics Management Figure 4 14 gt Remove All Click Remove All then all the interface will be deleted in the table gt Remove Select the check box in the table above and then click Remove the corresponding interface will be deleted in the table 4 4 2 2 ATM EoA IPoE If your ISP provides an IPoE connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new AIM interface and select EoA option for DSL Link Type 4 4 1 1 ATM interface 2 Click the Add button on the screen as shown Figure 4 7 Select WAN Service Interface over ATM PVC on the next screen as shown Figure 4 8 3 If your ISP provides an IPoE connection select IPoE option for the WAN service type on the screen as shown Figure 4 9 and click Next button to continue 4 Enter parameters in the following blanks to configure the WAN IP Address and click Next Device Info Quick Setup WAN IP Settings Advanced Setup Layer2 Interface z Enter information provided to you by your ISP to configure the WAN IP settings WAN Service Notice If Obtain an IP address automatically is chosen DHCP will be enable
19. IPoA or static IPoE WAN Service protocol is configured Static DNS server IP addresses must be entered MAC Clone DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used according to the priority with the first being the higest and the TU last one the lowest priority if the WAN interface is connected Priority order can be changed by removing all and adding them back in again NAT Select DNS Server Interface from available WAN interfaces Selected DNS Server Interfaces Available WAN Interfaces Security pppl 2 Parental Control pppo 1 Quality of Service Bandwidth Control Routing DNS DSL UPnP O Use the following Static DNS IP address Interface Grouping Primary DNS server IPSec Secondary DNS server Multicast Wireless Management Figure 4 12 gt Select DNS Server Interface from available WAN Interfaces You can select this option to automatically get DNS server information from the selected WAN interface Usethe following Static DNS IP Address You can select this option to manually enter the primary and or optional secondary DNS server IP addresses provided by your ISP e Note If only single PVC with IPoA is configured you must enter static DNS server IP addresses 7 On the next screen you will see the detailed settings you ve made Please click the Save Apply button to save these settings Device In
20. MAC Clone LAN The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname in any ofthe many domains allowing your Broadband Router to be more easily accessed from various locations on the Internet Choose Add or Remove to configure Dynamic DNS NAT Hostname Username Service Interface Remove Security Alsbot homeunix net ailisa dyndns pppo 4 Fj Parental Control Quality of Service Bandwidth Control Routing DNS DNS Server Figure 4 56 To add a DDNS entry 1 Click the Add button pop up Figure 4 56 and then you will set the DDNS in the next screen shown in Figure 4 57 Device Info Quick Setup Add dynamic DNS Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security This page allows you to add a Dynamic DNS address from DynDNS org or TZO or No IP D DNS provider DynDNS org v Hostname Alsbot homeunix net Interface pppoe_0_8_35 ppp0 1 v Parental Control Quality of Service DynDNS Settings Bandwidth Control Username ailisa Routing DNS DNS Server Password eeceee Save Apply DSL Figure 4 57 2 Select D DNS provider in the drop down list 3 Enter the Hostname of the DNS Server and select the corresponding Interface for the DDNS you can leave it default 4 Type the User Name and Password for your DDNS account 5 Click Save Apply to save the entry and then you will see your settings as show
21. Save when done Network Authentication WPA Personal better recommended v Wireless Network Key 9900000000 Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters WPA Group Rekey Interval 30 optional WPA Encryption AES v WEP Encryption Disabled Apply Save Figure 4 82 cf Note If you click the option Click here to display the Figure 4 83 will pop up and it shows the password you have set In addition it won t show the blank characters in both ends of the password phrase F http 192 168 1 253 wIsecrefresh wl wlRefresh B E O K 1234567890 L Internet Figure 4 83 4 WPA2 Enterprise To configure WPA2 Enterprise settings select the WPA2 Enterprise option from the drop down list The menu will change to offer the appropriate settings The steps of these settings are similar to WPA settings 70 TD W8960N BRUM TA Tide t te AN BES ae I eT T 0 M S COT LT mm O T T CIVI To Wireless Basic Security WPS MAC Filter Enable WPS Wireless Bridge Advanced Station Info Diagnostics Manual Setup AP Management In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether
22. TKIP Configure WPA settings 1 Select WPA from the Network Authentication drop down list The menu will change to offer the appropriate settings Change the WPA Group Rekey Interval as desired Type in the IP address of the RADIUS server used in the RADIUS Server IP Address field Change the RADIUS Port if necessary Type in the password in the RADIUS Key field Use the default setting AES of WPA Encryption O6 49 oS 9 T9 Click Save Apply to save the new configuration 68 TD W8960N BRUM TTA Tide t te PAN BES eae I eT T 0 M S COT V LT mm O T TE CTT iTo Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Wireless Security This page allows you to configure security features of the wireless LAN interface You may setup configuration manually or through Wi Fi Protected Setup vPS WPS Enable WPS Disabled Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 5
23. User Name Please accept this User Name information from your ISP ACS Password Please accept the Password information from your ISP list to perform this function Connection Request User Name Type the Connection Request User Name set it yourself Connection Request Password Type the Connection Request Password set it yourself Cf Note Select the desired values and click Save Apply to configure the TR 069 client options 4 7 5 Internet Time Choose Management Internet Time you can see the Time settings screen as shown below Here you can configure the time of the Router 83 TD W8960N BRIO E TTC CST PN STR e T T0 mm cole E CT mm DET ME CTT To Device Info Quick Setup Time settings Advanced Setup Wireless Diagnostics This page allows you to the modem s time configuration Management Date Time Thu Jan 1 00 38 50 1970 Date Time on your PC Wed May 8 15 53 27 2012 UP Synchronize with PC System Log Setup Adsl Modem Router s Date Time SNMP Agent Date YMD 1970 01 01 TR 069 Client z Time H M S 00 38 50 Internet Time Access Control Upgrade Firmware Reboot C Automatically synchronize with Internet time servers Save Apply Figure 4 107 4 7 6 Access Control Choose Management Access Control gt Password you can see the screen shown in Figure 4 108 which allows you to change the factory default password of the Router The default password is the sam
24. a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication WPA2 Enterprise better v WPA2 Preauthentication Network Re auth Interval optional WPA Group Rekey Interval optional RADIUS Server IP Address RADIUS Port 1 65535 RADIUS Key optional You can enter ASCII characters between 0 and 63 characters or 0 to 64 Hexadecimal characters WPA Encryption AES WEP Encryption Disabled Figure 4 84 WPA2 Preauthentication Select Enable from the drop down list Stations will authenticate with the AP during the scanning process and once association is required the station has been already authenticated Network Re auth Interval Enter a value in seconds as the frequency interval to enable periodic Network Re authentication function while leave it blank or enter O to disable it 5b WPA2 Personal To configure WPA2 Personal settings select the WPA2 Personal option from the drop down list The menu will change to offer the appropriate settings WP
25. atm3 1 LAN3 atm5 1 LANAANAM atm6 1 LANO ppp0 1 Figure 4 60 To support this feature you must create mapping groups with appropriate LAN and WAN interfaces using the Add button The Remove button will remove the grouping and add the ungrouped interfaces to the Default group Only the default group has IP interface To create a new interface group Click the Add button You can add a new interface group in the next screen Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing wow werte e 4 Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management Interface grouping Configuration To create a new interface group 1 Enter the Group name and the group name must be unique and select either 2 dynamic or 3 static below 2 If you like to automatically add LAN clients to a WAN Interface in the new group add the DHCP vendor ID string By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID DHCP option B0 will be denied an IP address from the local DHCP server 3 Select interfaces from the available interface list and add itto the grouped interface list using the arrow buttons to create the required mapping ofthe ports Note that these clients may obtain public IP
26. class e Option 61 IAID IAID Identity Association ID assigns an Identity Association ID to individual interfaces In cases where the device is functioning with a single DHCP client identity it must use value 1 for IAID for all DHCP interactions In cases where the device is functioning with multiple DHCP client identities the values of IAID have to start at 1 for the first identity and be incremented for each subsequent identity For example the device may use IAID value 1 for the first physical interface and value 2 for the second Alternatively the device may use IAID value 1 for the virtual circuit corresponding to the first connection object in the data model and value 2 for the second connection object in the data model e Option 61 DUID Specifies the name of the interface whose link layer address the server is to use as its DUID DHCP Unique Identifier You must enter a value for this parameter or the server will not start When the server starts the DUID is written to the system log e Option 125 The option 125 allows DHCP server to be pre configured with policy for handling classes of devices in a certain way without requiring DHCP server to be able to parse the unique format used in client identifier option gt Use the following IP Address If you are provided with a static IP gateway Address please select this option and then enter the WAN IP Address WAN Subnet Mask and WAN gateway IP Address manually 5 You will see the nex
27. click Clone button to clone your current PC MAC Click Restore Default button to restore the WAN Interface s default MAC Address Cf Note Only the WAN Ports can use MAC Address Clone function All the clone MAC addresses must not be the same with each other 4 4 A LAN Choose Advanced Setup LAN and you will see the LAN screen shown in Figure 4 21 the section allows you to configure the Router s LAN ports settings mire Local Area Network LAN Setup Quick Setup Advanced Setup Layer2 Interface Configure the DSL Modem Router IP Address and Subnet Mask for LAN interface GroupName Default v WAN Service MAC Clone IP Address 192 168 1 1 Subnet Mask 255 255 255 0 Security Parental Control Enable IGMP Snooping Quality of Service Standard Mode Bandwidth Control O Blocking Mode Routing DNS DSL Disable DHCP Server UPnP Enable DHCP Server Start IP Address 192 168 1 100 Interface Grouping End IP Address 192 168 1 200 IPSec SS Leased Time hour 24 1 48 Multicast Static IP Lease List A maximum 32 entries can be configured Wireless MAC Address IP Address Status Enable Disable Edit Remove Diagnostics Enable All Select All Management Enable DHCP Server Relay DHCP Server IP Address Note You have to disable NAT of the WAN connections Or the DHCP Relay may not take effect Configure the second IP Address and Subnet Mask for LAN i
28. feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Push Button PIN Add Enrollee Help Device PIN 49518863 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Open insecurity WEP Encryption Enabled w Encryption Strength 128 bit v Current Network Key 1M Network Key 1 Network Key 2 Network Key 3 Network Key 4 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Figure 4 76 This page allows you to configure security features ofthe wireless LAN interface You may setup configuration manually or through Wi Fi Prot
29. forwards Internet traffic from your local area network DHCP A networking protocol that allows administrators to assign temporary IP addresses to network computers by leasing an IP address to a user for a limited amount of time instead of assigning permanent IP addresses DMZ Demilitarized Zone Removes the Router s firewall protection from one PC allowing it to be seen from the Internet DNS Domain Name Server The IP address of your ISP s server which translates the names of websites into IP addresses Domain A specific name for a network of computers DSL Digital Subscriber Line An always on broadband connection over traditional phone lines Dynamic IP Address A temporary IP address assigned by a DHCP server EAP Extensible Authentication Protocol A general authentication protocol used to control network access Many specific authentication methods work within this framework Encryption Encoding data transmitted in a network Ethernet IEEE standard network protocol that specifies how data is placed on and retrieved from a common transmission medium Firewall A set of related programs located at a network gateway server that protects the resources of a network from users from other networks Gateway A device that interconnects networks with different incompatible communications protocols IEEE 802 11b The IEEE 802 11b standard specifies a wireless networking at 11 Mbps using direct sequence
30. highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips PA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication WPA Enterprise good v WPA Group Rekey Interval n optional RADIUS Server IP Address 0 0 0 0 RADIUS Port 1812 1 65535 RADIUS Key optional You can enter ASCII characters between 0 and 63 characters or 0 to 64 Hexadecimal characters WPA Encryption AES v WEP Encryption Figure 4 79 WPA Group ReKey Interval Enter the Key Renewal period which tells the Router how often it should change encryption keys RADIUS Server IP Address The IP address of the RADIUS server RADIUS Port The port of the RADIUS server The default number is 1812 RADIUS key The password of the RADIUS Server Y VV WV WPA Encryption Select the encryption you want to use TKIP or AES AES is an encryption method stronger than
31. iin beta Gn asia UD inutile LT NB E coe LT EAM P M qa T9 RN a E E TE AER ie Dieta hae ae ioe Bieta etal ala LADEN 51 AAA merac GrouPINg merses RED 52 24 15 IPSO aia E a a ictu Easton essen 53 AA AG Vl dS Dices seiu ii sa pest taro no otto aae ee tan usb tatu abc Quth si ett tap du eh tato natur th v pe tanda Ene EE 56 AO NVIFCIOSS reinn eei xE 57 Ak BASIC e a a a a of A ob oq NET 58 LESSE BREITER TELLE eee 73 AOA VV IRCIGSS BMOGC ding scones M 73 AO Advan EO oni E a a 15 ZR Munt M 76 A IIAGMOSUC S x vieestieetecen cern DL T Pn TT A 7 Managemen RUIT TT a re Eine a a a a a E T1 T 1 2 SY SCCM OG ou 2022 utu tiui a bu atas caboqu uo but ases dama RU ir tsUR Pub E este idasecwapaven 80 ra Ae SNIMEJAdOliluniuu uec IM RM MEME E LM 81 QM TROGIR usns idee asm ome p d NEM UE EIE 82 ALO MG TINGE TANG sitet as ham aw c 83 B00 ACCESS CONT Olaa aaa weaved maa cun astiath nee mau a A 84 ETT XOGATCCRINIMNWARC css them curiae ene m m es 85 Alo esc rr 86 Appendix A FAQ sussnhtesatash es che sudeinu uva eu oa auta ru a rt alten a a oa 87 Appendix B Conriguring the PG eii raneta uianda auia poetas eb sebum aaa 90 Appendix C SDECITICAUONS ossssenssuessxxativiksuu a 97 Appendix D GlossdlV aiidisddin desde decide desadeio dexsute aS 98 Appendix E Technical Support uei
32. need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new AIM interface and select EoA option for DSL Link Type see 4 4 1 1 ATM interface 2 Click the Add button on the screen Figure 4 7 Select WAN Service Interface over ATM PVC on the next screen as shown Figure 4 8 3 Select Bridging option for the WAN service type on the screen as shown Figure 4 9 and click Next button to continue 4 On the screen as shown Figure 4 13 you will see the detailed settings you ve made Please click the Apply Save button to save these settings 4 4 2 4 ATM PPPoA If your ISP provides a PPPoA connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new AIM interface and select PPPoA option for DSL Link Type see 4 4 1 1 ATM interface 2 Click the Add button on the screen Figure 4 7 and the next configuration is similar to PPPoE see section 4 4 2 1 ATM EoA PPPoE The difference is that you don t need to set the PPPoE Service Name and Bridge PPPoE Frames Between WAN and Local Ports on the screen of Figure 4 10 4 4 2 5 ATM IPoA If your ISP provides an IPoA connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new AIM interface and select IPoA option for DSL Link Type see 4 4 1 1 ATM interface 2 Click the Add button on th
33. network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Open insecurity m WEP Encryption Disabled w Apply Save Figure 4 71 cS Note The PIN code of the adapter is always displayed on the WPS configuration screen Step 2 For the configuration of the wireless adapter please choose Enter a PIN into my access point or a registrar in the configuration utility of the WPS as below and click Next 62 TD W8960N BRIO E TTC CST SY EST RM e Te T0 LE cole E CT mm DET T ME CT Ie Im WPS for Wireless Join a Wireless Network WES iz preparing to join your computer to a wireless network Which setup method do you want to use CO Push the button on my access point Enter the FIN 169852888 inta your access point ar external registrar and click Nex Automatically select the network Figure 4 72 amp Note In this example the default PIN code of this adapter is 16952898 as
34. pene dei ceu epe uod vaste naGuUcE Deb ung eaed va dei urgens icio 102 TD W8960N BRIO E TTC CST SY STR e Te T0 LE celui CT mm DET T CTT To Package Contents The following contents should be found in your package One TD W8960N 300Mbps Wireless N ADSL2 Modem Router One power Adapter for TD W8960N 300Mbps Wireless N ADSL2 Modem Router Quick Installation Guide One RJ45 cable Two RJ11 cables One ADSL splitter One Resource CD for TD W8960N 300Mbps Wireless N ADSL2 Modem Router including e This User Guide Y Y NON ON ON WV e Other Helpful Information tS Note Make sure that the package contains the above items If any of the listed items are damaged or missing please contact your distributor TD W8960N BRIO E TTC CST SYST RM e T T0 LE cole E CT UE CTT To Chapter 1 Product Overview Thank you for choosing the TD W8960N 300Mbps Wireless N ADSL2 Modem Router 1 1 Overview of the Router The TD W8960N 300Mbps Wireless N ADSL2 Modem Router integrates 4 port Switch Firewall NAT Router and Wireless AP Powered by 2x2 MIMO technology the Wireless N Router delivers exceptional range and speed which can fully meet the need of Small Office Home Office SOHO networks and the users demanding higher networking performance The TD W8960N 300Mbps Wireless N ADSL2 Modem Router utilizes integrated ADSL2 transceiver and high speed MIPS CPU The Router supports full rate ADSL2 connectivity conforming to the ITU and ANSI
35. specifications In addition to the basic DMT physical layer functions the ADSL2 PHY supports dual latency ADSL2 framing fast and interleaved and the 1 432 ATM Physical Layer The router provides up to 300Mbps wireless connection with other 802 11n wireless clients The incredible speed makes it ideal for handling multiple data streams at the same time which ensures your network stable and smooth The performance of this 802 11n wireless Router will give you the unexpected networking experience at speed 650 faster than 802 11g It is also compatible with all IEEE 802 11g and IEEE 802 11b products With multiple protection measures including SSID broadcast control and wireless LAN 64 128 WEP encryption Wi Fi protected Access WPA2 PSK WPA PSK as well as advanced Firewall protections the TD W8960N 300Mbps Wireless N ADSL2 Modem Router provides complete data privacy The Router provides flexible access control so that parents or network administrators can establish restricted access policies for children or staff It also supports Virtual Server and DMZ host for Port Triggering and then the network administrators can manage and monitor the network in real time with the remote management function Since the Router is compatible with virtually all the major operating systems it is very easy to manage Quick Setup Wizard is supported and detailed instructions are provided step by step in this user guide Before installing the Router ple
36. spread spectrum DSSS technology and operating in the unlicensed radio spectrum at 2 4GHz and WEP encryption for security IEEE 802 11b networks are also referred to as Wi Fi networks IEEE 802 11g Specification for wireless networking at 54 Mbps using direct sequence spread spectrum DSSS technology using OFDM modulation and operating in the unlicensed radio spectrum at 2 4GHz and backward compatibility with IEEE 8021b devices and WEP encryption for security Infrastructure Network An infrastructure network is a group of computers or other devices each with a wireless adapter connected as an IEEE 802 11 wireless LAN In infrastructure mode the wireless devices communicate with each other and to a wired network by first going through an access point An infrastructure wireless network connected to a wired network is referred to as a Basic Service Set BSS A set of two or more BSS in a single network is referred to as an Extended Service Set ESS Infrastructure mode is useful at a corporation scale or when it is necessary to connect the wired and wireless networks IP Address The address used to identify a computer or device on a network IPoA IP and ARP over ATM A protocol that provides extensions to the IP Group for handling IP over ATM flows ISP Internet Service Provider A company that provides access to the Internet 99 TD W8960N BRIO Te E TTC CST SYST RM e T T0 mm S COT TE CT mm UE ME CTT To LAN The
37. the preceding figure shown Method Two Enter the PIN of my Router into the wireless adapter Step 1 Get the Current PIN code generated by the Router as shown below You can click Gen New PIN to get a new PIN code for Router Device Info Quick Setup Wireless Security Advanced Setup Wireless z This page allows you to configure security features ofthe wireless LAN interface Basic You may setup configuration manually or through Wi Fi Protected SetuptWPS Security MAC Filter Wireless Bridge WPS En Enable WPS Enabled v Station Info Diagnostics i Add Client This feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Management Push Button PIN Add Enrollee Device pne uuum D Gen new PIN Help E Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to setto TKIP
38. the same Encryption Algorithm Integrity Algorithm Diffie Hellman Group and Key Life time in both phase1 and phase2 4 4 16 Multicast Choose Advanced Setup Multicast you can configure the IGMP protocol on the screen Device Info Quick Setup IGMP Configuration Advanced Setup Layer2 Interface z Enter IGMP protocol configuration fields if you want modify default values shown below WAN Service Default Version J MAC Clone Query Interval 125 Query Response Interval 10 Last Member Query Interval 10 Security Robustness Value 2 Parental Control z Maximum Multicast Groups 25 Quality of Service Maximum Multicast Data Sources for IGMPv3 1 24 10 Bandwidth Control z Maximum Multicast Group Members 25 Routing A UNS Fast Leave Enable LAN to LAN Intra LAN Multicast Enable a DSL UPnP Interface Grouping Save Apply IPSec Multicast Figure 4 64 Click Apply Save to save your settings 56 4 5 Wireless TD W8960N BRIO Te E IDE CST SYST RM e Te T0 mm cole E CT mm UET T ME CT Ie Choose Wireless there are six submenus to configure Wireless LAN settings Click any of them and you will be able to configure the corresponding function The detailed explanations for each submenu are provided below Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info 4 5 1 Basic Choose Wireless Basic you will s
39. them and you will be able to configure the corresponding function 17 TD W8960N BRIO Te E TEES CST SYST RM e Te T0 mm cole CT mm UE ME CTT To Advanced Setup Layer Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast This Advanced Setup section mainly introduces how to configure the Router for adequate use The detailed explanations for each subsection are provided below Cf Note To completely configure the WAN Interface you need to first select the Layer2 Interface 4 4 1 Layer2 Interface according to the connection ISP provides you and then to select the type of the connection 4 4 2 WAN Service for the further configuration 4 4 1 Layer2 Interface Choose Advanced Setup Layer2 Interface and you can select WAN Service Interface layer2 interface over ATM interface or ETH interface gt ATM Interface Configure the Router to access Internet as an ADSL user ISP provides you VPI Virtual Path Identifier VCI Virtual Channel Identifier settings and the DSL Interface with RJ11 connector Figure 2 1 gt ETH Interface Configure the Router to access Internet as an Ethernet user ISP provides you Broadband Internet Service and the Ethernet Interface with RJ45 connector 4 4 1 1 ATM interface Choose Advanced Setup Layer2 Interface gt ATM interface
40. when the device runs in 11n mode Click Apply Save when done Network Authentication Open insecurity v WEP Encryption Disabled v Apply Save Figure 4 73 TD W8960N BRIO Te E TEC CST SYST RM e Te T0 mm cole E CT mm DET ME CITT Step 2 For the configuration of the wireless adapter please choose Enter a PIN from my access point in the configuration utility of the WPS as below and enter the PIN code of the Router into the field after Access Point PIN Then click Next Ims WPS for Wireless Join a Wireless Network WPS iz preparing to join your computer Eo a wireless network Which setup method do you want to use Push the button on my access point 2 Enter a PIN into my access point or a registrar Enter the PIN fram your access point below and click Next to continue Access Point PIH 2345670 D Automatically select the network Figure 4 74 4 5 2 2 Manual Setup AP Follow the instructions below to configure security features of the wireless LAN interface manually You can set the network authentication method select data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength 64 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Managemen
41. 02 1p priority v Class non vlan packets egress to an untagged vlanmux interface will be tagged with VID 0 and the class rule p hits Class vlan packets egress to an untagged vlanmux interface will have the packet p bits re marked by the class rule p bits No additional vlan tag is added Class non vlan packets egress to a tagged vlanmux interface will be tagged with the interface VID and the class rule p bits Class vlan packets egress to a tagged vlanmux interface will be additionally tagged with the packet VID and the class rule p bits Figure 4 44 After you specify the condition click Save Apply to save the entry 4 4 9 Bandwidth Control Choose Advanced Setup Bandwidth Control and then you will see the screen as shown in Figure 4 45 This page allows you to enable this function and to configure the value of Total Upstream Downstream Bandwidth VN V WV Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Rules List Routing DNS DSL Bandwidth Control This page allows you to enable or disable Bandwidth Control Only when the box before Enable Bandwidth Control is checked can the following configurations take effect Click Save Apply button to save it Note If Enable checkbox is not selected all Bandwidth Control rules will be disactived If your line type is ADSL make sure that Total Upst
42. 2 WPA and Mixed WPA2 WPA PSK cS Note For most users it is recommended to use the default Wireless LAN Performance settings Any changes made to these settings may adversely affect your wireless network Under certain circumstances changes may benefit performance Carefully consider and evaluate any changes to these wireless settings 1 WEP WEP is a basic encryption method offering two levels of encryption 64 bit and 128 bit encryption To configure the WEP encryption there are two ways e Keep the Network Authentication of Open insecurity and select Enabled from the WEP Encryption drop down list as shown in Figure 4 76 Open insecurity with WEP encryption disable allows any wireless station to associate with the access point e Select Shared good from the Network Authentication drop down list as shown in Figure 4 77 Shared good must enable WEP encryption Network using Open or Shared authentication with WEP encryption only allows stations using the same network key encryption to associate with it Follow the instructions below to configure the Shared Keys 65 TD W8960N BRU o me Tide tt AN BES P M I eT T 0 M S Co TU LT mm O T TE CIVI le Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Add Client This
43. 4 4 15 IPSec Choose Advanced Setup IPSec you can Add Remove or Enable Disable the IPSec tunnel connections on the screen as shown in Figure 4 62 Device Info Quick Setup IPSec Tunnel Mode Connections Advanced Setup Layer2 Interface WAN Service Add remove or enable disable IPSec tunnel connections from this page MAC Clone DPD Dead Peer Detection Caution May Cause Transmission Unstable LAN NAT Connection Name Remote Gateway Local Addresses Remote Addresses Status Enable Disable Edit Remove Security Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Figure 4 62 This section will guide you to configure a VPN tunnel between two TD W8960Ns The topology is as follows 53 TD W8960N BRIO Te E TEC CST PN STR e Te T0 mm a COT T E CT mm DET CITT WAN IP WAN IP 219 134 112 246 219 134 112 247 TD W8960N LAN IP 192 168 1 1 Subnetmask 255 255 255 0 LAN IP 192 168 2 1 Subnetmask 255 255 255 0 IP 192 168 1 100 s Cf Note You could also use other VPN Routers to set VPN tunnels with TD W8960N TD W8960N supports up to 10 VPN tunnels simultaneously Click Add New Connection in Figure 4 62 and then you will enter the screen shown in Figure 4 63 Device Info Quick Setup IPSec Settings Advanced Setup Layer2 Interface WAN Service IPSec Connection Name new connection MAC Cl
44. 4Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips PA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication WPA Enterprise good v WPA Group Rekey Interval 30 optional RADIUS Server IP Address 192 168 1 20 RADIUS Port 1812 1 655535 RADIUS Key 999000000 optional You can enter ASCII characters between 0 and 63 characters or 0 to 64 Hexadecimal characters WPA Encryption WEP Encryption Disabled Figure 4 80 3 WPA Personal WPA Personal requires a shared key and does not use a separate server for authentication PSK keys can be ASCII or Hex type Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management This page allows you to configure security features of the wireless LAN interface You may setup configuration manually or through Wi Fi Protected Setup v PS WPS Enable WPS Enabled wv Add Client This feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Push Button PIN Add Enrollee Help Device PIN 49518863 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security
45. A2 Personal requires a shared key and does not use a separate server for authentication PSK keys can be ASCII or Hex type Wireless Basic WPS Security MAC Filter Enable WPS Enabled vw Wireless Bridge Add Client This feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Advanced Push Button PIN Add Enrollee Station Info Help Diagnostics Device PIN 49518863 Gen new PIN Help Management Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication WPA2 Personal best recommended v Wireless Network Key Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters WPA Group Rekey Interva
46. AP Mode Access Point v Bridge Restrict Enabled v Remote Bridges MAC Address l Save Apply Figure 4 91 e Enabled Scan Select this option to enables wireless bridge restriction and it will scan the environment for APs that exist around the device Only those selected AP will be granted access e Refresh Click this button to scan and display the APs 74 TD W8960N BRIO Te E TTE CST PN STR M e Te T0 mm celui DET ME CITT AP Mode Access Foint v Bridge Restrict Enabled Scan v Remote Bridges MAC Address SSID BSSID TP LINK 341108 00 11 22 34 11 08 TP LINK 334434 00 11 22 33 44 34 TP LINK 4BFABA 90 F5 52 4B F A BA TP LINK 130959 00 04 EB 13 09 69 TP LINK_BF5101 40 15 9F BF 51 01 TP LINK BFB5005 D8 5D 4C BF 60 05 Save Boply Figure 4 92 Cf Note Only Open or Shared authentication method support wireless bridge you should choose Wireless Security to change authentication method to open or shared mode first 4 5 5 Advanced Choose Wireless Advanced you will see the screen of Wireless Advanced settings shown as below rcs Wireless Advanced Advanced Setup 2 This page allows you to configure advanced features ofthe wireless LAN interface You can select a particular channel on which to operate set the fragmentation threshold set the RTS threshold setthe wakeup interval for clients in power save mode setth
47. Advanced Setup screen 16 Device Info Summary WAN Statistics Route ARP DHCP Quick Setup Advanced Setup Wireless Diagnostics Management Cf Note TD W8960N IKiUn TA T tt AN BES P4 M I e To T 0 e M S COT V LT am O T TE CIVI el Device Info Version Info Firmware Version 1 0 1 Build 120417 Rel 52091 Hardware Version TD W8960N V4 0x00000001 System Running time ODay s 00 19 52 LAN Info LANIP Address 192 168 1 1 LAN MAC Address b0 48 7a ce 48 bb ADSL Info Line State Down Line Rate Upstream Kbps 0 Line Rate Downstream Kbps 0 Internet Info Status Down WAN Type ATM WAN Layer2 Interface atm4 8 35 Connection Type PPPoE WAN IP Address 0 0 0 0 Shortcut Click here to view all WAN interface s status and troubleshooting information Figure 4 1 Click the other submenus under the main menu Device Info and you will be able to view the corresponding information about WAN Statistics Route ARP and DHCP 4 3 Quick Setup Please refer to Section 3 2 Quick Installation Guide 4 4 Advanced Setup Choose Advanced Setup there are many submenus under the main menu Among the submenus Layer2 Interface WAN Service LAN etc are default menus while NAT IP MAC filtering of the Security Quality of Service and DNS will appear only when you select some corresponding functions Click any one of
48. CP mark is used to mark all egress packets that do not match any classification rules LAN Parental Control Select Default DSCP Mark No Change 1 v EE Quality of Service Queue Config QoS Classification Figure 4 40 Select the Enable QoS checkbox to enable all QoS for all interfaces Select a Default DSCP make from drop down list to automatically mark incoming traffic without reference to a particular classifier Click Save Apply to save the current configuration Cf Note The default DSCP mark is used to mark all egress packets that do not match any classification rules 41 TD W8960N BRIO E TTC CST PN ST RM e Te T0 mm cole E CT mm UE T ME CTT To 4 4 8 1 Queue Config Choose Advanced Setup Quality of Service gt Queue Config you can set up virtual servers on the screen below Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service QoS Classification Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management QoS Queue Setup In ATM mode maximum 8 queues can be configured For each Ethernet interface maximum 4 queues can be configured To add a queue click the Add button To remove queues check their remove checkboxes then click the Remove button The Enable button will scan through every queues in the table Q
49. Driver Internet Protocol TCP IP Description Transmission Control Protocol lnternet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in natification area when connected Notify me when this connection has limited ar no connectivity Cancel Click OK 92 TD W8960N BRUM TA Te t te PAN BES aie I e To T 0 E M S COT V LT mm O T TE CTTI For Windows Vista OS e Control Panel Home Go to Start gt Settings gt Control Classic View Panel and then you will see the following page System and Maintenance User Accounts and Family Get started with Windows Safety Back up your computer QW Set up parental controls for any user ie Add or remove user accounts Security Check for updates Appearance and Check this computer s security status Ay e Allow a program through Windows Personalization Y Firewall Change desktop background Customize colors Adjust screen resolution SS Clock Language and ke Region Change keyboards or other input Click View network status and tasks Hardware and Sound Play CDs or other media automatically iere lav Printer ange display language Mouse Ease of Access Let Windows suggest settings Optimize visual display F Programs B Ni Uninstall a program R centTasks Change startup programs Uninstall a program Additional Options Change startup progr
50. E ME CTT To Parm i s P 4 ez Power Adapter i m Desktop PC Figure 2 1 TD W8960N BRU TA Tide t te PAN BES aie I e To T 0 e M S COT V LT am O T T CIVI le Chapter 3 Quick Installation Guide This chapter will show you how to configure the basic functions of your TD W8960N 300Mbps Wireless N ADSL2 Modem Router using Quick Setup Wizard within minutes 3 1 Configuring the PC After you directly connect your PC to the TD W8960NTD W8960N or connect your adapter to a Hub Switch which has connected to the Router you need to configure your PC s IP address Follow the steps below to configure it Here takes Windows XP for example For more details please refer to Appendix B Step 1 Click the Start menu on your desktop right click My Network Places and then select Properties shown in Figure 3 1 E B ernet A My Documents ue 2 ternet Explorer terne 2 My Recent Documents gt mail Microso re ren LJ My Pictures Sna e My Music 48 My Computer Explore B Control F Search for Computers w Microsoft Office Word 2003 Set Prod Mab Network Drive Defaults Disconnect Network Drive e i3 e v Windows Media Player oS Printers 33 Windows Messenger S v Show on Desktop Rename W Paint Help anc Search All Programs gt IT Run B Log Off oJ Turn OFF Computer Figure 3 1 Step 2 Right click Local Area
51. Filtering Outgoing Choose Advanced Setup gt Security gt IP Filtering you can configure Outgoing Filtering rules on the screen shown in Figure 4 31 The Outgoing IP Filtering feature allows you to control some IP traffic from LAN to access to some specifically addresses By default all outgoing IP traffic from LAN is allowed but some IP traffic can be BLOCKED by setting up filters Device Info Quick Setup Outgoing IP Filtering Setup Advanced Setup Layer2 Interface WAN Service MAC Clone Choose Add or Remove to configure outgoing IP filters LAN NAT Filter Name IP Version Protocol SrclP PrefixLength SrcPort DstlP PrefixLength DstPort Remove By default all outgoing IP traffic from LAN is allowed but some IP traffic can be BLOCKED by setting up filters Security sendmail filter 4 TCP or UDP 192 168 1 222 210 17 188 204 25 g MAC Filtering Parental Control Quality of Service Figure 4 31 36 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI Set up an Outgoing IP Filtering rule 1 Click the Add button in Figure 4 31 and you will see the next screen as shown in Figure 4 32 a Device Info Quick Setup Add IP Filter Outgoing i Advanced Setup Layer2 Interface The screen allows you to create a filter rule to identify outgoing IP traffic by specifying a new filter name and atleast one condition below All ofthe specified conditions in this filter rule must be satisfie
52. G and then you can configure the basic security in the screen as shown in Figure 4 29 35 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI Device Info Quick Setup ALG Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Virtual Servers Select the ALG below FTP Enabled TFTP Enabled C SIP Enabled H 323 Enabled RTSP Enabled IRC Enabled Port Triggering DMZ Host Security Parental Control S Appl Quality of Service Figure 4 29 Click the Save Apply button to save your settings 4 4 6 Security Choose Advanced Setup gt Security and you will see the security screen including IP Filtering and MAC Filtering only effective in Bridging mode submenus Device Info Quick Setup Outgoing IP Filtering Setup Advanced Setup _Layer2 Interface WAN Service MAC Clone Choose Add or Remove to configure outgoing IP filters LAN NAT Filter Name IP Version Protocol SrclP PrefixLength SrcPort DstlP PrefixLength DstPort Remove By default all outgoing IP traffic from LAN is allowed but some IP traffic can be BLOCKED by setting up filters Security IP Filtering MAC Filtering Figure 4 30 4 4 6 1 IP Filtering The IP address filtering feature makes it possible for administrators to control user s access to the Internet which is based on user s IP The IP address filtering includes Outgoing and Incoming the detailed descriptions are provided below IP
53. If you select the application from the drop down list the External Port Start External Port End Internal Port Start Internal Port End and the Protocol will be added in the table automatically 4 4 5 3 DMZ Host Choose Advanced Setup NAT DMZ Host you can set up DMZ Host on the screen shown in Figure 4 28 The DMZ host feature can make a local host be exposed to the Internet for a special purpose service such as online gaming or video conferencing Device Info NAT DMZ Host Advanced Setup Layer2 Interface The DSL Modem Router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer Enter the computer s IP address and click SaverApply to activate the DMZ host Clear the IP address field and click SaverApply to deactivate the DMZ host gt DMZ Host IP Address NAT Virtual Servers Port Triggering Save Apply gt Im Figure 4 28 To add a new DMZ Host You can enter the computer s IP address and then click Save Apply to activate the DMZ host you set on this page cS Note DMZ host forwards all the ports at the same time Any PC whose port is being forwarded must have its DHCP client function disabled and should have a new static IP Address assigned to it because its IP Address may change while using the DHCP function 4 4 5 4 ALG Choose Advanced Setup NAT AL
54. N Service MAC Clone LAN NAT Security IP Filtering Parental Control Quality of Service Bandwidth Control Routing Add MAC Filter Create a filter to identify the MAC layer frames by specifying at least one condition below If multiple conditions are specified all of them take effect Click Apply to save and activate the filter Protocol Type IGMP v Destination MAC Address 00 11 22 33 44 44 Source MAC Address 00 11 22 33 44 BB LAN lt gt WAN v Frame Direction WAN Interfaces Configured in Bridge mode only br_0_0_32 atm0 1 v Save Apply Figure 4 34 Select Protocol Type in the drop down list for the rule Enter Destination MAC Address and Source MAC Address in the text box Select Frame Direction in the drop down list for the rule 38 TD W8960N BRIO E TTC CST PN ST RM e Te T0 mm cole E CT mm UE T ME CTT To 5 Select the WAN interfaces from the drop down list 6 Click Save Apply to save this entry and then you will see your settings as shown in Figure 4 33 4 4 7 Parental Control Choose Advanced Setup Parental Control You can configure the Parental Control on the screen as shown in Figure 4 35 Time Restriction allows you to control the Internet activities of the child by restricting the time of surfing URL Filter limits every computer connected to the router to access certain websites These two features work independently
55. OVED AUTOMATICALLY You will need to create new rules for the new policy Interface Policy Change atm0 1 FORWARD o atm1 1 FORWARD o atm2 1 FORWARD E atm3 1 FORWARD g atm4 1 FORWARD FJ atm5 1 FORWARD o atmb 1 FORWARD L Change Policy Choose Add or Remove to configure MAC filtering rules Interface Protocol Destination MAC Source MAC Frame Direction Remove atm 1 IGMP 00 11 22 33 4 4 AA 00 11 22 33 44 BB BOTH Fi Figure 4 33 Change Policy There are two policies for the MAC filters FORWARDED and BLOCKED Select the Change checkbox and click the Change Policy button to change from one policy to another When you set FORWARDED it means that all MAC layer frames will be forwarded except those matching with any of the specified rules in the table shown in Figure 4 33 While BLOCKED means that all MAC layer frames will be blocked except those matching with any of the specified rules in the preceding table Add Click the Add button and then you can add a new MAC Filter in the next screen shown in Figure 4 33 Remove Select the check box in the table shown in Figure 4 33 and then click the Remove button and then the corresponding entry will be deleted in the table To add a MAC Filtering rule 1 2 3 4 Click the Add button in Figure 4 33 and you will see the next screen similar to in Figure 4 34 Device Info Quick Setup Advanced Setup Layer2 Interface WA
56. PY Remote Identifier Encryption Algorithm 3DES v Integrity Algorithm WS v Select Diffie Hellman Group for Key Exchange 1024bit v Key Life Time 3600 Seconds Phase 2 Encryption Algorithm 3DES v Integrity Algorithm m5 wv Select Diffie Hellman Group for Key Exchange 1024b it Key Life Time 3600 Seconds Main Mode Select Main Mode to configure the standard negotiation parameters for IKE phase 55 TD W8960N BRIO E TTC CST PAN ST RM e Te T0 mm cole E CT mm DET CTTO Aggressive Mode Select Aggressive Mode to configure IKE phase1 of the VPN Tunnel to carry out negotiation in a shorter amount of time Not Recommended Less Secure cf Note The difference between the two is that aggressive mode will pass more information in fewer packets with the benefit of slightly faster connection establishment at the cost of transmitting the identities of the security firewall in the clear When using aggressive mode some configuration parameters such as Diffie Hellman groups and PFS can not be negotiated resulting in a greater importance of having compatible configuration on both ends KeyLife Time Enter the number of seconds for the IPSec lifetime It is the period of time to pass before establishing a new IPSec security association SA with the remote endpoint The default value is 3600 Cf Note If you want to change the default settings of Advanced Settings please make sure that both VPN server endpoints use
57. Queue Configuration This screen allows you to configure a QoS queue and assign itto a specific layer2 interface The scheduler algorithm is defined by the layer interface Note For SP scheduling queues assigned to the same layer2 interface shall have unique precedence Lower precedence value implies higher priority for this queue relative to others Click Save Apply to save and activate the queue Name queue l Enable Disable v Interface atm0 0_0_32 SP v Precedence DSL Latency Path v Save Apply Figure 4 42 Name Seta name for the entry Enable Select Enable option to take this entry effect nterface Assigned a specific Wan Service for this QoS queue entry 42 TD W8960N BRIO E TTC CST PN ST RM e Te T0 mm cole E CT mm UE T ME CTT To gt Precedence Specify precedence for this QoS queue entry gt DSL Latency Select latency path for the type of data transmission only PathO is available for this Router After you specify the condition click Save Apply to save the entry and then you will see you settings as shown in Figure 4 41 ce Note 1 Lower integer values for precedence imply higher priority for this queue relative to others 2 The queue entry configured here will be used by the classifier to place ingress packets appropriately 4 4 8 2 QoS Classification This section will guide you to create a traffic class rule to classify the upstream traffic assign q
58. Quick Setup ATM PVC Configuration Advanced Setup Layer2 Interface This screen allows you to configure an ATM PVC identifier VPI and VCI select DSL latency select a service category Otherwise choose an existing interface by selecting the checkbox to enable it ETH Interface VPI 0 255 8 WAN Service VCI 32 65535 35 MAC Clone LAN Select DSL Link Type EoA is for PPPoE IPoE and Bridge NAT EoA Security PPPoA Parental Control IPoA Quality of Service Encapsulation Mode LLC SNAP BRIDGING w Bandwidth Control Service Category UBR Without PCR w Routing DNS Select IP QoS Scheduler Algorithm DSL Strict Priority UPnP Precedence of the default queue 8 lowest Weighted Fair Queuin Interface Grouping O Weight Value of the default queue 1 63 1 IPSec MPAAL Group Precedence 8 Multicast Wireless Diagnostics Save Apply Management Figure 4 3 gt VPI VCI the VPI and VCI values provided by your ISP Do not change them unless it was required by your ISP gt DSL Link Type Select a DSL Link Type which is provided by your ISP The options include EoA it is for PPPoE IPoE and Bridge PPPoA PPP over ATM and IPoA IP over ATM Encapsulation Mode The mode of the data processing over the Link Type you have selected Uses the default setting if you are not sure Service Category Select the type of the service assigned by your ISP in the
59. Re auth Interval 36000 optional WPA Group Rekey Interval optional RADIUS Server IP Address RADIUS Port 1 65535 RADIUS Key optional You can enter ASCII characters between 0 and 63 characters or 0 to 64 Hexadecimal characters WPA Encryption WEP Encryption Figure 4 86 T Mixed WPA2 WPA Personal To configure Mixed WPA2 WPA Personal settings select the Mixed WPA2 WPA Personal option from the drop down list The menu will change to offer the appropriate settings The steps of this setting are the same with WPA PSK Wireless Basic WPS Security Enable WPS Enabled v MAC Filter Wireless Bridge Add Client This feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Advanced Push Button PIN Add Enrollee Station Info Help Diagnostics Device PIN 49518863 Gen new PIN Help Management Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled o
60. TI 4 7 8 Reboot Choose Management Reboot you can see the screen shown in Figure 4 110 which allows you to reboot the Router Device Info Quick Setup Reboot router Advanced Setup fi Wireless p Click the button below to reboot the router m Diagnostics Management Settings IT SNMP Agent EET TET l Internet Time Access Control Upgrade Firmware Reboot Figure 4 110 Cf Note 1 After you clicked the Reboot button please wait for a while before reopening your web browser 2 Do not turn off the Router or press the RESET button while the Router is rebooting 3 If necessary reconfigure your PC s IP address to match your new configuration 86 TD W8960N BRIO E TTE CST PAN EST RM e Te T0 mm cole E CT mm UET T ME CTTO Appendix A FAQ 1 How dol configure the Router to access Internet by ADSL users 1 First configure the ADSL Modem configured in RFC1483 bridge model 2 Connect the Ethernet cable from your ADSL Modem to the WAN port on the Router The telephone cord plugs into the Line port of the ADSL Modem 3 Log in to the Router and configure the WAN connection type as PPPoE connection mode The detailed steps please refer to section 4 4 2 1 ATM EoA PPPOE 4 If your ADSL lease is in pay according time mode select Dial on Demand for Internet connection mode on the screen of Figure 4 10 fe Note If you are a Cable user please configure the Router following the above
61. TP LINK TD W8960N 300Mbps Wireless N ADSL2 Modem Router Rev 5 0 0 1910010662 COPYRIGHT amp TRADEMARKS Specifications are subject to change without notice TP LINK is a registered trademark of TP LINK TECHNOLOGIES CO LTD Other brands and product names are trademarks or registered trademarks of their respective holders No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permission from TP LINK TECHNOLOGIES CO LTD Copyright 2012 TP LINK TECHNOLOGIES CO LTD All rights reserved http www tp link com cn FCC STATEMENT FC This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures e He
62. addresses 4 Click Save Apply button to make the changes effective immediately IMPORTANT If a vendor ID is configured for a specific client device please REBOOT the client device attached to the modem to allow it to obtain an appropriate IP address Group Name WAN Interface used in the grouping br 0 0 32 atmD0 1 wv Grouped LAN Interfaces Available LAN Interfaces Automatically Add Clients With the following DHCP Vendor IDs Figure 4 61 52 TD W8960N BRIO E TTC CST PN ST RM e Te T0 mm cole E CT mm UE T ME CTT To 2 Enteraunique name for Group 3 Select the Interface which you want to use from the drop down list Cf Note If you like to automatically add LAN clients to a WAN Interface in the new group add the DHCP vendor ID string By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID DHCP option 60 will be denied an IP address from the local DHCP server 4 Select interfaces from the available interface list and add it to the grouped interface list using the arrow buttons to create the required mapping of the ports fe Note These clients may obtain public IP addresses 5 Click Save Apply to make the entry effective immediately c Note If a vendor ID is configured for a specific client device please REBOOT the client device attached to the modem to allow it to obtain an appropriate IP address
63. agement gt Internet Time 4 4 7 2 URL Filter This feature allows you to configure the filter rules based on URL to control all the computers in the LAN to access the specified port and it is independent with Time Restriction feature Device Info Quick Setup URL Filter Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Time Restriction Quality of Service Please select the list type first then configure the list entries A maximum 200 urls can beconfigured URL List Type ODisable OAllow Deny LAN IP Port Address Status Enable Disable Edit Remove 80 www google com Enabled o Figure 4 38 There are two policies for the URL Filter gt Disable URL Filter function will not take effect gt Allow Only allow the PCs to access the specified URL 40 TD W8960N BRIO E TTC CST PN ST RM e Te T0 mm cole E CT mm UE T ME CTT To Deny Block the PCs to access the specified URL To add a URL Filter entry 1 Check the Deny or Allow radio button Here we take Deny for example 2 Click the Add button in Figure 4 38 and then you will see the next screen as shown in Figure 4 39 Enter the URL Address and Port Number B Device Info Quick Setup Parental Control URL Filter Add Advanced Setup Layer2 Interface Enter the address then click Save Apply to add the entry to the URL filter LAN IP is optional if you wantto con
64. ages for associated clients it sends the next DTIM with a DTIM Interval value Its clients hear the beacons and awaken to receive the broadcast and multicast messages The default value is 1 Y Beacon Interval Enter a value between 20 1000 milliseconds The Beacon Interval value indicates the frequency interval of the beacon A beacon is a packet broadcast by the Router to synchronize the wireless network The default value is 100 Y Transmit Power This option will allow you to configure the wireless transmit power High transmit power will extend the wireless signal range of the device and make the signal transmit more legible Low transmit power with the smaller wireless signal range that will decrease the probability of interrupt by other Wi Fi device Y WMM Wi Fi Multimedia This function can guarantee the packets with high priority messages being transmitted preferentially It is strongly recommended 4 5 6 Station info Choose Wireless Station Info you will see the screen of Wireless Authenticated Stations setting shown as below Device Info Wireless Authenticated Stations Advanced Setup Wireless This page shows authenticated wireless stations and their status MAC Associated Authorized SSID Interface MAC Filter Wireless Bridge Advanced Station Info Refresh Diagnostics Management Figure 4 94 This page shows authenticated wireless stations and their status gt MAC Displays the con
65. ams Check for updates File Edit View Tools Help e Network and Sharing Center View computers and devices a View full map Connect to a network Set up a connection or network A A T ct Manage network connections SUPPORT4 PC Network 10 Internet Diagnose and repair This computer LT Network 10 Public network Customize Access Local only Click View status aa tae H Local Area Con ectic n Status General Connection IPv4 Connectivity Local IPv6 Connectivity Limited Media State Enabled Duration 03 45 22 Speed 100 0 Mbps Received 34 994 388 Click Properties Close 93 TD W8960N BRIO Te E TTE CST AN ST RM e Te T0 mm cole E CT mm DET ME CTT To deem Networking Connect using m Marvell Yukon 6866056 PCI E Gigabit Erhemet Controller This connection uses the following items ai File and Printer Sharing for Microsoft Networks amp Network Magic Device Discovery Driver wi Realtke RtlProt WLAN Utility Protocol Driver B Intenet Protocol V Double click Internet ersion hill P lpvhb x Intemet Protocol Version 4 TCP IPv4 3 Protocol Version 4 TCP IPv4 nk Layer Topology Discovery Mapper L O Driver wk Link Layer Topology Discovery Responder 4 n Description Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communicati
66. anguage Ger amp Programs Ease of Access a Let Windows suggest settings Uninstall a program Optimize visual display View your basic network inftarmation and set up connections Click Change adapter J e cv settings o This compl Viba your acte networks Connect or disconnect IB Relwork Access type Intemet Weak network Cunnediene Wb Local fvea Connection Change your networking settings os Sel up anew connection er network z Set up a wates biaadband dial up ad Rheg ar VPN cennectire oF set up reuter ar access pairt Connect lo network Connect or reconmect to wireless waned dial up or VPN network connection L rah Cheese hemegroup and sharing options Access filet and pombers locabed on athe network cormpubers or change shanng settings am Troubleshoot problems Diagnase and repair netwnrk problems or get treubleshonting information HomeGroup Internet Options Windows Firewall Local Area Connection Right click Local Network Area Connection qe Realtek JANE fisable Status Diagnose Bridge Connections Create Shortcut Delete y Rename Click Properties fe Properties 95 TD W8960N BRIO Te E ITE CST PAN EST RM e Te T0 mm celui C T mm Oly ME CTT To lj Local Area Connection Properties TT Networking Connect using amp Realtek RTL8168C P 8111C P Family PCI E Gigabit Eth This connection uses the follow
67. ase look through this guide to know all the Router s functions TD W8960N BRIO Te E TTE CST SYST RM eT T0 mm celui CT UE ME CTT Ie 1 2 Main Features Complies with IEEE 802 11n to provide a wireless data rate of up to 300Mbps One RJ11 LINE port four 10 100M Auto Negotiation RJ45 LAN ports supporting Auto MDI MDIX Y Quick response semi conductive surge protect circuit reliable surge protect function AFE to support Annex A and L deployments Provides external splitter Multi user sharing a high speed Internet connection Connecting the internet on demand and disconnecting from the Internet when idle for PPPoE Provides WPA WPA2 WPA PSK WPA2 PSK data security TKIP AES encryption security Provides 64 128 bit WEP encryption security and wireless LAN ACL Access Control List Adopts Advanced DMT modulation and demodulation technology Adopts 300M wireless LAN transmission technology Y Y ON ON ON ON ON ON ON WV Supports access control parents and network administrators can establish restricted access policies based on time of day for children or staff Supports Virtual Server Port Triggering and DMZ host Supports UPnP Dynamic DNS Static Routing Supports bridge mode and Router function Supports Web management Supports firmware upgrade Supports Flow Statistics Supports WPS Built in firewall supporting IP address filtering MAC address filtering and parental control Built in DHCP server Y yY VV VV VV WV TD W8960N
68. can select the checkbox to disable or enable the function cf Note SNMP Community string provides a simple method of authentication between the Router SNMP Agent and a remote network manager SNMP Manager You can specify the community string as the password to authenticate the management station to the Router gt Read Community This field allows you to specify the SNMP Community string which provides read only access to the Router that the community is only permitted to read the device configuration The default value is public Set Community This field allows you to specify the SNMP Community string which provides read and write access to the Router that the community has the authority to read and change the device configuration The default value is public System Name Enter alphanumeric string to specify an SNMP community string name Your Router SNMP agents will expose management data on the managed systems as this system name System Location The person to notify when problems occur System contact The location of the person that is identified as the system contact Trap Manager IP Enter the IP address of the SNMP Manager where the SNMP Agent forwards trap notifications Select the desired values and click Save Apply to configure the SNMP options 4 7 4 TR 069 client Choose Management TR 069 client you can see the TR 069 client Configuration screen as shown below TR 069 WAN Managemen
69. computers and networking products that make up your local network MAC Media Access Control Address The unique address that a manufacturer assigns to each networking device NAT Network Address Translation NAT technology translates IP addresses of a local area network to a different IP address for the Internet MER MAC Encapsulation Routing MER allows IP packet to be carried as bridged frames There are many applications such as IPoA DSL networks and other frame based network Depending on your equipment they can be either bridged or routed within the network Network A series of computers or devices connected for the purpose of data sharing storage and or transmission between users Ping Packet Internet Groper An Internet utility used to determine whether a particular IP address is online Port The connection point on a computer or networking device used for plugging in cables or adapters PPPoE Point to Point Protocol over Ethernet PPPoE stands for Point to Point protocol over Ethernet this protocol is used as a type of broadband connection that provides authentication username and password in addition to data transport PPPOA Point to Point Protocol over ATM PPPoA stands for Point to Point protocol over ATM this protocol is also used as a type of broadband connection that provides authentication username and password in addition to data transport RADIUS Remote Authentication Dial In User Service
70. configurations to a file on your PC Diagnostics Management Settings Import Restore Default Figure 4 97 To back up the Router s current settings 1 Click the Export Settings button on the preceding screen pop up Figure 4 97 the following screen will then appear shown in Figure 4 98 File Download Security Warning Do you want to save this file Mame backupsettings conf Type Unknown File Type 16 0 KB From 192 168 1 1 Save Cancel While files fram the Internet can be useful this File type can potentially harm your computer IF you da nat trust the source do not save this software What s the risk Figure 4 98 2 Click the Save button and save the file as the appointed file shown in Figure 4 99 78 TD W8960N BRIO E TTC CST PN STR e Te T0 mm cole E CT mm DET ME CT Ie Savein L3 TD W8960N e m My Recent Documents E Desktop My Documents P My Computer a File name backupsettings conf hal o Jave Figure 4 99 4 7 1 2 Import Choose Management Settings Import you can see the Import screen this screen shown in Figure 4 100 allows you to update the Router s settings Device Info Quick Setup Settings Import Advanced Setup Wireless E Update DSL Modem Router settings You may update your router settings using your saved files Settings File Name Diagnostics Management T Settings Expo
71. creen 43 Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Queue Config Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management TD W8960N BRIO E TTC CST PN STR e T T0 mm cole E CT mm DET mm CTT To Add Network Traffic Class Rule This screen creates a traffic class rule to classify the ingress traffic into a priority queue and optionally mark the DSCP or Ethernet priority of the packet Click SaverApply to save and activate the rule Traffic Class Name ftp class Rule Order Last wv Rule Status Enable w Specify Classification Criteria blank criterion indicates itis not used for classification Class Interface LAN v Ether Type v Source MAC Address Source MAC Mask Destination MAC Address 00 11 22 33 44 44 Destination MAC Mask Specify Classification Results A blank value indicates no operation wl amp Keyl amp Prel v Packets classified into a queue that exit through an interface for which the queue is not specified to exist will instead egress to a queue on the interface whose priority is equal to or lower than the class queue Mark Differentiated Service Code Point DSCP Specify Class Queue Required AF12 001100 v Mark 8
72. ct the network Figure 4 69 Step 3 Wait for a while until the next screen appears Click Finish to complete the WPS configuration 3 WPS for Wireless Wireless Configuration Completed Your computer has successfully joined the TP LINK network Figure 4 70 Il By PIN If the new device supports Quick Security Setup and the PIN method you can add it to the network by PIN with the following two methods 61 TD W8960N BRIO E TTC CST PN STR e T T0 mm cole E CT mm DET ME CTT To Method One Enter the PIN of wireless adapter into my Router Step 1 Select the PIN checkbox and enter the PIN code of the wireless adapter in the field under as shown below Then click Add Enrollee Device Info Quick Setup Wireless Security Advanced Setup Wireless This page allows you to configure security features ofthe wireless LAN interface Basic You may setup configuration manually or through Wi Fi Protected SetuptWPS Security MAC Filter Wireless Bridge WPS vs luz Enable WPS Enabled v Station Info Diagnostics n i Add Client This feature is available only when WPA PSK WPA or OPEN mode is configured Management Push Button PIN Add Enrollee C 16952898 Help Device PIN 54037137 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe
73. d for PVC in IPoE mode MAC Clone If Use the following Static IP address is chosen enter the WAN IP address subnet mask and interface gateway LAN Obtain an IP address automatically NAT Option 60 Vendor ID Security Option 6 1 IAID 8 hexadecimal digits Parental Control Option 61 DUID hexadecimal digit Quality of Service Option 125 Disable Enable Bandwidth Control Use the following Static IP address Routing WAN IP Address DNS WAN Subnet Mask DSL WAN gateway IP Address UPnP Interface Grouping IPSec Multicast Figure 4 15 gt Obtain an IP address automatically Select this option the Router will be able to obtain IP network information dynamically from a DHCP server provided by your ISP 25 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT Cf Note The response message from a DHCP server typically contains a number of configuration parameters DHCP options for the Router The DHCP options include IP network information and also the vendor specific options In some cases the Router is implemented to perform user defined operations as shown below You can implement your own treatment of all such options 2 Ifthe Router is functioning as a DHCP client it must identify itself in option 61 client identifier in every DHCP message DUID IAID is portion of option 61 e Option 60 Vendor ID The option code 60 used to identify Vendor
74. d for the rule to take effect WAN Service MAC Clone Click Save Apply to save and activate the filter mee iE Filter Name sendmail filter Stl S o IP Version IPvd v Security Protocol TCP UDP v aia Source IP address prefix length 192 168 1 222 EE MAC Filte ring Ei Source Port port or port port Parental Control Destination IP address prefix length 210 17 188 204 Quality of Service Destination Port port or port port 25 Bandwidth Control Routing ons DSL Figure 4 32 2 Enterthe Filter name for the rule it is exclusive and must be filled 3 Select the protocol TCP UDP TCP UDP or ICMP in the drop down list for the connection between the Source IP address and Destination IP address 4 Enter a Source IP Address in dotted decimal notation format and then type Source Port port or port port in the text boxes separately 5 Enter a Destination IP Address in dotted decimal notation format and then type Destination Port port or port port in the text boxes separately 6 Click Save Apply to save this entry Cf Note When you add an Outgoing IP Filtering entry you must configure at least one condition on the preceding screen except the Filter name If you leave the Protocol blank it means that the rule is effective to all protocols if you leave the Source IP Address and or Destination IP Address blank it suggests that all Source IP Addre
75. d to the Web based Utility We will describe the detailed configuration in 4 4 5 NAT 6 Select a preferred WAN interface as the system default gateway and click Next Device Info Quick Setup Advanced Setup Routing Default Gateway Layer2 Interface WAN Service MAC Clone Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the higest and the last one the lowest priority if the WAN interface is connected Priority order can be changed by removing all and adding them back in again Selected Default Gateway Interfaces Available Routed WAN Interfaces LAN NAT Security B Parental Control Quality of Service Bandwidth Control Routing DNS DSL Figure 4 17 7 Configure the DNS Server Addresses on the screen as follows Device Info Quick Setup DNS Server Configuration Advanced Setup Layer2 Interface WAN Service MAC Clone LAN nel Selected DNS Server Interfaces Security atmd 2 Parental Control Quality of Service Bandwidth Control Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single PVC with IPoA or static IPoE protocol is configured Static DNS server IP addresses must be entered DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only on
76. dapter supports WPS and the Push Button Configuration PBC method you can add it to the network by PBC with the following two methods Click Push Button you will see the screen as shown below 58 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Wireless Security This page allows you to configure security features of the wireless LAN interface You may setup configuration manually or through Wi Fi Protected Setup v PS WPS Enable WPS Enabled w Add Client This feature is available only CO ee WPA2 PSK or OPEN mode is configured ush Button OPIN Add Enrollee Device PIN 49518863 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips V PA E
77. directly Normally it is set to the same value as External Port End However if you modify Internal Port Start then MAC Clone Internal Port End will be set to the same value as Internal Port Start Remaining number of entries that can be configured 32 LAN Use Interface pppoe 0 8 35 ppp0 1 v NAT Service Name Select a Service Select One v Port Triggering Cuban tercer DMZ Host Server IP Address 192 168 1 ALG Security Parental Control Quality of Service External Port Start External Port End Protocol Internal Port Start Internal Port End TCP v Bandwidth Control s TCP v Routing TCP Y DNS TCP Y DSL TCP Y UPnP TCP v Interface Grouping TCP v IPSec TCP Y Multicast TCP v Wireless TCP v Diagnostics E Management ts TCP Y l Save Apply Figure 4 25 2 Select the Interface which you want to use from the drop down list 3 Select the service which you want to use from the drop down list If the list does not have the service you need type the name of the custom service in the text box 4 Type the IP Address of the computer in the Server IP Address text box 5 Enter the External Port Start External Port End Internal Port Start and Internal Port End in the table and then select the protocol used for this Virtual Server TCP UDP or All 6 Click Save Apply to enable virtual server and then you will see your setting as shown in Figure 4 24 Cf Note If you select the service from the drop down l
78. drop down list The default type is UBR Without PCR 19 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO Cf Note Enabling packet level QoS for PVC improves performance for selected classes of applications While QoS consumes system resources therefore the number of PVC s will be reduced Besides this it cannot be set for the connection type of CBR and Real time VBR If you select the QoS service the Quality of Service menu will be added to the Web based Utility the detailed configuration will be described in 4 4 8 Quality of Service 4 4 1 2 ETH interface Choose Advanced Setup gt Layer2 Interface gt ETH Interface you can configure ETH WAN interfaces on the screen below Device Info Quick Setup ETH WAN Interface Configuration Advanced Setup Layer2 Interface T i ATM Interface Choose Add or Remove to configure ETH WAN interfaces Allow one ETH as layer 2 wan interface WAN Service Interface Name Connection Mode Remove MAC Clone Figure 4 4 Cf Note To make sure the ETH port available you should first choose Advanced Setup LAN Ports to enable the Virtual LAN Ports feature Add Click the Add button and you can add a new interface in the next screen Quick Setup ETH WAN Configuration Advanced Setup Layer2 Interface ATM Interface This screen allows you to configure a ETH port WAN Service Select a ETH port eth3 LAN4 WAN v MAC Cl
79. e LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management PPP Username and Password PPP usually requires that you have a user name and password to establish your connection In the boxes below enter the user name and password that your ISP has provided to you PPP Username pppuser PPP Password IIIII PPPoE Service Name Authentication Method AUTO v MTU bytes 1480 The default is 1480 do not change unless necessary L Enable Fullcone NAT Dial on demand with idle timeout timer PPP IP extension Use Static IPv4 Address Enable PPP Debug Mode Bridge PPPoE Frames Between WAN and Local Ports m pw rw rm m Multicast Proxy Enable IGMP Multicast Proxy Figure 4 10 PPP Username Password Enter the User Name and Password provided by your ISP These fields are case sensitive gt PPPoE Service Name Enter the Service Name if it was provided by your ISP If you leave it blank the default name will be the same as the Service Description on the previous screen Authentication Method Select the Authentication Method from the drop down list the default method is AUTO and you can leave it as a default setting Cf Note If you are not sure about the PPP IP extension and PPP Debug Mode etc below please don t select these options MTU Size Maximum Transmi
80. e as the user name which is admin admin support support and user user respectively Device Info Quick Setup Access Control Password Advanced Setup Wireless Diagnostics Access to your DSL Modem Router is controlled through three user accounts admin support and user Management The user name admin has unrestricted access to change and view configuration of your DSL Router Settings The user name support is used to allow an ISP technician to access your DSL Router for maintenance and to run diagnostics System Log SNMP Agent TR 069 Client Internet Time Username Access Control Old Password admin E support New Password user Remote Access The user name user can access the DSL Router view configuration settings and statistics as well as update the router s software Use the fields below to enter up to 16 characters and click Save Apply to change or create passwords Note Password cannot contain a space Confirm Password Upgrade Firmware Reboot Figure 4 108 To change the password 1 Select the Username whose password you want to change 2 Enter the Old Password in the text box 3 Enter the New Password and Confirm Password The Confirm Password should be the same as the New Password 4 Click Save Apply to make your change take effect cs Note 1 Access to your DSL Modem Router is controlled through three user accounts admin support and user The user name admin has
81. e beacon interval for the access point Security Tips If you set Mode to 11n only you couldn t set Wireless encryption type to WEP or TKIP Click Apply Save to configure the advanced wireless options MAC Filter Wireless Bridge c MM Chane Aute vj Station Info Mode 1ibzn v Bandwidth 20 40NHz v Fragmentation Threshold 2346 RTS Threshold 2347 DTIM Interval 1 Beacon Interval 100 Transmit Power 100 v WMM Wi Fi Multimedia Enabled w Apply Save Figure 4 93 Y Channel Select the channel you want to use from the drop down List This field determines which operating frequency will be used It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point Y Mode In the drop down list you can select 11b 11bg 11bgn and 11n only 11bgn allows both 802 11b 802 11g and 802 11n wireless stations to connect to the Router Y Bandwidth Select the Bandwidth you want to use from the drop down List If bigger bandwidth is selected device could transmit and receive data with higher speed Y Control Sideband If bigger bandwidth is selected this option will allow you select the Control Sideband you want 19 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO Frag
82. e make sure your broadband service provided by your ISP is available If there is any problem please contact your ISP After that please install the Router according to the following steps Don t forget to pull out the power plug and keep your hands dry 1 Locate an optimum location for the Router The best place is usually at the center of your wireless network 2 Adjust the direction of the antenna Normally upright is a good direction 3 Connect your PC and Switch Hub in your LAN to the LAN Ports of the Router If you have a wireless NIC and want to have wireless connection please skip this step 4 Connect the telephone line to the Line port on the Router Or you can access the Internet and make calls at the same time by using a separate splitter to divide the data and voice The external splitter has three ports e LINE Connect to the wall jack e PHONE Connect to the phone sets e MODEM Connect to the ADSL LINE port of device Plug one end of the twisted pair ADSL cable into the ADSL LINE port on the rear panel of device Connect the other end to the MODEM port of the external splitter 5 Connect the power adapter to the power plug of the Router and the other end into an electrical outlet The electrical outlet shall be installed near the device and shall be easily accessible 6 Turn on the ON OFF switch to power the device It will start to work automatically TD W8960N BRIO E TEC CST SYST RM e Te T0 mm a COT T E CT U
83. e provided PSK keys can be ASCII or Hex type 3 Change the Group Key Interval as desired or use the default setting 4 Click Save Apply to save the new configuration Device Info K f This page allows you to configure security features ofthe wireless LAN interface Quick Setup You may setup configuration manually or through Wi Fi Protected Setup vvPS Advanced Setup Wireless Basic WPS Security MAC Filter Wireless Bridge Enable WPS Enabled w Add Client This feature is available only when WPA PSK WPA2 PSK or OPEN mode is configured Advanced Push Button PIN Add Enrollee Station Info Help Diagnostics Device PIN 49518863 Gen new PIN Help Management Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips PA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Apply
84. e screen Figure 4 7 and the next configuration is similar to IPoE see section 4 4 2 2 ATM EoA IPoE The difference is that you have to manually set the Static IP Address on the screen of Figure 4 15 and the Static IP Address for DNS Server on the screen of Figure 4 18 28 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO Cf Note ETH and ATM service can not coexist If the ATM Interface had configured you cannot configure any other WAN service over the ETH Interface until the ATM Interface is deleted 4 4 2 6 ETH PPPoE If your ISP provides a PPPoE connection and you need to use an ETH Interface follow the steps below to add a WAN service over a selected ETH interface 1 Add a new ETH interface on the screen of 4 4 1 2 ETH interface 2 Click the Add button on the screen Figure 4 7 and the following configuration is similar to PPPoE over ATM interface see section 4 4 2 1 ATM EoA PPPOE 4 4 2 7 ETH IPoE If your ISP provides an IPoE connection and you want to use an ETH Interface follow the steps below to add a WAN service over a selected ETH interface 1 Adda new ETH interface on the screen of 4 4 1 2 ETH interface 2 Click the Add button on the screen Figure 4 7 and the next configuration is similar to IPoE over ATM interface see section 4 4 2 2 ATM EoA IPoE 4 4 2 8 ETH Bridge If you want to adopt the Bridge service and you need to use an ETH Interface follow the steps below to add a WAN ser
85. e will be used according to the priority with the first being the higest and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing all and adding them back in again Select DNS Server Interface from available WAN interfaces Available WAN Interfaces Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Cf Note O Use the following Static DNS IP address Primary DNS server Secondary DNS server Figure 4 18 If only single PVC with IPoA is configured you must enter static DNS server IP addresses 8 On the next screen as shown Figure 4 19 you will see the detailed settings you ve made Please click the Apply Save button to save these settings 2 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT BETCETTNENENN WAN Setup Summary Advanced Setup Layer2 Interface Make sure thatthe settings below match the settings provided by your ISP WAN Service Click Save Apply to have this interface to be effective Click Back to make any modifications MAC Clone Connection Type IPoE NAT Enabled sSecwmiy Full Cone NAT Disabled Parental Control Firewall Disabled Quality of Service IGMP Multicast Enabled Bandwidth Control Quality Of Service Enabled Figure 4 19 4 4 2 3 ATM EoA Bridging If you want to adopt the Bridge service and you
86. ecifies a wireless networking at 11 Mbps using direct sequence spread spectrum DSSS technology and operating in the unlicensed radio spectrum at 2 4GHz and WEP encryption for security 802 11b networks are also referred to as Wi Fi networks 802 11g specification for wireless networking at 54 Mbps using direct sequence spread spectrum DSSS technology using OFDM modulation and operating in the unlicensed radio spectrum at 2 4GHz and backward compatibility with IEEE 802 11b devices and WEP encryption for security 2x to 3x eXtended Range WLAN Transmission Technology The WLAN device with 2x to 3x eXtended Range WLAN transmission technology make its sensitivity up to 105 dB which gives users the ability to have robust longer range wireless connections With this range enhancing technology a 2x to 3x eXtended Range based client and access point can maintain a connection at as much as three times the transmission distance of traditional 802 11b and 802 11g products for a coverage area that is up to nine times greater A traditional 802 11b and 802 11g product transmission distance is about 300m a 2x to 3x eXtended Range based client and access point can maintain a connection transmission distance may be up to 830m Access Point A device that allows wireless equipped computers and other devices to communicate with a wired network Also used to expand the range of a wireless network Ad hoc Network An ad hoc network is a gro
87. ected Setup WPS WPS Enable WPS Disabled Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips PA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Shared good v WEP Encryption Enabled wv Encryption Strength Current Network Key Network Key 1 Network Key 2 Network Key 3 Network Key 4 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Figure 4 77 Encryption strength Select the appropriate level of encryption 64 bit or 128 bit Current Network Key To indicate which WEP key to use select a transmission key number Network Key 1 4 If you want to manually enter the WEP keys then enter them in the network Key 1
88. ee the screen of Wireless Basic settings shown as below The basic settings for wireless networking are set on this screen Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Wireless Basic oO oO Wireless Network Name BSSID Country This page allows you to configure basic features ofthe wireless LAN interface You can enable or disable the wireless LAN interface hide the network from active scans setthe wireless network name also known as SSID and restrict the channel set based on country requirements Click Apply Save to configure the basic wireless options Enable Wireless Hide SSID Broadcast Clients Isolation TP LINK CE4SBB Also called SSID B0 48 7A CE 48 BB UNITED STATES v Figure 4 65 This page allows you to configure basic features of the wireless LAN interface You can enable or disable the wireless LAN interface hide the network from active scans set the wireless network name also known as SSID and restrict the channel set based on Region requirements Enable Wireless If you want to use wireless features you must select Enable Wireless If you deselect Enable Wireless option all the Wireless settings below will be disabled Hide SSID Broadcast When wireless clients survey the local area for wireless networks to associate with you can select this option to av
89. er in use UPnP broadcasts are only allowed on the LAN Device Info Quick Setup UPnP Configuration Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Enable UPnP protocol Save Apply Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Figure 4 59 Select the checkbox and click Save Apply to enable the UPnP function 51 TD W8960N BRIO E TTE CST PAN EST RM e Te T0 mm cole E CT mm UET T ME CTTO 4 4 14 Interface Grouping Choose Advanced Setup Interface Grouping you can configure multiple ports to PVC and bridging groups to perform as an independent network Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing UPnP Interface Grouping IPSec Multicast Interface Grouping Interface Grouping supports multiple ports to PVC and bridging groups Each group will perform as an independent network To support this feature you must create mapping groups with appropriate LAN and WAN interfaces using the Add button The Remove button will remove the grouping and add the ungrouped interfaces to the Default group Only the default group has IP interface A maximum 16 entries can be configured Group Name Remove WAN Interface LAN Interfaces DHCP Vendor IDs atm 1 atm1 1 LAN1 atm2 1 LAN2 Default
90. ername tplink PPP Password 123456 PPPMTU 1480 Note Some WAN Connection s or Layer interface s may be replaced by new one Wi Fi Configurations Wireless Network Name TP LINK CE48BB Network Authentication Mixed WPA2ANVPA PSK Personal Wireless NetWork Key 1234557890 Figure 3 12 15 Chapter 4 Configuring the Router This chapter will show each Web page s key function and the configuration way 4 1 Login After your successful login you will see the six main menus on the left of the Web based utility On the right there are the corresponding explanations and instructions Device Info Quick Setup Advanced Setup Wireless Diagnostics Management The detailed explanations for each Web page s key function are listed below 4 2 Device Info Choose Device Info menu there are six submenus under the main menu Summary WAN Statistics Route ARP and DHCP This Device Info section mainly introduces the elementary information about the Router and its current settings in use Click any of them and you will be able to view the corresponding information Choose Device Info Summary you will see the Summary screen shown in Figure 4 1 The first table indicates the information about the version including Software and Hardware The second table displays the current status of the TD W8960N connection This information will vary depending on the settings of the Router configured on the
91. ess correctly and the other option for Interface will adopt the default Gateway address for the Static Route 3 Click Save Apply to and then you will see you settings as shown in Figure 4 51 To remove a static routing entry 1 Select the Remove check box according to the entry in the Figure 4 51 2 Click the Remove button and the entry will be deleted ce Note Gateway IP address should be correctly configured if IP based Interface IPoE IPoA is selected 4 4 10 3 RIP Choose Advanced Setup Routing RIP you can see the RIP Routing Information Protocol screen which allows you to configure the RIP shown in Figure 4 53 Device Info J Routing RIP Configuration Advanced Setup Layer2 Interface NOTE RIP CANNOT BE CONFIGURED on the WAN interface which has NAT enabled such as PPPoE To activate RIP for the WAN Interface selectthe desired RIP version and operation and place a check in the Enabled checkbox To stop RIP on the WAN Interface uncheck the Enabled checkbox Click the Save Apply button to star stop RIP and save the configuration Interface Version Operation Enabled LAN NAT atm0 1 2 v Passive w Parental Control l SS 2 Passi Quality of Service atm1 1 v assive w g Bandwidth Control atm2 1 2 w Passive w Oo atm3 1 z 2 Passive Oo Default Gateway SIEHE Howie atm4 1 2 v Passive v O atm5 1 2 v Passive v oO atmb 1 2 M Passive v
92. figure for specific LAN PC WAN Service MAC Clone LAN IP Range optional LAN l Port Number 80 Default 80 will be applied if leave blank Security Address www google com Add More Parental Control Time Restriction Save Apply Figure 4 39 3 Click Save Apply to save this entry and then you will see your settings as shown in Figure 4 38 Every computer connected to the router will not access this URL address on the port 4 4 8 Quality of Service Choose Advanced Setup Quality of Service you can enable QoS Quality of Service on the screen shown in Figure 4 40 QoS helps to prioritize data as it enters your router By attaching special identification marks or headers to incoming packets QoS determines which queue the packets enter based priority This is useful when there are certain types of data you want to give higher priority such as voice data packets give higher priority than Web data packets This option will provide better service of selected network traffic over various technologies Device Info Quick Setup QoS Queue Management Configuration D D Layer2 Interface WANService os QoS checkbox is selected choose a default DSCP mark to automatically mark incoming traffic without reference to a particular classifier Click Save Apply button to MAC Clone MAC Clone Note If Enable Qos checkbox is not selected all QoS will be disabled for all interfaces Note The default DS
93. fo Quick Setup WAN Setup Summary Advanced Setup Layer2 Interface WAN Service MAC Clone LAN Connection Type PPPoE NAT NAT Enabled Make sure thatthe settings below match the settings provided by your ISP Click Save Apply to have this interface to be effective Click Back to make any modifications Security Full Cone NAT Disabled Parental Control Firewall Enabled Quality of Service IGMP Multicast Enabled Bandwidth Control Quality Of Service Disabled Routing DNS Figure 4 13 8 On the next screen you will see the WAN Port Information Table with the new configuration 24 TD W8960N BRIO E TTE CST PAN EST RM e Te T0 mm cole E CT mm UET T ME CTTO Device Info Quick Setup Wide Area Network WAN Service Setup Advanced Setup Layer2 Interface T Choose Add Remove or Editto configure a WAN service over a selected interface WAN Service MAC Clone Interface Description Type Vlan8021p VlanMuxld Igmp NAT Firewall Remove Edit LAN 7 E rane FE ne ee atm 1 br 0 0 32 Bridge N A N A Enabled Disabled Disabled Fl NAT SL A Security atm1 1 brevets Bridge N A N A Enabled Disabled Disabled F Parental Control atm2 1 br 0 0 35 Bridge N A N A Enabled Disabled Disabled Oo Quality of Service J atm3 1 br 0 B0 100 Bridge N A N A Enabled Disabled Disabled Fj Bandwidth Control Routing atm5 1 br 0 8 81 Bridge N A N A Enabled Disabled Disabled
94. ge and Regional Options Accessibility Options Performance and Maintenance Security Center e t See Also My Network Places jJ Printers and Other Hardware 4j Remote Desktop i Phone and Modem Options Troubleshooters 2 Home or Small Office Networking Internet Explorer F Network Diagnostics Network and Internet Connections Pick a task Set up or change your Internet connection Create a connection to the network at your workplace Set up or change your home or small office network Set up a wireless network for a home or small office Change Windows Firewall settings or pick a Control Panel icon w Network Connections 2 2 Windows Firewall e Network Setup Wizard _ Wireless Network Setup p Wizard Network Tasks A connection f Set up a home or small office network Change Windows Firewall settings Disable this network device Repair this connection mij Rename this connection view status of this connection Change settings of this connection LAN or High Speed Internet ocal Area Connection Connected Firewalled tealtek RTL8139 Family PCIE pb able Status Repair Bridge Connections Create Shortcut Delete Rename 90 TD W8960N BRIO Te E TTE CST AN ST RM e Te T0 mm cole E CT mm DET ME CTT To Local Area Connection Properties General Authentication Advanced
95. he ID number of the VLAN being configured Up to 256 VLANs can be created WAN Wide Area Network Networks that cover a large geographical area Web based Utility The web page that allows you to manage the Router WEP Wired Equivalent Privacy A data privacy mechanism based on a 64 bit or 128 bit or 152 bit shared key algorithm as described in the IEEE 802 11g standard Wi Fi A trade name for the IEEE 802 11b wireless networking standard given by the Wireless Ethernet Compatibility Alliance WECA see http www wi fi net an industry standards group promoting interoperability among IEEE 802 11b devices WLAN Wireless Local Area Network A group of computers and associated devices communicate with each other wirelessly which network serving users are limited in a local area WPA Wi Fi Protected Access A wireless security protocol use TKIP Temporal Key Integrity Protocol encryption which can be used in conjunction with a RADIUS server 101 Appendix E Technical Support Technical Support B For more troubleshooting help go to http www tp link com en support faq To download the latest Firmware Driver Utility and User Guide go to http www tp link com en support download For all other technical support please contact us by using the following details Global Tel 86 755 26504400 E mail support tp link com Service time 24hrs 7 days a week UK Tel 44 0 845 147 0017 E mail support u
96. hem back in again Select DNS Server Interface from available WAN interfaces Selected DNS Server Interfaces pppD 1 Available WWAN Interfaces Use the following Static DNS IP address Primary DNS server Secondary DNS server Figure 4 54 4 4 11 1 DNS Server Choose Advanced Setup 25 DNS 2 DNS Server and you can see the DNS Server Configuration screen Deselect the checkbox before Auto DNS Server and then you will be able to manually configure the DNS Server Addresses as shown in Figure 4 55 Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing DNS Dynamic DNS DSL UPnP DNS Server Configuration Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single PVC with IPoA or static IPOE protocol is configured Static DNS server IP addresses must be entered DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used according to the priority with the first being the higest and the last one the lowest priority if the WAN interface is connected Priority order can be changed by removing all and adding them back in again Select DNS Server Interface from available WAN interfaces Selected DNS Server Interfaces pppD
97. ick Setup Wizard will guide you to configure the WAN Service over ATM interface 4 On the Wireless Configurations screen we use the default SSID select Network Authentication take Mixed WPA2 WPA PSK Personal for example set a Pre Shared Key and then click Save to continue Device Info Quick Setup Quick Setup Wireless Configurations Advanced Setup Wireless Diagnostics Enable Wireless Management You can configure SSID and your WLAN Authentication type Wireless Network Name TP LINK_CE48BB Also called SSID In order to protect your network from hackers and unauthorized users itis highly recommended you choose one of the following wireless network security settings Network Authentication Mixed WPA2 WPA PSK Personal adaptive v Wireless Network Key Also called WPA Pre Shared Key You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters Figure 3 11 cS Note The default ATM amp WAN service will be cleared after clicking the Next button on this Quick Setup page 5 You Will see the Summary screen below click Confirm to configure these settings 14 TD W8960N BRU TTA Tide tt PAN BES P M I eT T 0 M S COT LT mm O T TE CIVI el Device Info Quick Setup Quick Setup 2 Summary Advanced Setup Wireless Diagnostics Management WAN Configurations WAN Type ADSL WAN Layer2 Information ie ISNAP BRIDGING WAN Link Type PPPoE PPP Us
98. iggering Figure 4 23 4 4 5 1 Virtual Servers Choose Advanced Setup gt NAT gt Virtual Servers you can set up virtual servers on the screen below shown in Figure 4 24 Virtual servers can be used for setting up public services on your LAN such as DNS Email and FTP A virtual server is defined as a service port and all requests from the Internet to this service port will be redirected to the computer specified by the server IP Any PC that was used for a virtual server must have a static or reserved IP Address because its IP Address may change when using the DHCP function Device Info NAT Virtual Servers Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN Virtual Server allows you to direct incoming traffic from WAN side identified by Protocol and External port to the Internal server with private IP address on the LAN side The Internal port is required only ifthe external port needs to be converted to a different port number used by the server on the LAN side A maximum 32 entries can beconfigured Server Name External Port Start External Port End Protocol Internal Port Start Internal Port End Server IP Address WAN Interface Status Enable Disable Edit Remove NAT Virtual Servers Port Triggering Figure 4 24 Y Virtual Server Table The table indicates the information about the Virtual Server entries e Server Name This is the name of the Virtual Server It is excl
99. ility can be used on any Windows Macintosh or UNIX OS with a Web browser such as Microsoft Internet Explorer Mozilla Firefox or Apple Safari 1 To access the configuration utility open a web browser and type the default address http 192 168 1 1 in the address field of the browser Address http 192 1868 1 1 Figure 3 7 After a moment a login window will appear similar to the Figure 3 8 Enter admin for the User Name and Password both in lower case letters Then click the OK button or press the Enter key 12 TD W8960N IKiUU TTA TKI PAN BES aie I e To T 0 M S COT V LT am O T TE CIVI le Connect to 192 168 1 1 tireless H ADSIZt Modem Router TDI WS960H cS Note User name Password f admin Remember my password Cancel Figure 3 8 1 Do not mix up the user name and password with your ADSL account user name and password which are needed for PPP connections 2 Ifthe above screen does not pop up it means that your Web browser has been set to a proxy Go to Tools menu Internet Options Connections LAN Settings in the screen that appears cancel the Using Proxy checkbox and click OK to finish it 2 After your successful login you will see the Login screen as shown in Figure 3 9 Click Quick Setup menu to access Quick Setup Wizard Quick Setup Advanced Setup Wireless Diagnostics Management Device Info Version Info Firmware Version Hardware Ve
100. ily search and modify the information on any node on the network Meanwhile they can locate faults promptly and implement the fault diagnosis capacity planning and report generating sending traps when an event occurs So a Router contains SNMP agent software can be monitored and or controlled by SNMP Manager using SNMP messages An SNMP Manager or SNMP Service is an application that performs the operational roles of generating SNMP messages requests to modify and retrieve management information and 81 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI receiving the requested information and trap event reports that are generated by the SNMP agent SNMP Manager is the third party management system Monitor one is an SNMP Manager icc SNMP Configuration Advanced Setup Simple Network Management Protocol SNMP allows a management application to retrieve statistics and status from the SNMP agent in this device Select the desired values and click Apply to configure the SNMP options TT The change of SNMP Community will not take effect until the Router reboot System Log SNMP Agent Disable Enable SNMP Agent Read Community public TR 069 Client Set Community private Internet Time System Name Broadcom Access Control System Location unknown Upgrade Firmware System Contact unknown Trap Manager IP 0 0 0 0 Save Apply Figure 4 105 gt SNMP Agent You
101. ing items Client for Microsoft Networks fw J QoS Packet Scheduler e File and imag Pya for Microsoft Networks Double click Internet Protocol Version 4 TCP IPv4 Description Transmission Control Protocol Intemet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Internet Protocol Version 4 TCP IPv4 Properties General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the tud IP settings Select Obtain an IP address automatically Obtain an IP address automatically Use the following IP address Select Obtain DNS server address automatically Use the following DNS server addresses Validate settings upon exit Click OK 96 TD W8960N I E IDE CST SYST RM eT T0 LE cole E CT mm O T T CITT Appendix C Specifications Standards ANSI T1 413 ITU G 992 1 ITU G 992 2 ITU G 992 3 ITU G 992 5 IEEE 802 3 IEEE 802 3u IEEE 802 11b IEEE 802 11g 802 11n Protocols TCP IP IPoA PPPoA PPPoE SNTP HTTP DHCP ICMP NAT LAN Ports Ports Four 10 100M Auto Negotiation RJ45 ports Auto MDI MDIX Line Port One RJ11 port 10BASE T UTP category 3 4 5 cable maximum 100m EIA TIA 568 1000 STP maximum 100m 100BASE TX UTP category 5 5e cable maximum 100m EIA TIA 568 1000 STP maximum 100m
102. ion between your PC and the Router has been established Pinging 172 168 1 1 with 32 bytes of data Reply from 192 168 1 1 bytes 32 timetims TTL 64 Reply from 192 168 1 1 bytes 32 timetims TTL 64 Reply from 192 168 1 1 bytes 32 timetims TTL 64 Reply from 192 168 1 1 bytes 32 timetims TTL 64 Ping statistics for 172 168 1 1 Packets Sent 4 Received 4 Lost CB loss Approximate round trip times in milli seconds Minimum ms Maximum Hms Average Pms Figure 3 5 11 TD W8960N BRIO E TEC CST PAN STR M e Te T0 mm cele E CT mm EET ME CTT To If the result displayed is similar to the screen shown below it means that your PC has not connected to the Router Pinging 192 168 1 1 with 32 bytes of data Request timed out Request timed out timed out timed out Ping statistics for 192 168 1 1 Packets Sent 4 Received H Lost 4 10Hs lozz Figure 3 6 You can check it following the steps below 1 Is the connection between your PC and the Router correct The LEDs of LAN port which you link to the device and the LEDs on your PC s adapter should be lit 2 Is the TCP IP configuration for your PC correct If the Router s IP address is 192 168 1 1 your PC s IP address must be within the range of 192 168 1 2 192 168 1 254 3 2 Quick Installation Guide With a Web based utility it is easy to configure and manage the TD W8960N 300Mbps Wireless N ADSL2 Modem Router The Web based ut
103. ion with any other antenna or transmitter CE Mark Warning C 1588 This is a class B product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures This device has been designed to operate with the antennas listed below and having a maximum gain of 3 dBi Antennas not included in this list or having a gain greater than 3 dBi are strictly prohibited for use with this device The required antenna impedance is 50 ohms To reduce potential radio interference to other users the antenna type and its gain should be so chosen that the equivalent isotropically radiated power e i r p is not more than that permitted for successful communication Canadian Compliance Statement This device complies with Industry Canada license exempt RSS standard s Operation is subject to the following two conditions 1 This device may not cause interference and 2 This device must accept any interference including interference that may cause undesired operation of the device Cet appareil est conforme aux norms CNR exemptes de licence d Industrie Canada Le fonctionnement est soumis aux deux conditions suivantes 1 cet appareil ne doit pas provoquer d interf rences et 2 cet appareil doit accepter toute interf rence y compris celles susceptibles de provoquer un fonctionnement non souhait de l appareil Industry Canada Statement Complies with the Canadian ICES
104. ist the External Port Start External Port End Internal Port Start Internal Port End and the Protocol will be added in the table automatically You only need to enter the Server IP Address for the Virtual Server 4 4 5 2 Port Triggering Choose Advanced Setup NAT Port Triggering you can set Port Triggering on the screen shown in Figure 4 26 Some applications require that specific ports in the Router s firewall should be opened for access by remote devices Port Trigger dynamically opens up the Open Ports in the firewall when an 33 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T ME CTT To application on the LAN initiates a TCP UDP connection to a remote device using the triggering ports The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the open ports A maximum 32 entries can be configured Device Info Quick Setup NAT Port Triggering Setup Advanced Setup Layer2 Interface WAN Service Some applications require that specific ports in the Router s firewall be opened for access by the remote parties Port Trigger dynamically opens up the Open Ports in the firewall when an application on the LAN initiates a TCP UDP connection to a remote party using the Triggering Parts MAC Clone The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the
105. k for LAN Interface through which you can also access to the Web based Utility as the default IP Address and Subnet Mask 4 4 5 NAT NAT Network Address Translation allows you to share one WAN Wide Area Network IP address for multiple computers on your LAN Local Area Network cS Note When you select PPPoA or PPPoE for the WAN Setup or when you select Enable NAT for the type of IPoA and IPoE connection 4 4 2 WAN Service you will see the NAT menu in the Web based Utility shown in Figure 4 23 31 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT Choose Advanced Setup NAT there are three submenus under the main menu Virtual Servers Port Triggering DMZ Host and ALG Click any of them and you will be able to configure the corresponding function Device Info NAT Virtual Servers Setup Advanced Setup Layer2 Interface WAN Service MAC Clone Virtual Server allows you to direct incoming traffic from WAN side identified by Protocol and External port to the Internal server with private IP address on the LAN side The Internal port is required only ifthe external port needs to be converted to a different port number used by the server on the LAN side A maximum 32 entries can beconfigured gt Server Name External Port Start External Port End Protocol Internal Port Start Internal Port End Server IP Address WAN Interface Status Enable Disable Edit Remove NAT Virtual Servers Port Tr
106. k tp link com Service time 24hrs 7 days a week Turkey Tel 444 19 25 Turkish Service E mail support tr tp link com Service time 9 00 AM to 9 00 PM 7 days a week Ukraine Tel 0 800 505 508 E mail support ua tp link com Service time Monday to Friday 14 00 PM to 22 00 PM Brazil Toll Free 0800 770 4337 Portuguese Service E mail suporte br tp link com Service time Monday to Saturday 08 00 AM to 08 00 PM France Tel 33 0 820 800 860 French service Email support fr tp link com Fee 0 118 EUR min from France Service time Monday to Friday 9 00 AM to 6 00 PM Except French Bank holidays Russian Federation Tel 8 499 754 55 60 8 800 250 55 60 toll free call from any RF region E mail support ru tp link com Service time From 10 00 to 18 00 Moscow time Singapore Tel 65 62840493 E mail support sg tp link com Service time 24hrs 7 days a week USA Canada Toll Free 1 866 225 8139 E mail support usa tp link com Service time 24hrs 7 days a week Australia New Zealand Tel AU 1300 87 5465 NZ 0800 87 5465 E mail support tp link com au Service time 24hrs 7 days a week Italy Tel 39 0230519020 E mail support it tp link com Service time Monday to Friday 9 00 AM to1 00 PM 2 00 PM to 6 00 PM Indonesia Tel 62 021 6259 135 E mail support id tp link com Service time Monday to Friday 9 00 12 00 13 00 18 00 Except public holidays Malaysia Tel 1300
107. l 0 optional WPA Encryption AES v WEP Encryption Disabled Figure 4 85 71 TD W8960N IKiUU TA Tide tt PAN BES aie I e To T 0 E M S COT LT mm O T T CIVI le 6 Mixed WPA2 WPA Enterprise To configure Mixed WPA2 WPA Enterprise settings select the Mixed WPA2 WPA Enterprise option from the drop down list The menu will change to offer the appropriate settings The steps to these settings are similar to those for WPA PSK Wireless Basic Security WPS MAC Filter Enable WPS Wireless Bridge Advanced Station Info Diagnostics Manual Setup AP Management In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Mixed WPA2 WPA Enterprise adaptive WPA2 Preauthentication Disabled v Network
108. lows you to view the system log and configure the system log options ECCITTNENNME System Log The System Log dialog allows you to view the System Log and configure the System Log options Click View System Log to view the System Log Settings Click Configure System Log to configure the System Log options System Log SNMP Agent TR 069 Client Configure System Log Internet Time Figure 4 102 To View the System Log Click the View System Log button you will see the screen shown in Figure 4 103 which displays the Router s recent logs oystem Log Date Time Facility Severity Message Figure 4 103 80 TD W8960N BRIO E TTC CST SYST RM e Te T0 mm cole i UT ME CT Ie Refresh Click the button the information in the table will be updated Close Click the button the screen will be closed To Configure the System Log Settings Click the Configure System Log button shown in Figure 4 102 you will see the screen below shown in Figure 4 104 QuickSetup System Log Configuration Ifthe log mode is enabled the system will begin to log all the selected events For the Log Level all events above or equal to the selected level will be logged For the Display Level all logged events above or equal to the selected level will be displayed Ifthe selected mode is Remote or Both events will be sentto the specified IP address and UDP port ofthe remote syslog server Ifthe selected mode i
109. me Port Triggering Selecta Service Mail SMTP v DI Custom services Security Server IP Address 182 168 1 Parental Control Quality of Service Traffic Control Routing ERLIIOIEI EEr pfi a iege DNS DSL UPnP Interface Grouping LAN Ports IPSec Wireless Diagnostics Management Apply Save cs Note Your opposite side should call your WAN IP which is displayed on the Status page 4 How to enable DMZ Host Log in to the Router click the Advanced Setup NAT menu on the left of your browser and click DMZ Host submenu On the DMZ page type your IP address into the DMZ Host IP Address field using 192 168 1 222 as an example remember to click the Save Apply button Device Info NAT DMZ Host Quick Setup Advanced Setup Layer Interface The OSL Modem Router will forward IP packets from the WAN that do not belong to any ofthe applications configured in the a Virtual Servers table ta the DMZ host computer WAN Service LAN MAC Clone NAT Clear the IP address field and click Appl ta deactivate the DMZ host Enter the computer s IP address and click Saver amp pply to activate the DMZ hast Virtual Servers 3 z DMZ Host IP Address 192 158 1 222 Port Triggering Security Save Apply Parental Control Quality of Service 4 Iwantto build a WEB Server on the LAN what should do Log in to the Router click the Advanced Se
110. mentation Threshold This value specifies the maximum size for a packet before data is fragmented into multiple packets If you experience a high packet error rate you may slightly increase the Fragmentation Threshold Setting the Fragmentation Threshold too low may result in poor network performance Only minor reduction of the default value is recommended In most cases it should remain at its default value of 2346 Y Y RTS Threshold Should you encounter inconsistent data flow only minor reduction of the default value 2347 is recommended If a network packet is smaller than the preset RTS threshold size the RTS CTS mechanism will not be enabled The Router sends Request to Send RTS frames to a particular receiving station and negotiates the sending of a data frame After receiving an RTS the wireless station responds with a Clear to Send CTS frame to acknowledge the right to begin transmission This mechanism can provide you a quiet communication channel by notifying other stations not to send packet for a period of time In most cases keep its default value of 2347 Y DTIM Interval This value between 1 and 255 indicates the interval of the Delivery Traffic Indication Message DTIM A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages The countdown unit is measured by the amounts of beacon frames received When the Router has buffered broadcast or multicast mess
111. n in Figure 4 56 4 4 12 DSL Choose Advanced Setup gt DSL you can see the DSL Settings screen this screen allows you to configure the DSL shown in Figure 4 58 50 TD W8960N BRIO E TTC CST SYST RM e Te T0 mm cole E CT mm O T T CTT To Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control DSL Settings Select the modulation below G Dmt Enabled G lite Enabled T1 413 Enabled ADSL2 Enabled Quality of Service AnnexL Enabled Bandwidth Control ADSL2 Enabled Routing DNS DSL Select the phone line pair below UPnP Inner pair Interface Grouping IPSec Multicast Outer pair Wireless Capability Diagnostics Bitswap Enable Management C SRA Enable Figure 4 58 You can select the modulation type phone line pair and the capability of Bitswap or SRA After you set them up click Save Apply to save the configurations 4 4 13 UPnP Choose Advanced Setup gt UPnP you can Enable or Disable the UPnP Universal Plug and Play protocol on the screen UPnP Universal Plug and Play is a distributed open networking standard that uses TCP IP for simple peer to peer network connectivity between devices An UPnP device can dynamically join a network obtain an IP address convey its capabilities and learn about other devices on the network In turn a device can leave a network smoothly and automatically when it is no long
112. ncryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Open insecurity v WEP Encryption Disabled v Figure 4 67 Method One Hardware push button Step 1 Press the WPS button on the back panel of the Router Step 2 Press and hold the WPS button of the adapter directly for 2 or 3 seconds Step 3 Wait for a while until the next screen of adapter appears Click Finish to complete the WPS configuration 59 TD W8960N BRIO Te E TEES CST SYST RM e Te T0 mm cole CT mm UE ME CTT To 3 WPS for Wireless Wireless Confiquration Completed Your computer has successfully joined the TP LINK network Figure 4 68 Method Two Step 1 Press the WPS button on the back panel of the Router m MM M Se O G Mi LARA LANS ei Step 2 For the configuration of the wireless adapter please choose Push the button on my access point in the configuration utility of the WPS as below and click Next 60 TD W8960N BRIO E TTC CST SY STR e Te T0 LE celui CT mm DET T CTT To Ims WPS for Wireless Join a Wireless Network WES ix preparing to join your computer to a wireless network Which setup method do you want to use 2 Enter a PIN into my access point or a registrar CO Enter the PIN from my access point Push the button on your access point and click Nest ta continue Automatically sele
113. nected wireless station s MAC address gt Associated Displays whether the wireless station has associated with the access point 76 TD W8960N BRIO E TTE CST PAN EST RM e Te T0 mm cole E CT mm UET T ME CTTO Authorized Displays the information of Authentication gt SSID Displays the connected wireless station s SSID gt Interface Displays the connected wireless station s Interface mode 4 6 Diagnostics Choose Diagnostics you will see the Diagnostics screen This section describes the result of the test for the ENET Ethernet Connection Wireless Connection and ADSL Synchronization You can refer to the Help menu to get more information about the corresponding test Device Info Quick Setup Advanced Setup Wireless Diagnostics Management br 0 0 32 Diagnostics Your modem is capable of testing your DSL connection The individual tests are listed below If a test displays a fail status click Rerun Diagnostic Tests atthe bottom of this page to make sure the fail status is consistent If the test continues to fail click Help and fallow the troubleshooting procedures Test the connection to your local network Test your LAN1 Connection FAIL Help Test your LAN2 Connection Pass Help Test your LAN3 Connection FAIL Help Test your LAN4 WAN Connection FAIL Help Test your Wireless Connection PASS Help Test the connection to your DSL service provider Test xDSL Synchr
114. nnection has limited or no connectivity Figure 3 3 10 TD W8960N BRIO E TTC CST SY STR e Te T0 LE celui CT mm DET T CTT To Step 4 Configure the IP address as Figure 3 4 shows After that click OK Internet Protocol TCP7IP Properties General ou can get IP settings assigned automatically if your network supports this capability Othenwise you need to ask your network administrator For the appropriate IP settings C3 Obtain an IP address automatically errr ere rrr erie rrr reer reer rier Use the following IP address IP address 192 168 1 2 Subnet mask 255 255 255 D a Default gateway 192 168 1 Use the following DNS server addresses Preferred ONS server ea Altemate DHS server I Figure 3 4 cf Note You can configure the PC to get an IP address automatically select Obtain an IP address automatically and Obtain DNS server address automatically in the screen above Now you can run the Ping command in the command prompt to verify the network connection Please click the Start menu on your desktop select run tab type cmd or command in the field and press Enter Type ping 192 168 1 1 on the next screen and then press Enter If the result displayed is similar to the screen below the connect
115. not take effect LAN i NAT Upstream Bandwidth Kbps Downstream Bandwidth Kbps Description Priority Status Edit L Security Min Max Min Max Parental Control Quality of Service Bandwidth Control Figure 4 46 To add a TC rule click the Add button and you can configure it in the screen as shown in Figure 4 47 Device Info Quick Setup Bandwidth Control Rule Configuration Advanced Setup Layer2 Interface This page allows you to configure a Bandwidth Control rule entry Each of the rules can be configured for a specific priority The rule entry configured here will be used to control WAN Service the rates of upstream and downstream packets MAC Clone Click Save Apply to save the rule LAN NAT Rule Status Enable Disable Security IP Range 192 168 1 101 192 168 1 103 Parental Control Port Range 80 Quality of Service Protocol TCP v Priority Highest w Min Rate Max Rate Routing Upstream 100 200 Kbps DNS Downstream 400 800 Kbps DSL UPnP Interface Grouping Save Apply IPSec Figure 4 47 Rule Status Select the status of the rule from the drop down list to enable or disable the rule IP Range Enter a single IP address or a range of IP addresses Port Range Enter a single port or a range of ports Y Vv V WV Protocol Select a protocol type from the drop down list TCP UDP and ALL are available here gt Priority Select pri
116. nterface Figure 4 21 gt IP Address You can configure the Router s IP Address and Subnet Mask for LAN Interface e IP Address Enter the Router s local IP Address then you can access to the Web based Utility via the IP Address the default value is 192 168 1 1 e Subnet Mask Enter the Router s Subnet Mask the default value is 255 255 255 0 gt Enable IGMP Snooping If you select the option please choose the IGMP Mode Standard Mode or Blocking Mode gt DHCP Server These settings allow you to configure the Routers Dynamic Host Configuration Protocol DHCP server function The DHCP server is enabled by default for the Router s Ethernet LAN interface DHCP service will supply IP settings to computers which are configured to automatically obtain IP settings that are connected to the Router though the Ethernet port When the Router is set for DHCP it becomes the default gateway for DHCP 30 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO client connected to it Keep in mind that if you change the IP address of the Router you must change the range of IP addresses in the pool used for DHCP on the LAN e Start IP Address Enter a value for the DHCP server to start with when issuing IP addresses Because the default IP address for the Router is 192 168 1 1 the default Start IP Address is 192 168 1 2 and the Start IP Address must be 192 168 1 2 or greater but smaller than 192 168 1 254 e End IP Addres
117. oO S Interface Grouping M Figure 4 53 fe Note RIP cannot be configured on the WAN Interface which has NAT enabled such as PPPoE To activate RIP for the device configure an individual interface select the desired RIP version and operation and select Enabled checkbox for the interface Click Save Apply to save the configuration 4 4 11 DNS When you select the connection type PPPoE PPPoA or IPoA for WAN configuration you will see the DNS menu in the Web based Utility shown in Figure 4 54 It includes DNS Server and Dynamic DNS submenus 48 TD W8960N BRIO E TEC CST PN STR M e Te T0 mm cole E CT mm O T T CTT To Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing DNS DNS Server Dynamic DNS DSL UPnP Interface Grouping IPSec Multicast DNS Server Configuration Select DNS Server Interface from available WWAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single PVC with IPoA or static IPoE protocol is configured Static DNS server IP addresses must be entered DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used according to the priority with the first being the higest and the last one the lowest priority if the WAN interface is connected Priority order can be changed by removing all and adding t
118. oided being surveyed Clients Isolation Select this option to enable AP isolation function so that stations associated to the AP will not be able to communicate with each other SSID Wireless network name shared among all points in a wireless network The SSID must be identical for all devices in the wireless network It is case sensitive and must not exceed 32 characters use any of the characters on the keyboard Make sure this setting is the same for all stations in your wireless network Type the desired SSID in the space provided BSSID Show the MAC address of the Router 57 TD W8960N BRIO E TTE CST PAN EST RM e Te T0 mm cole E CT mm UET T ME CTTO gt Country Restrict the channel set and transmit power Click Apply Save to save your settings 4 5 2 Security Choose Wireless Security you will see the screen of Wireless Security settings shown as below You can configure security features of the wireless LAN interface by manually setting the network authentication or through WPS Wi Fi Protected Setup method Device Info Quick Setup Wireless Security Advanced Setup Wireless 3 This page allows you to configure security features ofthe wireless LAN interface Basic You may setup configuration manually or through Wi Fi Protected Setup WPS Security MAC Filter Wireless Bridge WPS ante Enable WPS Enabled w Station Info Diagnostics R Add Client This feature is available only
119. on across diverse interconnected networks Internet Protocol Version 4 TCP IPv General Alternate Configuration You can get IP settings assigned automatically if your network supports this capability Otherwise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically Use the following IP address Select Obtain an IP address automatically m LJ ae pa aa J tele nm Select Obtain DNS server address automatically 5 Use the following DNS server addresses Ikaran ske MR 2a Advanced Click OK 94 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI For Windows 7 OS bue ABl odo Control Panel Go to Start gt Settings gt Control Panel and then you will see the following page Adjust your computer s settings View ky Category User Accounts and Family Safety BP add or remove user accounts System and Security Review your computer s status Back up your computer Mg Set up parental controls for any user Find and fix problertes Appearance and Personalization Change the theme Click View network status and tasks Change deklop background Adjust screen resolution Hardware and Sound li View desires and pointers Add a dence Clock Language and Region Change keyboards on ether spui nveth ds Change display l
120. one Remote IPSec Gateway Address URL IPv4 0 0 0 0 LAN NAT Tunnel access from local IP addresses Subnet v Security IP Address for VPN 0 0 0 0 Parental Control IP Subnetmask 255 255 255 0 Quality of Service z Tunnel access from remote IP addresses Subnet v Bandwidth Control IP Address for VPN 0 0 0 0 Routing IP Subnetmask 255 255 255 0 Key Exchange Method uto IKE v UPnP Authentication Method Pre Shared Key v Interface Grouping Pre Shared Key key IPSec Perfect Forward Secrecy Disable v Multicast Advanced IKE Settings Show Advanced Settings Advanced Settings Wireless Diagnostics Management Save Apply Figure 4 63 gt IPSec Connection Name Enter a name for your VPN Remote IPSec Gateway Address IP or Domain Name Enter the destination gateway IP address in the box which is the public WAN IP or Domain Name of the remote VPN server endpoint For example Input 219 134 112 247 in Device1 Input 219 134 112 246 in Device 2 54 VV WV TD W8960N BRIO E CST PAN ST RM e Te T0 mm cole E CT mm DET CTTO Tunnel access from local IP addresses Choose Subnet if you want the Whole LAN to join the VPN network or else choose Single Address if you want single IP to join the VPN network IP Address for VPN Enter the IP address of your LAN For example Input 192 168 1 1 in Device1 Input 192 168 2 1 in Device2 IP Subnetmask Enter the Subnet mask of yo
121. one LAN NAT Figure 4 5 gt ETH port Select an ETH port to configure as the WAN port Click Save Apply to save your settings and then you will see the screen similar to Figure 4 6 Device Info Quick Setup ETH WAN Interface Configuration Advanced Setup Layer2 Interface h fi H WAN i ATM Interface Choose Add or Remove to configure ETH WAN interfaces Allow one ETH as layer 2 wan interface WAN Service Interface Name Connection Mode Remove MAC Clone eth3 LANAMVAN DefaultMode go Security Parental Control Figure 4 6 gt Remove Select the check box in the table on the screen above and then click the Remove button the corresponding interface will be deleted in the table 20 TD W8960N BRIO E TTC CST PN ST RM e Te T0 mm cole E CT mm UE T ME CTT To Cf Note One ETH is allowed to configure as the layer 2 WAN Interface 4 4 2 WAN Service Choose Advanced Setup gt WAN Service and you will see the WAN Port Information Table in the screen similar to Figure 4 7 which describes the WAN port settings and the relevant manipulation to each interface After you add a new Lay2 Interface please follow the instructions below to complete the further configuration of WAN Interface There are five different configurations for the connection types which are PPPoE IPoE Bridge PPPoA and IPoA You can select the corresponding types according to your needs Device Info Quick Setup Wide Area Net
122. onization FAIL Help Test ATM OAM F5 segment ping DISABLED Help Test ATM OAM F5 end to end ping DISABLED Help Figure 4 95 4 7 Management Choose Management there are eight submenus under the main menu They are Settings System Log SNMP Agent TR 069 Client Internet Time Access Control Update Firmware and Reboot Click any of them and you will be able to configure the corresponding function Management Settings System Log SNMP Agent TR D69 Client Internet Time Access Control Upgrade Firmware Reboot 4 7 1 Settings This section provides three important functions for managing the Router they are Backup Update and Restore Default shown in Figure 4 96 The detailed manipulations are described below T TD W8960N BRIO Te E TTC CST PN STR e T T0 mm SCOTI CT mm DET ME CTT To Device Info Quick Setup Settings Export Advanced Setup Wireless Backup DSL Modem Router configurations You may save your router configurations to a file on your PC Diagnostics Management Settings Export T Import J Restore Default Figure 4 96 4 7 1 1 Export Choose Management Settings Export you can see the Export screen this screen shown in Figure 4 97 allows you to save the current configuration of the Router as a backup file Device Info Quick Setup Settings Export Advanced Setup Wireless Backup DSL Modem Router configurations You may save your router
123. orient or relocate the receiving antenna e Increase the separation between the equipment and receiver e Connect the equipment into an outlet on a circuit different from that to which the receiver is connected e Consult the dealer or an experienced radio TV technician for help This device complies with part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference 2 This device must accept any interference received including interference that may cause undesired operation Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment Note The manufacturer is not responsible for any radio or tv interference caused by unauthorized modifications to this equipment Such modifications could void the user s authority to operate the equipment FCC RF Radiation Exposure Statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment This device and its antenna must not be co located or operating in conjunction with any other antenna or transmitter To comply with FCC RF exposure compliance requirements this grant is applicable to only Mobile Configurations The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co located or operating in conjunct
124. ority form the drop down list There are five options Highest 1 2 3 4 5 6 and Lowest The default precedence of the rule is 4 gt Upstream Enter the min and max upload speed through the WAN port gt Downstream Enter the min and max download speed through the WAN port 45 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO After completing the above configuration click the Save Apply button to make it take effect and then you will see the following list as shown in Figure 4 48 If you want to modify the rule click the Edit button If you want to delete the rule check the Remove box first and then click the Remove button Device Info Quick Setup Bandwidth Control Rules List Advanced Setup Layer2 Interface This page displays Bandwidth Control rules You can click corresponding buttons to configure these rules A maximum 16 entries can beconfigured If max bandwidth is not configured or greater than total bandwidth then it will take effect with total bandwidth MAC Clone Make sure the sum of min bandwidth is lesser than total bandwidth otherwise Bandwidth Control may not take effect LAN NAT Upstream Bandwidth Kbps Downstream Bandwidth Kbps Description Priority N Status Edit L1 Security Min Max Min Max Parental Control 192 168 1 101 192 168 1 103 80 TCP 0 100 200 400 800 Enabled go Quality of Service Bandwidth Control Routing Figure 4 48 cS Note The p
125. ote Because the WEB Server port 80 will interfere with the WEB management port 80 on the Router you will be prompt to change the WEB management port number to avoid interference Bicrosoft Internet Explorer Since port B iz used the DSL router WEB server port for your remote access will be moved to S050 5 The wireless stations cannot connect to the Router 1 Make sure the Enable Wireless Router Radio is checked 2 Make sure that the wireless stations SSID accord with the Router s SSID 3 Make sure the wireless stations have right KEY for encryption when the Router is encrypted 4 If the wireless connection is ready but you can t access the Router check the IP Address of your wireless stations 89 TD W8960N BRIUU E TTC CST AN ST RM e T T0 mm cole E CT mm UE mC lei e Appendix B Configuring the PC For Windows XP OS Go to Start gt Control Panel you will then see the following page Click Network and Internet Connections Click Network Connections Right click Local Area Connection Click Properties Ja Control Panel Je Switch to Classic View See Also A windows Update Help and Support 3 Other Control Panel Options Pick a category I X Printers and Other K e Appearance and Themes Cr Hardware Network and Internet Connections TO Add or Remove Programs Sounds Speech and Audio Devices User Accounts Date Time Langua
126. owser is running MAC Clone To restrict other LAN device click the Other MAC Address button and enter the MAC address ofthe other LAN device T To find outthe MAC address of a Windows based PC go to command window and type ipconfig tall NAT User Name child 1 Security Parental Control Browser s MAC Address e0 be Other MAC AddressQocxx20cxx2o0cxx 00 11 22 33 44 CC URL Filter Days of the week Mon Tue Wed Thu Fri Sat Sun Quality of Service Bandwidth Control assis R L1 L1 Routing Start Blocking Time hh mm 18 00 DNS End Blocking Time hh mm 21 00 DSL UPnP Interface Grouping Save Apply IPSec Figure 4 37 2 Enter the User Name of the LAN device connected to the Router 3 To restrict the device where the browser is running select the Browser s MAC Address radio button The MAC Address has been automatically displayed in the text box To restrict other LAN devices click Other MAC Address radio button and enter the MAC address of the other LAN device 4 Select the day to allow the rule to take effect in the table 5 Enter the Start Blocking Time and End Blocking Time in the text box separately and then the device controlled will then be unable to connect to the internet during that time 6 Click Save Apply to save this entry and then you will see your settings as shown in Figure 4 36 Cf Note The Time Restriction will not work correctly before the time of the device is set in Man
127. ption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Shared good v WEP Encryption Enabled v Encryption Strength 128 bit wv Current Network Key lv Network Key 1 1234567890 Network Key 2 Network Key 3 Network Key 4 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Figure 4 78 We use Network Authentication Shared good Encryption Strength 64 bit Current Network Key 1 and enter 10 hexadecimal digits 1234567890 in the Network Key 1 for example as shown in Figure 4 78 above 67 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT 2 WPA WPA security for wireless communication has been developed to overcome some of the shortcomings of WEP WPA combines the key generation with the authentication services of a RADIUS server Device Info FLP Wireless Security Advanced Setup Wireless This page allows you to configure security features ofthe wireless LAN interface Basic You may setup configuration manually or through Wi Fi Protected Setup PS Security MAC Filter Wireless Bridge WPS Advanced Enable WPS Station Info Diagnostics Management Manual Setup AP In order to protect your network from hackers and unauthorized users it is
128. r WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Mixed WPA2 WPA PSK Personal adaptive v Wireless Network Key Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters optional WPA Group Rekey Interval WPA Encryption WEP Encryption Figure 4 87 12 TD W8960N BRIO E TTC CST PN STR M e Te T0 mm a COT T E CT mm UE ME CITT 4 5 3 MAC Filter Choose Wireless MAC Filter you will see the screen of Wireless MAC Filter settings shown as below QuickSetup Wireless MAC Filter A maximum 64 entries can beconfigured MAC Restrict Mode Disabled OAlow O Deny MAC Address Remove 00 13 0 55 FF 09 g Figure 4 88 Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your network s RADIUS To filter wireless users by MAC Address either permitting or blocking access If you do not wish to filter users by MAC Address select Disabled Disabled Select this option to disable MAC Filter function Allow Select this option to enable MAC Filter function that allow wireless access by the devices listed on this screen Deny Select this option to enable MAC Filter function that block wireless access from the devices listed on thi
129. re information There is a device connected to this LAN port LJ LAN1 4 The modem router is sending or receiving data over this LAN port Off There is no device connected to this LAN port f Note If the ADSL LED is off please check your Internet connection first Refer to 2 3 Connecting the Router for more information about how to make Internet connection correctly If you have already made a right connection please contact your ISP to make sure if your Internet service is available now TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI 2 If the Internet LED is off please check your ADSL LED first If your ADSL LED is also off please refer to Note 1 If your ADSL LED is GREEN ON please check your Internet configuration You may need to check this part of information with your ISP and make sure everything have been input correctly Refer to 4 2 Device Info for more information 1 3 2 The Back Panel The Router s ports where the cables are connected and RESET button are located on the back panel alli Tt T Figure 1 2 ADSL Connect to the Modem Port of Splitter or to the telephone line gt LAN1 LAN2 LAN3 LAN4 WAN Through these ports you can connect the Router to your PC or the other Ethernet network devices Enable EWAN function and you will be able to connect to Cable FTTH VDSL ADSL device gt WiFi The switch for the WiFi function RESET There are two ways to reset the Router s fac
130. ream Downstream Bandwidth is not greater than Line Upstream Downstream Rate otherwise Bandwidth Control may not take effect Enable Bandwidth Control Line Type ADSL Other Total Upstream Bandwidth Kbps Total Downstream Bandwidth Kbps Figure 4 45 Enable Bandwidth Control Check this box to enable the Bandwidth Control function Total Upstream Bandwidth Kbps Enter the upload speed through the WAN port Total Downstream Bandwidth Kbps Enter the download speed through the WAN port Save Apply Click this button to make the configuration take effect 44 TD W8960N BRIO E TTC CST PN ST RM e Te T0 mm cole E CT mm UE T ME CTT To cf Note The Total Upstream Bandwidth and Total Downstream Bandwidth are required to be configured 4 4 9 1 Traffic Control Rule Choose Advanced Setup Traffic Control Traffic Control Rule and then you will see the screen as shown in Figure 4 46 This page allows you to view and configure TC rules Device Info Quick Setup Bandwidth Control Rules List Advanced Setup Layer2 Interface This page displays Bandwidth Control rules You can click corresponding buttons to configure these rules A maximum 16 entries can beconfigured WAN Service If max bandwidth is not configured or greater than total bandwidth then it will take effect with total bandwidth MAC Clone Make sure the sum of min bandwidth is lesser than total bandwidth otherwise Bandwidth Control may
131. riority max upstream downstream rate and min upstream downstream rate work on allocation of surplus upload download bandwidth For rules with different priority the surplus bandwidth is firstly allocated to the rule with the highest priority according to its max upstream downstream rate If there still has surplus bandwidth it is allocated to the rule with hypo high priority For rules with the same priority the surplus bandwidth is allocated to them according to their min upstream downstream rate The greater a rule s min upstream downstream rate is the more bandwidth it gets 4 4 10 Routing Choose Advanced Setup gt Routing it includes three menus Default Gateway Static Route and RIP shown in Figure 4 49 The detailed descriptions are provided below Device Info Quick Setup Routing Default Gateway Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the highest and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing all and adding them back in again Selected Default Gateway Interfaces Available Routed WAN Interfaces Routing Default Gateway Static Route RIP Save Apply Figure
132. rsion 1 0 1 Build 120417 Rel 52091 TD W8960N V4 0x00000001 System Running time Day s 00 01 58 LAN Info LAN IP Address 192 168 1 1 LAN MAC Address b0 48 7a ce 48 bb ADSL Info Line State Down Line Rate Upstream Kbps Internet Info Line Rate Downstream Kbps Status Down WAN Type ATM WAN Layer Interface atm4 8 35 Connection Type PPPoE WAN IP Address 0 0 0 0 Shortcut Click here to view all WAN interface s status and troubleshooting information Figure 3 9 Change the VPI or VCI values which are used to define a unique path for your connection If you have been given specific settings for this to configuration type in the correct values assigned by your ISP Here we select PPPoE ADSL WAN Link Type for example enter the 13 TD W8960N BRU TA Tide t te PAN BES ale eT T 0 E M S COT V LT mm O T TE CIVI le PPP Username and PPP Password given by your ISP and then click Next Device Info Quick Setup Quick Setup WAN Configurations Advanced Setup Wireless Diagnostics VPINCE 8 0 255 32 65535 Management Encapsulation Mode LLC SNAP BRIDGING wv optional WAN Link Type PPPoE PPP over Ethernet w PPP Username pl PPP Password DE PPPoE Service Name DOO optional MTU bytes optional Figure 3 10 cs Note The Qu
133. rt Import Settings B EET Default j Figure 4 100 To update the Router s settings 1 Click the Browse button to locate the update file for the device and you can also enter the exact path to the Setting file in the text box 2 After you have selected the file for updating the settings click the Import Settings button c Note The Router will reboot upon completion This process will take a while don t turn off the Router or press the Reset button while processing 19 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME CTI 4 7 1 3 Restore Default Choose Management Settings Restore Default you can see the Restore Default screen this screen shown in Figure 4 101 allows you to restore the Router s configuration to the factory defaults on the screen Device Info Quick Setup Tools Restore Default Settings Advanced Setup Wireless Diagnostics Restore DSL Modem Router settings to the factory defaults Management Restore Default Settings Figure 4 101 Y Restore Default Settings Click this button to restore the Router s configuration to the factory defaults and then follow the on screen instructions to complete it Account and Password The default account name and its password are both admin The default IP Address 192 168 1 1 The default Subnet Mask 255 255 255 0 Choose Management System Log you can see the System Log screen this screen shown in Figure 4 102 al
134. s Enter a value for the DHCP server to end with when issuing IP addresses The End IP Address must be smaller than 192 168 1 254 The default End IP Address is 192 168 1 254 e Leased Time hour The Leased Time is the amount of time in which a network user will be allowed connection to the Router with their current dynamic IP address Enter the amount of time in hours then the user will be leased this dynamic IP address After the dynamic IP address has expired the user will be automatically assigned a new dynamic IP address The default is 24 hours Y Static IP Lease List The function allows you to specify a reserved IP address for a PC on the LAN that PC will always obtain the assigned IP address each time when it accesses the DHCP server Reserved IP addresses should be assigned to servers that require permanent IP settings Click the Add Entries button and then you will set the rule in the screen as below Advanced Setup Layer2 Interface DHCP Static IP Lease Enter the Mac address and Static IP address then click Save Apply WAN Service pply MAC Clone MAC Address IP Address Parental Control Quality of Service Figure 4 22 e MAC Address The MAC address of the computer on the LAN which you want to reserve an IP e P Address The IP address you want to reserved to the computer Configure the second IP Address and Subnet Mask You can configure the Router s second IP Address and Subnet Mas
135. s Local or Both events will be recorded in the local memory Selectthe desired values and click SavelApply to configure the system log options Log Disable O Enable ERES a i D Figure 4 104 Disable Enable Select the Enable to log the events if you don t want to log these events please select Disable Log Level Select the Log level in the drop down list for the Log level all events above or equal to the selected level will be logged Display Level Select the Display level in the drop down list for the Display Level all logged events above or equal to the selected level will be displayed Mode Select the mode to record the events If the selected mode is Local events will be recorded in the local memory If the selected mode is Remote events will be sent to the specified IP address and UDP port of the remote system log server If the selected mode is Both events will be sent to the local memory and the remote system log server Server IP Address Type the address of the server you want to record the events Server UDP Port Type the UDP Port of the server 4 7 3 SNMP Agent Choose Management SNMP Agent you can see the SNMP Configuration screen as shown SNMP Simple Network Management Protocol has been widely applied in the computer networks currently which is used for ensuring the transmission of the management information between any two nodes In this way network administrators can eas
136. s access point functionality Wireless bridge functionality will still be available and wireless stations will be able Secuiy to associate to the AP Select Disabled in Bridge Restrict which disables wireless bridge restriction Any wireless bridge will be granted access Selecting Enabled or Enabled z Scan enables wireless bridge restriction Only those bridges selected in Remote Bridges will be granted access MAC Filter Click Refresh to update the remote bridges Wait for few seconds to update Wireless Bridge Click SaverApply to configure the wireless bridge options AP Mode Access Point wj Station Info ET TN Bridge Restrict Disabled v Management Save Bpply Figure 4 90 AP Mode Select an AP Mode from the drop down list Options available are Access Point and Wireless Bridge Y e Access Point Select this option to allow wireless stations including AP clients to access e Wireless Bridge Also known as WDS Wireless Distribution System it will bridges the wireless stations which also in bridge mode to connect two or more remote LANs Y Bridge Restrict e Disabled Select this option to disables wireless bridge restriction that any wireless bridge will be granted access e Enabled Select this option as shown below to enables wireless bridge restriction please enter the MAC address of the Remote Bridges that you want to connect with and only these Remote Bridges are granted access
137. s screen Add Click this button to add the MAC Address gt Remove Select the item of the MAC Address and click this button to remove it When you click the Add button the pop up picture shown below and then you can type the MAC Address in the MAC Address field Cf Note The form of MAC Address must be Xx Xx xx xx xx xx like 00 13 0A 55 FF 09 Device Info Wireless MAC Filter Advanced Setup Wireless Basi Enter the MAC address with 00 11 22 33 44 55 format and click Save Apply to add the MAC address to the wireless MAC address filters Basic MAC Address 00 13 04 55 FF 08 MAC Filter Wireless Bridge Advanced Save Apply Station Info Figure 4 89 When you finished making changes to the MAC Filter List screen click Save Apply to save the changes 4 5 4 Wireless Bridge Choose Wireless Wireless Bridge you will see the screen of Wireless Bridge settings shown as below You can configure wireless bridge features of the wireless LAN interface and click Apply Save button to save the current configuration 13 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT Diagnostics cc Wireless Bridge Advanced Setup This page allows you to configure wireless bridge features ofthe wireless LAN interface You can select Wireless Bridge also known as Wireless Distribution System to disable access point functionality Selecting Access Point enable
138. settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication WPA Personal better recommended v Wireless Network Key Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters WPA Group Rekey Interval optional WPA Encryption AES v WEP Encryption Disabled Figure 4 81 gt Wireless Network Key Enter the key shared by the Router and your other network devices It must have 8 63 ASCII characters or 8 64 Hexadecimal digits Click here to display Click it to show you the WPA Pre Shared Key 69 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT Configure WPA Personal settings 1 Select WPA Personal The menu will change to offer the appropriate settings as the picture show above 2 WPA Personal requires a shared key Type the key in the spac
139. sses and or Destination IP Addresses are controlled by the rule if you leave the Source Port and or Destination Port blank it suggests that all Source Ports and or Destination Ports are controlled by the rule 4 4 6 2 MAC Filtering Choose Advanced Setup Security MAC Filtering you can configure MAC Filtering rules on the screen as shown in Figure 4 33 The section allows you to control access to the Internet by users on your local network based on their MAC Address cs Note MAC Filtering is only effective on ATM PVC s configured in Bridging mode 37 Device Info Quick Setup Advanced Setup _Layer2 Interface WAN Service MAC Clone LAN NAT Security IP Filtering Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management TD W8960N BRIUU E CST PN EST RM e Te T0 LE cole E CT mm UET T mm CT To MAC Filtering Setup MAC Filtering is only effective on ATM PV Cs configured in Bridge mode FORWARDED means that all MAC layer frames will be FORWARDED except those matching with any of the specified rules in the following table BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any ofthe specified rules in the following table MAC Filtering Policy For Each Interface WARNING Changing from one policy to another of an interface will cause all defined rules for that interface to be REM
140. ssion Unit Size Check this box then you can change the MTU size The default MTU value is 1480 Bytes It is not recommended that you change the default value unless required by your ISP 22 TD W8960N BRIO Te E TTC CST SYST RM e Te T0 mm cole E CT mm DET T CTTO Enable Fullcone NAT It is a type of NAT if not enabled the default NAT will act Dial on demand with idle timeout timer The Router will cut off the Internet connection after it has been inactive for a specific period of time idle timeout and it will automatically re establish the connection as soon as you attempt to access the Internet again If your Internet is charged by time you may want to select this option in order to save money Y PPP IP extension Select this option to get the public IP address from the PPP server to your PC and the NAT and SPI Firewall will be closed Sometimes you can think it as bridge while PPP dialing in the router Its a special feature deployed by some ISP Unless your ISP specifically requires this setup do not select it Use Static IPv4 Address If your ISP gives you a static WAN Gateway and DNS IP address select this option to enter them manually Y Y Enable PPP Debug Mode Select this option to debug the PPP function and you can see many PPP log information in the System Log Only PPP has this debug Mode Bridge PPPoE Frames Between WAN and Local Ports Select this option to start PPP connection in your local PC Y Y
141. steps 2 How do I configure the Router to access Internet by Ethernet users Log in to the Router and configure the WAN connection type as IPoE connection mode The detailed steps please refer to section 4 4 2 2 ATM EoA IPoE I want to use NetMeeting what do I need to do If you start NetMeeting as a sponsor you don t need to do anything with the Router If you start as a response you need to configure Virtual Server or DMZ Host How to configure Virtual Server Log in to the Router click the Advanced Setup NAT menu on the left of your browser and click Virtual Servers submenu On the Virtual Servers page click Add and enter 1720 for the service port using 192 168 1 222 for Server IP Address remember to click the Save Apply button 87 TD W8960N BRIO ONE TTE CST SYST RM e T T0 mm cole CT mm Oly ME CITT Device Info Quick Setup NAT Virtual Servers Advanced Setup Layer Interface TE R s ES Loe Select the service name and enter the server IP address and click Apply save to forward IP packets far this service ta the WAN Service specified server LAN NOTE The Internal Port End cannot be modified directly Normally it is set to the same value as External Port End However if you modify Internal Port Start then Internal Port End will be set to the same value as Internal Port Start MAC Clone Remaining number of entries that can be configured 32 NAT Use Interface E Service Na
142. t Wireless Security This page allows you to configure security features of the wireless LAN interface You may setup configuration manually or through Wi Fi Protected Setup PS WPS Enable WPS Enabled w Add Client This feature is available only when WPA PSK VWWPA2 PSK or OPEN mode is configured Push Button PIN Add Enrollee Help Device PIN 49518863 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Open insecurity v WEP Encryption Disabled v Apply Save Figure 4 75 gt Network Authentication Select an authentication type from the drop down list Options available are Open Shared WPA WPA PSK WPA2 WPA2 PSK Mixed WPA
143. t Protocol allows a Auto Configuration Server ACS to perform auto configuration provision collection and diagnostics to this device 82 TD W8960N BRIO Te E TEC CST PN STR M e T T0 mm cole E CT mm UE ME CTT To Device Info Advanced Setup Wireless Diagnostics Management System Log SNMP Agent TR 069 Client Internet Time Access Control Upgrade Firmware Reboot TR 069 client Configuration WAN Management Protocol TR 069 allows a Auto Configuration Server ACS to perform auto configuration provision collection and diagnostics to this device Selectthe desired values and click Save Apply to configure the TR 069 client options Inform Inform Interval ACS URL ACS User Name ACS Password WAN Interface used by TR 069 client Display SOAP messages on serial console Connection Request Authentication Disable Enable 300 l J admin Any_WAN v Disable Enable Connection Request User Name admin Connection Request Password Connection Request URL Figure 4 106 Inform You can select the checkbox to disable or enable the Inform Interval Yv WV Inform Interval Type the interval time of your Router contact with the ACS ACS URL Please accept this information from your ISP And through ACS Auto Configuration Server you can perform auto configuration provision collection and diagnostics to this router Y ACS
144. t screen as below You can enable the NAT SPI Firewall and IGMP Multicast if you are not sure about the settings just leave the default settings Click Next Network Address Translation Settings Network Address Translation NAT allows you to share one Vide Area Network VAN IP address for multiple computers on your Local Area Network LAN d C Enable Fullcone NAT Enable Firewall Securty IGMP Multicast Enable IGMP Multicast Rowing DS o Figure 4 16 Enable NAT This technology translates the IP addresses of a local area network to a different IP address for the Internet If this Router is hosting your network s connection to the Internet please select the check box If another Router exists in your network you don t need to select the option 26 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT Enable Firewall A SPI firewall enhances network s security Select the option to use a firewall or else without a firewall Enable IGMP Multicast This is disabled by default This setting will not allow IGMP Internet Group Management Protocol packets to be forwarded to the LAN IGMP is used to manage multicasting on TCP IP networks Most users will not need to enable this Some ISPs use IGMP to perform remote configuration for client devices such as the Router If you are unsure check with your ISP Cf Note If you select the Enable NAT checkbox the NAT menu will be adde
145. ter for a wireless PC card It corresponds to the ESSID in the wireless Access Point and to the wireless network name Static IP Address A fixed address assigned to a computer or device that is connected to a network 100 V Y V WV TD W8960N BRIO E TTE CST PAN EST RM e Te T0 mm cole E CT mm UET T ME CTTO Static Routing Forwarding data in a network via a fixed path Subnet Mask An address code that determines the size of the network TCP Transmission Control Protocol A network protocol for transmitting data that requires acknowledgement from the recipient of data sent TCP IP Transmission Control Protocol Internet Protocol A set of instructions PCs use to communicate over a network TKIP Temporal Key Integrity Protocol a wireless encryption protocol that provides dynamic encryption keys for each packet transmitted UDP User Datagram Protocol A network protocol for transmitting data that does not require acknowledgement from the recipient of the data that is sent VCI Virtual Channel Identifier The identifier of the VC contained in the ATM cell header VPI Virtual Path Identifier The identifier of the VP contained in the ATM cell header Update To replace existing software or firmware with a newer version VLAN Virtual Local Air Network Logical subgroups that constitute a Local Area Network LAN This is done in software rather than defining a hardware solution VLAN ID 0 4095 Indicates t
146. ting an existing application or creating your own Custom application and click SaverApply to add it MAC Clone Remaining number of entries that can be configured 32 LAN Use Interface pppoe_0_8_35 ppp0 2 v NAT Application Name Virtual Servers Select an application Select One m Custom application DMZ Host ALG Security Trigger Port Start Trigger Port End Trigger Protocol Open Port Start Open Port End Open Protocol TCP v TCP v Parental Control TC TCP i i Quality of Service Bandwidth Control 3 A d lt TCP lt Routing C DNS DSL UPnP e d C TCP 3 a d lt lt e d TCP THT THT ii THT TOT ii Interface Grouping IPSec t1 d lt TCP lt Multicast Wireless Save Apply Diagnostics Figure 4 27 34 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT 2 Select the application from the drop down list If the list does not have the application that you want select the Custom application radio button and type the name of the custom application in the text box 3 Enter the Trigger Port Start Trigger Port End Open Port Start and Open Port End in the table and then select the Trigger protocol and Open protocol TCP UDP or All 4 Click Save Apply to enable the settings and then you will see your settings as shown in Figure 4 26 ce Note
147. to the image file location in the box below or click the Browse button to locate the image file System Log Step 3 Click the Update Firmware button once to upload the new image file SNMP Agent NOTE The update process takes about 2 minutes to complete and your DSL Router will reboot TR 069 Client internet Time Firmware File Name Access Control Upgrade Firmware Reboot Figure 4 109 gt Browse Click the button to locate the latest software for the device gt Update Firmware After you have selected the latest software click the button To update the Router s software 1 Download the latest software upgrade file from the TP LINK website http www tp link com cn 2 Click Browse to view the folders and select the image file or enter the exact path to the image file location in the text box 3 Click the Update Firmware button Cf Note 1 There is no need to upgrade the firmware unless the new firmware has a new feature you want to use However when experiencing problems caused by the Router itself you can try to upgrade the firmware 2 Before upgrading the Router s firmware you should write down some of your customized settings to avoid losing important configuration settings of the Router 3 Do not turn off the Router or press the RESET button while the software is being updated 4 The Router will reboot after the Upgrading is finished 85 TD W8960N BRIO E TEC CST PN STR e T T0 mm cole E CT mm UE ME C
148. tory defaults 1 Use the Restore Default function on Management gt settings gt Restore Default page in the router s Web based Utility Y VV WV TD W8960N BRIUU Te E CST AN hoy RM e T T0 LE celui CT mm UET T mm CITT Use the Factory Default RESET button With the Router powered on use a pin to press and hold the RESET button for at least 5 seconds And the Router will reboot to its factory default settings WPS The switch for the WPS function For details please refer to 4 5 2 1 WPS Setup ON OFF The switch for the power POWER The Power plug is where you will connect the power adapter Wireless Antennas To receive and transmit the wireless data Chapter 2 Connecting the Router 2 1 System Requirements Broadband Internet Access Service DSL Cable Ethernet gt PCs with a working Ethernet Adapter and an Ethernet cable with RJ45 connectors gt TCP IP protocol on each PC Web browser such as Microsoft Internet Explorer Mozilla Firefox or Apple Safari 2 2 Installation Environment Requirements Place the Router in a well ventilated place far from any heater or heating vent gt Avoid direct irradiation of any strong light such as sunlight Keepatleast 2 inches 5 cm of clear space around the Router gt Operating temperature OC 40 C 32F 104 F gt Operating Humidity 10 90 RH non condensing 2 3 Connecting the Router Back to LED Explanation Before installing the Router pleas
149. tup NAT menu on the left of your browser and click 88 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT the Virtual Servers submenu On the Virtual Servers page click Add New then on the Add or Modify a Virtual Server page enter use 80 as service port and your IP address next to the Server IP Address assuming 192 168 1 188 for an example and remember to click the Save Apply button Device Info 3 z NAT Virtual Servers Quick Setup Advanced Setup FL ayer Interface Select the service name and enter the server IP address and click Appli Save to forward IP packets for this service to E the specified server WAM Service NOTE The Internal Port End cannot be modified directly Normally itis set to the same value as External Port LAN End However if you modify Internal Port Start then Internal Port End will be set to the same value as Internal MAC Clone Pot siat NAT Remaining number of entries that can be configured 32 i Use Interface pppoe_0_0_38 ppp Service Name Port Triggering Selecta Service Select One DMZ Host n Custom Service WEB Server on the LAN Parental Control Server IP Address 192 168 1 188 Quality of Service Traffic Control Routing E External Port Start External Port End P Protocol Internal Port Start ama Port End DSL UPnP Interface Grouping LAN Ports IPSec Wireless Diagnostics Management Apply Save Cf N
150. ueue which defines the precedence and the interface and optionally overwrite the IP header DSCP byte A rule consists of a class name and at least one condition below All of the specified conditions in this classification rule must be satisfied for the rule to take effect Device Info Quick Setup QoS Classification Setup maximum 32 rules can be configured 1 Advanced Setup 2 Interac i po To aid a nata click tha fu amp d buton To removi rules Chath their romae chacikbases fen chick the Foray bution The Ende bution weil stan Iron every notes in fre Lable Feuer w th enables criickbus checked will be enabled Mules wth enable chieekD ms unchecked will be Goabled Th anatis rharkhex alan shoes slau of ihe rule ater page reinad Medu disable WMM function In Wireless Page ciassifiratian malei Bo wiralasa will nat Takor effects Lieben HAT Security Parenial Control Quality of Serica Mireur Config te clase 1 LAN OU 1 22 3322AA 1 AFI zl The Cas fonction lis haan digahled Classiieotieon ule would not take affects CLASSIFICATION CIITEREIA CLASSIFICATION HESI T5 Remove Class Hame rd m dite ee eaaa Inti Ether Type Suc MAC Mask DssMAC Mask SrclP PreflxLength Dsl PrefixLength Prate SzcPart DsiPort DSCP Chock 802 1P Check Queue Key DSCP Mark 802 1P Mark Enable Bandwidth Control ELLEN Add Enable Ramosa DNS Figure 4 43 Click the Add button Figure 4 43 and you can configure the QoS on the next s
151. ueues with enable checkbox checked will be enabled Queues with enable checkbox un checked will be disabled The enable checkbox also shows status ofthe queue after page reload Note that if WMM function is disabled in Wireless Page queues related to wireless will not take effects The QoS function has been disabled Queues would not take effects Name Key Interface Scheduler Alg Precedence Weight DSL Latency PTM Priority Enable Remove WMM Voice Priority tea wid SP 1 Enabled WMM Voice Priority 2 wid SP 2 Enabled WMM Video Priority zi wld SP 3 Enabled WMM Video Priority 4 wld SP 4 Enabled WMM Best Effort 5 wld SP 5 Enabled WMM Background 6 wld SP 6 Enabled WMM Background 7 wo SP 7 Enabled WMM Best Effort 8 wld SP 8 Enabled Default Queue 34 atmo SP 8 Patho Default Queue 35 atm1 SP 8 Patho Default Queue 36 atm2 SP 8 Patho Default Queue 37 atm3 SP 8 Patho Default Queue 39 atm5 SP 8 Patho Default Queue 40 atm6 SP 8 Patho Default Queue 41 atm4 SP 8 Patho Figure 4 41 Click the Add button in Figure 4 41 and you can configure the QoS queue entry on the next screen as shown in Figure 4 42 Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service QoS Classification Bandwidth Control Routing DNS DSL UPnP QoS
152. unrestricted access to change and view configuration of your DSL Modem Router The user name support is used to allow an ISP technician to access your DSL Modem Router for maintenance and to run diagnostics The user name user can access the DSL Modem Router view configuration settings and statistics as well as update the Router s software Both of admin and support accounts can do remote management For security reasons please change the default password for these two accounts when remote access function is enabled 84 TD W8960N BRIO E TTC CST PN STR e Te T0 mm cole E CT mm DET ME CTT To 3 The password cannot contain a space and its maximum length is 16 characters Device Info Quick Setup Access Control Remote Access Advanced Setup Wireless Access your DSL Modem Router by WAN side through user account support and admin Diagnostics Management Selected WAN Interface Settings CHEERS Web F SNMP Agent Telnet F TR 069 Client ICMP ping F Internet Time Access Control Passwords 4 7 7 Update Firmware Choose Management Update Firmware you can see the screen shown in Figure 4 109 which allows you to upgrade the latest version software to keep the Router up to date Device Info Quick Setup Tools Update Firmware Advanced Setup Wireless Diagnostics Step 1 Obtain an updated firmware image file from our website www tp link com Management SUE Step 2 Enter the path
153. up of computers each with a wireless adapter connected as an independent IEEE 802 11 wireless LAN Ad hoc wireless computers operate on a peer to peer basis communicating directly with each other without the use of an access point Ad hoc mode is also referred to as an Independent Basic Service Set IBSS or as peer to peer mode and is useful at a departmental scale or SOHO operation AES Advanced Encryption Standard A security method that uses symmetric 128 bit block data encryption ACS Auto Configuration Server Through ACS Auto Configuration Server you can perform auto configuration provision collection and diagnostics to the device ATM Asynchronous Transfer Mode ATM is a cell based transfer mode that requires variable length user information to be segmented and reassembled to from short fixed length cells It uses two different methods for carrying connectionless network interconnect traffic routed and bridged Protocol Data Units PDUs over an ATM network Bridging A device that connects different networks Browser An application program that provides a way to look at and interact with all the information on the World Wide Web 98 TD W8960N BRIO Te E TTC CST SYST RM e T T0 mm S COT TE CT mm UE ME CTT To DDNS Dynamic Domain Name System Allows the hosting of a website FTP server or e mail server with a fixed domain name e g www xyz com and a dynamic IP address Default Gateway A device that
154. ur LAN For example Input 255 255 255 0 in both Device1 and Device2 Tunnel access from remote IP addresses Choose Subnet if you want the Remote Whole LAN to join the VPN network or else choose Single Address if you want single IP to join the VPN network IP Address for VPN Enter the IP address of the Remote LAN For example Input 192 168 2 1 in Device1 Input 192 168 1 1 in Device2 IP Subnetmask Enter the subnetmask of the remote LAN For example Input 255 255 255 0 in both Device1 and Device2 Key Exchange Method Select Auto IKE or Manual Authentication Method Select Pre Shared Key recommended Pre Shared Key Input the Pre Shared key for Authentication For example Input 12345678 Perfect Forward Secrecy PFS is an additional security protocol We recommend you leave the Advanced Settings as default value After complete the basic settings and click Save Apply in both Device1 and Device2 PCs in LAN could conmmunicate with PCs in remote LAN2 For example You can ping the IP address of PC2 which is 192 168 2 100 in PC1 cS Note The VPN Servers Endpoint from both ends must use the same pre shared keys and Perfect Forward Secrecy settings Click Show Advanced Settings and then you can configure the Advanced Settings Advanced IKE Settings Hide Advanced Settings Phase 1 Mode Main v My Identifier Type Local Wan IP vl My Identifier Remote Identifier Type Remote Wan I
155. usive and must be filled in e External Port Start The base number of External Ports You can type a service port or leave it blank e External Port End The end number of External Ports You can type a service port or leave it blank e Protocol The protocol used for this application TCP UDP or TCP UDP e Internal Port Start The base number of Internal Ports You can type a service port or leave it blank e Internal Port End The end number of Internal Ports You can type a service port or leave it blank e Server IP Address The IP Address of the PC providing the service application e WAN Interface The WAN Service Interface providing the service application Add Click the Add button to add a new entry Y 32 TD W8960N BRIUU Te E TTE CST AN hoy RM e T T0 LE celui CT mm T T CITT gt Remove Select the check box in the table shown in Figure 4 24 and then click the Remove button then the corresponding entry will be deleted in the table To add a virtual server entry 1 Click the Add button on the preceding screen Figure 4 24 and then you will see the new Virtual Server in the next screen as shown in Figure 4 25 Device Info NAT Virtual Servers Quick Setup Advanced Setup Layer2 Interface Select the service name and enter the server IP address and click Save Apply to forward IP packets for this service to the specified server WAN Service NOTE The Internal Port End cannot be modified
156. vice over a selected ETH interface 1 Adda new ETH interface on the screen of 4 4 1 2 ETH interface 2 Click the Add button on the screen Figure 4 7 and the next configuration is similar to Bridge over ATM interface see section 4 4 2 3 ATM EoA Bridg 4 4 3 MAC Clone Choose menu Advanced Setup MAC Clone you can configure the MAC address of the WAN Interface as shown below The WAN Interface List displays the Lay2 Interfaces you have configured on the section 4 4 1 Layer2 Interface and its default MAC Address If you have not configured corresponding WAN Service for the interface on the section 4 4 2 WAN Service the blank for MAC Address will display Need a corresponding WAN Service The last one of WAN Interface List displays your PC s current address Device Info BETCETONNNNNN MAC Address Clone Advanced Setup Layer2 Interface WAN Service Set the special MAC address to the selected WAN Service Current PC MAC 40 81 86 e5 b2 dc to ppp0 2 v Security Note Only the WAN ports can using MAC address clone All the clone MAC address MUST NOT be the same with each other Parental Control Quality of Service MAC Clone Clone MAC address for pppO 2 Not configured Figure 4 20 29 TD W8960N BRIUU o E TTE CST SYST RM e T T0 mm celui CT mm DET ME CTT To Type the new value for the WAN Interface who s MAC Address you want to change You can select corresponding WAN Interface from the drop down list and
157. when WPA PSK WPA2 PSK or OPEN mode is configured Management Push Button PIN Add Enrollee Help Device PIN 49518863 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Open insecurity v WEP Encryption Disabled v Figure 4 66 4 5 2 1 WPS Setup Back to LED Explanation This section will guide you to add a new wireless device to an existing network quickly by WPS or called QSS method e Note 1 This feature is available only when OPEN WPA PSK WPA2 PSK or Mixed WPA2 WPA PSK mode is configured 2 To build a successful connection by WPS you should also do the corresponding configuration of the new device for WPS function meanwhile I By PBC If the wireless a
158. work WAN Service Setup Advanced Setup Layer2 Interface Choose Add Remove or Editto configure a WAN service over a selected interface WAN Service MAC Clone Interface Description Type Vlan8021p VlanMuxld Igmp NAT Firewall Remove Edit LAN atm0 1 br 0 0 32 Bridge NIA N A Enabled Disabled Disabled L1 NAT Security atm1 1 br3ps 33 Bridge NIA N A Enabled Disabled Disabled L1 Parental Control atm2 1 br 0 0 35 Bridge N A N A Enabled Disabled Disabled E Quality of Service atm3 1 br_0_0_100 Bridge NIA N A Enabled Disabled Disabled L1 Bandwidth Control Routing atm5 1 br 0 8 81 Bridge N A MWA Enabled Disabled Disabled L1 DNS atmB 1 br 0 0 200 Bridge N A N A Enabled Disabled Disabled oO DSL pppo 1 pppoe 0 8 35 PPPoE N A N A Enabled Enabled Enabled FJ UPnP Interface Grouping IPSec Multicast Figure 4 7 cS Note The following section adopts different VPI VCI to introduce further configuration for the different connection types if you need to change the configuration of ATM PVC VPI VCI you should go to the previous section 4 4 1 Layer2 Interface to configure them again 4 4 2 1 ATM EoA PPPoE If your ISP provides a PPPoE connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new ATM interface and select EoA option for DSL Link Type 4 4 1 1 ATM interface 2 Click the Add button on the screen Figure 4 7 and you will enter the ne
159. xt screen as shown in Figure 4 8 Click Next Device Info Quick Setup WAN Service Interface Configuration Advanced Setup Layer2 Interface WAN Service Select a layer 2 interface for this service MAC Clone Note For ATM interface the descriptor string is porthd_vpi_vci LAN NAT Security Parental Control Quality of Service Figure 4 8 Layer2 Interface atmd 0 8 35 v 21 TD W8960N BRIO E TTC CST PN STR e T T0 mm cole E CT mm DET ME CTT To 3 Select the WAN service type in Figure 4 9 If your ISP provides a PPPoE connection select PPPoE option You can create a service name for the Service Description or leave it the default name Click Next Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping WAN Service Configuration Select WAN service type PPP over Ethernet PPPoE IP over Ethernet Bridging Enter Service Description pppoe O0 8 35 Fortagged service enter valid 802 1P Priority and 802 1 VLAN ID For untagged service set 1 to both 802 1P Priority and 802 1 Q VLAN ID Enter 802 1P Priority 0 7 1 Enter 802 10 VLAN ID 0 4094 Figure 4 9 4 Enter the following parameters and then click Next Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clon

TP-Link TD-W8960N User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents