Home

TP-Link TD-W8950ND User's Manual

1. Diagnostics Select the desired values and click Apply to configure the SNMP options Management The change of SNMP Community will not take effect until the Router reboot SNMP Agent Disable Enable System Log Read Community public SNMP Agent Set Community private System Name TP LINK TR 069 Client System Location unknown Access Control System Contact unknown Trap Manager IP 0 0 0 0 Upgrade Firmware i gt Save Apply Figure 4 105 gt SNMP Agent You can select the checkbox to disable or enable the function Cf Note SNMP Community string provides a simple method of authentication between the modem router SNMP Agent and a remote network manager SNMP Manager You can specify the community string as the password to authenticate the management station to the modem router V Read Community This field allows you to specify the SNMP Community string which provides read only access to the modem router that the community is only permitted to read the device configuration The default value is public Vv Set Community This field allows you to specify the SNMP Community string which provides read and write access to the modem router that the community has the authority to read and change the device configuration The default value is public Yy System Name Enter alphanumeric string to specify an SNMP community string name Your modem router SNMP agents will expose management data on the
2. IF address Subnet mask Detauk gateway Use the following DNS server addresses Preferred ONS server 192 Alternate DNS server Figure 3 4 cf Note You can configure the PC to get an IP address automatically select Obtain an IP address automatically and Obtain DNS server address automatically in the screen above Now you can run the Ping command in the command prompt to verify the network connection Please click the Start menu on your desktop select run tab type cmd or command in the field and press Enter Type ping 192 168 1 1 on the next screen and then press Enter If the result displayed is similar to the screen below the connection between your PC and the modem router has been established Pinging 192 168 1 1 with 32 bytes of data Reply from 192 168 1 1 bytes 32 timetims TTL 64 Reply From 1972 168 1 1 bytes 32 timetims TTL 64 Reply from 192 168 1 1 bytes 32 timetims TTL 64 Reply from 192 168 1 1 bytes 32 timetims TTL 64 Ping statistics for 192 168 1 1 Packets Sent 4 Received 4 Lost Hz loss Approximate round trip times in milli seconds Mininum ms Maximum Pms Average Pms Figure 3 5 11 TD W8950ND Bibel iiie etme ATKI eV Bhs io Cole Taa oI ir am Of mm CLE Le If the result displayed is similar to the screen
3. Figure 4 97 To back up the modem router s current settings 1 Click the Export Settings button on the preceding screen pop up Figure 4 97 the following screen will then appear shown in Figure 4 98 File Download Security Warning Do you want to save this file E Mame backupsettings conf Type Unknown File Type 16 0 KB From 192 168 1 1 potentially harm your computer IF you do not trust the source do noat Y While files from the Interet can be usetul this file type can save this software What s the risk Figure 4 98 2 Click the Save button and save the file as the appointed file Shown in Figure 4 99 82 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Save in E TD W8950ND em My Recent Documents Desktop My Documents Ja My Computer B a File name backupsettings conf E Figure 4 99 4 7 1 2 Import Choose Management gt Settings gt Import you can see the Import screen this screen shown in Figure 4 100 allows you to update the modem router s settings Device Info Quick Setup Settings Import Advanced Setup Wireless Update DSL Modem Router settings You may update your router settings using your saved files Settings File Name Diagnostics Management Settings Export Import Settings Restore Default Figure 4 100 To update the modem router s settings 1 Click t
4. TD W8950ND 150Mbps Wireless N ADSL2 Modem Router Rev 2 0 0 1910010793 COPYRIGHT amp TRADEMARKS Specifications are subject to change without notice TP LINK is a registered trademark of TP LINK TECHNOLOGIES CO LTD Other brands and product names are trademarks or registered trademarks of their respective holders No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation transformation or adaptation without permission from TP LINK TECHNOLOGIES CO LTD Copyright 2013 TP LINK TECHNOLOGIES CO LTD All rights reserved http www tp link com FCC STATEMENT FE This equipment has been tested and found to comply with the limits for a Class B digital device pursuant to part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turning the equipment off and on the user is encouraged to try to correct the interference by one or more of the following measures e Reorient or reloc
5. 2 If Site Prefix Static is chosen please enter an IPv6 prefix Yy IPv6 LAN Applications Select a type to assign IPv6 addresses to the computers in your LAN DHCPv6 Server and RADVD are provided For DHCPv6 Server 1 If Stateless is selected it doesn t need to be configured 2 If Stateful is selected please complete the following parameters otatetul Start interface ID O 02022 End interface ID O 0 0 254 Leased Time hour 1 48 e Start interface ID Enter a value for the DHCPv6 server to start with when issuing IPv6 addresses e End interface ID Enter a value for the DHCPv6 server to end with when issuing IPv6 addresses e Leased Time hour The Leased Time is the amount of time in which a network user will be allowed to connect to the modem router with their current dynamic IPv6 address Enter the amount of time in hours then the user will be leased this dynamic IPv6 33 TD W8950ND Bibel iiie etme ATK eV Bhs io Cole Taa oI ir am Of mm CLE Le address After the dynamic IPv6 address has expired the user will be automatically assigned a new dynamic IPv6 address The default is 24 hours For RADVD Enable RADYD Enable ULA Prefix Advertisement fd00 64 fe g FOOO 64 1 259200 1 259200 Prefix Preferred Life Time second Valid Life Time second Enable MLD Snooping Standard Mode O Blocking Mode e Prefix Enter a value for the site prefix
6. you can configure the MAC address of the WAN Interface as shown below The WAN Interface List displays the Lay2 Interfaces you have configured on the section 4 4 1 Layer2 Interface and its default MAC Address If you have not configured corresponding WAN Service for the interface on the section 4 4 2 WAN Service the blank for MAC Address will display Need a corresponding WAN Service The last one of WAN Interface List displays your PC s current address Device Info Advanced Setup Layer2 Interface Setthe special MAC address to the selected WAN Service WAN Service 4 MAC Clone Clone MAC address for pppo 2 Not configured MAC Address Clone 3 Current PC MAC 40 61 86 e5 b2 de Clone to ppp0 2 Note Only the WAN ports can using MAC address clone All the clone MAC address MUST NOT be the same with each other Parental Control Quality of Service Figure 4 20 30 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe Type the new value for the WAN Interface who s MAC Address you want to change You can select corresponding WAN Interface from the drop down list and click Clone button to clone your current PC MAC Click Restore Default button to restore the WAN Interface s default MAC Address Cf Note Only the WAN Ports can use MAC Address Clone function All the clone MAC addresses must not be the same with each other 4 4 4 LAN Choose Adva
7. Yy Figure 4 25 Virtual Server Table The table indicates the information about the Virtual Server entries Server Name This is the name of the Virtual Server It is exclusive and must be filled in External Port Start The base number of External Ports You can type a service port or leave it blank External Port End The end number of External Ports You can type a service port or leave it blank Protocol The protocol used for this application TCP UDP or TCP UDP Internal Port Start The base number of Internal Ports You can type a service port or leave it blank Internal Port End The end number of Internal Ports You can type a service port or leave it blank Server IP Address The IP Address of the PC providing the service application WAN Interface The WAN Service Interface providing the service application Add Click the Add button to add a new entry V Remove Select the check box in the table shown in Figure 4 25 and then click the Remove button then the corresponding entry will be deleted in the table To add a virtual server entry Click the Add button on the preceding screen Figure 4 25 and then you will see the new Virtual Server in the next screen as shown in Figure 4 26 35 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Device Info NAT Virtual Servers Quick Setup Advanced Setup Layer2 Interface Select the service name and en
8. o Quality of Service Bandwidth Control Routing Figure 4 49 Cf Note The priority max upstream downstream rate and min upstream downstream rate work on allocation of surplus upload download bandwidth For rules with different priority the surplus bandwidth is firstly allocated to the rule with the highest priority according to its max upstream downstream rate If there still has surplus bandwidth it is allocated to the rule with hypo high priority For rules with the same priority the surplus bandwidth is allocated to them according to their min upstream downstream rate The greater a rule s min upstream downstream rate is the more bandwidth it gets 4 4 10 Routing Choose Advanced Setup gt Routing it includes three menus Default Gateway Static Route and RIP The detailed descriptions are provided below 4 4 10 1 Default Gateway Choose Advanced Setup gt Routing gt Default Gateway you can see the Default Gateway screen Device Info Quick Setup Routing Default Gateway Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the highest and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing a
9. Default Gateway Advanced Setup Layer2 Interface z Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the higest WAN Service and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing all and adding them back in again MAC Clone Selected Default Gateway Interfaces Available Routed WAN Interfaces LAN SLAN ooo TEO pppo eee m ___ Parental Control Quality of Service Bandwidth Control P Figure 4 11 6 Configure the DNS Server Addresses on the screen below and click Next 24 TD W8950ND Bibel iiie etme ATKI N Bhs i Cote Taa oI ir am Of mm CLUlLe Device Info Quick Setup DNS Server Configuration Advanced Setup Layer2 Interface Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single PVC with IPoA or static IPoE WAN Service protocol is configured Static DNS server IP addresses must be entered MAC Clone DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used according to the priority with the first being the higest and the ne last one the lowest priority if the WAN interface is connected Priority order can be changed by removing all and adding them back in again NAT Select DNS Ser
10. Management Click Apply Save when done Network Authentication WPA2 Personal best recommended v Wireless Network Key eceeeooeo Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 6 and 63 characters or 6 to 64 Hexadecimal characters WPA Group Rekey Interval 30 optional WPA Encryption AES v WEP Encryption Disabled Figure 4 82 Cf Note If you click the option Click here to display the Figure 4 83 will pop up and it shows the password you have set In addition it won t show the blank characters in both ends of the password phrase J http 192 168 1 253 lsecrefresh 1 lRefresh 0 e X 1234567890 Ee Internet Figure 4 83 4 WPA2 Enterprise To configure WPA2 Enterprise settings select the WPA2 Enterprise option from the drop down list The menu will change to offer the appropriate settings The steps of these settings are similar to WPA settings 74 TD W8950ND EII J ee tae AN Bho ye Cote Jane cole i mm e K T mm C1 Ui e Wireless Manual Setup AP Basic In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryp
11. 1 Select the Remove check box according to the entry in the Figure 4 51 2 Click the Remove button and the entry will be deleted e Note Gateway IP address should be correctly configured if IP based Interface IPoE IPoA is selected 4 4 10 3 RIP Choose Advanced Setup gt Routing gt RIP you can see the RIP Routing Information Protocol screen which allows you to configure the RIP shown in Figure 4 53 Device Info Routing RIP Configuration Quick Setup Advanced Setup Layer2 Interface 7 Ss aay NOTE RIP CANNOT BE CONFIGURED on the WAN interface which has NAT enabled such as PPPoE WAN Service ee MAC C i To activate RIP for the WAN Interface selectthe desired RIP version and operation and place a check in the Enabled checkbox To stop RIP on the WAN Interface uncheck the LAN Enabled checkbox Click the Save Apply button to star stop RIP and save the configuration NAT i Interface Version Operation Enabled Security atm0 1 2 B Passive v Fj Parental Control a ey N E 3 2 Passi Quality of Service atm1 1 v assive v oO Bandwidth Control atm2 1 2 w Passive v Oo Routing atm3 1 2 B Passive v Oo Default Gateway Smene AE atm4 1 2 B Passive v oO atm5 1 2 B Passive v a DNS atm6 1 2 w Passive v go DSL UPnP Interface Grouping eee ee e IPSec Figure 4 53 fe Note RIP cannot be configured on the WAN Interface whic
12. A security method that uses symmetric 128 bit block data encryption ACS Auto Configuration Server Through ACS Auto Configuration Server you can perform auto configuration provision collection and diagnostics to the device ATM Asynchronous Transfer Mode ATM is a cell based transfer mode that requires variable length user information to be segmented and reassembled to from short fixed length cells It uses two different methods for carrying connectionless network interconnect traffic routed and bridged Protocol Data Units PDUs over an ATM network Bridging A device that connects different networks Browser An application program that provides a way to look at and interact with all the information on the World Wide Web 96 TD W8950ND Bibel ie etme Tig ttn eV Bhs i Cole TAL oI i am Of mm CLE Le DDNS Dynamic Domain Name System Allows the hosting of a website FTP server or e mail server with a fixed domain name e g www xyz com and a dynamic IP address Default Gateway A device that forwards Internet traffic from your local area network DHCP A networking protocol that allows administrators to assign temporary IP addresses to network computers by leasing an IP address to a user for a limited amount of time instead of assigning permanent IP addresses DMZ Demilitarized Zone Removes the modem router s firewall protection from one PC allowing it to be seen from the Intern
13. A4pply Save Figure 4 80 WPA Personal requires a shared key and does not use a separate server for authentication PSK keys can be ASCII or Hex type Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication WPA2 Personal best recommended v Wireless Network Key Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters WPA Group Rekey Interval optional WPA Encryption WEP Encryption Figure 4 81 gt Wireless Network Key Enter the key shared by the modem router and your othe
14. DNS DSL UPnP QoS Queue Configuration This screen allows you to configure a QoS queue and assign itto a specific layer interface The scheduler algorithm is defined by the layer interface Note For SP scheduling queues assigned to the same layer2 interface shall have unique precedence Lower precedence value implies higher priority for this queue relative to others Click Save Apply to save and activate the queue Name queue l Enable Interface atm0 0_0_32 SP wv Precedence DSL Latency Save Apply Figure 4 43 gt Name Set a name for the entry gt Enable Select Enable option to take this entry effect gt Interface Assigned a specific Wan Service for this QOS queue entry 45 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe gt Precedence Specify precedence for this QoS queue entry gt DSL Latency Select latency path for the type of data transmission only PathO is available for this modem router After you specify the condition click Save Apply to save the entry and then you will see you settings as shown in Figure 4 42 cS Note 1 Lower integer values for precedence imply higher priority for this queue relative to others 2 The queue entry configured here will be used by the classifier to place ingress packets appropriately 4 4 8 2 QoS Classification This section will guide you to create a traffic class rule to cla
15. Device Info Quick Setup Routing Static Route Add Advanced Setup Layer2 Interface REE Enter the destination network address subnet mask gateway AND OR available WAN interface then click Save Apply to add the entry to the routing table WAN Service MAC Clone IP Version IPv4 v Destination IP address prefix length 210 17 155 203 F Interface LAN brO v Security Parental Control Gateway IP Address 255 255 255 0 Quality of Service optional metric number should be greater than or equal to zero Bandwidth Control Metric Routing Default Gateway Save Apply RIP Figure 4 52 Enter the following data IP Version Select the version of IP Destination IP Address The Destination IP Address is the address of the network or host that you want to assign to a static route gt Interface Select the Interface name in the text box or else the default Use Interface will be adopted for the Static Route gt Gateway IP Address Ifyou select the IPoE or IPoA mode for Interface the screen above will display this item you should type the Gateway address correctly and the other option for Interface will adopt the default Gateway address for the Static Route 3 Click Save Apply to make it take effect and then you will see you settings as shown in Figure 4 51 50 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe To remove a static routing entry
16. Disabled Disabled Disabled Disabled F Edit Bandwidth Control Routing atm5 1 br_0_8 48 Bridge NMA MA Enabled Disabled Disabled Disabled Disabled oO Edit DNS ppp0 2 pppoe_0_8_36 PPPoE NIA N A Enabled Enabled Enabled Disabled Disabled o DSL UPnP Interface Grouping Figure 4 7 cf Note The following section adopts different VPI VCI to introduce further configuration for the different connection types if you need to change the configuration of ATM PVC VPI VCIl you should go to the previous section 4 4 1 Layer2 Interface to configure them again 4 4 2 1 ATM EoA PPPoE If your ISP provides a PPPoE connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add anew ATM interface and select EoA option for DSL Link Type 4 4 1 1 ATM interface 2 Click the Add button on the screen Figure 4 7 and you will enter the next screen as shown in Figure 4 8 Click Next Device Info Quick Setup WAN Service Interface Configuration Advanced Setup Layer2 Interface WAN Service MAC Clone Note For ATM interface the descriptor string is portld_vpi_vci LAN NAT Security Parental Control Quality of Service Figure 4 8 Select a layer 2 interface for this service Layer2 Interface atm4 0_8_35 v 3 Select the WAN service type in Figure 4 9 If your ISP provides a PPPoE connection select PPPoE option
17. Select Bridging option for the WAN service type on the screen as shown Figure 4 9 and click Next button to continue 4 On the screen as shown Figure 4 13 you will see the detailed settings you ve made Please click the Apply Save button to save these settings 4 4 2 4 ATM PPPoA If your ISP provides a PPPoA connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new AIM interface and select PPPoA option for DSL Link Type see 4 4 1 1 ATM interface 2 Click the Add button on the screen Figure 4 7 and the next configuration is similar to PPPoE see section 4 4 2 1 ATM EoA PPPoE The difference is that you don t need to set the PPPoE Service Name and Bridge PPPoE Frames Between WAN and Local Ports on the screen of Figure 4 10 4 4 2 5 ATM IPoA lf your ISP provides an IPoA connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new AIM interface and select IPoA option for DSL Link Type see 4 4 1 1 ATM interface 2 Click the Add button on the screen Figure 4 7 and the next configuration is similar to IPoE see section 4 4 2 2 ATM EoA IPoE The difference is that you have to manually set the Static IP Address on the screen of Figure 4 15 and the Static IP Address for DNS Server on the screen of Figure 4 18 29 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote T
18. To completely configure the WAN Interface you need to first select the Layer2 Interface 4 4 1 Layer2 Interface according to the connection ISP provides you and then to select the type of the connection 4 4 2 WAN Service for the further configuration 4 4 1 Layer2 Interface Choose Advanced Setup gt Layer2 Interface and you can select WAN Service Interface layer2 interface over ATM interface or ETH interface gt ATM Interface Configure the modem router to access Internet as an ADSL user ISP provides you VPI Virtual Path Identifier VCI Virtual Channel Identifier settings and the DSL Interface with RJ11 connector Figure 2 1 Vv ETH Interface Configure the modem router to access Internet as an Ethernet user ISP provides you Broadband Internet Service and the Ethernet Interface with RJ45 connector 4 4 1 1 ATM interface Choose Advanced Setup gt Layer2 Interface gt ATM interface you can Configure ATM interfaces on the screen below DSL ATM Interface Configuration Choose Add or Remove to configure DSL ATM interfaces Interface vpi Vci Link Type Encapsulation Category Peak Cell Rate Sustainable Cell Rate Max Burst Size Conn Mode IP QoS Sched Alg Queue Weight Group Precedence Remove atmo 1 32 EoA Uie UBR VlanMuxmMode Enabled SP F a pt vlanMuxMode Enabled SP Fi vlanMuxMode Enabeg SP F VlanMuxMode Enabled SP oO vlanMuxMo
19. Weight Value of the default queue 1 63 1 IPSec MPAAL Group Precedence 8 v Multicast Wireless Diagnostics Save Apply Management Figure 4 3 gt VPI VCI the VPI and VCI values provided by your ISP Do not change them unless it was required by your ISP gt DSL Link Type Select a DSL Link Type which is provided by your ISP The options include EoA it is for PPPoE IPoE and Bridge PPPoA PPP over ATM and IPoA IP over ATM gt Encapsulation Mode The mode of the data processing over the Link Type you have selected Uses the default setting if you are not sure gt Service Category Select the type of the service assigned by your ISP in the drop down list The default type is UBR Without PCR Cf Note Enabling packet level QoS for PVC improves performance for selected classes of applications While QoS consumes system resources therefore the number of PVC s will be reduced Besides this it cannot be set for the connection type of CBR and Real time VBR If you select the QoS service the Quality of Service menu will be added to the Web based Utility the detailed configuration will be described in 4 4 8 Quality of Service 4 4 1 2 ETH interface Choose Advanced Setup gt Layer2 Interface gt ETH Interface you can configure ETH WAN interfaces on the screen below Device Info Quick Setup ETH WAN Interface Configuration Advanced Setup Layer2 Interface ATM Interface Choose Add or Remove
20. and click Mer Automatically select the network Figure 4 72 In this example the default PIN code of this adapter is 16952898 as the preceding figure shown Method Two Enter the PIN of my modem router into the wireless adapter Step 1 Get the Current PIN code generated by the modem router as shown below You can click Gen New PIN to get a new PIN code for modem router Device Info Quick Setup Advanced Setup Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Wireless Security This page allows you to configure security features of the wireless LAN interface You may setup configuration manually or through Wi Fi Protected Setup v PS WPS Enable WPS Enabled v Add Client This feature is available only when WPA PSK VWWPA2 PSK or OPEN mode is configured Push Button PIN Add Enrollee Enable Modem Router s PIN 16952898 Help Device PIN Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless hi
21. e Enable MLD Snooping The modem router can use MLD Snooping to limit the flooding of IPv6 multicast traffic by dynamically configuring interfaces so that IPv6 multicast traffic is forwarded to only those interfaces associated with an IPv6 multicast address 4 4 5 NAT NAT Network Address Translation allows you to share one WAN Wide Area Network IP address for multiple computers on your LAN Local Area Network cs Note When you select PPPoA or PPPoE for the WAN Setup or when you select Enable NAT for the type of IPoA and IPoE connection 4 4 2 WAN Service you will see the NAT menu in the Web based Utility shown in Figure 4 24 Choose Advanced Setup gt NAT there are three submenus under the main menu Virtual Servers Port Triggering DMZ Host and ALG Click any of them and you will be able to configure the corresponding function Device Info NAT Virtual Servers Setup Advanced Setup Layer2 Interface WAN Service MAC Clone Virtual Server allows you to direct incoming traffic from WAN side identified by Protocol and External port to the Internal server with private IP address on the LAN side The Internal port is required only ifthe external port needs to be converted to a different port number used by the server on the LAN side A maximum 32 entries can beconfigured Server Name External Port Start External Port End Protocol Internal Port Start Internal Port End Server IP Address WAN Interface Status Enabl
22. 001100 v Mark 802 1p priority v Class non vlan packets egress to an untagged vlanmux interface will be tagged with VID 0 and the class rule p bits Class vlan packets egress to an untagged vlanmux interface will have the packet p bits re marked by the class rule p bits No additional vlan tag is added Class non vlan packets egress to a tagged vlanmux interface will be tagged with the interface VID and the class rule p bits Class vlan packets egress to a tagged vlanmux interface will be additionally tagged with the packet VID and the class rule p bits Figure 4 45 After you specify the condition click Save Apply to save the entry 4 4 9 Bandwidth Control Choose Advanced Setup Bandwidth Control and then you will see the screen as shown in Figure 4 46 This page allows you to enable this function and to configure the value of Total Upstream Downstream Bandwidth Vv VV WV Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Rules List Routing DNS DSL Bandwidth Control This page allows you to enable or disable Bandwidth Control Only when the box before Enable Bandwidth Control is checked can the following configurations take effect Click Save Apply button to save it Note lf Enable checkbox is not selected all Bandwidth Control rules will be disactived If your li
23. 1 e Subnet Mask Enter the modem router s Subnet Mask the default value is 255 255 255 0 gt Enable IGMP Snooping If you select the option please choose the IGMP Mode Standard Mode or Blocking Mode gt DHCP Server These settings allow you to configure the modem router s Dynamic Host Configuration Protocol DHCP server function The DHCP server is enabled by default for the modem router s Ethernet LAN interface DHCP service will supply IP settings to computers which are configured to automatically obtain IP settings that are connected to the modem router though the Ethernet port When the modem router is set for DHCP it becomes the 31 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe default gateway for DHCP client connected to it Keep in mind that if you change the IP address of the modem router you must change the range of IP addresses in the pool used for DHCP on the LAN e Start IP Address Enter a value for the DHCP server to start with when issuing IP addresses Because the default IP address for the modem router is 192 168 1 1 the default Start IP Address is 192 168 1 2 and the Start IP Address must be 192 168 1 2 or greater but smaller than 192 168 1 254 e End IP Address Enter a value for the DHCP server to end with when issuing IP addresses The End IP Address must be smaller than 192 168 1 254 The default End IP Address is 192 168 1 254 e Leased Time hour The Le
24. DNS WAN Subnet Mask DSL WAN gateway IP Address UPnP Interface Grouping IPSec Multicast Figure 4 15 gt Obtain an IP address automatically Select this option the modem router will be able to obtain IP network information dynamically from a DHCP server provided by your ISP 26 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Cf Note The response message from a DHCP server typically contains a number of configuration parameters DHCP options for the modem router The DHCP options include IP network information and also the vendor specific options In some cases the modem router is implemented to perform user defined operations as shown below You can implement your own treatment of all such options 2 If the modem router is functioning as a DHCP client it must identify itself in option 61 client identifier in every DHCP message DUID IAID is portion of option 61 e Option 60 Vendor ID The option code 60 used to identify Vendor class e Option 61 IAID IAID Identity Association ID assigns an Identity Association ID to individual interfaces In cases where the device is functioning with a single DHCP client identity it must use value 1 for IAID for all DHCP interactions In cases where the device is functioning with multiple DHCP client identities the values of IAID have to start at 1 for the first identity and be incremented for eac
25. DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Cf Note Use the following Static DNS IP address Primary DNS server Secondary DNS server Figure 4 18 If only single PVC with IPoA is configured you must enter static DNS server IP addresses 8 On the next screen as shown Figure 4 19 you will see the detailed settings you ve made Please click the Apply Save button to save these settings 28 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe E WAN Setup Summary Advanced Setup Layer2 Interface s Make sure thatthe settings below match the settings provided by your ISP WAN Service Click Save Apply to have this interface to be effective Click Back to make any modifications MAC Clone Connection Type IPoE NAT Enabled E Full Cone NAT Disabled Parental Control Firewall Disabled Quality of Service IGMP Multicast Enabled Bandwidth Control Quality Of Service Enabled Figure 4 19 4 4 2 3 ATM EoA Bridging If you want to adopt the Bridge service and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add a new ATM interface and select EoA option for DSL Link Type see 4 4 1 1 ATM interface 2 Click the Add button on the screen Figure 4 7 Select WAN Service Interface over ATM PVC on the next screen as shown Figure 4 8 3
26. Hub Switch which has connected to the modem router you need to configure your PC s IP address Follow the steps below to configure it Here takes Windows XP for example For more details please refer to Appendix B Step 1 Click the Start menu on your desktop right click My Network Places and then select Properties shown in Figure 3 1 i baih x kd Internet A My Documents In et Explorer w7 lt 5 Vy tern 7 4 My Recent Documents E mail jicrose E D My Pictures i My Music My Computer E mynet Open i Explore ite ControlF Search for Computers ft Office Word 2003 Set Prog Defaults mn Windows Media Player 304e Map Network Drive Disconnect Network Drive oS Printers Windows Messenger i v Show on Desktop R Rename Paint Help anc pP Search All Programs gt I Run A Log Off oJ Turn OFF Computer A 23 e Figure 3 1 Step 2 Right click Local Area Connection LAN and then select Properties TD W8950ND Bibel iiie etme ATKI eV Bhs io Cole Taa oI ir am Of mm CLE Le s Network Connections Fie Edit View Favorites Tools Advanced Help Nagy Foc gt Bi pe Search Folders FEE Address e Network Connections LAN or High Speed Internet Network Tasks x Create anew connection Disable m Status Change Windows Firewall settings a Disable this network device Create Shortcut gs Repair this conn
27. IP Address and or Destination IP Address blank it suggests that all Source IP Addresses and or Destination IP Addresses are controlled by the rule if you leave the Source Port and or Destination Port blank it suggests that all Source Ports and or Destination Ports are controlled by the rule 4 4 6 2 MAC Filtering Choose Advanced Setup gt Security gt MAC Filtering you can configure MAC Filtering rules on the screen as shown in Figure 4 34 The section allows you to control access to the Internet by users on your local network based on their MAC Address cs Note MAC Filtering is only effective on ATM PVC s configured in Bridging mode 40 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa a Colei i am Of 1 mm CLUlLe Device Info MAC Filtering Setup Quick Setup Advanced Setup MAC Filtering is only effective on ATM P YCs configured in Bridge mode FORWARDED means that all MAC layer frames will be FORWARDED except those matching with any of the specified rules in the following table BLOCKED means that all MAC layer frames will be BLOCKED except those matching with any of the specified rules in the following table Layer2 Interface WAN Service EK MAC Filtering Policy For Each Interface MAC Clone WARNING Changing from one policy to another of an interface will cause all defined rules for that interface to be REMOVED AUTOMATICALLY You will need to create new rules for the new policy L
28. Network Key 4 Enter 13 ASCII characters or 26 hexadecimal digits for 126 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Figure 4 76 Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Shared good v WEP Encryption Encryption Strength Current Network Key Network Key 1 Network Key 2 Network Key 3 Network Key 4 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Figure 4 77 gt Encryption Strength Select the appropriate level of encryption 64 bit or 128 bit gt Current Network Key To indicate which WEP key to
29. New Password Remote Access Confirm Password Upgrade Firmware Reboot Figure 4 108 To change the password 1 Select the Username whose password you want to change 2 Enter the Old Password in the text box 3 Enter the New Password and Confirm Password The Confirm Password should be the same as the New Password 4 Click Save Apply to make your change take effect cf Note 1 Access to your DSL Modem Router is controlled through three user accounts admin support and user The user name admin has unrestricted access to change and view configuration of your DSL Modem Router The user name support is used to allow an ISP technician to access your DSL Modem Router for maintenance and to run diagnostics The user name user can access the DSL Modem Router view configuration settings and statistics as well as update the modem router s software Both of admin and support accounts can do remote management For security reasons please change the default password for these two accounts when remote access function is enabled 88 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe 3 The password cannot contain a space and its maximum length is 16 characters Device Info Quick Setup Access Control Remote Access Advanced Setup Wireless Access your DSL Modem Router by WWAN side through user account support and admin Diagnostics Management A Selected WAN
30. Request User Name admin Connection Request Password eecce Connection Request URL Figure 4 106 Inform You can select the checkbox to disable or enable the Inform Interval Yv WV Inform Interval Type the interval time of your modem router contact with the ACS ACS URL Please accept this information from your ISP And through ACS Auto Configuration Server you can perform auto configuration provision collection and diagnostics to this router Y gt ACS User Name Please accept this User Name information from your ISP gt ACS Password Please accept the Password information from your ISP list to perform this function gt Connection Request User Name Type the Connection Request User Name set it yourself gt Connection Request Password Type the Connection Request Password set it yourself cf Note Select the desired values and click Save Apply to configure the TR 069 client options 4 7 5 Internet Time Choose Management gt Internet Time you can see the Time settings screen as shown below Here you can configure the time of the modem router 8 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Device Info Quick Setup Time settings Advanced Setup Wireless Diagnostics This page allows you to the modem s time configuration Management Date Time Thu Jan 1 00 38 50 1970 Date Time on your PC Wed May 9 16 53 27 2012 aR a Synchroniz
31. access point Security Tips Ifyou set Mode to 11n only you couldn t set Wireless encryption type to WEP or TKIP Click ApplySave to configure the advanced wireless options MAC Filter Wireless Bridge Station Info Mode libgn v Fragmentation Threshold 2346 RTS Threshold 2347 DTIM Interval 1 Beacon Interval 100 Transmit Power 100 v WMM Wi Fi Multimedia Enabled Figure 4 93 gt Channel Select the channel you want to use from the drop down List This field determines which operating frequency will be used It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point gt Mode In the drop down list you can select 11b 11bg 11bgn and 11n only 11bgn allows both 802 11b 802 11g and 802 11n wireless stations to connect to the modem router gt Bandwidth Select the Bandwidth you want to use from the drop down List If bigger bandwidth is selected device could transmit and receive data with higher speed gt Control Sideband If bigger bandwidth is selected this option will allow you select the Control Sideband you want 19 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe Fragmentation Threshold This value specifies the maximum size for a packet before data is fragmented into multiple packets If you experience a high packet error rate you may slightly increase th
32. and ALL are available here gt Priority Select priority form the drop down list There are five options Highest 1 2 3 4 5 6 and Lowest The default precedence of the rule is 4 gt Upstream Enter the min and max upload speed through the WAN port gt Downstream Enter the min and max download speed through the WAN port After completing the above configuration click the Save Apply button to make it take effect and then you will see the following list as shown in Figure 4 49 If you want to modify the rule click the 48 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Edit button If you want to delete the rule check the Remove box first and then click the Remove button Device Info Quick Setup Bandwidth Control Rules List Advanced Setup Layer2 Interface This page displays Bandwidth Control rules You can click corresponding buttons to configure these rules A maximum 16 entries can beconfigured lf max bandwidth is not configured or greater than total bandwidth then it will take effect with total bandwidth MAC Clone Make sure the sum of min bandwidth is lesser than total bandwidth otherwise Bandwidth Control may not take effect LAN NAT Upstream Bandwidth Kbps Downstream Bandwidth Kbps Description Priority M r Status Edit F Security Min Max Min Max i Parental Control 192 168 1 101 192 168 1 103 80 TCP 0 100 200 400 800 Enabled
33. and RESET button are located on the back panel ADSL LAN4 WAN LANS LAN2 LAN Figure 1 2 gt ADSL Connect to the Modem Port of Splitter or to the telephone line gt LAN4 WAN LAN3 LAN2 LAN1 Through these ports you can connect the modem router to your PC or the other Ethernet network devices Enable EWAN function and you will be able to connect to Cable FTTH VDSL ADSL device gt WiFi The switch for the WiFi function RESET There are two ways to reset the modem router s factory defaults 1 Use the Restore Default function on Management gt settings gt Restore Default page in the router s Web based Utility Y VV WV TD W8950ND Bakelite etme ATKI ey Bhs i Cole Taa oI i am Of 1 mm CLUlLe Use the Factory Default RESET button With the modem router powered on use a pin to press and hold the RESET button for at least 5 seconds And the modem router will reboot to its factory default settings WPS The switch for the WPS function For details please refer to 4 5 2 1 WPS Setup ON OFF The switch for the power POWER The Power plug is where you will connect the power adapter Wireless Antenna To receive and transmit the wireless data Chapter 2 Connecting the Modem Router 2 1 System Requirements gt Broadband Internet Access Service DSL Cable Ethernet gt PCs with a working Ethernet Adapter and an Ethernet cable with RJ45 connectors gt TCP IP protocol on each PC gt Web browser such a
34. characters between O and 63 characters or O to 64 Hexadecimal characters WPA Encryption WEP Encryption Disabled Figure 4 86 7 Mixed WPA2 WPA Personal To configure Mixed WPA2 WPA Personal settings select the Mixed WPA2 WPA Personal option from the drop down list The menu will change to offer the appropriate settings The steps of this setting are the same with WPA PSK Security Manual Setup AP MAC Filter In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Wireless Bridge Advanced Station Info Diagnostics Management Network Authentication Mixed WPA2 WPA PSK Personal adaptive v Wireless Network Key Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 6 and 63
35. gt Internet Time 4 4 7 2 URL Filter This feature allows you to configure the filter rules based on URL to control all the computers in the LAN to access the specified port and it is independent with Time Restriction feature Device Info Quick Setup URL Filter Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT LAN IP Port Address Status Enable Disable Edit Remove Security 80 www google com Enabled Oo Parental Control Time Restriction Please select the list type first then configure the list entries A maximum 200 urls can beconfiqured URL List Type O Disable OAllow Deny Quality of Service Figure 4 39 There are two policies for the URL Filter gt Disable URL Filter function will not take effect gt Allow Only allow the PCs to access the specified URL 43 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe gt Deny Block the PCs to access the specified URL To add a URL Filter entry 1 Check the Deny or Allow radio button Here we take Deny for example 2 Click the Add button in Figure 4 39 and then you will see the next screen as shown in Figure 4 40 Enter the URL Address and Port Number Device Info Quick Setup Parental Control URL Filter Add Advanced Setup Layer2 Interface x Enter the address then click SavelApply to add the entry to the URL filter LAN IP is optional if you want to configure f
36. mark is used to mark all egress packets that do not match any classification rules Enable QoS Security M Parental Control Select Default DSCP Mark No Change 1 v Quality of Service i Queue Config QoS Classification Figure 4 41 Select the Enable QoS checkbox to enable all QoS for all interfaces Select a Default DSCP make from drop down list to automatically mark incoming traffic without reference to a particular classifier Click Save Apply to save the current configuration Cf Note The default DSCP mark is used to mark all egress packets that do not match any classification rules 44 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe 4 4 8 1 Queue Config Choose Advanced Setup gt Quality of Service gt Queue Config you can set up virtual servers on the screen below Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service QoS Classification Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management QoS Queue Setup In ATM mode maximum 8 queues can be configured For each Ethernet interface maximum 4 queues can be configured To add a queue click the Add button To remove queues check their remove checkboxes then click the Remove button The Enable button will scan through e
37. need to upgrade the firmware unless the new firmware has a new feature you want to use However when experiencing problems caused by the modem router itself you can try to upgrade the firmware 2 Before upgrading the modem router s firmware you should write down some of your customized settings to avoid losing important configuration settings of the modem router 3 Do not turn off the modem router or press the RESET button while the software is being updated 4 The modem router will reboot after the Upgrading is finished 89 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe 4 7 8 Reboot Choose Management gt Reboot you can see the screen shown in Figure 4 110 which allows you to reboot the modem router Device Info Quick Setup Reboot router Advanced Setup Wireless Diagnostics Click the button below to reboot the router Management Settings ani SNMP Agent TR 069 Client Internet Time Access Control Upgrade Firmware T Reboot Figure 4 110 Cf Note 1 After you clicked the Reboot button please wait for a while before reopening your web browser 2 Do not turn off the modem router or press the RESET button while the modem router is rebooting 3 If necessary reconfigure your PC s IP address to match your new configuration 90 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe Appendix A FAQ 1 How
38. oI ir am Of mm CLUlLe 4 4 4 1 IPv6 LAN Config Choose Advanced Setup gt LAN gt IPv6 LAN Config and you will see the screen shown in Figure 4 23 the section allows you to configure LAN IPv6 interfaces for the modem router gt Device Info IPv6 LAN Auto Configuration Advanced Setup Layer2 Interface Note Stateful DHCPy6 is supported based on the assumption of prefix length must be 64 Interface ID does NOT support ZERO COMPRESSION Please enter the complete information For example Please enter 0 0 0 2 instead of 2 Site Prefix Configuration Type Prefix Delegated WAN Connection Site Prefix Static eg 2000 64 IPv6 LAN Applications Enable DHCPy6 Server Stateless Parental Control Stateful Quality of Service Start interface ID Bandwidth Control End interface ID z Leased Time hour 1 45 Routing Enable RADYD Enable ULA Prefix Advertisement UPnP Prefix fd00 64 e g FDOO 64 Preferred Life Time second 30 1 259200 Interface Grouping LJ Valid Life Time second 120 1 259200 e C Enable MLD Snooping Figure 4 23 gt Site Prefix Configuration Type Choose a type to assign prefix to IPv6 addresses Prefix Delegated WAN Connection and Site Prefix Static are provided 1 If Prefix Delegated WAN Connection is chosen the modem router will get an IPv6 prefix from the default gateway interface
39. ol Username ailisa Roming Password eesece DNS DNS Server Save Apply DSL Figure 4 57 2 Select D DNS provider in the drop down list 3 Enter the Hostname of the DNS Server and select the corresponding Interface for the DDNS you can leave it default 4 Type the User Name and Password for your DDNS account Click Save Apply to save the entry and then you will see your settings as shown in Figure 4 56 4 4 12 DSL Choose Advanced Setup gt DSL you can see the DSL Settings screen this screen allows you to configure the DSL shown in Figure 4 58 53 TD W8950ND Bibel ite etme ATKI AV Bhs 4 Cole Taa oI ir am Of mm CLUlLe Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control DSL Settings Select the modulation below G Dmt Enabled G lite Enabled 71 413 Enabled ADSL Enabled Quality of Service AnnexL Enabled Bandwidth Control ADSL2 Enabled Routing DNS DSL Select the phone line pair below UPnP Inner pair Interface Grouping IPSec Multicast Outer pair Wireless Capability Diagnostics Bitswap Enable Management C SRA Enable Figure 4 58 You can select the modulation type phone line pair and the capability of Bitswap or SRA After you set them up click Save Apply to save the configurations 4 4 13 UPnP Choose Advanced Setup gt UPnP you can Enable or Disable the UPnP Unive
40. shown below it means that your PC has not connected to the modem router Pinging 192 168 1 1 with 32 bytes of data Request timed out Request timed out timed out timed out Ping statistics for 192 168 1 1 Packets Sent 4 Received Lost 4 18H loss gt Figure 3 6 You can check it following the steps below 1 2 Is the connection between your PC and the modem router correct The LEDs of LAN port which you link to the device and the LEDs on your PC s adapter should be lit Is the TCP IP configuration for your PC correct If the modem router s IP address is 192 168 1 1 your PC s IP address must be within the range of 192 168 1 2 192 168 1 254 3 2 Quick Installation Guide With a Web based utility it is easy to configure and manage the TD W8950ND 150Mbps Wireless N ADSL2 Modem Router The Web based utility can be used on any Windows Macintosh or UNIX OS with a Web browser such as Microsoft Internet Explorer Mozilla Firefox or Apple Safari cle To access the configuration utility open a web browser and type the default address http 192 168 1 1 in the address field of the browser Ades Wipdienieii 9 Figure 3 7 After a moment a login window will appear similar to the Figure 3 8 Enter admin for the User Name and Password both in lower case letters Then click the OK button or press the Enter key 12 TD W8950ND Bakelite etme ATKI ey Bhs i Cole Taa oI i am Of
41. the QoS on the next screen 46 Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Queue Config Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management TD W8950ND Bibel ite etme ATKI ey Bhs i Cole Taa aol ir am Of mm CLUlLe Add Network Traffic Class Rule This screen creates a traffic class rule to classify the ingress traffic into a priority queue and optionally mark the DSCP or Ethernet priority of the packet Click Save Apply to save and activate the rule Traffic Class Name ftp class Rule Order Last wv Rule Status Enable w Specify Classification Criteria A blank criterion indicates itis not used for classification Class Interface LAN v Ether Type v Source MAC Address Source MAC Mask Destination MAC Address 00 11 22 33 44 44 Destination MAC Mask Specify Classification Results A blank value indicates no operation wl0 amp Keyl Prel v Packets classified into a queue that exit through an interface for which the queue is not specified to exist will instead egress to a queue on the interface whose priority is equal to or lower than the class queue Mark Differentiated Service Code Point DSCP Specify Class Queue Required 4F12
42. the specified IP address and UDP Management port of the remote syslog server Ifthe selected mode is Local or Both events will be recorded in the local memory Select the desired values and click Save Apply to configure the system log options Log Disable O Enable Debugging Settings System Log Log Level v SNMP Agent Display Level rror TR 069 Client Mode Local w Internet Time Access Control Upgrade Firmware Reboot Figure 4 104 gt Disable Enable Select the Enable to log the events if you don t want to log these events please select Disable gt Log Level Select the Log level in the drop down list for the Log level all events above or equal to the selected level will be logged gt Display Level Select the Display level in the drop down list for the Display Level all logged events above or equal to the selected level will be displayed gt Mode Select the mode to record the events If the selected mode is Local events will be recorded in the local memory If the selected mode is Remote events will be sent to the specified IP address and UDP port of the remote system log server If the selected mode is Both events will be sent to the local memory and the remote system log server gt Server IP Address Type the address of the server you want to record the events gt Server UDP Port Type the UDP Port of the server 4 7 3 SNMP Agent Choose Management gt SNMP A
43. use select a transmission key number gt Network Key 1 4 If you want to manually enter the WEP keys then enter them in the network Key 1 4 fields Configure WEP Settings 1 Select Shared good from the Network Authentication drop down list The menu will change to offer the appropriate settings 2 Select 64 bit from the WEP Encryption drop down list 3 Select 1 from Current Network Key drop down list 4 Type in the password in the Network Key 1 field 70 TD W8950ND Bebe eg a AN Bho eo Cote Tan mm a coleic mm e K T C1Ui e 5 Click Save Apply to save the new configuration Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management cs Note Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the devi
44. way to completely shut off power is to disconnect the product or the power adapter from the power source Don t disassemble the product or make repairs yourself You run the risk of electric shock and voiding the limited warranty If you need service please contact us Avoid water and wet locations This product can be used in the following countries LT tv MT NLT NO PLOT PT OTRO RU SE TSK TR UA TP LINK TP LINK TECHNOLOGIES CO LTD DECLARATION OF CONFORMITY For the following equipment Product Description 150Mbps Wireless N ADSL2 Modem Router Model No TD W8950ND Trademark TP LINK We declare under our own responsibility that the above products satisfy all the technical regulations applicable to the product within the scope of Council Directives Directives 1999 5 EC Directives 2004 108 EC Directives 2006 95 EC Directives 1999 519 EC Directives 2011 65 EU The above product is in conformity with the following standards or other normative documents ETSI EN 300 328 V1 7 1 2006 ETSI EN 301 489 1 V1 9 2 20118 amp ETSI EN 301 489 17 V2 1 1 2009 EN 55022 2010 EN 55024 2010 EN 61000 3 2 2006 A1 2009 A2 2009 EN 61000 3 3 2008 EN60950 1 2006 A11 2009 A1 2010 A12 2011 EN62311 2008 The product carries the CE Mark C 1588 Person responsible for marking this declaration Yang Hongliang Product Manager of International Business Date of issue 2013 TP LINK TECHNOLOGIES CO LTD Bui
45. 0M 64dBm 10 PER 54M 68dBm 10 PER Sensitivity PER 11M 85dBm 8 PER 6M 88dBm 10 PER 1M 90dBm 8 PER Environmental and Physical Operating O0 C 40 C 32 T 104T Storage 40 C 70C 40T 158T Humidity Operating 10 90 RH Non condensing Storage 5 90 RH Non condensing Temperature 95 TD W8950ND Bibel iiie etme ATK eV Bhs i Cole TAL oI ir am Of 1 mm ETTO Appendix D Glossary gt 802 11n 802 11n builds upon previous 802 11 standards by adding MIMO multiple input multiple output MIMO uses multiple transmitter and receiver antennas to allow for increased data throughput via spatial multiplexing and increased range by exploiting the spatial diversity perhaps through coding schemes like Alamouti coding The Enhanced Wireless Consortium EWC 3 was formed to help accelerate the IEEE 802 11n development process and promote a technology specification for interoperability of next generation wireless local area networking WLAN products 802 11b The 802 11b standard specifies a wireless networking at 11 Mbps using direct sequence spread spectrum DSSS technology and operating in the unlicensed radio spectrum at 2 4GHz and WEP encryption for security 802 11b networks are also referred to as Wi Fi networks 802 11g specification for wireless networking at 54 Mbps using direct sequence spread spectrum DSSS technology using OFDM modulation and operating in the unlicensed radio spect
46. 1 mm CLUlLe Connect to 192 168 1 1 User name Password Figure 3 8 cs Note 1 Do not mix up the user name and password with your ADSL account user name and password which are needed for PPP connections 2 Ifthe above screen does not pop up it means that your Web browser has been set to a proxy Go to Tools menu Internet Options Connections LAN Settings in the screen that appears cancel the Using Proxy checkbox and click OK to finish it 2 After your successful login you will see the Login screen as shown in Figure 3 9 Click Quick Setup menu to access Quick Setup Wizard Quick Setup Device Info Advanced Setup Wireless Version Info Firmware Version 1 0 1 Build 121225 Rel 81042 cot Tt Hardware Version TD W8950N v2 0x00000002 System Running time ODay s 01 25 29 Diagnostics LAN Info Da LAN IP Address 192 168 1 1 LAN MAC Address 02 10 18 01 12 23 ae IPv6 Address Prefix Length NULL Auto Configuration RADYD amp DHCPy6 Figure 3 9 3 Choose the WAN Type for Internet access For ADSL Telephone line RJ11 Service please select ADSL WAN For Ethernet RJ45 Service please select Ethernet WAN If you are unsure of it please consult your ISP You can enable IPv6 for Internet access according to your need 13 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Quick Setup WAN Configurations Please
47. A Encryption WEP Encryption Figure 4 67 Method One Hardware push button Step 1 Press the WPS button on the back panel of the modem router Step 2 Press and hold the WPS button of the adapter directly for 2 or 3 seconds gt 5 Step 3 Wait for a while until the next screen of adapter appears Click Finish to complete the WPS configuration 63 TD W8950ND Bibel iiie etme ATKI eV Bhs io Cole Taa oI ir am Of mm CLE Le 3 WPS for Wireless Wireless Configuration Completed Your computer has successfully joined the TP LINK network Figure 4 68 Method Two Step 1 Press the WPS button on the back panel of the modem router Step 2 For the configuration of the wireless adapter please choose Push the button on my access point in the configuration utility of the WPS as below and click Next 64 TD W8950ND Bakelite etme ATKI ey Bhs i Cole Taa oI i am Of 1 mm CLUlLe Wars WPS for Wireless Join a Wireless Network WPS is preparing to join Your computer to a wireless network Which setup method do you want to use Enter a PIN into my access point or a registrar O Enter the PIN from my access point Push the button on your access point and click Nest to continue Automatically select the network Cancel Figure 4 69 Step 3 Wait for a while until the next screen appears Click Finish to complete the WPS configuration 3 WPS for Wireless W
48. AN Interface 4 4 2 WAN Service Choose Advanced Setup gt WAN Service and you will see the WAN Port Information Table in the screen similar to Figure 4 7 which describes the WAN port settings and the relevant manipulation to each interface After you add a new Lay2 Interface please follow the instructions below to complete the further configuration of WAN Interface There are five different configurations for the connection types which are PPPoE IPoE Bridge PPPoA and IPoA You can select the corresponding types according to your needs 21 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Device Info Quick Setup Wide Area Network WAN Service Setup Advanced Setup Layer2 Interface Choose Add Remove or Edit to configure a WAN service over a selected interface WAN Service Interface Description Type Vian8021p VianMuxld Igmp NAT Firewall IPv6 Mid Remove Edit MAC Clone atm0 1 br_0_1_32 Bridge MWA MA Enabled Disabled Disabled Disabled Disabled oO Edit LAN NAT atm1 1 bocor 33 Bridge MA MA Enabled Disabled Disabled Disabled Disabled oO Edit Security atm2 1 br_0_0_35 Bridge NA NIA Enabled Disabled Disabled Disabled Disabled F Edit Parental Control R f atm3 1 br_0_0_100 Bridge MA MA Enabled Disabled Disabled Disabled Disabled o Edit Quality of Service atm4 1 br_0_8_ 35 Bridge MA MIA Enabled
49. Apply button 91 TD W8950ND Bibel iiie etme ATKI lV Bhs i Cote Taa oI i am Ol mm CLUlLe Device Info Quick Setup NAT Virtual Servers Advanced Setup Layer Interface Y Select the service name and enter the server IF address and click Apply Save to forward IF packets for this service to the WAN Service specified server LAN NOTE The Internal Port End cannot be modified directly Normally itis set to the same value as External Port End However if you modify Internal Port Start then Internal Port End will be set to the same value as Internal Port Start MAC Clone Remaining number of entries that can be configured 32 NAT Use Interface i Service Name Port Triggering Select a Service Mail SMTP ota ose Custom Serice o Security Server IP Address 19 166 1 Parental Control Quality of Service Traffic Control Routing External Por Siart eternal Port End Protocol ____aternat Port Siar merna Port End DNS C 25 DSL UPnP Interface Grouping LAN Ports IF Sec Wireless Diagnostics Management Apply Save ce Note Your opposite side should call your WAN IP which is displayed on the Status page 4 How to enable DMZ Host Log in to the modem router click the Advanced Setup NAT menu on the left of your browser and click DMZ Host submenu On the DMZ page type your IP address into the DMZ Host IP Address fiel
50. Brazil Toll Free 0800 608 9799 Portuguese Service E mail suporte br tp link com Service time Monday to Friday 09 00 to 20 00 Saturday 09 00 to 15 00 Indonesia Tel 62 021 6386 1936 E mail support id tp link com Service time Monday to Friday 09 00 to 18 00 Except public holidays Australia New Zealand Tel AU 1300 87 5465 NZ 0800 87 5465 E mail support au tp link com Australia support nz tp link com New Zealand Service time 24hrs 7 days a week Germany Austria Tel 49 1805 875 465 German Service 49 1805 TPLINK 43 820 820 360 E mail support de tp link com Fee 0 14 EUR min from the German fixed phone network and up to 0 42 EUR min from mobile phone Service time Monday to Friday 09 00 to 12 30 and 13 30 to 17 30 GMT 1 or GMT 2 Daylight Saving Time in Germany Except bank holidays in Hesse Singapore Tel 65 6284 0493 E mail support sg tp link com Service time 24hrs 7 days a week USA Canada Toll Free 1 866 225 8139 E mail support usa tp link com Service time 24hrs 7 days a week Italy Tel 39 023 051 9020 E mail support it tp link com Service time Monday to Friday 09 00 to 13 00 14 00 to 18 00 Malaysia Tel 1300 88 875 465 Email support my tp link com Service time 24hrs 7 days a week Poland Tel 48 0 801 080 618 48 223 606 363 if calls from mobile phone E mail support pl tp link com Service time Monday to Friday 09 00 to 17 00
51. D LAN IP 192 168 2 1 subnetmask 755 255 299 0 You could also use other VPN modem routers to set VPN tunnels with TD W8950ND TD W8950ND supports up to 10 VPN tunnels simultaneously Click Add New Connection in Figure 4 62 and then you will enter the screen shown in Figure 4 63 Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management IPSec Settings IPSec Connection Name Remote IPSec Gateway Address URLAPv4 Tunnel access from local IP addresses IP Address for VPN IP Subnetmask Tunnel access from remote IP addresses IP Address for VPN IP Subnetmask Key Exchange Method Authentication Method Pre Shared Key Perfect Forward Secrecy new connection 0 0 0 0 Subnet v 0 0 0 0 255 255 255 0 Subnet v 0 0 0 0 255 255 255 0 Auto IKE v Pre Shared Key v key Disable v Advanced IKE Settings Show Advanced Settings Figure 4 63 gt IPSec Connection Name Enter a name for your VPN gt Remote IPSec Gateway Address IP or Domain Name Enter the destination gateway IP address in the box which is the public WAN IP or Domain Name of the remote VPN server 57 Y VV WV TD W8950ND Bibel iiie etme ATK
52. GMT 1 or GMT 2 Daylight Saving Time France Tel 33 0 820 800 860 French service Email support fr tp link com Fee 0 118 EUR min from France Service time Monday to Friday 09 00 to 18 00 Except French Bank holidays Switzerland Tel 41 0 848 800 998 German Service E mail support ch tp link com Fee 4 8 Rp min depending on rate of different time Service time Monday to Friday 09 00 to 12 30 and 13 30 to 17 30 GMT 1 or GMT 2 Daylight Saving Time Russian Federation Tel 8 499 754 5560 8 800 250 5560 toll free call from any RF region E mail support ru tp link com Service time From 10 00 to 18 00 Moscow time Except weekends and holidays in Russian Federation 100
53. IP address filtering includes Outgoing and Incoming the detailed descriptions are provided below IP Filtering Outgoing Choose Advanced Setup gt Security gt IP Filtering you can configure Outgoing Filtering rules on the screen shown in Figure 4 32 The Outgoing IP Filtering feature allows you to control some IP traffic from LAN to access to some specifically addresses By default all outgoing IP traffic from LAN is allowed but some IP traffic can be BLOCKED by setting up filters Device Info Quick Setup Outgoing IP Filtering Setup Advanced Setup Layer2 Interface WAN Service MAC Clone Choose Add or Remove to configure outgoing IP filters LAN NAT Filter Name IP Version Protocol SrclP PrefixLength SrcPort DstIP PrefixLength DstP ort Remove By default all outgoing IP traffic from LAN is allowed but some IF traffic can be BLOCKED by setting up filters Security sendmail filter 4 TCP or UDP 192 168 1 222 210 17 188 204 25 oO MAC Filtering Parental Control Quality of Service Figure 4 32 39 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Set up an Outgoing IP Filtering rule 1 Click the Add button in Figure 4 32 and you will see the next screen as shown in Figure 4 33 j Device Info Quick Setup Add IP Filter Outgoing Advanced Setup Layer2 Interface WAN Service The screen allows you to create a filter rule to identify outgoing IP t
54. Interface Settings ae Web F SNMP Agent Telnet F TR 069 Client ICMP ping Fi Internet Time Access Control Passwords 4 7 7 Update Firmware Choose Management gt Update Firmware you can see the screen shown in Figure 4 109 which allows you to upgrade the latest version software to keep the modem router up to date Device Info Quick Setup Tools Update Firmware Advanced Setup Wireless Diagnostics Step 1 Obtain an updated firmware image file from our website www tp link com Management re Step 2 Enter the path to the image file location in the box below or click the Browse button to locate the image file System Log Step 3 Click the Update Firmware button once to upload the new image file SNMP Agent NOTE The update process takes about 2 minutes to complete and your DSL Router will reboot TRO69 Client Internet Time Firmware File Name Access Control Upgrade Firmware Reboot Figure 4 109 gt Browse Click the button to locate the latest software for the device gt Update Firmware After you have selected the latest software click the button To update the modem router s software 1 Download the latest software upgrade file from the TP LINK website http www tp link com 2 Click Browse to view the folders and select the image file or enter the exact path to the image file location in the text box 3 Click the Update Firmware button Cf Note 1 There is no
55. MODEM Connect to the ADSL LINE port of device Plug one end of the twisted pair ADSL cable into the ADSL LINE port on the rear panel of device Connect the other end to the MODEM port of the external splitter 5 Connect the power adapter to the power plug of the modem router and the other end into an electrical outlet The electrical outlet shall be installed near the device and shall be easily accessible 6 Turn on the ON OFF switch to power the device It will start to work automatically TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Wall Socket Phone Cable Splitter PHONE MODEM TERE EIS RESE WiFi T LAN4 WAN LAN3 LAN2 LANI WPS ON OFF POWER Computer Phone Cable Figure 2 1 TD W8950ND Bebe eg a AN Bho eo Cote Tan mm a coleic mm e K T C1Ui e Chapter 3 Quick Installation Guide This chapter will show you how to configure the basic functions of your TD W8950ND 150Mbps Wireless N ADSL2 Modem Router using Quick Setup Wizard within minutes 3 1 Configuring the PC After you directly connect your PC to the TD W8950ND or connect your adapter to a
56. N css tice curiae aen E E E A AOE A A O 89 Alo REDO beane e a R a E R 90 ADDS GIA FAQ ngahan 91 Appendix B Configuring the PC assisknnieaan ennienni aaa aana a aaa Kaaa aai ai 94 Appendix C SDECITICAUOIS srianan aa aaa aa aaa aa aak aaa waai 95 Appendix D GIOSSALY seinn uinn ua a a enaa 96 Appendix E Technical Support wscisusisesinedinekivetinensyedineiiuedinuhis teaeinteanbieediaenieetens 100 TD W8950ND Bibel iiie etme Tig ttn ey Bhs i Cote Taa oI i mm Ol 1 mm CLE To Package Contents The following contents should be found in your package One TD W8950ND 150Mbps Wireless N ADSL2 Modem Router One power Adapter for TD W8950ND 150Mbps Wireless N ADSL2 Modem Router Quick Installation Guide One RJ45 cable Two RJ11 cables One ADSL splitter One Resource CD for TD W8950ND 150Mbps Wireless N ADSL2 Modem Router including e This User Guide Vv VV VV WV WV e Other Helpful Information tS Note Make sure that the package contains the above items If any of the listed items are damaged or missing please contact your distributor TD W8950ND Bibel ite etme ATK eV Bhs i Cole TAL oI i am Of 1 mm ETTO Chapter 1 Product Overview Thank you for choosing the TD W8950ND 150Mbps Wireless N ADSL2 Modem Router 1 1 Overview of the Modem Router The TD W8950ND 150Mbps Wireless N ADSL2 Modem Router integrates 4 port Switch Firewall NAT Router and Wireless AP Powered by 1x1 MIMO technology the Wireless N M
57. S Apply Save Figure 4 65 This page allows you to configure basic features of the wireless LAN interface You can enable or disable the wireless LAN interface hide the network from active scans set the wireless network name also known as SSID and restrict the channel set based on Region requirements gt Enable Wireless If you want to use wireless features you must select Enable Wireless If you deselect Enable Wireless option all the Wireless settings below will be disabled gt Hide SSID Broadcast When wireless clients survey the local area for wireless networks to associate with you can select this option to avoided being surveyed gt Clients Isolation Select this option to enable AP isolation function so that stations associated to the AP will not be able to communicate with each other gt SSID Wireless network name shared among all points in a wireless network The SSID must be identical for all devices in the wireless network It is case sensitive and must not exceed 32 characters use any of the characters on the keyboard Make sure this setting is the same for all stations in your wireless network Type the desired SSID in the space provided gt BSSID Show the MAC address of the modem router gt Country Restrict the channel set and transmit power Click Apply Save to save your settings 4 5 2 Security Choose Wireless gt Security you will see the screen of Wireless Security setti
58. Save when done Network Authentication WPA2 Personal best recommended vi Wireless Network Key eseeaaese Also called WPA Pre Shared Key Click here to display you can enter ASCII characters between 8 and 63 characters or 6 to 64 Hexadecimal characters WPA Group Rekey Interval 0 foptional WPA Encryption AES v WEP Encryption Figure 4 75 gt Network Authentication Select an authentication type from the drop down list Options available are Open Shared WPA Enterprise WPA Personal WPA2 Enterprise WPA2 Personal Mixed WPA2 WPA Enterprise and Mixed WPA2 WPA PSK Personal Cf Note For most users it is recommended to use the default Wireless LAN Performance settings Any changes made to these settings may adversely affect your wireless network Under certain circumstances changes may benefit performance Carefully consider and evaluate any changes to these wireless settings 1 WEP WEP is a basic encryption method offering two levels of encryption 64 bit and 128 bit encryption To configure the WEP encryption there are two ways e Keep the Network Authentication of Open insecurity and select Enabled from the WEP Encryption drop down list as shown in Figure 4 76 Open insecurity with WEP encryption disable allows any wireless station to associate with the access point e Select Shared good from the Network Authentication drop down list as shown in Figure 4 77 Shared good must enable WEP encrypti
59. VC reas stuns eee ia cigs E wis at eneemenane Vu enoe seams oe ececmeraerene Bed IMAC COW arcae sstaa cue E N E me ncsseans a se EAN a sta retaeata em meaceanicbancteh cabereem A AO NA crc etek acest Se ects race tc gach ca E AAO SECUN aiena Oust A a a a a e a 4AT Parental COM Ol ris cccnrusstenheciusiat arabada a a Qsiaataphullatiers 448 Quality OF SENCE sienn a Deahieteee daa 449 Bandwidth Confolens a AR AA VO ROUMO casare a a a a a inatiie inutile AATE DNG ronnan aa E etic a a E coe AAT DSE aana r S detente AAA ORIN est ce eta ae ee ae E TE an nla catered ie easel N eM deat 54 AATA merac GroUPINg sexs ea a E teense eere ue 55 AA NOS MPS CO aE R a dened sees 56 AAT WWUIMICASE sect sete ase cexsccessetcssshseinc S aE OE E E O EAE 60 AO NVIFCIOSS erian eein e a AN r N e 60 ASt BASIC ai rge a a a n 61 A D2 FS CIN a a a a a a a a tedandt 61 A E NAG FIE ea a a E ere ees ee eee eee 76 AOA NVIRCIGSS MOOS eean a a E eee 7 AO ROVGAN COG amet truce tiinannt a E eet siden ama ada oeaidedeavelaad 19 ADG SUAHON INO suatien ted bon O diane maaan A ues 80 A IAGMO SUC S x siees tie tecen cern ne E E 81 A 7 Managemen eire eat arena EEEE E E 81 ATE SEMN Suare a aa a a a E 81 Be Tae SY SCCM EOG iea a a a a a E esta idasecuapaven 84 Ato SNMP AGEN a E A A 85 ALA TROGIR e soa gat cata sates tts ita nate acta A a menses 86 Ae Memo TIME sitet as am aw ecb aad geetinah ove mca coea E a A 87 AlO ACCESS CONTO A A 88 ETT Update FINMWaA
60. You can create a service name for the Service Description or leave it the default name Click Next 22 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Device Info Quick Setup WAN Service Configuration Advanced Setup Layer2 Interface Select WAN service type WAN Service PPP over Ethernet PPPoE MAC Clone IP over Ethernet LAN Bridging NAT EET Enter Service Description pppoe_0_8_35 Parental Control For tagged service enter valid 802 1P Priority and 802 10 VLAN ID Quality of Service For untagged service set 1 to both 802 1P Priority and 802 10 VLAN ID Bandwidth Control Enter 802 1P Priority 0 7 1 Routing Enter 802 10 VLAN ID 0 4094 DNS DSL Interface Grouping Figure 4 9 4 Enter the following parameters and then click Next _ Device Info Quick Setup PPP Username and Password Advanced Setup Layer2 Interface PPP usually requires that you have a user name and password to establish your connection In the boxes below enter the user name and password that your ISP has provided to you WAN Service PPP Username 134 MAC Clone PPP Password eee LAN PPPoE Service Name Authentication Method AUTO NAT MTU bytes 1480 The default is 1480 do not change unless necessary Security oO Enable Fullcone NAT Parental Control o Dial on demand with idle timeout timer Quality of Service go PPP IP extension Bandw
61. aa oI i mm Of mm CLUlLe ce Note ETH and ATM service can not coexist If the ATM Interface had configured you cannot configure any other WAN service over the ETH Interface until the ATM Interface is deleted 4 4 2 6 ETH PPPoE If your ISP provides a PPPoE connection and you need to use an ETH Interface follow the steps below to add a WAN service over a selected ETH interface 1 Add anew ETH interface on the screen of 4 4 1 2 ETH interface 2 Click the Add button on the screen Figure 4 7 and the following configuration is similar to PPPoE over ATM interface see section 4 4 2 1 ATM EoA PPPoE 4 4 2 7 ETH IPoE If your ISP provides an IPoE connection and you want to use an ETH Interface follow the steps below to add a WAN service over a selected ETH interface 1 Add anew ETH interface on the screen of 4 4 1 2 ETH interface 2 Click the Add button on the screen Figure 4 7 and the next configuration is similar to IPoE over ATM interface see section 4 4 2 2 ATM EoA IPoE 4 4 2 8 ETH Bridge If you want to adopt the Bridge service and you need to use an ETH Interface follow the steps below to add a WAN service over a selected ETH interface 1 Add anew ETH interface on the screen of 4 4 1 2 ETH interface 2 Click the Add button on the screen Figure 4 7 and the next configuration is similar to Bridge over ATM interface see section 4 4 2 3 ATM EoA Bridg 4 4 3 MAC Clone Choose menu Advanced Setup gt MAC Clone
62. able Modem Router s PIN button or restore the modem router to its factory default settings Method two Enter the PIN of my modem router into the wireless adapter is not allowed when the current PIN code is locked To add a new wireless device to an existing network please try other methods mentioned above 4 5 2 2 Manual Setup AP Follow the instructions below to configure security features of the wireless LAN interface manually You can set the network authentication method select data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength 68 TD W8950ND Bakelite etme ATK eV Bhs i Cole Taa oI ir am Of mm CLE Le Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to setto TKIP when the device runs in 11n mode Click Applw
63. access applications and others require that specific ports in the Router s firewall be opened for access by the WAN Service applications You can configure the port settings from this screen by selecting an existing application or creating your own Custom applicationjand click Save Apply to add it MAC Clone Remaining number of entries that can be configured 32 LAN Use Interface pppoe_0_8_35 ppp0 2 v NAT Application Name Virtual Servers Select an application Select One v Custom application DMZ Host ALG Security Trigger Port Start Trigger Port End Trigger Protocol Open Port Start Open Port End Open Protocol CP i Parental Control Quality of Service TCP v Bandwidth Control TCP i Routing CP DNS TCP v TCP v DSL TCP v TCP v UPnP TCP v TCP v Interface Grouping TCP v TCP J TTT ii T UE UT IPSec Multicast Wireless Save Apply Diagnostics Figure 4 28 2 Select the application from the drop down list If the list does not have the application that you want select the Custom application radio button and type the name of the custom application in the text box 3 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe 3 Enter the Trigger Port Start Trigger Port End Open Port Start and Open Port End in the table and then select the Trigger protocol and Open protocol TCP UDP or All 4 Click Save Apply to enabl
64. agement Choose Management there are eight submenus under the main menu They are Settings System Log SNMP Agent TR 069 Client Internet Time Access Control Update Firmware and Reboot Click any of them and you will be able to configure the corresponding function Management Settings System Log SNMP Agent TRO69 Client nternet Time Access Control Upgrade Firmware Reboot 4 7 1 Settings This section provides three important functions for managing the modem router they are Backup Update and Restore Default shown in Figure 4 96 The detailed manipulations are described below 81 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Device Info Quick Setup Settings Export Advanced Setup Wireless Backup DSL Modem Router configurations You may save your router configurations to a file on your PC Diagnostics Management Settings Export Import Resto re D efault Figure 4 96 4 7 1 1 Export Choose Management gt Settings gt Export you can see the Export screen this screen shown in Figure 4 97 allows you to save the current configuration of the modem router as a backup file Quick Setup Advanced Setup Wireless Settings Export F Backup DSL Modem Router configurations You may save your router configurations to a file on your PC Diagnostics Management Settings Import Restore Default
65. an Interface Policy Change NAT atm1 1 FORWARD Security IP Filtering atm2 1 FORWARD atm3 1 FORWARD Parental Control atm4 1 FORWARD Quality of Service atm5 1 FORWARD Bandwidth Control atm6 1 FORWARD DNS DSL change Policy Policy UPnP Choose Add or Remove to configure MAC filtering rules Interface Grouping Interface Protocol Remote MAC Local MAC Remove IP Tunnel atm1 1 IGMP 00 11 22 33 44 44 00 11 22 33 44 BB oO Si ei a ea e aea Routing IPSec Multicast Figure 4 34 gt Change Policy There are two policies for the MAC filters FORWARDED and BLOCKED Select the Change checkbox and click the Change Policy button to change from one policy to another When you set FORWARDED it means that all MAC layer frames will be forwarded except those matching with any of the specified rules in the table shown in Figure 4 34 While BLOCKED means that all MAC layer frames will be blocked except those matching with any of the specified rules in the preceding table gt Add Click the Add button and then you can add a new MAC Filter in the next screen shown in Figure 4 34 Wireless gt Remove Select the check box in the table shown in Figure 4 34 and then click the Remove button and then the corresponding entry will be deleted in the table To add a MAC Filtering rule 1 Click the Add button in Figure 4 34 and you will see the next screen similar to in Figure 4 35 Device Info Qui
66. and only these Remote Bridges are granted access AP Mode Access Point v Bridge Restrict Enabled Remote Bridges MAC Address Save Apply Figure 4 91 e Enabled Scan Select this option to enables wireless bridge restriction and it will scan the environment for APs that exist around the device Only those selected AP will be granted access e Refresh Click this button to scan and display the APs 78 TD W8950ND Bibel ite etme ATKI eV Bhs i Cole Taa oI i mm Ol mm CLUlLe AP Mode Bridge Restrict Enabled Scan w Remote Bridges MAC Address SSID BSsID CHANNEL TP LINK 13 BOO 00 02 03 04 05 06 10 China et 123456 Das 4C 7r 77rd e TP LINK _76DBAE 38 53 45 75 D8 AE Figure 4 92 Cf Note Only Open or Shared authentication method support wireless bridge you should choose Wireless gt Security to change authentication method to open or shared mode first 4 5 5 Advanced Choose Wireless gt Advanced you will see the screen of Wireless Advanced settings shown as below icc Wireless Advanced Advanced Setup i z This page allows you to configure advanced features of the wireless LAN interface You can select a particular channel on which to operate set the fragmentation threshold set the RTS threshold set the wakeup interval for clients in power save mode setthe beacon interval for the
67. are not Supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Applw Save when done Network Authentication WPA2 Personal best recommended v Wireless Network Key eeeaeoaeo Also called WPA Pre Shared Key Click here to display you can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters optional WPA Group Rekey Interval WPA Encryption WEP Encryption Figure 4 66 4 5 2 1 WPS Setup This section will guide you to add a new wireless device to an existing network quickly by WPS or called QSS method f Note 1 This feature is available only when OPEN WPA2 PSK or Mixed WPA2 WPA PSK mode is configured 2 To build a successful connection by WPS you should also do the corresponding configuration of the new device for WPS function meanwhile By PBC If the wireless adapter supports WPS and the Push Button Configuration PBC method you can add it to the network by PBC with the following two methods Click Push Button you will see the screen as shown below 62 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe Device Info Quick Setup Wireless Security Advanced Setup Wireless This page allows you to configure security features of the wireless LAN interface Basic You may setu
68. as bridged frames There are many applications such as IPoA DSL networks and other frame based network Depending on your equipment they can be either bridged or routed within the network Network A series of computers or devices connected for the purpose of data sharing storage and or transmission between users Ping Packet Internet Groper An Internet utility used to determine whether a particular IP address is online Port The connection point on a computer or networking device used for plugging in cables or adapters PPPoE Point to Point Protocol over Ethernet PPPoE stands for Point to Point protocol over Ethernet this protocol is used as a type of broadband connection that provides authentication username and password in addition to data transport PPPOA Point to Point Protocol over ATM PPPoA stands for Point to Point protocol over ATM this protocol is also used as a type of broadband connection that provides authentication username and password in addition to data transport RADIUS Remote Authentication Dial In User Service A protocol that uses an authentication server to control network access RJ45 Registered Jack 45 An Ethernet connector that holds up to eight wires Router A networking device that connects multiple networks together RPC Remote Procedure Calls RPC is a powerful technique for constructing distributed client server based applications It is based on extending the notion of co
69. ased Time is the amount of time in which a network user will be allowed connection to the modem router with their current dynamic IP address Enter the amount of time in hours then the user will be leased this dynamic IP address After the dynamic IP address has expired the user will be automatically assigned a new dynamic IP address The default is 24 hours Yy Static IP Lease List The function allows you to specify a reserved IP address for a PC on the LAN that PC will always obtain the assigned IP address each time when it accesses the DHCP server Reserved IP addresses should be assigned to servers that require permanent IP settings Click the Add Entries button and then you will set the rule in the screen as below Advanced Setup Layer2 Interface DHCP Static IP Lease Enter the Mac address and Static IP address then click Save Apply Jones SIUC MAC Address IP Address Security Parental Control Quality of Service Figure 4 22 e MAC Address The MAC address of the computer on the LAN which you want to reserve an IP e P Address The IP address you want to reserved to the computer Yy Configure the second IP Address and Subnet Mask You can configure the modem router s second IP Address and Subnet Mask for LAN Interface through which you can also access to the Web based Utility as the default IP Address and Subnet Mask 32 TD W8950ND Bibel iiie etme ATKI N Bhs i Cote Taa
70. ate the receiving antenna e Increase the separation between the equipment and receiver e Connect the equipment into an outlet on a circuit different from that to which the receiver is connected e Consult the dealer or an experienced radio TV technician for help This device complies with part 15 of the FCC Rules Operation is subject to the following two conditions 1 This device may not cause harmful interference 2 This device must accept any interference received including interference that may cause undesired operation Any changes or modifications not expressly approved by the party responsible for compliance could void the user s authority to operate the equipment Note The manufacturer is not responsible for any radio or tv interference caused by unauthorized modifications to this equipment Such modifications could void the user s authority to operate the equipment FCC RF Radiation Exposure Statement This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment This device and its antenna must not be co located or operating in conjunction with any other antenna or transmitter To comply with FCC RF exposure compliance requirements this grant is applicable to only Mobile Configurations The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co located or operating in conjunction with an
71. ate with PCs in remote LAN2 For example You can ping the IP address of PC2 which is 192 168 2 100 in PC1 Cf Note The VPN Servers Endpoint from both ends must use the same pre shared keys and Perfect Forward Secrecy settings Click Show Advanced Settings and then you can configure the Advanced Settings Advanced IKE Settings Hide Advanced Settings Phase 1 Mode Main v My Identifier Type Local Wan IP v My Identifier Remote Identifier Type Remote Wan IP w Remote Identifier Encryption Algorithm SDES v Integrity Algorithm W5 wv 7 Select Diffie Hellman Group for Key Exchange 1024bit w Key Life Time 3600 Seconds Phase 2 Encryption Algorithm SDES v Integrity Algorithm m5 wv Select Diffie Hellman Group for Key Exchange 1024bit s Key Life Time 3600 Seconds 58 TD W8950ND Bibel iiie etme Tig ttn eV Bhs io Cole Taa oI i am Of mm CLUlLe gt Main Mode Select Main Mode to configure the standard negotiation parameters for IKE phase gt Aggressive Mode Select Aggressive Mode to configure IKE phase1 of the VPN Tunnel to carry out negotiation in a shorter amount of time Not Recommended Less Secure Cf Note The difference between the two is that aggressive mode will pass more information in fewer packets with the benefit of slightly faster connection establishment at the cost of transmitting the identities of the security firewall in the clear When using aggressive mode
72. bridge will be granted access Selecting Enabled or Enabled Scan enables wireless bridge restriction Only those bridges selected in Remote Bridges will be granted access Click Refresh to update the remote bridges Wait for few seconds to update Click Save Apply to configure the wireless bridge options Tip1 Only Open or Shared Network Authentication support Wireless Bridge If you want remote wireless devices connect to this router by bridge Mode set the Network Authentication to Open or Shared first Tip2 Other APs can bridge to device Only with the same channel as device MAC Filter Wireless Bridge Advanced AP Mode Access Point i Bridge Restrict Disabled Diagnostics Management Figure 4 90 AP Mode Select an AP Mode from the drop down list Options available are Access Point and Wireless Bridge Yy e Access Point Select this option to allow wireless stations including AP clients to access e Wireless Bridge Also known as WDS Wireless Distribution System it will bridges the wireless stations which also in bridge mode to connect two or more remote LANs Yy Bridge Restrict e Disabled Select this option to disables wireless bridge restriction that any wireless bridge will be granted access e Enabled Select this option as shown below to enables wireless bridge restriction please enter the MAC address of the Remote Bridges that you want to connect with
73. ce click the Other MAC Address button and enter the MAC address ofthe other LAN device To find out the MAC address of a Windows based PC go to command window and type ipconfig tall LAN NAT User Name child 1 Security Parental Control Browser s MAC Address e5 b2 Other MAC Address xx xx Xx XxX XX XX 00 11 22 33 44 CC URL Filter r z z Days of the week Mon Tue wed Thu Fri Sat Sun Quality of Service Bandwidth Control Si E O O Routing Start Blocking Time hh mm 18 00 DNS End Blocking Time hh mm 21 00 DSL UPnP Interface Grouping Save Apply IPSec Figure 4 38 2 Enter the User Name of the LAN device connected to the modem router 3 To restrict the device where the browser is running select the Browser s MAC Address radio button The MAC Address has been automatically displayed in the text box To restrict other LAN devices click Other MAC Address radio button and enter the MAC address of the other LAN device 4 Select the day to allow the rule to take effect in the table 5 Enter the Start Blocking Time and End Blocking Time in the text box separately and then the device controlled will then be unable to connect to the internet during that time 6 Click Save Apply to save this entry and then you will see your settings as shown in Figure 4 37 Cf Note The Time Restriction will not work correctly before the time of the device is set in Management
74. ce runs in 11n mode Click Apply Save when done Network Authentication Shared good WEP Encryption Enabled Encryption Strength Current Network Key Network Key 1 1234567890 Network Key 2 Network Key 3 Network Key 4 Enter 13 ASCII characters or 26 hexadecimal digits for 128 bit encryption keys Enter 5 ASCII characters or 10 hexadecimal digits for 64 bit encryption keys Figure 4 78 We use Network Authentication Shared good Encryption Strength 64 bit Current Network Key 1 and enter 10 hexadecimal digits 1234567890 in the Network Key 1 for example as shown in Figure 4 78 above 71 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe 2 WPA WPA security for wireless communication has been developed to overcome some of the shortcomings of WEP WPA combines the key generation with the authentication services of a RADIUS server Basic Manual Setup AP Security MAC Filter In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless h
75. ces from the available interface list and add it to the grouped interface list using the arrow buttons to create the required mapping of the ports fe Note These clients may obtain public IP addresses 5 Click Save Apply to make the entry effective immediately c Note If a vendor ID is configured for a specific client device please REBOOT the client device attached to the modem to allow it to obtain an appropriate IP address 4 4 15 IPSec Choose Advanced Setup gt IPSec you can Add Remove or Enable Disable the IPSec tunnel connections on the screen as shown in Figure 4 62 Device Info Quick Setup IPSec Tunnel Mode Connections Advanced Setup Layer2 Interface WAN Service Add remove or enable disable IPSec tunnel connections from this page MAC Clone DPD Dead Peer Detection Caution May Cause Transmission Unstable LAN NAT Connection Name Remote Gateway Local Addresses Remote Addresses Status Enable Disable Edit Remove Security Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Figure 4 62 This section will guide you to configure a VPN tunnel between two TD W8950NDs The topology is as follows 56 TD W8950ND Babel iiie etme ATK eV Bhs i Cote TAL oI i am Of mm CLUlLe WAN IP 219 134 112 246 Cf Note TD WB950ND LAN IP 192 168 1 1 sUbnetmask 755 255 255 0 WAN IF 219 134 112 247 TO WWes 50N
76. characters or 8 to 64 Hexadecimal characters WPA Group Rekey Interval optional WPA Encryption WEP Encryption Apply Save Figure 4 87 4 5 3 MAC Filter Choose Wireless gt MAC Filter you will see the screen of Wireless MAC Filter settings shown as below 76 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Device Info Wireless MAC Filter Advanced Setup Wireless z A maximum 64 entries can beconfigured Basic MAC Restrict Mode Disabled Allow Deny MAC Filter O O Wireless Bridge Advanced Station Info 00 13 04 55 FF 09 o Diagnostics MAC Address Remove Management Figure 4 88 Wireless access can be filtered by using the MAC addresses of the wireless devices transmitting within your network s RADIUS To filter wireless users by MAC Address either permitting or blocking access If you do not wish to filter users by MAC Address select Disabled gt Disabled Select this option to disable MAC Filter function gt Allow Select this option to enable MAC Filter function that allow wireless access by the devices listed on this screen gt Deny Select this option to enable MAC Filter function that block wireless access from the devices listed on this screen gt Add Click this button to add the MAC Address gt Remove Select the item of the MAC Address and click this button to remove it When you click the Add bu
77. choose the Wan type for Internet access Choose WAN Type ADSL WAN For AD SLTelephone linetR11 Service C Ethernet WAN For Ethernet RJ45 Service Enable IPw6 for this service Skip WAN Figure 3 10 ADSL WAN Choose the WAN Link Type given by your ISP Here we use PPPoE as an example Enter the PPP Username and PPP Password provided by your ISP and then click Next Quick Setup WAN Configurations ISP Other verve a 35 0 288 1132 85535 Encapsulation Mode LLC SNAP BRIDGING w foptional WAN Link Type PPPoE PPP over Ethernet w PPP Username R PPP Password E PPPoE Service Name foptional MTU bytes 1480 optional Figure 3 11 Ethernet WAN The modem router supports two WAN Link types PPPoE and IPoE Choose the WAN Link Type given by your ISP Here we use PPPoE as an example Enter the PPP Username and PPP Password provided by your ISP and then click Next 14 TD W8950ND Bibel ite etme ATK eV Bhs i Cole Taa oI i am Of mm CLUlLe Quick Setup WAN Configurations Ethernet WAN Port LAN AAMAR WAN Link Type PPPoE PPP over Ethernet PPP Username PPP Password PPPoE Service Name foptional MTU bytes 1480 optional Figure 3 12 4 On the Wireless Configurations screen you can rename your wireless network and create your own password in this page The default wireless network name is TP LINK_XXXXXxX a
78. ck Setup Add MAC Filter Advanced Setup Layer2 Interface Create a filter to identify the MAC layer frames by specifying atleast one condition below If multiple conditions are specified all of them take effect Click Apply to save and WAN Service activate the filter MAC Clone LAN Protocol Type IGMP v NAT Destination MAC Address 00 11 22 33 44 44 Security Source MAC Address 00 11 22 33 44 BB IP Filtering Frame Direction LAN lt gt WAN v ECAA WAN Interfaces Configured in Bridge mode only br_0_0_32 atm0 1 x Quality of Service Bandwidth Control Save Apply Routing Figure 4 35 Select Protocol Type in the drop down list for the rule Enter Destination MAC Address and Source MAC Address in the text box Select Frame Direction in the drop down list for the rule a S wN Select the WAN interfaces from the drop down list 41 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe 6 Click Save Apply to save this entry and then you will see your settings as shown in Figure 4 34 4 4 7 Parental Control Choose Advanced Setup Parental Control You can configure the Parental Control on the screen as shown in Figure 4 36 Time Restriction allows you to control the Internet activities of the child by restricting the time of surfing URL Filter limits every computer connected to the router to access certain websites These two featu
79. compatibility with IEEE 8021b devices and WEP encryption for security Infrastructure Network An infrastructure network is a group of computers or other devices each with a wireless adapter connected as an IEEE 802 11 wireless LAN In infrastructure mode the wireless devices communicate with each other and to a wired network by first going through an access point An infrastructure wireless network connected to a wired network is referred to as a Basic Service Set BSS A set of two or more BSS in a single network is referred to as an Extended Service Set ESS Infrastructure mode is useful at a corporation scale or when it is necessary to connect the wired and wireless networks IP Address The address used to identify a computer or device on a network IPoA IP and ARP over ATM A protocol that provides extensions to the IP Group for handling IP over ATM flows ISP Internet Service Provider A company that provides access to the Internet 97 TD W8950ND Babel iiie etme ATK eV Bhs io Cole Taa oI iK am Of 1 mm CLE Le LAN The computers and networking products that make up your local network MAC Media Access Control Address The unique address that a manufacturer assigns to each networking device NAT Network Address Translation NAT technology translates IP addresses of a local area network to a different IP address for the Internet MER MAC Encapsulation Routing MER allows IP packet to be carried
80. cs LAN MAC Address 02 10 18 01 12 23 me IPv6 Address Prefix Length NULL Auto Configuration RADYD DHCPv6 Management ADSL Info Line State Down Line Rate Upstream Kbps 0 Line Rate Downstream Kbps 0 Figure 4 1 17 TD W8950ND EII J eg a AN Bho eo Cote Tan mm a coleic mm e K T CTT iTe Cf Note Click the other submenus under the main menu Device Info and you will be able to view the corresponding information about WAN Statistics Route ARP and DHCP 4 3 Quick Setup Please refer to Section 3 2 Quick Installation Guide 4 4 Advanced Setup Choose Advanced Setup there are many submenus under the main menu Among the submenus Layer2 Interface WAN Service LAN etc are default menus while NAT IP MAC filtering of the Security Quality of Service and DNS will appear only when you select some corresponding functions Click any one of them and you will be able to configure the corresponding function Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast This Advanced Setup section mainly introduces how to configure the modem router for adequate use The detailed explanations for each subsection are provided below 18 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe cf Note
81. d using 192 168 1 222 as an example remember to click the Save Apply button Device Info NAT DMZ Host Quick Setup Advanced Setup Layer Interface The OSL Modem Router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer WAN Service LAN MAC Clone NAT Clear the IF address field and click Apph to deactivate the OM host Enter the computer s IP address and click SavefApph to activate the DMZ host Virtual Servers z F DM Host IP Address 192 158 1 222 Por Triggering Security Save Apply Parental Control Quality of Service 4 Iwant to build a WEB Server on the LAN what should do Log in to the modem router click the Advanced Setup NAT menu on the left of your browser 92 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe and click the Virtual Servers submenu On the Virtual Servers page click Add then on the NAT Virtual Servers page enter use 80 as service port and your IP address next to the Server IP Address assuming 192 168 1 188 for an example and remember to click the Save Apply button Device Info NAT Virtual Servers Quick Setup Advanced Setup Layer Interface Select the service name and enter the server IP address and click Apply Save to forward IP packets for this service to WAN Service th
82. de Enabled SP O VlanMuxMode Enabled SP oO atm o a8 EoA LLC UBR VlanMuxmMode Enabled SP o Figure 4 2 gt Remove Select the check box in the table on the screen above and then click the Remove button the corresponding interface will be deleted in the table Cf Note If the interface is used by the configuration of the 4 4 2 WAN Service you need to remove the corresponding WAN Service entry first before you can remove it here gt Add Click the button and you can add a new interface in the next screen 19 TD W8950ND Bibel iiie etme ATKI N Bhs i Cote Taa oI ir am Of mm CLUlLe Device Info Quick Setup ATM PVC Configuration Advanced Setup Layer2 Interface This screen allows you to configure an ATM PYC identifier VPI and YCh select DSL latency select a service category Otherwise choose an existing interface by selecting the checkbox to enable it ETH Interface VPI 0 255 8 WAN Service VCI 32 65535 35 MAC Clone Select DSL Link Type EoA is for PPPoE IPoE and Bridge EoA Security PPPoA Parental Control IPoA Quality of Service Encapsulation Mode LLC SNAP BRIDGING v Bandwidth Control Service Category UBR Without PCR w Routing DNS Select IP QoS Scheduler Algorithm DSL Strict Priority UPnP Precedence of the default queue 8 lowest Weighted Fair Queuin Interface Grouping O a
83. do I configure the modem router to access Internet by ADSL users 1 First configure the ADSL Modem configured in RFC1483 bridge model 2 Connect the Ethernet cable from your ADSL Modem to the WAN port on the modem router The telephone cord plugs into the Line port of the ADSL Modem 3 Log in to the modem router and configure the WAN connection type as PPPoE connection mode The detailed steps please refer to section 4 4 2 1 ATM EoA PPPoE 4 If your ADSL lease is in pay according time mode select Dial on Demand for Internet connection mode on the screen of Figure 4 10 e Note If you are a Cable user please configure the modem router following the above steps 2 How do I configure the modem router to access Internet by Ethernet users Log in to the modem router and configure the WAN connection type as IPoE connection mode The detailed steps please refer to section 4 4 2 2 ATM EoA IPoE want to use NetMeeting what do I need to do If you start NetMeeting as a sponsor you don t need to do anything with the modem router If you start as a response you need to configure Virtual Server or DMZ Host How to configure Virtual Server Log in to the modem router click the Advanced Setup NAT menu on the left of your browser and click Virtual Servers submenu On the Virtual Servers page click Add and enter 1720 for the service port using 192 168 1 222 for Server IP Address remember to click the Save
84. e the corresponding interface will be deleted in the table 4 4 2 2 ATM EoA IPoE If your ISP provides an IPoE connection and you need to use an ATM Interface follow the steps below to add a WAN service over a selected ATM interface 1 Add anew AIM interface and select EoA option for DSL Link Type 4 4 1 1 ATM interface 2 Click the Add button on the screen as shown Figure 4 7 Select WAN Service Interface over ATM PVC on the next screen as shown Figure 4 8 3 If your ISP provides an IPoE connection select IP over Ethernet option for the WAN service type on the screen as shown Figure 4 9 and click Next button to continue 4 Enter parameters in the following blanks to configure the WAN IP Address and click Next Device Info Quick Setup WAN IP Settings Advanced Setup Layer2 Interface 3 Enter information provided to you by your ISP to configure the WAN IP settings WAN Service Notice If Obtain an IP address automatically is chosen DHCP will be enabled for PYC in IPoE mode MAC Clone If Use the following Static IP address is chosen enter the WAN IP address subnet mask and interface gateway LAN Obtain an IP address automatically NAT Option 60 Vendor ID Security Option 61 IAID 8 hexadecimal digits Parental Control Option 61 DUID hexadecimal digit Quality of Service Option 125 Disable Enable Bandwidth Control Use the following Static IP address Routing WAN IP Address
85. e Disable Edit Remove Virtual Servers Port Triggering Enable All Select All Figure 4 24 4 4 5 1 Virtual Servers Choose Advanced Setup gt NAT gt Virtual Servers you can set up virtual servers on the screen below shown in Figure 4 25 Virtual servers can be used for setting up public services on your LAN such as DNS Email and FTP A virtual server is defined as a service port and all requests from the Internet to this service 34 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe port will be redirected to the computer specified by the server IP Any PC that was used for a virtual server must have a static or reserved IP Address because its IP Address may change when using the DHCP function Device Info NAT Virtual Servers Setup Advanced Setup Layer2 Interface Virtual Server allows you to direct incoming traffic from WAN side identified by Protocol and External port to the Internal server with private IP address on the LAN side WAN Service The Internal port is required only ifthe external port needs to be converted to a different port number used by the server on the LAN side A maximum 32 entries can beconfiqured MAC Clone Server Name External Port Start External Port End Protocol Internal Port Start Internal Port End Server IP Address WAN Interface Status Enable Disable Edit Remove Virtual Servers Port Triggering Enable All Select All
86. e Fragmentation Threshold Setting the Fragmentation Threshold too low may result in poor network performance Only minor reduction of the default value is recommended In most cases it should remain at its default value of 2346 Yy V RTS Threshold Should you encounter inconsistent data flow only minor reduction of the default value 2347 is recommended If a network packet is smaller than the preset RTS threshold size the RTS CTS mechanism will not be enabled The modem router sends Request to Send RTS frames to a particular receiving station and negotiates the sending of a data frame After receiving an RTS the wireless station responds with a Clear to Send CTS frame to acknowledge the right to begin transmission This mechanism can provide you a quiet communication channel by notifying other stations not to send packet for a period of time In most cases keep its default value of 2347 Vv DTIM Interval This value between 1 and 255 indicates the interval of the Delivery Traffic Indication Message DTIM A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages The countdown unit is measured by the amounts of beacon frames received When the modem router has buffered broadcast or multicast messages for associated clients it sends the next DTIM with a DTIM Interval value Its clients hear the beacons and awaken to receive the broadcast and multicast messages The defaul
87. e specified server NOTE The Internal Port End cannot be modified directly Normally itis set to the same value as External Port a End However if you modify Internal Port Start then Internal Port End will be set to the same value as Internal MAC Clone Port Start Remaining number of entries that can be configured 32 NAT Use Interface pppoe_0_0_38 ppp0 Service Name Port Triggering Selecta Service DMZ Host Security Custom Service WEB Server on the LAN Server IP Address 192 168 1 188 Parental Control Quality of Service Traffic Control Routing External Port Start External PortEnd Protocol Internal Port Start Internal PortEnd o J fe J pe a fo Cc J l l UPnP ff tree wf E LAN Ports l J IPSec e aol k LCL J O Wireless TCP Diagnostic N ee ee ee Management TCP i eee TCP v sd fe BL J CF J Do d COo l eee i cf Note Because the WEB Server port 80 will interfere with the WEB management port 80 on the modem router you will be prompt to change the WEB management port number to avoid interference Bicrosoft Internet Explorer Since port G0 is used the DSL router WEB server port for your remote access will be moved to 080 5 The wireless stations cannot connect to the modem router 1 Make sur
88. e static IPv6 DNS server Addresses DSL Note that selecting a WAN interface for IPv6 DNS server will enable DHCPv6 Client on that interface UPnP Obtain IPv6 DNS info from a WAN interface WAN Interface selected ipoe_eth3 eth3 v O Use the following Static IPv6 DNS address Interface Grouping IP Tunnel Primary IPv6 DNS server IPSec Secondary IPv6 DNS server Multicast Save Apply Wireless Figure 4 55 For PPPoA PPPoE enabled PVC s please select the Select DNS Server Interface from available WAN interfaces checkbox this modem router will accept automatically the first received DNS assignment from the selected configured WAN interface during the connection establishment For single PVC with IPoA static IPoE protocol please select the Use the following Static DNS IP address checkbox and enter the primary and or optional secondary DNS server IP addresses provided by your ISP Here you can also select a configured WAN interface for IPv6 DNS server or enter the static IPv6 DNS server Addresses provided by your ISP Click the Save Apply button to save the new configuration 52 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe 4 4 11 2 Dynamic DNS Choose Advanced Setup gt DNS gt Dynamic DNS you can see the Dynamic DNS screen this screen allows you to configure the Dynamic DNS shown in Figure 4 56 The modem router
89. e the Enable Wireless is checked 2 Make sure that the wireless stations SSID accord with the modem router s SSID 3 Make sure the wireless stations have right KEY for encryption when the modem router is encrypted 4 If the wireless connection is ready but you can t access the modem router check the IP Address of your wireless stations 93 Appendix B Configuring the PC For Windows 8 Move your mouse to the lower right corner and you will see Search icon in the Popups Go to 2 gt Apps Type Control Panel in the search box and press Enter then you will go to Control Panel Click View network status and tasks gt Change adapter settings Right click Ethernet select Properties and then double click Internet Protocol Version 4 TCP IPv4 Select Obtain an IP address automatically choose Obtain DNS server address automatically and then click OK For Windows 7 Vista Go to Start gt Settings gt Control Panel Click View network status and tasks gt View status gt Properties and double click Internet Protocol Version 4 TCP IPv4 Select Obtain an IP address automatically choose Obtain DNS server address automatically and then click OK For Windows XP 2000 Go to Start gt Control Panel Click Network and Internet Connections gt Network Connections Right click Local Area Connection select Properties and then d
90. e the settings and then you will see your settings as shown in Figure 4 27 cs Note If you select the application from the drop down list the External Port Start External Port End Internal Port Start Internal Port End and the Protocol will be added in the table automatically 4 4 5 3 DMZ Host Choose Advanced Setup gt NAT gt DMZ Host you can set up DMZ Host on the screen shown in Figure 4 29 The DMZ host feature can make a local host be exposed to the Internet for a special purpose service such as online gaming or video conferencing Device Info NAT DMZ Host Advanced Setup Layer2 Interface The DSL Modem Router will forward IP packets from the WAN that do not belong to any of the applications configured in the Virtual Servers table to the DMZ host computer Enter the computer s IP address and click Save Apply to activate the DMZ host Clear the IP address field and click Save Apply to deactivate the DMZ host LAN DMZ Host IP Address Virtual Servers Port Triggering ALG Save Apply Figure 4 29 To add a new DMZ Host You can enter the computer s IP address and then click Save Apply to activate the DMZ host you set on this page Cf Note DMZ host forwards all the ports at the same time Any PC whose port is being forwarded must have its DHCP client function disabled and should have a new static IP Address assigned to it because its IP Address may change while using
91. e with PC System Log Setup Adsl Modem Router s Date Time SNMP Agent Date YMD 1970 01 01 TR 069 Client z Time H M S 00 38 50 Internet Time Access Control Upgrade Firmware Reboot C Automatically synchronize with Internet time servers Save Apply Figure 4 107 4 7 6 Access Control Choose Management gt Access Control gt Password you can see the screen shown in Figure 4 108 which allows you to change the factory default password of the modem router The default password is the same as the user name which is admin admin support support and user user respectively Device Info Quick Setup Access Control Password Advanced Setup Wireless Diagnostics Access to your DSL Modem Router is controlled through three user accounts admin support and user Management The user name admin has unrestricted access to change and view configuration of your DSL Router Settings The user name support is used to allow an ISP technician to access your DSL Router for maintenance and to run diagnostics System Log SNMP Agent TR 069 Client Internet Time Username Access Control Old Password admin support user The user name user can access the DSL Router view configuration settings and statistics as well as update the router s software Use the fields below to enter up to 16 characters and click Save Apply to change or create passwords Note Password cannot contain a space
92. eV Bhs i Cote TAL a Colei i am Of mm CLUlLe endpoint For example Input 219 134 112 247 in Device1 Input 219 134 112 246 in Device 2 Tunnel access from local IP addresses Choose Subnet if you want the Whole LAN to join the VPN network or else choose Single Address if you want single IP to join the VPN network IP Address for VPN Enter the IP address of your LAN For example Input 192 168 1 1 in Device Input 192 168 2 1 in Device2 IP Subnetmask Enter the Subnet mask of your LAN For example Input 255 255 255 0 in both Device1 and Device2 Tunnel access from remote IP addresses Choose Subnet if you want the Remote Whole LAN to join the VPN network or else choose Single Address if you want single IP to join the VPN network IP Address for VPN Enter the IP address of the Remote LAN For example Input 192 168 2 1 in Device1 Input 192 168 1 1 in Device2 IP Subnetmask Enter the subnetmask of the remote LAN For example Input 255 255 255 0 in both Device1 and Device2 Key Exchange Method Select Auto IKE or Manual Authentication Method Select Pre Shared Key recommended Pre Shared Key Input the Pre Shared key for Authentication For example Input 12345678 Perfect Forward Secrecy PFS is an additional security protocol We recommend you leave the Advanced Settings as default value After complete the basic settings and click Save Apply in both Device1 and Device2 PCs in LAN could conmmunic
93. ection elete mj Rename this connection Rename Repair Bridge Connections w se i oF this Properties Change settings of this connection Other Places g Control Panel My Network Places My Documents ag My Computer Figure 3 2 Step 3 Select General tab highlight Internet Protocol TCP IP and then click the Properties button 1 Local Area Connection Properties General Authentication Advanced Connect using BB Realtek ATL8139 Family PCI Fast Ett This connection uses the following tems El Chent for Microsoft Networks File and Printer Sharing for Microsoft Networks QoS Packet Schedule lntemet Protocol TCP IP E Te i ma ee Description Transmission Control ProtocolInternet Protocol The default wide area network protocol that provides communication across diverse interconnected networks Show icon in notification area when connected Notify me when this connection has limited or no connectivity Figure 3 3 10 TD W8950ND Bakelite etme ATKI ey Bhs i Cole Taa oI i am Of 1 mm CLUlLe Step 4 Configure the IP address as Figure 3 4 shows After that click OK Internet Protocol TCP IP Properties General ou can get IF settings assigned automatically if your network supports this capability Othermise you need to ask your network administrator for the appropriate IP settings Obtain an IP address automatically
94. ery Response Interval 10 Last Member Query Interval 10 Robustness Value 2 Maximum Multicast Groups 10 Maximum Multicast Data Sources for mldv3 10 Maximum Multicast Group Members 10 Fast Leave Enable LAN to LAN Intra LAN Multicast Enable O Figure 4 64 Click Apply Save to save your settings 4 5 Wireless Choose Wireless there are six submenus to configure Wireless LAN settings Click any of them and you will be able to configure the corresponding function The detailed explanations for each submenu are provided below Wireless Basic Security MAC Filter Wireless Bridge h Advanced Station Info 60 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe 4 5 1 Basic Choose Wireless gt Basic you will see the screen of Wireless Basic settings shown as below The basic settings for wireless networking are set on this screen Src Wireless Basic This page allows you to configure basic features of the wireless LAN interface You can enable or disable the wireless LAN interface hide the network from active scans setthe wireless network name also known as SSID and restrict the channel set based on country requirements Click ApplySave to configure the basic wireless options Enable Wireless F Hide SSID Broadcast im Clients Isolation Wireless Network Name TP LINK_CE48BB fAlso called SSID BSSID BO 48 74 CE 48 BB Country UNITED STATE
95. et DNS Domain Name Server The IP address of your ISP s server which translates the names of websites into IP addresses Domain A specific name for a network of computers DSL Digital Subscriber Line An always on broadband connection over traditional phone lines Dynamic IP Address A temporary IP address assigned by a DHCP server EAP Extensible Authentication Protocol A general authentication protocol used to control network access Many specific authentication methods work within this framework Encryption Encoding data transmitted in a network Ethernet IEEE standard network protocol that specifies how data is placed on and retrieved from a common transmission medium Firewall A set of related programs located at a network gateway server that protects the resources of a network from users from other networks Gateway A device that interconnects networks with different incompatible communications protocols IEEE 802 11b The IEEE 802 11b standard specifies a wireless networking at 11 Mbps using direct sequence spread spectrum DSSS technology and operating in the unlicensed radio spectrum at 2 4GHz and WEP encryption for security IEEE 802 11b networks are also referred to as Wi Fi networks IEEE 802 11g Specification for wireless networking at 54 Mbps using direct sequence spread spectrum DSSS technology using OFDM modulation and operating in the unlicensed radio spectrum at 2 4GHz and backward
96. etwork and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click ApplySave when done Network Authentication WPA2 Personal best recommended v Wireless Network Key ELILE Also called WPA Pre Shared Key Click here to display you can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters optional WPA Group Rekey Interval WPA Encryption WEP Encryption Apply Save Figure 4 71 amp Note The PIN code of the adapter is always displayed on the WPS configuration screen Step 2 For the configuration of the wireless adapter please choose Enter a PIN into my access point or a registrar in the configuration utility of the WPS as below and click Next 66 Cf Note TD W8950ND Bakelite etme ATKI ey Bhs i Cole Taa oI i am Of 1 mm CLUlLe Wer WPS for Wireless Join a Wireless Network WPS is preparing to join your computer to a wireless network Which setup method do you want to use Push the button on my access point Enter the FIN 16952898 into your access point or external registrar
97. gent you can see the SNMP Configuration screen as shown SNMP Simple Network Management Protocol has been widely applied in the computer networks currently which is used for ensuring the transmission of the management information between any two nodes In this way network administrators can easily search and modify the information on any node on the network Meanwhile they can locate faults promptly and implement the fault diagnosis capacity planning and report generating An SNMP Agent is an application running on the modem router that performs the operational role of receiving and processing SNMP messages sending responses to the SNMP manager and sending traps when an event occurs So a modem router contains SNMP agent software can be monitored and or controlled by SNMP Manager using SNMP messages An SNMP Manager or SNMP Service is an application that performs the operational roles of generating SNMP messages requests to modify and retrieve management information and 85 TD W8950ND Bibel iiie etme ATKI N Bhs i Cote Taa oI ir am Of mm CLUlLe receiving the requested information and trap event reports that are generated by the SNMP agent SNMP Manager is the third party management system Monitor one is an SNMP Manager Device Info SNMP Configuration Advanced Setup Simple Network Management Protocol SNMP allows a management application to retrieve statistics and status from the SNMP agent in this device
98. ghest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click ApplyiSave when done Network Authentication WPA2 Personal best recommended vi Wireless Network Key eeeaeausee Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters WPA Group Rekey Interval 0 E 7 optional WPA Encryption WEP Encryption Figure 4 73 67 TD W8950ND Bakelite etme ATKI ey Bhs i Cole Taa oI i am Of 1 mm CLUlLe Step 2 For the configuration of the wireless adapter please choose Enter a PIN from my access point in the configuration utility of the WPS as below and enter the PIN code of the modem router into the field after Access Point PIN Then click Next irs WPS for Wireless Join a Wireless Network WPS is preparing to join Your computer to a wireless network Which setup method do you want to use Push the button on my access point O Enter a PIN into my access point or a registrar Figure 4 74 cf Note In order to protect your PIN code from brute force attack please click the Disable Modem Router s PIN button to lock the current PIN code of modem router To unlock the current PIN code click the En
99. h has NAT enabled such as PPPoE To activate RIP for the device configure an individual interface select the desired RIP version and operation and select Enabled checkbox for the interface Click Save Apply to save the configuration 4 4 11 DNS When you select the connection type PPPoE PPPoA or IPoA for WAN configuration you will see the DNS menu in the Web based Utility shown in Figure 4 54 It includes DNS Server and Dynamic DNS submenus 51 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Device Info Quick Setup DNS Server Configuration Advanced Setup Layer2 Interface m Select DNS Server Interface from available WWAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single PYC with IPoA or static IPoE WAN Service protocol is configured Static DNS server IP addresses must be entered MAC Clone DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used according to the priority with the first being the higest and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing all and adding them back in again LAN NAT Select DNS Server Interface from available WAN interfaces Selected DNS Server Interfaces Available WAN Interfaces Security pppl 1 Parental Control Quality of Service Bandwidth Control Routing DNS DNS Server Dynam
100. h subsequent identity For example the device may use IAID value 1 for the first physical interface and value 2 for the second Alternatively the device may use IAID value 1 for the virtual circuit corresponding to the first connection object in the data model and value 2 for the second connection object in the data model e Option 61 DUID Specifies the name of the interface whose link layer address the server is to use as its DUID DHCP Unique Identifier You must enter a value for this parameter or the server will not start When the server starts the DUID is written to the system log e Option 125 The option 125 allows DHCP server to be pre configured with policy for handling classes of devices in a certain way without requiring DHCP server to be able to parse the unique format used in client identifier option gt Use the following IP Address If you are provided with a static IP gateway Address please select this option and then enter the WAN IP Address WAN Subnet Mask and WAN gateway IP Address manually 5 You will see the next screen as below You can enable the NAT SPI Firewall and IGMP Multicast if you are not sure about the settings just leave the default settings Click Next a Network Address Translation Settings Network Address Translation NAT allows you to share one Wide Area Network VAN IP address for multiple computers on your Local Area Network LAN Enable NAT C Enable Fullcone NAT C Enable Firewall Sec
101. hange the RADIUS Port if necessary Type in the password in the RADIUS Key field Use the default setting AES of WPA Encryption oo oo e eS Nf Click Save Apply to save the new configuration 72 Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management 3 WPA Personal TD W8950ND EII J eT ae AN Bho oe Cote Tani cole i mm e K T CTT iTo Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication WPA Enterprise good Nj WPA Group Rekey Interval RADIUS Server IP Address RADIUS Port 1 65535 RADIUS Key optional You can enter ASCII characters between O and 63 characters or 0 to 64 Hexadecimal characters WPA Encryption WEP Encryption
102. hange to offer the appropriate settings WWPA2 Personal requires a shared key and does not use a separate server for authentication PSK keys can be ASCII or Hex type Security Manual Setup AP MAC Filter In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Wireless Bridge Advanced Station Info Diagnostics Management Network Authentication WPA2 Personal best recommended Wireless Network Key Also called WPA Pre Shared Key Click here to display You can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters WPA Group Rekey Interval optional WPA Encryption WEP Encryption Apply Save Figure 4 85 6 Mixed WPA2 WPA Enterprise To configure Mixed WPA2 WPA E
103. he Browse button to locate the update file for the device and you can also enter the exact path to the Setting file in the text box 2 After you have selected the file for updating the settings click the Import Settings button ces Note The modem router will reboot upon completion This process will take a while don t turn off the modem router or press the Reset button while processing 83 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe 4 7 1 3 Restore Default Choose Management gt Settings gt Restore Default you can see the Restore Default screen this screen shown in Figure 4 101 allows you to restore the modem router s configuration to the factory defaults on the screen Device Info Tools Restore Default Settings Advanced Setup Wireless Diagnostics Restore DSL Modem Router settings to the factory defaults Management Restore Default Settings Figure 4 101 M Restore Default Settings Click this button to restore the modem router s configuration to the factory defaults and then follow the on screen instructions to complete it Account and Password The default account name and its password are both admin The default IP Address 192 168 1 1 The default Subnet Mask 255 255 255 0 Yy 4 7 2 System Log Choose Management gt System Log you can see the System Log screen this screen shown in Figure 4 102 allows you to view t
104. he system log and configure the system log options Device Info System Log Advanced Setup Wireless Diagnostics The System Log dialog allows you to view the System Log and configure the System Log options Management Click View System Log to view the System Log Click Configure System Log to configure the System Log options System Log SNMP Agent TR 069 Client Configure System Log Internet Time Figure 4 102 To View the System Log Click the View System Log button you will see the screen shown in Figure 4 103 which displays the modem router s recent logs system Log Date Time Facility Severity Message Figure 4 103 84 TD W8950ND Bibel iiie etme Tig ttn eV Bhs io Cole Taa oI i am Of mm CLUlLe gt Refresh Click the button the information in the table will be updated gt Close Click the button the screen will be closed To Configure the System Log Settings Click the Configure System Log button shown in Figure 4 102 you will see the screen below shown in Figure 4 104 Device Info System Log Configuration Advanced Setup Wireless m P Ifthe log mode is enabled the system will begin to log all the selected events For the Log Level all events above or equal to the selected level will be logged For the Display Diagnostics Level all logged events above or equal to the selected level will be displayed Ifthe selected mode is Remote or Both events will be sentto
105. ic DNS Use the following Static DNS IP address DSL Primary DNS server UPnP Secondary DNS server Interface Grouping IPSec Multicast Figure 4 54 4 4 11 1 DNS Server Choose Advanced Setup gt DNS gt DNS Server and you can see the DNS Server Configuration screen as shown in Figure 4 55 Device Info DNS Server Configuration Quick Setup Advanced Setup Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single P C with IPoA or static IPOE protocol is configured Static Layer2 Interface DNS server IP addresses must be entered 3 DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used according to the priority with the first being the higest and the last one the lowest priority if WAN Service the WAN interface is connected Priority order can be changed by removing all and adding them back in again MAC Clone Select DNS Server Interface from available WAN interfaces Selected DNS Server Interfaces Available WAN Interfaces LAN eth3 Security Parental Control Quality of Service Bandwidth Control z Use the following Static DNS IP address Routing Primary DNS server DNS Secondary DNS server Dynamic DNS Select the configured WAN interface for IPv6 DNS server information OR enter th
106. idth Control oO Use Static IPv4 Address Routing F Enable PPP Debug Mode DNS F Bridge PPPoE Frames Between WAN and Local Ports DSL UPnP Multicast Proxy Interface Grouping Enable IGMP Multicast Proxy IPSec Multicast Figure 4 10 gt PPP Username Password Enter the User Name and Password provided by your ISP These fields are case sensitive gt PPPoE Service Name Enter the Service Name if it was provided by your ISP If you leave it blank the default name will be the same as the Service Description on the previous screen gt Authentication Method Select the Authentication Method from the drop down list the default method is AUTO and you can leave it as a default setting Cf Note If you are not sure about the PPP IP extension and PPP Debug Mode etc below please don t select these options gt MTU bytes Maximum Transmission Unit Size Check this box then you can change the MTU size The default MTU value is 1480 Bytes It is not recommended that you change the default value unless required by your ISP gt Enable Fullcone NAT It is a type of NAT if not enabled the default NAT will act 23 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe Dial on demand with idle timeout timer The modem router will cut off the Internet connection after it has been inactive for a specific period of time idle timeout and it will automatically re establish the connection as s
107. ighest speed is Wireless Bridge Advanced 54Mbps in that encryption type Station Inf Tips 11n only mode are not supported when VVEP encryption is Enabled or WPA Encryption type is TKIP tation Into Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode s Click Apply Save when done DIET UELLE Management Network Authentication WPa Enterprise good v WPA Group Rekey Interval 0 optional RADIUS Server IP Address 0 0 0 0 RADIUS Port 1812 1 565535 RADIUS Key optional You can enter ASCII characters between O and 63 characters or O to 64 Hexadecimal characters WPA Encryption AES v WEP Encryption Disabled Apply Save Figure 4 79 gt WPA Group ReKey Interval Enter the Key Renewal period which tells the modem router how often it should change encryption keys RADIUS Server IP Address The IP address of the RADIUS server RADIUS Port The port of the RADIUS server The default number is 1812 RADIUS key The password of the RADIUS Server Y VV WV WPA Encryption Select the encryption you want to use TKIP or AES AES is an encryption method stronger than TKIP Configure WPA settings 1 Select WPA from the Network Authentication drop down list The menu will change to offer the appropriate settings Change the WPA Group Rekey Interval as desired Type in the IP address of the RADIUS server used in the RADIUS Server IP Address field C
108. in process and will continue for about 2 minutes A WPS Flash WLAN The modem router is sending or receiving data over the wireless Please press the WPS button on other wireless devices that you want to add to the network while the LED is flashing The WPS function is disabled or the wireless device fails to be added to the network in 2 minutes after WPS function is enabled Please refer to 4 5 2 1 WPS Setup for more information There is a device connected to this LAN port 3 LAN1 4 The modem router is sending or receiving data over this LAN port Off There is no device connected to this LAN port f Note 1 If the ADSL LED is off please check your Internet connection first Refer to 2 3 Connecting the Modem Router for more information about how to make Internet connection correctly If you have already made a right connection please contact your ISP to make sure if your Internet service is available now 2 If the Internet LED is off please check your ADSL LED first If your ADSL LED is also off TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe please refer to Note 1 If your ADSL LED is GREEN ON please check your Internet configuration You may need to check this part of information with your ISP and make sure everything have been input correctly Refer to 4 2 Device Info for more information 1 3 2 The Back Panel The modem router s ports where the cables are connected
109. ing the Triggering Ports MAC Clone The Router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the Open Ports A maximum 32 entries can beconfigured LAN lanl Trigger Open Virtual Servers ane en Application Name Port Range Port Range WAN Interface Status Enable Disable Edit Remove Protocol Protocol Start End Start End DMZ Host ALG oo Enable All Select All Parental Control Figure 4 27 gt Port Triggering Table The table indicates the information about the Port Triggering entries e Application Name This is the name of the Port Triggering It is exclusive and must be filled e Trigger It includes the Protocol and the Start and End value of the Trigger Ports e Open It includes the Protocol and the Start and End value of the Open Ports e WAN Interface The WAN Service Interface setting the Port Triggering gt Add Click the button to add a new entry gt Remove Select the check box in the table shown in Figure 4 27 and then click the Remove button then the corresponding entry will be deleted in the table To add a new Port Triggering 1 Click the Add button in Figure 4 27 and then you will see the new Port Triggering in the next screen as shown in Figure 4 28 Device Info Quick Setup NAT Port Triggering Advanced Setup Layer2 Interface Some applications such as games video conferencing remote
110. ireless Configuration Completed Your computer has successfully joined the TP LINK network Figure 4 70 Il By PIN If the new device supports Quick Security Setup and the PIN method you can add it to the network by PIN with the following two methods 65 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Method One Enter the PIN of wireless adapter into my modem router Step 1 Select the PIN checkbox and enter the PIN code of the wireless adapter in the field under as shown below Then click Add Enrollee Device Info Wireless Security Quick Setup Advanced Setup This page allows you to configure security features of the wireless LAN interface Wireless You may setup configuration manually or through Wi Fi Protected Setup vvPS Basic Security WPS MAC Filter Enable WPS Enabled v Wireless Bridge Advanced Add Client This feature is available only when WPA PSK WWPA2 PSkeesxQPEN mode is configured Station Info PPn Add Enrollee Enable Modem Router s PIN 16952898 Diagnostics Help Management Device PIN 46264848 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless n
111. l perform as an independent network To support this feature you must create mapping groups with appropriate LAN and WAN interfaces using the Add button The Remove button will remove the grouping and add the ungrouped interfaces to the Default group Only the default group has IP interface A maximum 16 entries can be configured Group Name Remove WAN Interface LAN Interfaces DHCP Vendor IDs atm0 1 atm1 1 LAN1 atm2 1 LAN2 Default atm3 1 LAN3 atm5 1 LAN ANAN atm6 1 LANO pppo t Figure 4 60 To support this feature you must create mapping groups with appropriate LAN and WAN interfaces using the Add button The Remove button will remove the grouping and add the ungrouped interfaces to the Default group Only the default group has IP interface To create a new interface group Click the Add button You can add a new interface group in the next screen Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing eE aa Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Wireless Diagnostics Management Interface grouping Configuration To create a new interface group 1 Enter the Group name and the group name must be unique and select either 2 dynamic or 3 static below 2 If you like to automatically add LAN clients to a WAN I
112. lding 24 floors 1 3 4 5 and 28 floors 1 4 Central Science and Technology Park Shennan Rd Nanshan Shenzhen China CONTENTS Package Contents sisisi aaan Chapter 1 Product Overview ccccccsseceseeeeeeeeeeeeneeeeseneeeeseneees 1 1 Overview of the Modem Router ccccccccceeeceaeeeeeeeeeeeeeeeeeeeaeeeeeees 12 Man Feature S danisma E E koc PMO WAY OUR eia E te ranteemeae stele Wide LAGE POMUP ANG wsais cocstirasrecoisresnatense cen wnenadeiasoneatunamdianiaceaimaedcoiaaas 1 3 2 The Back Pan ise is cx deseciazesuatan se a Chapter 2 Connecting the Modem Router ccssseeeeeeeeees 2 1 System Requirements cccccccceecccececsseecececeeeeeeeeseeeseeeeseeeeseeeseeeess 2 2 Installation Environment Requirements cccccsccseeceeeeeeeeeeeeeeees 2 3 Connecting the Modem Router ccccceeccsececeeeeeeeeeeeeeeeeeseeseneeaes Chapter 3 Quick Installation Guide cccccceseeeeeeeeeeneeeeeeneees 3 1 CONMGUFING the PC seis ctecaree a rrncmanenubun ao Wosuuensninrensindoutsencudeecvandeuandaens 32 QUICKINStAllAHOM GUIG Care sizef ec cacatus a petulant leet 3S a E E aE 3 ene eee eee ee ener ee ee ee ne nee eee eee AAT eZ ND SV NC SUMO ciara tice te enter saa teh eae tet ieee an east BS QUICK ORUD i aE eA AEE 4 A Advanced SOUP sirean a p a a E Ka KEEA 4 4 41 Layer2 Interface saacfhtcraectetrasa tne aie eecea ian ctenmascoect ace eee cmos Be RIN I
113. ll and adding them back in again Selected Default Gateway Interfaces Available Routed WAN Interfaces Routing Static Route RIP Save Apply Figure 4 50 cS Note Default gateway interface list can have multiple WAN interfaces served as system default gateways but only one will be used according to the priority with the first being the highest and the 49 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe last one the lowest priority if the WAN interface is connected Priority order can be changed by removing all and adding them back in again 4 4 10 2 Static Route Choose Advanced Setup gt Routing gt Static Route You can see the Static Route screen this screen allows you to configure the static routes Shown in Figure 4 51 A static route is a pre determined path that network information must travel to reach a specific host or network Device Info Quick Setup Routing Static Route Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security A maximum 32 entries can beconfigured IP Version DstIP PrefixLength Gateway Interface Metric Status Enable Disable Edit Remove Parental Control Quality of Service Bandwidth Control Routing Default Gateway RIP Figure 4 51 To add static routing entries 1 Click the Add button in Figure 4 51 and you will see the screen as shown in Figure 4 52
114. managed systems as this system name V System Location The person to notify when problems occur M System contact The location of the person that is identified as the system contact Trap Manager IP Enter the IP address of the SNMP Manager where the SNMP Agent forwards trap notifications V Select the desired values and click Save Apply to configure the SNMP options 4 7 4 TR 069 client Choose Management gt TR 069 client you can see the TR 069 client Configuration screen as shown below TR 069 WAN Management Protocol allows a Auto Configuration Server ACS to perform auto configuration provision collection and diagnostics to this device 86 TD W8950ND Bibel ite etme ATKI ey Bhs i Cole Taa aol ir am Of mm CLUlLe Reboot QuickSetup TR 069 client Configuration Advanced Setup WAN Management Protocol TR 069 allows a Auto Configuration Server ACS to perform auto configuration provision collection and diagnostics to this device g Selectthe desired values and click SavelApply to configure the TR 069 client options Inform Disable O Enable System Log Inform Interval 300 SNMP Agent ACSURL TR069 Client ACS User Name admin Internet Time ACS Password seeee Access Control WAN Interface used by TR 069 client Any_WAN v Display SOAP messages on serial console Disable O Enable Connection Request Authentication Connection
115. nced Setup gt LAN and you will see the LAN screen shown in Figure 4 21 the section allows you to configure the modem router s LAN ports settings wind hc Local Area Network LAN Setup Quick Setup Advanced Setup Layer2 Interface Configure the DSL Modem Router IP Address and Subnet Mask for LAN interface GroupName WAN Service MAC Clone IP Address 192 168 1 1 LAN Subnet Mask 255 255 255 0 NAT Security Parental Control Enable IGMP Snooping Quality of Service Standard Mode Bandwidth Control Blocking Mode Routing DNS DSL Disable DHCP Server UPnP Enable DHCP Server Start IP Address 192 168 1 100 Interface Grouping End IP Address 192 168 1 200 IPSec Leased Time hour 24 1 48 Multicast Static IP Lease List A maximum 32 entries can be configured Wireless MAC Address IP Address Status Enable Disable Edit Remove Diagnostics Enable All Select All Management Enable DHCP Server Relay DHCP Server IP Address Note You have to disable NAT of the WAN connections Or the DHCP Relay may not take effect C Configure the second IP Address and Subnet Mask for LAN interface Figure 4 21 gt IP Address You can configure the modem router s IP Address and Subnet Mask for LAN Interface e IP Address Enter the modem routers local IP Address then you can access to the Web based Utility via the IP Address the default value is 192 168 1
116. nd the default wireless password the same as the PIN code is printed on the bottom label Click Next to continue Quick Setup Wireless Configurations Enable Wireless You can configure SSID and your WLAN Authentication type Wireless Network Name TP LIWE 011225 Also called SSID In order to protect your network from hackers and Unauthorized users itis highly recommended you choose one ofthe following wireless network security settings Network Authentication WPA Personal bestr recommended ka Wireless Network Key ALLL LLL Also called WPA Pre Shared Keyi Pou can enter ASCI characters between 8 and 63 characters or 8 to 64 Hexadecimal characters Skip WicFi Figure 3 13 5 You will see the Summary screen below click Confirm to configure these settings 15 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe Quick Setup Summary WAN Configurations WAN Type ADSL WAN 8 35 Layer2 Information LLC SNAP BRIDGING WAN Link Type PPPoE PPPUsemame usema OOOO PPP Password 111 PPP MTU 1480 Note1 Some WAN Connectionis or Layer2 interfaceis may be replaced by new one Note2 The Virtual Server Rules of some WAN Connection s may be deleted Wi Fi Configurations Wireless Network Name TP LINK_011223 Network Authentication WPA2 Personal Wireless NetWork Key 46264848 Figure 3 14 16 Chapter 4 Configuring the Modem Ro
117. ne type is ADSL make sure that Total Upstream Downstream Bandwidth is not greater than Line Upstream Downstream Rate otherwise Bandwidth Control may not take effect Enable Bandwidth Control Line Type ADSL Other Total Upstream Bandwidth Kbps Total Downstream Bandwidth Kbps Figure 4 46 Enable Bandwidth Control Check this box to enable the Bandwidth Control function Total Upstream Bandwidth Kbps Enter the upload speed through the WAN port Total Downstream Bandwidth Kbps Enter the download speed through the WAN port Save Apply Click this button to make the configuration take effect 47 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe cf Note The Total Upstream Bandwidth and Total Downstream Bandwidth are required to be configured 4 4 9 1 Rule List Choose Advanced Setup gt Bandwidth Control Rule List and then you will see the screen as shown in Figure 4 47 This page allows you to view and configure TC rules Device Info Quick Setup Bandwidth Control Rules List Advanced Setup Layer2 Interface This page displays Bandwidth Control rules You can click corresponding buttons to configure these rules A maximum 16 entries can beconfigured WAN Service if max bandwidth is not configured or greater than total bandwidth then it will take effect with total bandwidth MAC Clone Make sure the sum of min bandwidth is lesser than to
118. ngs shown as below You can configure security features of the wireless LAN interface by manually setting the network authentication or through WPS Wi Fi Protected Setup method 61 TD W8950ND Bibel iiie etme ATK eV Bhs i Cole Taa oI ir am Of mm CLUlLe Device Info Wireless Security Quick Setup Advanced Setup This page allows you to configure security features of the wireless LAN interface Wireless You may setup configuration manually or through Wi Fi Protected Setup wWPSs Basic Security WPS MAC Filter Enable WPS Enabled v Wireless Bridge Advanced Add Client This feature is available only when WPA PSK VWPA2 PSK or OPEN mode is configured Push Buton PIN Add Enrolles Enable Woden Router PI Station Info O Add Enrollee Enable Modem Router s PIN Diagnostics Help Management Device PIN 46264848 Gen new PIN Help Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode
119. nly one will be used according to the priority with the first being the higest and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing all and adding them back in again Selected Default Gateway Interfaces Available Routed WAN Interfaces WAN Service MAC Clone fated 2 NAT Security gt gt Parental Control Quality of Service Bandwidth Control Routing DNS DSL Figure 4 17 7 Configure the DNS Server Addresses on the screen as follows Device Info Quick Setup Advanced Setup DNS Server Configuration Layer2 Interface WAN Service MAC Clone LAN Select DNS Server Interface from available WAN interfaces NAT Selected DNS Server Interfaces Security atm4 2 Parental Control Select DNS Server Interface from available WAN interfaces OR enter static DNS server IP addresses for the system In ATM mode if only a single P C with IPoA or static IPoE protocol is configured Static DNS server IP addresses must be entered DNS Server Interfaces can have multiple WAN interfaces served as system dns servers but only one will be used according to the priority with the first being the higest and the last one the lowest priority ifthe WAN interface is connected Priority order can be changed by removing all and adding them back in again Available WWAN Interfaces Quality of Service Bandwidth Control Routing DNS
120. nterface in the new group add the DHCP vendor ID string By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID DHCP option 60 will be denied an IP address from the local DHCP server 3 Select interfaces from the available interface list and add itto the grouped interface list using the arrow buttons to create the required mapping of the ports Note that these clients may obtain public IP addresses 4 Click Save Apply button to make the changes effective immediately IMPORTANT ff a vendor ID is configured for a specific client device please REBOOT the client device attached to the modem to allow it to obtain an appropriate IP address Group Name WAN Interface used in the grouping br_0_0_32 atm0 1 wv Grouped LAN Interfaces Available LAN Interfaces Automatically Add Clients With the following DHCP Vendor IDs Figure 4 61 55 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe 2 Enter a unique name for Group 3 Select the Interface which you want to use from the drop down list Cf Note If you like to automatically add LAN clients to a WAN Interface in the new group add the DHCP vendor ID string By configuring a DHCP vendor ID string any DHCP client request with the specified vendor ID DHCP option 60 will be denied an IP address from the local DHCP server 4 Select interfa
121. nterprise settings select the Mixed WPA2 WPA Enterprise option from the drop down list The menu will change to offer the appropriate settings The steps to these settings are similar to those for WPA PSK 19 TD W8950ND EII J ee ae AN Bho Cote Tan mm pcoleic mm e K T CTT iTo Wireless Manual Setup AP Basic In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following Security wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this MAC Filter wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is Wireless Bridge 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Advanced Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Station Info Network Authentication Mixed WPA2 WPA Enterprise adaptive v BIET UELLE Management WPA2 Preauthentication Disabled v Network Re auth Interval 36000 optional WPA Group Rekey Interval 0 optional RADIUS Server IP Address 0 0 0 0 RADIUS Port 1812 1 565535 RADIUS Key optional You can enter ASCII
122. nvention or local procedure calling so that the called procedure need not exist in the same address space as the calling procedure The two processes may be on the same system or they may be on different systems with a network connecting them By using RPC programmers of distributed applications avoid the details of the interface with the network The transport independence of RPC isolates the application from the physical and logical elements of the data communications mechanism and allows the application to use a variety of transports Server Any computer whose function in a network is to provide user access to files printing communications and other services SOHO Small Office Home Office Market segment of professionals who work at home or in small offices SSID A Service Set Identification is a thirty two character maximum alphanumeric key identifying a wireless local area network For the wireless devices in a network to communicate with each other all devices must be configured with the same SSID This is typically the configuration parameter for a wireless PC card It corresponds to the ESSID in the wireless Access Point and to the wireless network name Static IP Address A fixed address assigned to a computer or device that is connected to a network 98 Y Vv V WV TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe Static Routing Forwarding data in a network via a fixed pa
123. odem Router delivers exceptional range and speed which can fully meet the need of Small Office Home Office SOHO networks and the users demanding higher networking performance The TD W8950ND 150Mbps Wireless N ADSL2 Modem Router utilizes integrated ADSL2 transceiver and high speed MIPS CPU The modem router supports full rate ADSL2 connectivity conforming to the ITU and ANSI specifications In addition to the basic DMT physical layer functions the ADSL2 PHY supports dual latency ADSL2 framing fast and interleaved and the 1 432 ATM Physical Layer The modem router provides up to 150Mbps wireless connection with other 802 11n wireless clients The incredible speed makes it ideal for handling multiple data streams at the same time which ensures your network stable and smooth The performance of this 802 11n wireless modem router will give you the unexpected networking experience at speed 650 faster than 802 11g It is also compatible with all IEEE 802 11g and IEEE 802 11b products With multiple protection measures including SSID broadcast control and wireless LAN 64 128 WEP encryption Wi Fi protected Access WPA2 PSK WPA PSK as well as advanced Firewall protections the TD W8950ND 150Mbps Wireless N ADSL2 Modem Router provides complete data privacy The modem router provides flexible access control so that parents or network administrators can establish restricted access policies for children or staff It also supports Virtual Ser
124. offers a Dynamic Domain Name System DDNS feature DDNS lets you assign a fixed host and domain name to a dynamic Internet IP Address The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname in any of the many domains allowing your modem router to be more easily accessed from various locations on the Internet Device Info Quick Setup i Dynamic DNS Advanced Setup Layer2 Interface The Dynamic DNS service allows you to alias a dynamic IP address to a static hostname in any of the many domains allowing your Broadband Router to be more easily WAN Service accessed from various locations on the Internet MAC Clone Choose Add or Remove to configure Dynamic DNS LAN NAT Hostname Username Service Interface Remove Security Alsbot homeunix net ailisa dyndns pppo 4 O Parental Control Quality of Service Bandwidth Control Routing Figure 4 56 To add a DDNS entry 1 Click the Add button pop up Figure 4 56 and then you will set the DDNS in the next screen shown in Figure 4 57 Device Info Quick Setup Add dynamic DNS Advanced Setup Layer2 Interface EE This page allows you to add a Dynamic DNS address from DynDNS org or TZO or No IP WAN Service mh D DNS provider DynDNS org v Hostname Alsbot homeunix net Security el EB tetas A a Interface pppoe_0_8_35 ppp0 1 v Parental Control Quality of Service DynDNS Settings es Bandwidth Contr
125. on Network using Open or Shared authentication with WEP encryption only allows stations using the same network key encryption to associate with it Follow the instructions below to configure the Shared Keys 69 TD W8950ND Bebe eg DN eo Coto Taa cole iT mm e K T mm Cle e Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Wireless Basic Security MAC Filter Wireless Bridge Advanced Station Info DIF T UELLE Management Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Network Authentication Open insecurity Enabled v 128 bit WEP Encryption Encryption Strength Current Network Key Network Key 1 Network Key 2 Network Key 3
126. ontrol Quality Of Service Disabled Routing DNS Figure 4 13 8 On the next screen you will see the WAN Port Information Table with the new configuration 25 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Device Info Quick Setup Wide Area Network WAN Service Setup Advanced Setup Layer2 Interface r Choose Add Remove or Edit to configure a WAN service over a selected interface WAN Service MAC Clone Interface Description Type Vian8021p VianMuxld Igmp NAT Firewall Remove Edit LAN g 7 E f ie Fe ne ee atm0 1 br_0_0_32 Bridge NMA MA Enabled Disabled Disabled Fl NAT n Security atm1 1 bnini aa Bridge MWA MA Enabled Disabled Disabled F Parental Control atm2 1 br_0_0_35 Bridge NIA NIA Enabled Disabled Disabled Oo Quality of Service J atm3 1 br_0_0_100 Bridge MA MA Enabled Disabled Disabled Fj Bandwidth Control Routing atm5 1 br_0_8_81 Bridge NMA MA Enabled Disabled Disabled Fj DNS atm6 1 br_O_0_200 Bridge NA NIA Enabled Disabled Disabled g DSL pppo 1 pppoe_O 8 35 PPPoE NIA NIA Enabled Enabled Enabled o UPnP interface Groupiiia ppp1 2 pppoe_O 9 35 PPPoE NIA NIA Enabled Enabled Enabled o IPSec Multicast Wireless Remove All Diagnostics Management Figure 4 14 gt Remove All Click Remove All then all the interface will be deleted in the table gt Remove Select the check box in the table above and then click Remov
127. oon as you attempt to access the Internet again If your Internet is charged by time you may want to select this option in order to save money Yy V PPP IP extension Select this option to get the public IP address from the PPP server to your PC and the NAT and SPI Firewall will be closed Sometimes you can think it as bridge while PPP dialing in the router It s a special feature deployed by some ISP Unless your ISP specifically requires this setup do not select it Yy Use Static IPv4 Address If your ISP gives you a static IPv4 address select this option to enter it manually Yy Use Static IPv6 Address If your ISP gives you a static IPv6 address select this option to enter it manually Yy Enable PPP Debug Mode Select this option to debug the PPP function and you can see many PPP log information in the System Log Only PPP has this debug Mode Bridge PPPoE Frames Between WAN and Local Ports Select this option to start PPP connection in your local PC Yy V Enable IGMP Multicast Proxy IGMP Internet Group Management Protocol is used to manage multicasting on TCP IP networks Some ISPs use IGMP to perform remote configuration for client devices such as the modem router The default value is disabled and if you are not sure please contact your ISP or just leave it Ql Select a preferred wan interface as the system default gateway in Figure 4 11 and click Next BOOT Routing
128. or specific LAN PC WAN Service MAC Clone LAN IP Range optional LAN Port Number 80 Default 80 will be applied if leave blank Security Address www google com Add More Parental Control Time Restriction E Save Apply Figure 4 40 3 Click Save Apply to save this entry and then you will see your settings as shown in Figure 4 39 Every computer connected to the router will not access this URL address on the port 4 4 8 Quality of Service Choose Advanced Setup gt Quality of Service you can enable QoS Quality of Service on the screen shown in Figure 4 41 QoS helps to prioritize data as it enters your router By attaching special identification marks or headers to incoming packets QoS determines which queue the packets enter based priority This is useful when there are certain types of data you want to give higher priority such as voice data packets give higher priority than Web data packets This option will provide better service of selected network traffic over various technologies Quick Setup QoS Queue Management Configuration Advanced Setup Layer2 Interface lf Enable QoS checkbox is selected choose a default DSCP mark to automatically mark incoming traffic without reference to a particular classifier Click Save Apply button to WAN Service save it MAC Clone Note If Enable Qos checkbox is not selected all QoS will be disabled for all interfaces Note The default DSCP
129. ouble click Internet Protocol TCP IP Select Obtain an IP address automatically choose Obtain DNS server address automatically and then click OK For Mac OS Click the icon at the right top of your desktop Then click Open Network Preferences Choose AirPort and click Advanced Choose TCP IP Set the Configure IPv4 as Using DHCP and then click OK 94 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI iK mm Of 1 mm CLUlLe Appendix C Specifications ANSI 11 413 ITU G 992 1 ITU G 992 2 ITU G 992 3 ITU G 992 5 IEEE 802 3 IEEE 802 3u IEEE 802 11b IEEE 802 119 802 11n Protocols TCP IP IPoA PPPoA PPPoE SNTP HTTP DHCP ICMP NAT LAN Ports Ports Four 10 100M Auto Negotiation RJ45 ports Auto MDI MDIX Line Port One RJ11 port 10BASE T UTP category 3 4 5 cable maximum 100m EIA TIA 568 1000 STP maximum 100m Standards Cabling Type 100BASE TX UTP category 5 5e cable maximum 100m EIA TIA 568 1000 STP maximum 100m G LAN1 4 WLAN ADSL Power Internet A WPS Safety amp Emissions FCC CE LED Frequency Band 2 4 2 4835GHz 11n up to 150Mbps Automatic Radio Data Rate 11g 54 48 36 24 18 12 9 6Mbps Automatic 11b 11 5 5 2 1Mbps Automatic Frequency Expansion DSSS Direct Sequence Spread Spectrum Modulation DBPSK DQPSK CCK OFDM 16 QAM 64 QAM WEP WPA WPA2 WPA2 PSK WPA PSK 13
130. p configuration manually or through Wi Fi Protected Setup vvPS Security MAC Filter WPS Wireless Bridge Enable WPS Enabled v Advanced Add Client This feature is available only when WPA PSK VWPA2 PSK or OPEN mode is configured Station Inf ne Push Button PIN Add Enrollee Enable Modem Router s PIN Diagnostics Device PIN 46264848 Gen new PIN Help Management Manual Setup AP In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can setthe network authentication method selecting data encryption specify whether a network key is required to authenticate to this wireless network and specify the encryption strength Warning we suggest you notto set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Applw Save when done Network Authentication WPA2 Personal best recommended v Wireless Network Key eeseaaeo Also called WPA Pre Shared Key Click here to display you can enter ASCII characters between 8 and 63 characters or 8 to 64 Hexadecimal characters optional WPA Group Rekey Interval WP
131. r network devices It must have 8 63 ASCII characters or 8 64 Hexadecimal digits gt Click here to display Click it to show you the WPA Pre Shared Key Configure WPA Personal settings 1 Select WPA Personal The menu will change to offer the appropriate settings as the picture show above 2 WPA Personal requires a shared key Type the key in the space provided PSK keys can be ASCII or Hex type 3 Change the Group Key Interval as desired or use the default setting 13 TD W8950ND EII J eg a AN Bho a Cote Tan mm a coleic mm e K T CTT iTo 4 Click Save Apply to save the new configuration Security Manual Setup AP MAC Filter In order to protect your network from hackers and unauthorized users it is highly recommended you choose one of the following wireless network security settings You can set the network authentication method selecting data encryption specify whether a network key is required to authenticate to this Wireless Bridge Advanced wireless network and specify the encryption strength Station Inf Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is auon un 54Mbps in that encryption type Sisunoatics Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP g Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode
132. raffic by specifying a new filter name and atleast one condition below All of the specified conditions in this filter rule must be satisfied for the rule to take effect MAC Clone Click Save Apply to save and activate the filter Filter Name sendmail filter IP Version IPvd v Protocol wae a tht A 4 Source IP address prefix length 192 168 1 222 MAC Filtering Source Port port or port port Parental Control Destination IP address iprefix length 210 17 188 204 Quality of Service Destination Port port or port port 25 E Bandwidth Control Routing ons OOO DSL Figure 4 33 2 Enter the Filter name for the rule it is exclusive and must be filled 3 Select the protocol TCP UDP TCP UDP or ICMP in the drop down list for the connection between the Source IP address and Destination IP address 4 Enter a Source IP Address in dotted decimal notation format and then type Source Port port or port port in the text boxes separately 5 Enter a Destination IP Address in dotted decimal notation format and then type Destination Port port or port port in the text boxes separately 6 Click Save Apply to save this entry Cf Note When you add an Outgoing IP Filtering entry you must configure at least one condition on the preceding screen except the Filter name If you leave the Protocol blank it means that the rule is effective to all protocols if you leave the Source
133. res work independently Device Info Quick Setup Access Time Restriction Advanced Setup Layer2 Interface A maximum 16 entries can beconfigured WAN Service MAC Clone _____ __________ Days Time LAN Username MAC Status Enable Disable Edit Remove Mon Tue Wed Thu Fri Sat Sun Start Stop NAT Security Parental Control Time Restriction Figure 4 36 4 4 7 1 Time Restriction This feature allows you add time of day restriction to a special LAN device connected to the modem router Device Info Quick Setup 5 Access Time Restriction Advanced Setup Layer2 Interface Amaximum 16 entries can beconfigured WAN Service MAC Clone D Ti m ays ime LAN Username MAC Status Enable Disable Edit Remove NAT Mon Tue Wed Thu Fri Sat Sun Start Stop a E child 1 00 11 22 33 44 CC x x x aE 18 00 21 00 Enabled o Parental Control Figure 4 37 URL Filter To add a Time Restriction entry 1 Click the Add button in Figure 4 37 and then you will see the next screen as shown in Figure 4 38 42 TD W8950ND Bibel iiie etme ATKI N Bhs i Cote Taa oI ir am Of mm CLUlLe Device Info Quick Setup Access Time Restriction Advanced Setup F This page adds time of day restriction to a special LAN device connected to the Router The Browser s MAC Address automatically displays the MAC address ofthe LAN device WAN Service where the browser is running MAC Clone To restrict other LAN devi
134. rsal Plug and Play protocol on the screen UPnP Universal Plug and Play is a distributed open networking standard that uses TCP IP for simple peer to peer network connectivity between devices An UPnP device can dynamically join a network obtain an IP address convey its capabilities and learn about other devices on the network In turn a device can leave a network smoothly and automatically when it is no longer in use UPnP broadcasts are only allowed on the LAN Device Info Quick Setup UPnP Configuration Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Enable UPnP protocol Save Apply Parental Control Quality of Service Bandwidth Control Routing DNS DSL UPnP Interface Grouping IPSec Multicast Figure 4 59 Select the checkbox and click Save Apply to enable the UPnP function 54 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa oI i mm Of mm CLUlLe 4 4 14 Interface Grouping Choose Advanced Setup Interface Grouping you can configure multiple ports to PVC and bridging groups to perform as an independent network Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service Bandwidth Control Routing UPnP Interface Grouping IPSec Multicast Interface Grouping Interface Grouping supports multiple ports to P C and bridging groups Each group wil
135. rum at 2 4GHz and backward compatibility with IEEE 802 11b devices and WEP encryption for security 2x to 3x eXtended Range WLAN Transmission Technology The WLAN device with 2x to 3x eXtended Range WLAN transmission technology make its sensitivity up to 105 dB which gives users the ability to have robust longer range wireless connections With this range enhancing technology a 2x to 3x eXtended Range based client and access point can maintain a connection at as much as three times the transmission distance of traditional 802 11b and 802 119 products for a coverage area that is up to nine times greater A traditional 802 11b and 802 119 product transmission distance is about 300m a 2x to 3x eXtended Range based client and access point can maintain a connection transmission distance may be up to 830m Access Point A device that allows wireless equipped computers and other devices to communicate with a wired network Also used to expand the range of a wireless network Ad hoc Network An ad hoc network is a group of computers each with a wireless adapter connected as an independent IEEE 802 11 wireless LAN Ad hoc wireless computers operate on a peer to peer basis communicating directly with each other without the use of an access point Ad hoc mode is also referred to as an Independent Basic Service Set IBSS or as peer to peer mode and is useful at a departmental scale or SOHO operation AES Advanced Encryption Standard
136. s B specifications Cet appareil num rique de la classe B est conforme a la norme NMB 003 du Canada This device complies with RSS 210 of Industry Canada This Class B device meets all the requirements of the Canadian interference causing equipment regulations Cet appareil num rique de la Classe B respecte toutes les exigences du R glement sur le mat riel brouilleur du Canada Korea Warning Statements ga FAAS PBS ABSA Fayo NCC Notice amp BSMI Notice ite KIR RIK BCH PE a BAS ES HTAR MEAS AS RR AR REA Arh re a EA ay AS EL BE DINK Dy 28 BS E RELAT ZRF ERDRE MU HB DUR RAZR Be EZ A Ae I KER TE ATT REGIA Te LAIR EE FH See ae RR ey TRE HU i fa a fa LE ER ZR So KB PA BA rs ANS A A ig BT P DA Be oe H ee CHET PE He EG fi L F IE o aa a AER IA iii 155 FE IRR EU HR a BR BEE OAS E m YE PH H eA HE AS ho ORAE tm ZH aC PE VaR oA ET Pl GR AEE TAR o EEDA IKRA E E AS E mE o Ot p O POR UE MERE E m ERIE EED IERRA A ENE a ed HO o OA AE m ESER RIEA ERINE ERJA H IE e AE o OANA HHR MEEA HITES Em aa BOHEMIA EEIT ER TIE 3 IIpoaykt ceptudikoBpaHo 3rinmo c nmpaBsmnamy cucremH YxkpCEILIIPO Ha BignoBiqHicTbh BUMOraM HOPMaTHBHHX JOKYMEHT B Ta BUMOraM IO HepeyqOayeH YHHHUMH 3AaKOHOJABYHMH aKTAMH YkKpa nn Safety Information When product has power button the power button is one of the way to shut off the product when there is no power button the only
137. s Microsoft Internet Explorer Mozilla Firefox or Apple Safari 2 2 Installation Environment Requirements gt Place the modem router in a well ventilated place far from any heater or heating vent gt Avoid direct irradiation of any strong light such as sunlight gt Keep at least 2 inches 5 cm of clear space around the modem router gt Operating temperature 0 C 40 C 32 F 104 T gt Operating Humidity 10 90 RH non condensing 2 3 Connecting the Modem Router Before installing the modem router please make sure your broadband service provided by your ISP is available If there is any problem please contact your ISP After that please install the modem router according to the following steps Don t forget to pull out the power plug and keep your hands dry 1 Locate an optimum location for the modem router The best place is usually at the center of your wireless network 2 Adjust the direction of the antenna Normally upright is a good direction 3 Connect your PC and Switch Hub in your LAN to the LAN Ports of the modem router If you have a wireless NIC and want to have wireless connection please skip this step 4 Connect the telephone line to the Line port on the modem router Or you can access the Internet and make calls at the same time by using a separate splitter to divide the data and voice The external splitter has three ports e LINE Connect to the wall jack e PHONE Connect to the phone sets e
138. sed on time of day for children or staff Supports Virtual Server Port Triggering and DMZ host Supports UPnP Dynamic DNS Static Routing Supports bridge mode and Router function Supports Web management Supports firmware upgrade Supports Flow Statistics Supports WPS Built in firewall supporting IP address filtering MAC address filtering and parental control Built in DHCP server Y VV VV VV VV Y Supports IPv6 TD W8950ND Bakelite etme ATKI ey Bhs i Cole Taa oI i am Of 1 mm CLUlLe 1 3 Panel Layout 1 3 1 The Front Panel Figure 1 1 The modem router s LEDs are located on the front panel View from left to right LED Explanation The modem router is powered on Power The modem router is off Please ensure that the power adapter is connected correctly On ADSL line is synchronized and ready to use P ADSL The ADSL negotiation is in progress ADSL synchronization fails Please refer to Note 1 for troubleshooting i The network is available with a successful Internet connection Flash There is data being transmitted or received via the Internet Internet There is no successful Internet connection or the modem router is operating in Bridge mode Please refer to Note 2 for troubleshooting n Wireless is enabled but no data is being transmitted f network Wireless function is disabled A wireless device has been successfully added to the network by WPS function WPS handshaking is
139. some configuration parameters such as Diffie Hellman groups and PFS can not be negotiated resulting in a greater importance of having compatible configuration on both ends gt Key Life Time Enter the number of seconds for the IPSec lifetime It is the period of time to pass before establishing a new IPSec security association SA with the remote endpoint The default value is 3600 cs Note If you want to change the default settings of Advanced Settings please make sure that both VPN server endpoints use the same Encryption Algorithm Integrity Algorithm Diffie Hellman Group and Key Life time in both phase1 and phase2 59 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe 4 4 16 Multicast Choose Advanced Setup gt Multicast you can configure the IGMP protocol on the screen IGMP Configuration Enter IGMP protocol configuration fields if you want modify default values shown below Default Version 3 Query Interval 125 Query Response Interval 10 Last Member Query Interval 10 Robustness Value 2 Maximum Multicast Groups 25 Maximum Multicast Data Sources for IGMPv3 1 24 10 Maximum Multicast Group Members 25 Fast Leave Enable LAN to LAN Intra LAN Multicast Enable O MLD Configuration Enter MLD protocol IPv6 Multicast configuration fields if you want modify default values shown below Default Version 2 Query Interval 125 Qu
140. ssify the upstream traffic assign queue which defines the precedence and the interface and optionally overwrite the IP header DSCP byte A rule consists of a class name and at least one condition below All of the specified conditions in this classification rule must be satisfied for the rule to take effect Device Info Quick Setup QoS Classification Setup maximum 32 rules can be configured f Advanced Setup Layor Interioee mE a 8 E eens Ta acd a raa click the Add ution WAM Sandee A Ta remowe mules chack tele ramove chackbowes en chick the Renee bution MAC Clone Thre Enab bution veil scan thnia every rules in Pre table Rulet with enable ciheckben chacked will be onablad Rules wah onablp chockbom uic REg will pi gaH The enatie theckbox al t Shoes glitus ofthe rule aer page reload Myou dasha WMH Urrian in Yirlega Page darnitation related bo airelags aill naliste efarie The Oe function has been disabled Chaseiication tikes wouhi no take effects Socurlty Parental Conirol Bunlly of Service Queue Config fo tlags i LAM O01 22 aaa i AFL E Ll oa CLASSIFICATION CRITERIA CLASSIFICATION RESULTS Class Hame Orden aman Class Int Ether Type SicMAC Mask Dea Mask SoclP PrefizLengih Dalf PrefixLengih Foote Saco Caen DSCP Check S02 1P Check Gueae Key DCP Maik S02 Mark Enable Bandwidth Central __ Routing 4 Ack Exahle ll lin re DNS Figure 4 44 Click the Add button Figure 4 44 and you can configure
141. t value is 1 M Beacon Interval Enter a value between 20 1000 milliseconds The Beacon Interval value indicates the frequency interval of the beacon A beacon is a packet broadcast by the modem router to synchronize the wireless network The default value is 100 V Transmit Power This option will allow you to configure the wireless transmit power High transmit power will extend the wireless signal range of the device and make the signal transmit more legible Low transmit power with the smaller wireless signal range that will decrease the probability of interrupt by other Wi Fi device V WMM Wi Fi Multimedia This function can guarantee the packets with high priority messages being transmitted preferentially It is strongly recommended 4 5 6 Station info Choose Wireless gt Station Info you will see the screen of Wireless Authenticated Stations setting shown as below Device Info Wireless Authenticated Stations Advanced Setup Wireless This page shows authenticated wireless stations and their status Basic MAC Associated Authorized SSID Interface MAC Filter Wireless Bridge Advanced Station Info Diagnostics Management Figure 4 94 This page shows authenticated wireless stations and their status gt MAC Displays the connected wireless station s MAC address gt Associated Displays whether the wireless station has associated with the access point 80 TD W8950ND Bibel iiie e
142. tal bandwidth otherwise Bandwidth Control may not take effect LAN n e NAT Upstream Bandwidth Kbps Downstream Bandwidth Kbps Description Priority Status Edit oO Security Min Max Min Max Parental Control Quality of Service Bandwidth Control Figure 4 47 To add a TC rule click the Add button and you can configure it in the screen as shown in Figure 4 48 Device Info Quick Setup Bandwidth Control Rule Configuration Advanced Setup Layer2 Interface This page allows you to configure a Bandwidth Control rule entry Each ofthe rules can be configured for a specific priority The rule entry configured here will be used to control WAN Service the rates of upstream and downstream packets MAC Clone Click Save Apply to save the rule LAN NAT Rule Status Enable Disable Security IP Range 192 168 1 101 192 168 1 103 Parental Control Port Range 80 Quality of Service Protocol TCP v Priority Highest v Min Rate Max Rate Routing Upstream 100 200 Kbps DNS Downstream 400 800 Kbps DSL UPnP Interface Grouping Save Apply IPSec Figure 4 48 Rule Status Select the status of the rule from the drop down list to enable or disable the rule IP Range Enter a single IP address or a range of IP addresses Port Range Enter a single port or a range of ports Vv VV WV Protocol Select a protocol type from the drop down list TCP UDP
143. tandard Wi Fi A trade name for the IEEE 802 11b wireless networking standard given by the Wireless Ethernet Compatibility Alliance WECA see _ hittp www wi fi net an industry standards group promoting interoperability among IEEE 802 11b devices WLAN Wireless Local Area Network A group of computers and associated devices communicate with each other wirelessly which network serving users are limited in a local area WPA Wi Fi Protected Access A wireless security protocol use TKIP Temporal Key Integrity Protocol encryption which can be used in conjunction with a RADIUS server 99 TD W8950ND Bibel iiie etme Tig tt eV Bhs i Cote Taa a Colei i am Of 1 mm CLUlLe Appendix E Technical Support Technical Support For more troubleshooting help go to http www tp link com en support faq To download the latest Firmware Driver Utility and User Guide go to http www tp link com en support download For all other technical support please contact us by using the following details Global Tel 86 755 2650 4400 E mail support tp link com Service time 24hrs 7 days a week UK Tel 44 0 845 147 0017 E mail support uk tp link com Service time 24hrs 7 days a week Turkey Tel 444 1925 Turkish Service E mail support tr tp link com Service time 09 00 to 21 00 7 days a week Ukraine Tel 0800 505 508 E mail support ua tp link com Service time Monday to Friday 10 00 to 22 00
144. ter the server IP address and click Save Apply to forward IP packets for this service to the specified server WAN Service NOTE The Internal Port End cannot be modified directly Normally it is set to the same value as External Port End However if you modify Internal Port Start then MAC Clone Internal Port End will be set to the same value as Internal Port Start Remaining number of entries that can be configured 32 LAN Use Interface pppoe_0 8 35 ppp0 1 v NAT Service Name Select a Service Select One Port Triggering Custom Service n Server IP Address 192 168 1 ALG Security n External Port Start External Port End Protocol Internal Port Start Internal Port End Bandwidth Control D a Routing E M DNS TCP v DSL TCP v UPnP ae Interface Grouping IPSec Lit M Multicast bic Wireless ks Diagnostics La i Management lt ii Save Apply Figure 4 26 2 Select the Interface which you want to use from the drop down list 3 Select the service which you want to use from the drop down list If the list does not have the service you need type the name of the custom service in the text box 4 Type the IP Address of the computer in the Server IP Address text box 5 Enter the External Port Start External Port End Internal Port Start and Internal Port End in the table and then select the protocol used for this Virtual Server TCP UDP or All 6 Click Save Apply to enable vir
145. th Subnet Mask An address code that determines the size of the network TCP Transmission Control Protocol A network protocol for transmitting data that requires acknowledgement from the recipient of data sent TCP IP Transmission Control Protocol Internet Protocol A set of instructions PCs use to communicate over a network TKIP Temporal Key Integrity Protocol a wireless encryption protocol that provides dynamic encryption keys for each packet transmitted UDP User Datagram Protocol A network protocol for transmitting data that does not require acknowledgement from the recipient of the data that is sent VCI Virtual Channel Identifier The identifier of the VC contained in the ATM cell header VPI Virtual Path Identifier The identifier of the VP contained in the ATM cell header Update To replace existing software or firmware with a newer version VLAN Virtual Local Air Network Logical subgroups that constitute a Local Area Network LAN This is done in software rather than defining a hardware solution VLAN ID 0 4095 Indicates the ID number of the VLAN being configured Up to 256 VLANs can be created WAN Wide Area Network Networks that cover a large geographical area Web based Utility The web page that allows you to manage the modem router WEP Wired Equivalent Privacy A data privacy mechanism based on a 64 bit or 128 bit or 152 bit shared key algorithm as described in the IEEE 802 11g s
146. the DHCP function 4 4 5 4 ALG Choose Advanced Setup gt NAT gt ALG and then you can configure the basic security in the screen as shown in Figure 4 29 38 TD W8950ND Bibel iiie etme ATKI eV Bhs i Cote Taa oI ir mm Of mm CLUlLe Device Info Quick Setup ALG Advanced Setup Layer2 Interface Select the ALG below WAN Service MAC Clone LAN NAT Virtual Servers FTP Enabled TFTP Enabled C SIP Enabled H 323 Enabled RTSP Enabled IRC Enabled Port Triggering DMZ Host Security Parental Control 5 Appl Quality of Service Figure 4 30 Click the Save Apply button to save your settings 4 4 6 Security Choose Advanced Setup gt Security and you will see the security screen including IP Filtering and MAC Filtering only effective in Bridging mode submenus Device Info Quick Setup Outgoing IP Filtering Setup Advanced Setup Layer2 Interface WAN Service MAC Clone Choose Add or Remove to configure outgoing IP filters LAN NAT Filter Name IP Version Protocol SrelP PrefixLength SrcPort DstIP PrefixLength DstPort Remove By default all outgoing IP traffic from LAN is allowed but some IF traffic can be BLOCKED by setting up filters Security IP Filtering MAC Filtering Figure 4 31 4 4 6 1 IP Filtering The IP address filtering feature makes it possible for administrators to control user s access to the Internet which is based on user s IP The
147. tion strength Warning we suggest you not to set WEP encryption to Enabled when the device runs in 11n mode The device s wireless highest speed is 54Mbps in that encryption type Tips 11n only mode are not supported when WEP encryption is Enabled or WPA Encryption type is TKIP Tips WPA Encryption are not allowed to set to TKIP when the device runs in 11n mode Click Apply Save when done Security MAC Filter Wireless Bridge Advanced Station Info Network Authentication WPA2 Enterprise better Diagnostics Management WPA2 Preauthentication Disabled Network Re auth Interval optional WPA Group Rekey Interval optional RADIUS Server IP Address RADIUS Port 1 65535 RADIUS Key optional You can enter ASCII characters between O and 63 characters or O to 64 Hexadecimal characters WPA Encryption WEP Encryption Disabled Apply Save Figure 4 84 gt WPA2 Preauthentication Select Enable from the drop down list Stations will authenticate with the AP during the scanning process and once association is required the station has been already authenticated gt Network Re auth Interval Enter a value in seconds as the frequency interval to enable periodic Network Re authentication function while leave it blank or enter O to disable it 5 WPA2 Personal To configure WPA2 Personal settings select the WPA2 Personal option from the drop down list The menu will c
148. tme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe gt Authorized Displays the information of Authentication gt SSID Displays the connected wireless station s SSID gt Interface Displays the connected wireless station s Interface mode 4 6 Diagnostics Choose Diagnostics you will see the Diagnostics screen This section describes the result of the test for the ENET Ethernet Connection Wireless Connection and ADSL Synchronization You can refer to the Help menu to get more information about the corresponding test Device Info Quick Setup br_0_ 0 32 Diagnostics Advanced Setup Wireless Your modem is capable of testing your DSL connection The individual tests are listed below If a test displays a fail status click Rerun Diagnostic Tests atthe bottom ofthis page to make sure the fail status is consistent Ifthe test continues to fail click Help and follow the troubleshooting procedures Diagnostics Management Test the connection to your local network FAL Test your LAN1 Connection Help Test your LAN2 Connection PASS Help Test your LAN3 Connection l FAIL Help Test your LAN4 WAN Connection FAIL Help Test your Wireless Connection PASS Help Test the connection to your DSL service provider Test xDSL Synchronization FAIL Help Test ATM OAM F5 segment ping DISABLED Help Test ATM OAM F5 end to end ping DISABLED Help Figure 4 95 4 7 Man
149. to configure ETH WAN interfaces Allow one ETH as layer 2 wan interface WAN Service Interface Name Connection Mode Remove MAC Clone Figure 4 4 ce Note To make sure the ETH port available you should first choose Advanced Setup gt LAN Ports to 20 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe enable the Virtual LAN Ports feature gt Add Click the Add button and you can add a new interface in the next screen ETH WAN Configuration Advanced Setup Layer2 Interface ion 7 Interface T This screen allows you to configure a ETH port WAN S MERER Select a ETH port eth3 LAN4 WAN wv MAC Clone LAN a Figure 4 5 gt ETH port Select an ETH port to configure as the WAN port Click Save Apply to save your settings and then you will see the screen similar to Figure 4 6 Device Info Quick Setup ETH WAN Interface Configuration Advanced Setup Layer2 Interface ATM Interface Choose Add or Remove to configure ETH WAN interfaces Allow one ETH as layer 2 wan interface WAN Service Interface Name Connection Mode Remove MAC Clone eth3i LAN4 VAN DefaultMode F LAN NAT Parental Control F Figure 4 6 gt Remove Select the check box in the table on the screen above and then click the Remove button the corresponding interface will be deleted in the table cS Note One ETH is allowed to configure as the layer 2 W
150. tton the pop up picture shown below and then you can type the MAC Address in the MAC Address field Cf Note The form of MAC Address must be XX XX XX XX XX XX like 00 13 0A 55 FF 09 Advanced Setup Wireless Enter the MAC address with 00 11 22 33 44 55 format and click Save Apply to add the MAC address to the wireless MAC address filters asic Wireless MAC Filter MAC Address 00 13 04 55 FF 09 Wireless Bridge Figure 4 89 When you finished making changes to the MAC Filter List screen click Save Apply to save the changes 4 5 4 Wireless Bridge Choose Wireless gt Wireless Bridge you will see the screen of Wireless Bridge settings shown as below You can configure wireless bridge features of the wireless LAN interface and click Apply Save button to save the current configuration T TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Device Info Wireless Bridge Advanced Setup This page allows you to configure wireless bridge features of the wireless LAN interface You can select Wireless Bridge also known as Wireless Distribution System to disable access point functionality Selecting Access Point enables access point functionality Wireless bridge functionality will still be available and wireless stations will be able to associate to the AP Select Disabled in Bridge Restrict which disables wireless bridge restriction Any wireless
151. tual server and then you will see your setting as shown in Figure 4 25 Cf Note If you select the service from the drop down list the External Port Start External Port End Internal Port Start Internal Port End and the Protocol will be added in the table automatically You only need to enter the Server IP Address for the Virtual Server 4 4 5 2 Port Triggering Choose Advanced Setup gt NAT gt Port Triggering you can set Port Triggering on the screen shown in Figure 4 27 Some applications require that specific ports in the modem router s firewall should be opened for access by remote devices Port Trigger dynamically opens up the Open Ports in the firewall when an application on the LAN initiates a TCP UDP connection to a remote device using the triggering ports The modem router allows the remote party from the WAN side to establish new connections back to the application on the LAN side using the open ports A maximum 32 entries can be configured 36 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe Device Info Quick Setup NAT Port Triggering Setup Advanced Setup Layer2 Interface Some applications require that specific ports in the Router s firewall be opened for access by the remote parties Port Trigger dynamically opens up the Open Ports in the WAN Service firewall when an application on the LAN initiates a TCP UDP connection to a remote party us
152. urity IGMP Multicast Enable IGMP Multicast Routing O DNS Figure 4 16 gt Enable NAT This technology translates the IP addresses of a local area network to a different IP address for the Internet If this modem router is hosting your network s connection to the Internet please select the check box If another modem router exists in your network you don t need to select the option 2 TD W8950ND Bibel iiie etme ATK eV Bhs i Cote TAL a Colei i am Of mm CLUlLe gt Enable Firewall A SPI firewall enhances network s security Select the option to use a firewall or else without a firewall gt Enable IGMP Multicast This is disabled by default This setting will not allow IGMP Internet Group Management Protocol packets to be forwarded to the LAN IGMP is used to manage multicasting on TCP IP networks Most users will not need to enable this Some ISPs use IGMP to perform remote configuration for client devices such as the modem router If you are unsure check with your ISP Cf Note If you select the Enable NAT checkbox the NAT menu will be added to the Web based Utility We will describe the detailed configuration in 4 4 5 NAT 6 Select a preferred WAN interface as the system default gateway and click Next Device Info Quick Setup Advanced Setup Routing Default Gateway Layer2 Interface Default gateway interface list can have multiple WAN interfaces served as system default gateways but o
153. uter This chapter will show each Web page s key function and the configuration way 4 1 Login After your successful login you will see the six main menus on the left of the Web based utility On the right there are the corresponding explanations and instructions Device Info Quick Setup Advanced Setup Wireless Diagnostics Management The detailed explanations for each Web page s key function are listed below 4 2 Device Info Choose Device Info menu there are six submenus under the main menu Summary WAN Statistics Route ARP and DHCP This Device Info section mainly introduces the elementary information about the modem router and its current settings in use Click any of them and you will be able to view the corresponding information Choose Device Info gt Summary you will see the Summary screen shown in Figure 4 1 The first table indicates the information about the version including Software and Hardware The second table displays the current status of the TD W8950ND connection This information will vary depending on the settings of the modem router configured on the Advanced Setup screen Device Info TERS Device Info WAN Statistics Version Info sat Firmware Version 1 0 1 Build 130108 Rel 7864 ARP Hardware Version TD VV8950ND 2 0x00000002 DHCP System Running time ODay s 00 23 06 Quick Setup Advanced Setup LAN Info LAN IP Address 192 168 1 1 IPv4 Wireless Diagnosti
154. ver Interface from available WAN interfaces Selected DNS Server Interfaces Available WAN Interfaces Security pppl 2 Parental Control pppo 1 Quality of Service Bandwidth Control Routing DNS DSL UPnP O Use the following Static DNS IP address Interface Grouping Primary DNS server IPSec Secondary DNS server Multicast Wireless Management Figure 4 12 gt Select DNS Server Interface from available WAN Interfaces You can select this option to automatically get DNS server information from the selected WAN interface gt Use the following Static DNS IP Address You can select this option to manually enter the primary and or optional secondary DNS server IP addresses provided by your ISP e Note If only single PVC with IPoA is configured you must enter static DNS server IP addresses 7 On the next screen you will see the detailed settings you ve made Please click the Save Apply button to save these settings Device Info Quick Setup WAN Setup Summary Advanced Setup Layer2 Interface WAN Service MAC Clone LAN Connection Type PPPoE NAT NAT Enabled Make sure thatthe settings below match the settings provided by your ISP Click Save Apply to have this interface to be effective Click Back to make any modifications Security Full Cone NAT Disabled Parental Control Firewall Enabled Quality of Service IGMP Multicast Enabled Bandwidth C
155. ver and DMZ host for Port Triggering and then the network administrators can manage and monitor the network in real time with the remote management function Since the modem router is compatible with virtually all the major operating systems it is very easy to manage Quick Setup Wizard is supported and detailed instructions are provided step by step in this user guide Before installing the Modem router please look through this guide to know all the modem router s functions TD W8950ND Bibel ite etme Tig tt eV Bhs i Cole Taa oI i am Of mm CLE Le 1 2 Main Features Complies with IEEE 802 11n to provide a wireless data rate of up to 150Mbps One RJ11 LINE port four 10 100M Auto Negotiation RJ45 LAN ports supporting Auto MDI MDIX Yy Quick response semi conductive surge protect circuit reliable surge protect function AFE to support Annex A and L deployments Provides external splitter Multi user sharing a high speed Internet connection Connecting the internet on demand and disconnecting from the Internet when idle for PPPoE Provides WPA WPA2 WPA PSK WPA2 PSK data security TKIP AES encryption security Provides 64 128 bit WEP encryption security and wireless LAN ACL Access Control List Adopts Advanced DMT modulation and demodulation technology Adopts 150M wireless LAN transmission technology Y VV VV VV VV Y Supports access control parents and network administrators can establish restricted access policies ba
156. very queues in the table Queues with enable checkbox checked will be enabled Queues with enable checkbox un checked will be disabled The enable checkbox also shows status of the queue after page reload Note that if WMM function is disabled in Wireless Page queues related to wireless will not take effects The QoS function has been disabled Queues would not take effects Name Key Interface Scheduler Alg Precedence Weight DSL Latency PTM Priority Enable Remove WMM Voice Priority tea wid SP 1 Enabled WMM Voice Priority Zz wid SP 2 Enabled WMM Video Priority Spi wld SP 3 Enabled WMM Video Priority 4 wld SP 4 Enabled WMM Best Effort 5 wld SP 5 Enabled WMM Background 6 wld SP 6 Enabled WMM Background 7 wo SP 7 Enabled WMM Best Effort 8 wld SP 8 Enabled Default Queue 34 atmo SP 8 Patho Default Queue 35 atm1 SP 8 Patho Default Queue 36 atm2 SP 8 Patho Default Queue 37 atm3 SP 8 Patho Default Queue 39 atm5 SP 8 Patho Default Queue 40 atm6 SP 8 Patho Default Queue 41 atm4 SP 8 Patho Figure 4 42 Click the Add button in Figure 4 42 and you can configure the QoS queue entry on the next screen as shown in Figure 4 43 Device Info Quick Setup Advanced Setup Layer2 Interface WAN Service MAC Clone LAN NAT Security Parental Control Quality of Service QoS Classification Bandwidth Control Routing
157. y other antenna or transmitter CE Mark Warning C 1588 This is a class B product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures This device has been designed to operate with the antennas listed below and having a maximum gain of 5 dBi Antennas not included in this list or having a gain greater than 5 dBi are strictly prohibited for use with this device The required antenna impedance is 50 ohms To reduce potential radio interference to other users the antenna type and its gain should be so chosen that the equivalent isotropically radiated power e i r p is not more than that permitted for successful communication Canadian Compliance Statement This device complies with Industry Canada license exempt RSS standard s Operation is subject to the following two conditions 1 This device may not cause interference and 2 This device must accept any interference including interference that may cause undesired operation of the device Cet appareil est conforme aux norms CNR exemptes de licence d Industrie Canada Le fonctionnement est soumis aux deux conditions suivantes 1 cet appareil ne doit pas provoquer d interferences et 2 cet appareil doit accepter toute interference y compris celles susceptibles de provoquer un fonctionnement non souhait de l appareil Industry Canada Statement Complies with the Canadian ICES 003 Clas

TP-Link TD-W8950ND User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents