Summary of common Broadband router setup methods

Http://tech.china.com/zh_cn/netschool/net/experience/684/20061230/13849743.html

This article takes the di-740p model of broadband router D-link, the default management address is 192.168.0.1, and the management port is 8080.

Set the IP address and router management address of a computer to the same network segment, such as 192.168.0.2, open the browser of 192.168.0.2 computer, enter "http://192.168.0.1:8080" in the Address bar and press ENTER to appear the user Login prompt window, Enter the default admin account and password in the broadband router specification to enter the settings interface.

In order for the router to dial automatically, we also need to integrate the ADSL account into the router.

Click on the top of the "Home" tab, and then click on the Change "WAN", in the PPP over Ethernet see the setting of ADSL account, enter their own application for ADSL account and password save settings.

Now go to the System Information section in the System Status tab to view the networking status, where you can see clearly the network information that ADSL dial-up obtains on the WAN side.

After setting up the ADSL account, we can access the Internet through the broadband router, but in order to better manage and improve security, we need to do the following: Click "Home" tab, then select "DHCP" on the left, and set the IP address range at the IP range where the DHCP server can enter, After saving, the broadband router has the function of automatically assigning IP address.

To prevent the chaos of BT

Default settings All computers connected to the router are protected, that is, in the intranet, the use of Peer-to-peer software such as BT will be affected. We can set the declared host by using the "DMZ" in the "Advanced Settings" tab. Set up here the host is exposed to the network, on the one hand can use BT download software and establish IIS, FTP server, and on the other hand also exposed to hackers and viruses, so this computer security work must be done well. (if only to use BT and other Peer-to-peer software and the host to announce the words is very unwise, in fact, we can use UPnP function to solve the intranet can not use Peer-to-peer software problems. Click "Other Items" under the "Tools" tab of the Router settings interface, and then set UPnP to "start". ）

Enter the Filter tab in the Broadband router Setup interface, we can filter the source and address of the datagram, including IP address, URL information, MAC address and regional information.

Set "Activate" IP address filtering, and then enter the IP address within the IP address range, such as 192.168.0.111. "Port range" is actually filling out the information, because the BT download using 6881 to 6889 ports, so we can filter here. "Protocol" selects TCP, and "scheduling" sets the time for the filter to take effect (the time is forbidden to see the actual situation).

Both service and security

Computers exposed to the Internet hackers and viruses may exploit vulnerabilities to attack computers, but we can solve this problem by setting up virtual servers.

Login to the broadband router Setup interface. Select the virtual server label in the Advanced Settings interface. To activate the virtual server settings, enter the relevant virtual server information. For example, we want to allow 192.168.0.112 this computer to provide FTP services, but also want to let other ports to be protected by the router, you can only virtual the FTP service. The personal IP address is set to 192.168.0.112, and the Protocol mode is TCP (the FTP service uses the TCP protocol) and the personal port (FTP uses 21 ports). Additionally, you can set the time period in which the virtual service takes effect.

Tp-link Router Configuration Guide

The basic configuration of the router, so that the computer through the router to share the Internet, the process is relatively easy to achieve; The following sections of this document mainly describe the following parts:

1, collect and judge the information, prepare for configuring the router;

2, enter the router management interface, configure the router;

3, the configuration process of simple fault location exclusion.

1, the preparation before the router (if you are aware of your own connection, you can skip to the 2nd)

The first thing you need to be sure about is how your broadband access is.

Of course, the easiest way to do this is to call your ISP (Internet service provider) for advice, or you can make a quick decision with the way you purchased your router's previous network connection.

There are several common ways to connect hardware:

1, telephone line-> ADSL modem-> Computer

2, twisted pair (Ethernet cable)-> computer

3, cable TV (coaxial cable)-> Cable modem-> Computer

4, optical fiber-> Photoelectric Converter-> proxy server-> PC

ADSL/VDSL PPPoE: A computer running a third-party dial-up software such as Enternet300 or WinXP system with its own dialer, fill in the account and password provided by the ISP, each time before the Internet to dial;

Or your ADSL MODEM has enabled the routing function, fills in the ISP to provide the account number and the password, the dialing movement gives the MODEM to do; (this kind of broadband access mode is typical such as the "Network Express" provided by Southern Telecom)

Static IP:ISP provides you with fixed IP address, subnet mask, default gateway, DNS;

Dynamic IP: The computer's TCP/IP property is set to "Automatically obtain IP address", each time you start the computer can access the Internet; (this kind of broadband access mode typical such as Shenzhen "Tianwei video")

802.1x+ static IP:ISP provides fixed IP address, special dialing software, account number and password;

802.1x+ Dynamic IP:ISP provides special dialing software, account number and password;

Web authentication: Every time before the Internet, open IE browser, first go to the ISP designated home page, fill in the user name provided by the ISP password, through the certification before you can do other online operation;

(The bold text above is your broadband access mode, the access mode and the hardware connection is not a fixed collocation)

These connection authentication methods mentioned above are only some broadband access methods with high penetration rate, of course there are other topological connections and authentication methods exist; So when you are not sure of your broadband approach, it is best to ask the ISP: their installed broadband access, IP address is static or dynamic. The protocol used for authentication is PPPoE, 802.1X, or Web authentication. When the above two problems have the answer, you can configure the router;

2, how to enter the Router management interface.

The first reference to the "User manual" above the icon, the ADSL MODEM, routers, computers link up;

TL-R4XX Series Router's management address factory defaults: IP Address: 192. 168.1. 1, subnet mask: 255. 255.255. 0 (tl-r400 and tl-r400+ two admin address defaults to: 192. 168.123. 254, Subnet mask: 255. 255.255. 0 the router LAN port and computer network card connection is good, because the Ethernet port on the router has the polarity of automatic flip function, so no matter your network cable using straight line or crossed lines can be, you need to ensure that the production of the crystal head of a reliable and stable, crystal Head copper film does not rust.

On the desktop, right-click on "My Network Neighborhood", select "Properties", double-click Open "Local Connection" in the pop-up window, click "Properties" in the pop-up window, then look for Internet Protocol (TCP/IP), and double-click the Internet Protocol (TCP/IP) Properties window;

Select "Use the following IP address" in this window and fill in the corresponding location:

IP Address: 192. 168.1. X (x range 2-254),

Subnet Mask: 255. 255.255. 0,

Default gateway: 192. 168.1. 1, after filling out "OK" two times;

3, check whether the computer and the router can communicate.

The following methods can be used to view, open the computer's DOS interface:

"Start"-> "program", click "MS-DOS" (Win98 operating system)

"Start"-> "Programs"-"Accessories", click "Command Prompt" (WIN2000/XP operating system)

First, check that the IP address configuration above is in effect.

In DOS window input: Ipconfig/all and enter, when you see a message similar to the following to indicate that the configuration is in effect,

IP Address .................................. : 192. 168.1. 10

Subnet Mast ..............: 255.......... 255.255. 0

Default Gateway. ............................ . : 192. 168.1. 1

Second, from the computer to the router LAN port to send packets to see if the packet can return. Run in DOS window:

Ping 192. 168.1. 1–t and enter, if the following similar information appears,

Reply from 192. 168.1. 1:bytes=32 time<10ms ttl=128 Reply from 192. 168.1. 1:bytes=32 time<10ms ttl=128 Reply from 192. 168.1. 1:bytes=32 time<10ms ttl=128 If the above information does not appear after the carriage return, you are prompted to enter the command "is not an internal command or an external command, also is not a running program or batch program", then the command input is incorrect, please check the space, such as whether the input is ignored;

4, access to the router management interface;

A message appears indicating that the computer can communicate with the router, open IE browser, enter 192 in the Address bar. 168.1. 　1 and enter, normally a dialog box that requires a username and password will appear. Of course, there are exceptions: if you open the IE browser address bar and enter the address return, pop-up "Work Offline" dialog box, the point is "connect" after the Small Dial window, click the IE browser menu bar "Tools"-"Internet Options", in the pop-up dialog box click the "Connection" property page, The interface is as follows: the above operation,

It should be said that access to the router management interface should have no obstacles;

5, start to configure the router;

With the initial information about the way the broadband access is prepared, configuration is much more convenient; just enter the router management interface, will pop up a similar figure "Setup Wizard" interface, you can cancel ignore it; Enter the router management interface and click "Network Parameters"-> "Wan settings" in the left column menu bar. This is the most critical step in configuring the router's working mode for the Internet-oriented WAN port.

Let's say your broadband access mode is ADSL PPPoE, then select the "WAN connection type" for "PPPoE", fill in the "Internet account", "Internet password", if you are a monthly subscription, and then select the connection mode for: "Automatic connection", click "Save" that is complete configuration; after saving "Internet password" box to fill in the password will be a few more, this is the router for security purposes;

Then you click on the "Running state" of the left column of the admin interface, on the Run Status page "Wan Properties", just start to see the corresponding IP address subnet mask default gateway DNS server address, such as the following image, which means that the router is dialing the process, wait until these addresses have the appropriate information, After you fill in the DNS server address on the Computer Internet Protocol (TCP/IP) page, the basic settings are complete and you can surf without any serious obstacles.

6, the failure of the list;

If you do not see any addresses, there are several reasons for this, please exclude:

1 ADSL modem on the general will have an ADSL lamp, under normal circumstances, when the modem power is added and the telephone line is connected, the lantern lamp flashes at roughly regular speed, and the flashing ends up in a long light. If the light is endless and flashing is not long bright, please contact and inform the ISP your ADSL Modem with the local switch can not sync, this adsl/dsl lamp long bright condition, is necessary;

2 in the configuration process to fill in the "Internet password" when the careless error, may wish to re-enter again;

3 ADSL MODEM Enabled "routing mode", the need to reset the ADSL mdoem to "bridge mode"; How to reset to the bridge mode can be contacted with modem manufacturers to obtain the operation method; You can also judge the computer to connect to the MODEM, and dial on the computer, after the successful dial-up can surf the internet, If this is the case, it means that the modem works in a bridging mode, can eliminate this possibility;

4 ISP the computer network card MAC address to help set to the ADSL line; The solution is to use the router's "MAC address cloning" function, the MAC address of the network card is copied to the WAN port of the router;

If the above possibilities are eliminated, ADSL PPPoE dial-up generally no problem, listed below are 2 other causes of concern;

5 Your broadband access is the kind of Ethernet line introduced directly, not ADSL but also need to dial, dial-up software is not limited to one, authentication use of the protocol is PPPoE, but it is dial-up success; if the ISP promised bandwidth is 10Mbps, recommend: Find a 10/100m adaptive hub, Connect the broadband cable to the hub and then link the hub to the router Wan; After such a rate adaptation process, dialing should be fine;

6 before purchasing the router, you also run the Dial-up software through the computer, filling in the username password dialing. But Dial-up Software is a special software provided by the ISP, other software dialing is not successful; If this is the case, please contact your ISP for advice: Your broadband access, authentication using the protocol is 802. 1X. If yes, there is a possibility that the certification system in the development process to add private information, resulting in router dialing failed;

7, other configuration

1) Security Settings

When the internet can be normal, may be for different reasons, you want to the internal LAN computer Internet operation, open different permissions, such as only allowed to log on to certain sites, can only send and receive e-mail, part of the restrictions, part of the restrictions; Some routers are not fully implemented, such as "IP address and network card address binding" This function, routers can not fully do;

The operation of our Internet, the essence of which is that the computer constantly send request packets, these request packets must contain some parameters such as: Source IP, Destination IP, source port, destination port, and so on, the router is through the restrictions on these parameters to control the internal LAN computer different access to the Internet authority;

Below we will enumerate the representative configuration examples to explain how the router "Firewall settings", "IP address filtering" These features are used. The examples listed and the explanations above are all meant to help you understand the meaning of each function parameter as much as possible, and only if you understand the meaning of the parameters, you can configure the filtering rules as you want, quickly achieving your intended purpose, and not being able to use these features because of configuration errors, Also will not because of lack of timely technical support and delay your application;

"Firewall Settings" page, you can see that this is a total switch Settings page, which is not the use of features, please do not check in front of it;

In addition to the total switch, there is two filter function "Default filtering rule" determination, what is the default filtering rule. In the specific rules page, we define certain rules to control the eligible packets, and here the "default rules", as the name implies, are limited to what to do when we customize the rules that do not involve inconsistent packets. This should not be difficult to understand it;

A packet, do you want to comply with the rules we set, do not conform to the rules we set but must conform to the default rules;

We can see the default filtering rules, we can add new entries; We configure a rule: a computer that restricts the internal LAN, IP address 192. 168.1. 10, just let it login www.tp-link.com.cn this site, no other operation is not;

The above rule can be interpreted as: Intranet computers to the public network to send packets, packet source IP address is to limit the computer's IP address 192. 168.1. 10, packet destination IP address 202.96. 137.26, that is, www.tp-link.com.cn this domain name corresponding to the public network IP address, WAN request because it is limited to the site, so the port number is 80; rules can be set up in the configured rules of the page to see clearly, the rule effective time is 24 hours, The object being controlled is the IP address

192.168. 1.10 This host, the port behind the LAN default do not fill, WAN IP address bar filled with the www.tp-link.com.cn corresponding public network IP address, the port number because it is a Web site so fill 80, the agreement general default choice of all on the line; Because the default rule is to prohibit data packets that do not conform to the set rules through the router, the data packets conforming to the set rules are allowed to pass and the rule state is in effect;

If your rules involve restrictions on the Web site, that is, the destination request port is 80, you should consider that the corresponding packet of 53 is also allowed to pass, because 53 corresponds to the "Domain name resolution Server" packet, Used to place domain names (such as www.tp-link.com.cn) and IP addresses (such as 202.96. 137.26) corresponding, so must be opened.

Configuring the IP address filtering rule is used to achieve some of your goals, the most important of which is that the analysis has to do with those controls and then choose what default rules are. Configure what filtering rules are. If you are determined to understand the true role of this feature, you will be fully aware of it through careful reference and repeated experiments on the router.