Инструкция tp link tl mr3420

Картинка с сайта: manualmachine.com

TL-MR3420
3G/4G Wireless N Router

Rev: 2.0.0
1910010676

Картинка с сайта: manualmachine.com

COPYRIGHT & TRADEMARKS

Specifications are subject to change without notice. is a registered trademark of
TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or
registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any
derivative such as translation, transformation, or adaptation without permission from TP-LINK
TECHNOLOGIES CO., LTD. Copyright © 2012 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com

Картинка с сайта: manualmachine.com

FCC STATEMENT

This equipment has been tested and found to comply with the limits for a Class B digital device,
pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a residential installation. This equipment generates, uses and can
radiate radio frequency energy and, if not installed and used in accordance with the instructions,
may cause harmful interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause harmful
interference to radio or television reception, which can be determined by turning the equipment off
and on, the user is encouraged to try to correct the interference by one or more of the following
measures:

 Reorient or relocate the receiving antenna.
 Increase the separation between the equipment and receiver.
 Connect the equipment into an outlet on a circuit different from that to which the receiver

is connected.

 Consult the dealer or an experienced radio/ TV technician for help.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two
conditions:

This device may not cause harmful interference.

This device must accept any interference received, including interference that may cause

undesired operation.
Any changes or modifications not expressly approved by the party responsible for compliance

could void the user’s authority to operate the equipment.
Note: The manufacturer is not responsible for any radio or TV interference caused by
unauthorized modifications to this equipment. Such modifications could void the user’s authority
to operate the equipment.

FCC RF Radiation Exposure Statement:

This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled
environment. This device and its antenna must not be co-located or operating in conjunction with
any other antenna or transmitter.

“To comply with FCC RF exposure compliance requirements, this grant is applicable to only
Mobile Configurations. The antennas used for this transmitter must be installed to provide a
separation distance of at least 20 cm from all persons and must not be co-located or operating in
conjunction with any other antenna or transmitter.”

Картинка с сайта: manualmachine.com

CE Mark Warning

This is a class B product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.

National Restrictions

This device is intended for home and office use in all EU countries (and other countries following
the EU directive 1999/5/EC) without any limitation except for the countries mentioned below:

Country Restriction Reason/remark

Bulgaria None

Outdoor use limited to

10 mW e.i.r.p. within

France

the band 2454-2483.5

MHz

Italy None

Luxembourg None

Norway Implemented

Russian Federation None Only for indoor applications

Note: Please don’t use the product outdoors in France.

General authorization required for outdoor use and

public service

Military Radiolocation use. Refarming of the 2.4 GHz

band has been ongoing in recent years to allow current

relaxed regulation. Full implementation planned 2012

If used outside of own premises, general authorization is

required

General authorization required for network and service

supply(not for spectrum)

This subsection does not apply for the geographical area

within a radius of 20 km from the centre of Ny-Ålesund

This device has been designed to operate with the antennas listed below, and having a maximum
gain of 5 dBi. Antennas not included in this list or having a gain greater than 5 dBi are strictly
prohibited for use with this device. The required antenna impedance is 50 ohms.

To reduce potential radio interference to other users, the antenna type and its gain should be so
chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that permitted for
successful communication.”

Industry Canada Statement:

This device complies with RSS-210 of the Industry Canada Rules. Operation is subject to the
following two conditions:
(1)This device may not cause harmful interference, and
(2)This device must accept any interference received, including interference that may cause
undesired operation.

Картинка с сайта: manualmachine.com

IMPORTANT NOTE:
Radiation Exposure Statement:
This equipment complies with Canada radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance 20cm
between the radiator & your body.
Ce dispositif est conforme à la norme CNR-210 d’Industrie Canada applicable aux appareils radio
exempts de licence. Son fonctionnement est sujet aux deux conditions suivantes:
(1)Le dispositif ne doit pas produire de brouillage préjudiciable, et
(2)Ce dispositif doit accepter tout brouillage reçu,y compris un brouillage susceptible de
provoquer un fonctionnement indésirable.

NOTE IMPORTANTE:
Déclaration d’exposition aux radiations:
Cet équipement est conforme aux limites d’exposition aux rayonnements IC établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 20
cm de distance entre la source de rayonnement et votre corps.

Korea Warning Statements:

당해 무선설비는 운용중 전파혼신 가능성이 있음.

NCC Notice:

經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅自變更頻率、加大功
率或變更原設計之特性及功能。

低功率射頻電機之使用不得影響飛航安全及干擾合法通信；經發現有干擾現象時，應立即停用，並

改善至無干擾時方得繼續使用。前項合法通信，指依電信法規定作業之無線電通信。低功率射頻電
機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。

Продукт сертифіковано згідно с правилами системи УкрСЕПРО на відповідність вимогам
нормативних документів та вимогам, що передбачені чинними законодавчими актами
України.

Картинка с сайта: manualmachine.com

TP-LINK TECHNOLOGIES CO., LTD

DECLARATION OF CONFORMITY

For the following equipment:
Product Description: 3G/4G Wireless N Router
Model No.: TL-MR3420
Trademark: TP-LINK
We declare under our own responsibility that the above products satisfy all the technical
regulations applicable to the product within the scope of Council Directives:
Directives 1999/5/EC, Directives 2004/108/EC, Directives 2006/95/EC, Directives 1999/519/EC,
Directives 2011/65/EU
The above product is in conformity with the following standards or other normative documents

ETSI EN 300 328 V1.7.1: 2006

ETSI EN 301 489-1 V1.8.1:2008& ETSI EN 301 489-17 V2.1.1:2009

EN 55022:2010

EN 55024:2010

EN 61000-3-2:2006+A1:2009+A2:2009

EN 61000-3-3:2008

EN60950-1:2006+A11：2009+A1:2010+A12:2011

EN62311:2008

The product carries the CE Mark:

Person is responsible for marking this declaration:

Yang Hongliang
Product Manager of International Business

Date of issue: 2012

TP-LINK TECHNOLOGIES CO., LTD.

Building 24 (floors 1, 3, 4, 5), and 28 (floors 1-4) Central Science and Technology Park,

Shennan Rd, Nanshan, Shenzhen, China

Картинка с сайта: manualmachine.com

CONTENTS

Package Contents…………………………………………………………………………………………. 1

Chapter 1. Introduction…………………………………………………………………………….. 2

1.1 Overview of the Router……………………………………………………………………………………. 2

1.2 Conventions ………………………………………………………………………………………………….. 2

1.3 Main Features ……………………………………………………………………………………………….. 2

1.4 Panel Layout …………………………………………………………………………………………………. 3

1.4.1 The Front Panel…………………………………………………………………………………… 3

1.4.2 The Rear Panel …………………………………………………………………………………… 4

1.4.3 The Side Panel……………………………………………………………………………………. 4

Chapter 2. Connecting the Router …………………………………………………………….. 5

2.1 System Requirements …………………………………………………………………………………….. 5

2.2 Installation Environment Requirements……………………………………………………………… 5

2.3 Connecting the Router ……………………………………………………………………………………. 5

Chapter 3. Quick Installation Guide…………………………………………………………… 7

3.1 TCP/IP Configuration ……………………………………………………………………………………… 7

3.2 Quick Installation Guide ………………………………………………………………………………….. 7

Chapter 4. Configuring the Router…………………………………………………………… 13

4.1 Login ………………………………………………………………………………………………………….. 13

4.2 Status …………………………………………………………………………………………………………. 13

4.3 Quick Setup…………………………………………………………………………………………………. 14

4.4 WPS…………………………………………………………………………………………………………… 14

4.5 Network ………………………………………………………………………………………………………. 21

4.5.1 Internet Access………………………………………………………………………………….. 21

4.5.2 3G/4G………………………………………………………………………………………………. 22

4.5.3 WAN ………………………………………………………………………………………………… 26

4.5.4 MAC Clone ……………………………………………………………………………………….. 35

4.5.5 LAN………………………………………………………………………………………………….. 35

4.6 Wireless ……………………………………………………………………………………………………… 36

4.6.1 Wireless Settings……………………………………………………………………………….. 36

4.6.2 Wireless Security……………………………………………………………………………….. 38

4.6.3 Wireless MAC Filtering ……………………………………………………………………….. 41

4.6.4 Wireless Advanced …………………………………………………………………………….. 43

4.6.5 Wireless Statistics………………………………………………………………………………. 45

4.7 DHCP …………………………………………………………………………………………………………. 45

I

Картинка с сайта: manualmachine.com

4.7.1 DHCP Settings ………………………………………………………………………………….. 46

4.7.2 DHCP Client List………………………………………………………………………………… 47

4.7.3 Address Reservation ………………………………………………………………………….. 47

4.8 Forwarding ………………………………………………………………………………………………….. 48

4.8.1 Virtual Servers…………………………………………………………………………………… 48

4.8.2 Port Triggering…………………………………………………………………………………… 50

4.8.3 DMZ…………………………………………………………………………………………………. 52

4.8.4 UPnP ……………………………………………………………………………………………….. 53

4.9 Security ………………………………………………………………………………………………………. 54

4.9.1 Basic Security……………………………………………………………………………………. 54

4.9.2 Advanced Security……………………………………………………………………………… 55

4.9.3 Local Management …………………………………………………………………………….. 57

4.9.4 Remote Management …………………………………………………………………………. 58

4.10 Parental Control …………………………………………………………………………………………… 58

4.11 Access Control …………………………………………………………………………………………….. 61

4.11.1 Rule …………………………………………………………………………………………………. 62

4.11.2 Host …………………………………………………………………………………………………. 64

4.11.3 Target……………………………………………………………………………………………….. 65

4.11.4 Schedule…………………………………………………………………………………………… 67

4.12 Advanced Routing ………………………………………………………………………………………… 68

4.12.1 Static Routing List………………………………………………………………………………. 69

4.12.2 System Routing Table…………………………………………………………………………. 70

4.13 Bandwidth Control ………………………………………………………………………………………… 70

4.13.1 Control Settings …………………………………………………………………………………. 70

4.13.2 Rule List……………………………………………………………………………………………. 71

4.14 IP & MAC Binding…………………………………………………………………………………………. 72

4.14.1 Binding Settings…………………………………………………………………………………. 72

4.14.2 ARP List……………………………………………………………………………………………. 74

4.15 Dynamic DNS………………………………………………………………………………………………. 74

4.15.1 Comexe.cn DDNS ……………………………………………………………………………… 74

4.15.2 Dyndns.org DDNS ……………………………………………………………………………… 75

4.15.3 No-ip.com DDNS ……………………………………………………………………………….. 76

4.16 System Tools ……………………………………………………………………………………………….. 77

4.16.1 Time Settings…………………………………………………………………………………….. 77

4.16.2 Diagnostic…………………………………………………………………………………………. 78

4.16.3 Firmware Upgrade……………………………………………………………………………… 80

4.16.4 Factory Defaults ………………………………………………………………………………… 81

II III

Картинка с сайта: manualmachine.com

4.16.5 Backup & Restore………………………………………………………………………………. 81

4.16.6 Reboot……………………………………………………………………………………………… 82

4.16.7 Password………………………………………………………………………………………….. 82

4.16.8 System Log……………………………………………………………………………………….. 83

4.16.9 Statistics …………………………………………………………………………………………… 85

Appendix A: FAQ…………………………………………………………………………………………. 87

Appendix B: Configuring the PCs ………………………………………………………………… 92

Appendix C: Specifications………………………………………………………………………….. 96

Appendix D: Glossary …………………………………………………………………………………. 97

Appendix E: Compatible 3G/4G USB Modem ………………………………………………… 99

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Package Contents

The following items should be found in your package:

 TL-MR3420 3G/4G Wireless N Router
 DC Power Adapter for TL-MR3420 3G/4G Wireless N Router
 Ethernet Cable
 Quick Installation Guide
 Resource CD for TL-MR3420 3G/4G Wireless N Router, including:

 This Guide

 Other Helpful Information

Note:



Make sure that the package contains the above items. If any of the listed items is damaged or
missing, please contact with your distributor.

-1-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Chapter 1. Introduction

1.1 Overview of the Router

TP-LINK understands the need for sharing the 3G/4G connection locally that benefits our end
users. We realize the convenience with our latest wireless N 3G/4G Routers —— they give you
the freedom to quickly set up a stable and high speed wireless network, up to 300Mbps,
on-the-go and share a 3G/4G connection. By connecting a USB Card to the Router, a Wi-Fi
hotspot is instantly established allowing users to share a Internet connection anywhere 3G/4G
coverage is available. So whether you’re on the train, camping, or at a construction site, you’ll
have a reliable wireless connection to accommodate your networking needs.

3G/4G and WAN Broadband

The TL-MR3
dynamic IP) two kinds of broadband connections to get on the Internet, you can via the Internet
no matter at home or outside on business. Automatic 3G/4G and WAN failover feature just
provide nonstop internet connection.

TP-LINK 3G/4G Router provides up to 300Mbps, faster than that of traditional 11g products,
surpasses 11G performance enabling the use of high bandwidth-consuming applications such
as HD Videos.

With just pre
connection for solid security in under a minute.

420 3G/4G Wireless N Router provides 3G/4G and WAN (xDSL, static IP, or

Incredibly High Speed

Wi-fi Protected Setup

ssing on the ‘WPS’ button, the Router automatically establishes a WPA2 secure

1.2 Conventions

The Router or TL-MR3420 mentioned in this guide stands for TL-MR3420 3G/4G Wireless N
Router without any explanation.

1.3 Main Features

 One 10/100M Auto-Negotiation RJ45 WAN port, four 10/100M Auto-Negotiation RJ45 LAN

ports, supporting Auto MDI/MDIX

 Compatible with LTE/HSPA+/HSUPA/HSDPA/UMTS/EVDO USB modem
 Automatic 3G/4G and WAN failover
 Wireless N speed up to 300Mbps
 2T2R MIMO, CCA technologies deliver greater coverage and higher speed
 Wireless security encryption easily at a push of “WPS” button
 WDS wireless bridge provides seamless bridging to expand your wireless network

-2-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

 Backward compatible with 802.11b and 802.11g devices
 Provides WPA/WPA2-Enterprise, WPA/WPA2-Personal authentication, TKIP/AES

encryption security

 Supports 3G/4G/Dynamic IP/Static IP/PPPoE/L2TP/PPTP Internet access
 Supports Virtual Server, Special Application and DMZ host
 Supports UPnP, Dynamic DNS, Static Routing
 Provides Automatic-connection and Scheduled Connection on certain time to the Internet
 Built-in NAT and DHCP server supporting static IP address distributing
 Connects Internet on demand and disconnects from the Internet when idle for PPPoE
 Provides 64/128-bit WEP encryption security and wireless LAN ACL (Access Control List)
 Supports Flow Statistics
 Supports firmware upgrade and Web management

1.4 Panel Layout

1.4.1 The Front Panel

Figure 1-1 Front Panel sketch

The Router’s LEDs are located on the front panel (View from left to right).

Item Status Indication

(PWR)

(SYS)

(WLAN)

（WAN）

（LAN1-4）

（USB）

（WPS）

On Power is on.
Off Power is off.
On

The Router is initializing.

Flashing The Router is working properly.

Off The Router has a system error.

Flashing The Wireless function is enabled.

Off The Wireless function is disabled.

On

A device is linked to the corresponding port but there is no
activity.

Flashing An active device is linked to the corresponding port.

Off No device is linked to the corresponding port.

On

The USB 3G/4G modem is connected but no data being
transferred.

Flashing Data is received or sent through the 3G/4G modem.

Off The USB 3G/4G modem is not connected.

Slow

Flash

On

Quick
Flash

A wireless device is connecting to the network by WPS
function. This process will last in the first 2 minutes.
A wireless device has been successfully added to the network
by WPS function.
A wireless device failed to be added to the network by WPS
function.

Table 1-1 The LEDs description

-3-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Note:



After a device is successfully added to the network by WPS function, the WPS LED will keep on
for about 5 minutes and then turn off.

1.4.2 The Rear Panel

Figure 1-2 Rear Panel sketch
The following parts are located on the rear panel (View from left to right).
 POWER: The Power socket is where you will connect the power adapter. Please use the

power adapter provided with this TL-MR3420 3G/4G Wireless N Router.

 ON/OFF: The switch is for you to turn on/off the Router, but only with the Router powered

on.

 4,3,2,1 (LAN): These ports (4,3,2,1) connect the Router to the local PC(s)
 WAN: This WAN port is where you will connect the DSL/cable Modem, or Ethernet
 WPS/RESET:

There are two ways to reset to the Router’s factory defaults:

1) Use the Factory Defaults function on “System Tools -> Factory Defaults” page in
the Router’s Web-based Utility.

2) Use the Factory Default Reset button: With the Router powered on, use a pin to press
and hold the WPS/RESET button (about 5 seconds) until the SYS LED becomes
quick-flash from slow-flash. And then release the button and wait the Router to reboot
to its factory default settings.

 Wireless antenna: To receive and transmit the wireless data.

1.4.3 The Side Panel

Figure 1-3 Side Panel sketch
The following parts are located on the side plate (View from left to right).
 WIFI: This switch is an easy and convenient operation for you to turn on or off the wireless

network.

 USB: Connect to the USB Modem.

-4-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Chapter 2. Connecting the Router

2.1 System Requirements

 Broadband Internet Access Service (DSL/Cable/Ethernet)
 One DSL/Cable Modem that has an RJ45 connector (which is not necessary if the Router

is connected directly to the Ethernet.)

 PCs with a working Ethernet Adapter and an Ethernet cable with RJ45 connectors
 TCP/IP protocol on each PC
 Web browser, such as Microsoft Internet Explorer 5.0 , Netscape Navigator 6.0 or above

2.2 Installation Environment Requirements

 Place the Router in a well ventilated place far from any heater or heating vent
 Avoid direct irradiation of any strong light (such as sunlight)
 Keep at least 2 inches (5 cm) of clear space around the Router
 Operating Temperature: 0 ~40 (32 ~104 ) 
 Operating Humidity: 10%~90%RH, Non-condensing

2.3 Connecting the Router

Before installing the Router, make sure your PC is connected to the Internet through the
broadband service successfully. If there is any problem, please contact your ISP. After that,
please install the Router according to the following steps. Don’t forget to pull out the power plug
and keep your hands dry.

1. Power off your Cable/DSL Modem, and the Router.

2. Locate an optimum location for the Router. The best place is usually at the center of your

wireless network. The place must accord with the Installation Environment Requirements

3. Adjust the direction of the antenna. Normally, upright is a good direction.

4. Connect the PC(s) or Switch/Hub in your LAN to the LAN Ports of the 3G/4G Router with

Ethernet cable.

5. The 3G/4G Router supports both 3G/4G and WAN connection; so you can insert 3G/4G

USB Modem to the USB port of the Router (as shown in Figure 2-1), or connect the

.

DSL/Cable Modem to the WAN port of the Router (as shown in Figure 2-2). Please visit our
website http://www.tp-link.com to get the latest USB modems compatibility, and we
recommend

you to check whether the modem in your hand has already been tested by us.

6. Connect the power adapter to the power socket on the Router, and the other end into an

electrical outlet. The Router will start to work automatically.

7. Power on your Cable/DSL Modem.

-5-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Figure 2-1 Hardware Installation – 3G/4G connection

Figure 2-2 Hardware Installation – WAN connection

-6-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Chapter 3. Quick Installation Guide

This chapter will show you how to configure the basic functions of your 3G/4G Wireless N
Router using Quick Setup Wizard within minutes.

3.1 TCP/IP Configuration

The default IP address of the 3G/4G Wireless N Router is 192.168.0.1. And the default Subnet
Mask is 255.255.255.0. These values can be changed as you desire. In this guide, we use all
the default values for description.
Connect the local PC to the LAN ports of the Router. And then you can configure the IP address
for your PC in the following two ways.

 Configure the IP address manually

1) Set up the TCP/IP Protocol for your PC. If you need instructions as to how to do this,

please refer to Appendix B: «Configuring the PC.»

2) Configure the network parameters. The IP address is 192.168.0.xxx («xxx» is any number

from 2 to 254), Subnet Mask is 255.255.255.0, and Gateway is 192.168.0.1 (The Router’s
default IP address)

 Obtain an IP address automatically

1) Set up the TCP/IP Protocol in «Obtain an IP address automatically» mode on your PC. If

you need instructions as to how to do this, please refer to Appendix B: «Configuring the

PC.»

2) Then the built-in DHCP server will assign IP address for the PC.

3.2 Quick Installation Guide

Note:



If you are trying to connect to TL-MR3420 wirelessly, please refer to the label on the bottom of
the Router for the Wireless Password.

1. To access the configuration utility, open a web-browser and type in the default address

http://192.168.0.1

in the address field of the browser.

Figure 3-1 Login the Router
After a moment, a login window will appear, similar to the Figure 3-2. Enter admin for the User
Name and Password, both in lower case letters. Then click the OK button or press the Enter
key.

-7-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Figure 3-2 Login Windows

Note:



If the above screen does not pop-up, it means that your Web-browser has been set to a proxy.
Go to Tools menu>Internet Options>Connections>LAN Settings, in the screen that appears,
cancel the Using Proxy checkbox, and click OK to finish it.

2. After successful login, you can click the Quick Setup to quickly configure your Router.

Click Next to proceed to the next screen.

Figure 3-3 Quick Setup

3. Select a desired Internet Access mode and then click Next. The configuration for each

mode is similar. As follows we will take 3G/4G Only mode for example.

-8-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Figure 3-4 Choose Internet Access Mode

 3G/4G Only

In this mode, the Router will try 3G/4G access only. WAN access is disabled.

 3G/4G Preferred

In this mode, the Router will try 3G/4G access first. If 3G/4G access fails and WAN
access is valid, or if no 3G/4G USB modem is inserted, the Router would switch to WAN
access. Once the Router succeeds to connect to the 3G/4G network, the Router would
stop the WAN connection and switch back to 3G/4G access immediately.

 WAN Preferred

In this mode, the Router will try WAN access first. If the WAN access fails and 3G/4G
access is valid, the Router would switch to 3G/4G access. Once the Router succeeds to
connect to the WAN network, the Router would stop the 3G/4G connection and switch
back to WAN access immediately.

 WAN Only

In this mode, the Router will try WAN access only. 3G/4G access is disabled.

4. The next screen will appear as shown in Figure 3-5. You need to set the required

parameters and then click Next.

-9-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Figure 3-5

 Location — Select the location where you’re enjoying the 3G/4G card.
 Mobile ISP — Select the ISP (Internet Service Provider) you apply to for 3G/4G service. The

Router will show the default Dial Number and APN of that ISP. If your ISP is not listed in the

Mobile ISP, check the box before Set the Dial Number, APN, Username and Password
manually and fill the Dial Number and APN blanks below.

 Authentication Type — Some ISPs need a specific authentication type. Please confirm it

with your ISP or keep it Auto.

 Dial Number & APN — Set these two parameters manually after Set the Dial Number, APN,

Username and Password manually is checked.

 Username/Password — Enter the Username and Password provided by your ISP. These

fields are optional but case-sensitive.

5. Configure the Wireless settings on the screen as shown in Figure 3-6, then click Next.

-10-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Figure 3-6 Quick Setup – Wireless

 Wireless Radio — Enable or disable the wireless radio choosing from the pull-down list.
 Wireless Network Name — Enter a value of up to 32 characters. The same name of

Wireless Network Name (SSID) must be assigned to all wireless devices in your network.
Considering your wireless network security, the default Wireless Network Name is set to
be TP-LINK_XXXXXX (XXXXXX indicates the last six unique numbers of each Router’s
MAC address). This value is case-sensitive. For example, TEST is NOT the same as test.

 Region — Select your region from the pull-down list. This field specifies the region where

the wireless function of the Router can be used. It may be illegal to use the wireless
function of the Router in a region other than one of those specified in this field. If your
country or region is not listed, please contact your local government agency for
assistance.

 Mode — This field determines the wireless mode which the Router works on.
 Channel Width — Select any channel width from the pull-down list. The default setting is

automatic, which can adjust the channel width for your clients automatically.

 Channel — This field determines which operating frequency will be used. The default

channel is set to Auto, so the AP will choose the best channel automatically. It is not
necessary to change the wireless channel unless you notice interference problems with
another nearby access point.

-11-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

 Wireless Security — You can select one of the following security options.

 Disable Security — The wireless security function can be enabled or disabled. If

disabled, the wireless stations will be able to connect the Router without encryption. It
is recommended strongly that you choose one of following options to enable security.

 WPA-PSK/WPA2-PSK — Select WPA based on pre-shared passphrase.

PSK Password — You can enter ASCII or Hexadecimal characters.
For ASCII, the key can be made up of any numbers 0 to 9 and any letters A to Z, the
length should be between 8 and 63 characters.
For Hexadecimal, the key can be made up of any numbers 0 to 9 and letters A to F,
the length should be between 8 and 64 characters.
Please also note the key is case sensitive, this means that upper and lower case keys
will affect the outcome. It would also be a good idea to write down the key and all
related wireless security settings.

 No change — If you choose this option, wireless security configuration will not change!

These settings are only for basic wireless parameters. For advanced settings, please refer to

Section 4.6: “Wireless”.

6. Click Finish to complete the Quick Setup.

Figure 3-7 Quick Setup – Finish
After the rebooting, please check whether you can access the Internet or not in the 4.2 Status
page.

-12-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Chapter 4. Configuring the Router

This chapter will show each Web page’s key functions and the configuration way.

4.1 Login

After your successful login, you will see the fifteen main menus on the left of the Web-based utility.
On the right, there are the corresponding explanations and instructions.

The detailed explanations for each Web page’s key function are listed below.

4.2 Status

The Status page displays the current status information about the Router. All information is
read-only.

-13-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Figure 4-1 Status

4.3 Quick Setup

Please refer to Section 3.2: «Quick Installation Guide.»

4.4 WPS

This section will guide you to add a new wireless device to an existing network quickly by WPS
(Wi-Fi Protected Setup) function.

-14-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

a). Choose menu “WPS”, you will see the next screen (shown in Figure 4-2).

Figure 4-2 WPS

 WPS Status — Enable or disable the WPS function here.
 Current PIN — The current value of the Router’s PIN displayed here. The default PIN of the

Router can be found in the label or User Guide.

 Restore PIN — Restore the PIN of the Router to its default.
 Gen New PIN — Click this button, and then you can get a new random value for the

Router’s PIN. You can ensure the network security by generating a new PIN.

 Disable PIN of this device — WPS external registrar of entering this device’s PIN can be

disabled or enabled manually. If this device receives multiple failed attempts to
authenticate an external Registrar, this function will be disabled automatically.

 Add Device — You can add the new device to the existing network manually by clicking

this button.
b). To add a new device:
If the wireless adapter supports Wi-Fi Protected Setup (WPS) or QSS (Quick Secure Setup),
you can establish a wireless connection between wireless adapter and Router by using either
Push Button Configuration (PBC) method or PIN method.

Note:



To build a successful connection by WPS, you should also do the corresponding configuration
of the new device for WPS function meanwhile.

For the configuration of the new device, here takes the Wireless adapter of our company for
example.

I. By PBC (Push Button Configuration)

If the wireless adapter supports Wi-Fi Protected Setup or Quick Secure Setup and the PBC
method, you can add it to the network by PBC with the following two methods.

Method One:

Step 1: Press the WPS/RESET button on the rear panel of the Router.

-15-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Step 2: Press and hold the WPS or QSS button of the adapter directly for 2 or 3 seconds.

Step 3: Wait for a while until the next screen appears. Click Finish to complete the WPS

configuration.

The WPS Configuration Screen of wireless adapter

Method Two:

Step 1: Press the WPS/RESET button on the rear panel of the Router.

Step 2: For the configuration of the wireless adapter, please choose Push the button on my

access point in the configuration utility of the WPS as below, and click Next.

-16-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

The WPS Configuration Screen of wireless adapter

Step 3: Wait for a while until the next screen appears. Click Finish to complete the WPS

configuration.

The WPS Configuration Screen of wireless adapter

Method Three:

Step 1: Keep the default WPS Status as Enabled and click the Add device button in

Figure 4-2,

then the following screen will appear.

-17-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Figure 4-3 Add A New Device
Step 2: Choose Press the button of the new device in two minutes and click Connect.
Step 3: For the configuration of the wireless adapter, please choose Push the button on my

access point in the configuration utility of the WPS as below, and click Next.

The WPS Configuration Screen of Wireless adapter

Step 4: Wait for a while until the next screen appears. Click Finish to complete the WPS

configuration.

-18-

Картинка с сайта: manualmachine.com

II. By PIN

TL-MR3420 3G/4G Wireless N Router User Guide

The WPS Configuration Screen of Wireless adapter

If the wireless adapter supports Wi-Fi Protected Setup or Quick Secure Setup and the PIN
method, you can add it to the network by PIN with the following two methods.

Method One: Enter the PIN into my Router
Step 1: Configure the wireless adapter. Please choose Enter a PIN into my access point or a

registrar in the configuration utility of the WPS as below, and click Next.

The WPS Configuration Screen of wireless adapter

Note:



In this example, the default PIN code of this adapter is 16952898 as the above figure shown.

Step 2: Configure the Router TL-MR3420. Keep the default WPS Status as Enabled and click

the Add device button in

Figure 4-2, then the following screen will appear.

-19-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

Step 3: Choose Enter the new device’s PIN and enter the PIN code of the wireless adapter in

the field behind PIN in the previous figure. Then click Connect.

Note:



The PIN code of the wireless adapter is always displayed on the WPS or QSS configuration
screen.

Method Two: Enter the PIN from my Router

Step 1: Get the Current PIN code of the Router in

code. Here takes the PIN code 12345670 of this Router for example).

Step 2: For the configuration of the wireless adapter, please choose Enter a PIN from my

access point in the configuration utility of the WPS as below, and enter the PIN code
of the Router into the field behind Access Point PIN. Then click Next.

Figure 4-2 (each Router has its unique PIN

The WPS Configuration Screen of Wireless adapter

Note:



The default PIN code of the Router can be found in its label or the WPS configuration screen as
Figure 4-2.

-20-

Картинка с сайта: manualmachine.com

TL-MR3420 3G/4G Wireless N Router User Guide

c). You will see the following screen when the new device successfully connected to the

network.

Note:



1) The status LED on the Router will light green all the time if the device has been

successfully added to the network.

2) The WPS function cannot be configured if the Wireless Function of the Router is disabled.

Please make sure the Wireless Function is enabled before configuring the WPS.

4.5 Network

Figure 4-4 the Network menu
There are five submenus under the Network menu ( as shown in Figure 4-4): Internet Acc
3G/4G, WAN, MAC Clone and LAN. Click any of them, and you will be able to configure the
corresponding function.

ess,

4.5.1 Internet Access

Choose menu “Network→Internet Access”, you can configure the access mode on the screen
below. The Router is designed to work with either WAN port or 3G/4G USB modem, and
supports “automatically take over back up with 3G/4G access” as Ethernet WAN failover.

Figure 4-5 Internet Access

-21-

Содержание

1. Характеристики
2. Обзор индикаторов и разъемов
3. Подключение роутера
4. Вход в веб-интерфейс
5. Быстрая настройка
6. Ручная настройка
7. IPTV
8. Изменение заводского пароля
9. Прошивка
10. Отзывы

Удобство и простота настройки

9

Все способы:

• Подготовка к настройке
• Настраиваем роутер TP-Link TL-MR3420
  • Быстрая настройка
  • Ручная настройка
  • Дополнительные настройки
  • Настройки безопасности
  • Завершение настройки
• Вопросы и ответы: 0

Картинка с сайта: manual-pdf.com

REV5.0.0 1910012177

User Guide

3G/4G Wireless N Router

TL-MR3420

Картинка с сайта: manual-pdf.com

Contents

About This Guide ……………………………………………………………………………………………1

Chapter 1. Get to Know About Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . .2

1. 1. Product Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

1. 2. Panel Layout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

1. 2. 1. Top View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

1. 2. 2. The Side and Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Chapter 2. Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

2. 1. Position Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2. 2. Connect Your Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2. 2. 1. Plug and Play via 3G/4G USB Modem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2. 2. 2. Connect to DSL/Cable/Satellite Modem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Chapter 3. Set Up Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

3. 1. Log In to the Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

3. 2. Use Quick Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

3. 3. Set Up IPv6 Tunnel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

3. 3. 1. Use the Public IPv6 Tunnel Service-6to4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

3. 3. 2. Specify the 6rd Tunnel with Parameters Provided by Your ISP . . . . . . . . . 13

Chapter 4. Guest Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

4. 1. Create a Network for Guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

4. 2. Customize Guest Network Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Chapter 5. Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Chapter 6. Bandwidth Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

6. 1. Set Upstream and Downstream Bandwidth. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

6. 2. Controlling Rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Chapter 7. USB Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

7. 1. Access the USB Storage Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

7. 1. 1. Access the USB Device Locally. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

7. 1. 2. Access the USB Device Remotely . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

7. 1. 3. Customize Access Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Картинка с сайта: manual-pdf.com

7. 2. Media Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

7. 3. Printer Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Chapter 8. Network Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

8. 1. Protect the Network from Cyber Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

8. 2. Service Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

8. 3. Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

8. 4. IP & MAC Binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

8. 5. Yandex DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Chapter 9. NAT Forwarding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

9. 1. Share Local Resources on the Internet by Virtual Servers. . . . . . . . . . . . . . . . . . . . 44

9. 2. Open Ports Dynamically by Port Triggering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

9. 3. Make Applications Free from Port Restriction by DMZ . . . . . . . . . . . . . . . . . . . . . . . 46

9. 4. Make Xbox Online Games Run Smoothly by UPnP . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Chapter 10. VPN. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Chapter 11. Customize Your Network Settings. . . . . . . . . . . . . . . . . . . . . . . 52

11. 1. Change the LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

11. 2. Specify DHCP Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

11. 3. Set Up a Dynamic DNS Service Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

11. 4. Create Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

11. 5. Specify Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

11. 6. Use WPS for Wireless Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

11. 6. 1. Use the WPS Wizard for Wi-Fi Connections. . . . . . . . . . . . . . . . . . . . . . . . . . 58

11. 6. 2. Use the PIN for Wi-Fi connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

11. 7. Schedule Your Wireless Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Chapter 12. Manage the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

12. 1. Set Up System Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

12. 2. Change Operation Mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

12. 3. Test the Network Connectivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

12. 4. Upgrade the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

12. 4. 1. Online Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

12. 4. 2. Manual Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

12. 5. Backup and Restore Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

12. 6. Auto Reboot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

12. 7. Change the Login Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

12. 8. Local Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67

Картинка с сайта: manual-pdf.com

12. 9. Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

12. 10. System Log. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

12. 11. Monitor the Internet Traffic Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

FAQ ………………………………………………………………………………………………………………..72

Картинка с сайта: manual-pdf.com

1

About This Guide

This guide is a complement of Quick Installation Guide. The Quick Installation Guide

instructs you on quick internet setup, and this guide provides details of each function

and shows you the way to configure these functions appropriate to your needs.

When using this guide, please notice that features of the router may vary slightly

depending on the model and software version you have, and on your location, language,

and internet service provider. All screenshots, images, parameters and descriptions

documented in this guide are used for demonstration only.

Conventions

In this guide the following conventions are used:

Convention Description

Underlined Underlined words or phrases are hyperlinks. You can click to redirect to a

website or a specific section.

Teal Contents to be emphasized and texts on the web page are in teal, including the

menus, items, buttons, etc.

>

The menu structures to show the path to load the corresponding page.

For example, Advanced > Wireless > MAC Filtering means the MAC Filtering

function page is under the Wireless menu that is located in the Advanced tab.

Note: Ignoring this type of note might result in a malfunction or damage to the device.

Tips: Indicates important information that helps you make better use of your device.

symbols on the web

page

• click to edit the corresponding entry.

• click to delete the corresponding entry.

• click to enable or disable the corresponding entry.

• click to view more information about items on the page.

More Info

The latest software, management app and utility can be found at Download Center at

http://www.tp-link.com/support.

The Quick Installation Guide can be found where you find this guide or inside the

package of the router.

Specifications can be found on the product page at http://www.tp-link.com.

A Technical Support Forum is provided for you to discuss our products at

http://forum.tp-link.com.

Our Technical Support contact information can be found at the Contact Technical

Support page at http://www.tp-link.com/support.

Картинка с сайта: manual-pdf.com

Chapter 1

Get to Know About Your

Router

This chapter introduces what the router can do and shows its appearance.

This chapter contains the following sections:

• Product Overview

• Panel Layout

Картинка с сайта: manual-pdf.com

3

Chapter 1 Get to Know About Your Router

1. 1. Product Overview

The TP-Link router is designed to fully meet the need of Small Office/Home Office

(SOHO) networks and the users demanding higher networking performance. The

powerful antennas ensure continuous Wi-Fi signal to all your devices while boosting

widespread coverage throughout your home, and the built-in Ethernet ports supply

high-speed connection to your wired devices.

Moreover, it is simple and convenient to set up and use the TP-Link router due to its

intuitive web interface.

1. 2. Panel Layout

1. 2. 1. Top View

The router’s LEDs (view from left to right) are located on the top. You can check the

router’s working status by following the LED Explanation table.

LED Explanation

Name Status Indication

(Power)

On Power is on.

Off Power is off.

Картинка с сайта: manual-pdf.com

4

Chapter 1 Get to Know About Your Router

LED Explanation

Name Status Indication

(Wi-Fi)

On The wireless function is enabled.

Off The wireless function is disabled.

(LAN)

On At least one powered-on device is connected to a LAN port.

Off No powered-on device is connected to a LAN port.

(Internet)

Green The internet is available.

Off The WAN port is not connected.

Red The WAN port is connected, but the internet is not available.

(USB)

On The inserted USB device is ready to use.

Flashing The USB device is being detected.

Off No device is plugged into the USB port.

(WPS)

On A device is connected to the router successfully using WPS.

Quick

Flashing A device fails to connect to the router using WPS.

Slow

Flashing

A device is being connecting to the router using WPS. This

process takes up to 2 minutes.

Off No WPS connection is established.

Картинка с сайта: manual-pdf.com

5

Chapter 1 Get to Know About Your Router

1. 2. 2. The Side and Back Panel

The following parts (view from left to right) are located on the rear and side panel.

Item Description

Power Port For connecting the router to a power socket via the provided power adapter.

Power On/Off Button Press this button to power on/off the router.

WAN Port For connecting to a DSL/Cable modem, or an Ethernet jerk.

Ethernet Ports (1-4) For connecting the router to your PC or other Ethernet network devices.

WIFI Button Press this button to turn on/off the Wi-Fi of the router.

WPS/RESET Button

Press this button, and immediately press the WPS button on your device to

establish WPS connection.

Press this button for about 5 seconds to factory reset the router.

USB Port For connecting to a 3G/4G modem or a USB disk.

Antennas Upright the antennas for best Wi-Fi performance.

Картинка с сайта: manual-pdf.com

Chapter 2

Connect the Hardware

This chapter contains the following sections:

• Position Your Router

• Connect Your Router

Картинка с сайта: manual-pdf.com

7

Chapter 2 Connect the Hardware

2. 1. Position Your Router

• The product should not be located where it will be exposed to moisture or excessive

heat.

• Place the router in a location where it can be connected to multiple devices as well as

to a power source.

• Make sure the cables and power cord are safely placed out of the way so they do not

create a tripping hazard.

• The router can be placed on a shelf or desktop.

• Keep the router away from devices with strong electromagnetic interference, such as

Bluetooth devices, cordless phones and microwaves.

2. 2. Connect Your Router

2. 2. 1. Plug and Play via 3G/4G USB Modem

Power

Adapter

Router

3G/4G USB Modem

2

POWER ON/OFF WAN 1 2 3 4 WPS/

RESET

WIFI

1

1 ) Press to turn on the router.

2 ) Plug in a 3G/4G USB modem with a SIM/UIM card.

3 ) Wait about 2 minutes and then confirm that the following LEDs are on and solid.

Картинка с сайта: manual-pdf.com

8

Chapter 2 Connect the Hardware

Note:

• If the Internet LED ( ) is off or red, please refer to FAQ.

• If the Wi-Fi LED ( ) is off, press the Wi-Fi button on the rear panel and then check the LED again.

• You can find the latest modem compatibility list in our website: http://www.tp-link.com/en/comp-list.html.

2. 2. 2. Connect to DSL/Cable/Satellite Modem

1

Rout

Power

r

POWER ON/OFF WAN1 234WPS/

RESET

WIFI

Power

Adapter

Modem

Internet

3

2

4

1 ) Power off the modem and remove the backup battery if it has one.

2 ) Connect the modem to the router’s WAN port via an Ethernet cable.

3 ) Turn on the modem and then wait about 2 minutes for it to restart.

4 ) Press to turn on the router.

5 ) Confirm that the following LEDs are on and solid to verify the hardware

connection is correct.

Power

Wi-Fi

Note: If the Wi-Fi LED ( ) is off, press the WIFI button on the rear panel and then check the LED again.

1. Connect your computer to the router.

• Method 1: Wired

Turn off the Wi-Fi on your computer and connect the devices as shown below.

Wired

• Method 2: Wirelessly

1 ) Find the SSID (Network Name) and Wireless Password printed on the label at

the bottom of the router.

2 ) Click the network icon of your computer or go to the Wi-Fi settings of your

smart device, and then select the SSID to join the network.

Картинка с сайта: manual-pdf.com

9

Chapter 2 Connect the Hardware

Connect automatically Connect

TP-Link_XXXX

Wi-Fi

Wi-Fi

TP-Link_XXXX

CHOOSE A NETWORK…

Other…

< Settings

• Method 3: Use the WPS button

Wireless devices that support WPS, including Android phones, tablets, most USB

network cards, can be connected to your router through this method.

Note:

• WPS is not supported by iOS devices.

• The WPS function cannot be configured if the wireless function of the router is disabled. Also, the WPS

function will be disabled if your wireless encryption is WEP. Please make sure the wireless function is

enabled and is configured with the appropriate encryption before configuring the WPS.

1. Tap the WPS icon on the device’s screen. Here we take an Android phone for instance.

2. Within two minutes, press the WPS button on your router.

Close to

WLAN

On

TP-Link_2017

TP-Link_Home

My Home

My Network

Home Network

TP-Link_Network

TP-Link_Test

4G

POWER ON/OFF WAN 1 2 3 4 WPS/

RESET

WIFI

Картинка с сайта: manual-pdf.com

Chapter 3

Set Up Internet Connection

This chapter introduces how to connect your router to the internet. The router is

equipped with a web-based Quick Setup wizard. It has many ISP information built in,

automates many of the steps and verifies that those steps have been successfully

completed.

It contains the following sections:

• Log In to the Router

• Use Quick Setup Wizard

• Set Up IPv6 Tunnel

Картинка с сайта: manual-pdf.com

11

Chapter 3 Set Up Internet Connection

3. 1. Log In to the Router

The Quick Setup Wizard will guide you through the process to set up your router to

access the internet.

1. Set up the TCP/IP Protocol in Obtain an IP address automatically mode on your

computer.

2. Visit http://tplinkwifi.net, and create a password for future logins.

3. Follow the step-by-step instructions to set up your router to access the internet.

Note: If the login window does not appear, please refer to the FAQ section.

3. 2. Use Quick Setup Wizard

The Quick Setup Wizard will walk you through the process to set up your router.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Quick Setup, select your Time zone and click Next to continue.

3. Select the Operation Mode as needed and click Next. Then follow the screen

instructions to complete the configuration.

Note: The router can be configured with a primary WAN/3G/4G connection and a 3G/4G USB modem/WAN connection

as a backup solution to ensure “always on“ internet. In this case, select 3G/4G Router Mode with Ewan Backup or Wireless

Router Mode with 3G/4G Backup.

Картинка с сайта: manual-pdf.com

12

Chapter 3 Set Up Internet Connection

3. 3. Set Up IPv6 Tunnel

The IPv6 Tunnel feature helps you obtain IPv6 resources based on an IPv4 WAN

connection or vice versa.

IPv6 Tunnel is a transition mechanism that allows isolated IPv6 hosts and networks to

reach each other over IPv4-only infrastructure before IPv6 completely supplants IPv4.

It is a temporary solution for networks that do not support native dual-stack, where

both IPv6 and IPv4 run independently.

The router provides three tunneling mechanisms: 6to4, 6rd and DS-Lite. The way to set

up 6rd and DS-Lite tunnel are similar.

3. 3. 1. Use the Public IPv6 Tunnel Service-6to4

The 6to4 tunnel is a kind of public service. If there are any 6to4 servers on your network,

you can use this mechanism to access IPv6 service. If your ISP provides you with an

IPv4-only connection but you want to visit IPv6 websites, you can try to set up a 6to4

tunnel.

Set up the IPv6 tunnel though my ISP doesn’t provide me with

the tunnel service.

1. Visit http://tplinkwifi.net, and log in with the password you

set for the router.

2. Go to Advanced > Network > IPv6 Tunnel.

3. Tick the check box, select 6to4 as the tunneling mechanism

and select a WAN connection from the drop-down list, then

click Save.

Note: If there is no available WAN connection to choose, make sure you have

connected to the internet.

Now you can visit the IPv6 websites with the 6to4 tunnel.

Note: Still not being able to access IPv6 resources means that not any 6to4 public server was found in your network.

You can contact your ISP to sign up for IPv6 connection service.

I want to:

How can I

do that?

Done!

Картинка с сайта: manual-pdf.com

13

Chapter 3 Set Up Internet Connection

3. 3. 2. Specify the 6rd Tunnel with Parameters Provided by Your ISP

Specify the 6rd tunnel with the parameters provided by my 6rd

tunnel service provider.

1. Visit http://tplinkwifi.net, and log in with the passwod you set

for the router.

2. Go to Advanced > Network > IPv6 Tunnel.

3. Tick the check box, select 6rd as the tunneling mechanism

and select a WAN connection from the drop-down list.

4. According to the parameters provided by your ISP, choose

Auto or Manual. More parameters are needed if you choose

Manual.

5. Click Save.

Note:

If there is no available WAN connection to choose, make sure you have

connected to the internet and the connection type is not Bridge.

Now you can visit the IPv6 websites with the 6rd tunnel.

Tips: The way to set up DS-Lite tunnel is similar to that of 6rd tunnel. If you are provided with an IPv6-only WAN

connection and have signed up for DS-Lite tunnel service, specify the DS-Lite tunnel by referring to the steps above.

I want to:

How can I

do that?

How can I

do that?

Done!

Картинка с сайта: manual-pdf.com

Chapter 4

Guest Network

This function allows you to provide Wi-Fi access for guests without disclosing your

main network. When you have guests in your house, apartment, or workplace, you can

create a guest network for them. In addition, you can customize guest network options

to ensure network security and privacy.

It contains the following sections:

• Create a Network for Guests

• Customize Guest Network Options

Картинка с сайта: manual-pdf.com

15

Chapter 4 Guest Network

4. 1. Create a Network for Guests

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Guest Network. Locate the Wireless section.

3. Create a guest network as needed.

1 ) Tick the Enable Guest Network checkbox.

2 ) Customize the SSID. Don‘t select Hide SSID unless you want your guests to

manually input the SSID for guest network access.

3 ) Set Security to WPA/WPA2 Personal, keep the default Version and Encryption

values, and customize your own password.

4. Click Save. Now your guests can access your guest network using the SSID and

password you set!

Tips: To view guest network information, go to Advanced > Status and locate the Guest Network section.

4. 2. Customize Guest Network Options

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Guest Network. Locate the Settings section.

3. Customize guest network options as needed.

Картинка с сайта: manual-pdf.com

16

Chapter 4 Guest Network

• Allow Guests to Access Each Other

Tick this checkbox if you want to allow the wireless clients on your guest network

to communicate with each other via methods such as network neighbors and Ping.

• Allow Guests to Access My Local Network

Tick this checkbox if you want to allow the wireless clients on your guest network

to communicate with the devices connected to your router’s LAN ports or main

network via methods such as network neighbors and Ping.

• Allow Guests to Access My USB Storage Sharing

Tick this checkbox if you want to allow the wireless clients on your guest network to

access your files on the USB disk connected to your router.

• Enable guest network bandwidth control

Tick this checkbox if you want to apply the Bandwidth Control settings to the

wireless devices on your guest network .

4. Click Save. Now you can ensure network security and privacy!

Tips: To view guest network information, go to Advanced > Status and locate the Guest Network section.

Картинка с сайта: manual-pdf.com

Chapter 5

Parental Controls

This function allows you to block inappropriate, explicit and malicious websites, and

control access to specified websites at specified time.

Картинка с сайта: manual-pdf.com

18

Chapter 5 Parental Controls

Control the times of day my children or other home network

users are allowed to access the internet and even types of

websites they can visit.

For example, I want to allow my children’s devices (e.g. a computer

or a tablet) to access only www.tp-link.com and Wikipedia.org

from 18:00 (6PM) to 22:00 (10PM) at the weekend and not other

times.

1. Visit http://tplinkwifi.net, and log in with the password you

set for the router.

2. Go to Advanced > Parental Controls and enable Parental

Controls.

3. Click Add. And then Click Scan, and select the access device.

Or input the Device Name and MAC Address manually.

4. Click the icon to set the internet Access Time. Drag the

cursor over the appropriate cell(s) and click OK.

I want to:I want

How can I

do that?

Картинка с сайта: manual-pdf.com

19

Chapter 5 Parental Controls

5. Enter a Description for the entry, tick the Enable This Entry

checkbox, and then click OK.

6. Select Whitelist as the restriction policy.

Tips:

• With Blacklist selected, the controlled devices cannot access any websites

containing the specified keywords during the Internet Access Time period.

• With Whitelist selected, the controlled devices can only access websites containing

the specified keywords during the Internet Access Time period.

7. Click . Enter a website and click Save.

You can add up to 32 keywords for either Blacklist or Whitelist.

Below are some sample entries to allow access.

• For Whitelist: Enter a web address (e.g. wikipedia.org) to allow access

only to its related websites. If you wish to block all internet browsing

access, do not add any keyword to the Whitelist.

• For Blacklist: Specify a web address (e.g. wikipedia.org), a web address

keyword (e.g. wikipedia) or a domain suffix (eg. .edu or .org) to block

access only to the websites containing that keyword or suffix.

Картинка с сайта: manual-pdf.com

20

Chapter 5 Parental Controls

Now you can control your children’s internet access as needed.

Done!

Картинка с сайта: manual-pdf.com

Chapter 6

Bandwidth Control

This chapter introduces how to set bandwidth limits minimize the impact caused when

the connection is under heavy load.

It contains the following sections:

• Set Upstream and Downstream Bandwidth

• Controlling Rules

Картинка с сайта: manual-pdf.com

22

Chapter 6 Bandwidth Control

6. 1. Set Upstream and Downstream Bandwidth

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Bandwidth Control.

3. Enable Bandwidth Control and enter the Total Upstream Bandwidth and Total

Downstream Bandwidth.

4. Click Save.

6. 2. Controlling Rules

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Bandwidth Control.

3. Click Add and fill in the blanks.

Картинка с сайта: manual-pdf.com

23

Chapter 6 Bandwidth Control

• IP Range: Enter the IP range of your devices that you want to apply Bandwidth

Control to.

• Port Range: Enter the Port range of the protocols.

• Protocal: Select the protocols of services that you want to control.

• Priority: Select priority from 1 to 5. 1 means the highest priority.

• Upstream/Downstream: Enter the minimun and maxmium upstream/

downstream bandwidth you want to allocate.

4. Click Save.

Картинка с сайта: manual-pdf.com

Chapter 7

USB Settings

This chapter describes how to use the USB ports to share files, media and a printer

from the USB storage devices over your home network locally, or remotely through the

internet.

The router supports USB external flash drives, hard drives and USB printers.

It contains the following sections:

• Access the USB Storage Device

• Media Sharing

• Printer Sharing

Картинка с сайта: manual-pdf.com

25

Chapter 7 USB Settings

7. 1. Access the USB Storage Device

Insert your USB storage device into the router’s USB port and then access files stored

there locally or remotely.

Tips:

• If you use USB hubs, make sure no more than 4 devices are connected to the router.

• If the USB storage device requires using bundled external power, make sure the external power has been connected.

• If you use a USB hard drive, make sure its file system is FAT32 or NTFS.

• Before you physically disconnect a USB device from the router, safely remove it to avoid data damage: Go to Advanced

> USB Settings > Device Settings and click .

7. 1. 1. Access the USB Device Locally

Insert your USB storage device into the router’s USB port and then refer to the following

table to access files stored on your USB storage device.

Windows

computer

¾Method 1:

Go to Computer > Network, then click the Network Server Name

(TL-MR3420 by default) in the Computer section.

Note:

Operations in different systems are similar. Here we take Windows 8 as an example.

Картинка с сайта: manual-pdf.com

26

Chapter 7 USB Settings

Windows

computer

¾Method 2:

Open the Windows Explorer (or go to Computer) and type the server

address \\tplinkwifi.net or ftp://tplinkwifi.net in the address bar, then

press Enter.

Mac

1 ) Select Go > Connect to Server.

2 ) Type the server address smb://tplinkwifi.net.

3 ) Click Connect.

4 ) When prompted, select the Guest radio box. (If you have set up a

username and a password to deny anonymous access to the USB

disks, you should select the Registered User radio box. To learn how

to set up an account for the access, refer to To set up authentication

for data security:.)

Tablet Use a third-party app for network files management.

Tips: You can also access your USB disk by using your Network/Media Server Name as the server address. Refer to

To customize the address of the USB disk: to learn more.

7. 1. 2. Access the USB Device Remotely

You can access your USB disk outside the local area network. For example, you can:

Картинка с сайта: manual-pdf.com

27

Chapter 7 USB Settings

• Share photos and other large files with your friends without logging in to (and paying

for) a photo-sharing site or email system.

• Get a safe backup for the materials for a presentation.

• Remove the files on your camera’s memory card from time to time during the journey.

Note: If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), you cannot use this feature

because private addresses are not routed on the Internet.

Follow the steps below to configure remote access settings.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > USB Sharing > USB Storage Device.

3. Tick the FTP(via Internet) checkbox, and then click Save.

4. Refer to the following table to access your USB disk remotely.

Картинка с сайта: manual-pdf.com

28

Chapter 7 USB Settings

Computer

1 ) Open the Windows Explorer (or go to Computer, only for Windows

users) or open a web browser.

2 ) Type the server address in the address bar:

Type in ftp://<WAN IP address of the router>:<port number> (such

as ftp://59.40.2.243:21). If you have specified the domain name

of the router, you can also type in ftp://<domain name>:<port

number> (such as ftp://MyDomainName:21)

3 ) Press Enter on the keyboard.

4 ) Access with the username and password you set in To set up

authentication for data security:.

Tips:

You can also access the USB disk via a third-party app for network files management, which can

resume broken file transfers.

Tablet Use a third-party app for network files management.

Tips: Click Set Up a Dynamic DNS Service Account to learn how to set up a domain name for you router.

7. 1. 3. Customize Access Settings

By default, all the network clients can access all folders on your USB disk. You can

customize your sharing settings by setting a sharing account, sharing specific contents

and setting a new sharing address on the router’s web management page.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > USB Sharing > USB Storage Device.

¾To customize the address of the USB disk:

You can customize the server name and use the name to access your USB disk.

1. On the Sharing Settings part, make sure Network Neighborhood is ticked, and enter

a Network/Media Server Name as you like, such as MyShare, then click Save.

Картинка с сайта: manual-pdf.com

29

Chapter 7 USB Settings

2. Now you can access the USB disk by visiting \\MyShare (for Windows) or

smb://MyShare (for Mac).

¾To only share specific content:

1. Focus on the Folder Sharing section. Click the button to disable Share All, then click

Add to add a new sharing folder.

2. Select the Volume Name and Folder Path, then enter a Folder Name as you like.

3. Decide the way you share the folder:

Картинка с сайта: manual-pdf.com

30

Chapter 7 USB Settings

• Enable Authentication: Tick to enable authentication for this folder sharing, and

you will be required to log in to the Sharing Account to access the USB disk.

Refer to To set up authentication for data security: to learn more.

• Enable Write Access: If you tick this checkbox, network clients can modify this

folder.

• Enable Media Sharing: Tick to enable media sharing for this folder, and you can

view photos, play music and watch movies stored on the USB disk directly from

DLNA-supported devices. Click Media Sharing to learn more.

4. Click OK.

Tips: The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you

do not need to share.

¾To set up authentication for data security:

You can set up authentication for your USB device so that network clients will be

required to enter username and password when accessing the USB disk.

1. On the Sharing Account part, Choose Use Default Account or Use New Account.

The username and password are both admin for default account. If your choose

Use New Account, you have to customize the username and a password.

Note:

For Windows users, do not set the sharing username the same as the Windows username. Otherwise, Windows

credential mechanism may cause the following problems:

• If the sharing password is also the same as the Windows password, authentication will not work since the Windows

will automatically use its account information for USB access.

• If the sharing password is different from the Windows password, the Windows will be unable to remember your

credentials and you will always be required to enter the sharing password for USB access.

Картинка с сайта: manual-pdf.com

31

Chapter 7 USB Settings

2. Enable Authentication to apply the account you just set.

• If you leave Share All enabled, click the button to enable Authentication for all

folders.

• If Share All is disabled, enable Authentication for specific folders.

Note: Due to Windows credential mechanism, you might be unable to access the USB disk after changing Authentication

settings. Please log out from the Windows and try to access again. Or you can change the address of the USB disk by

referring to To customize the address of the USB disk:.

7. 2. Media Sharing

The feature of Media Sharing allows you to view photos, play music and watch movies

stored on the USB disk directly from DLNA-supported devices, such as your computer,

tablet and PS2/3/4.

1. When your USB disk is inseted into the router, your DLNA-supported devices (such

as your computer and pad) connected to the router can detect and play the media

files on the USB disks.

2. Refer to the following table for detailed instructions.

Картинка с сайта: manual-pdf.com

32

Chapter 7 USB Settings

Windows

Computer

• Go to Computer > Network, then click the Media Server Name (TL-MR3420

by default) in the Media Devices section.

Note:

Here we take Windows 8 as an example.

Tablet • Use a third-party DLNA-supported player.

7. 3. Printer Sharing

The feature of Printer Sharing helps you share a printer with different computers

connected to the router.

Note: Printers unlisted on this page may be incompatible with the router:

http://www.tp-link.com/common/compatible/print-server/.

1. Install the Driver of the Printer

Make sure you have installed the driver of the printer on each computer that needs

printer service.

If you do not have the driver, contact the printer manufacturer.

2. Connect the Printer

Cable a printer to the USB port with the USB cable. Wait several seconds until the

USB LED becomes solid on.

3. Install the TP-Link USB Printer Controller Utility

TP-Link USB Printer Controller Utility helps you access the shared printer. Download

and Install the utility on each computer that needs printer service.

1 ) Visit http://www.tp-link.com/app/usb/.

2 ) Click PC Utility (for Windows users) or Mac Utility to download the installation

file and uncompress it.

Картинка с сайта: manual-pdf.com

33

Chapter 7 USB Settings

3 ) Open the uncompressed folder, then click TP-Link USB Printer Controller Setup

(for Windows users) or TP-Link UDS Printer Controller Installer (for Mac users)

to install the utility.

4. Access the Printer

You should set the shared printer as Auto-Connect Printer on every computer that

needs printer service.

1 ) Double-click the icon on your desktop to launch the USB Printer Controller.

2 ) Highlight the printer you share.

Windows

Mac

3 ) Click the Auto-Connect for printing tab to pull down a list, then select Set Auto-

Connect Printer.

Windows

Картинка с сайта: manual-pdf.com

34

Chapter 7 USB Settings

Mac

4 ) Select the printer you share, then click Apply.

Windows

Mac

Картинка с сайта: manual-pdf.com

35

Chapter 7 USB Settings

5 ) You will see the printer marked as Auto-Connect Printer. Now you can print with

this printer.

Windows

Mac

Tips:

The Print Server also allows different clients to share the scan feature of MFPs (Multi-Function Printers). To scan

with TP-Link USB Printer Controller, right-click the printer and select Network Scanner. Then, a scanning window

will pop up. Finish the scanning process by following on-screen instructions.

Картинка с сайта: manual-pdf.com

Chapter 8

Network Security

This chapter guides you on how to protect your home network from cyber attacks

and unauthorized users by implementing these three network security functions. You

can protect your home network against DoS (Denial of Service) attacks from flooding

your network with server requests using DoS Protection, block or allow specific client

devices to access your network using Access Control, or you can prevent ARP spoofing

and ARP attacks using IP & MAC Binding.

It contains the following sections:

• Protect the Network from Cyber Attacks

• Service Filtering

• Access Control

• IP & MAC Binding

• Yandex DNS

Картинка с сайта: manual-pdf.com

37

Chapter 8 Network Security

8. 1. Protect the Network from Cyber Attacks

The SPI (Stateful Packet Inspection) Firewall and DoS (Denial of Service) Protection

protect the router from cyber attacks.

The SPI Firewall can prevent cyber attacks and validate the traffic that is passing

through the router based on the protocol. This function is enabled by default, and it’s

recommended to keep the default settings.

DoS Protection can protect your home network against DoS attacks from flooding your

network with server requests. Follow the steps below to configure DoS Protection.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Security > Firewall & DoS Protection.

3. Enable DoS Protection.

4. Set the level (Low, Middle or High) of protection for ICMP-FLOOD Attack Filtering,

UDP-FlOOD Attack Filtering and TCP-SYN-FLOOD Attack Filtering.

• ICMP-FLOOD Attack Filtering — Enable to prevent the ICMP (Internet Control

Message Protocol) flood attack.

• UDP-FlOOD Attack Filtering — Enable to prevent the UDP (User Datagram

Protocol) flood attack.

• TCP-SYN-FLOOD Attack Filtering — Enable to prevent the TCP-SYN (Transmission

Control Protocol-Synchronize) flood attack.

Tips: The level of protection is based on the number of traffic packets. The protection will be triggered

immediately when the number of packets exceeds the preset threshold value (the value can be set on DoS

Protection Level Settings), and the vicious host will be displayed in the Blocked DoS Host List.

5. Click Save.

Картинка с сайта: manual-pdf.com

38

Chapter 8 Network Security

8. 2. Service Filtering

Service Filtering is used to prevent certain users from accessing a specific service. It

can even block a user from accessing the internet.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Security > Service Filtering.

3. Enable Service Filtering.

4. Click Add.

5. Select a service type from the drop-down list and the corresponding parameters will

be automatically filled in. Select Custom if your desired service type is not listed and

enter the corresponding parameters.

6. Specify the IP address(es) this filtering rule will be applied to.

7. Click Save.

8. 3. Access Control

Access Control is used to block or allow specific client devices to access your network

(via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed

devices (Whitelist).

Картинка с сайта: manual-pdf.com

39

Chapter 8 Network Security

Block or allow specific client devices to access my network (via

wired or wireless).

1. Visit http://tplinkwifi.net, and log in with the password you

set for the router.

2. Go to Advanced > Security > Access Control.

3. Enable Access Control.

4. Select the access mode to either block (recommended) or

allow the device(s) in the list.

To block specific device(s):

1 ) Select Blacklist and click Save.

2 ) Select the device(s) to be blocked in the Online Devices

table by ticking the checkbox(es).

3 ) Click Block above the Online Devices table. The selected

devices will be added to Devices in Blacklist automatically.

To allow specific device(s):

1 ) Select Whitelist and click Save.

2 ) Click Add in the Devices in Whitelist section. Enter the

Device Name and MAC Address (You can copy and paste

I want to:

How can I

do that?

Картинка с сайта: manual-pdf.com

40

Chapter 8 Network Security

the information from the Online Devices list if the device

is connected to your network).

3 ) Click OK.

Now you can block or allow specific client devices to access your

network (via wired or wireless) using the Blacklist or Whitelist.

8. 4. IP & MAC Binding

IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind

network device’s IP address to its MAC address. This will prevent ARP Spoofing and

other ARP attacks by denying network access to a device with matching IP address in

the Binding list, but unrecognized MAC address.

Prevent ARP spoofing and ARP attacks.

1. Visit http://tplinkwifi.net, and log in with the password you

set for the router.

2. Go to Advanced > Security > IP & MAC Binding.

3. Enable IP & MAC Binding.

4. Bind your device(s) according to your need.

To bind the connected device(s):

Click to add the corresponding device to the Binding List.

To bind the unconnected device:

1 ) Click Add in the Binding List section.

Done!

I want to:

How can I

do that?

Картинка с сайта: manual-pdf.com

41

Chapter 8 Network Security

2 ) Enter the MAC address and IP address that you want to

bind.

3 ) Tick the Enable This Entry checkbox and click Save.

Now you don’t need to worry about ARP spoofing and ARP

attacks!

8. 5. Yandex DNS

Yandex DNS filter will secure your devices from malicious websites and will restrict

adult websites for your children devices. You can configure a general filtering rule for all

devices or a separate one for certain devices.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Security > Yandex DNS.

3. Enable Yandex DNS. Select Disable, Basic, Safe or Child for the Enable Yandex DNS

for all devices.

Note: If Disable is selected, set Yandex DNS rules for certain devices.

4. Click Save.

¾To set a Yandex DNS rule for a certain device:

1. Click Add.

Done!

Картинка с сайта: manual-pdf.com

42

Chapter 8 Network Security

2. Click Scan to find a connected device you want to apply this rule to. You can also

maunally enter the MAC address of the device if it’s currently disconnected from the

router.

3. Select a Control Mode and enter a description for this rule.

4. Click Save.

Картинка с сайта: manual-pdf.com

Chapter 9

NAT Forwarding

The router’s NAT (Network Address Translation) feature makes devices on the LAN use

the same public IP address to communicate with devices on the internet, which protects

the local network by hiding IP addresses of the devices. However, it also brings about

the problem that an external host cannot initiatively communicate with a specified

device on the local network.

With the forwarding feature the router can penetrate the isolation of NAT and allows

devices on the internet to initiatively communicate with devices on the local network,

thus realizing some special functions.

The TP-Link router supports four forwarding rules. If two or more rules are set, the

priority of implementation from high to low is Virtual Servers, Port Triggering, UPNP and

DMZ.

It contains the following sections:

• Share Local Resources on the Internet by Virtual Servers

• Open Ports Dynamically by Port Triggering

• Make Applications Free from Port Restriction by DMZ

• Make Xbox Online Games Run Smoothly by UPnP

Картинка с сайта: manual-pdf.com

44

Chapter 9 NAT Forwarding

9. 1. Share Local Resources on the Internet by Virtual

Servers

When you build up a server on the local network and want to share it on the internet,

Virtual Servers can realize the service and provide it to internet users. At the same time

Virtual Servers can keep the local network safe as other services are still invisible from

the internet.

Virtual Servers can be used for setting up public services on your local network, such as

HTTP, FTP, DNS, POP3/SMTP and Telnet. Different services use different service ports.

Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and port

110 in POP3 service. Please verify the service port number before the configuration.

Share my personal website I’ve built in local network with my

friends through the internet.

For example, the personal website has been built on my home

PC (192.168.0.100). I hope that my friends on the internet can

visit my website in some way. The PC is connected to the router

with the WAN IP address 218.18.232.154.

Personal Website

Home

Router

WAN: 218.18.232.154LAN

1. Assign a static IP address to your PC, for example

192.168.1.100.

2. Visit http://tplinkwifi.net, and log in with the password you

set for the router.

3. Go to Advanced > NAT Forwarding > Virtual Servers.

4. Click Add. Click View Existing Services and select HTTP. The

External Port, Internal Port and Protocol will be automatically

filled in. Enter the PC’s IP address 192.168.1.100 in the

Internal IP field.

5. Click OK.

I want to:

How can I

do that?

INTERNET

Картинка с сайта: manual-pdf.com

45

Chapter 9 NAT Forwarding

Tips:

• It is recommended to keep the default settings of Internal Port and Protocol if you are

not clear about which port and protocol to use.

• If the service you want to use is not in the Service Type, you can enter the

corresponding parameters manually. You should verify the port number that the

service needs.

• You can add multiple virtual server rules if you want to provide several services in a

router. Please note that the External Port should not be overlapped.

Users on the internet can enter http:// WAN IP (in this example:

http:// 218.18.232.154) to visit your personal website.

Tips:

• The WAN IP should be a public IP address. For the WAN IP is assigned dynamically by

the ISP, it is recommended to apply and register a domain name for the WAN referring

to Set Up a Dynamic DNS Service Account. Then users on the internet can use

http:// domain name to visit the website.

• If you have changed the default External Port, you should use

http:// WAN IP: External Port or http:// domain name: External Port to visit the website.

9. 2. Open Ports Dynamically by Port Triggering

Port Triggering can specify a triggering port and its corresponding external ports.

When a host on the local network initiates a connection to the triggering port, all the

external ports will be opened for subsequent connections. The router can record the

IP address of the host. When the data from the internet return to the external ports, the

router can forward them to the corresponding host. Port Triggering is mainly applied to

online games, VoIPs, video players and common applications including MSN Gaming

Zone, Dialpad and Quick Time 4 players, etc.

Follow the steps below to configure the Port Triggering rules:

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > NAT Forwarding > Port Triggering and click Add.

Done!

Картинка с сайта: manual-pdf.com

46

Chapter 9 NAT Forwarding

3. Click View Existing Applications, and select the desired application. The Triggering

Port, External Port and Protocol will be automatically filled in. The following picture

takes application MSN Gaming Zone as an example.

4. Click OK.

Tips:

• You can add multiple port triggering rules according to your network need.

• The triggering ports can not be overlapped.

• If the application you need is not listed in the Existing Applications list, please enter the parameters manually. You

should verify the external ports the application uses first and enter them into External Port field according to the

format the page displays.

9. 3. Make Applications Free from Port Restriction

by DMZ

When a PC is set to be a DMZ (Demilitarized Zone) host on the local network, it is totally

exposed to the internet, which can realize the unlimited bidirectional communication

between internal hosts and external hosts. The DMZ host becomes a virtual server with

all ports opened. When you are not clear about which ports to open in some special

applications, such as IP camera and database software, you can set the PC to be a DMZ

host.

Картинка с сайта: manual-pdf.com

47

Chapter 9 NAT Forwarding

Note: When DMZ is enabled, the DMZ host is totally exposed to the internet, which may bring some potential safety

hazards. If DMZ is not in use, please disable it in time.

Make the home PC join the internet online game without port

restriction.

For example, due to some port restriction, when playing the

online games, you can login normally but cannot join a team with

other players. To solve this problem, set your PC as a DMZ host

with all ports open.

1. Assign a static IP address to your PC, for example

192.168.1.100.

2. Visit http://tplinkwifi.net, and log in with the password you

set for the router.

3. Go to Advanced > NAT Forwarding > DMZ and select Enable

DMZ.

4. Enter the IP address 192.168.1.100 in the DMZ Host IP

Address filed.

5. Click Save.

The configuration is completed. You’ve set your PC to a DMZ

host and now you can make a team to game with other players.

9. 4. Make Xbox Online Games Run Smoothly by

UPnP

The UPnP (Universal Plug and Play) protocol allows applications or host devices

to automatically find the front—end NAT device and send request to it to open the

corresponding ports. With UPnP enabled, the applications or host devices on the

local network and the internet can freely communicate with each other thus realizing

the seamless connection of the network. You may need to enable the UPnP if you

want to use applications for multiplayer gaming, peer-to-peer connections, real-time

communication (such as VoIP or telephone conference) or remote assistance, etc.

I want to:

How can I

do that?

Done!

Картинка с сайта: manual-pdf.com

48

Chapter 9 NAT Forwarding

Tips:

• UPnP is enabled by default in this router.

• Only the application supporting UPnP protocol can use this feature.

• UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc. Some of

operating system need to install the UPnP components).

For example, when you connect your Xbox to the router which has connected to

the internet to play online games, UPnP will send request to the router to open the

corresponding ports allowing the following data penetrating the NAT to transmit.

Therefore, you can play Xbox online games without a hitch.

XBOX Router

Internet

LAN WAN

If necessary, you can follow the steps to change the status of UPnP.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > NAT Forwarding > UPnP and toggle on or off according to your

needs.

Картинка с сайта: manual-pdf.com

Chapter 10

VPN

The VPN (Virtual Private Networking) feature allows you to access your home network

in a secured way through internet when you are out of home.

Картинка с сайта: manual-pdf.com

50

Chapter 10 VPN

With IPSec VPN, you can access the network securely when out of home. To use the VPN

Service, you need to configure Dynamic DNS Service or assign a static IP address for

the router’s WAN port. And the System Time should be synchronized with the internet.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > VPN > IPSec VPN.

3. Enable Dead Peer Detection.

4. Click Add and enter correspond parameters.

• IPSec Connection Name: Enter a name for the IPSec VPN connection.

• Remote IPSec Gateway (URL): Enter the destination gateway IP address which is the

public WAN IP or domain name of the remote VPN server endpoint.

Картинка с сайта: manual-pdf.com

51

Chapter 10 VPN

• Tunnel access from local IP addresses: Select Subnet Address if you want the whole

LAN to join the VPN network, or select Single Address if you want a single IP to join

the VPN network.

• IP Address for VPN: Enter the IP address of your LAN.

• Subnet Mask: Enter the subnet mask of your LAN.

• Tunnel access from remote IP addresses: Select Subnet Address if you want the

whole remote LAN to join the VPN network, or select Single Address if you want a

single IP to join the VPN network.

• IP Address for VPN: Enter the IP address of the remote LAN.

• IP Subnet Mask: Enter the subnet mask of the remote LAN.

• Key Exchange Method: Select Auto (IKE) or Manual to be used to authenticate IPSec

peers.

• Authentication Method: Select Pre-Shared Key (recommended).

• Pre-Shared Key: Create a pre-shared key to be used for authentication.

• Perfect Forward Secrecy: Select Enable or Disable as an additional security protocol

for the pre-shared key.

You can configure the advanced settings as needed. It’s recommended to keep the

default values. If you want to change these settings, make sure that both VPN server

endpoints use the same Encryption Algorithm, Integrity Algorithm, Diffie-Hellman

Group and Key Lifetime in both phase1 and phase2.

5. Click Save.

Картинка с сайта: manual-pdf.com

Chapter 11

Customize Your Network

Settings

This chapter guides you on how to configure advanced network features.

It contains the following sections:

• Change the LAN Settings

• Specify DHCP Server Settings

• Set Up a Dynamic DNS Service Account

• Create Static Routes

• Specify Wireless Settings

• Use WPS for Wireless Connection

• Schedule Your Wireless Function

Картинка с сайта: manual-pdf.com

53

Chapter 11 Customize Your Network Settings

11. 1. Change the LAN Settings

The router is preset with a default LAN IP 192.168.1.1, which you can use to log in to

its web management page. The LAN IP address together with the Subnet Mask also

defines the subnet that the connected devices are on. If the IP address conflicts with

another device on your local network or your network requires a specific IP subnet, you

can change it.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Network > LAN Settings.

3. Type in a new IP Address appropriate to your needs. And leave the Subnet Mask as

the default settings.

4. Click Save.

Note: If you have set the Virtual Server, DMZ or DHCP address reservation, and the new LAN IP address is not in the

same subnet with the old one, then you should reconfigure these features.

11. 2. Specify DHCP Server Settings

By default, the DHCP (Dynamic Host Configuration Protocol) Server is enabled and

the router acts as a DHCP server; it dynamically assigns TCP/IP parameters to client

devices from the IP Address Pool. You can change the settings of the DHCP Server if

necessary, and you can reserve LAN IP addresses for specified client devices.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Network > LAN Settings.

¾To specify the IP address that the router assigns:

Картинка с сайта: manual-pdf.com

54

Chapter 11 Customize Your Network Settings

1. Enable DHCP Server.

2. Enter the starting and ending IP addresses in the IP Address Pool.

3. Enter other parameters if the ISP offers. The Default Gateway is automatically filled in

and is the same as the LAN IP address of the router.

4. Click Save.

¾To reserve an IP address for a specified client device:

1. Click Add in the Address Reservation section.

2. Click Scan to find a connected device you want to apply this rule to. You can also

maunally enter the MAC address of the device if it’s currently disconnected from the

router.

3. Enter the IP address to reserve for the client device..

4. Tick the Enable This Entry checkbox and click Save.

Картинка с сайта: manual-pdf.com

55

Chapter 11 Customize Your Network Settings

11. 3. Set Up a Dynamic DNS Service Account

Most ISPs assign a dynamic IP address to the router and you can use this IP address

to access your router remotely. However, the IP address can change from time to time

and you don’t know when it changes. In this case, you might apply the DDNS (Dynamic

Domain Name Server) feature on the router to allow you and your friends to access your

router and local servers (FTP, HTTP, etc.) using a domain name without checking and

remembering the IP address.

Note: DDNS does not work if the ISP assigns a private WAN IP address (such as 192.168.1.x) to the router.

1. Visit http://tplinkwifi.net, and log in with the password you set for the router.

2. Go to Advanced > Network > Dynamic DNS.

3. Select the DDNS Service Provider: NO-IP or DynDNS. If you don’t have a DDNS

account, you have to register first by clicking Go to register. Then enter the username,

password and domain name of your account.

4. Click Log In and Save.

Tips: If you want to use a new DDNS account, please click Logout first, and then log in with a new account.

11. 4. Create Static Routes

Static routing is a form of routing that is configured manually by a network administrator

or a user by adding entries into a routing table. The manually-configured routing

information guides the router in forwarding data packets to the specific destination.

Visit multiple networks and servers at the same time.

For example, in a small office, my PC can surf the internet through

Router A, but I also want to visit my company’s network. Now I

have a switch and Router B. I connect the devices as shown in

the following figure so that the physical connection between my

PC and my company’s server is established. To surf the internet

and visit my company’s network at the same time, I need to

I want to: