TL-WR542G 54M Wireless Router

Rev: 1.0.2 1910010065

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright 2008 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are

FCC STATEMENT

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/ TV technician for help.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: 1) This device may not cause harmful interference. 1) This device must accept any interference received, including interference that may cause undesired operation.
FCC RF Radiation Exposure Statement
This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This device and its antenna must not be co-located or operating in conjunction with any other antenna or transmitter. To comply with FCC RF exposure compliance requirements, this grant is applicable to only Mobile Configurations. The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be
co-located or operating in conjunction with any other antenna or transmitter.

CE Mark Warning

This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.

National Restrictions

2400.0-2483.5 MHz

Country Bulgaria

Restriction
Reason/remark General authorization required for outdoor use and public service

France

Outdoor use limited to 10 mW e.i.r.p. within the band 2454-2483.5 MHz
Military Radiolocation use. Refarming of the 2.4 GHz band has been ongoing in recent years to allow current relaxed regulation. Full implementation planned 2012
If used outside of own premises, general authorization is required

Luxembourg

General authorization required for network and service supply(not for spectrum)

Norway

Implemented
This subsection does not apply for the geographical area within a radius of 20 km from the centre of Ny-lesund

Russian Federation

Only for indoor applications
NoteIts not used outdoors in France.
Package Contents The following contents should be found in your box: One TL-WR542G 54Mbps Wireless Router One AC power Adapter for TL-WR542G 54Mbps Wireless Router Quick Installation Guide One Resource CD for TL-WR542G 54Mbps Wireless Router, including:
This Guide Other Helpful Information
Note: Make sure that the package contains the above items. If any of the listed items are damaged or missing, please contact with your distributor.

Conventions

The router or TL-WR542G mentioned in this guide stands for TL-WR542G 54Mbps Wireless Router without any explanation.

CONTENTS

Chapter 1.

1.1 1.2 1.3

Introduction...1
Overview of the Router... 1 Features.... 1 Panel Layout.... 2 The Front Panel.... 2 The Rear Panel... 3

1.3.1 1.3.2

Chapter 2.
2.1 2.2 2.3 3.1 3.2 4.1 4.2 4.3 4.4

Connecting the Router..5

System Requirements... 5 Installation Environment Requirements... 5 Connecting the Router... 5

Chapter 3.

Quick Installation Guide...7
TCP/IP configuration.... 7 Quick Installation Guide.... 9

Chapter 4.

Configuring the Router...12
Login.... 12 Status... 13 Quick Setup.... 14 Network.... 15 LAN.... 15 WAN... 15 MAC Clone... 27 Wireless Settings... 28 MAC Filtering.... 33 Wireless Statistics.... 36 DHCP Settings.... 37 DHCP Clients List.... 38 Address Reservation... 39 Virtual Servers... 40 Port Triggering.... 42 DMZ... 44 UPnP.... 45 Firewall.... 46 IP Address Filtering... 47 Domain Filtering... 50
4.4.1 4.4.2 4.4.3 4.5 4.5.1 4.5.2 4.5.3 4.6 4.6.1 4.6.2 4.6.3 4.7 4.7.1 4.7.2 4.7.3 4.7.4 4.8 4.8.1 4.8.2 4.8.3

Wireless.... 28

DHCP... 37

Forwarding.... 40

Security.... 46
4.8.4 4.8.5 4.8.6 4.9 4.9.1 4.9.2 4.10 4.11
MAC Filtering.... 51 Remote Management.... 53 Advanced Security... 54 Binding Setting.... 56 ARP List.... 58
IP & MAC Binding Setting.... 56
Static Routing... 59 DDNS... 60 Dyndns.org DDNS.... 60 Oray.net DDNS... 61 Comexe.cn DDNS.... 61 Time... 63 Firmware... 64 Factory Defaults... 65 Backup and Restore... 65 Reboot.... 66 Password.... 66 Log.... 67 Statistics.... 68
4.11.1 4.11.2 4.11.3 4.12 4.12.1 4.12.2 4.12.3 4.12.4 4.12.5 4.12.6 4.12.7 4.12.8

System Tools... 62

Appendix A: FAQ....70 Appendix B: Configuring the PC...75 Appendix C: Specifications..79 Appendix D: Glossary...80

TL-WR542G

54Mbps Wireless Router User Guide

Chapter 1. Introduction

Thank you for choosing TL-WR542G 54Mbps Wireless Router.
1.1 Overview of the Router
The TL-WR542G 54Mbps Wireless Router integrates 4-port Switch, Firewall, NAT-router and Wireless AP. Its design is dedicated to Small Office/Home Office (SOHO) wireless network solutions. The TL-WR542G 54Mbps Wireless Router will allow you to connect your network wirelessly better than ever, sharing Internet Access, files and fun, easily and securely. In the most attentive wireless security, the TL-WR542G 54Mbps Wireless Router provides multiple protection measures. It can be set to turn off wireless network name (SSID) broadcast so that only stations that have the SSID can be connected. The router provides wireless LAN 64/128/152-bit WEP encryption security, and WPA/WPA2 and WPA-PSK/WPA2-PSK authentication, as well as TKIP/AES encryption security. It also supports VPN pass-through for sensitive data secure transmission. The TL-WR542G 54Mbps Wireless Router complies with the IEEE 802.11g and IEEE 802.11b standards so that the data transmission rate is up to 54Mbps. It adopts 2x to 3x eXtended Range WLAN transmission technology so that the transmission distance is 2-3 times of traditional IEEE 802.11g and IEEE 802.11b solutions, up to a distance of 855.36m tested in China. The transmission range is extended to 4-9 times. It is compatible with all IEEE 802.11g and IEEE 802.11b products. The TL-WR542G 54Mbps Wireless Router provides flexible access control so that parents or network administrators can establish restricted access policies for children or staff. It has built-in NAT and DHCP server supporting static IP address distributing. It also supports Virtual Server and DMZ host for Port Triggering needs, and remote management and log so that network administrators can manage and monitor the network in real time. This device supports Bridge mode which can make two APs communicate with each other wirelessly. The TL-WR542G 54Mbps Wireless Router is easy-to-manage. Quick Setup is supported and friendly help messages are provided for every step. So you can configure it quickly and share Internet access, files and fun.

LAN 1,2,3,4:

Four 10/100Mbps RJ45 LAN ports for connecting the router to the local PC(s)
This WAN port is where you will connect the cable/DSL Modem, or Ethernet
Reset button: There are two ways to reset the router's factory defaults: 1) Use the Factory Defaults function on System Tools -> Factory Defaults page in the router's Web-based Utility. 2) Use the Factory Default Reset button: First, turn off the router's power. Second, press and hold the default reset button then turn on the router's power, until the SYS LED lights up (about 3 seconds). Last, release the reset button and wait for the router to reboot. Note: Ensure the router is powered on before it restarts completely. Wireless antenna
Figure 1-2 Rear Panel sketch
Chapter 2. Connecting the Router

2.1 System Requirements

Broadband Internet Access Service (DSL/Cable/Ethernet) One DSL/Cable modem that has an RJ45 connector (you do not need it if you connect the router to the Ethernet) Each PC in the LAN needs a working Ethernet Adapter and an Ethernet cable with RJ45 connectors TCP/IP protocol must be installed on each PC Web browser, such as Microsoft Internet Explorer 5.0 or later, Netscape Navigator 6.0 or later
2.2 Installation Environment Requirements
Do not place in direct sunlight or near a heater or heating vent Do not cluttered or crowded. There should be at least 2 inches (5 cm) of clear space on all sides of the router Well ventilated (especially if it is in a closet) Operating temperature: 0~40 (32~104) Operating Humidity: 10%~90%RH, Non-condensing
2.3 Connecting the Router
Before you install the router, you should connect your PC to the Internet through your broadband service successfully. If there is any problem, please contact your ISP. After that, please install the router according to the following steps. Don't forget to pull out the power plug and keep your hands dry. 1. 2. Power off your PC, Cable/DSL Modem, and the router. Locate an optimum location for the router. The best place is usually near the center of the area in which your PC will connect wirelessly. The place must accord with the Installation

Figure 4-12

PPTP Settings
User Name/Password - Enter the User Name and Password provided by your ISP. These fields are case-sensitive. Dynamic IP/ Static IP Choose either as you are given by your ISP and enter the ISPs IP address or the domain name. If you choose static IP and enter the domain name, you should also enter the DNS assigned by your ISP. And click the Save button. Click the Connect button to connect immediately. Click the Disconnect button to disconnect immediately. Connect on Demand - You can configure the router to disconnect from your Internet connection after a specified period of inactivity (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the router to automatically re-establish your connection as soon as you attempt to access the Internet again. If you wish to activate Connect on Demand, click the radio button. If you want your 26
Internet connection to remain active at all times, enter 0 in the Max Idle Time field. Otherwise, enter the number of minutes you want to have elapsed before your Internet connection terminates. Caution: Sometimes the connection cannot be disconnected although you specify a time to Max Idle Time, since some applications are visiting the Internet continually in the background. Connect Automatically - Connect automatically after the router is disconnected. To use this option, click the radio button. Connect Manually - You can configure the router to make it connect or disconnect manually. After a specified period of inactivity (Max Idle Time), the router will disconnect from your Internet connection, and you will not be able to re-establish your connection automatically as soon as you attempt to access the Internet again. To use this option, click the radio button. If you want your Internet connection to remain active at all times, enter "0" in the Max Idle Time field. Otherwise, enter the number in minutes that you wish to have the Internet connecting last unless a new link is requested. Caution: Sometimes the connection cannot be disconnected although you specify a time to Max Idle Time, since some applications are visiting the Internet continually in the background.

WEP - Select WEP authentication type based on 802.11 authentications. WPA-PSK/WPA2-PSK - Select WPA/WPA2 authentication type based on pre-shared passphrase.
WPA /WPA2 - Select WPA/WPA2 authentication type based on Radius Server.
Authentication Options - You can select one of the following authentication options:
When you select WEP for authentication type you can select the following authentication options:
Automatic - Select Shared Key or Open System authentication type automatically based on the wireless station request.
Shared Key - Select 802.11 Shared Key authentication. Open System - Select 802.11 Open System authentication. When you select WPA-PSK/WPA2-PSK for authentication type you can select Automatic, WPA PSK or WPA2-PSK as authentication options.
When you select WPA/WPA2 as an authentication type you can select Automatic WPA or WPA2 as authentication option.
WEP Key Format - You can select ASCII or Hexadecimal format. ASCII Code Format stands for any combination of keyboard characters in the specified length. Hexadecimal 31
format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. WEP Key settings - Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key radio button. These values must be identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit) for encryption. "Disabled" means the WEP key entry is invalid.
For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 5 ASCII characters.
For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 13 ASCII characters.
For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 16 ASCII characters.
Encryption - When you select WPA-PSK/WPA2-PSK or WPA/WPA2 for Authentication Type you can select Automatic, TKIP or AES as Encryptions.
Figure 4-16 WPA-PSK/WPA2-PSK WPA-PSK/WPA2-PSK Passphrase - You can enter a WPA or WPA2 passphrase between 8 and 63 characters long. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 seconds or from 30 seconds and up, 1-29 seconds are not usable figures. Enter 0 to disable the update.
Figure 4-17 WPA/WPA2 Radius Server IP - Enter the IP address of the Radius Server Radius Port - Enter the port number that the radius service used. Radius Password - Enter the password for the Radius Server. Be sure to click the Save button to save your settings on this page. Note: The router will reboot automatically after you click save.

pull-down list, enter 2F34D20BE2E54B326C5476586A in the WEP Key field and select Enabled in the Status pull-down list. Click the Save and the Return button. The filtering rules that configured should be similar to the following list:
Note: a) If you select the radio button Allow the stations not specified by any enabled entries in the list to access for Filtering Rules, the wireless station B will still not be able to access the router, however, other wireless stations that are not in the list will be able to access the router. b) If you enable the function and select the Deny the stations not specified by any enabled entries in the list to access for Filtering Rules, and there are not any enable entries in the list, thus, no wireless stations can access the router.
4.5.3 Wireless Statistics
This page shows MAC Address, Current Status, Received Packets and Sent Packets for each connected wireless station.
Figure 4-20 The router attached wireless stations MAC Address - The connected wireless station's MAC address Current Status - The connected wireless station's running status, one of STA-AUTH / STA-ASSOC / AP-UP / WPA / WPA-PSK /WPA2/WPA2-PSK/None Received Packets - Packets received by the station Sent Packets - Packets sent by the station You cannot change any of the values on this page. To update this page and to show the current connected wireless stations, click on the Refresh button. If the numbers of connected wireless stations go beyond one page, click the Next button to go to the next page and click the Previous button to return the previous page. 36
Note: This page will be refreshed automatically every 5 seconds.

4.6 DHCP

Figure 4-21 The DHCP menu There are three submenus under the DHCP menu (shown in Figure 4-21): DHCP Settings, DHCP Clients List and Address Reservation. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below.

4.6.1 DHCP Settings

The router is set up by default as a DHCP (Dynamic Host Configuration Protocol) server, which provides the TCP/IP configuration for all the PC(s) that are connected to the router on the LAN. The DHCP Server can be configured on the page (shown in Figure 4-22):

Figure 4-22 DHCP Settings DHCP Server - Enable or Disable the DHCP server. If you disable the Server, you must have another DHCP server within your network or else you must manually configure the computer. Start IP Address - This field specifies the first of the addresses in the IP address pool. 192.168.1.100 is the default start address. End IP Address - This field specifies the last of the addresses in the IP address pool. 37
TL-WR542G 192.168.1.199 is the default end address.
Address Lease Time - The Address Lease Time is the amount of time in which a network user will be allowed connection to the router with their current dynamic IP Address. Enter the amount of time, in minutes. The user will be "leased" this dynamic IP Address. The range of the time is 1 ~ 2880 minutes. The default value is 120 minutes. Default Gateway - (Optional.) Suggest to input the IP address of the LAN port of the router, default value is 192.168.1.1 Default Domain - (Optional.) Input the domain name of your network. Primary DNS - (Optional.) Input the DNS IP address provided by your ISP. Or consult your ISP. Secondary DNS - (Optional.) Input the IP address of another DNS server if your ISP provides two DNS servers. Note: To use the DHCP server function of the router, you must configure all computers on the LAN as "Obtain an IP Address automatically" mode. This function will take effect until the router reboots.

4.6.2 DHCP Clients List

This page shows Client Name, MAC Address, Assigned IP and Lease Time for each DHCP Client attached to the router (Figure 4-23):
Figure 4-23 DHCP Clients List Index - The index of the DHCP Client Client Name - The name of the DHCP client MAC Address - The MAC address of the DHCP client Assigned IP - The IP address that the router has allocated to the DHCP client. Lease Time - The time of the DHCP client leased. Before the time is up, DHCP client will request to renew the lease automatically.
You cannot change any of the values on this page. To update this page and to show the current attached devices, click on the Refresh button.
4.6.3 Address Reservation
When you specify a reserved IP address for a PC on the LAN, that PC will always receive the same IP address each time when it accesses the DHCP server. Reserved IP addresses should be assigned to servers that require permanent IP settings. This page is used for address reservation (shown in Figure 4-24).
Figure 4-24 Address Reservation MAC Address - The MAC address of the PC of which you want to reserve IP address. Assigned IP Address - The IP address of the router reserved. Status - The status of this entry either Enabled or Disabled.

To Reserve IP addresses: 1. 2. Click the Add New button. (Pop-up Figure 4-25) Enter the MAC address (The format for the MAC Address is XX-XX-XX-XX-XX-XX.) and IP address in dotted-decimal notation of the computer you wish to add. 3. Click the Save button when finished.
Figure 4-25 Add or Modify an Address Reservation Entry To modify or delete an existing entry: 39

TL-WR542G 1.

Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete.
Modify the information. Click the Save button.
Click the Enable All button to make all entries enabled Click the Disabled All button to make all entries disabled. Click the Delete All button to delete all entries Click the Next button to go to the next page and Click the Previous button to return the previous page. Note: The function won't take effect until the router reboots.

4.7 Forwarding

Figure 4-26 The Forwarding menu There are four submenus under the Forwarding menu (shown in Figure 4-26): Virtual Servers, Port Triggering, DMZ and UPnP. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below.

4.7.1 Virtual Servers

Virtual servers can be used for setting up public services on your LAN, such as DNS, Email and FTP. A virtual server is defined as a service port, and all requests from the Internet to this service port will be redirected to the computer specified by the server IP. Any PC that was used for a virtual server must have a static or reserved IP Address because its IP Address may change when using the DHCP function. You can set up virtual servers on this page, shown in Figure 4-27:
Figure 4-27 Virtual Servers Service Port - The numbers of External Ports. You can type a service port or a range of service ports (the format is XXX YYY, XXX is the start port, YYY is the end port). IP Address - The IP Address of the PC providing the service application. Protocol - The protocol used for this application, either TCP, UDP, or All (all protocols supported by the router). Status - The status of this entry either Enabled or Disabled. To setup a virtual server entry: 1. 2. Click the Add New button. (pop-up Figure 4-28) Select the service you want to use from the Common Service Port list. If the Common Service Port list does not have the service that you want to use, type the number of the service port or service port range in the Service Port box. 3. 4. 5. 6. Type the IP Address of the computer in the Server IP Address box. Select the protocol used for this application, either TCP or UDP, or All. Select the Enable checkbox to enable the virtual server. Click the Save button.

4.8.1 Firewall

Using the Firewall page (shown in Figure 4-34), you can turn the general firewall switch on or off. The default setting for the switch is off. If the general firewall switch is off, even if IP Address Filtering, DNS Filtering and MAC Filtering are enabled, their settings are ineffective.
Figure 4-34 Firewall Settings Enable Firewall - the general firewall switch is on or off. Enable IP Address Filtering - set IP Address Filtering is enabled or disabled. There are two default filtering rules of IP Address Filtering, either Allow or Deny passing through the router. Enable Domain Filtering - set Domain Filtering is enabled or disabled. Enable MAC Filtering - set MAC Address Filtering is enabled or disabled. You can select the default filtering rules of MAC Address Filtering, either Allow or Deny accessing the router.
4.8.2 IP Address Filtering
The IP address Filtering feature allows you to control Internet Access by specific users on your LAN based on their IP addresses. The IP address filtering is set on this page, Figure 4-35:
Figure 4-35 IP address Filtering To disable the IP Address Filtering feature, keep the default setting, Disabled. To set up an IP Address Filtering entry, click Enable Firewall and Enable IP Address Filtering on the Firewall page, and click the Add New button. The page "Add or Modify an IP Address Filtering entry" will appear shown in Figure 4-36:
Figure 4-36 Add or Modify an IP Address Filtering Entry To create or modify an IP Address Filtering entry, please follow these instructions: 1. Effective Time - Enter a range of time in HHMM format, which point to the range time for the entry to take effect. For example, 0803 - 1705, the entry will take effect from 08:03 to 17:05. 2. LAN IP Address - Enter a LAN IP Address or a range of LAN IP addresses in the field, in dotted-decimal notation format. For example, 192.168.1.20 - 192.168.1.30. Keep the field open, which means all LAN IP Addresses have been put into the field. 3. LAN Port - Enter a LAN Port or a range of LAN ports in the field. For example, 1030 - 2000. 48
Keep the field open, which means all LAN ports have been put into the field. 4. WAN IP Address - Enter a WAN IP Address or a range of WAN IP Addresses in the field, in dotted-decimal notation format. For example, 61.145.238.6 61.145.238.47. Keep the field open, which means all WAN IP Addresses have been put into the field. 5. WAN Port -Enter a WAN Port or a range of WAN Ports in the field. For example, 25 110. Keep the field open, which means all WAN Ports have been put into the field. 6. Protocol - Select which protocol is to be used, either TCP, UDP, or All (all protocols supported by the router). 7. 8. 9. Action - Select either Allow or Deny through the router. Status - Select Enabled or Disabled for this entry on the Status pull-down list. Click the Save button to save this entry.

www.aabbcc.com and websites with.net in the end on the Internet while no limit for other
websites, you should specify the following Domain filtering list:

4.8.4 MAC Filtering

Like the IP Address Filtering page, the MAC Address Filtering page (shown in Figure 4-39) allows you to control access to the Internet by users on your local network based on their MAC Address.
Figure 4-39 MAC address Filtering Before setting up MAC Filtering entries, you must ensure that Enable Firewall and Enable MAC Filtering have been selected on the Firewall page. To Add a MAC Address filtering entry, clicking the Add New button. The page "Add or Modify a MAC Address Filtering entry" will appear, shown in Figure 4-40:
Figure 4-40 Add or Modify a MAC Address Filtering entry To add or modify a MAC Address Filtering entry, follow these instructions: 1. Enter the appropriate MAC Address into the MAC Address field. The format of the MAC Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). For example: 00-0E-AE-B0-00-0B. 2. 3. 4. Type the description of the PC in the Description field. Fox example: Johns PC. Status - Select Enabled or Disabled for this entry on the Status pull-down list. Click the Save button to save this entry.
To add additional entries, repeat steps 1-4. When finished, click the Return button to return to the MAC Address Filtering page.
TL-WR542G To modify or delete an existing entry: 1.
Click the Enable All button to make all entries enabled. Click the Disabled All button to make all entries disabled. Click the Delete All button to delete all entries Click the Next button to go to the next page and click the Previous button to return to the previous page. Fox example: If you want to block the PC with MAC addresses 00-0A-EB-00-07-BE and 00-0A-EB-00-07-5F to access the Internet, first, enable the Firewall and MAC Address Filtering on the Firewall page, then, you should specify the Default MAC Address Filtering Rule "Deny these PC(s) with effective rules to access the Internet" on the Firewall page and the following MAC address filtering list on this page:

4.8.5 Remote Management

You can configure the Remote Management function on this page shown in Figure 4-41. This feature allows you to manage your Router from a remote location, via the Internet.
Figure 4-41 Remote Management Web Management Port - Web browser access normally uses the standard HTTP service port 80. This routers default remote management Web port number is 80. For greater security, you can change the remote management Web interface to a custom port by entering that number in this box provided. Choose a number between 1024 and 65534, but do not use the number of any common service port. 53
Remote Management IP Address - This is the current address you will use when accessing your router from the Internet. The default IP Address is 0.0.0.0. It means this function is disabled. To enable this function, change the default IP Address to another IP Address as desired. To access the router, you will type your router's WAN IP Address into your browser's Address (in IE) or Location (in Navigator) box, followed by a colon and the custom port number. For example, if your Router's WAN address is 202.96.12.8 and you use port number 8080, enter in your browser: http://202.96.12.8:8080. You will be asked for the router's password. After successfully entering the password, you will be able to access the router's Web-based utility. Note: Be sure to change the router's default password to a very secure password.

4.8.6 Advanced Security

Using Advanced Security page (shown in Figure 4-42), you can protect the router from being attacked by TCP-SYN Flood, UDP Flood and ICMP-Flood from LAN.
Figure 4-42 Advanced Security settings Packets Statistic interval (5 ~ 60) - The default value is 10. Select a value between 5 and 60 seconds in the pull-down list. The Packets Statistic interval value indicates the time section of the packets statistic. The result of the statistic used for analysis by SYN Flood, UDP Flood and ICMP-Flood. DoS protection - Enable or Disable the DoS protection function. Only when it is enabled, 54
TL-WR542G will the flood filters be effective.
Enable ICMP-FLOOD Attack Filtering - Enable or Disable the ICMP-FLOOD Attack Filtering. ICMP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current ICMP-FLOOD Packets number sis beyond the set value, the router will start up the blocking function immediately. Enable UDP-FLOOD Filtering - Enable or Disable the UDP-FLOOD Filtering. UDP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current UPD-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately. Enable TCP-SYN-FLOOD Attack Filtering - Enable or Disable the TCP-SYN- FLOOD Attack Filtering. TCP-SYN-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current TCP-SYN-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately. Ignore Ping Packet from WAN Port - Enable or Disable ignore ping packet from WAN port. The default is disabled. If enabled, the ping packet from the Internet cannot access the router. Forbid Ping Packet from LAN Port - Enable or Disable forbidding Ping Packet to access the router from the LAN port. The default value is disabled. If enabled, the ping packet from the LAN port cannot access the router. (Defends against some viruses) Click the Save button to save the settings. Click the Blocked DoS Host Table button to display the DoS host table by blocking. The page will appear that shown in Figure 4-43:
Figure 4-43 Thwarted DoS Host Table This page shows Host IP Address and Host MAC Address for each host blocked by the router. Host IP Address- The IP address that blocked by DoS are displayed here. 55
Host MAC Address - The MAC address that blocked by DoS are displayed here. To update this page and to show the current blocked host, click on the Refresh button. Click the Clear All button to clear all displayed entries. After the table is empty the blocked host will regain the capability to access Internet. Click the Return button to return to the Advanced Security page

4.9 IP & MAC Binding Setting
Figure 4-44 the IP & MAC Binding menu There are two submenus under the IP &MAC Binding menu (shown in Figure 4-44): Binding Setting and ARP List. Click any of them, and you will be able to scan or configure the corresponding function. The detailed explanations for each submenu are provided below.

4.9.1 Binding Setting

This page displays the IP & MAC Binding Setting table; you can operate it in accord with your desire. (shown in Figure 4-45).
Figure 4-45 IP & MAC Binding Setting
MAC Address - The MAC address of the controlled computer in the LAN. IP Address - The assigned IP address of the controlled computer in the LAN. Bind - Whether or not enable the arp binding. Modify - Edit or delete item.
When you want to add or modify an IP & MAC Binding entry, you can click the Add New button or Modify button, and then you will go to the next page. This page is used for adding or modifying an IP & MAC Binding entry (shown in Figure 4-46).
Figure 4-46 IP & MAC Binding Setting (Add & Modify) To add IP & MAC Binding entries: 1. 2. 3. 4. Click the Add New. button. Enter the MAC Address and IP Address. Select the Bind checkbox. Click the Save button to save it.
To modify or delete an existing entry: 1. 2. Find the desired entry in the table. Click Modify or Delete as desired on the Modify column.
To find an existing entry: 1. 2. 3. Click the Find button (shown in Figure 4-45). Enter the MAC Address or IP Address. Enter the Find button in the next page (shown in Figure 4-47).
Figure 4-47 Find IP & MAC Binding Entry Click the Enable All button to make all entries enabled. Click the Delete All button to delete all entries.

4.9.2 ARP List

To manage the computer, you could observe the computers in the LAN by checking the relationship of MAC address and IP address on the ARP list, and you could configure the items on the ARP list also. This page displays the ARP List; it shows all the existing IP & MAC Binding entries (shown in Figure 4-48).

Figure 4-48 ARP List

MAC Address - The MAC address of the controlled computer in the LAN. IP Address - The assigned IP address of the controlled computer in the LAN. Status - Enabled or Disabled of the MAC address and IP address binding. Configure - Load or delete item. Load - Load the item to the IP & MAC Binding list. Delete - Delete the item.

Figure 1 4) In the prompt page that showed below, double click on the Internet Protocol (TCP/IP).
Figure 2 5) The following TCP/IP Properties window will display and the IP Address tab is open on this window by default. Now you have two ways to configure the TCP/IP protocol below: Setting IP address automatically Select Obtain an IP address automatically, Choose Obtain DNS server automatically, as shown in the Figure below:
Figure 3 Setting IP address manually Select Use the following IP address radio button. And the following items available If the router's LAN IP address is 192.168.1.1, type IP address is 192.168.1.x (x is from 2 to 254), and Subnet mask is 255.255.255.0. 3 Type the routers LAN IP address (the default IP is 192.168.1.1) into the Default gateway field. 4 Select Use the following DNS server addresses radio button. In the Preferred DNS Server field you can type the DNS server IP address, which has been provided by your ISP

Figure 4

Appendix C: Specifications
General Standards Protocols Ports IEEE 802.3, 802.3u, 802.11b and 802.11g TCP/IP, PPPoE, DHCP, ICMP, NAT, SNTP One 10/100M Auto-Negotiation WAN RJ45 port, Four 10/100M Auto-Negotiation LAN RJ45 ports supporting Auto MDI/MDIX Cabling Type 10BASE-T: UTP category 3, 4, 5 cable (maximum 100m) EIA/TIA-STP (maximum 100m) 100BASE-TX: UTP category 5, 5e cable (maximum 100m) EIA/TIA-STP (maximum 100m) Radio Data Rate LEDs Safety & Emissions 54/48/36/24/18/12/9/6Mbps or 11/5.5/3/2/1Mbps Power, SYS, WLAN, WAN, 1-4 FCC, CE
Environmental and Physical Operating Temp. Operating Humidity Dimensions (WDH) 0~40 (32~104) 10% - 90% RH, Non-condensing 6.94.41.2 in. (17411130 mm) (without antenna)

Appendix D: Glossary

2x to 3x eXtended Range WLAN Transmission Technology - The WLAN device with 2x to 3x eXtended Range WLAN transmission technology make its sensitivity up to 105 dB, which gives users the ability to have robust, longer-range wireless connections. With this range-enhancing technology, a 2x to 3x eXtended Range based client and access point can maintain a connection at as much as three times the transmission distance of traditional 802.11b and 802.11g products, for a coverage area that is up to nine times greater. A traditional 802.11b and 802.11g product transmission distance is about 300m, a 2x to 3x eXtended Range based client and access point can maintain a connection transmission distance may be up to 830m. 802.11b - The 802.11b standard specifies a wireless networking at 11 Mbps using direct-sequence spread-spectrum (DSSS) technology and operating in the unlicensed radio spectrum at 2.4GHz, and WEP encryption for security. 802.11b networks are also referred to as Wi-Fi networks. 802.11g - specification for wireless networking at 54 Mbps using direct-sequence spread-spectrum (DSSS) technology, using OFDM modulation and operating in the unlicensed radio spectrum at 2.4GHz, and backward compatibility with IEEE 802.11b devices, and WEP encryption for security. DDNS (Dynamic Domain Name System) - The capability of assigning a fixed host and domain name to a dynamic Internet IP Address. DHCP (Dynamic Host Configuration Protocol) - A protocol that automatically configure the TCP/IP parameters for the all the PC(s) that are connected to a DHCP server. DMZ (Demilitarized Zone) - A Demilitarized Zone allows one local host to be exposed to the Internet for a special-purpose service such as Internet gaming or videoconferencing. DNS (Domain Name System) An Internet Service that translates the names of websites into IP addresses. Domain Name - A descriptive name for an address or group of addresses on the Internet. DoS (Denial of Service) - A hacker attack designed to prevent your computer or network from operating or communicating. DSL (Digital Subscriber Line) - A technology that allows data to be sent or received over existing traditional phone lines. ISP (Internet Service Provider) - A company that provides access to the Internet. 80

54Mbps eXtended Range Wireless Router(with Detachable Antenna)
http://www.tp-link.com/products/print.asp?pmodel=TL-WR542G
Print Spotlight: 54M Wireless LAN Router, 2.4GHz, 802.11g/b, built-in 4-port Switch Adopts 2x to 3x eXtended Range technology WDS wireless bridge provides seamless bridging to expand your wireless network Supports access control based on time of day Detachable reverse SMA connector Antenna

Product Description:

The TL-WR542G 54Mbps Wireless Router integrates firewall, NAT-router and Wireless AP. The design is dedicated to Small Office/Home Office (SOHO) Wireless network solution. The TL-WR542G 54Mbps Wireless Router will allow you to connect your network wirelessly better than ever, sharing Internet Access, files and fun, easily and securely.
With the most attentive wireless security, the TL-WR542G 54Mbps Wireless Router provides multiple protection measures. It can be set to turn off wireless network name (SSID) broadcast so that only stations that have the SSID can be connected. The Router provides wireless LAN 64/128/152-bit WEP encryption security, and WPA/WPA2 and WPA-PSK/WPA2-PSK authentication and TKIP/AES encryption security. It also supports VPN pass-through for sensitive data secure transmission.
The TL-WR542G 54Mbps Wireless Router complies with the IEEE 802.11g/b standards and adopts 2x to 3x eXtended Range WLAN transmission technology so that transmission distance is 2-3 times that of traditional 11g/b solutions, up to 855.36m tested in China. Transmission range is extended to 4-9 times. It is compatible with all IEEE 802.11g and IEEE 802.11b products.
The TL-WR542G 54Mbps Wireless Router provides flexible access control so that parents or network administrators can establish restricted access policies for children or staff. It has built-in NAT and DHCP server supporting static IP address distributing. It also supports Virtual Server and DMZ host for Port Triggering needs, as well as remote management and log so that network administrators can manage and monitor the network on real time.
The device comes with a CD with an Easy Setup Assistant that helps you step by step to complete your Internet connection, wireless network settings and security configurations. This feature allows even novice users to setup the router products without sacrificing any key features, just play the AUTO-RUN CD bundled to have your network set up quickly & hassle-free.

Product Features:

Adopts 2x to 3x eXtended Range Shares data and Internet access for users, supporting PPPoE, Dynamic IP, Static IP, L2TP, BigPond Cable Internet access WDS wireless bridge provides seamless bridging to expand your wireless network Supports 54/48/36/24/18/12/9/6/11/5.5/3/2/1Mbps wireless LAN data transfer rates Supports 64/128/152-bit WEP, complies with 128 bit WPA standard(TKIP/AES), supports MIC, IV Expansion, Shared Key Authentication, IEEE 802.1X Provides wireless LAN ACL (Access Control List) filtering Provides 802.1x authentication for WAN port

2010.12.14. 11:24

Built-in NAT and DHCP server supporting static IP address distributing Supports Virtual Server, Special Application, and DMZ host Built-in firewall supporting IP address filtering, Domain Name filtering, and MAC address filtering Supports connecting/disconnecting Internet on a specified time of day Supports access control base on time of day, parents and network administrators can establish restricted access policies for children or staffs Supports TCP/IP, PPPoE, DHCP, ICMP, NAT Supports UPnP, Dynamic DNS, Static Routing, VPN pass-through Supports Flow Statistics Supports ICMP-FLOOD, UDP-FLOOD, TCP-SYN-FLOOD filter Ignores Ping packets from WAN or LAN ports Supports firmware upgrade Supports Remote and Web management

Product Specifications:

Software Specification Standards Wireless Signal Rates With Automatic Fallback Frequency Range Wireless Transmit Power (MAX) IEEE 802.11g, IEEE 802.11b 11g: Up to 54Mbps(dynamic) 11b: Up to 11Mbps(dynamic) 2.4-2.4835GHz

20dBm (max. EIRP)

IEEE 802.11b: DQPSK, DBPSK, DSSS, Modulation Technology and CCK IEEE 802.11g: BPSK, QPSK, 16QAM, 64QAM, OFDM 54M: -68dBm@10% PER 11M: -85dBm@8% PER Receiver Sensitivity 6M: -88dBm@10% PER 1M: -90dBm@8% PER 256K: -105dBm@8% PER AP Router Mode Wireless Mode Bridge mode (point-to-point / point to Multi-point) Wireless Range Indoors up to 200m, Outdoors up to 830m SSID Enable/Disable MAC Address Filter Wireless Security 64/128/152-bit WEP Encryption WPA/WPA2/WPA-PSK/WPA2-PSK (AES/TKIP) Encryption
Hardware Specification 4 10/100M LAN Ports(RJ45) 1 10/100M WAN Port(RJ45) 3dBi Detachable Omni Directional Antenna (Reverse SMA Connector) Input: Localized to Country of Sale Output: 9VAC / 0.8A Linear PSU 0oC~40oC (32oF~104oF) -40oC~70oC (-40oF~158oF) 10% ~ 90%, Non Condensation 5%~95% Non-Condensing 6.9 x 4.4 x 1.2 in. (174 x 111 x 30 mm)

Interface

Antenna

Power Supply Unit

Operating Temperature Storage Temperature Relative Humidity Storage Humidity Dimensions