TL-WR340G/TL-WR340GD User Guide 54M Wireless Router

Rev: 1.0.2 1910010064

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright 2009 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or

FCC STATEMENT

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or more of the following measures: Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/ TV technician for help.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: 1) This device may not cause harmful interference. 2) This device must accept any interference received, including interference that may cause undesired operation.
FCC RF Radiation Exposure Statement
This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This device and its antenna must not be co-located or operating in conjunction with any other antenna or transmitter. To comply with FCC RF exposure compliance requirements, this grant is applicable to only Mobile Configurations. The antennas used for this transmitter must be installed to provide a separation distance of at least 20 cm from all persons and must not be co-located or operating in conjunction with any other antenna or transmitter.

CE Mark Warning

This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.
National Restrictions 2400.0-2483.5 MHz Country
Bulgaria Outdoor use limited to 10 France mW e.i.r.p. within the band 2454-2483.5 MHz Italy

Restriction

Reason/remark
General authorization required for outdoor use and public service Military Radiolocation use. Refarming of the 2.4 GHz band has been ongoing in recent years to allow current relaxed regulation. Full implementation planned 2012 If used outside of own premises, general authorization is required

Luxembourg

General authorization required for network and service supply(not for spectrum) This subsection does not apply for the geographical area within a radius of 20 km from the centre of Ny-lesund Only for indoor applications
Norway Russian Federation

Implemented

NoteIts not used outdoors in France.
TP-LINK TECHNOLOGIES CO., LTD
DECLARATION OF CONFORMITY
For the following equipment: Product Description: 54M Wireless Router Model No.: TL-WR340G Trademark: TP-LINK We declare under our own responsibility that the above products satisfy all the technical regulations applicable to the product within the scope of Council Directives: Directives 1999/5/EC The above product is in conformity with the following standards or other normative documents: ETSI EN V1.7.1: 2006 ETSI EN 301 489-1 V1.6.1:2005 ETSI EN 301 489-17 V1.2.1:2002 EN 61000-3-2:2006 EN 61000-3-3:1995+A1:2001 EN60950-1:2006 EN50371:2002 Directives 2004/108/EC The above product is in conformity with the following standards or other normative documents EN 55022:2006 EN 55024:1998+A1:2001+A2:2003 EN 61000-3-2:2006 EN 61000-3-3:1995+A1:2001+A2:2005 Directives 2006/95/EC The above product is in conformity with the following standards or other normative documents EN60950-1:2006 Person is responsible for marking this declaration:
Zhao Jianjun Director of International Business

are not sure which connection type you use currently, please contact your ISP to obtain the correct information. 1. If you choose Dynamic IP, the router will automatically get IP parameters from your ISP. You can see the page as follows (Figure 3-4):
Figure 3-4 WAN Dynamic IP This page displays the WAN IP parameters assigned dynamically by your ISP, including IP address, Subnet Mask, Default Gateway, etc. Click the Renew button to renew the IP parameters from your ISP. Click the Release button to release the IP parameters. MTU Size - The normal MTU (Maximum Transmission Unit) value for most Ethernet networks is 1500 Bytes. For some ISPs you need to reduce the MTU. But this is rarely required, and should not be done unless you are sure it is necessary for your ISP connection. If your ISP gives you one or two DNS addresses, select Use These DNS Servers and enter the primary and secondary addresses into the correct fields. Otherwise, the DNS servers will be assigned dynamically from your ISP. Note: If you get address and find error when you go to a Web site, it is likely that your DNS servers are set up improperly. You should contact your ISP to get DNS server addresses. Get IP with Unicast DHCP - A few ISPs' DHCP servers do not support the broadcast applications. If you cannot get the IP Address normally, you can choose this option. (This is rarely required.)

TL-WR340G/TL-WR340GD 2.

If you choose Static IP, you should have fixed IP Parameters specified by your ISP. The Static IP settings page will appear, shown in Figure 3-5:
Figure 3-5 WAN - Static IP You should type the following parameters into the spaces provided: IP Address - Enter the IP address in dotted-decimal notation provided by your ISP. Subnet Mask - Enter the subnet Mask in dotted-decimal notation provided by your ISP, usually is 255.255.255.0. Default Gateway - (Optional) Enter the gateway IP address in dotted-decimal notation provided by your ISP. MTU Size - The normal MTU (Maximum Transmission Unit) value for most Ethernet networks is 1500 Bytes. For some ISPs you may need to modify the MTU. But this is rarely required, and should not be done unless you are sure it is necessary for your ISP connection. Primary DNS - (Optional) Enter the DNS address in dotted-decimal notation provided by your ISP. Secondary DNS - (Optional) Type another DNS address in dotted-decimal notation provided by your ISP if provided. 3. If you choose PPPoE, you should enter the following parameters (Figure 3-6):
Figure 3-6 WAN - PPPoE User Name/Password - Enter the User Name and Password provided by your ISP. These fields are case-sensitive. Connect on Demand - You can configure the router to disconnect your Internet connection after a specified period of inactivity (Max Idle Time). If your Internet connection has been terminated due to inactivity, Connect on Demand enables the router to automatically re-establish your connection as soon as you attempt to access the Internet again. If you wish to activate Connect on Demand, click the radio button. If you want your Internet connection to remain active at all times, enter 0 in the Max Idle Time field. Otherwise, enter the number of minutes you want to have elapsed before your Internet connection terminates. Caution: Sometimes the connection cannot be disconnected although you specify a time to Max Idle Time, since some applications is visiting the Internet continually in the background. Connect Automatically - Connect automatically after the router is disconnected. To use this option, click the radio button. Time-based Connecting - You can configure the router to make it connect or disconnect based on time. Enter the start time in HH:MM format for connecting and end time in HH:MM format for disconnecting in the Period of Time fields. Note: Only when you have configured the system time on System Tools -> Time page, will the Time-based Connecting function can take effect. Connect Manually - You can configure the router to make it connect or disconnect manually. After a specified period of inactivity (Max Idle Time), the router will disconnect from the Internet connection, and you will not be able to re-establish your connection automatically as soon as you attempt to access the Internet again. To use this option, click the radio button. If you want your Internet connection to remain active at all times, enter "0" in the Max Idle Time field. Otherwise, enter the number time in minutes that you wish to have the Internet connecting last unless a new link is requested. 15

Caution: Sometimes the connection cannot be disconnected although you specify a time to Max Idle Time, since some applications are visiting the Internet continually in the background. Connect Automatically - Connect automatically after the router is disconnected. To use this option, click the radio button. Connect Manually - You can configure the router to make it connect or disconnect manually. After a specified period of inactivity (Max Idle Time), the router will disconnect from your Internet connection, and you will not be able to re-establish your connection automatically as soon as you attempt to access the Internet again. To use this option, click the radio button. If you want your Internet connection to remain active at all times, enter "0" in the Max Idle Time field. Otherwise, enter the number in minutes that you wish to have the Internet connecting last unless a new link is requested. Caution: Sometimes the connection cannot be disconnected although you specify a time to Max Idle Time, since some applications are visiting the Internet continually in the background.

MAC Clone

You can configure the MAC address of the WAN port on this page, Figure 3-13:
Figure 3-13 MAC Address Clone Some ISPs require that you register the MAC Address of your adapter, which is connected to your cable/DSL Modem or Ethernet during installation. Changes are rarely needed here. WAN MAC Address - This field displays the current MAC address of the WAN port, which is used for the WAN port. If your ISP requires that you register the MAC address, please enter the correct MAC address into this field. The format for the MAC Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). Your PC's MAC Address - This field displays the MAC address of the PC that is managing the router. If the MAC address is required, you can click the Clone MAC Address button and this MAC address will fill in the WAN MAC Address field. Click Restore Factory MAC to restore the MAC address of WAN port to the factory default value. Click the Save button to save your settings. Note: Only the PC on your LAN can use the MAC Address Clone feature. If you click the Save button, the router will prompt you to reboot.

Wireless

Figure 3-14 Wireless menu There are three submenus under the Wireless menu (shown in Figure 3-14): Wireless Settings, MAC Filtering and Wireless Statistics. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below.

Wireless Settings

The basic settings for the wireless network are set on this page, Figure 3-15:
Figure 3-15 Wireless Settings 24
SSID - Enter a value of up to 32 characters. The same name (SSID) must be assigned to all wireless devices in your network. The default SSID is TP-LINK, but it is recommended strongly that you change your networks name (SSID) to a different value. This value is case-sensitive. For example, TP-LINK is NOT the same as tp-link. Region - Select your region from the pull-down list. This field specifies the region where the wireless function of the router can be used. It may be illegal to use the wireless function of the router in a region other than one of those specified in this field. If your country or region is not listed, please contact your local government agency for assistance. The default region is United States. When you select your local region from the pull-down list, Click the Save button, then the Note Dialog appears. Click OK.

Figure 3-16 Note Dialog Note: Limited by local law regulations, version for North America does not have region selection option. Channel - This field determines which operating frequency will be used. It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point. Mode - Select the desired wireless mode. The options are:
54Mbps (802.11g) - Both 802.11g and 802.11b wireless stations can connect to the router. 11Mbps (802.11b) - Only 802.11b wireless stations can connect to the router.
Note: The default is "54Mbps (802.11g)", which allows both 802.11g and 802.11b wireless stations to connect to the router. Enable Wireless Router Radio - The wireless radio of this Router can be enabled or disabled to allow wireless stations access. If enabled, wireless stations will be able to access the router. Otherwise, wireless stations will not be able to access. Enable SSID Broadcast - If you select the Enable SSID Broadcast checkbox, the Wireless Router SSID will broadcast its name (SSID) on the air. Enable Bridges If you select the Enable Bridges checkbox, you can input MAC address of other APs to communicate with them wirelessly in Bridge mode.
MAC of AP (1-6): Input the MAC address of the AP which you want to communicate with. There are six entries can be configured.
The APs can communicate with each other in Bridge mode unless they know each others MAC address. For example, if the router whose MAC address is 00-13-56-A8-9E-1A wants to communicate with an AP whose MAC address is 00-13-56-A8-9E-1B in Bridge mode, you should do as following: 1. Select Enable Bridges and input 00-13-56-A8-9E-1B as following screen shown.
Access the AP's Web-based utility and configure the AP under Bridge mode, then input 00-13-56-A8-9E-1A in corresponding Blank.
Enable Wireless Security The wireless security function can be enabled or disabled. If disabled, the wireless stations will be able to connect the router without encryption. It is recommended strongly that you choose this option to encrypt your wireless network. The encryption settings are described below. Security Type - You can select one of the following authentication types:
WEP - Select WEP authentication type based on 802.11 authentications. WPA-PSK/WPA2-PSK - Select WPA/WPA2 authentication type based on pre-shared passphrase. WPA /WPA2 - Select WPA/WPA2 authentication type based on Radius Server.

Security Options - You can select one of the following Security options:
When you select WEP for authentication type you can select the following authentication options: Automatic - Select Shared Key or Open System authentication type automatically based on the wireless station request. Shared Key - Select 802.11 Shared Key authentication. Open System - Select 802.11 Open System authentication. When you select WPA-PSK/WPA2-PSK for authentication type you can select Automatic, WPA PSK or WPA2-PSK as authentication options. When you select WPA/WPA2 as an authentication type you can select Automatic WPA or WPA2 as authentication option.
WEP Key Format - You can select ASCII or Hexadecimal format. ASCII Code Format stands for any combination of keyboard characters in the specified length. Hexadecimal format stands for any combination of hexadecimal digits (0-9, a-f, A-F) in the specified length. 26
WEP Key settings - Select which of the four keys will be used and enter the matching WEP key information for your network in the selected key radio button. These values must be identical on all wireless stations in your network. Key Type - You can select the WEP key length (64-bit, or 128-bit, or 152-bit) for encryption. "Disabled" means the WEP key entry is invalid.
For 64-bit encryption - You can enter 10 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 5 ASCII characters.
For 128-bit encryption - You can enter 26 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 13 ASCII characters.
For 152-bit encryption - You can enter 32 hexadecimal digits (any combination of 0-9, a-f, A-F, zero key is not permitted) or 16 ASCII characters.
Encryption - When you select WPA-PSK/WPA2-PSK or WPA/WPA2 for Security Type you can select Automatic, TKIP or AES as Encryptions.
Figure 3-17 WPA-PSK/WPA2-PSK WPA-PSK/WPA2-PSK Passphrase - You can enter a WPA or WPA2 passphrase between 8 and 63 characters long. Group Key Update Period - Specify the group key update interval in seconds. The value can be either 0 seconds or from 30 seconds and up, 1-29 seconds are not usable figures. Enter 0 to disable the update.
Figure 3-18 WPA/WPA2 Radius Server IP - Enter the IP address of the Radius Server 27
Radius Port - Enter the port number that the radius service used. Radius Password - Enter the password for the Radius Server. Be sure to click the Save button to save your settings on this page. Note: The router will reboot automatically after you click save.

TL-WR340G/TL-WR340GD by following these steps:
1. Click the Enable button to enable this function. 2. Select the radio button: Deny the stations not specified by any enabled entries in the list to access for Filtering Rules. 3. Delete all or disable all entries if there are any entries already. 4. Click the Add New. button and enter the MAC address 00-0A-EB-00-07-BE in the MAC Address field, enter wireless station A in the Description field, select Allow in the Privilege pull-down list and select Enabled in the Status pull-down list. Click the Save and the Return button. 5. Click the Add New. button and enter the MAC address 00-0A-EB-00-07-5F in the MAC Address field, enter wireless station B in the Description field, select Deny in the Privilege pull-down list and select Enabled in the Status pull-down list. Click the Save and the Return button. 6. Click the Add New. button and enter the MAC address 00-0A-EB-00-07-8A in the MAC Address field, enter wireless station C in the Description field, select 128-bit in the Privilege pull-down list, enter 2F34D20BE2E54B326C5476586A in the WEP Key field and select Enabled in the Status pull-down list. Click the Save and the Return button. The filtering rules that configured should be similar to the following list:
Note: If you select the radio button Allow the stations not specified by any enabled entries in the list to access for Filtering Rules, the wireless station B will still not be able to access the router, however, other wireless stations that are not in the list will be able to access the router. If you enable the function and select the Deny the stations not specified by any enabled entries in the list to access for Filtering Rules, and there are not any enable entries in the list, thus, no wireless stations can access the router.

Wireless Statistics

This page shows MAC Address, Current Status, Received Packets and Sent Packets for each connected wireless station.
Figure 3-21 The router attached wireless stations MAC Address - The connected wireless station's MAC address 30
Current Status - The connected wireless station's running status, one of STA-AUTH / STA-ASSOC / AP-UP / WPA / WPA-PSK /WPA2/WPA2-PSK/None Received Packets - Packets received by the station Sent Packets - Packets sent by the station You cannot change any of the values on this page. To update this page and to show the current connected wireless stations, click on the Refresh button. If the numbers of connected wireless stations go beyond one page, click the Next button to go to the next page and click the Previous button to return the previous page. Note: This page will be refreshed automatically every 5 seconds.

Figure 3-22 The DHCP menu There are three submenus under the DHCP menu (shown in Figure 3-22): DHCP Settings, DHCP Clients List and Address Reservation. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below.

DHCP Settings

The router is set up by default as a DHCP (Dynamic Host Configuration Protocol) server, which provides the TCP/IP configuration for all the PC(s) that are connected to the router on the LAN. The DHCP Server can be configured on the page (shown in Figure 3-23):
Figure 3-23 DHCP Settings DHCP Server - Enable or Disable the DHCP server. If you disable the Server, you must 31
have another DHCP server within your network or else you must manually configure the computer. Start IP Address - This field specifies the first of the addresses in the IP address pool. 192.168.1.100 is the default start address. End IP Address - This field specifies the last of the addresses in the IP address pool. 192.168.1.199 is the default end address. Address Lease Time - The Address Lease Time is the amount of time in which a network user will be allowed connection to the router with their current dynamic IP Address. Enter the amount of time, in minutes. The user will be "leased" this dynamic IP Address. The range of the time is 1 ~ 2880 minutes. The default value is 120 minutes. Default Gateway - (Optional.) Suggest to input the IP address of the LAN port of the router, default value is 192.168.1.1 Default Domain - (Optional.) Input the domain name of your network. Primary DNS - (Optional.) Input the DNS IP address provided by your ISP. Or consult your ISP. Secondary DNS - (Optional.) Input the IP address of another DNS server if your ISP provides two DNS servers. Note: To use the DHCP server function of the router, you must configure all computers on the LAN as "Obtain an IP Address automatically" mode. This function will take effect until the router reboots.

DHCP Clients List

This page shows Client Name, MAC Address, Assigned IP, and Lease Time for each DHCP Client attached to the router (Figure 3-24):
Figure 3-24 DHCP Clients List Index - The index of the DHCP Client Client Name - The name of the DHCP client MAC Address - The MAC address of the DHCP client Assigned IP - The IP address that the router has allocated to the DHCP client. Lease Time - The time of the DHCP client leased. Before the time is up, DHCP client will request to renew the lease automatically. You cannot change any of the values on this page. To update this page and to show the current attached devices, click on the Refresh button.

Address Reservation

When you specify a reserved IP address for a PC on the LAN, that PC will always receive the same IP address each time when it accesses the DHCP server. Reserved IP addresses should be assigned to servers that require permanent IP settings. This page is used for address reservation (shown in Figure 3-25).

Figure 3-25 Address Reservation MAC Address - The MAC address of the PC of which you want to reserve IP address. Assigned IP Address - The IP address of the router reserved. Status - The status of this entry either Enabled or Disabled. To Reserve IP addresses: 1. 2. 3. Click the Add New button. (Pop-up Figure 3-26) Enter the MAC address (The format for the MAC Address is XX-XX-XX-XX-XX-XX.) and IP address in dotted-decimal notation of the computer you wish to add. Click the Save button when finished.
Figure 3-26 Add or Modify an Address Reservation Entry To modify or delete an existing entry: 1. 2. 3. Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete. Modify the information. Click the Save button.
Click the Enable All button to make all entries enabled Click the Disabled All button to make all entries disabled.
TL-WR340G/TL-WR340GD Click the Delete All button to delete all entries
Click the Next button to go to the next page and Click the Previous button to return the previous Note: The function won't take effect until the router reboots.

Forwarding

Figure 3-27 The Forwarding menu There are four submenus under the Forwarding menu (shown in Figure 3-27): Virtual Servers, Port Triggering, DMZ and UPnP. Click any of them, and you will be able to configure the corresponding function. The detailed explanations for each submenu are provided below.

Virtual Servers

Virtual servers can be used for setting up public services on your LAN, such as DNS, Email and FTP. A virtual server is defined as a service port, and all requests from the Internet to this service port will be redirected to the computer specified by the server IP. Any PC that was used for a virtual server must have a static or reserved IP Address because its IP Address may change when using the DHCP function. You can set up virtual servers on this page, shown in Figure 3-28:
Figure 3-28 Virtual Servers Service Port - The numbers of External Ports. You can type a service port or a range of service ports (the format is XXX YYY, XXX is the start port, YYY is the end port). IP Address - The IP Address of the PC providing the service application. Protocol - The protocol used for this application, either TCP, UDP, or All (all protocols supported by the router). Status - The status of this entry either Enabled or Disabled. To setup a virtual server entry: 1. 2. Click the Add New button. (pop-up Figure 3-29) Select the service you want to use from the Common Service Port list. If the Common 34

3. 4. 5. 6.

Service Port list does not have the service that you want to use, type the number of the service port or service port range in the Service Port box. Type the IP Address of the computer in the Server IP Address box. Select the protocol used for this application, either TCP or UDP, or All. Select the Enable checkbox to enable the virtual server. Click the Save button.
Figure 3-29 Add or Modify a Virtual Server Entry Note: It is possible that you have a computer or server that has more than one type of available service. If so, select another service, and enter the same IP Address for that computer or server. To modify or delete an existing entry: 1. 2. 3. Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete. Modify the information. Click the Save button.
Click the Enable All button to make all entries enabled Click the Disabled All button to make all entries disabled. Click the Delete All button to delete all entries Click the Next button to go to the next page and Click the Previous button to return the previous page. Note: If you set the virtual server of service port as 80, you must set the Web management port on Security > Remote Management page to be any value except 80 such as 8080. Or else there will be a conflict to disable the virtual server.

Port Triggering

Some applications require multiple connections, like Internet games, video conferencing, Internet calling and so on. These applications cannot work with a pure NAT router. Port Triggering is used for some of these applications that can work with an NAT router. You can set up Port Triggering on this page shown in Figure 3-30: 35
Figure 3-30 Port Triggering Once configured, operation is as follows: 1. A local host makes an outgoing connection using a destination port number defined in the Trigger Port field. 2. The router records this connection, opens the incoming port or ports associated with this entry in the Port Triggering table, and associates them with the local host. 3. When necessary the external host will be able to connect to the local host using one of the ports defined in the Incoming Ports field. Trigger Port - The port for outgoing traffic. An outgoing connection using this port will "Trigger" this rule. Trigger Protocol - The protocol used for Trigger Ports, either TCP, UDP, or All (all protocols supported by the router). Incoming Ports Range - The port or port range used by the remote system when it responds to the outgoing request. A response using one of these ports will be forwarded to the PC that triggered this rule. You can input at most 5 groups of ports (or port section). Every group of ports must be set apart with ",". For example, 2000-2038, 2050-2051, 2085, 3010-3030. Incoming Protocol - The protocol used for Incoming Ports Range, either TCP or UDP, or ALL (all protocols supported by the router). Status - The status of this entry either Enabled or Disabled. To add a new rule, enter the following data on the Port Triggering screen. 1. 2. 3. 4. 5. 6. 7. Click the Add New button. (pop-up Figure 3-31) Enter a port number used by the application when it generates an outgoing request. Select the protocol used for Trigger Port from the pull-down list, either TCP, UDP, or All. Enter the range of port numbers used by the remote system when it responds to the PC's request. Select the protocol used for Incoming Ports Range from the pull-down list, either TCP or UDP, or All. Select the Enable checkbox to enable. Click the Save button to save the new rule.

Remote Management

You can configure the Remote Management function on this page shown in Figure 3-42. This feature allows you to manage your Router from a remote location, via the Internet.
Figure 3-42 Remote Management 44
Web Management Port - Web browser access normally uses the standard HTTP service port 80. This routers default remote management Web port number is 80. For greater security, you can change the remote management Web interface to a custom port by entering that number in this box provided. Choose a number between 1024 and 65534, but do not use the number of any common service port. Remote Management IP Address - This is the current address you will use when accessing your router from the Internet. The default IP Address is 0.0.0.0. It means this function is disabled. To enable this function, change the default IP Address to another IP Address as desired. To access the router, you will type your router's WAN IP Address into your browser's Address (in IE) or Location (in Navigator) box, followed by a colon and the custom port number. For example, if your Router's WAN address is 202.96.12.8 and you use port number 8080, enter in your browser: http://202.96.12.8:8080. You will be asked for the router's password. After successfully entering the password, you will be able to access the router's Web-based utility. Note: Be sure to change the router's default password to a very secure password.

Advanced Security

Using Advanced Security page (shown in Figure 3-43), you can protect the router from being attacked by TCP-SYN Flood, UDP Flood and ICMP-Flood from LAN.
Figure 3-43 Advanced Security settings Packets Statistic interval (5 ~ 60) - The default value is 10. Select a value between 5 and 45
60 seconds in the pull-down list. The Packets Statistic interval value indicates the time section of the packets statistic. The result of the statistic used for analysis by SYN Flood, UDP Flood and ICMP-Flood. DoS protection - Enable or Disable the DoS protection function. Only when it is enabled, will the flood filters be effective. Enable ICMP-FLOOD Attack Filtering - Enable or Disable the ICMP-FLOOD Attack Filtering. ICMP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current ICMP-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately. Enable UDP-FLOOD Filtering - Enable or Disable the UDP-FLOOD Filtering. UDP-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current UPD-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately. Enable TCP-SYN-FLOOD Attack Filtering - Enable or Disable the TCP-SYN- FLOOD Attack Filtering. TCP-SYN-FLOOD Packets threshold: (5 ~ 3600) - The default value is 50. Enter a value between 5 ~ 3600 packets. When the current TCP-SYN-FLOOD Packets numbers is beyond the set value, the router will start up the blocking function immediately. Ignore Ping Packet from WAN Port - Enable or Disable ignore ping packet from WAN port. The default is disabled. If enabled, the ping packet from the Internet cannot access the router. Forbid Ping Packet from LAN Port - Enable or Disable forbidding Ping Packet to access the router from the LAN port. The default value is disabled. If enabled, the ping packet from the LAN port cannot access the router. (Defends against some viruses) Click the Save button to save the settings. Click the Blocked DoS Host Table button to display the DoS host table by blocking. The page will appear that shown in Figure 3-44:

Figure 3-49 ARP List MAC Address - The MAC address of the controlled computer in the LAN. IP Address - The assigned IP address of the controlled computer in the LAN. Status - Enabled or Disabled of the MAC address and IP address binding. Configure - Load or delete item. Load - Load the item to the IP & MAC Binding list. Delete - Delete the item. 1. 2. 3. Click the Bind All button to bind all the current items, available after enable. Click the Load All button to load all items to the IP & MAC Binding list. Click the Refresh button to refresh all items. Note: An item could not be loaded to the IP & MAC Binding list if the IP address of the item has been loaded before. Error warning will prompt as well. Likewise, "Load All" only loads the items without interference to the IP & MAC Binding list

3.10 Routing

A static route is a pre-determined path that network information must travel to reach a specific host or network. To add or delete a route, work in the area under the Static Routing page (shown in Figure 3-50).
Figure 3-50 Static Routing To add static routing entries: 1. 2. Click the Add New button. (pop-up Figure 3-51) Enter the following data: Destination IP Address - The Destination IP Address is the address of the network or host that you want to assign to a static route. Subnet Mask - The Subnet Mask determines which portion of an IP Address is the network portion, and which portion is the host portion. Gateway - This is the IP Address of the gateway device that allows for contact between the router and the network or host. 3. 4. Select Enabled or Disabled for this entry on the Status pull-down list. Click the Save button to save it.
Figure 3-51 Add or Modify a Static Route Entry To modify or delete an existing entry: 1. 2. 3. Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete. Modify the information. Click the Save button.
Click the Enable All button to make all entries enabled. Click the Disabled All button to make all entries disabled. Click the Delete All button to delete all entries 50

3.11 DDNS

The router offers a Dynamic Domain Name System (DDNS) feature. DDNS lets you assign a fixed host and domain name to a dynamic Internet IP Address. It is useful when you are hosting your own website, FTP server, or other server behind the router. Before using this feature, you need to sign up for DDNS service providers such as www.dyndns.org, www.oray.net or www.comexe.cn. The Dynamic DNS client service provider will give you a password or key. To set up for DDNS, follow these instructions:

3.11.1 Dyndns.org DDNS

If your selected dynamic DNS Service Provider is www.dyndns.org, the page will appear as shown in Figure 3-52:
Figure 3-52 Dyndns.org DDNS Settings To set up for DDNS, follow these instructions: 1. 2. 3. 4. Type the domain names your dynamic DNS service provider gave. Type the User Name for your DDNS account. Type the Password for your DDNS account. Click the Login button to login to the DDNS service. Connection Status -The status of the DDNS service connection is displayed here.

Virtual Servers Note: Your opposite side should call your WAN IP, which is displayed on the Status page. 4. How to enable DMZ Host
Login to the router, click the Forwarding menu on the left of your browser, and click "DMZ" submenu. On the "DMZ" page, click Enable radio and type your IP address into the DMZ Host IP Address field, using 192.168.1.169 as an example, remember to click the "Save button.

DMZ 63

TL-WR340G/TL-WR340GD 5.
I want to build a WEB Server on the LAN, what should I do?
Because the WEB Server port 80 will interfere with the WEB management port 80 on the router, you must change the WEB management port number to avoid interference. To change the WEB management port number: Login to the router, click the Security menu on the left of your browser, and click "Remote Management" submenu. On the "Remote Management" page, type a port number except 80, such as 88, into the "Web Management Port" field. Click Save and reboot the router.
Remote Management Note: If the above configuration takes effect, to configure to the router by typing http://192.168.1.1:88 in the address field of the web browser. Login to the router, click the Forwarding menu on the left of your browser, and click the "Virtual Servers" submenu. On the "Virtual Server" page, enter 80 into the blank below the Service Port, and your IP address below the IP Address, assuming 192.168.1.1 remember to Enable and Save. : 88 for an example,
Virtual Server http://www.tp-link.com

54Mbps Wireless Router

http://www.tp-link.com/products/print.asp?pmodel=TL-WR340GD
Print Spotlight: Up to 54Mbps wireless data rate and fully Compatible with IEEE 802.11b WDS wireless bridge provides seamless bridging to expand your wireless network Enhanced Wireless Security with WPA/WPA2 authentication, TKIP/AES encryption and 64/128/152-bit WEP encryption Share data and internet access

Product Description:

The 54Mbps Wireless Router TL-WR340GD is dedicated to Small Office/Home Office (SOHO) Wireless network solution. It integrates wireless access point, firewall, 4-port Switch and the NAT-Router. It helps you to set up a wired or wireless network, and lets your computers share a high-speed DSL or Cable Internet connection, data files and other resources, such as printers and hard disk storage space.
The TL-WR340GD provides up to 54Mbps data transmission rate in 2.4GHz frequency. It complies with IEEE 802.11g and IEEE802.11b, and is compatible with all IEEE 802.11g and IEEE 802.11b devices.
For the most attentive wireless security, the TL-WR340GD provides multiple protection measures. It supports disable wireless network name (SSID) Broadcast. With this function, only the stations know the SSID can connect to the wireless network. And the router also supports wireless LAN 64/128/152-bit WEP encryption security, WPA/WPA2, WPA-PSK/WPA2-PSK authentication and TKIP/AES encryption security.
TL-WR340GD supports Virtual Servers, DMZ Host and UPnP as port forwarding. It also provides WEB and Remote Management and system log so that network administrators can manage and monitor the network in real time.
The device comes with a CD with an Easy Setup Assistant that helps you step by step to complete your Internet connection, wireless network settings and security configurations. This feature allows even novice users to setup the router products without sacrificing any key features, just play the AUTO-RUN CD bundled to have your network set up quickly & hassle-free.

Product Features:

Shares data and Internet access for users, supporting PPPoE, Dynamic IP, Static IP, L2TP, BigPond Cable Internet access Supports TCP/IP, PPPoE, DHCP, ICMP, NAT WDS wireless bridge provides seamless bridging to expand your wireless network Supports 54/48/36/24/18/12/9/6/11/5.5/3/2/1Mbps wireless LAN data transfer rates. Supports Wireless Roaming. Works as both access point(AP) and router. Supports 64/128/152-bit WEP, complies with 128 bit WPA standard(TKIP/AES), supports MIC, IV Expansion, Shared Key Authentication. Provides wireless LAN ACL (Access Control List) filtering. Provides 802.1x authentication for WAN port. Built-in DHCP server supporting static IP address distributing. Built-in NAT server supporting Virtual Server, Special Application, and DMZ host. Supports UPnP, Dynamic DNS, Static Routing, VPN pass-through.

2010.12.14. 12:09

Supports time-based access control. Built-in firewall supporting IP address filtering, Domain Name filtering, and MAC address filtering. Supports Flow Statistics. Supports ICMP-FLOOD, UDP-FLOOD, TCP-SYN-FLOOD filter. Supports firmware web-site upgrade. Supports Remote and Web management.

Product Specifications:

Software Specification Standards Wireless Signal Rates With Automatic Fallback Frequency Range Wireless Transmit Power (MAX) IEEE 802.11g, IEEE 802.11b 11g: Up to 54Mbps(dynamic) 11b: Up to 11Mbps(dynamic) 2.4-2.4835GHz
IEEE 802.11b: DQPSK, DBPSK, DSSS, Modulation Technology and CCK IEEE 802.11g: BPSK, QPSK, 16QAM, 64QAM, OFDM 54M: -68dBm@10% PER 11M: -85dBm@8% PER Receiver Sensitivity 6M: -88dBm@10% PER 1M: -90dBm@8% PER 256K: -105dBm@8% PER AP Router Mode Wireless Mode Bridge mode (point-to-point / point to Multi-point) SSID Enable/Disable MAC Address Filter Wireless Security 64/128/152-bit WEP Encryption WPA/WPA2/WPA-PSK/WPA2-PSK (AES/TKIP) Encryption

Hardware Specification 4 10/100M LAN Ports(RJ45) 1 10/100M WAN Port(RJ45) 3dBi Detachable Omni Directional Antenna (Reverse SMA Connector) Input: Localized to Country of Sale Output: 9VAC / 0.8A Linear PSU

Interface

Antenna

Power Supply Unit

Operating Temperature Storage Temperature Relative Humidity Storage Humidity Dimensions

0?~40? (32?~104?)

-40?~70? (-40?~158?) 10% ~ 90%, Non Condensation 5%~95% Non-Condensing 6.3 ?.0?.1in. (160?02?8 mm) (without antenna)