Figure 4-4 the Network menu
There are three submenus under the Network menu (shown in Figure 4-4): LAN, WAN and MAC Clone. Click any of them, and you will be able to configure the corresponding function.

4.5.1 LAN

Choose menu NetworkLAN, you can configure the IP parameters of the LAN on the screen as below.

Figure 4-5 LAN

MAC Address - The physical address of the Router, as seen from the LAN. The value can't be changed. IP Address - Enter the IP address of your Router or reset it in dotted-decimal notation (factory default: 192.168.1.1). Subnet Mask - An address code that determines the size of the network. Normally use 255.255.255.0 as the subnet mask. Note: a. b. If you change the IP Address of LAN, you must use the new IP Address to login the Router. If the new LAN IP Address you set is not in the same subnet, the IP Address pool of the DHCP server will change accordingly at the same timewhile the Virtual Server and DMZ Host will not take effect until they are re-configured.

4.5.2 WAN

Choose menu NetworkWAN, you can configure the IP parameters of the WAN on the screen below.

TL-WR941N/TL-WR941ND 1.

If your ISP provides the DHCP service, please choose Dynamic IP type, and the Router will automatically get IP parameters from your ISP. You can see the page as follows (Figure 4-6):
Figure 4-6 WAN - Dynamic IP
This page displays the WAN IP parameters assigned dynamically by your ISP, including IP address, Subnet Mask, Default Gateway, etc. Click the Renew button to renew the IP parameters from your ISP. Click the Release button to release the IP parameters. MTU Size - The normal MTU (Maximum Transmission Unit) value for most Ethernet networks is 1500 Bytes. It is not recommended that you change the default MTU Size unless required by your ISP. Use These DNS Servers - If your ISP gives you one or two DNS addresses, select Use These DNS Servers and enter the primary and secondary addresses into the correct fields. Otherwise, the DNS servers will be assigned dynamically from your ISP. Note: If you find error when you go to a Web site after entering the DNS addresses, it is likely that your DNS servers are set up improperly. You should contact your ISP to get DNS server addresses. Get IP with Unicast DHCP - A few ISPs' DHCP servers do not support the broadcast applications. If you cannot get the IP Address normally, you can choose this option. (It is rarely required.)

Figure 4-9 PPPoE Advanced Settings
MTU Size - The default MTU size is 1480 bytes, which is usually fine. It is not recommended that you change the default MTU Size unless required by your ISP. Service Name/AC Name - The service name and AC (Access Concentrator) name, which should not be configured unless you are sure it is necessary for your ISP. In most cases, leaving these fields blank will work. ISP Specified IP Address - If your ISP does not automatically assign IP addresses to the Router during login, please click Use IP address specified by ISP check box and enter the IP address provided by your ISP in dotted-decimal notation.
Detect Online Interval - The Router will detect Access Concentrator online at every interval. The default value is 0. You can input the value between 0and 120. The value 0 means no detect. DNS IP address - If your ISP does not automatically assign DNS addresses to the Router during login, please click Use the following DNS servers check box and enter the IP address in dotted-decimal notation of your ISPs primary DNS server. If a secondary DNS server address is available, enter it as well. Click the Save button to save your settings. 4. If your ISP provides BigPond Cable (or Heart Beat Signal) connection, please select BigPond Cable. And you should enter the following parameters (Figure 4-10):

Figure 4-10

User Name/Password - Enter the User Name and Password provided by your ISP. These fields are case-sensitive. Auth Server - Enter the authenticating server IP address or host name. Auth Domain - Type in the domain suffix server name based on your location. e.g. NSW / ACT - nsw.bigpond.net.au
TL-WR941N/TL-WR941ND VIC / TAS / WA / SA / NT - vic.bigpond.net.au QLD - qld.bigpond.net.au
MTU Size - The normal MTU (Maximum Transmission Unit) value for most Ethernet networks is 1500 Bytes. It is not recommended that you change the default MTU Size unless required by your ISP. Connect on Demand - In this mode, the Internet connection can be terminated automatically after a specified inactivity period (Max Idle Time) and be re-established when you attempt to access the Internet again. If you want your Internet connection keeps active all the time, please enter 0 in the Max Idle Time field. Otherwise, enter the number of minutes you want to have elapsed before your Internet access disconnects. Connect Automatically - The connection can be re-established automatically when it was down. Connect Manually - You can click the Connect/Disconnect button to connect/disconnect immediately. This mode also supports the Max Idle Time function as Connect on Demand mode. The Internet connection can be disconnected automatically after a specified inactivity period and re-established when you attempt to access the Internet again. Click the Connect button to connect immediately. Click the Disconnect button to disconnect immediately. Caution: Sometimes the connection cannot be terminated although you specify a time to Max Idle Time because some applications are visiting the Internet continually in the background. Click the Save button to save your settings. 5. If your ISP provides L2TP connection, please select L2TP option. And you should enter the following parameters (Figure 4-11):

Note Dialog Note: Limited by local law regulations, version for North America does not have region selection option.
Channel - This field determines which operating frequency will be used. The default channel is set to Auto, so the AP will choose the best channel automatically. It is not necessary to change the wireless channel unless you notice interference problems with another nearby access point. Mode - Select the desired mode. The default setting is 11bgn mixed. 11b only - Select if all of your wireless clients are 802.11b. 11g only - Select if all of your wireless clients are 802.11g. 11n only- Select only if all of your wireless clients are 802.11n. 11bg mixed - Select if you are using both 802.11b and 802.11g wireless clients. 11bgn mixed - Select if you are using a mix of 802.11b, 11g, and 11n wireless clients. Select the desired wireless mode. When 802.11g mode is selected, only 802.11g wireless stations can connect to the Router. When 802.11n mode is selected, only 802.11n wireless stations can connect to the AP. It is strongly recommended that you set the Mode to 802.11b&g&n, and all of 802.11b, 802.11g, and 802.11n wireless stations can connect to the Router. Channel width - Select any channel width from the pull-down list. The default setting is automatic, which can adjust the channel width for your clients automatically. Note: If 11b only, 11g only, or 11bg mixed is selected in the Mode field, the Channel Width selecting field will turn grey and the value will become 20M, which is unable to be changed. Max Tx Rate - You can limit the maximum tx rate of the Router through this field. Enable Wireless Router Radio - The wireless radio of this Router can be enabled or disabled to allow wireless stations access. Enable SSID Broadcast - When wireless clients survey the local area for wireless networks to associate with, they will detect the SSID broadcast by the Router. If you select the Enable SSID Broadcast checkbox, the Wireless Router will broadcast its name (SSID) on the air.

4.6.2 Wireless Security

Choose menu WirelessWireless Security, you can configure the security settings of your wireless network. There are five wireless security modes supported by the Router: WEP (Wired Equivalent Privacy), WPA (Wi-Fi Protected Access), WPA2 (Wi-Fi Protected Access 2), WPA2-PSK (Pre-Shared Key), WPA-PSK (Pre-Shared Key).

Figure 4-16

Disable Security - If you do not want to use wireless security, select this check box, but its strongly recommended to choose one of the following modes to enable security. WEP - It is based on the IEEE 802.11 standard. If you select this check box, you will find a notice in red as show in Figure 4-17.

Figure 4-17

Type - you can choose the type for the WEP security on the pull-down list. The default
setting is Automatic, which can select Open System or Shared Key authentication type automatically based on the wireless station's capability and request.

/00-0A-EB-00-23-11 in the MAC Address field, then enter wireless station A/B in the Description field, while select Enabled in the Status pull-down list. Finally, click the Save and the Back button. The filtering rules that configured should be similar to the following list:

4.6.4 Wireless Advanced

Choose menu WirelessWireless Advanced, you can configure the advanced settings of your wireless network.
Figure 4-22 Wireless Advanced Transmit Power - Here you can specify the transmit power of Router. You can select High, Middle or Low which you would like. High is the default setting and is recommended. Beacon Interval - Enter a value between 20-1000 milliseconds for Beacon Interval here. The beacons are the packets sent by the router to synchronize a wireless network. Beacon Interval value determines the time interval of the beacons. The default value is 100. RTS Threshold - Here you can specify the RTS (Request to Send) Threshold. If the packet is larger than the specified RTS Threshold size, the router will send RTS frames to a particular receiving station and negotiate the sending of a data frame. The default value is 2346. Fragmentation Threshold - This value is the maximum size determining whether packets will be fragmented. Setting the Fragmentation Threshold too low may result in poor network performance since excessive packets. 2346 is the default setting and is recommended. DTIM Interval - This value determines the interval of the Delivery Traffic Indication Message (DTIM). A DTIM field is a countdown field informing clients of the next window for listening to broadcast and multicast messages. When the Router has buffered broadcast or multicast messages for associated clients, it sends the next DTIM with a DTIM Interval value. You can specify the value between 1-255 Beacon Intervals. The default value is 1, which indicates the DTIM Interval is the same as Beacon Interval. Enable WMM - WMM function can guarantee the packets with high- priority messages being transmitted preferentially. It is strongly recommended enabled.
Enable Short GI - This function is recommended for it will increase the data capacity by reducing the guard interval time. Enabled AP Isolation - This function can isolate wireless stations on your network from each other. Wireless devices will be able to communicate with the Router but not with each other. To use this function, check this box. AP Isolation is disabled by default. Note: If you are not familiar with the setting items in this page, it's strongly recommended to keep the provided default values; otherwise it may result in lower wireless network performance.

Figure 4-30 Virtual Servers
Service Port - The numbers of External Ports. You can type a service port or a range of service ports (in XXX YYY format, XXX is the start port number, YYY is the end port number). IP Address - The IP Address of the PC providing the service application. Protocol - The protocol used for this application, either TCP, UDP, or All (all protocols supported by the Router). Status - The status of this entry either Enabled or Disabled. To setup a virtual server entry: 1. 2. Click the Add New button. (pop-up Figure 4-31) Select the service you want to use from the Common Service Port list. If the Common Service Port list does not have the service that you want to use, type the number of the service port or service port range in the Service Port box. 3. 4. 5. 6. Type the IP Address of the computer in the IP Address box. Select the protocol used for this application, either TCP or UDP, or All. Select the Enable check box to enable the virtual server. Click the Save button.
Figure 4-31 Add or Modify a Virtual Server Entry
TL-WR941N/TL-WR941ND Note:
If your computer or server has more than one type of available service, please select another service, and enter the same IP Address for that computer or server. To modify or delete an existing entry: 1. 2. 3. Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete. Modify the information. Click the Save button.
Click the Enable/ Disabled All button to make all entries enabled/ disabled. Click the Delete All button to delete all entries. Click the Next button to go to the next page and click the Previous button to return the previous page. Note: If you set the service port of the virtual server as 80, you must set the Web management port on System Tools > Remote Management page to be any other value except 80 such as 8080. Otherwise there will be a conflict to disable the virtual server.

4.8.2 Port Triggering

Choose menu ForwardingPort Triggering, you can view and add port triggering in the next screen (shown in Figure 4-32). Some applications require multiple connections, like Internet games, video conferencing, Internet calling and so on. These applications cannot work with a pure NAT Router. Port Triggering is used for some of these applications that can work with an NAT Router.

Figure 4-32 Port Triggering
Once the Router is configured, the operation is as follows: 1. A local host makes an outgoing connection using a destination port number defined in the Trigger Port field. 2. The Router records this connection, opens the incoming port or ports associated with this
entry in the Port Triggering table, and associates them with the local host. 3. When necessary the external host will be able to connect to the local host using one of the ports defined in the Incoming Ports field. Trigger Port - The port for outgoing traffic. An outgoing connection using this port will "Trigger" this rule. Trigger Protocol - The protocol used for Trigger Ports, either TCP, UDP, or All (all protocols supported by the Router). Incoming Ports Range - The port or port range used by the remote system when it responds to the outgoing request. A response using one of these ports will be forwarded to the PC that triggered this rule. You can input at most 5 groups of ports (or port section). Every group of ports must be set apart with ",". For example, 2000-2038, 2050-2051, 2085, 3010-3030. Incoming Protocol - The protocol used for Incoming Ports Range, either TCP or UDP, or ALL (all protocols supported by the Router). Status - The status of this entry either Enabled or Disabled. To add a new rule, follow the steps below. 1. 2. Click the Add New button, the next screen will pop-up as shown in Figure 4-33. Select a common application from the Common Applications drop-down list, then the Trigger Port field and the Incoming Ports field will be automatically filled. If the Common Applications do not have the application you need, enter the Trigger Port and the Incoming Ports manually. 3. 4. 5. 6. Select the protocol used for Trigger Port from the Trigger Protocol drop-down list, either TCP, UDP, or All. Select the protocol used for Incoming Ports from the Incoming Protocol drop-down list, either TCP or UDP, or All. Select Enable in Status field. Click the Save button to save the new rule.
Figure 4-33 Add or Modify a Triggering Entry
To modify or delete an existing entry: 1. Click the Modify in the entry you want to modify. If you want to delete the entry, click the Delete. 2. 3. Modify the information. Click the Save button.
Click the Enable All button to make all entries enabled Click the Disabled All button to make all entries disabled. Click the Delete All button to delete all entries Note: 1. 2. When the trigger connection is released, the according opening ports will be closed. Each rule allowed to be used only by one host on LAN synchronously. The trigger connection of other hosts on LAN will be refused. 3. Incoming Port Range cannot overlap each other.

4.8.3 DMZ

Choose menu ForwardingDMZ, you can view and configure DMZ host in the screen (shown in Figure 4-34).The DMZ host feature allows one local host to be exposed to the Internet for a special-purpose service such as Internet gaming or videoconferencing. DMZ host forwards all the ports at the same time. Any PC whose port is being forwarded must have its DHCP client function disabled and should have a new static IP Address assigned to it because its IP Address may be changed when using the DHCP function.

Figure 4-34 DMZ

To assign a computer or server to be a DMZ server: 1. 2. 3. Click the Enable radio button Enter the local host IP Address in the DMZ Host IP Address field Click the Save button. Note: After you set the DMZ host, the firewall related to the host will not work.

4.8.4 UPnP

Choose menu ForwardingUPnP, you can view the information about UPnP(Universal Plug and Play) in the screen (shown in Figure 4-35).The UPnP feature allows the devices, such as Internet computers, to access the local host resources or devices as needed. UPnP devices can be automatically discovered by the UPnP service application on the LAN.

Figure 4-35 UPnP Setting

Current UPnP Status - UPnP can be enabled or disabled by clicking the Enable or Disable button. As allowing this may present a risk to security, this feature is enabled by default. Current UPnP Settings List - This table displays the current UPnP information.
App Description -The description provided by the application in the UPnP request External Port - External port, which the router opened for the application. Protocol - Shows which type of protocol is opened. Internal Port - Internal port, which the router opened for local host. IP Address - The UPnP device that is currently accessing the router. Status - The ports status displayed here. Enabled means that port is still active. Otherwise, the port is inactive.
Click Refresh to update the Current UPnP Settings List.

4.9 Security

Figure 4-36 The Security menu
There are four submenus under the Security menu as shown in Figure 4-36: Basic Security, Advanced Security, Local Management and Remote Management. Click any of them, and you will be able to configure the corresponding function.

4.9.1 Basic Security

Choose menu Security Basic Security, you can configure the basic security in the screen as shown in Figure 4-37.
Figure 4-37 Basic Security
Firewall - A firewall protects your network from the outside world. Here you can enable or disable the Routers firewall. SPI Firewall - SPI (Stateful Packet Inspection, also known as dynamic packet filtering) helps to prevent cyber attacks by tracking more state per session. It validates that the traffic passing through the session conforms to the protocol. SPI Firewall is enabled by factory default. If you want all the computers on the LAN exposed to the outside world, you can disable it. VPN - VPN Passthrough must be enabled if you want to allow VPN tunnels using IPSec, PPTP, or L2TP protocols to pass through the Routers firewall. PPTP Passthrough - Point-to-Point Tunneling Protocol (PPTP) allows the Point-to-Point Protocol (PPP) to be tunneled through an IP network. To allow PPTP tunnels to pass through the Router, keep the default, Enabled. L2TP Passthrough - Layer 2 Tunneling Protocol (L2TP) is the method used to enable Point-to-Point sessions via the Internet on the Layer 2 level. To allow L2TP tunnels to pass through the Router, keep the default, Enabled. IPSec Passthrough - Internet Protocol Security (IPSec) is a suite of protocols for ensuring private, secure communications over Internet Protocol (IP) networks, through the use of cryptographic security services. To allow IPSec tunnels to pass through the Router, keep the default, Enabled.

4.9.3 Local Management

Choose menu Security Local Management, you can configure the management rule in the screen as shown in Figure 4-39. The management feature allows you to deny computers in LAN from accessing the Router.
Figure 4-39 Local Management
By default, the radio button All the PCs on the LAN are allowed to access the Router's Web-Based Utility is checked. If you want to allow PCs with specific MAC Addresses to access the Setup page of the Router's Web-Based Utility locally from inside the network, check the radio button Only the PCs listed can browse the built-in web pages to perform Administrator tasks, and then enter each MAC Address in a separate field. The format for the MAC Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). Only the PCs with MAC address listed can use the password to browse the built-in web pages to perform Administrator tasks while all the others will be blocked. After click the Add button, your PC's MAC Address will be placed in the list above. Click the Save button to save your settings. Note: If your PC is blocked but you want to access the Router again, use a pin to press and hold the Reset Button (hole) on the back panel for about 5 seconds to reset the Routers factory defaults on the Routers Web-Based Utility.

4.9.4 Remote Management

Choose menu Security Remote Management, you can configure the Remote Management
function in the screen as shown in Figure 4-40. This feature allows you to manage your Router from a remote location via the Internet.
Figure 4-40 Remote Management
Web Management Port - Web browser access normally uses the standard HTTP service port 80. This Router's default remote management web port number is 80. For greater security, you can change the remote management web port to a custom port by entering that number in the box provided. Choose a number between 1 and 65534 but do not use the number of any common service port. Remote Management IP Address - This is the current address you will use when accessing your Router from the Internet. This function is disabled when the IP address is set to the default value of 0.0.0.0. To enable this function change 0.0.0.0 to a valid IP address. If set to 255.255.255.255, then all the hosts can access the Router from internet. Note: 1) To access the Router, you should type your Router's WAN IP address into your browser's address (in IE) or Location (in Navigator) box, followed by a colon and the custom port number. For example, if your Router's WAN address is 202.96.12.8, and the port number used is 8080, please enter http://202.96.12.8:8080 in your browser. Later, you may be asked for the Router's password. After successfully entering the username and password, you will be able to access the Router's web-based utility. 2) Be sure to change the Router's default password to a very secure password.

4.11.2 Host

Choose menu Access Control Host, you can view and set a Host list in the screen as shown in Figure 4-47. The host list is necessary for the Access Control Rule.
Figure 4-47 Host Settings
Host Description - Here displays the description of the host and this description is unique. Information - Here displays the information about the host. It can be IP or MAC. Modify - To modify or delete an existing entry. To add a new entry, please follow the steps below. 1. 2. Click the Add New button. In the Mode field, select IP Address or MAC Address. If you select IP Address, the screen shown is Figure 4-48. 1) In Host Description field, create a unique description for the host (e.g. Host_1).
TL-WR941N/TL-WR941ND 2) In LAN IP Address field, enter the IP address. If you select MAC Address, the screen shown is Figure 4-49.
1) In Host Description field, create a unique description for the host (e.g. Host_1). 2) In MAC Address field, enter the MAC address. 3. Click the Save button to complete the settings.
Click the Delete All button to delete all the entries in the table. Click the Next button to go to the next page, or click the Previous button return to the previous page.
Figure 4-48 Add or Modify a Host Entry
Figure 4-49 Add or Modify a Host Entry
For example: If you desire to restrict the internet activities of host with MAC address 00-11-22-33-44-AA, you should first follow the settings below: 1. Click Add New. button in Figure 4-47 to enter the Add or Modify a Host Entry page. 2. In Mode field, select MAC Address from the drop-down list. 3. In Host Description field, create a unique description for the host (e.g. Host_1). 4. In MAC Address field, enter 00-11-22-33-44-AA. 5. Click Save to complete the settings. Then you will go back to the Host Settings page and see the following list.

4.11.3 Target

Choose menu Access Control Target, you can view and set a Target list in the screen as shown in Figure 4-50. The target list is necessary for the Access Control Rule.
Figure 4-50 Target Settings
Target Description - Here displays the description about the target and this description is unique. Information - The target can be IP address, port, or domain name. Modify - To modify or delete an existing entry. To add a new entry, please follow the steps below. 1. 2. Click the Add New button. In Mode field, select IP Address or Domain Name. If you select IP Address, the screen shown is Figure 4-51. 1) In Target Description field, create a unique description for the target (e.g. Target_1). 2) In IP Address field, enter the IP address of the target. 3) Select a common service from Common Service Port drop-down list, so that the Target Port will be automatically filled. If the Common Service Port drop-down list doesnt have the service you want, specify the Target Port manually. 4) In Protocol field, select TCP, UDP, ICMP or ALL. If you select Domain Name, the screen shown is Figure 4-52. 1) In Target Description field, create a unique description for the target (e.g. Target_1). 2) In Domain Name field, enter the domain name, either the full name or the keywords (for example google) in the blank. Any domain name with keywords in it (www.google.com, www.google.cn) will be blocked or allowed. You can enter 4 domain names. 3. Click the Save button.

Diagnostic Tool - Check the radio button to select one diagnostic too. Ping - This diagnostic tool troubleshoots connectivity, reachability, and name resolution to a given host or gateway. Traceroute - This diagnostic tool tests the performance of a connection. Note: You can use ping/traceroute to test both numeric IP address or domain name. If pinging/tracerouting the IP address is successful, but pinging/tracerouting the domain name is not, you might have a name resolution problem. In this case, ensure that the domain name you are specifying can be resolved by using Domain Name System (DNS) queries. IP Address/Domain Name - Type the destination IP address (such as 202.108.22.5) or Domain name (such as www.tp-link.com) Pings Count - The number of Ping packets for a Ping connection. Ping Packet Size - The size of Ping packet.
Ping Timeout - Set the waiting time for the reply of each Ping packet. If there is no reply in the specified time, the connection is overtime. Traceroute Max TTL - The max number of hops for a Traceroute connection. Click Start to check the connectivity of the Internet. The Diagnostic Results page displays the result of diagnosis. If the result is similar to the following screen, the connectivity of the Internet is fine.

Figure 4-72 Note:

Diagnostic Results
Only one user can use this tool at one time. Options Number of Pings, Ping Size and Ping Timeout are used for Ping function. Option Tracert Hops are used for Tracert function.

4.16.3 Firmware Upgrade

Choose menu System Tools Firmware Upgrade, you can update the latest version of firmware for the Router on the following screen.
Figure 4-73 Firmware Upgrade
Firmware Version - This displays the current firmware version. Hardware Version - This displays the current hardware version. The hardware version of the upgrade file must accord with the Routers current hardware version. To upgrade the Router's firmware, follow these instructions below: 1. Download a more recent firmware upgrade file from the TP-LINK website ((www.tp-link.com).
2. Type the path and file name of the update file into the File field. Or click the Browse button to locate the update file. 3. Click the Upgrade button. Note: 1) New firmware versions are posted at www.tp-link.com and can be downloaded for free. There is no need to upgrade the firmware unless the new firmware has a new feature you want to use. However, when experiencing problems caused by the Router rather than the configuration, you can try to upgrade the firmware. 2) When you upgrade the Router's firmware, you may lose its current configurations, so before upgrading the firmware please write down some of your customized settings to avoid losing important settings. 3) Do not turn off the Router or press the Reset button while the firmware is being upgraded, otherwise, the Router may be damaged. 4) The Router will reboot after the upgrading has been finished.

4.16.4 Factory Defaults

Choose menu System Tools Factory Defaults, and you can restore the configurations of the Router to factory defaults on the following screen
Figure 4-74 Restore Factory Default
Click the Restore button to reset all configuration settings to their default values.
The default User Name: admin The default Password: admin The default IP Address: 192.168.1.1 The default Subnet Mask: 255.255.255.0
Note: Any settings you have saved will be lost when the default settings are restored.
4.16.5 Backup & Restore
Choose menu System Tools Backup & Restore, you can save the current configuration of the Router as a backup file and restore the configuration via a backup file as shown in Figure 4-75.
Figure 4-75 Backup & Restore Configuration
Click the Backup button to save all configuration settings as a backup file in your local computer. To upgrade the Router's configuration, follow these instructions.
Click the Browse button to locate the update file for the Router, or enter the exact path to the Setting file in the text box. Click the Restore button.
Note: The current configuration will be covered by the uploading configuration file. The upgrade process lasts for 20 seconds and the Router will restart automatically. Keep the Router on during the upgrading process to prevent any damage.

4.16.6 Reboot

Choose menu System Tools Reboot, you can click the Reboot button to reboot the Router via the next screen.
Figure 4-76 Reboot the Router
Some settings of the Router will take effect only after rebooting, which include Change the LAN IP Address (system will reboot automatically). Change the DHCP Settings. Change the Wireless configurations. Change the Web Management Port. Upgrade the firmware of the Router (system will reboot automatically). Restore the Router's settings to factory defaults (system will reboot automatically). Update the configuration with the file (system will reboot automatically.

4.16.7 Password

There would be 5 entries on each page. Click Previous to return to the previous page and Next to the next page.

Appendix A: FAQ

1. How do I configure the Router to access Internet by ADSL users? 1) 2) First, configure the ADSL Modem configured in RFC1483 bridge model. Connect the Ethernet cable from your ADSL Modem to the WAN port on the Router. The telephone cord plugs into the Line port of the ADSL Modem. 3) Login to the Router, click the Network menu on the left of your browser, and click "WAN" submenu. On the WAN page, select PPPoE for WAN Connection Type. Type user name in the User Name field and password in the Password field, finish by clicking Connect.
Figure A-1 PPPoE Connection Type
If your ADSL lease is in pay-according-time mode, select Connect on Demand or Connect Manually for Internet connection mode. Type an appropriate number for Max Idle Time to avoid wasting paid time. Otherwise, you can select Auto-connecting for Internet connection mode.
Figure A-2 PPPoE Connection Mode
Note: i. Sometimes the connection cannot be disconnected although you specify a time to Max Idle Time, since some applications is visiting the Internet continually in the background. If you are a Cable user, please configure the Router following the above steps.

ii. 2.

How do I configure the Router to access Internet by Ethernet users?

TL-WR941N/TL-WR941ND 1)

Login to the Router, click the Network menu on the left of your browser, and click "WAN" submenu. On the WAN page, select Dynamic IP for "WAN Connection Type", finish by clicking Save.
Some ISPs require that you register the MAC Address of your adapter, which is connected to your cable/DSL Modem during installation. If your ISP requires MAC register, login to the Router and click the "Network" menu link on the left of your browser, and then click "MAC Clone" submenu link. On the "MAC Clone" page, if your PCs MAC address is proper MAC address, click the "Clone MAC Address" button and your PCs MAC address will fill in the "WAN MAC Address" field. Or else, type the MAC Address into the "WAN MAC Address" field. The format for the MAC Address is XX-XX-XX-XX-XX-XX. Then click the "Save" button. It will take effect after rebooting.

Figure A-3 MAC Clone

I want to use Netmeeting, what do I need to do? 1) 2) If you start Netmeeting as a host, you dont need to do anything with the Router. If you start as a response, you need to configure Virtual Server or DMZ Host and make sure the H323 ALG is enabled. 3) How to configure Virtual Server: Log in to the Router, click the Forwarding menu on the left of your browser, and click "Virtual Servers" submenu. On the "Virtual Servers" page, click Add New. Then on the Add or Modify a Virtual Server Entry page, enter 1720 for the Service Port blank, and your IP address for the IP Address blank, taking 192.168.1.169 for an example, remember to Enable and Save.
Figure A-4 Virtual Servers
Figure A-5 Add or Modify a Virtual server Entry
Note: Your opposite side should call your WAN IP, which is displayed on the Status page. 4) How to enable DMZ Host: Log in to the Router, click the Forwarding menu on the left of your browser, and click "DMZ" submenu. On the "DMZ" page, click Enable radio button and type your IP address into the DMZ Host IP Address field, using 192.168.1.169 as an example, remember to click the Save button.

Figure A-6 DMZ

How to enable H323 ALG: Log in to the Router, click the Security menu on the left of your browser, and click Basic Security submenu. On the Basic Security page, check the Enable radio button next to H323 ALG. Remember to click the Save button.

Figure A-7 4.

Basic Security
I want to build a WEB Server on the LAN, what should I do? 1) Because the WEB Server port 80 will interfere with the WEB management port 80 on the Router, you must change the WEB management port number to avoid interference. 2) To change the WEB management port number: Log in to the Router, click the Security menu on the left of your browser, and click "Remote Management" submenu. On the "Remote Management" page, type a port number except 80, such as 88, into the "Web Management Port" field. Click Save and reboot the Router.
Figure A-8 Remote Management Note: If the above configuration takes effect, to configure to the Router by typing http://192.168.1.1:88 (the Routers LAN IP address: Web Management Port) in the address
TL-WR941N/TL-WR941ND field of the Web browser. 3)