Tenda Router 11N User Manual

							                      11N Wireless Broadband Router User Guide 
 36 
 
Chapter 7 Virtual Server 
7.1 Port Range Forwarding 
  Start/End port: Enter  the  start/end  port  number  which  ranges  the  External  ports 
used to set the server or Internet applications. 
 LAN IP: Enter the IP address of the PC which you want to set as the server. 
 Protocol: Select  the  protocol  (TCP/UDP/Both)  for  the application. If  you  are  not 
clear about the protocol you are using, you can select “Both”. 
 Enable: Click the Enable checkbox to bring the set rule into effect.  
 Delete: Clear all settings of this item. 
 Well-known service port: The  well-known  protocol  ports  are  listed  in  the 
drop-down list. Select one and select a sequence number in the ID drop-down list 
and then click  “Add”,  this port  will  be added  automatically to  the ID list.  For other 
well known service ports that are not listed, you can manually add them to the list. 
 Add to: Add the selected well-known port to the policy ID. 
For Example: You want to share some large files with your friends outside of your local 
area network, however, they are too big, and it’s not convenient to transfer them. Then, 
you can build a FTP server on your computer and set the router’s port range forwarding 
to enable your friends to access to these files on your computer. Suppose that your FTP  
						

							                      11N Wireless Broadband Router User Guide 
 37 
server  or  your  computer’s  static  IP  address  is  192.168.0.10,  and you  wish  your  friends 
can access the server through the default port 21 and adopts TCP protocol. 
  
Please follow the steps below to configure. 
1.Enter  21  in  both  start  port  and  end  port  fields,  or  you  can  also  select  FTP  from  the 
well-known  service  port  and  its  port  21  will  be  added  to  the  corresponding  field 
automatically. 
2. Enter 192.168.0.10 in the LAN IP column, and then select “Both” as the protocol and 
select “Enable”. 
3. As the picture shown below. 
 4. Click the “Ok” button to save the settings. 
And now,  when your  friends  want  to  visit  the  FTP  server,  they only  need  to  enter 
ftp://xxx.xxx.xxx.xxx:21 in  the  address field. Here, xxx.xxx.xxx.xxx  means  the  router’s 
WAN  IP address.  For example,  when your  router’s  WAN  IP  address  is 172.16.102.89; 
your friends need to enter ftp://172.16.102.89:21 in the address field. 
 
NOTE:  
If you set the service port of the virtual server as 80, you must set the Web management 
port  on  Remote  Web  Management screen to  be  any  value  except  80  such  as  8080. 
Otherwise, there will be a conflict to disable the virtual server.   
						

							                      11N Wireless Broadband Router User Guide 
 38 
7.2 DMZ Settings 
The  DMZ Settings  screen  allows  one  local computer  to  be  exposed  to  the  Internet  for 
use  of a  special-purpose  service such as  Internet  gaming  or  videoconferencing. DMZ 
hosting forwards all the ports at the same time to one PC.  
  DMZ  Host  IP  Address: The IP  address  of the LAN computer  you  want  to set as 
DMZ host. 
 Enable: Check to enable the DMZ host. 
 
For example:  
Set the computer at the IP address of 192.168.0.10 as DMZ host to connect another host 
on the Internet for intercommunication. 
NOTE:  
When the DMZ host is enabled, the firewall settings of the DMZ host will not function. 
 
7.3 UPNP Settings 
UPnP  (Universal  Plug  and  Play).With  the  UPnP  function,  the  internal  host  can  request 
the  router  to  process  some  special  port  switching  so  as  to  enable  the  external  host  to 
visit the resources of the internal host. 
   
						

							                      11N Wireless Broadband Router User Guide 
 39 
 Enable UPnP: Click the checkbox to enable the UPnP. 
NOTE:  
This  function  goes  into  effect  under  Windows  XP  or  Windows  ME  (NOTE:  the  system 
should  integrate or  have  installed the Directx  9.0)  or this function  would  go  into effect  if 
you have installed software that supports UPnP. 
   
						

							                      11N Wireless Broadband Router User Guide 
 40 
 
Chapter 8 Security Settings 
8.1 Client Filter Settings 
You  can  enable  client  filter  to  control LAN  computers’  access  to  some  ports  of  the 
Internet。 
 
  Filter Mode: You can select either “Permit only” or “Forbid only”. 
 Access Policy: Select one number from the drop-down list. 
 Remark: A simple description of the configured file. You can also leave it blank. 
 Start/End IP: Enter the start/end IP address. 
 Port: Enter  the  controlled  TCP/UDP  protocol  port.  You  can  specify  a  port  or  port 
range. 
 Type: Select one protocol (TCP/UDP/Both) from the drop-down list.  
 Time: Select the time range of client filter.  
 Date: Select the day(s) to run the access policy. 
 Enable: To  enable/disable the  access  policy (forbid/permit the  packets  matched 
with the access policy to pass through the router.  
 
Example1 Forbid LAN computers at the IP addresses of 192.168.0.100--192.168.0.120 
to access the Internet.  
						

							                      11N Wireless Broadband Router User Guide 
 41 
 
Example 2   Permit LAN  computer  with  the  IP  address  of  192.168.0.145 to access 
websites during 8:00 to 18:00 from Sunday to Saturday. 
 
 
8.2 MAC Address Filter 
You can limit the computer’s access to Internet by MAC Address Filter.  
  
						

							                      11N Wireless Broadband Router User Guide 
 42 
  Filter mode: You can select either “Permit only” or “Forbid only”. 
 Access Policy: Select one number from the drop-down list. 
 Remark: A simple description of the configured file. You can also leave it blank. 
 MAC Address: Enter the MAC address you want to run the access policy. 
 Time: Select the time range of MAC address   filter. 
 Date: Select the day(s) to run the access policy. 
 Enable: To enable/disable the  access  policy (forbid/permit the  packets  matched 
with the access policy to pass through the router). 
  
Example 1 Forbid the computer with the MAC address of 00:E0:4C:69:A3:23 to access 
Internet during 8:00 to 18:00 from Monday to Friday. 
 Example 2 Permit the computer with the MAC address of 00:E4:A5:44:35:69 to access 
Internet from Monday to Friday.  
						

							                      11N Wireless Broadband Router User Guide 
 43 
  
8.3 URL Filter Settings 
You can use URL filtering to forbid their access to certain websites at a specified time. 
  Filter Mode: You can select either “Permit only” or “Forbid only”. 
 Access Policy: Select one number from the drop-down list. 
 Remark: A simple description of the configured file. You can also leave it blank. 
 Start/End IP: Enter the start/end IP address. 
 URL character string:  Specify  the  text  strings  or  keywords  needed  to  be 
filtered.  
 Time: Select the time range of URL filter. 
 Date: Select the day(s) to run the access policy. 
 Enable: To  enable/disable the  access  policy (forbid /permit the  packets  matched  
						

							                      11N Wireless Broadband Router User Guide 
 44 
with the access policy to pass through the router).  
Example1 Forbid all computers on LAN to access baidu.com during 8:00 to 18:00 from 
Monday to Friday. 
 Example2 Permit LAN computers with the IP addresses of 192.168.0.100- 
192.168.0.115 to access yahoo.com. 
  
NOTE:  
Enter only one domain name for each access policy for one access policy can only filter 
one  domain  name.  So,  if  you  want  to  filter  multiple  domain  names,  you  need  to set 
multiple access policies 
   
						

							                      11N Wireless Broadband Router User Guide 
 45 
8.4 Remote Web Management 
This  section  instructs  how  to  allow  the  network  administrator  to  manage  the  Router 
remotely. If you want to access the Router from outside of the local network, please click 
the checkbox after “Enable”. 
  Enable: Check to enable remote web management. 
 Port: The management port open to outside access. The default value is 80. 
 IP  Address: Specify  the  range  of  the IP  addresses of  the  computers on  the 
Internet for remote management. 
 
NOTE: 
1. If you want to log in the device’s Web-based Utility via port 8080, you need to use the 
format of WAN IP address: port (for example http：//220.135.211.56:8080) to implement 
remote login.  
2. If your WAN IP address starts and ends with 0.0.0.0, it means all hosts on the Internet 
can  implement  remote  Web  management.  If  you  change  the Internet IP  address  as 
218.88.93.33-218.88.93.35,  then  only  the computers  at  the IP addresses of 
218.88.93.33,  218.88.93.34  and  218.88.93.35  can  access  the  Router to  implement 
remote web management. 
For example:  
If  you  want  to  configure  the computer  at  the IP  address of 218.88.93.33  to  access  the 
router’s web-based utility via port 8080, please set the parameters as above.