TP-Link Router TL-R460 User Manual

							TL-R460Cable/DSL Router User Guide
 
 
34
 
Figure 4-21 
Step 3:  After that, select  Enabled to make the entry take effect. 
Step 4:  Click Save  button to save the configuration. 
) Note: 
1)  If you want to add more than one reserved IP, please go to  step 1 to continue. 
2)  It is possible that you configure more  than one type of available service on a 
computer or server, it means the IP addresses for the virtual servers are same.   
Other configurations for the entries as shown in Figure 4-21: 
C

lick the  Delete button to delete the entry. 
Click the  Enable All button to enable all the entries. 
Click the  Disable All  button to disable all the entries. 
Click the  Delete All  button to delete all the entries. 
Click the  Previous  button to view the informat ion in the previous screen, click the  Next 
button to view the information in the next screen. 
)  Note: 
If you set the virtual server of the servic e port as 80, you must set the web management 
port on  Security –> Remote Management  screen to be any value except 80 such as 
8080. Or else there will be a conflict to disable the virtual server. 
4.5.2  Port Triggering 
Choose menu “ Forwarding→Port Triggering ”, you can view and add port triggerings 
in the next screen (shown in Figure 4-22). 
Some applications require multiple 
 connections , like Internet games, video conferencing, 
Internet calling and so on. These applications cannot work with a pure NAT router. Port 
Triggering is used for some of  these applications that can work with an NAT router.  
						

							TL-R460Cable/DSL Router User Guide
 
 
35
 
Figure 4-22 
¾  Trigger Port  - This displays the port for outgoi ng traffic. An outgoing connection 
using this port will Trigger this rule. 
¾  Trigger Protocol  - This displays the protocol  used for Trigger Ports, either  TCP, 
UDP , or All (all protocols supported by the router). 
¾  Incoming Ports  -  This displays the port or port  range used by the remote system, 
they are used for responding to the out going request. A response using one of 
these ports will be forwarded to the PC that triggered this rule. You can input at 
most 5 groups of ports (or port section). Every group of ports must be apart with ,. 
For example, 2000-2038, 2050-2051, 2085, 3010-3030. 
¾  Incoming Protocol  - This displays the protocol used for Incoming Ports Range, 
either  TCP or UDP , or ALL  (all protocols support ed by the router). 
¾  Status  - This displays the status.  Enabled means that the rule will take effect, 
Disabled  means that the rule will not take effect. 
Once configured, the oper ation for Port Triggering will proceed as follows:   
Step 1:  A local host makes an outgoing connecti on using a destination port number 
defined in the Trigger Port field. 
Step 2:  The router records this connection, opens  the incoming port or ports associated 
with this entry in the Port Triggering t able, and associates them with the local 
host. 
Step 3:  When necessary, the external host will be able to connect to the local host using 
one of the ports defined in the Incoming Ports  field. 
To add/modify a port triggering entry: 
Step 1:  Click Add New… /Modify  shown in  Figure 4-22, you will see a new screen 
shown in  Figure 4-23. 
Step 2:  Select 

the application you want from  the “Common Applications”, then the 
Trigger port and Incoming ports will be added to the corresponding field 
automatically, you only need to configur e the Trigger protocol and Incoming 
Protocol for the entry; If the “Comm on Applications” does not contain the  
						

							TL-R460Cable/DSL Router User Guide
 
 
36
applications that you want, please  configure these options manually. 
 
Figure 4-23 
Step 3:  After that, select  Enabled to make the entry take effect. 
Step 4:  Click Save  button to save the configuration. 
) Note: 
1)  If you want to add more than one reserved IP, please go to  step 1 to continue. 
2)  When the trigger connec tion is released, the according opening ports will be 
closed. 
3)  Each rule allowed to be used only by one host on LAN synchronously. The  trigger connection of other  hosts on LAN will be refused. 
4)  Incoming Port Range cannot overlap each other. 
Other configurations for the entries as shown in  Figure 4-23: 
C

lick the  Delete button to delete the entry. 
Click the  Enable All button to enable all the entries. 
Click the  Disable All  button to disable all the entries. 
Click the  Delete All  button to delete all the entries. 
Click the  Previous  button to view the informat ion in the previous screen, click the  Next 
button to view the information in the next screen. 
4.5.3  DMZ 
Choose menu “ Forwarding→DMZ ”, you can view and confi gure DMZ host in the screen 
(shown in  Figure 4-24). 
The DMZ h
 ost feature allows one local hos t to be exposed to the Internet for a 
special-purpose service such as Inter net gaming or videoconferencing. DMZ host  
						

							TL-R460Cable/DSL Router User Guide
 
 
37
forwards all the ports at the same time. An y PC whose port is being forwarded must have 
its DHCP client function dis abled and should have a new static IP address assigned to it 
because its IP address may change  when using the DHCP function. 
 
Figure 4-24 
To assign a computer or server to be a DMZ server: 
Step 1:  Click the  Enable radio button 
Step 2:  Enter the local host IP address in the  DMZ Host IP Address field 
Step 3:  Click the  Save button. 
) Note: 
After you set the DMZ host, the firewall re lated to the host will not take effect. 
4.5.4 UPnP 
Choose menu “ Forwarding→UPnP ”, you can view the information about UPnP in the 
screen (shown in  Figure 4-25). You can click  Refresh to up
 date the Current UPnP 
Settings List before view ing the information. 
The Universal Plug and Play (UPnP) feature  allows the devices, such as Internet 
computers, to access the local host resour ces or devices as needed. UPnP devices can 
be automatically discovered by the UP nP service application on the LAN. 
 
Figure 4-25 
¾  Current UPnP Status -  If you want to use the Router’s UPnP f unction, please click 
Enable  button. If you don’t want use the function,  please click Disable button.  
						

							TL-R460Cable/DSL Router User Guide
 
 
38
Allowing the function may caus e a risk to security, this feature is disabled by 
default.  
¾  App Description -  This displays the description pr ovided by the application in the 
UPnP request. 
¾  External Port  - This displays the external por t, which the router opened for the 
application. 
¾  Protocol  -  This displays the protoc ol for the application. 
¾  Internal Port  -  This displays the Internal port, which the router opened for local 
host. 
¾  IP Address  -  The UPnP device that is cu rrently accessing the router. 
¾  Status -  This displays the status. Enabled  means that the port is still active, 
Disabled  means that the port is inactive. 
4.6 Security 
Choose menu “ Security”, you can see the subm enus under the main menu:  Firewall, IP 
Address Filtering , Domain Filtering , MAC Filtering , Remote Management  and 
Advanced Security . 
 
Figure 4-26 
Click any of them, and you will be able to  configure the corresponding function. The 
detailed explanations for each submenu are provided below. 
4.6.1  Firewall 
Choose menu “ Security→Firewall ”, you can control the genera l firewall switch in the 
next screen (shown in Figure 4-27). The default setting for the switch is off, and the IP 
Address Filtering, D

NS Filtering and MAC Filtering are disabled, their settings are 
ineffective in this situation.  
						

							TL-R460Cable/DSL Router User Guide
 
 
39
 
Figure 4-27 
¾  Enable Firewall  -  Enable the general firewall switch or not. 
¾  Enable IP Address Filtering  -  Enable the IP Address Filtering or not. There are two 
default filtering rules, please se lect the rule for your need. 
¾  Enable Domain Filtering  - Enable the Domain Filtering or not. There are two 
default filtering rules, please se lect the rule for your need. 
¾  Enable MAC Address Filtering  - Enable MAC Address Filtering or not. There are 
two default filtering rules, please  select the rule for your need. 
4.6.2 IP Address Filtering 
Choose menu “ Security→IP Address Filtering ”, you can configure the IP Address 
filtering rule in the next screen (shown in  Figure 4-28). The IP Address Filtering feature 
allows you to control Internet Access by  specific users on

 your LAN based on their IP 
addresses.  
						

							TL-R460Cable/DSL Router User Guide
 
 
40
 
Figure 4-28 
¾  Effective Time -  This is the time or the range of time  for the entry to take effect. For 
example, 1800 - 2200, it means that the entry will take  effect from 18:00 to 22:00. 
¾  LAN IP - This is the LAN IP address or the range of LAN IP addresses in 
dotted-decimal notation format. For exam ple, 192.168.1.20 - 192.168.1.30. Keep 
the field blank, which means all LAN IP  addresses are controlled by the rule.   
¾  LAN Port  - This is the LAN Port or the range of LAN ports in the field. For example, 
1030 - 2000. Keep the field blank, which means all LAN ports are controlled by the 
rule. 
¾  WAN IP  - This is the WAN IP address or the range of WAN IP addresses in 
dotted-decimal notation format. For  example, 202.96.134.210 – 202.96.134.230. 
Keep the field blank, which m eans all WAN IP addresses are controlled by the rule. 
¾  WAN Port  - This is the WAN Port or the range  of WAN Ports. For example, 25 – 110. 
Keep the field blank, which means all WAN Ports are controlled by the rule. 
¾  Protocol  - This indicates which pr otocol is used, either TCP, UDP , or  All (all 
protocols supported by the router). 
¾  Action  - This field displays the ac tion that the Router takes to deal with the traffic. 
Allow  means that the Router allows  the traffic through the Router, Deny  means that 
the Router rejects the tr affic through the router. 
¾  Status  -  This field displays the status of the rule.  Enabled means the rule will take 
effect, Disabled  means the rule will not take effect. 
To add/modify an IP Address filtering entry: 
For example: If you desire to block E-mail rece ived and sent by the IP address 
192.168.1.7 on your local network  during the time of 1800 to 2200; And wish to make the 
PCs with IP addresses 192.168.1.8 to 192.168.1.12 unable to visit the website of IP 
address 202.96.134.12 all the day, while other  PCs have no limit. You can configure the 
rules as follows.   
						

							TL-R460Cable/DSL Router User Guide
 
 
41
Step 1:  Enable the “Firewall” and “IP Address F iltering” on the Firewall screen (show in 
Figure 4-27), and then, you should select  the Default IP Address Filtering Rul
 e 
Allow the packets not specified by any  filtering rules to pass through the 
router. 
Step 2:  Click Add New… /Modify  shown in  Figure 4-28, you will see a new screen 
shown in  Figure 4-29. 
Step 3:  Enter the “Ef

fective time” that the  rule will take effect as shown in  Figure 4-29. 
Step 4:  Enter the “L

AN IP Address”, “LAN Port”,  “WAN IP Address” and “WAN Port” in 
the corresponding field as shown in  Figure 4-29. 
Step 5:  Select 

the “Protocol”, “Action” and “Statu s” for the rule as shown in the next 
screen. 
 
Figure 4-29 
Step 6:  Click the  Save button to save this entry. 
Step 7:  Go to Step 2  to complete the other rules continually. 
After you finish the configurations, you will see the rules in the table below: 
 
Figure 4-30 
)  Note: 
Before adding an IP Address Filtering ent ry, you should enable the Firewall and the IP 
Address Filtering function first (shown in Figure 4-27).   
						

							TL-R460Cable/DSL Router User Guide
 
 
42
Other configurations for the entries as shown in Figure 4-28: 
C
lick the  Delete button to delete the entry. 
Click the  Enable All button to enable all the entries. 
Click the  Disable All  button to disable all the entries. 
Click the  Delete All  button to delete all the entries. 
Click the  Previous  button to view the informat ion in the previous screen, click the  Next 
button to view the information in the next screen. 
4.6.3  Domain Filtering 
Choose menu “Security →Domain Filtering ”, you can configure  the Domain filtering 
rule in the next screen (shown in  Figure 4-31). The Domain Filte
 ring feature allows you to 
control access to certain websites on the In ternet by specifying their domains or key 
words. 
 
Figure 4-31 
¾  Effective Time  -  This is the time or the range of ti me for the entry to take effect. For 
example, 0800 - 2400, it means that the entry will take  effect from 08:00 to 20:00. 
¾  Domain Name  -  This is the domain or key word  as desired. Leaving the field blank 
means all websites on the Internet  are prohibited from accessing.   
¾  Status  - This field displays the status,  Enabled means the rule is effective, 
Disabled  means the rule is ineffective. 
To add or modify a Domain Filtering entry:  
						

							TL-R460Cable/DSL Router User Guide
 
 
43
For example:  if you want to block the PCs on your LAN from accessing websites 
www.xxyy.com.cn
,  www.aabbcc.com and websites with end of  .net on the Internet, while 
no limit for other websites, y ou can configure as follows. 
Step 1:  Enable the “Firewall” and “Domain Filt ering” on the Firewall screen (show in 
Figure 4-27). 
Step 2:  C

lick  Add New… /Modify  shown in  Figure 4-31, you will see a new screen 
shown in  Figure 4-32. 
Step 3:  Enter the “Ef

fective time” that the rule  will take effect, enter the “Domain Name” 
as shown in  Figure 4-32. 
Step 4:  Select the “

Status” for the rule  as shown in the next screen.   
 
Figure 4-32 
Step 5:  Finally, click  Save to make the rule take effect. 
Step 6:  Go to Step 2  to complete the other rules continually. 
After you finish the configurations, you will see the rules in the table below: 
 
Figure 4-33 
)  Note: 
Before adding an IP Address Filtering ent ry, you should enable the Firewall and the IP 
Address Filtering function first (shown in Figure 4-27).  
Other configurations for the entries

 as shown in Figure 4-28: 
C

lick the  Delete button to delete the entry. 
Click the  Enable All button to enable all the entries. 
Click the  Disable All  button to disable all the entries. 
Click the  Delete All  button to delete all the entries.