TP-Link Router TL-R460 User Manual

							TL-R460Cable/DSL Router User Guide
 
 
44
Click the  Previous  button to view the informat ion in the previous screen, click the  Next 
button to view the information in the next screen. 
4.6.4  MAC Filtering 
Choose menu “ Security→MAC Address Filtering ”, you can configure the MAC 
Address filtering rule in the next screen (shown in  Figure 4-34). The MAC Address 
Filtering feature allows you to  control access 

to the Inte rnet by users on your local 
network based on their MAC addresses. 
 
Figure 4-34 
¾  MAC Address  -  .This is the PC’S MAC address which is controlled by the rule, its 
format of is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). For example: 
00-0E-AE-B0-00-0B. 
¾  Description -  This is the description about t he PC, Fox example: John’s PC. 
¾  Status  - This field displays the status,  Enabled means the rule is effective, 
Disabled  means the rule is ineffective. 
To add or modify a Domain Filtering entry: 
Fox example: If you want to block the PCs with MAC addresses 00-0A-EB-00-07-BE 
and 00-0A-EB-00-07-5F to access the In ternet, you can configure as follows. 
Step 1:  Enable the “Firewall” and “MAC Addre ss Filtering” on the Firewall screen (show 
in  Figure 4-27). And then spec ify the D
 efault MAC Address Filtering Rule Deny 
these PCs with enabled rules to access the Internet. 
Step 2:  Click Add New… /Modify  shown in  Figure 4-34, you will see a new screen  
						

							TL-R460Cable/DSL Router User Guide
 
 
45
shown in  Figure 4-35. 
Step 3:  Enter the approp
riate MAC address and descr iptions, then select the status as 
shown in  Figure 4-35. 
 
Figure 4-35 
Step 4:  Finally, click  Save to make the rule take effect. 
Step 5:  Go to Step 2  to complete the other rules continually. 
After you finish the configurations, you will see the rules in the table below: 
 
Figure 4-36 
)  Note: 
Before adding a MAC Address Filtering  entry, you should enable the Firewall and the 
MAC Address Filtering function first (shown in  Figure 4-27). 
Other configurations for the entries

 as shown in Figure 4-28: 
C

lick the  Delete button to delete the entry. 
Click the  Enable All button to enable all the entries. 
Click the  Disable All  button to disable all the entries. 
Click the  Delete All  button to delete all the entries. 
Click the  Previous  button to view the informat ion in the previous screen, click the  Next 
button to view the information in the next screen. 
4.6.5  Remote Management 
Choose menu “Security →MAC Address Filtering ”, you can configure the Remote 
Management function on th is screen (shown in Figure 4-37). This feature allows you to 
manage 

your Router from a remote location via the Internet.  
						

							TL-R460Cable/DSL Router User Guide
 
 
46
 
Figure 4-37 
¾  Web Management Port  -  Web browser access normally uses the standard HTTP 
service port 80. This router’s default  remote management web port number is 80 . 
For greater security, you can change the  remote management web interface to a 
custom port by entering that number in  the box provided. Choose a number 
between 1024 and 65534, but do not use t he number of any common service port. 
¾  Remote Management IP Address  -  This is the current  address you will use when 
accessing your router from the Internet. The default IP address is 0.0.0.0. It means 
this function is disabled.  To enable this function, change the default IP address to 
another IP address as desired.   
)  Note: 
1)  To access the router, you will type your routers WAN IP address into your  browsers address (in IE) or Location (in Navigator) box, followed by a colon and 
the custom port number. For example, if your Routers WAN address is 
202.96.12.8, and the port number you use is 8080, please enter 
http://202.96.12.8:8080
 in your browser. Later, you may be asked for the routers 
password. After successfully entering  the username and password, you will be 
able to access the routers web-based utility. 
2)  Be sure to change the routers def ault password to a very secure password . 
4.6.6  Advanced Security 
Choose menu “ Security→Advanced Security ”, you can configure  the functions below 
to protect the router from being attacked by TCP-SYN Flood, UDP Flood and 
ICMP-Flood from LAN (shown in  Figure 4-38).  
						

							TL-R460Cable/DSL Router User Guide
 
 
47
 
Figure 4-38 
¾  Packets Statistic Interval (5 ~ 60)  - The default value is 10. Select a value 
between 5 and 60 seconds in the pull-down  list. The “Packets Statistic interval” 
value indicates the time secti on of the packets statistic. 
¾  DoS Protection  - Enable or disable the DoS protec tion function. Only when it is 
enabled, will the flood filters be effective. 
¾  Enable ICMP-FLOOD Attack Filtering  - Enable or disable the “ICMP-FLOOD 
Attack Filtering”. 
¾  ICMP-FLOOD Packets Threshold: (5 ~ 3600)  - The default value is 50. Enter a 
value between 5 and 3600 packets/s. When  the current number of ICMP-FLOOD 
packets is beyond the permitted value, the Router will start up the blocking function 
immediately. 
¾  Enable UDP-FLOOD Filtering  -  Enable or disable the “UDP-FLOOD Filtering”. 
¾  UDP-FLOOD Packets Threshold: (5 ~ 3600)  - The default value is 50. Enter a 
value between 5 ~ 3600 packets/s. When  the current number of UPD-FLOOD 
Packets is beyond the permitted value, the  router will start up the blocking function  
						

							TL-R460Cable/DSL Router User Guide
 
 
48
immediately. 
¾  Enable TCP-SYN-FLOOD Attack Filtering  - Enable or disable the “TCP-SYN- 
FLOOD Attack  Filtering”. 
¾  TCP-SYN-FLOOD Packets Threshold: (5 ~ 3600)  -  The default value is 50. Enter 
a value between 5 ~ 3600 packets/s. When the current number of 
TCP-SYN-FLOOD  Packets is beyond the permitted value, the router will start up 
the blocking function immediately. 
¾  Ignore Ping Packet from WAN Port  - Enable or disable “ignore ping packet from 
WAN port”. The default is disabled. If enabled, the ping packet from the Internet 
can not access the router. 
¾  Forbid Ping Packet from LAN Port -  Enable or disable forbidding Ping Packet to 
access the router from the LAN port. The  default value is disabled. If enabled, the 
ping packet from the LAN port can not access the router. (Defends against some 
viruses) 
Click the  Save button to save the settings. 
Click the  Blocked DoS Host List  button to view the blocked hosts. 
4.7 Static Routing 
Choose menu “static route”, you can configure the stat ic route in the next screen 
(shown in  Figure 4-39). A static route is a pre- d
 etermined path that network information 
must travel to reach a specific host or network. 
 
Figure 4-39 
¾  Destination IP Address  - The “Destination IP Address” is the address of the 
network or host that you want  to assign to a static route. 
¾  Subnet Mask  -  The “Subnet Mask” determines whic h portion of an IP address is the 
network portion, and which por tion is the host portion. 
¾  Default Gateway  - This is the IP address of the  gateway device that allows for 
contact between the router and the network or host. 
¾  Status  - This field displays the status,  Enabled means the rule is effective,  
						

							TL-R460Cable/DSL Router User Guide
 
 
49
Disabled  means the rule is ineffective. 
To add/modify a static routing entry: 
Step 1:  Click Add New… /Modify  shown in  Figure 4-39, you will see a new screen 
shown in  Figure 4-40. 
Step 2:  Enter the a

ppropriate Destination  IP Address, Subnet Mask and Default 
Gateway, and then select the status. 
 
Figure 4-40 
Step 3:  Click Save to make the entry take effect. 
) Note: 
If you want to add more than on e static route, please go to step 1  to continue. 
Other configurations for the entries as shown in Figure 4-28: 
C

lick the  Delete button to delete the entry. 
Click the  Enable All button to enable all the entries. 
Click the  Disable All  button to disable all the entries. 
Click the  Delete All  button to delete all the entries. 
Click the  Previous  button to view the informat ion in the previous screen, click the  Next 
button to view the information in the next screen. 
4.8  IP & MAC Binding 
Choose menu “ IP & MAC Binding ”, you can see the submenus under the main menu:  
Binding Setting, ARP List . 
 
Figure 4-41 
Click any of them, and you will be able to  configure the corresponding function. The 
detailed explanations for each submenu are provided below.  
						

							TL-R460Cable/DSL Router User Guide
 
 
50
4.8.1  Binding Setting 
Choose menu “ IP & MAC Binding→ Binding Setting”, you can view and add IP & MAC 
binding entries in the next screen (shown in  Figure 4-42). 
 
Figure 4-42 
¾  MAC Address  -  This field displays the MAC addre ss of the controlled computer in 
the LAN. 
¾  IP Address - This field displays the assigned IP address of the controlled computer 
in the LAN.   
¾  Bind  - Select Whether enable the arp binding  or not. Only bind the MAC address 
and IP address can the function take effect. 
To add/modify an IP & MAC binding entry:   
Step 1:  Click Add New… /Modify  shown in  Figure 4-42, you will see a new screen 
shown in  Figure 4-43. 
Step 2:  Enter the MAC 

Address and IP Address in the corresponding field. 
 
Figure 4-43 
Step 3:  Bind the MAC and IP address, then click  Save button to save the configuration. 
To find a specific IP & MAC binding entry: 
Step 1:  Click Find shown in  Figure 4-42, you will see a new screen shown in  Figure  
						

							TL-R460Cable/DSL Router User Guide
 
 
51
4-44. 
Step 2:  Enter the specific MAC Address or IP  Address in the corresponding field. 
 
Figure 4-44 
Step 3:  Click Find button, then you will see the entry  with the specific MAC address or 
IP address. 
Step 4:  Click Return  to return the previous screen. 
) Note: 
You can click “Turn to this page” to  edit the entry in the corresponding screen. 
Other configurations for the entries as shown in Figure 4-42: 
C

lick the  Delete button to delete the entry. 
Click the  Enable All button to enable all the entries. 
Click the  Delete All  button to delete all the entries. 
Click the  Previous  button to view the informat ion in the previous screen, click the  Next 
button to view the information in the next screen. 
4.8.2  ARP List 
Choose menu “ IP & MAC Binding →ARP List”, you can view the ARP list in the next 
screen (shown in  Figure 4-45). This screen displays the  ARP list, it shows a
 ll the existing 
IP & MAC Binding entries. 
To manage the computer, you could observe t he computers in the LAN by checking the 
relationship of MAC address and IP address on the ARP list, and you could configure the 
items on the ARP list also.  
						

							TL-R460Cable/DSL Router User Guide
 
 
52
 
Figure 4-45 
Click  Load  to load the specific item to  the IP & MAC Binding list (shown in  Figure 4-42). 
C

lick Delete to load the specific item  to the IP & MAC Binding list. 
Click the  Bind All button to bind all the current items, available after enable. 
Click the  Load All button to load all items to the IP & MAC Binding list (shown in  Figure 
4-42

). 
Click the  Refresh button to refresh all items. 
) Note: 
An item could not be loaded to the IP & MAC  Binding list if the IP address of the item has 
been loaded before. 
4.9  DDNS 
Choose menu “ Dynamic DNS”, you can configure DDNS function. 
The router offers a Dynamic Domain Name System ( DDNS) feature. DDNS lets you 
assign a fixed host and domain name to a dynami c Internet IP address. It is useful when 
you are hosting your own website, FTP server , or other server behind the router. Before 
using this feature, you need to sign up for DDNS service providers such as  www.oray.net
 
or  www.comexe.cn
. The Dynamic DNS client service provider will give you a password 
or key. 
4.9.1  Dyndns DDNS 
If your dynamic DNS Service Provider  is  www.dyndns.org, you can configure in the next 
screen (shown in  Figure 4-46).  
						

							TL-R460Cable/DSL Router User Guide
 
 
53
 
Figure 4-46 
¾  Connection Status -  The status of the DDNS service is displayed here. 
To set up for Dyndns DDNS, follow these instructions: 
Step 1:  Type the “User Name” and “Password” for your DDNS account. 
Step 2:  Enter the domain name your dynamic  DNS service provider offer. 
Step 3:  Enable DDNS, and click  Save to save the current configuration. 
Click Login  to login the DDNS service. 
Click Logout to logout the DDNS service. 
4.9.2  PeanutHull DDNS 
If your dynamic DNS Service Provider is  www.oray.net, you can configure in the next 
screen (shown in  Figure 4-47).