TP-Link Router TL-WR340G User Guide

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 35
2.  Modify the information.   
3. Click the 
Save button. 
Click the Enable All  button to make all entries enabled 
Click the Disabled All  button to make all entries disabled. 
Click the Delete All  button to delete all entries 
Click the Next button to go to the next page and Click the  Previous button to return the previous 
page.  
) Note: 
If you set the virtual server of service port  as 80, you must set the Web management port on 
Security –> Remote Management page to be any value except 80 such as 8080. Or else there will 
be a conflict to disabl e the virtual server. 
3.7.2 Port Triggering 
Some applications require multiple connections, li ke Internet games, video conferencing, Internet 
calling and so on. These applicati ons cannot work with a pure NAT router. Port Triggering is 
used for some of these applicati ons that can work with an NAT router. You can set up Port 
Triggering on this page shown in 
Figure 3-30: 
 
Figure 3-30 Port Triggering 
Once configured, operation is as follows: 
1.  A local host makes an outgoing connection  using a destination port number defined in the 
Trigger Port field.   
2.  The router records this connection, opens the incoming port or ports associated with this  entry in the Port Triggering table, and  associates them with the local host.   
3.  When necessary the external host will be able  to connect to the local host using one of the 
ports defined in the  Incoming Ports field. 
¾ Trigger Port -  The port for outgoing traffic. An outgoing connection using this port will 
Trigger this rule. 
¾  Trigger Protocol -  The protocol used for Trigger Ports, either  TCP, UDP , or  All (all 
protocols supported by the router). 
¾  Incoming Ports Range -  The port or port range used by the remote system when it 
responds to the outgoing request. A response using one  of these ports will be forwarded to  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 36
the PC that triggered this rule. You can input at most 5 grou
ps of ports (or port section). 
Every group of ports must be set apart with , . For example, 2000-2038, 2050-2051, 2085, 
3010-3030. 
¾  Incoming Protocol -  The protocol used for Incoming Po rts Range, either TCP or UDP, or 
ALL (all protocols suppor ted by the router). 
¾ Status -  The status of this entry either  Enabled or Disabled. 
To add a new rule, enter the following data on the  Port Triggering screen.   
1. Click the Add New button . (pop-up Figure 3-31) 
2.  Enter a port number used by the applicat ion when it generates an outgoing request.     
3.  Select the protocol used for Trigger Port from the pull-down list, either  TCP, UDP , or All. 
4.  Enter the range of port number s used by the remote system when it responds to the PCs 
request. 
5.  Select the protocol used for  Incoming Ports Range from the pull-down list, either  TCP or 
UDP , or All. 
6. Select the  Enable checkbox to enable.   
7. Click the  Save button to save the new rule. 
 
Figure 3-31 Add or Modify a Triggering Entry 
There are many popular  applications in the Popular Application  list. You can select it, and the 
application will fill in the  Trigger Port, incoming Ports Range  boxes and select the Enable 
checkbox. It has the same effect as adding a new rule. 
To modify or delete an existing entry: 
1. Click the  Modify in the entry you want to modify. If y ou want to delete the entry, click the  
Delete. 
2.  Modify the information.   
3. Click the  Save button. 
Click the Enable All  button to make all entries enabled 
Click the Disabled All  button to make all entries disabled. 
Click the Delete All  button to delete all entries  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 37
)
 Note: 
When the trigger connection is  released, the according opening ports will be closed. 
Each rule allowed to be used only by one host  on LAN synchronously. The trigger connection of 
other hosts on LAN will be refused. 
Incoming Port Range cannot overlap each other. 
3.7.3 DMZ 
The DMZ host feature allows one local host to be  exposed to the Internet for a special-purpose 
service such as Internet gaming or videoconferen cing. DMZ host forwards all the ports at the 
same time. Any PC whose port is being forwarded must have its DHCP client function disabled 
and should have a new static IP Address assigned  to it because its IP Address may change when 
using the DHCP function. Y ou can set up DMZ host on this page shown in figure 5-29: 
 
Figure 3-32 DMZ 
To assign a computer or server to be a DMZ server:   
1. Click the Enable radio button 
2.  Enter the local host IP Address in the  DMZ Host IP Address field 
) Note: 
After you set the DMZ host, the firewa ll related to the host will not work. 
3.7.4 UPnP 
The Universal Plug and Play (UPnP) feature allows  the devices, such as Internet computers, to 
access the local host resources or devices  as needed. UPnP devices can be automatically 
discovered by the UPnP service application on th e LAN. You can configure UPnP on this page 
that shown in 
Figure 3-33: 
 
Figure 3-33 UPnP Settings 
¾  Current UPnP Status -  UPnP can be enabled or di sabled by clicking the Enable or Disable   
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 38
button. As allowing this may present a risk to 
security, this feature is disabled by default.   
¾ Current UPnP Settings List -  This table displays the current UPnP information. 
• App Description – The description provided by the application in the UPnP request 
• External Port -  External port, which the router opened for the application. 
• Protocol  –  Shows which type of protocol is opened. 
• Internal Port  -  Internal port, which the router opened for local host. 
• IP Address  -  The UPnP device that is cu rrently accessing the router. 
• Status - Either Enabled or Disabled, “Enabled” me ans that port is still active. Otherwise, 
the port is inactive. 
Click Refresh  to update the Current UPnP Settings List.   
3.8 Security 
 
Figure 3-34 The Security menu 
There are six submenus under t he Security menu (shown in Figure 3-34): Firewall , IP  Address 
Filtering, Domain Filtering, MAC Filtering, Remote Management and Advanced Security. 
Click any of them, and you will be able to configure the corresponding  function. The detailed 
explanations for each submenu are provided below. 
3.8.1 Firewall 
Using the Firewall page (shown in Figure 3-35), you can turn the general firewall switch on or off. 
The default setting for the switch is off. If the general  firewall switch is off, even if IP Address 
Filtering, DNS Filtering and MA C Filtering are enabled, their settings are ineffective.  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 39
 
Figure 3-35 Firewall Settings 
¾
 Enable Firewall -  the general firewall switch is on or off. 
¾ Enable IP Address Filtering -  set IP Address Filtering is enabled or disabled. There are two 
default filtering rules of IP Address Filtering,  either Allow or Deny passing through the router. 
¾ Enable Domain Filtering -  set Domain Filtering is enabled or disabled. 
¾ Enable MAC Filtering -  set MAC Address Filtering is enabled  or disabled. You can select the 
default filtering rules of MAC Address Filtering, either Allow or Deny accessing the router. 
3.8.2  IP Address Filtering 
The IP address Filtering feature allows you to c ontrol Internet Access by specific users on your 
LAN based on their IP addresses. The IP  address filtering is set on this page, 
Figure 3-36: 
 
Figure 3-36 IP address Filtering 
To disable the IP Address Filtering feature, keep the default setting,  Disabled. To set up an IP  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 40
Address Filtering entry, click 
Enable Firewall and Enable  IP Address Filtering on the Firewall 
page, and click the  Add New… button. The page  Add or Modify an IP Address Filtering entry  
will appear shown in 
Figure 3-37: 
 
Figure 3-37 Add or Modify an IP Address Filtering Entry 
To create or modify an IP Address Filter ing entry, please follow these instructions: 
1. Effective Time -  Enter a range of time in HHMM forma t, which point to the range time for the 
entry to take effect. For example, 0803 - 1705, t he entry will take effect from 08:03 to 17:05. 
2. LAN IP Address -  Enter a LAN IP Address or a range of LAN IP addresses in the field, in 
dotted-decimal notation format. For example,  192.168.1.20 - 192.168.1.30. Keep the field 
open, which means all LAN IP Addresse s have been put into the field.   
3. LAN Port -  Enter a LAN Port or a range of LAN ports  in the field. For example, 1030 - 2000. 
Keep the field open, which means all LAN ports have been put into the field.   
4.  WAN IP Address -  Enter a WAN IP Address or a range of  WAN IP Addresses in the field, in 
dotted-decimal notation format. For example,  61.145.238.6 – 61.145.238.47. Keep the field 
open, which means all WAN IP Addresse s have been put into the field.   
5. WAN Port -  Enter a WAN Port or a range of WAN Port s in the field. For example, 25 – 110. 
Keep the field open, which means all WAN Po rts have been put into the field.   
6. Protocol -  Select which protocol is to be used, either  TCP, UDP, or All (all protocols 
supported by the router). 
7.  Pass -  Select either  Allow or Deny  through the router. 
8. Status -  Select Enabled  or Disabled  for this entry on the  Status pull-down list. 
9. Click the  Save button to save this entry. 
To modify or delete an existing entry: 
1. Click the  Modify in the entry you want to modify. If y ou want to delete the entry, click the  
Delete. 
2.  Modify the information.   
3. Click the  Save button. 
Click the Enable All  button to make all entries enabled 
Click the Disabled All  button to make all entries disabled.  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 41
Click the 
Delete All  button to delete all entries 
You can change the entry’s order as desired. Fore entries are  before hind entries. Enter the ID 
number in the first box you want to move and another ID number in second box you want to move 
to, and then click the Move  button to change the entry’s order. 
Click the Next button to the next page and click the Previous  button to return to the previous 
page. 
For example: If you desire to block E-mail received and  sent by the IP Address 192.168.1.7 on 
your local network, and to make the PC with IP  Address 192.168.1.8 unable to visit the website of 
IP Address 202.96.134.12, while other PC(s) hav e no limit you should specify the following IP 
address filtering list: 
 
3.8.3 Domain Filtering 
The Domain Filtering page (shown in Figure 3-38) allows you to control access to certain websites 
on the Internet by specifying  their domains or key words. 
 
Figure 3-38 Domain Filtering 
Before adding a Domain Filtering entry, you must ensure that  Enable Firewall and  Enable 
Domain Filtering have been selected on the Firewa ll page. To Add a Domain filtering entry, click 
the  Add New…  button. The page  Add or Modify a Domain Filtering entry   will appear, shown 
in 
Figure 3-39:  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 42
 
Figure 3-39 Add or Modify a Domain Filtering entry 
To add or modify a Domain Filteri
ng entry, follow these instructions: 
1. Effective Time -  Enter a range of time in HHMM format  specifying the time for the entry to 
take effect. For example, if you enter: 0803 - 17 05, than the entry will take effect from 08:03 
to 17:05. 
2.  Domain Name -  Type the domain or key word as desired  in the field. A blank in the domain 
field means all websit es on the Internet. For example: 
www.xxyy.com.cn, .net. 
3.  Status -  Select Enabled  or Disabled  for this entry on the  Status pull-down list. 
4. Click the  Save button to save this entry. 
To modify or delete an existing entry: 
1. Click the  Modify in the entry you want to modify. If y ou want to delete the entry, click the  
Delete. 
2.  Modify the information.   
3. Click the  Save button. 
Click the Enabled All  button to make all entries enabled. 
Click the Disabled All  button to make all entries disabled. 
Click the Delete All  button to delete all entries 
Click the Next button to go to the next page and the  Previous button to return to the previous 
page. 
For example : if you want to block the PC(s)  on your LAN to access websites www.xxyy.com.cn, 
www.aabbcc.com and websites with .net in the end on the Internet while no limit for other 
websites, you should specify the following Domain filtering list: 
 
3.8.4 MAC Filtering 
Like the IP Address Filtering page, t he MAC Address Filtering page (shown in Figure 3-40) allows 
you to control access to the Internet by user s on your local network based on their MAC Address.  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 43
 
Figure 3-40 MAC address Filtering 
Before setting up MAC Filtering 
entries, you must ensure that Enable  Firewall and Enable MAC 
Filtering have been selected on the Firewall page.  To Add a MAC Address filtering entry, clicking 
the  Add New…  button. The page  Add or Modify a MAC Address Filtering entry  will appear, 
shown in 
Figure 3-41:  
 
Figure 3-41 Add or Modify a MAC Address Filtering entry 
To add or modify a MAC Address Filter ing entry, follow these instructions: 
1.  Enter the appropriate MAC Address into the  MAC Address field. The format of the MAC 
Address is XX-XX-XX-XX-XX-XX (X is an y hexadecimal digit). For example: 
00-0E-AE-B0-00-0B. 
2.  Type the description of the PC in the  Description field. Fox example: John’s PC. 
3. Status  - Select  Enabled or Disabled  for this entry on the  Status pull-down list. 
4. Click the  Save button to save this entry. 
To add additional entries, repeat steps 1-4. 
When finished, click the  Return button to return to the  MAC Address Filtering  page. 
To modify or delete an existing entry: 
1. Click the Modify in the entry you want to modify. If y ou want to delete the entry, click the  
Delete. 
2.  Modify the information.   
3. Click the  Save button.  
						

							
TL-WR340G/TL-WR340GD54M Wireless Router User Guide 
 44
Click the 
Enable All  button to make all entries enabled. 
Click the Disabled All  button to make all entries disabled. 
Click the Delete All  button to delete all entries 
Click the Next button to go to the next page and click the  Previous button to return to the 
previous page. 
Fox example: If you want to block the PC with MAC addresses 00-0A-EB-00-07-BE and 
00-0A-EB-00-07-5F to access the Internet, first, enable the  Firewall and MAC Address Filtering  
on the  Firewall  page, then, you should specify the Default MAC A ddress Filtering Rule Deny 
these PC(s) with effective rules to access the Internet  on the Firewall page and the following 
MAC address filtering list on this page:
 
 
3.8.5 Remote Management 
You can configure the Remote Mana gement function on this page shown in Figure 3-42. This 
feature allows you to manage your Router fr om a remote location, via the Internet. 
 
Figure 3-42 Remote Management 
¾ Web Management Port  - Web browser access normally uses the standard HTTP service 
port 80. This router’s default remo te management Web port number is 80 . For greater 
security, you can change the remote management  Web interface to a custom port by 
entering that number in this box provided. Choose a number between 1024 and 65534, but 
do not use the number of any common service port. 
¾  Remote Management IP Address - This is the current address you will use when 
accessing your router from the Internet. The  default IP Address is 0.0.0.0. It means this 
function is disabled. To enabl e this function, change the default IP Address to another IP 
Address as desired.   
To access the router, you will type your routers  WAN IP Address into your browsers Address 
(in IE) or Location (in Navigator) box, followed by a colon and the custom port number. For 
example, if your Routers  WAN address is 202.96.12.8 and you us e port number 8080, enter in 
your browser: 
http://202.96.12.8:8080. You will be asked for the routers password. After