TP-Link Router TL-WR941N User Manual

							TL-R480TSMB Broadband Router User Guide  
 
45
•  Port Scan -  During the specific time,  if a computer (identified by  a particular source IP 
address) transmits TCP SYN packets to another  computers (identified by a destination 
IP address) ten different ports, then the source IP address will be deemed to make Port 
Attacks. And the Router will start  up the blocking function immediately. 
•   IP Snoop -  If you select this option, the Router  will monitor whether the packets from the 
particular region is doing IP deceive. In the event, the Router will start up the blocking 
function immediately. Note:  The function takes effect only when the Region is LAN. 
¾  DoS Attack Defence  
•   ICMP Flood  - - During a second, if a destination IP  addresses receives many packets, 
and the number of these packets  exceeds the prescript value, then the destination IP will 
be deemed to suffering from ICMP Flood Attack. And the Router will start up the blocking 
function immediately. 
•   UDP Flood -  During a second, if a particular port of a destination IP addresses receives 
many packets, and the number of these packets exceeds the prescript value, then the 
Port will be deemed to suffering from UDP Flood Attack. And the Router will start up the 
blocking function immediately. 
•   SYN Flood -  During a second, if a particular port of a destination IP addresses receives 
many TCP SYN packets, and the number of thes e packets exceeds the prescript value, 
then the Port will be deemed to suffering from  SYN Flood Attack. And the Router will 
start up the blocking f unction immediately. 
•   Land Attack  -  This is an attack combining Flood attack and IP spoofing. When the 
attackers send the spoof SYN datagram whic h including the casualtys IP address and 
make it the destination and source IP  addreess, the LAND attack happens. And the 
Router will start up the blo cking function immediately. 
•   WinNuke - WinNuke is a Dos attack for any Windows computers runing in the internet. 
The attackers send the TCP fragment (usually sets the emergent field to the Net BIOSS 
139 port) to the connection es tablished computers. So the NetBIOS fragments created 
and make the Windows computer s collapse. And the Router will start up the blocking 
function immediately. 
¾  Dubious Packet Defence  
•   Large ICMP packet: The normal ICMP packets are very short, there normal length is 
shorter than 1024 Bytes. If the ICMP packets  length is larger than 1024 Bytes, then they 
will be considered as large  ICMP packets. And the Router  will start up the blocking 
function immediately. 
•   TCP packet w
 ithout Flag: The normal TCP packets contain flag in the packet header, 
or else the packets will be considered  as abnormal dubious packets. And the Router will 
start up the blocking f unction immediately. 
•   TCP packet with both SYN and FIN:  The TCP packets which have both SYN and FIN 
settings in the packets header will be c onsidered as abnormal TCP packets. And the 
Router will start up the blo cking function immediately. 
•   TCP packet with FIN but without ACK:  The TCP packets that contains FIN but without  
						

							TL-R480TSMB Broadband Router User Guide  
 
46
ACK is considered as abnormal. And the Router will start up the blocking function 
immediately. 
•   Unknow Protocol  -  In IP head the protocol type fiel d, 135 and the value bigger than 135 
is reserved and undefined. Because the protocols are undefined, we can not predict a 
specifically unknow protocol  is well-meaning or baleful. To these nonstandard protocols, 
the carefully attitude is the best way to prevent them interning into  the protected network.   
¾  Packet Defence with IP option  
•   IP Timestamp Option:  If you select this option, the Router will monitor whether the IP 
packets from the particular region contain the  field of Internet Timestamp. In the event, 
the Router will start up the bl ocking function immediately. 
•   IP Security Option:  If you select this option, the  Router will monitor whether the IP 
packets from the particular region contain the  field of Security. In the event, the Router 
will start up the blocking function immediately. 
•   IP Stream Option:  If you select this option, the Router will monitor whether the IP 
packets from the particular region contain t he field of of Stream ID. In the event, the 
Router will start up the blo cking function immediately. 
•   IP Record Route Option: If you select this option, the Router will monitor whether the IP 
packets from the particular region contain the  field of Record Route. In the event, the 
Router will start up the blo cking function immediately. 
•   IP Loose Source Route Option:  If you select this option, the Router will monitor 
whether the IP packets from the particular r egion contain the field of Loose Source Route. 
In the event, the Router will start  up the blocking function immediately. 
•   IP Strict Source Route Option:  If you select this option, the Router will monitor whether 
the IP packets from the particul ar region contain the field of Strict Source Route. In the 
event, the Router will start up t he blocking function immediately. 
•   Invalid IP option:  If you select this option, the R outer will monitor whether the IP 
packets from the particular region is integrated  or right. In the event, the Router will start 
up the blocking func tion immediately. 
4.7 Static Routing 
Choose menu “ Static Routing”, you can configure  the static route in the next screen (shown in 
Figure 4-38). A static route is a pre-determined path  that network information must travel to reac
 h 
a specific host or network.  
						

							TL-R480TSMB Broadband Router User Guide  
 
47
 
Figure 4-38 
¾  Destination IP Address  -  The “Destination IP Address” is  the address of the network or host 
that you want to assign to a static route. 
¾  Subnet Mask  -  The “Subnet Mask” determines which por tion of an IP address is the network 
portion, and which portion  is the host portion. 
¾ Default Gateway  - This is the IP address of the gatew ay device that allows for contact 
between the router an d the network or host. 
¾ Status  -  This field displays the status,  Enabled means the rule is effective,  Disabled means 
the rule is ineffective. 
To add/modify a static routing entry: 
Step 1:  Click Add New… /Modify  shown in  Figure 4-38, you will see a new screen shown in 
Figure 4-39. 
Step 2:  Enter the appropriate Desti nation IP 

Address, Subnet Mask and Default Gateway, and 
then select the status. 
 
Figure 4-39 
Step 3:  Click Save to make the entry take effect. 
) Note: 
If you want to add more than on e static route, please go to step 1  to continue. 
Other configurations for the entries as shown in Figure 4-28:  
						

							TL-R480TSMB Broadband Router User Guide  
 
48
Click the Delete button to delete the entry. 
Click the  Enable All  button to enable all the entries. 
Click the  Disable All button to disable all the entries. 
Click the  Delete All button to delete all the entries. 
Click the  Previous  button to view the information in the previous screen,  click the  Next button to 
view the information in the next screen. 
4.8  Session Limit 
Choose menu “ Session Limit”, you can see the submenus  under the main menu: 
 
Figure 4-40 
Click any of them, and you will be able to configure the corresponding  function. The detailed 
explanations for each submenu are provided below. 
4.8.1  Session Limit 
Choose menu “ Session Limit→Session Limit ”, you can view and configure the session limits in 
the next screen. For conveniently control the connections of the computers in the LAN, you can 
set the max number of connections  for different computers. 
 
Figure 4-41 
¾  Enable:  Enable or disable the session limit. Only  after choose Enable, the configuration will 
take effect.   
¾  LAN IP address:  The controlled computers IP address. You can input an range of IP 
address, for example: 192.168.1. 20 -192.168.1.30. You can also input an IP address, such 
as:192.168.1.40.  
¾  Max Session: The max connections of the computer. 
To add/modify a session limit entry: 
Step 1:  Click Add New… /Modify  shown in  Figure 4-41, you will see a new screen shown in  
						

							TL-R480TSMB Broadband Router User Guide  
 
49
Figure 4-42. 
Step 2:  Enter the appropriate LAN IP Address,  Max Session and then select the status. 
 
Figure 4-42 
Step 3:  Click the  Save button. 
4.8.2 Session List 
Choose menu “Session Limit →Session List ”, you can view the t he information about the 
number of connection. 
 
Figure 4-43 
)  Note: 
You can click the  Refresh to update the information. 
4.9 QoS 
Choose menu “ QoS”, you can see the subm enus under the main menu: 
 
Figure 4-44 
Click any of them, and you will be able to configure the corresponding  function. The detailed 
explanations for each submenu are provided below.  
						

							TL-R480TSMB Broadband Router User Guide  
 
50
4.9.1 QoS Settings 
Choose menu “ QoS→QoS Settings ”, you can configure the Upload Bandwidth and Download 
Bandwidth in the next screen, their value  you configure should be less than 1000000Kbps. 
 
Figure 4-45 
4.9.2  QoS Rules List 
Choose menu “ QoS→QoS Rules List ”, you can view and configure  the QoS rules in the screen 
below. 
 
Figure 4-46 
¾  Description - This is the information about  the rules such as address range. 
¾ Mode -  Mode can be separated into “indepen dent bandwidth” and “share bandwidth”. 
Independent bandwidth means every port has  its own upload and download bandwidth, 
share bandwidth means address or port share upload and download bandwidth. 
¾  Egress bandwidth -  This field displays the max and mix upload bandwidth through the WAN 
port, the default is 0. 
¾  Ingress bandwidth -  This field displays the max and mix download bandwidth through the 
WAN port, the default is 0. 
¾  Enable -  This displays the status of the rule. 
¾  Modify -  Click “Modify ” to edit the rule, click “ Delete” to delete the rule. 
To add/modify a QoS rule: 
Step 1:  Click Add New… /Modify  shown in  Figure 4-46, you will see a new screen shown in 
Figure 4-47. 
Step 2:  Enter the information like  the screen shown b

elow. 
  
						

							TL-R480TSMB Broadband Router User Guide  
 
51
 
Figure 4-47 
Step 3:  Click the  Save button. 
4.10 IP & MAC Binding 
Choose menu “ IP & MAC Binding ”, you can see the submenus under the main menu:  Binding 
Setting, ARP List . 
 
Figure 4-48 
Click any of them, and you will be able to configure the corresponding  function. The detailed 
explanations for each submenu are provided below. 
4.10.1  Binding Setting 
Choose menu “ IP & MAC Binding →Binding Setting ”, you can view and add IP & MAC binding 
entries in the next screen (shown in  Figure 4-49).  
						

							TL-R480TSMB Broadband Router User Guide  
 
52
 
Figure 4-49 
¾  MAC Address  -  This field displays the MAC address of the controlled computer in the LAN. 
¾  IP Address - This field displays the assigned IP addr ess of the controlled computer in the 
LAN.  
¾  Bind  - Select Whether enable the arp binding or  not. Only bind the MAC address and IP 
address can the function take effect. 
To add/modify an IP & MAC binding entry:   
Step 1:  Click Add New… /Modify  shown in  Figure 4-49, you will see a new screen shown in 
Figure 4-50. 
Step 2:  Enter the MAC Address and IP Address in the 

corresponding field. 
 
Figure 4-50 
Step 3:  Select Bind the MAC and IP address, then click  Save button to save the configuration. 
To find a specific IP & MAC binding entry: 
Step 1:  Click Find  shown in Figure 4-49, you will see a new screen shown in  Figure 4-51. 
Step 2:  Enter the specific MAC Address or IP  

Address in the corresponding field.  
						

							TL-R480TSMB Broadband Router User Guide  
 
53
 
Figure 4-51 
Step 3:  Click Find button, then you will see the entry wi th the specific MAC address or IP 
address. 
Step 4:  Click Back  to return the previous screen. 
) Note: 
You can click “to page” to edit the entry in the corresponding screen. 
Other configurations for the entries as shown in Figure 4-49: 
C

lick the  Delete button to delete the entry. 
Click the  Enable All  button to enable all the entries. 
Click the  Delete All button to delete all the entries. 
Click the  Previous  button to view the information in the previous screen,  click the  Next button to 
view the information in the next screen. 
4.10.2  ARP List 
Choose menu “ IP & MAC Binding →ARP List”, you can view the ARP list in the next screen 
(shown in  Figure 4-52). This screen displays the ARP  list, it shows all the existing IP 
 & MAC 
Binding entries. 
To manage the computer, you could observe  the computers in the LAN by checking the 
relationship of MAC address and IP address on the  ARP list, and you could configure the items on 
the ARP list also. 
 
Figure 4-52  
						

							TL-R480TSMB Broadband Router User Guide  
 
54
Click Load  to load the specific item to  the IP & MAC Binding list (shown in Figure 4-49). 
C
lick Delete to load the specific item  to the IP & MAC Binding list. 
Click the  Bind All button to bind all the current items, available after enable. 
Click the  Load All button to load all items to the IP & MAC Binding list (shown in  Figure 4-49). 
C

lick the  Refresh  button to refresh all items. 
) Note: 
An item could not be loaded to the IP & MAC Bind ing list if the IP address of the item has been 
loaded before. 
4.11  Dynamic DNS 
Choose menu “ Dynamic DNS”, you can configure  Dynamic DNS function. 
The router offers a Dynamic Domain Name System ( DDNS) feature. DDNS lets you assign a fixed 
host and domain name to a dynamic Internet IP address. It is useful when you are hosting your 
own website, FTP server, or other  server behind the router. Before using this feature, you need to 
sign up for DDNS service providers such as  www.dyndns.org or www.oray.net  or www.comexe.cn . 
The Dynamic DNS cl

ient service provi der will give you a password or key. 
4.11.1 Dyndns DDNS 
If your dynamic DNS Service Provider  is  www.dyndns.org , you can configure in the next screen  
(shown in  Figure 4-53). 
 
Figure 4-53 
¾  Connection Status -  The status of the DDNS service is displayed here. 
To set up for Dyndns DDNS, follow these instructions: