Chapter 7 Wireless Settings Note: The Effective Time Schedule is based on the time of the router. You can go to Advanced > System > Time & Language to modify the time. • The wireless network will be automatically turned on after the time period you set. • 7. 3. Use WPS for Wireless Connection Wi-Fi Protected Setup (WPS) provides an easier approach to set up a security-protected Wi-Fi connection. 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2.
Chapter 7 7. 3. 2. Wireless Settings Connect via the Router’s PIN Select Router’s PIN in Method 1 to enable Router’s PIN. You can use the default PIN or generate a new one. Note: PIN (Personal Identification Number) is an eight-character identification number preset to each router. WPS supported devices can connect to your router with the PIN. The default PIN is printed on the label of the router. 7. 3. 3. Push the WPS Button 7. 4.
Chapter 7 Wireless Settings 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > Wireless > Additional Settings. 3. Configure advanced wireless settings. • WMM - WMM function can guarantee the packets with high-priority messages being transmitted preferentially. • AP Isolation - This function isolates all connected wireless stations so that wireless stations cannot access each other through WLAN.
Chapter 7 Wireless Settings • Group Key Update Period - Enter a number of seconds (minimum 30) to control the time interval for the encryption key automatic renewal. The default value is 0, meaning no key renewal.
Chapter 8 Guest Network This function allows you to provide Wi-Fi access for guests without disclosing your main network. When you have guests in your house, apartment, or workplace, you can create a guest network for them. In addition, you can customize the guest network according to your needs.
Chapter 8 8. 1. Guest Network Create a Network for Guests 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Wireless and locate the Guest Network section. 3. Create a guest network as needed. 1 ) Enable 2.4GHz and/or 5GHz. 2 ) Customize the SSID. Don‘t select Hide SSID unless you want your guests to manually input the SSID for guest network access. 3 ) Select the Security type and customize your own password.
Chapter 8 8. 2. Guest Network Set Up Portal Authentication for the Guest Network Imagine that you run a small shop and provide a guest network for your customers. You want to seize every opportunity to promote your shop, which makes portal authentication an excellent choice. Customers will be directed to a web page for access verification, on which your personalized promotion is displayed.
Chapter 8 Guest Network 6. (Optional) Enable Redirect and enter your desired web link. Newly connected guests will be redirected to the website you specify. 7. (Optional) Click to edit the Login Page. You can customize the appearance and content of the login page. 8. Click SAVE. 8. 3. Limit the Bandwidth of the Guest Network 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > Wireless > Guest Network. 3.
Chapter 8 Guest Network 4. Limit the download and upload bandwidth for the network. 5. Click SAVE. Now you can limit the bandwidth of the guest network. 8. 4. Specify the Effective Time of the Guest Network 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > Wireless > Guest Network.
Chapter 8 Guest Network 3. Specify the Effective Time. The guest network will be automatically turned off after the effective time. The default value No Limit indicates that the guest network will always remain on. 4. Click SAVE. Now you can keep the guest network on only when you need it. 8. 5. Customize Guest Network Options 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > Wireless >Guest Network.
Chapter 8 Guest Network 4. Click SAVE.
Chapter 9 USB Settings This chapter describes how to use the USB ports to share files and media from the USB storage devices over your home network locally, or remotely through the internet. The router supports USB external flash drives and hard drives.
Chapter 9 9. 1. USB Settings Access the USB Storage Device Insert your USB storage device into the router’s USB port and then access files stored there locally or remotely. • • • • Tips: If you use USB hubs, make sure no more than 4 devices are connected to the router. If the USB storage device requires using bundled external power, make sure the external power has been connected. If you use a USB hard drive, make sure its file system is FAT32, exFat, NTFS or HFS+.
Chapter 9 USB Settings • Windows computer Method 2: Open the Windows Explorer (or go to Computer) and type the server address \\tplinkwifi.net or ftp://tplinkwifi.net in the address bar, then press Enter. 1 ) Select Go > Connect to Server. 2 ) Type the server address smb://tplinkwifi.net. 3 ) Click Connect. Mac 4 ) When prompted, select the Guest radio box. (If you have set up a username and a password to deny anonymous access to the USB disks, you should select the Registered User radio box.
Chapter 9 USB Settings • Share photos and other large files with your friends without logging in to (and paying for) a photo-sharing site or email system. • Get a safe backup for the materials for a presentation. • Remove the files on your camera’s memory card from time to time during the journey. Note: If your ISP assigns a private WAN IP address (such as 192.168.x.x or 10.x.x.x), you cannot use this feature because private addresses are not routed on the internet.
Chapter 9 USB Settings 1 ) Open the Windows Explorer (or go to Computer, only for Windows users) or open a web browser. 2 ) Type the server address in the address bar: Type in ftp://: (such as ftp://59.40.2.243:21). If you have specified the domain name of the router, you can also type in ftp://: (such as ftp://MyDomainName:21) Computer 3 ) Press Enter on the keyboard.
Chapter 9 USB Settings 2. Now you can access the USB storage device by visiting \\MyShare (for Windows) or smb://MyShare (for Mac). • To Only Share Specific Content • To Set Up Authentication for Data Security Focus on the File Sharing section. Specify sharing folders that you want to share and click SAVE. You can set up authentication for your USB storage device so that network clients will be required to enter username and password when accessing the USB storage device. 1.
Chapter 9 USB Settings 2. Click to modify the access account. The username and password are both admin for default administrator account, and both visit for default visitor account. Accessing as an administrator can read and modify the shared folders while visitors can only read the shared folders. Note: 1. For Windows users, do not set the sharing username the same as the Windows username.
Chapter 9 USB Settings • Go to Computer > Network, then click the Media Server Name (Model number-share by default) in the Media Devices section. Note: Here we take Windows 7 as an example. Windows Computer Tablet 9. 3. • Use a third-party DLNA-supported player. Time Machine Time Machine backs up all files on your Mac computer to a USB storage device connected to your router. 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2.
Chapter 9 USB Settings 3. Tick the checkbox to enable Time Machine. 4. Click Select to select a location for Time Machine backups. 5. Set the Size Limit for Backups. Note: 0 means no limit for the space. 6. Click SAVE.
Chapter 10 HomeShield Customize your home network with enhanced security using a kit of features built in TP-Link HomeShield. Whether protecting your sensitive data or limiting the access of kids and guests, TP-Link HomeShield provides you the tools you need to fully manage your network.
Chapter 10 HomeShield 10. 1. Network Security TP-Link HomeShield provides many tools to protect your network from malicious attacks.
Chapter 10 HomeShield Child Protection Keep your child away from inappropriate content Family Incentive Program Manage screen time and create rewards Family Time Pause the internet to enjoy family time • To use this feature, download Tether to enjoy the HomeShield service 1. Scan the QR code or get the Tether app from the Apple App Store or Google Play. OR 2. Launch the Tether app and log in with your TP-Link ID. If you don’t have an account, create one first. 3.
Chapter 10 HomeShield 2. Launch the Tether app and log in with your TP-Link ID. If you don’t have an account, create one first. 3. Log in to your router and tap the HomeShield tab to use this feature.
Chapter 11 OneMesh with Seamless Roaming This chapter introduces the TP-Link OneMeshTM feature.
Chapter 11 OneMesh with Seamless Roaming TP-Link OneMesh router and TP-Link OneMesh extenders work together to form one unified Wi-Fi network. Walk through your home and stay connected with the fastest possible speeds thanks to OneMesh’s seamless coverage. SAME INTERNE T Network Name & Password for seamless roaming Unified Wi-Fi Network Router and extenders share the same wireless settings, including network name, password, access control settings and more.
Chapter 11 OneMesh with Seamless Roaming 4. Connect a OneMesh extender to this router by following the setup instructions in the extender’s manual. The extender will be listed on the router’s OneMesh page. Note: To check full list of TP-Link OneMesh devices, visit https://www.tp-link.com/onemesh/compatibility. 5. If you have set up the extender to join the OneMesh network, it will be listed on the router’s OneMesh page.
Chapter 11 OneMesh with Seamless Roaming 11. 2. Manage Devices in the OneMesh Network In a OneMesh network, you can manage all mesh devices and connected clients on your router’s web page. • To view mesh devices and connected clients in the network: 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Network Map. 3. Click • to view all mesh devices, and click to view all connected clients. To manage a OneMesh device in the network: 1.
Chapter 11 OneMesh with Seamless Roaming 4. Manage the OneMesh device as needed. You can: • Change device information. • Click Leave OneMesh to delete this device from the OneMesh network. • Click Manage Device to redirect to the web management page of this device.
Chapter 12 Network Security This chapter guides you on how to protect your home network from cyber attacks and unauthorized users by implementing these three network security functions. You can protect your home network from cyber attacks, block or allow specific client devices to access your network using Access Control, or you can prevent ARP spoofing and ARP attacks using IP & MAC Binding.
Chapter 12 Network Security 12. 1. Protect the Network from Cyber Attacks The SPI (Stateful Packet Inspection) Firewall protects the router from cyber attacks and validate the traffic that is passing through the router based on the protocol. This function is enabled by default. 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > Security > Firewall. It’s recommended to keep the default settings. 12. 2.
Chapter 12 2 ) Click Network Security and select devices you want to be blocked and Click ADD. 3 ) The Operation Succeeded message will appear on the screen, which means the selected devices have been successfully added to the blacklist. To allow specific device(s): 1 ) Select Whitelist and click SAVE. 2 ) Your own device is in the whitelist by default and cannot be deleted. Click to add other devices to the whitelist. • Add connected devices 1 ) Click Select From Device List.
Chapter 12 Network Security 3 ) The Operation Succeeded message will appear on the screen, which means the selected devices have been successfully added to the whitelist. • Add unconnected devices 1 ) Click Add Manually. 2 ) Enter the Device Name and MAC Address of the device you want to be allowed and click ADD. 3 ) The Operation Succeeded message will appear on the screen, which means the device has been successfully added to the whitelist.
Chapter 12 Network Security I want to: Prevent ARP spoofing and ARP attacks. How can I do that? 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > Security > IP & MAC Binding. 3. Enable IP & MAC Binding. 4. Bind your device(s) according to your need. To bind the connected device(s): 1 ) Click in the Binding List section. 2 ) Click VIEW CONNECTED DEVICES and select the device you want to bind.
Chapter 12 Network Security To bind the unconnected device: 1 ) Click in the Binding List section. 2 ) Enter the MAC Address and IP Address that you want to bind. 3 ) Click SAVE. Done! Now you don’t need to worry about ARP spoofing and ARP attacks! 12. 4. ALG ALG allows customized NAT traversal filters to be plugged into the gateway to support address and port translation for certain application layer “control/data” protocols such as FTP, TFTP, H323 etc.
Chapter 13 NAT Forwarding The router’s NAT (Network Address Translation) feature makes devices on the LAN use the same public IP address to communicate with devices on the internet, which protects the local network by hiding IP addresses of the devices. However, it also brings about the problem that an external host cannot initiatively communicate with a specified device on the local network.
Chapter 13 NAT Forwarding 13. 1. Share Local Resources on the Internet by Port Forwarding When you build up a server on the local network and want to share it on the internet, Port Forwarding can realize the service and provide it to internet users. At the same time Port Forwarding can keep the local network safe as other services are still invisible from the internet. Port Forwarding can be used for setting up public services on your local network, such as HTTP, FTP, DNS, POP3/SMTP and Telnet.
Chapter 13 NAT Forwarding 5. Click VIEW COMMON SERVICES and select HTTP. The External Port, Internal Port and Protocol will be automatically filled in. 6. Click VIEW CONNECTED DEVICES and select your home PC. The Device IP Address will be automatically filled in. Or enter the PC’s IP address 192.168.0.100 manually in the Device IP Address field. 7. Click SAVE. Tips: It is recommended to keep the default settings of Internal Port and Protocol if you are not clear about which port and protocol to use.
Chapter 13 NAT Forwarding Tips: The WAN IP should be a public IP address. For the WAN IP is assigned dynamically by the ISP, it is recommended to apply and register a domain name for the WAN referring to Set Up a Dynamic DNS Service Account. Then users on the internet can use http:// domain name to visit the website. • If you have changed the default External Port, you should use http:// WAN IP: External Port or http:// domain name: External Port to visit the website. • 13. 2.
Chapter 13 NAT Forwarding 4. Click SAVE. Tips: • You can add multiple port triggering rules according to your network need. • The triggering ports can not be overlapped. • If the application you need is not listed in the Existing Applications list, please enter the parameters manually. You should verify the external ports the application uses first and enter them into External Port field according to the format the page displays. 13. 3.
Chapter 13 NAT Forwarding How can I do that? 1. Assign a static IP address to your PC, for example 192.168.0.100. 2. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 3. Go to Advanced > NAT Forwarding > DMZ and tick to enable DMZ. 4. Click VIEW CONNECTED DEVICES and select your PC. The Device IP Address will be automatically filled in. Or enter the PC’s IP address 192.168.0.100 manually in the DMZ Host IP Address field. 5. Click SAVE.
Chapter 13 NAT Forwarding corresponding ports allowing the following data penetrating the NAT to transmit. Therefore, you can play Xbox online games without a hitch. INTERNET If necessary, you can follow the steps to change the status of UPnP. 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > NAT Forwarding > UPnP and toggle on or off according to your needs.
Chapter 14 VPN Server&Client The router offers several ways to set up VPN connections: VPN Server allows remote devices to access your home network in a secured way through the internet. The router supports three types of VPN Server: OpenVPN is somewhat complex but with higher security and more stability, suitable for restricted environments such as campus network and company intranet.
Chapter 14 VPN Server&Client 14. 1. Use OpenVPN to Access Your Home Network OpenVPN Server is used to create an OpenVPN connection for remote devices to access your home network. To use the VPN feature, you need to enable OpenVPN Server on your router, and install and run VPN client software on remote devices. Please follow the steps below to set up an OpenVPN connection. INTERNET Home Network Router (VPN Server) Remote Devices Step1. Set up OpenVPN Server on Your Router 1.
Chapter 14 VPN Server&Client 6. Select your Client Access type. Select Home Network Only if you only want the remote device to access your home network; select Internet and Home Network if you also want the remote device to access internet through the VPN Server. 7. Click SAVE. 8. Click GENERATE to get a new certificate. Note: If you have already generated one, please skip this step, or click GENERATE to update the certificate. 9.
Chapter 14 VPN Server&Client 1. Visit http://tplinkwifi.net, and log in with your TP-Link ID or the password you set for the router. 2. Go to Advanced > VPN Server > PPTP, and tick the Enable box of PPTP. Note: Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a static IP address for router’s WAN port and synchronize your System Time with internet. 3.
Chapter 14 VPN Server&Client 3 ) Click ADD. Step 2. Configure PPTP VPN Connection on Your Remote Device The remote device can use the Windows built-in PPTP software or a third-party PPTP software to connect to PPTP Server. Here we use the Windows built-in PPTP software as an example. 1. Go to Start > Control Panel > Network and Internet > Network and Sharing Center. 2. Select Set up a new connection or network. 3. Select Connect to a workplace and click Next.
Chapter 14 VPN Server&Client 4. Select Use my Internet connection (VPN). 5. Enter the internet IP address of the router (for example: 218.18.1.73) in the Internet address field. Click Next.
