User Guide For TP-Link Pharos Series Products 1910012759 REV 3.3.
CONTENTS About this User Guide.......................................................................................................... 1 Overview.................................................................................................................................. 2 1 Operation Modes............................................................................................................ 3 1.1 Access Point.......................................................................................
.7 Monitor Throughput.................................................................................................................................50 3.8 Monitor Stations........................................................................................................................................50 3.9 Monitor Interfaces....................................................................................................................................53 3.10 Monitor ARP Table..............
6.2 Specify the Miscellaneous Parameters.........................................................................................112 6.3 Configure Ping Watch Dog.................................................................................................................113 6.4 Configure Dynamic DNS......................................................................................................................114 6.5 Configure Web Server........................................................
About this User Guide This User Guide contains information for setup and management of TP-Link Pharos series products. Read this guide carefully before operation. When using this guide, notice that features available in Pharos series products may vary by model and software version. Availability of Pharos series products may also vary by region or ISP. All images, steps, and descriptions in this guide are only examples and may not reflect your actual experience.
Overview is TP-Link's next generation outdoor product series dedicated to long-distance outdoor wireless networking solutions. products. is a powerful Web-based operating system, which is integrated into all Pharos series New features of Pharos series products are listed as follows: • Provides User-friendly UI design. • TP-Link Pharos MAXtream (Time-Division-Multiple-Access) technology improves product performance in throughput, capacity and latency, which is ideal for point-to-multipoint applications.
1 Operation Modes The Pharos series products support multiple operation modes to satisfy user’s diverse network requirements. This chapter introduces typical usage scenarios of different modes. For more information, refer to Common Applications for Pharos Products. 1.1 Access Point 1.2 Client 1.3 AP Client Router (WISP Client) 1.4 AP Router 1.5 Repeater 1.6 Bridge Note Repeater mode or Bridge mode is only available on certain devices.
1.1 Access Point In Access Point (AP) Mode, the device acts as a central hub and provides wireless access point for wireless clients, thus the AP Mode is applicable to the following three scenarios. Meanwhile, Multi-SSID function can be enabled in this mode, providing up to four wireless networks with different SSIDs and passwords. ■■Scenario 1 Access Point LAN: 192.168.7.2 AP Client Router LAN: 192.168.0.254 WAN: Dynamic IP Internet Router LAN: 192.168.7.
Network requirements: Combine two separate office networks into one. The device in the network: The device in AP Mode connects to one office network and creates a wireless network. The device in Client Mode connects to the other office network and the wireless network. Advantages: Establish a point-to-point WLAN across a long distance to achieve the connectivity between two networks and avoid the cabling trouble.
Network requirements: Help the wired devices to connect to the wireless network. The device in the network: In Client Mode, the device actually serves as a wireless adapter to receive the wireless signal from root AP or Station. In this case, wired devices can access the wireless network by connecting to the device in Client Mode. 1.3 AP Client Router (WISP Client) In AP Client Router Mode, the device access the internet provided by WISP (Wireless Internet Service Provider) through wireless connection.
Network requirements: Establish the wireless network coverage in the campus, community, industrial park or other public places and so on. The device in the network: The device in AP Router Mode connects to root ADSL/Cable Modem for internet access. Meanwhile, it creates a wireless network for the wireless clients to connect to the internet. Note In this mode, the device cannot be managed directly through the port connected to ADSL/Cable Modem.
2 Quick Start This chapter introduces how to quickly build a wireless network in different operation modes. Follow the steps below: 2.1 Check the System Requirements 2.2 Log In to the Device 2.
2.1 Check the System Requirements ■■Operating System: Microsoft Windows XP, Windows Vista, Windows 7, Windows 8, Windows 10, Linux, or Mac OS X. ■■Web Browser Google Chrome, Safari, Firefox, and Apple Safari. IE browsers are not recommended. 2.2 Log In to the Device Before configuring the device, you need to access the PharOS configuration interface. Follow the steps below: 1. Connect your PC to the device. 2. Set the IP address of your PC as static IP address on 192.168.0.
4. Use admin for both of User Name and Password . Specify the region where you use the device. Available channels and maximum Transmit Power will be determined by the selected region according to the local laws and regulations. Select the appropriate language from the Language drop-down list. Read and agree the terms of use, then click Login . 5. Create a new username and password for network security. Click Finish to log in to the PharOS. 2.
Access Point Follow the steps below to configure the device as Access Point Mode: 1. Go to the QUICK SETUP page, select Access Point and click Next .
2. In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the device. Then, click Next .
3. In the Wireless AP Settings section, specify the basic wireless parameters to create a wireless network. Click Next . Note ••It is recommended to specify Security as WPA-PSK/WPA2-PSK for the network security. ••You can keep the default settings or specify the parameters according to your need. For details, refer to 5. Configure the Wireless Parameters .
4. In the Finish section, review the configurations and click Finish to complete the quick setup. 5. Connect the device according to your network topology and use it normally.
Client Follow the steps below to configure the device as Client Mode: 1. Go to the QUICK SETUP page, select Client and click Next .
2. In the LAN Settings section, specify the LAN IP Address and the Subnet Mask for the device. Then, click Next . 3. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.
4. Select the desired wireless network and click Connect . Note There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.
5. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next . Note Make sure that Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5.
6. In the Finish section, review the configurations and click Finish to complete the quick setup. 7. Connect the device according to your network topology and use it normally.
Repeater Note Repeater mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Follow the steps below to configure the device as Repeater Mode: 1. Go to the QUICK SETUP page, select Repeater and click Next .
2. In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the device. Then, click Next . 3. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.
4. Select the desired wireless network and click Connect . Note There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.
5. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next . Note Make sure that Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5. Configure the Wireless Parameters .
6. In the Finish section, review the configurations and click Finish to complete the quick setup. 7. Connect the device according to your network topology and use it normally.
Bridge Note Bridge mode is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Follow the steps below to configure the device as Bridge Mode: 1. Go to the QUICK SETUP page, select Bridge and click Next .
2. In the LAN Settings section, specify the LAN IP address and the Subnet Mask for the device. Then, click Next . 3. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.
4. Select the desired wireless network and click Connect . Note There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.
5. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next . Note Make sure that the Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5. Configure the Wireless Parameters .
6. In the Wireless AP Settings section, specify the parameters to create a new wireless network for the downstream clients. Click Next . 7. In the Finish section, review the configurations and click Finish to complete the quick setup. 8. Connect the device according to your network topology and use it normally.
AP Router Follow the steps below to configure the device as AP Router Mode: 1. Go to the QUICK SETUP page, select AP Router and click Next . The following window will pop up. Click Yes. ••For devices with one Ethernet port. Note that if you select AP Router as the operation mode, the status of Port0 will change to WAN, and the management access will be disabled on this port after the process of quick setup. If you want to manage the device through Port0, configure the Remote Login IP Address.
••For devices with two Ethernet ports. Note that if you select AP Router as the operation mode, the status of Port0 will change to WAN, and the management access will be disabled on this port after the process of quick setup. You can connect to the Port1 of the device or wirelessly to manage it. If your want to manage the device through Port0, configure the Remote Login IP Address. For details, refer to 6.5. Configure Web Server . 2.
■■PPPoE Select PPPoE and click Next , then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next . ■■Dynamic IP Select Dynamic IP and click Next . In this type, the device will obtain a WAN connection automatically without any WAN configurations.
■■Static IP Select Static IP and click Next , then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next .
3. In the Wireless AP Settings section, specify the basic wireless parameters to create a wireless network. Click Next . Note ••It is recommended to specify Security as WPA-PSK/WPA2-PSK for the network security. ••You can keep the default settings or specify the parameters according to your need. For details, refer to 5. Configure the Wireless Parameters .
4. In the Finish section, review the configurations and click Finish to complete the quick setup. 5. Connect the device according to your network topology and use it normally.
AP Client Router (WISP Client) Follow the steps below to configure the device as AP Client Router (WISP Client) Mode: 1. Go to the QUICK SETUP page, select AP Client Router (WISP Client) and click Next . The following window will pop up. Click Yes . Note that if you select AP Client Router (WISP Client) as the operation mode, you will not access the device through the WISP network after the process of quick setup. You can connect to the port of the device or wirelessly to manage it.
2. In the WAN Connection Type section, choose the connection type according to your need and click Next . The device supports PPPoE , Dynamic IP and Static IP for the WAN connection. Contact your ISP to confirm your WAN connection type.
■■PPPoE Select PPPoE and click Next , then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next . ■■Dynamic IP Select Dynamic IP and click Next . In this type, the device will obtain a WAN connection automatically without any WAN configurations.
■■Static IP Select Static IP and click Next , then the following page will appear. In the WAN Settings section, specify the parameters that are provided by your ISP and click Next . 3. In the Wireless Client Settings section, click Survey to search for the upstream wireless network.
4. Select the desired wireless network and click Connect . Note There may be two or more networks with the same SSID in the AP list. Click Lock to AP to select the SSID and AP simultaneously, which can make the device connect to the specific AP next time.
5. In the Wireless Client Settings section, specify the wireless parameters to connect to the specified wireless network. Click Next . Note Make sure that Security and PSK Password are the same as the upstream wireless network’s. Other parameters set in this page and those of the upstream wireless network should be compatible with each other. For details, refer to 5. Configure the Wireless Parameters .
6. In the Wireless AP Settings section, specify the parameters to create a new wireless network for the downstream clients. Click Next . 7. In the Finish section, review the configurations and click Finish to complete the quick setup. 8. Connect the device according to your network topology and use it normally.
3 Monitor the Network This chapter introduces how to monitor the running status and statistics of the wireless network, including: 3.1 View the Device Information 3.2 View the Wireless Settings 3.3 View Wireless Signal Quality 3.4 View Radio Status 3.5 View the LAN Settings 3.6 View the WAN Settings 3.7 Monitor Throughput 3.8 Monitor Stations 3.9 Monitor Interfaces 3.10 Monitor ARP Table 3.11 Monitor Routes 3.12 Monitor DHCP Clients 3.
3.1 View the Device Information Go to the STATUS page. In the Device Information section, view the basic information of the device. To configure the device information, refer to 7. Configure the System . Device Name Displays the name of the device. By default, it is the product model. Device Model Displays the product model and the hardware version of the device. Firmware Version Displays the current firmware version of the device. System Time Displays the current system time.
MAXtream Note ••MAXtream is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. ••MAXtream Technology is only compatible with Pharos series products. Working with products from other manufacturer will cause network fault. Displays the status of the MAXtream function. This function is only available in Access Point Mode and AP Router Mode. MAXtream is a TP-Link proprietary technology.
Signal Strength Displays the received wireless signal strength of the root AP. There are two display modes. Values of the two chains are displyed separately in Horizontal/Vertical Mode, and together in Combined Mode. You can switch between display modes by clicking on it. Noise Strength Displays the received environmental noise from wireless interference on the operating frequency. SNR Displays the Signal to Noise Ratio (SNR) of the device.
••AP Status. AP Displays the status of the wireless AP function. With this enabled, the device can provide a wireless network for the clients. By default, it is enabled in Access Point, Repeater, Bridge, AP Router and AP Client Router Modes and disabled in Client Mode. MAC Address Displays the MAC address of the wireless interface connected to the clients. SSID Displays the wireless network name (SSID) created by the device. Security Mode Note WEP is only available on certain devices.
WDS Displays the status of the WDS (Wireless Distribution System) function. WDS is a communication system among multiple wireless networks . It is established between APs through wireless connection. WDS is used during the connection process between the device and the root AP. Enable: Forward data frames using four address fields. Disable: Forward data frames using three address fields.
Port Displays the current status of the LAN Ethernet port connections and the Maximum transmission rate of the plugged port. IPv6 IP Address/Prefix Displays the LAN port IPv6 address and prefix of the device. 3.6 View the WAN Settings Go to the STATUS page. In the WAN section, view the WAN information of the device. To configure the WAN settings, refer to 4. Configure the Network . Connection Type Displays the connection type of the device.
3.7 Monitor Throughput Go to the STATUS page. In the Monitor section, select Throughput and monitor the current data traffic of specified interfaces including LAN, WAN, WLAN, WWAN and BRIDGE. Note that the interfaces which you can monitor are different among different operation modes. 3.8 Monitor Stations Go to the STATUS page. In the Monitor section, select Stations and monitor the information of all the stations that are connected to the device. MAC Address Displays the MAC address of the station.
CCQ (%) Displays the wireless Client Connection Quality (CCQ). CCQ refers to the ratio of effective transmission bandwidth and the actual total bandwidth. It reflects the quality of the actual link. A larger value means a better utilization of the bandwidth. Negotiated Rate (Mbps) Displays the negotiated rates of the packets which the device transmits to the station. Data TX/RX (kbps) Displays the data rates of the last transmitted and received packets.
RX Signal Displays the signal strength of the wireless network. Noise Floor Displays the noise strength of the wireless network. CCQ Displays the wireless Client Connection Quality (CCQ). CCQ refers to the ratio of effective transmission bandwidth and the actual total bandwidth. It reflects the quality of the actual link. A larger value means a better utilization of the bandwidth. Last IP Displays the IP address of the station.
3.9 Monitor Interfaces Go to the STATUS page. In the Monitor section, select Interfaces and monitor the relevant information of the interfaces. Interface Displays the interface of the device. MAC Displays the MAC address of the interface. IP Address Displays the IP address and IPv6 address of the interface. MTU Displays the Maximum Transmission Unit (MTU) of the interface. It is the maximum packet size (in bytes) that the interface can transmit.
ARP is used to associate each IP address to the unique hardware MAC address of each device on the network. IP Address Displays the IP address of the corresponding ARP entry. MAC Displays the MAC address of the corresponding ARP entry. Interface Displays the interface connected to the device. Auto Refresh Enable or disable Auto Refresh. With this feature enabled, the table will refresh automatically. 3.11 Monitor Routes Go to the STATUS page.
Interface Displays the interface that the destination device is on. • IPv6 Routes Destination Displays the IPv6 address of the destination device or destination network. Gateway Displays the IPv6 address of the appropriate gateway. Interface Displays the interface that the destination device is on. 3.12 Monitor DHCP Clients Go to the STATUS page. In the Monitor section, select DHCP Clients and monitor the information of all the DHCP clients. Client Name Displays the device name of the client.
Go to the STATUS page. In the Monitor section, select Dynamic WAN and monitor the WAN connection status of the device. You can enable or disable Auto Refresh. With this feature enabled, the table will refresh automatically. • DHCP Status Status Displays the status of the WAN connection. IP Address Displays the IP address of the WAN. Subnet Mask Displays the subnet mask of the WAN. Gateway IP Displays the gateway address of the device. Primary DNS Displays the primary DNS of the device.
Primary DNS Displays the primary DNS of the device. Secondary DNS Displays the secondary DNS of the device. Connection Uptime Displays the time that the latest WAN connection lasts. Obtain Click Obtain to obtain the WAN IPv6 address from the upstream device. Release Click Release to release the WAN IPv6 address.
4 Configure the Network This chapter introduces how to configure the network parameters and the advanced features, including: 4.1 Configure WAN Parameters 4.2 Configure LAN Parameters 4.3 Configure Management VLAN 4.4 Configure the Forwarding Feature 4.5 Configure the Security Feature 4.6 Configure Access Control 4.7 Configure Static Routing 4.8 Configure Bandwidth Control 4.
4.1 Configure WAN Parameters Note WAN submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode. WAN submenu is used to create the WAN connection and configure the related advanced parameters. Go to the Network page. In the WAN section, configure the WAN parameters of the device. Follow the steps below to configure the WAN parameters: 1. Select the connection type according to your need. The device supports five types: Static, Dynamic, PPPoE, L2TP, and PPTP.
IP address Enter the IP address provided by your ISP. Netmask Enter the netmask provided by your ISP. Normally use 255.255.255.0. Gateway IP Enter the gateway IP address provided by your ISP. Primary DNS Enter the DNS IP address provided by your ISP. Secondary DNS Enter alternative DNS IP address if your ISP provides it. IPv6 Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a WAN IPv6 address.
WAN MAC Address Specify the MAC address of WAN interface. This field displays the current MAC address of the WAN port. If your ISP requires that you register the MAC address, enter the correct MAC address into this field. The format for the MAC Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). Click Restore Factory MAC to restore the MAC address of WAN port to the factory default value. Your PC's MAC Address Displays the MAC address of the PC that is managing the device.
IPv6 Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a WAN IPv6 address. Select a method for the device to obtain the WAN IPv6 address according to the information provided by your ISP. ••Static Select static and enter the WAN IPv6 address, IPv6 netmask, IPv6 gateway, primary DNS and secondary DNS provided by your ISP. ••SLAAC Select SLAAC and the device will obtain the WAN IPv6 address automatically.
WAN MAC Address Specify the WAN MAC address. This field displays the current MAC address of the WAN port. If your ISP binds the MAC address of your previous computer/router, enter the correct MAC address into this field. The format for the MAC Address is XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). Click Restore Factory MAC to restore the MAC address of WAN port to the factory default value. Your PC’s MAC Address Displays the MAC address of the PC that is managing the device.
Connection Mode Select the Connection Mode. ••On Demand Configure the device to disconnect your internet connection after a specified period of inactivity (Idle Time). If your internet connection has been terminated due to inactivity, Connection on Demand enables the device to automatically re-establish your connection when you attempt to access the internet again. The default Idle Time is 15 minutes. If your internet connection is expected to remain active all the time, enter 0 in the Idle Time field.
Second Connection Note Second Connection is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. If your ISP provides an extra Connection type such as Dynamic/Static IP to connect to a local area network, activate this secondary connection. Disable: The Secondary Connection is disabled by default, so there is PPPoE connection only. This is recommended.
Use ISP‑specified IP If your service provider provides you with an IP address along with the user name and password, Enable "Use ISP-specified IP" and enter the IP address. Use These DNS Servers If the ISP provides a DNS server IP address for you, Enable Use These DNS Server, and fill the Primary DNS and Secondary DNS fields below. Otherwise, the DNS servers will obtain automatically from ISP. WAN MAC Address Specify the WAN MAC address. This field displays the current MAC address of the WAN port.
Server IP/Name Enter the server IP address or the domain name provided by your ISP. User Name Enter the User Name provided by your ISP. This field is case-sensitive. Password Enter the Password provided by your ISP. This field is case-sensitive. Connection Mode Select the Connection Mode. ••On Demand Configure the device to disconnect your internet connection after a specified period of inactivity (Idle Time).
IPv6 Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a WAN IPv6 address. Select a method for the device to obtain the WAN IPv6 address according to the information provided by your ISP. ••Static Select static and enter the WAN IPv6 address, IPv6 netmask, IPv6 gateway, primary DNS and secondary DNS provided by your ISP. ••SLAAC Select SLAAC and the device will obtain the WAN IPv6 address automatically.
4.2 Configure LAN Parameters LAN submenu is used to configure the LAN parameters for the device and the clients. Access Point/Client/Repeater/Bridge Mode Go to the Network page. In the LAN section, configure the following parameters. Follow the steps below to configure the LAN parameters: 1. Select the connection type according to your need. The device supports two types: Static and Dynamic.
IP address Enter the LAN IP address of your device. By default, it is 192.168.0.254. Note When you change the LAN IP address in the Network tab, you should log in with the new IP address and save the settings for the configuration change to take effect. Otherwise the configuration will be lost after the reboot. Netmask Enter the Netmask provided by your ISP. Normally use 255.255.255.0. Gateway IP Enter the gateway IP address for your device.
Secondary DNS Enter the IP address of alternative DNS server if there are two DNS servers. By default, it is 0.0.0.0, which means no secondary DNS is assigned. Lease Time Enter the amount time of the leased IP address assigned by the DHCP server. When the time expires, the clients will request to renew the lease automatically.
■■Dynamic Fallback IP Enable or disable the Fallback IP. When the device fails to find the DHCP server, it will use the fallback IP as the LAN IP address. DHCP Fallback IP Specify the fallback IP for the device. By default, it is 192.168.0.254. DHCP Fallback Mask Specify the fallback netmask for the device. Primary DNS Enter the DNS IP address for the LAN. By default, it is 0.0.0.0, which means no primary DNS is assigned.
IPv6 Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a LAN IPv6 address. Select a method for the device to obtain the LAN IPv6 address according to the information provided by your ISP. ••Static Select static and enter the LAN IPv6 address and IPv6 netmask. ••SLAAC Select SLAAC and the device will obtain the LAN IPv6 address automatically. ••DHCPv6 Select DHCPv6 and the device will obtain the LAN IPv6 address automatically. 2.
AP Router/AP Client Router Mode Go to the Network page. In the LAN section, configure the following parameters. 1. For LAN connection type, the device only supports Static. IP address Enter the LAN IP address of your device. By default, it is 192.168.0.254. Note When you change the LAN IP address in the Network tab, you should log in with the new IP address and save the settings for the configuration change to take effect. Otherwise the configuration will be lost after the reboot.
IGMP Proxy Enable or disable IGMP (Internet Group Management Protocol) Proxy. IGMP proxy is used to process the multicast stream in the netwok. It normally works for IPTV service. DHCP Server Enable or disable the DHCP server function. With this function enabled, the build-in DHCP server will assign IP address to the clients connected to the device. Start IP Address Specify the first IP address of the IP address pool. By default, it is 192.168.0.100.
IPv6 Enable or disable the IPv6 function. If the IPv6 function is enabled, the device will obtain a LAN IPv6 address. Select a method for the device to obtain the LAN IPv6 address according to the information provided by your ISP. ••Static Select static and enter the LAN IPv6 address and IPv6 netmask. ••Prefix Delegation Select Prefix Delegation and the device will obtain the LAN IPv6 address automatically. IPv6 DHCP Server Enable or disable the IPv6 DHCP server function.
Go to the Network page. In the Management VLAN Interfaces section, enable the Management VLAN function, specify VLAN ID and click Apply . Then click Save . Management VLAN Enable or disable the Management VLAN function. By default, it is disabled. VLAN ID Specify the Management VLAN ID. The valid values are from 2 to 4094. 4.4 Configure the Forwarding Feature Note Forwarding submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.
DMZ Enable or disable the DMZ function. DMZ (Demilitarized Zone) specifically allows one computer/device behind NAT to become “demilitarized”, so all packets from the external network are forwarded to this computer/device. The demilitarized host is exposed to the wide area network, which can realize the unlimited bidirectional communication between internal hosts and external hosts. DMZ IP Specify the IP address of the local host network device.
Virtual Server Enable or disable Virtual Server. Virtual servers can be used for setting up public services on your local area network, such as DNS, Email and FTP. A virtual server is defined as a service port, and all requests from the internet to this service port will be redirected to the LAN server. Virtual Server function not only makes the users from internet visit the local area network, but also keeps network security within the intranet as other services are still invisible from internet.
Port Trigger Enable or disable port trigger. Due to the existence of the firewall, some applications such as online games, video conferences, VoIPs and P2P downloads need the device to configure the forwarding to work properly, and these applications require multiple ports connection, for single-port virtual server cannot meet the demand. Port trigger function comes at this time. When an application initiates a connection to the trigger port, all the incoming ports will open for subsequent connections.
UPnP Enable or disable UPnP. If you use applications such as multiplayer gaming, peer-to-peer connections, or real-time communications such as instant messaging or remote assistance (a feature in Windows XP), you should enable the UPnP function. The Universal Plug and Play (UPnP) function allows the devices, such as internet computers, to access the local host resources or devices as needed.
1. Go to the Network page. In the Security > Basic section, configure the following parameters and click Apply . SPI Firewall Check the Enable box to use the SPI Firewall function. If forwarding rules are enabled at the same time, the device will give priority to meet forwarding rules. Ping Select and enable the ping forbidden function. WAN Ping Forbidden: Enable or disable this function. With this option enabled, the device will not reply the ping request originates from internet.
2. In the Security > Advanced Settings section, configure the following parameters and click Apply . DoS Protection Enable the DoS Protection and specify the parameters. DoS (Denial of Service) Attack is to occupy the network bandwidth maliciously by the network attackers or the evil programs sending a lot of service requests to the Host, which incurs an abnormal service or even breakdown of the network.
Blocked DoS Host List Click Blocked DoS Host List to display the blocked DoS host table including host IP and host MAC. Click Refresh to renewal the table list. Click Clear to release all the blocked hosts. If you want to release one or some of the blocked hosts, select them and Click Unlock . 3. Click Save . 4.6 Configure Access Control Note Access Control submenu is only available in AP Router Mode and AP Client Router (WISP Client) Mode.
2. Click Add and create the filtering entries. Enable Enable or disable the desired entry. Protocol Choose one of the protocols from the drop-down list used for the target, any of IP, TCP, UDP, or ICMP. Host IP Enter the IP address or address range of the hosts that you need to control, for example 192.168.0.12-192.168.0.25. Target IP Enter the IP address or address range of the targets that you need to control, for example 192.168.3.12-192.168.3.25.
1. Go to the Network page. In the Static Routing section, click Add and specify the following parameters. Enable Enable or disable the desired entry. Target Network IP Enter the Target Network IP, the address of the network or host to be visited. The IP address cannot be on the same network segment with the device’s WAN or LAN port. Netmask Specify the netmask for the desired entry.
1. Go to the Network page. In the Bandwidth Control section, enable the Bandwidth Control function. Total Ingress Bandwidth Specify the upper bandwidth for receiving packets from the WAN port. The maximum value is 100,000kbps. Total Egress Bandwidth Specify the upper bandwidth for sending packets from the WAN port. The maximum value is 100,000kbps. 2. Click Add and specify the following parameters. Enable Enable or disable the desired entry.
Egress Max (kbps) Specify the maximum egress bandwidth for the desired entry. 3. Click Save and click Apply , then click Save . 4.9 Configure IP & MAC Binding We can effectively prevent ARP attack and IP embezzlement by enabling the IP&MAC binding. Within the local network, the device transmits IP packets to the certain target identified by the MAC address. Therefore, the IP and MAC address should be one-toone correspondence and their corresponding relations are maintained by the ARP table.
1. Go to the Network page. In the IP & MAC Binding section, click Add and specify the IP address and MAC address. Note Click Import to quick import the entries in ARP table to IP & MAC Binding table. The imported entries are disabled by default. Select the desired entries and click Edit to enable it. IP Enter the IP address that you want to bind with the MAC address. MAC Enter the MAC address that you want to bind with the IP address. 2. Enable the desired entry and click Save .
5 Configure the Wireless Parameters This chapter introduces how to configure the parameters of the wireless network, including: 5.1 Configure Basic Wireless Parameters 5.2 Configure Wireless Client Parameters 5.3 Configure Wireless AP Parameters 5.4 Configure Multi-SSID 5.5 Configure Wireless MAC Filtering 5.
5.1 Configure Basic Wireless Parameters This section allows you to configure wireless basic parameters, such as 802.11 mode, Transmit Power, and data rates. Go to the Wireless Page. In the Basic Wireless Settings section, configure the basic wireless settings and click Apply . Then click Save . Region Specify the region where you use the device. Available channels and maximum Transmit Power will be determined by the selected region according to the local laws and regulations.
Channel Width Select the channel width of this device. To check what channel width your device supports, refer to the actual web interface. For certain devices, options include 5 MHz, 10 MHz, 20 MHz, 40 MHz and 20/40 MHz (the device automatically selects 40 MHz, and 20 MHz will be used if 40 MHz is not available). For certain devices, options include 20 MHz, 40 MHz, 80 MHz and 20/40/80 MHz (the device automatically selects 80 MHz, and 40 MHz will be used if 80 MHz is not available, and so on).
Channel Shifting Note Channel Shifting is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Enable or disable the Channel Shifting function. This function is only available when MAXtream is enabled in Access Point Mode and AP Router Mode. Channel Shifting is a TP-Link proprietary technology. With Channel Shifting enabled, the AP will use non-standard channels by adding a frequency offset to the standard 802.11 b/g/n channels.
MAXtream Station Mode Note MAXtream is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. MAXtream Station Mode is available in Client Mode, Bridge Mode and AP Client Router Mode with the wireless AP settings disabled. Auto Adjust: The device will choose the MAXtream Station Mode automatically.
WDS Displays the status of the WDS (Wireless distribution System) function. WDS is a communication system among multiple wireless networks . It is established between APs through wireless connection. WDS is used to during the connection between the device and the root AP. Enable: Forward data frames to use four address fields. Disable: Forward data frames to use three address fields.
Auth Type Select the authentication type for WEP. Auto: The device can select Open System or Shared Key automatically according to the wireless network of the root AP. Open System: The device can pass the authentication and associate with the root wireless network without password. However, correct password is necessary for data transmission. Shared Key: The device needs the correct password to pass the authentication, otherwise the device cannot associate with the root wireless network or transmit data.
Version Select the version of WPA. Auto: The device will automatically choose the version used by the root AP. WPA/WPA2: They’re two versions of WPA security mode. WPA2 is an update of WPA. Compared with WPA, WPA2 introduces AES algorithm and CCMP encryption. Theoretically, WPA2 is securer than WPA. Encryption Note TKIP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Select the Encryption type.
Version Note WPA-PSK/WPA2-PSK is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Select the version of WPA-PSK. WPA-PSK/WPA2-PSK: They’re two versions of WPA-PSK security mode. WPA2-PSK is an update of WPA-PSK. Compared with WPA, Theoretically, WPA2 is securer than WPA. Auto: The device will automatically choose the version used by the root AP.
In this section, configure wireless AP parameters used for the connection with the clients. 1. Go to the Wireless Page. In the Wireless AP Settings section, specify the SSID. Enable SSID Broadcast Enable or disable SSID broadcast. With this function enabled, the device will broadcast the SSID periodically. 2. Specify the security mode used for the clients to access the wireless network. ■■None Select None when you want an open network without wireless security.
RADIUS MAC Authentication Enable or disable the Radius MAC authentication. With this feature enabled, you can authenticate clients using their MAC addresses on your RADIUS authentication server. Remember to log into your RADIUS authentication server and create authentication entries whose username and password are both the access-enabled clients’ MAC address (for MAC address 11-22-33-AABB-CC, create an authentication entry whose username and password are both 112233aabbcc on the RADIUS server).
■■WEP Note ••WEP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. ••WEP is not supported in 802.11n mode or 802.11ac mode. If WEP is applied in 802.11n, 802.11 ac or 802.11n/ac mixed mode, the clients may not be able to access the wireless network. If WEP is applied in 802.11b/g/n mode (2.4GHz) or 802.11a/n (5GHz), the device may work at a low transmission rate. WEP (Wired Equivalent Privacy) is a traditional encryption method.
WEP Key Enter the WEP keys. The length and valid characters are determined by the key format and key type. Key Type Select the WEP key length for encryption. 64Bit: Enter 10 hexadecimal digits or 5 ASCII characters. 128Bit: Enter 26 hexadecimal digits or 13 ASCII characters. 152Bit: Enter 32 hexadecimal digits or 16 ASCII characters. ■■WPA WPA (Wi-Fi Protected Access) is a safer encryption method compared with WEP and WAPPSK. It requires a RADIUS server to authenticate the clients via 802.
Encryption Note TKIP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Select the Encryption type. Auto: The default setting is Auto and the device will select TKIP or AES automatically based on the client device’s request. TKIP: Temporal Key Integrity Protocol. TKIP is not supported in 802.11n mode, 802.11ac mode or 802.11n/ac mixed mode. If TKIP is applied in 802.11n, 802.11 ac or 802.
■■WPA-PSK WPA-PSK (Wi-Fi Protected Access-PSK) is based on a pre-shared key. It is characterized by high safety and simple settings, so it is mostly used by common households and small businesses. Version Note WPA-PSK/WPA2-PSK is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Select the version of WPA-PSK. WPA-PSK/WPA2-PSK: They’re two versions of WPA-PSK security mode. WPA2-PSK is an update of WPA-PSK.
Group Key Update Period Specify an update period of the encryption key. The update period instructs how often the device should change the encryption key. 0 means that the encryption key does not change at anytime. 3. Click Apply , then click Save . 5.4 Configure Multi-SSID Note Multi-SSID submenu is only available in Access Point Mode. The device can build up to four virtual wireless networks for users to access.
2. Select the desired SSID and specify the Security Mode. SSID Select the desired SSID to specify the security settings. Security Mode Specify the security mode for the desired SSID. The device only supports WPA-PSK. Version Note WPA-PSK/WPA2-PSK is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Select the version of WPA-PSK. WPA-PSK/WPA2-PSK: They’re two versions of WPA-PSK security mode. WPA2-PSK is an update of WPA-PSK.
Group Key Update Period Specify an update period of the encryption key. The update period instructs how often the device should change the encryption key. 0 means that the encryption key does not change at anytime. 3. Click Apply , then click Save . 5.5 Configure Wireless MAC Filtering Wireless MAC Filtering function uses MAC addresses to determine whether one host can access the wireless network or not. Thereby it can effectively control the user access in the wireless network.
SSID Select te SSID to which the filtering rules apply. In AP Mode, if Multi-SSID is enabled, you should set different filtering rules for each SSID. MAC Enter the MAC address of the wireless host that you need to filter. Comment Enter the description information for the filtering rule 3. Click Save and click Apply . Then click Save . 5.6 Configure Advanced Wireless Parameters This section is used to specify the advanced wireless parameters, such as Beacon Interval, RTS threshold and DTIM Interval.
Long Range PtP Note Long Range PtP is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Long Rage PtP is only available when MAXtream function is enabled. With this function enabled, it is allowed to specify a larger distance which can be helpful in the following situations: ••The AP is connected to a single client or AP. ••The distance between the two devices exceeds the distance allowed by the AP’s hardware specifications.
DTIM Interval Specify the DTIM (Delivery Traffic Indication Message) Interval for the device. The DTIM is contained in some Beacon frames. It indicates whether the device has buffered data for client devices. The DTIM Period indicates how often the clients served by this device should check for buffered data still on the device awaiting pickup. Specify the value between 1-255 Beacon Intervals. The default value is 1, indicating that clients check for buffered data at every beacon.
6 Manage the Device The device provides powerful functions of management and maintenance. This chapter introduces how to manage the device, including: 6.1 Manage System Logs 6.2 Specify the Miscellaneous Parameters 6.3 Configure Ping Watch Dog 6.4 Configure Dynamic DNS 6.5 Configure Web Server 6.6 Configure SNMP Agent 6.7 Configure SSH Server 6.
6.1 Manage System Logs System logs record the events and activities while the device is running. If a failure happens on the device, System logs can help to diagnose the issue. 1. Go to the Management page. In the System Log section, perform the following operations. Open System Log Click the Open button to view the system log. This page displays detailed system logs that can be sorted on columns by ascending or descending order. Columns can be chosen from Time, Type, Level, and Message.
2. Click the Setting button to specify the Auto Mail Settings. From Enter the sender’s E-mail address. To Enter the receiver’s E-mail address. SMTP Server Enter the IP address of the sender’s SMTP server. Authentication Enable or disable the authentication function. If the sender’s mailbox is configured, check the box to enable mail server authentication. Enter the sender’s username and password. Auto Mail Feature Enable or disable Auto Mail Feature.
Discovery Enable or disable Discovery. With this feature enabled, TP-Link Pharos Control software can discover the device. Pharos Control is a network management software developed independently by TP-Link and it currently supports Pharos series products. It can centralize monitoring and managing network devices in the network platform CDP Enable or disable CDP.
Startup Delay Enter the initial time delay from device startup to the first ICMP echo requests sent by Ping Watch Dog. The default value is 300 seconds. The Startup Delay value should be at least 60 seconds taking the device‘s initialization time in account. Fail Count To Reboot Enter the fail count of ICMP echo request. If the device sends the specified count of ICMP echo requests to the host and none of the corresponding ICMP echo response packets is received, Ping Watch Dog will reboot the device.
1. Go to the Management page. In the Dynamic DNS section, configure the following parameters and click Login . Service Provider Select the service provider. Dynamic DNS Enable or disable the Dynamic DNS feature. User Name Enter the user name of your DDNS account. Password Enter the password of your DDNS account. Domain Name Specify the domain name that you registered with your DDNS service provider. Connection Status Displays the connection status of the DDNS service. 2.
1. Go to the Management page. In the Web Server section, configure the following parameters and click Apply . Secure Connection (HTTPS) Enable or disable the HTTPS feature. HTTPS function is based on the SSL or TLS protocol working in transport layer. It supports a security access via a web browser. Secure Server Port Specify the server port number used in HTTPS. The default value is 443. Server Port Specify the server port number used in HTTP. The default value is 80.
Simple Network Management Protocol (SNMP) is an application layer protocol that facilitates the exchange of management information between network devices. Main functions of SNMP include monitoring network performance, detecting and analyzing network error, configuring network devices, and so on. Configure the device as SNMP Agent, and it can receive and process the management message from the NMS (Network Management System). 1. Go to the Management page.
2. Click Apply , then click Save . Note Defining community can allow management systems in the same community to communicate with the SNMP Agent. The community name can be seen as the shared password of the network hosts group. Thus, for the safety, we suggest modifying the default community name before enabling the SNMP Agent service. If the field of community is blank, the SNMP Agent will not respond to any community name. 6.
6.8 Configure RSSI LED Thresholds Note RSSI LED Thresholds is only available on certain devices. To check whether your device supports this feature, refer to the actual web interface. Configure the LEDs on the device to light up when received signal levels reach the values defined in the following fields. This function can help a technician to easily deploy a Pharos series product without logging into the device (for example, for antenna alignment operation). 1. Go to the Management page.
7 Configure the System This chapter introduces how to configure the system of the device, including: 7.1 Configure Device Information 7.2 Configure Location Information 7.3 Configure User Account 7.4 Configure Time Settings 7.5 Update Firmware 7.
7.1 Configure Device Information In this section, configure the device name and the system language. 1. Go to the System page. In the Device section, configure the following parameters and click Apply . Device Name Specify the device name. Language Specify the system language used in the management interface. 2. Click Save . 7.2 Configure Location Information In this section, configure the location for the device. 1. Go to the System page.
1. Go to the System page. In the User Account section, configure the following parameters and click Apply . Current User Name Displays the current user name. Current Password Enter the current password for the user account. Check the Show box to display what you've entered. New User Name Enter a new user name for the user account. New Password Enter a new password for the user account. Check the Show box to display what you've entered. Confirm New Password Confirm the new password. 2.
■■Manually Configure the System time manually. Time Zone Select your local time zone. Date Click the calendar button to choose the date or enter the date in the format: YYYY/MM/DD. Time Select the time from the drop-down list or enter the time in the format HH:MM:SS. ■■Automatically • Specify the NTP Server, then click the Get GMT button to get the system time from the NTP server NTP Server 1 Specify the primary NTP server used to get time automatically.
Australia The daylight saving time of Australia is from First Sunday in October, 02:00 to First Sunday in April, 03:00. New Zealand The daylight saving time of New Zealand is from Last Sunday in September, 02:00 to First Sunday in April, 03:00. ■■Recurring Mode Select Recurring Mode and configure the related parameters for the device. This configuration will be used every year. Offset Specify the time to set the clock forward by. Start Time Specify the start time of Daylight Saving Time.
Firmware Version Displays the current firmware version of the device. Note ••We recommend that you back up current system configuration before updating the firmware. ••Select the proper software version that matches your hardware to upgrade. Visit TPLink website to download the latest firmware. ••To avoid damage, do not power off the device while upgrading. ••After upgrading, the device will reboot automatically. 7.
8 Use the System Tools This chapter introduces how to configure the system tools: 8.1 Configure Ping 8.2 Configure Traceroute 8.3 Test Speed 8.4 Survey 8.5 Analyze Spectrum 8.
8.1 Configure Ping Ping test function is used to test the connectivity and reachability between the device and the target host so as to locate the network malfunctions. 1. Click Ping from the drop-down list on the upper-right corner and specify the following parameters. Destination IP/ Domain Enter the IP address of the destination node for Ping test. The device will send Ping packets to test the network connectivity and reachability of the host and the results will be displayed in the Ping Result.
1. Click Traceroute from the drop-down list on the upper-right corner and specify the following parameters. Destination IP/ Domain Enter the IP address of the destination node for Traceroute test. The device will send Traceroute packets to test the network connectivity and reachability of the host and the results will be displayed in the Traceroute. Traceroute Max TTL Specify the traceroute max TTL (Time To Live) during the traceroute process.
1. Click Speed Test from the drop-down list on the upper-right corner and specify the following parameters. Speed Test Displays the data streams that the device is transmitting (TX), receiving (RX) and both of them (Total). Server Select Server and the device will passively accept the test request from the clients in the speed test process. Client Select Client and the device will launch the test request to the server in speed test process. Server IP Specify the server IP for speed test.
Click Survey from the drop-down list on the upper-right corner and the following page will appear. BSSID Displays the BSSID of other APs surveyed by this device. SSID Displays the SSID of other APs surveyed by this device. MAXtream Displays the MAXtream capability of other APs surveyed by this device. Device Name Displays the names of other APs surveyed by this device. SNR(dB) Displays the Signal Noise Ratio (Unit: dB) of other APs surveyed by this device.
8.5 Analyze Spectrum Spectrum Analysis can help you choose the proper channel/frequency. Through the spectrum analysis, learn the distribution of the radio noise and intelligently select the channel/frequency in low noise. 1. Click Spectrum Analysis from the drop-down list on the upper-right corner and click Yes on the pop-up window. 2. Click Start . Observe the curves for a period of time, and then click Stop . The relatively low and continuous part of the average curve indicates less radio noise.
8.6 Antenna Alignment Antenna alignment can help you to optimize the antenna. Click Antenna Alignment from the drop-down list on the upper‑right corner. Adjust your antenna according to the following parameters. Point the antenna in the direction of maximum signal and minimum noise. Signal Level Displays the signal strength of the last received packet. The signal strength is the combined value of the two chains. Horizontal/Vertical Displays the signal strength of the last received packet.
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP‑Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-Link Technologies Co., Ltd. Copyright © 2020 TP-Link Technologies Co., Ltd..
