TRENDnet User’s Guide Cover Page
TRENDnet User’s Guide Table of Contents Product Overview ...........................................................................1 Package Contents .......................................................................................................... 1 Features ......................................................................................................................... 1 Product Hardware Features...........................................................................................
TRENDnet User’s Guide One-to-One NAT .......................................................................................................... 52 RADIUS Authentication ................................................................................................ 54 Multiple WAN Configuration ......................................................... 55 Multiple WAN Management Settings .......................................................................... 55 MWAN Status ...............................
TEW-829DRU TRENDnet User’s Guide Product Overview Features TRENDnet’s AC3000 Tri-Band Wireless Gigabit Dual-WAN VPN SMB Router, model TEW829DRU, features three concurrent WiFi bands to maximize device networking speeds: two separate high performance 802.11ac networks (5GHz1: 1733Mbps / 5GHz2: 867Mbps), and a 400Mbps Wireless N network. It features dual-WAN ports for load balancing or fail-over modes, and encrypted Virtual Private Network (VPN) access for remote users.
TRENDnet User’s Guide TEW-829DRU Inter-VLAN Routing Provides routing capabilities between VLANs QoS Intelligently prioritize voice, video, and other data traffic to improve network efficiency and overall performance Rack Mount Design Sturdy metal housing with rack mount brackets included Wall Mountable Wall mount ready Online Firmware Updates Automatic notification of firmware updates Management Supports web browser (HTTP, HTTPS), CLI, SSH and Telnet management © Copyright 2019 TRENDnet.
TEW-829DRU TRENDnet User’s Guide Product Hardware Features Rear Panel View Front Panel View High Gain Detachable Antennas Reset Button Ground Point Security Slot USB 3.0 Port RJ-45 Console Port Gigabit LAN Ports 1-8 WAN1 Port Power On(-)/Off(o) Port Power Switch LED Indicators WAN2 Port © Copyright 2019 TRENDnet. All Rights Reserved.
TEW-829DRU TRENDnet User’s Guide Port/Button Description LED Indicators LED Description Solid Blue – Device is receiving power and turned on. Off – Device is not receiving power or turned off. Solid Blue – WPS connection process was successful. WPS LED will remain on after successful connection for 2 minutes. Blinking Blue – WPS is activated and setup process has started. Within 2 minutes, start the WPS process on your WPS client device to connect.
TRENDnet User’s Guide TEW-829DRU Applications © Copyright 2019 TRENDnet. All Rights Reserved.
TEW-829DRU TRENDnet User’s Guide Router Installation Rack Mount Hardware Installation Desktop Hardware Installation The router can be mounted in an EIA standard-size, 19-inch rack, which can be placed in a wiring closet with other equipment. Attach the mounting brackets at the router’s front panel (one on each side), and secure them with the provided screws. The site where you install the hub stack may greatly affect its performance.
TRENDnet User’s Guide Basic Installation and Configuration Note: It is recommended that you configured the wireless router from a wired computer. 1. Attach the antennas to the front and back of the router and position them for the best WiFi coverage. It is recommended that you position all antennas vertically as shown for initial installation and adjust as needed later on. TEW-829DRU 2. Connect a network cable from the WAN1 port of your router to your modem. 3.
TRENDnet User’s Guide 5. The Power ( ), 2.4G, 5G1, 5G2 LEDs will turn on solid indicating that the router is ready. TEW-829DRU 7. Enter the default User Name and Password, then click LOGIN. By default, the preconfigured user name and password are located on the included preset wireless settings sticker or device label located on the bottom of the router. 6. Open your web browser on the connected computer and in the address bar, enter http://tew-829dru or http://192.168.10.
TRENDnet User’s Guide 8. To change the administrator password for the router configuration, click Administrator and click Administration. TEW-829DRU 10. To change your router’s LAN IPv4 address settings, click on Network and click LAN. Note: By default, the administrator password has been pre-configured for your convenience and can be located on the included wireless settings sticker or on the device label located on the bottom of the router.
TRENDnet User’s Guide 12. To configure your WAN1 Internet connection settings, click Network and click WAN1. TEW-829DRU 14. To configure your wireless network name/SSID and wireless encryption settings, click Network and click the wireless band you would like to configure. Wireless 2.4GHz, Wireless 5GHz1, or Wireless 5GHz2.
TRENDnet User’s Guide TEW-829DRU 15. To change the wireless network name/SSID for the selected wireless band, under Interface Configuration and General Setup, enter the new name in the ESSID field and click Apply to save and commit the changes. 16. To change the wireless encryption key for the selected wireless band, under Interface Configuration Wireless Security, enter the new encryption in the Key field and click Apply to save and commit the changes.
TEW-829DRU TRENDnet User’s Guide Basic Router Settings Access your router management page Saving and applying router configuration changes In the router management page, pages may include all, some, or one of the options below. Some configuration changes may require a device reboot. Note: Your router management page URL/domain name http://tew-829dru or IP address http://192.168.10.1 is accessed through the use of your Internet web browser (e.g.
Limited Warranty TRENDnet User’s Guide By default, the administrator password has been pre-configured a unique password for your convenience. You can find the pre-configured administrator password on the wireless sticker included in your router package contents or also located on the router device label located on the bottom of the device. This section will allow you to change the default administrator password used to log into your router management page. 1.
Limited Warranty TRENDnet User’s Guide Create time schedules Administrator > Schedule Your router allows you to create schedules to specify a time period when a feature should be activated and deactivated. Before you use the scheduling feature on your router, ensure that your router system time and date settings are configured correctly. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Administrator and click Schedule. 3. Review the settings below.
Limited Warranty TRENDnet User’s Guide Change LAN IPv4 address settings Network > LAN Note: The default LAN interface IPv4 address settings is 192.168.10.1 / 255.255.255.0 and also assigned to LAN ports 1-8 by default. If the LAN IPv4 address settings are modified, you will need to log into the router management page with the new IPv4 address settings. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Network and click LAN. 3.
Limited Warranty TRENDnet User’s Guide not need to be modified. (Lower value = Higher priority in route table, 0 being the highest priority.) Configure LAN IPv4 DHCP server settings Network > LAN Note: The internal DHCP server function is enabled by default on the LAN interface to automatically distribute IP address settings to network devices connected to the LAN and wireless LAN interfaces. The internal DHCP server only supports only class C IP address range. The default IP range is 101 – 199 (192.168.
TRENDnet User’s Guide • Lease Time – Enter the lease time in hours (h) or minutes (m) DHCP clients will hold their IP address settings before automatically requesting a new lease (IP address settings) from the internal DHCP server. (e.g. To specify 24 hours, enter 24h. To specify 480 minutes, enter 480m.) • WINS server – Enter the IPv4 address of your WINS (Windows Internet Name Server) for internal host name resolution on your local network to be distributed to DHCP clients.
TRENDnet User’s Guide Limited Warranty Advanced Settings • Dynamic DHCP – Checking this option the enables the DHCP server to distribute IPv4 address settings dynamically to clients. If this option is unchecked, IPv4 address settings will only be assigned to DHCP clients with a static DHCP reservation. Typically, this parameter does not need to be modified. • Log Queries – Checking this option will enable generate logging to internal or syslog of any DNS queries.
Limited Warranty TRENDnet User’s Guide Add static DHCP reservations Add static host name entries Network > LAN Network > LAN 1. Log into your router management page (see “Access your router management page” on page 8). The router can be used for host name to IP address resolution of computers or network devices on your local network similar to a WINS server however, entries will not dynamically populate and each entry must be manually entered.
TRENDnet User’s Guide Add static ARP entries Network > LAN Limited Warranty Note: You can specify additional static ARP entries by clicking Add. Delete existing entries by clicking the Delete button next to the entry to be removed. ARP (Address Resolution Protocol) is the protocol responsible for resolve IP addresses to hardware MAC addresses.
Limited Warranty TRENDnet User’s Guide Configure WAN1 / WAN2 interfaces for Internet connectivity Network > WAN1/WAN2 By default, the WAN configuration is set to use WAN1 as the primary connection for Internet connectivity and failover to WAN2 secondary if there is fault in connectivity to WAN1. This section will explain how to set up the WAN1 or WAN2 interfaces for Internet connectivity to your ISP (Internet Service Provider).
Limited Warranty TRENDnet User’s Guide • • • Access concentrator / Service name – Optional parameters required only if ISP requires for Internet connectivity. Applies to PPPoE WAN protocol. MPPE support– Optional parameter (applies Microsoft Point-to-Point Encryption) required only if ISP requires for Internet connectivity. Applies to PPTP WAN protocol. Use DNS servers advertised by peer- If checked, automatically obtains DNS service IP address settings from your ISP.
Limited Warranty TRENDnet User’s Guide IPv6 settings Network > IPv6 IPv6 (Internet Protocol Version 6) is a new protocol that significantly increases the number of available Internet public IP addresses due to the 128-bit IP address structure versus IPv4 32-bit address structure. In addition, there are several integrated enhancements compared to the most commonly used and well known IPv4 (Internet Protocol Version 4) such as: • 3.
TRENDnet User’s Guide Virtual LANs (VLANs) Limited Warranty 4. To create a new 802.1Q VLAN, under the VLANs section, click Add. Network > VLAN Your router supports port-based 802.1Q VLANs as well inter-VLAN routing. VLANs can be assigned different IP address interfaces in which the router can route be between VLAN IP subnets. Create a port-based VLAN 5.
Limited Warranty TRENDnet User’s Guide 7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the DHCP server on the VLAN. Click Apply to save and commit the changes. Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure any devices connected to this VLAN obtain IP address information via DHCP. Create a port-based VLAN with 802.
TRENDnet User’s Guide 5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the tagged VLAN member port. Example: In the example below, we will create a new VLAN with VLAN ID: 50 and assign port 8 as a tagged VLAN member port. Limited Warranty 7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the DHCP server on the VLAN. Click Apply to save and commit the changes.
TRENDnet User’s Guide If following the 802.1Q VLAN configuration example, a managed/web smart switch with 802.1Q VLAN support can be connected and pass VLAN 50 traffic between the router and switch. Any computers or devices connecting to the untagged VLAN ports (PVID: 50) on the managed/web smart will obtain 192.168.50.x/255.255.255.0 address settings and use the VLAN 50 IP interface 192.168.50.1 as the Internet gateway and gateway to other local IP subnets.
TRENDnet User’s Guide Limited Warranty Assigning VLAN IDs to Wireless SSIDs 5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the tagged VLAN member port. Example: In the example below, we will create a new VLAN with VLAN ID: 50 and assign port 8 as a tagged VLAN member port.
TRENDnet User’s Guide 7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the DHCP server on the VLAN. Click Apply to save and commit the changes. Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure any devices connected to this VLAN obtain IP address information via DHCP. Limited Warranty If following the 802.
Limited Warranty TRENDnet User’s Guide Below is a reference of the additional VLAN settings if you choose to make other configuration changes to these sections. • • • • • VID – The VLAN ID assigned to a specific VLAN. Ports 1-8 – Configure port VLAN membership settings. o Untagged – Default setting. Sets port membership as untagged and allows connectivity to network devices such as computers.
Limited Warranty TRENDnet User’s Guide UPnP and NAT-PMP Static routes Services > UPnP Network > Routing UPnP (Universal Plug and Play) and NAT-PMP (NAT Port Mapping Protocol) allows devices connected to a network to discover each other and automatically open the connections or services for specific applications (e.g. instant messenger, online gaming applications, etc.
TRENDnet User’s Guide Limited Warranty Dynamic routing protocols Network > Routing You may want set up your router to route computers or devices on your network to other local networks through other routers. Generally, different networks can be determined by the IP addressing assigned to those networks. Generally speaking and for the case of an example, your network may have 192.168.10.x IP addressing and another network may have 192.168.20.
TRENDnet User’s Guide Limited Warranty OSPF (Open Shortest Path First) Network > Routing > OSPF 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Network, click on Routing, and click on the OSPF tab. 3. Review the OSPF Routing section. To save changes to this section, click Apply to commit and save your changes. In the Overview table, you can enable and configure RIP for each interface by clicking Edit next to the interface.
TRENDnet User’s Guide Quality of Service (QoS) Network > QoS The router supports up to four QoS priority queues for traffic classification and priority. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Network and click on QoS. 3. Under QoS settings, review the settings below. When complete, click Apply to save and commit your changes. QoS Settings • Enable: Check the enable option to Enable QoS.
TRENDnet User’s Guide Limited Warranty Classification Rules Click Add to create a new QoS classification rule. When complete, click Apply to save and commit your changes. • • • • • • • • Target – Select the QoS priority class to apply to the rule. Direction – Select the direction of traffic in which to apply the QoS classification, Download (Inbound Traffic) or Upload (Outbound Traffic).
TRENDnet User’s Guide Limited Warranty Dynamic DNS Services > Dynamic DNS When using a dynamic IP/DHCP WAN type from your ISP where your public IP or Internet IP address always changes, dynamic DNS provides a method of accessing your router or network remotely over the Internet for devices such as IP cameras, storage, or computers hosted on the local LAN side of your router. Dynamic DNS services do thi by assigning a custom hostname or DNS name for you to reference.
Limited Warranty TRENDnet User’s Guide File sharing server Services > Network Shares Your router’s USB port can be used to share files through the network when a USB storage device is connected on the back USB port. The router supports Samba (SMB) file sharing protocol and is compatible with SMB/CIFS. Note: Only FAT32 or NTFS file formats are supported, up to 4TB max. storage size. After you have connected your USB storage device: 1.
TRENDnet User’s Guide Limited Warranty Wake on LAN (WoL) Services > Wake on LAN Wake on LAN (WoL) is used to remotely wake up or turn on device that support the WoL feature from your router. Note: In order for the WoL feature to work, the device must support the WoL and it must be enabled configured properly on the device. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Services and click on Wake on LAN. 3. Review the settings below.
Limited Warranty TRENDnet User’s Guide Wireless Networking and Security Note: Modifying the channel settings will force currently connected wireless client devices to disconnect and reconnect to your router’s wireless networks. Wireless Settings Network > Wireless (2.4GHz or 5GHz1 or 5GHz2) This section covers the wireless settings of your router such as wireless network names (SSIDs), channels, 802.11 mode, and other wireless settings. 1.
Limited Warranty TRENDnet User’s Guide wireless environments where there are several wireless networks in the area. • 20 MHz – This mode operates using a single 20MHz channel for wireless devices connecting at 802.11n on both 2.4GHz and 5GHz. This setting may provide more stability than 20/40MHz (Auto) for connectivity in busy wireless environments where there are several neighboring wireless networks in the area.
Limited Warranty TRENDnet User’s Guide Multiple SSID - This tab involves the configuration parameters for the additional SSIDs for a specific wireless band. Up to 7 additional SSIDs can be created per wireless band. You can view a summarized list of the current operating SSID and channels under Status > Overview in the Wireless section.
TRENDnet User’s Guide • • Wireless Security – Allows you to configure the wireless encryption/security for the additional SSID. See the “How to choose the type of wireless security” and “Secure your wireless network” sections for details configuring wireless security. Advanced Settings o Separate Clients – By default, this option is left unchecked and allows all wireless client devices that are connected to the same wireless SSID to communicate with other wireless client devices.
Limited Warranty TRENDnet User’s Guide • WPA-PSK/WPA2-PSK vs. WPA-EAP/WPA2-EAP: WPA & WPA2 support two security mechanisms, one using a pre-shared key (PSK) and the other using extensible authentication protocol (EAP). PSK is much easier to setup and configure and requires manually specifying the encryption key/pre-shared key (PSK) required for all wireless client devices to connect to your wireless network.
Limited Warranty TRENDnet User’s Guide Selecting WPA2-PSK, WPA-PSK / WPA2-PSK Mixed Mode Selecting WPA2-EAP, WPA-EAP / WPA2-EAP Mixed Mode (WPA2-PSK recommended): The following section outlines options when selecting WPA2-EAP or WPA-EAP / WPA2EAP Mixed Mode (EAP or RADIUS). This security type is also known as EAP (Extensible Authentication Protocol) or RADIUS (Remote Authentication Dial-In User Service). Review the settings below. When complete, click Apply to save and commit your changes.
TRENDnet User’s Guide Guest Network Network > Guest Network Creating an isolated and separate wireless guest network on each wireless band allows wireless clients to connect to your network for Internet access only and keep your local LAN network safe by restricting guest access to your LAN network resources such as shared documents and media files on your computers, network storage, and printers. 1. Log into your router management page (see “Access your router management page” on page 8). 2.
TRENDnet User’s Guide WiFi client bridge mode Administrator > Device Mode The function of client bridge mode is to extend wireless connectivity to multiple wired Ethernet client devices. A typical application where this mode may be used is in your home entertainment/media center where multiple network enabled media devices require Internet or network connectivity such as an HD smart TV, game console, set top box, or DVR.
Limited Warranty TRENDnet User’s Guide Connect wireless devices using WPS Network > WPS 4. The WPS LED on the front panel will flash repeatedly when the WPS process is activated. The WPS LED will flash for approximately 2 minutes. WPS (Wi-Fi Protected Setup) is a feature that makes it easy to connect devices to your wireless network. If your wireless devices support WPS, you can use this feature to easily add wireless devices to your network. 5.
Limited Warranty TRENDnet User’s Guide Below is a reference of the additional settings if you choose to make other configuration changes to these sections. Review the settings below. When complete, click Apply to save and commit your changes. • • • Network Name(SSID) – Displays the current wireless network name for each wireless band. Security – Displays the current security used on each wireless band. Status – Displays the current configuration status of WPS on the router.
Limited Warranty TRENDnet User’s Guide Steps to improve wireless connectivity There are a number of factors that can impact the range of wireless devices. Follow these tips to help improve your wireless connectivity: 1. Keep the number of obstructions to a minimum. Each obstruction can reduce the range of a wireless device. Position the wireless devices in a manner that will minimize the amount of obstructions between them. a. b.
TRENDnet User’s Guide Limited Warranty Firewall & security settings General settings Network > Firewall > General Settings 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Network, click on Firewall, and click on the General Settings tab. 3. Review the settings below. When complete, click Apply to save and commit your changes.
TRENDnet User’s Guide Port forwarding rules Network > Firewall > Port Forward Port forwarding rules allow to create inbound rules from the WAN interfaces/Internet to your internal computers or devices for specific services/protocols such as a file server (FTP), IP camera, web server (HTTP/HTTPS), or remote access, etc. 1. Log into your router management page (see “Access your router management page” on page 8). Limited Warranty • External Port – Enter the external port number for the service to allow.
TRENDnet User’s Guide Port trigger rules Network > Firewall > Port Trigger Port triggering is typically used for applications that require a range of ports to be dynamically opened on request to an internal device on your network. The router will wait for a request on a specific port or range of ports (trigger port) from a device on your network and once a request is detected by your router, the router will forward a port or range of ports (match port) to the device on your network. 1.
TRENDnet User’s Guide IP filtering Network > Firewall > IP Filtering IP filtering allows you to restrict access to the Internet to specific IP addresses on your network. You can check the current IP addresses assigned to devices connected to your router under Status > Overview under the DHCP leases section. You can also lock the IP address assigned to specific devices connected to your router by adding static DHCP leases or reservations.
Limited Warranty TRENDnet User’s Guide MAC filtering Network > Firewall > MAC Filtering Every network device has a unique, 12-digit MAC (Media Access Control) address. MAC filtering allows you to restrict access to the Internet to specific MAC addresses on your network. MAC filtering in this section applies to both wired and wireless devices. To create MAC filtering rules on your wireless network only, go to the Wireless Settings section under MAC-filter.
Limited Warranty TRENDnet User’s Guide Denial of service (DoS) prevention DMZ Host Network > Firewall > DoS Prevention Network > Firewall > DMZ Host The router supports prevention against common denial of service (DoS) attacks. Malicious users use denial of service attacks to temporarily or permanently disrupt the availability of services from network resource such as your router.
Limited Warranty TRENDnet User’s Guide One-to-One NAT Network > Firewall > One-to-One NAT If you have multiple static public WAN/Internet IP addresses assigned by your ISP, you can map the additional public IP addresses to a local computer or device on your network and allow all or specific ports or services similar to port forwarding but using different public IP addresses through your router.
TRENDnet User’s Guide Enable NAT Loopback – Checking this option will allow devices to resolve the additional public static IP addresses from the local interfaces (e.g. LAN, VLAN). Unchecking this option will not allow to devices to resolve the additional public static IP addresses from the local interfaces. (e.g. LAN, VLAN) Schedule – Allows you to select a schedule when the port forwarding rule should be enabled or disabled. Limited Warranty © Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide Limited Warranty RADIUS Authentication Network > Administrator > RADIUS For additional security, the RADIUS authentication feature will allow you use an external RADIUS server to access the router management configuration page instead of using the internal administrator user account. Note: This feature requires an external RADIUS authentication server to be set up and configured prior to enabling the feature on your router. 1.
Limited Warranty TRENDnet User’s Guide Multiple WAN Configuration MWAN Status • Interface Live Status – This section displays the current status of the WAN interfaces of your router. Tracking is enabled using physical link status and L2 based methods but the tracking status displayed refers to the status of IP based link tracking which can be configured under the Link Tracking section. Link Tracking – Allows you to setup WAN link tracking by pinging Internet IP addresses.
Limited Warranty TRENDnet User’s Guide Default Traffic Rule • Policy – This setting controls the default WAN mode for Internet connectivity access for all local interface such as LAN, wireless LAN, and VLAN interfaces. o o o o WAN1 (Failover to WAN2) – This is the default WAN mode. In this mode, the primary WAN interface is set to WAN1 and secondary WAN interface is set to WAN2.
Limited Warranty TRENDnet User’s Guide Web Management System (Router Limits™) Router Limits web management system allows you to easily setup and monitor the content accessed by devices on your network to maximize Internet bandwidth usage, control, and productivity. Sign up today for your free account. 4. Wait until the Current Status is Ready and your Pairing Code has been generated. Then click Sign Up & Activate.
TRENDnet User’s Guide 5. At the welcome page, enter your email address to use for account creation and sign up and click Submit. Follow the remaining steps to create your Router Limits account. Limited Warranty 6. At the pair hardware page, the pairing code displayed should match the pairing code displayed in your router management page.
Limited Warranty TRENDnet User’s Guide Router Limits Content Management This section will provide a basic overview of the content management pages of your online Router Limits account. • Dashboard – This page displays an overview of the service status and the devices connected to your network. • Devices and Groups – This page displays the groups and devices assigned to each group. Content filters and scheduling can be assigned for each group. By default, new devices are assigned to the Guest group.
Limited Warranty TRENDnet User’s Guide Restrictions o o o o Options o Safe-Search – Enables this setting enforces the use safe search to be enabled for Google and Bing search engines. o YouTube Restricted Mode – Enabling this setting enforces YouTube safety mode. (Currently not supported on mobile devices) o Block Unknown Traffic – Enabling this setting blocks all unknown IP addresses (specifically those used with VPN services or proxy services).
TRENDnet User’s Guide • Settings – This page will display the current status of service account and router as well as allow you to set the time zone settings. • Support – This page will display provide support on information on the Router Limits web management system and allow you to submit support tickets if needed. Limited Warranty You can access and manage your Router Limits account configuration settings through https://routerlimits.com and logging in.
Limited Warranty TRENDnet User’s Guide Virtual Private Networking (VPN) Creating a Virtual Private Network (VPN) Tunneling methods supported by your router: • SSL (Secure Socket Layer) VPN – This type of VPN can be used for Client-Server VPN only. There is support for both Layer 3 and Layer 7 network access with SSL VPN but your router only supports Layer 3 access. Additionally, your router utilizes the use of OpenVPN® for SSL VPN.
TRENDnet User’s Guide PPTP VPN Server Network > VPN > PPTP Server You can enable and configure the PPTP VPN server on your router to allow remote computers or mobile devices with PPTP VPN support to connect securely over the Internet and access the company LAN network. Limited Warranty 5. In the Client IP field, enter an IP address range (within the same LAN IP subnet range) to assign to PPTP VPN clients. By default, the router LAN DHCP server pool is 192.168.10.101-192.168.10.
Limited Warranty TRENDnet User’s Guide Note: For the VPN client computer, you will require a third party PPTP VPN software to be installed configured matching the PPTP VPN settings on your router. Typically, PPTP VPN software is pre-installed with most operating systems. Please refer to your operating system or mobile device User’s Guide/Manual for configuring the VPN settings.
Limited Warranty TRENDnet User’s Guide Setting up the PPTP VPN client (Windows) 5. Click the VPN provider drop-down list and select Windows (built-in). Note: This procedure provides a basic example how to setup PPTP VPN and establish connectivity using a Windows® 10 client computer. If you are using a different operating system or mobile device, please refer to the user’s guide/manual of the third party operating system or device on configuring PPTP VPN.
Limited Warranty TRENDnet User’s Guide 10. You can choose to enter the account credentials in the fields provide for authentication or if not, you will be prompted when attempting to establish PPTP VPN connection to your TEW-829DRU router. Click Save. L2TP VPN Server Network > VPN > L2TP Server You can enable and configure the L2TP VPN server on your router to allow remote computers or mobile devices with L2TP support to connect securely over the Internet and access the company LAN network.
TRENDnet User’s Guide Limited Warranty 5. In the Client IP field, enter an IP address range (within the same LAN IP subnet range) to assign to L2TP VPN clients. By default, the router LAN DHCP server pool is 192.168.10.101-192.168.10.199, therefore, we will assign a range that does not conflict with the DHCP server range such as 192.168.10.10-192.168.10.20. 6. Check the Access LAN option to ensure VPN clients can access the router LAN interface.
Limited Warranty TRENDnet User’s Guide Setting up the L2TP VPN server with IPsec encryption (PSK) 7. Remove any settings for DNS Server 1 & 2. These are optional parameters. 1. Log into your router management page (see “Access your router management page” on page 8). 8. Click the Authentication drop-down list and select MS-CHAPv2. 2. Click on Network, click VPN, and click the L2TP Server tab. 3. Under Service Setting, check the Enable option to enable the L2TP server. 4.
Limited Warranty TRENDnet User’s Guide 143. Click the Connection type drop-down list and select Remote Access (Roadwarrior). 14. Click the Authentication type drop-down list and select L2TP/IPSec PSK. Below is a reference of the additional L2TP VPN server settings if you choose to make other configuration changes to these sections. • • • 15. In the Local field enter the local WAN1 IP address and click Apply. (e.g. 10.10.10.10) • • • 16.
Limited Warranty TRENDnet User’s Guide Setting up the L2TP VPN client (Windows) with IPsec encryption (PSK) 5. Click the VPN provider drop-down list and select Windows (built-in). Note: This procedure provides a basic example how to setup L2TP with IPsec VPN and establish connectivity using a Windows® 10 client computer. If you are using a different operating system or mobile device, please refer to the user’s guide/manual of the third party operating system or device on configuring L2TP with IPsec VPN.
TRENDnet User’s Guide Limited Warranty 10. You can choose to enter the account credentials in the fields provide for authentication or if not, you will be prompted when attempting to establish PPTP VPN connection to your TEW-829DRU router. Click Save. 11. Under VPN, the new VPN connection will be listed. Click Connect. 12. The status will display Connected if the PPTP VPN connection was successful. © Copyright 2019 TRENDnet. All Rights Reserved.
Limited Warranty TRENDnet User’s Guide IPsec (Internet Protocol Security) VPN Router A Configuration Setting up IPsec site-to-site VPN (PSK) Network > VPN > IPsec To configure and IPsec site-to-site VPN tunnel with pre-shared key (PSK) between two routers: • Ensure that your router is connected to the Internet and computers and devices are able to access the Internet through your router and make note of the WAN (Internet) IP assigned to both routers under the Status > Overview page. Example: 1.
Limited Warranty TRENDnet User’s Guide 6. In the Local field, enter the local WAN1 IP address. (e.g. 10.10.10.10) This can also be a domain name (ex: dynamic DNS host name) Based on the example, the network settings will be the following: 7. In the Local subnet field, enter the local LAN IP subnet. (e.g. 192.168.10.0/24) You can add additional local subnets by click the add icon (e.g. 192.168.20.0/24) 8. In the Remote field, enter the remote WAN1 IP. (e.g. 10.10.10.
Limited Warranty TRENDnet User’s Guide VPN Router B Configuration 6. For the Local field, enter the local WAN1 IP address. (e.g. 10.10.10.20) This can also be a domain name (ex: dynamic DNS host name) 7. For the Local subnet field, enter the local LAN IP subnet. (e.g. 192.168.100.0/24) You can add additional local subnets by click the add icon 1. Log into your router management page (see “Access your router management page” on page 8). (e.g. 192.168.120.0/24) 8.
Limited Warranty TRENDnet User’s Guide Based on the example, the network settings will be the following: Setting up IPsec server VPN (PSK with xAUTH) 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Network, click VPN, and click the IPsec tab. 3. Under Overview, enter a tunnel name and click Add. (e.g. IPsec_Server) 10. Under Authentication Key, enter the Pre-Shared Key (PSK) for the IPsec VPN tunnel and click Apply. (e.g. 1234567890) 4.
Limited Warranty TRENDnet User’s Guide 6. For the Local field, enter the local WAN1 IP address. (e.g. 10.10.10.10) This can also be a domain name (ex: dynamic DNS host name) 10. Under XAUTH Account, enter the User name and Password for the account, then click Add. Click Apply to save and commit the changes. 7. In the Local subnet field, enter the local LAN IP subnet. (e.g. 192.168.10.0/24) You can add additional local subnets by click the add icon (e.g. 192.168.20.
Limited Warranty TRENDnet User’s Guide Below is a reference of the additional IPsec VPN settings if you choose to make other configuration changes to these sections. • • • • • Certificate List – Used for IPsec tunnels requiring the RSA authentication type. You can create or import IPsec certificates under Administrator > Certificate Management. Local ID/Remote ID – This parameter is only required for IPsec tunnels with the RSA authentication type.
Limited Warranty TRENDnet User’s Guide Setting up IPsec site-to-site VPN Failover (PSK) VPN Router A Configuration Note: IPsec VPN failover is only supported on firmware 1.0.0.33 or above. This configuration will only work when multiple WAN configuration is set to WAN1 (Failover to WAN2), WAN2 (Failover to WAN1), Load Balance (weight cannot be set to 50%:50%). Network > VPN > IPsec VPN failover configuration allows you to add redundancy/fault tolerance to your IPsec VPN tunnel connectivity.
Limited Warranty TRENDnet User’s Guide 4. Click on Network and click on Multiple WAN. 5. Under the Link Tracking section, check Enable Tracking on both WAN1 and WAN2, and enter an IP address or IP addresses on the Internet to check for connectivity and quickly determine if the WAN interface is up or down (e.g. 8.8.8.8). Set the Ping Interval to 3 seconds, and Fail Count to 1 for both WAN1 and WAN2 and click Apply to save and commit the configuration changes. 9.
Limited Warranty TRENDnet User’s Guide Based on the example, the network settings will be the following: 16. In the Remote subnet field, enter the remote LAN IP subnet. (e.g. 192.168.210.0/24) and click Apply. You can add additional local subnets by click the add icon 192.168.30.0/24) (e.g. 17. Under Authentication Key, enter the Pre-Shared Key (PSK) for the IPsec VPN tunnel and click Apply. (e.g. 1234567890) © Copyright 2019 TRENDnet. All Rights Reserved.
Limited Warranty TRENDnet User’s Guide VPN Router B Configuration 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Network, click Firewall, and click the General Settings tab. 6. Click on Network, click VPN, and click the IPsec tab. 3. Check the Enable under WAN Ping Respond and click Apply to save and commit the configuration changes. 7. Under Overview, enter a tunnel name and click Add. (e.g. Tunnel1) 8.
Limited Warranty TRENDnet User’s Guide 11. In the Local field, enter the local WAN1 IP address. (e.g. 172.16.0.1) This can also be a domain name (ex: dynamic DNS host name) Based on the example, the network settings will be the following: 12. Click to add an additional IP address and enter the local WAN2 IP address (e.g. 172.16.0.80). 13. In the Local subnet field, enter the local LAN IP subnet. (e.g. 192.168.210.0/24) You can add additional local subnets by click the add icon (e.g. 192.168.30.
Limited Warranty TRENDnet User’s Guide Secure Socket Layer VPN (SSL) / OpenVPN Network > VPN > OpenVPN 7. In the Local Name field, enter the city name. (e.g. Torrance) 8. In the Organization Name field, enter your company name (e.g. TRENDnet) 9. In the Org. Unit field, enter the section, group, or department. (e.g. IT) SSL VPN Server Setup 1. Log into your router management page (see “Access your router management page” on page 8). 10.
Limited Warranty TRENDnet User’s Guide 14. In the Certificate List drop-down list, select the name of the OpenVPN certificate you created and click Apply to save and commit the changes. (e.g. SSL-VPN) 15. Next to Client configuration file, click Export to download the configuration files for the VPN client computer. Note: Please do not change the filename for Windows installation. If installing in Linux, the .ovpn extension must be changed to .conf.
Limited Warranty TRENDnet User’s Guide 5. At the installation window, click Next. 6. At the license agreement window, review the license agreement and click I Agree. 7. At the choose components window, click Next. 8. At the install location window, click Install. © Copyright 2019 TRENDnet. All Rights Reserved.
Limited Warranty TRENDnet User’s Guide 11. Make sure to uncheck the “Show Readme” and “Start OpenVPN GUI” options and click Finish. 9. At the prompt to install the TAP-Windows adapter, click Install. 10. At the installation completion window, click Next. 12. Copy the client configuration file(s) (client.ovpn) downloaded from the router to the following path without any sub-folders. C:\Program Files\OpenVPN\config © Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide 13. Double-click on the OpenVPN GUI shortcut on your desktop to start the OpenVPN Client software. 14. The OpenVPN system tray icon will appear in the bottom right corner. Right-click the icon to display the configuration menu. Limited Warranty 16. If the VPN connection is successful, you will receive the notification below in the bottom right corner.
TRENDnet User’s Guide Certificate Management Administrator > Certificate Management The certificate management allows you to create, import, and export security certificates used for IPsec RSA and SSL VPN (OpenVPN) identification and authentication in IPsec RSA or SSL VPN (OpenVPN) configuration. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Administrator and click on Certificate Management. 3.
Limited Warranty TRENDnet User’s Guide OpenVPN – Below are the parameters you can set for the certificate. All parameters are required for the SSL VPN (OpenVPN) certificate. • • • • • • • • • Certificate Name – Enter the name for the certificate. Used for – Click the drop-down list and select OpenVPN. Country Code – Enter the 2 letter country code for the certificate. (e.g. US) State or Province Name – Enter the name of the state or province for the certificate. (e.g.
Limited Warranty TRENDnet User’s Guide Router Maintenance and Monitoring Managing access to the router management interface Administrator > Access Management This section will allow you to restrict access router management access to specific interfaces. By default, management access to the web interface (HTTP) is restricted only to the LAN interface. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Administrator and click on Access Management.
Limited Warranty TRENDnet User’s Guide Diagnostic tools Administrator > Diagnostics This section includes network tools and utilities for testing connectivity and troubleshooting. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Administrator and click on Diagnostics. WAN1/WAN2 – You can select either WAN1 or WAN2 to conduct the connectivity test through a specific WAN interface for troubleshooting.
Limited Warranty TRENDnet User’s Guide Backup and restore your router configuration settings Reboot your router Administrator > Backup / Flash Firmware Administrator > Reboot You may have added many customized settings to your router and in the case that you need to reset your router to factory defaults, all your customized settings would be lost and would require you to manually reconfigure all of your router settings instead of simply restoring from a backed up router configuration file.
Limited Warranty TRENDnet User’s Guide Scheduled automatic reboot Console access Administrator > Reboot > Setting Using the includes RS-232 to RJ-45 console cable, you can access the router console command line interface management through the console port for debugging and troubleshooting if necessary.
Limited Warranty TRENDnet User’s Guide Router Default Settings Reset your router to factory defaults Administrator > Backup / Flash Firmware Administrator User Name admin Administrator Password Please refer to sticker or device label Router Default URL http://tew-829dru Router IP Address 192.168.10.1 Router Subnet Mask 255.255.255.0 DHCP Server IP Range 192.168.10.101-192.168.199 Wireless 2.4GHz/5GHz1/5GHz2 Enabled Wireless 2.
TRENDnet User’s Guide Upgrade your router firmware Administrator > Backup / Flash Firmware TRENDnet may periodically release firmware upgrades that may add features or fix problems associated with your TRENDnet router model and version. To check if there is a firmware upgrade available for your device, please check your TRENDnet model and version using the link. http://www.trendnet.
TRENDnet User’s Guide Manual Firmware Upgrade 1. If a firmware upgrade is available, check the router model on our website http://www.trendnet.com/support and download the firmware to your computer. Limited Warranty 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Administrator and click on Backup / Flash Firmware. 2. Unzip the file to a folder on your computer. Please note the following: • Do not interrupt the firmware upgrade process.
TRENDnet User’s Guide Limited Warranty Ping Watchdog Administrator > Ping Watchdog The Ping Watchdog feature allows you configure your router to monitor connectivity to a specific host IP address. If connectivity is lost to the specified host IP address, the router will automatically initiate a device reboot in an automatic attempt to re-establish previously lost connectivity. 1. Log into your router management page (see “Access your router management page” on page 8). 2.
Limited Warranty TRENDnet User’s Guide Check the router status information • Memory o Total Available – Displays the total amount of RAM memory available on the router regardless of usage. o Firmware Version – Displays the total amount of free space RAM memory available on the router. o Buffered – Displays the total amount of RAM memory used for buffer memory.
Limited Warranty TRENDnet User’s Guide • • • DHCP/DHCPv6 Leases – Displays the currently active DHCP and DHCPv6 address leases. • Dynamic DNS – Displays the current DDNS configuration for each WAN and status information. • MWAN Interface Live Status - Displays the current multiple WAN tracking and interface status. • Activate UPnP Redirects – If UPnP is enabled, displays the currently active UPnP connections.
Limited Warranty TRENDnet User’s Guide View routing table and ARP entries • Active IPv6-Routes – Displays the current IPv6 active routing table. • IPv6 Neighbors – Displays currently discovered/detected IPv6 neighbor devices. Status > Routes You may want to check the current routing table and ARP entry information for troubleshooting or monitoring purposes. 1. Log into your router management page (see “Access your router management page” on page 8). 2. Click on Status and click on Routes.
Limited Warranty TRENDnet User’s Guide View your router logging Status > System Log Your router system log can be used to obtain activity information on the functionality of your router or for troubleshooting purposes. • Log. Debug displays all logging messages and selecting another log level type will only display those specific log messages along with any other levels above it. Cron Log Level – This setting allows you to change the type of logging send to the external syslog server. 1.
Limited Warranty TRENDnet User’s Guide Technical Specifications Standards • • • • • • • • • • • IEEE 802.3 IEEE 802.3u IEEE 802.3x IEEE 802.3ab IEEE 802.1Q IEEE 802.1X IEEE 802.11a IEEE 802.11b IEEE 802.11g IEEE 802.11n (up to 400Mbps @ 256QAM)* IEEE 802.11ac (5GHz1: up to 1733Mbps, 5GHz2: up to 867Mbps @ 256QAM)* Device Interface • • • • • • • 8 x Gigabit LAN ports 2 x Gigabit WAN ports (WAN failover / Load balancing) 1 x USB 3.
Limited Warranty TRENDnet User’s Guide • • • • • DHCP Server/Relay Dynamic DNS: dyn.com, no-ip.com WAN Failover WAN Load Balancing VPN passthrough: IPsec, PPTP, L2TP Access Control • Wireless encryption: WPA/WPA2-PSK, WPA/WPA2-RADIUS • NAT, virtual server/port forwarding, port triggering, firewall traffic rules, DMZ host, UPnP/NAT-PMP, allow/deny ping on WAN interfaces • ALG: PPTP/L2TP/IPsec VPN passthrough, FTP/TFTP/SIP/RTSP/IRC/H.
Limited Warranty TRENDnet User’s Guide *Disclaimers* Wireless Channels • • 2.4GHz: FCC: 1–11 5GHz: FCC: 36, 40, 44, 48, 149, 153, 157, 161, 165 Power • • • Input: 100 – 240 V AC, 50 – 60 Hz, 1A Output: 12V DC, 3A external power adapter Max. Consumption: 17.4W *Maximum wireless signal rates are referenced from IEEE 802.11 theoretical specifications. Actual data throughput and coverage will vary depending on interference, network traffic, building materials, and other conditions.
TRENDnet User’s Guide Troubleshooting Q: I typed http://tew-829dru in my Internet Browser Address Bar, but an error message says “The page cannot be displayed.” How can I access the router management page? Answer: Access the router using the default IP address 192.168.10.1. http://192.168.10.1 Q: I typed http://192.168.10.1 in my Internet Browser Address Bar, but an error message says “The page cannot be displayed.” How can I access the router management page? Answer: 1. Check your hardware settings again.
Limited Warranty TRENDnet User’s Guide Appendix How to find your IP address? Note: Please note that although the following procedures provided to follow for your operating system on configuring your network settings can be used as general guidelines, however, it is strongly recommended that you consult your computer or operating system manufacturer directly for assistance on the proper procedure for configuring network settings.
Limited Warranty TRENDnet User’s Guide In MAC OS 10.5/10.6, in the left column, select Ethernet. e. Configure TCP/IP to use DHCP. In MAC 10.4, from the Configure IPv4, drop-down list, select Using DHCP and click the Apply Now button. In MAC 10.5, from the Configure drop-down list, select Using DHCP and click the Apply button. In MAC 10.6, from the Configure drop-down list, select Using DHCP and click the Apply button. f. Restart your computer.
Limited Warranty TRENDnet User’s Guide Federal Communication Commission Interference Statement Industry Canada Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
TRENDnet User’s Guide Limited Warranty les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux. NOTE IMPORTANTE (POUR L’UTILISATION DE DISPOSITIFS MOBILES): DÉCLARATION D’EXPOSITION AUX RADIATIONS Cet équipement est conforme aux limites d'exposition aux rayonnements IC établies pour un environnement non contrôlé.
Limited Warranty TRENDnet User’s Guide Limited Warranty TRENDnet warrants only to the original purchaser of this product from a TRENDnet In the event that, after evaluation, TRENDnet cannot replace the defective product or there is no comparable model available, we will refund the depreciated value of the product. authorized reseller or distributor that this product will be free from defects in material and workmanship under normal use and service.
Limited Warranty TRENDnet User’s Guide shipping from outside of the USA and Canada are responsible for any return shipping CONTRACT OR TORT (INCLUDING NEGLIGENCE), FOR INCIDENTAL, CONSEQUENTIAL, and/or customs charges, including but not limited to, duty, tax, and other fees.
