52

Chapter 9

Network Security

3 ) Click

Block

above the

Online Devices

table. The selected

devices will be added to

Devices in Blacklist

automatically.

To allow specific device(s)

1 ) Select

Whitelist

and click

Save

.

2 ) Click

Add

in the

Devices in Whitelist

section. Enter the

Device Name

and

MAC Address

(you can copy and paste

the information from the

Online Devices

list if the device

is connected to your network).

3 ) Click

OK

.

Now you can block or allow specific client devices to access your

network (via wired or wireless) using the

Blacklist

or

Whitelist

.

Done!

53

Chapter 9

Network Security

9. 3.

IP & MAC Binding

IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind

network device’s IP address to its MAC address. This will prevent ARP Spoofing and

other ARP attacks by denying network access to a device with a matching IP address in

the Binding list, but an unrecognized MAC address.

Prevent ARP spoofing and ARP attacks.

1.

Visit

http://tplinkwifi.net

, and log in with the username and

password you set for the router.

2.

Go to

Advanced

>

Security

>

IP & MAC Binding

.

3.

Enable

ARP Binding

.

4.

Bind your device(s) according to your need.

To bind the connected device(s):

Click

to add the corresponding device to the

Binding List

.

To bind the unconnected device

1 ) Click

Add

in the

Binding List

section.

2 ) Enter the

MAC address

and

IP address

that you want to

bind. Enter a

Description

for this binding entry.

3 ) Tick the

Enable This Entry

check box and click

OK

.

Now you don’t need to worry about ARP spoofing and ARP

attacks!

I want to:

How can I

do that?

Done!

Chapter

10

NAT Forwarding

Router’s NAT (Network Address Translation) feature makes the devices in the LAN

use the same public IP address to communicate on the Internet, which protects the

local network by hiding IP addresses of the devices. However, it also brings about the

problem that external host cannot initiatively communicate with the specified device

in the local network.

With forwarding feature the router can penetrate the isolation of NAT and allows the

external hosts on the Internet to initiatively communicate with the devices in the local

network, thus to realize some special functions.

TP-LINK router includes four forwarding rules. If two or more rules are set, the priority

of implementation from high to low is Virtual Servers, Port Triggering, UPNP and DMZ.

This chapter contains the following sections:

•

Share Local Resources on the Internet by Virtual Servers

•

Open Ports Dynamically by Port Triggering

•

Make Applications Free from Port Restriction by DMZ

•

Make Xbox Online Games Run Smoothly by UPnP

55

Chapter 10

NAT Forwarding

10. 1.

Share Local Resources on the Internet by Virtual

Servers

When you build up a server in the local network and want to share it on the Internet,

Virtual Servers can realize the service and provide it to the Internet users. At the same

time Virtual Servers can keep the local network safe as other services are still invisible

from the Internet.

Virtual Servers can be used for setting up public services in your local network, such

as HTTP, FTP, DNS, POP3/SMTP and Telnet. Different service uses different service port.

Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and port

110 in POP3 service. Please verify the service port number before the configuration

.

Share my personal website I’ve built in local network with my

friends through the Internet.

For example,

the personal website has been built on my home

PC (192.168.0.100). I hope that my friends on the Internet can

visit my website in some way. The PC is connected to the router

with the WAN IP address 218.18.232.154.

Personal Website

Home

Router

WAN: 218.18.232.154

LAN

1.

Assign a static IP address to your PC, for example

192.168.0.100.

2.

Visit

http://tplinkwifi.net

, and log in with the username and

password you set for the router.

3.

Go to

Advanced

>

NAT Forwarding

>

Virtual Servers

.

4.

Click

Add

. Click

View Existing Services

and select

HTTP

. The

External Port

,

Internal Port

and

Protocol

will be automatically

filled with contents. Enter the PC’s IP address 192.168.0.100

into the

Internal

IP

field.

5.

Click

OK

.

I want to:

How can I

do that?

INTERNET

56

Chapter 10

NAT Forwarding

Tips:

1.

It is recommended to keep the default settings of

Internal Port

and

Protocol

if you

are not clear about which port and protocol to use.

2. If the service you want to use is not in the

Service

Type

, you can enter the

corresponding parameters manually. You should verify the port number that the

service needs.

3. You can add multiple virtual server rules if you want to provide several services in

a router. Please note that the

External

Port

should not be overlapped.

Users on the Internet can enter

http:// WAN IP

(in this example:

http:// 218.18.232.154) to visit your personal website.

Tips:

1. WAN IP should be a public IP address. For the WAN IP is assigned dynamically by

ISP, it is recommended to apply and register a domain name for the WAN referring

to

Set Up a Dynamic DNS Service Account

. Then users on the Internet can use

http:// domain name

to visit the website.

2. If

you

have

changed

the

default

External

Port

,

you

should

use

http:// WAN IP: External Port

or

http:// domain name: External Port

to visit the

website.

10. 2.

Open Ports Dynamically by Port Triggering

Port Triggering can specify a triggering port and its corresponding external ports.

When a host in the local network initiates a connection to the triggering port, all the

external ports will be opened for subsequent connections. The router can record the IP

address of the host, when the data from the Internet return to the external ports, the

router can forward them to the corresponding host. Port Triggering is mainly applied to

online games, VoIPs, video players, and common applications including MSN Gaming

Zone, Dialpad and Quick Time 4 players, etc.

Follow the steps below to configure the Port Triggering rules:

Done!