57

Chapter 9

Network Security

3.

Enable

Access Control

.

4.

Select the access mode to either block (recommended) or

allow the device(s) in the list.

To block specific device(s)

1 ) Select

Blacklist

and click

Save

.

2 ) Select the device(s) to be blocked in the

Devices Online

table.

3 ) Click

Block

above the

Devices Online

table. The selected

devices will be added to

Devices in Blacklist

automatically.

To allow specific device(s)

1 ) Select

Whitelist

and click

Save

.

2 ) Click

Add

.

58

Chapter 9

Network Security

3 ) Enter the

Device Name

and

MAC Address

(You can copy

and paste the information from the following list if the

device is connected to your network).

4 ) Click

OK

.

Now you can block or allow specific client devices to access your

network (via wired or wireless) using the

Blacklist

or

Whitelist

.

9. 3.

IP & MAC Binding

IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind

network device’s IP address to its MAC address. This will prevent ARP Spoofing and

other ARP attacks by denying network access to an device with matching IP address in

the Binding list, but unrecognized MAC address.

Prevent ARP spoofing and ARP attacks.

1.

Visit

http://tplinkwifi.net

, and log in with the username and

password you set for the router.

2.

Go to

Advanced

>

Security

>

IP & MAC Binding

.

3.

Enable

IP & MAC Binding

.

Done!

I want to:

How can I

do that?

59

Chapter 9

Network Security

4.

Bind your device(s) according to your need.

To bind the connected device(s)

1 ) Select the device(s) to be bound in the

ARP List

.

2 ) Click

to add to the

Binding List

.

To bind the unconnected device

1 ) Click

Add

.

2 ) Enter the

MAC address

and

IP address

that you want to

bind.

3 ) Select the checkbox to enable the entry and click

OK

.

Now you don’t need to worry about ARP spoofing and ARP

attacks.

Done!

Chapter

10

NAT Forwarding

Router’s NAT (Network Address Translation) feature makes the devices in the LAN use

the same public IP address to communicate in the Internet, which protect the local

network by hiding IP addresses of the devices. However, it also brings about the

problem that external host cannot initiatively communicate with the specified device

in the local network.

With forwarding feature the router can penetrate the isolation of NAT and allows the

external hosts in the Internet to initiatively communicate with the devices in the local

network, thus to realize some special functions.

TP-LINK router includes four forwarding rules. If two or more rules are set, the priority

of implementation from high to low is Virtual Servers, Port Triggering, UPNP and DMZ.

This chapter contains the following sections:

•

Share Local Resources in the Internet by Virtual Server

•

Open Ports Dynamically by Port Triggering

•

Make Applications Free from Port Restriction by DMZ

•

Make Xbox Online Games Run Smoothly by UPnP

61

Chapter 10

NAT Forwarding

10. 1.

Share Local Resources in the Internet by Virtual

Server

When you build up a server in the local network and want to share it on the Internet,

Virtual Server can realize the service and provide it to the Internet users. At the same

time virtual server can keep the local network safe as other services are still invisible

from the Internet.

Virtual server can be used for setting up public services in your local network, such as

HTTP, FTP, DNS, POP3/SMTP and Telnet. Different service uses different service port.

Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and port

110 in POP3 service. Please verify the service port number before the configuration

.

Share my personal website I’ve built in local network with my

friends through the Internet.

For example,

the personal website has been built in my home

PC (192.168.0.100). I hope that my friends in the Internet can

visit my website in some way. The PC is connected to the router

with the WAN IP address 218.18.232.154.

Router

WAN: 218.18.232.154

LAN

Home

Personal Website

1.

Assign a static IP address to your PC, for example

192.168.0.100.

2.

Visit

http://tplinkwifi.net

, and log in with the username and

password you set for the router.

3.

Go to

Advanced

>

NAT Forwarding

>

Virtual Servers

, click

Add

.

4.

Click

View Existing Services

, and select

HTTP

. The external

port, internal port and protocol will be automatically filled

with contents. Enter the PC’s IP address 192.168.0.100 in the

Internal

IP

field.

5.

Click

OK

to save the settings.

I want to:

How can I

do that?