53

Chapter 11 °

Customize Your Network Settings

4.

Set the time. Drag the cursor to cover the time area and click

Save

to make the settings effective. The selected time will

be in green.

5.

Repeat steps 3 and 4 to set time for 5GHz-1 and 5GHz-2 wireless networks.

Note:

1.

If you just set time for one wireless band, the other wireless band is still always on, so set time for both of the two bands to schedule

your whole wireless network.

2.

The wireless LED (2.4GHz , 5GHz-1, and 5GHz-2 ) will turn off if the corresponding wireless network is disabled.

3.

The wireless network will be automatically turned on after the time period you set.

11. 9.

Set up a

VPN Connection

VPN (Virtual Private Network) is a private network established across the public network, generally via the Internet. However,

the private network is a logical network without any physical network lines, so it is called Virtual Private Network.

With the wide application of the Internet, more and more data are needed to be shared through the Internet. Connecting the

local network to the Internet directly, though can allow the data exchange, will cause the private data to be exposed to all the

users on the Internet.

The VPN (Virtual Private Network) technology is developed and used to establish the private network through the public

network, which can provides a secure communication to a remote computer or remote network, and guarantee a secured

data exchange. IPSec is one of the major implementations of VPNs.

Establish an IPSec VPN tunnel to connect two LANs via Internet so that the hosts in different remote

LANs are able to communicate with each as if they are in the same LAN.

For example

, I am the network administrator of a regional office, I need to let my office staff can visit

the headquarter’s servers and resources, and vice versa. I know that the router in my office and the

device in headquarter both support IPSec VPN feature, so I decide to set up a VPN connection with

the headquarter office.

The following diagram is a typical VPN topology. Here Site A refers to regional office’s network (local

network). And Site B refers to the headquarter’s network (remote network) which I want to connect.

Router 1

Router 2

LAN: 192.168.1.1

WAN: 219.134.112.246

PC 1

Subnetmask: 255.255.255.0

WAN: 219.134.112.247

PC 2

LAN: 192.168.2.1

Subnetmask: 255.255.255.0

Site A

Site B

1. Make sure of the topology you want to build and record site A (local network) and site B (remote

network)’s LAN IP and WAN IP.

2. Configuration on site A (local network).

1 ) Visit

http://tplinkwifi.net

, and log in with the username and password you set for the router.

2 )

Go to

Advanced

>

Network

>

IPSec VPN

to open the configuration page. Click

Add

to set up

a VPN tunnel.

I want to:

How can I

do that?

54

Chapter 11 °

Customize Your Network Settings

3 )

In the

IPSec Connection Name

column, specify a name.

4 )

In the

Remote IPSec Gateway (URL)

column, Enter Site B’s WAN IP address.

5 )

To configure

Site A’s LAN

:

In the

Tunnel access from local IP addresses

column, here we take

Subnet Address

as an

example. Then input the LAN IP range of Site A in the

IP Address for VPN

column, and input

Subnet Mask

of Site A.

6 )

To configure

Site B’s LAN

:

In the

Tunnel access from remote IP addresses

column, here we take

Subnet Address

as an

example. Then input the LAN IP range of Site B in the

IP Address for VPN

column, and input

Subnet Mask

of Site B.

7 )

Select the

Key Exchange Method

for the policy. We select

Auto(IKE)

here.

8 )

Enter the

Pre-Shared Key

for IKE authentication. Then keep

Perfect Forward Secrecy

enabled.

Note:

•

The key should consist of visible characters without blank space.

•

Make sure Site A and Site B use the same key.

55

Chapter 11 °

Customize Your Network Settings

9 )

Leave the

Advanced

Settings as default value. Then click

OK

to save.

3. Configuration on Site B (remote network). Refer to step 2 configuration on Site A and make sure

that Site A and Site B use the same

Pre-shared keys

and

Perfect Forward Secrecy

settings.

4. The

Status

column will change to

UP

if the VPN connection has been set up successfully.

5. Check the VPN connection. You can ping site B’ LAN IP from your computer in site A to verify that

the IPSec VPN connection is set up correctly.

Tips:

To check the VPN connection, you can do the following.

a .

On the host in Site A, press

[Windows Logo]

+

[R]

to open Run dialog. Input “

cmd

” and hit

OK.

b .

In the CLI window, type in “ping 192.168.2.x” (“192.168.2.x” can be IP address of any host in

Site B). Then press [Enter].

If Ping proceeds successfully (gets replies from host in Site B), the IPSec connection is working

properly now.

Now IPSec VPN is implemented to establish a connection.

Note:

1.

The product supports a maximum of ten simultaneous connections.

2.

If one of the site has been off line for a while, for example, if Site A has been disconnected, on Site B you need to click

Disable

and then

click

Enable

after Site A back on line in order to re-establish the IPSec tunnel.

Done!

56

Chapter 12 °

Manage the Router

Manage the Router

This chapter will show you the configuration for managing and maintaining

your router.

This chapter includes the following sections:

•

Set Up System Time

•

Test the Network Connectivity

•

Upgrade the Firmware

•

Backup and Restore Configuration Settings

•

Change the Administrator Account

•

Local Management

•

Remote Management

•

System Log

•

SNMP Settings

•

Monitor the Internet Traffic Statistics

•

Control LEDs

12. 1.

Set Up System Time

System time is the time displayed while the router is running. The system time you configure here will be used for other time-

based functions like Parental Controls and Wireless Schedule. You can manually set how to get the system time.

Follow the steps below to set your system time.

1.

Visit

http://tplinkwifi.net

, and log in with the username and password you set for the router.

2.

Go to

Advanced

>

System Tools

>

Time Settings

page.

3.

Configure the system time using the following methods :

Manually:

Select your time zone and enter your local time.

Get from PC:

Click this button if you want to use the current managing PC’s time.

Get GMT:

Click this button if you want to get time from the Internet. Make sure your router can access the Internet before

you select this way to get system time.

4.

Click

Save

to make your settings effective.

5.

After setting the system time, you can set

Daylight Saving

time according to your needs. Tick the checkbox to enable

Daylight Saving

, set the start and end time and then click

Save

to make the settings effective.

12

57

Chapter 12 °

Manage the Router

12. 2.

Test the Network Connectivity

Diagnostics is used to test the connectivity between the router and the host or other network devices.

1.

Visit

http://tplinkwifi.net

, and log in with the username and password you set for the router.

2.

Go to

Advanced

>

System Tools

>

Diagnostics

.

3.

Enter the information with the help of page tips:

1 )

Choose

Ping

or

Traceroute

as the diagnostic tool to test the connectivity;

•

Ping

is used to test the connectivity between the router and the tested host, and measure the round-trip time.

•

Traceroute

is used to display the route (path) your router has passed to reach the tested host, and measure transit delays of

packets across an Internet Protocol network.

2 )

Enter the

Target IP Address

/

Domain Name

of the tested host.

4.

Click

Start

to begin the diagnostics.

Tips:

Click

Advanced

, you can modify the packet count, packet size, test timeout time or max hop. It’s recommended to keep the default value.

The figure below indicates the proper connection between the router and the Yahoo server (www.Yahoo.com) tested through

Ping

.

The figure below indicates the proper connection between the router and the Yahoo server (www.Yahoo.com) tested through

Traceroute

.