TP-Link Archer VR900 Router Manual PDF (Setup & Configuration Guide)

Page 86 / 122 Scroll up to view Page 81 - 85

82

Chapter 12

Specify Your Network Settings

refers to the headquarter’s network (remote network) which I

want to connect.

Modem router 1

LAN: 192.168.1.1

WAN: 219.134.112.246

PC 1

Subnetmask: 255.255.255.0

WAN: 219.134.112.247

Modem Router 2

PC 2

LAN: 192.168.2.1

Subnetmask: 255.255.255.0

Site A

Site B

1°

Make sure of the topology you want to build and record site

A (local network) and site B (remote network)’s LAN IP and

WAN IP.

2°

Configuration on site A (local network).

1 ) Visit

http://tplinkmodem.net

, and log in with the password

you set for the modem router.

2 ) Go to

Advanced

>

Network

>

IPSec VPN

to open the

configuration page. Click

Add

to set up a VPN tunnel.

How can I

do that?

Page 87 / 122

83

Chapter 12

Specify Your Network Settings

3 ) In the

IPSec Connection Name

column, specify a name.

4 ) In the

Remote IPSec Gateway (URL)

column, Enter Site B’s

WAN IP address.

5 ) To configure

Site A’s LAN

:

In the

Tunnel access from local IP addresses

column, here we

take

Subnet Address

as an example. Then input the LAN IP

range of Site A in the

IP Address for VPN

column, and input

Subnet Mask

of Site A.

6 ) To configure

Site B’s LAN

:

In the

Tunnel access from local IP addresses

column, here we

take

Subnet Address

as an example. Then input the LAN IP

range of Site B in the

IP Address for VPN

column, and input

Subnet Mask

of Site B.

7 ) Select the

Key Exchange Method

for the policy. We select

Auto(IKE)

here.

Page 88 / 122

84

Chapter 12

Specify Your Network Settings

8 ) Enter the

Pre-Shared Key

for IKE authentication. Then

keep

Perfect Forward Secrecy

enabled.

Note:

The key should consist of visible characters without blank space.

Make sure Site A and Site B use the same key.

9 ) Leave the

Advanced

Settings as default value. Then click

OK

to save.

3°

Configuration on Site B (remote network). Refer to step 2

configuration on Site A and make sure that Site A and Site B

use the same

pre-shared keys

and

Perfect Forward Secrecy

settings.

4°

The

Status

column will change to

UP

if the VPN connection

has been set up successfully.

5°

Check the VPN connection. You can ping site B’ LAN IP

from your computer in site A to verify that the IPSec VPN

connection is set up correctly.

Tips:

To check the VPN connection, you can do the following.

On the host in Site A, press

[Windows Logo]

+

[R]

to open Run dialog. Input “

cmd

”

and hit

OK.

a .

In the CLI window, type in “ping 192.168.2.x” (“192.168.2.x”

can be IP address of any host in Site B). Then press [Enter].

Page 89 / 122

85

Chapter 12

Specify Your Network Settings

If Ping proceeds successfully (gets replies from host in Site B),

the IPSec connection is working properly now.

Now IPSec VPN is implemented to establish a connection.

Note:

1. The product supports a maximum of ten simultaneous connections.

2.

If one of the site has been off line for a while, for example, if Site A has been disconnected, on Site B you need to

click

Disable

and then click

Enable

after Site A back on line in order to re-establish the IPSec tunnel.

12° 7°

Set Up the IPv6 Tunnel

The IPv6 Tunnel feature helps you obtain IPv6 resources based on an IPv4 WAN

connection or vice versa.

IPv6 Tunnel is a transition mechanism that enables IPv6-only hosts to reach IPv4

services or vice versa and allows isolated IPv6 hosts and networks to reach each other

over IPv4-only infrastructure before IPv6 completely supplants IPv4. It is a temporary

solution for networks that do not support native dual-stack, where both IPv6 and IPv4

run independently.

The modem router provides three tunneling mechanisms:

6to4

,

6rd

and

DS-Lite

. The

way to set up 6rd and DS-Lite tunnel are similar.

12° 7° 1°

Use the Public IPv6 Tunnel Service-6to4

The 6to4 tunnel is a kind of public service. If there is any 6to4 server in your network,

you can use this mechanism to access IPv6 service. If your ISP provides you with an

IPv4-only connection but you want to visit IPv6 websites

,

you can try to set up a 6to4

tunnel.

Done!

Page 90 / 122

86

Chapter 12

Specify Your Network Settings

Set up the IPv6 tunnel though my ISP doesn’t provide me with

the tunnel service.

1°

Visit

http://tplinkmodem.net

, and log in with the password

you set for the modem router.

2°

Go to

Advanced

>

Network

>

IPv6 Tunnel

.

3°

Tick the check box, select

6to4

as the tunneling mechanism

and select a WAN connection from the drop-down list, then

click

Save

.

Note:

If there is no available WAN connection to choose, make sure you have connected to

the Internet and the connection type is not Bridge.

Now you can visit the IPv6 websites with the 6to4 tunnel.

Note:

Still not being able to access IPv6 resources means that not any 6to4 public server was found in your network. You

can contact your ISP to sign up for IPv6 connection service.

12° 7° 2°

Specify the 6rd Tunnel with Parameters Provided by Your ISP

Specify the 6rd tunnel with the parameters provided by my 6rd

tunnel service provider.

1°

Visit

http://tplinkmodem.net

, and log in with the password

you set for the modem router.

2°

Go to

Advanced

>

Network

>

IPv6 Tunnel

.

3°

Tick the check box, select

6rd

as the tunneling mechanism

and select a WAN connection from the drop-down list.

4°

According to the parameters provided by your ISP, choose

Auto

or

Manual

. More parameters are needed if you choose

Manual

.

5°

Click

Save

.

I want to:

How can I

do that?

Done!

I want to:

How can I

do that?

How can I

do that?

Rate

Popular TP-Link Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share