SafeStream

TM

Gigabit Broadband VPN Router User Guide

TL-R600VPN

30

To add/modify a virtual server entry:

Step 1:

Click

Add New…

/

Modify

shown in Figure 4-18, you will see a new screen shown in

Figure 4-19.

Step 2:

Select the service you want from the “

Common Service Port

”, then the port and

protocol value will be added to the corresponding field automatically, you only need to

configure the IP address for the virtual server; If the “

Common Service Port

” does not

contain the service that you want, please configure the Service Port, IP Address and

Protocol manually.

Figure 4-19

Step 3:

After that, select

Enable

to make the entry take effect.

Step 4:

Click

Save

button to save the configuration.

)

Note:

1)

If you want to add more than one reserved IP, please go to

step 1

to continue.

2)

It is possible that you configure more than one type of available service on a computer or

server; it means the IP addresses for the virtual servers are same.

Other configurations for the entries as shown in Figure 4-18:

Click the

Delete

button to delete the entry.

Click the

Enable All

button to enable all the entries.

Click the

Disable All

button to disable all the entries.

Click the

Delete All

button to delete all the entries.

Click the

Previous

button to view the information in the previous screen,

click the

Next

button to

view the information in the next screen.

)

Note:

If you set the virtual server of the service port as 80, you must set the web management port on

System Tools –> Remote Management

screen to be any value except 80 such as 8080. Or else

there will be a conflict to disable the virtual server.

SafeStream

TM

Gigabit Broadband VPN Router User Guide

TL-R600VPN

31

4.5.2

Port Triggering

Choose menu “

Forwarding

→

Port Triggering

”, you can view and add port triggering in the next

screen (shown in Figure 4-20).

Some applications require multiple connections, like Internet games, video conferencing, Internet

calling and so on. These applications cannot work with a pure NAT router. Port Triggering is used

for some of these applications that can work with an NAT router.

Figure 4-20

¾

Trigger Port

-

This displays the port for outgoing traffic. An outgoing connection using this

port will "Trigger" this rule.

¾

Trigger Protocol

-

This displays the protocol used for Trigger Ports, either

TCP

,

UDP

, or

All

(all protocols supported by the router).

¾

Incoming Port

-

This displays the port or port range used by the remote system, they are

used for responding to the outgoing request. A response using one of these ports will be

forwarded to the PC that triggered this rule. You can input at most 5 groups of ports (or port

section). Every group of ports must be apart with ",". For example, 2000-2038, 2050-2051,

2085, 3010-3030.

¾

Incoming Protocol

-

This displays the protocol used for Incoming Ports Range, either

TCP

,

UDP

, or

ALL

(all protocols supported by the router).

¾

Status

-

This displays the status.

Enabled

means that the rule will take effect,

Disabled

means that the rule will not take effect.

Once configured, the operation for Port Triggering will proceed as follows:

Step 1:

A local host makes an outgoing connection using a destination port number defined in

the Trigger Port field.

Step 2:

The router records this connection, opens the incoming port or ports associated with this

entry in the Port Triggering table, and associates them with the local host.

Step 3:

When necessary, the external host will be able to connect to the local host using one of

the ports defined in the Incoming Ports

field.

SafeStream

TM

Gigabit Broadband VPN Router User Guide

TL-R600VPN

32

To add/modify a port triggering entry:

Step 1:

Click

Add New…

/

Modify

shown in Figure 4-20, you will see a new screen shown in

Figure 4-21.

Step 2:

Select the application you want from the “

Common Applications

”, then the Trigger port

and Incoming ports will be added to the corresponding field automatically, you only need

to configure the Trigger protocol and Incoming Protocol for the entry; If the “

Common

Applications

” does not contain the applications that you want, please configure these

options manually.

Figure 4-21

Step 3:

After that, select

Enabled

to make the entry take effect.

Step 4:

Click

Save

button to save the configuration.

)

Note:

1)

If you want to add more than one reserved IP, please go to

step 1

to continue.

2)

When the trigger connection is released, the according opening ports will be closed.

3)

Each rule allowed to be used only by one host on LAN synchronously. The trigger

connection of other hosts on LAN will be refused.

4)

Incoming Port Range cannot overlap each other.

Other configurations for the entries as shown in Figure 4-20:

Click the

Delete

button to delete the entry.

Click the

Enable All

button to enable all the entries.

Click the

Disable All

button to disable all the entries.

Click the

Delete All

button to delete all the entries.

Click the

Previous

button to view the information in the previous screen,

click the

Next

button to

view the information in the next screen.

SafeStream

TM

Gigabit Broadband VPN Router User Guide

TL-R600VPN

33

4.5.3

DMZ

Choose menu “

Forwarding

→

DMZ

”, you can view and configure DMZ host in the screen (shown

in Figure 4-22).

The DMZ host feature allows one local host to be exposed to the Internet for a special-purpose

service such as Internet gaming or videoconferencing. DMZ host forwards all the ports at the

same time. Any PC whose port is being forwarded must have its DHCP client function disabled

and should have a new static IP address assigned to it because its IP address may change when

using the DHCP function.

Figure 4-22

To assign a computer or server to be a DMZ server:

Step 1:

Click the

Enable

radio button

Step 2:

Enter the local host IP address in the

DMZ Host IP Address

field

Step 3:

Click the

Save

button.

)

Note:

After you set the DMZ host, the firewall related to the host will not take effect.

4.5.4

UPnP

Choose menu “

Forwarding

→

UPnP

”, you can view the information about UPnP in the screen

(shown in Figure 4-23). You can click

Refresh

to update the Current UPnP Settings List before

viewing the information.

The Universal Plug and Play (UPnP) feature allows the devices, such as Internet computers, to

access the local host resources or devices as needed. UPnP devices can be automatically

discovered by the UPnP service application on the LAN.

TL-R600VPN

SafeStream

Gigabit Broadband VPN Router User Guide

TM

34

Figure 4-23

¾

Current UPnP Status -

If you want to use

the Router’s UPnP function, please click

Enable

button. If you don’t want use the function, please click

Disable

button. Allowing the function

may cause a risk to security; this feature is disabled by default.

¾

App Description -

This displays the description provided by the application in the UPnP

request.

¾

External Port

-

This displays the external port, which the router opened for the application.

¾

Protocol

-

This displays the protocol for the application.

¾

Internal Port

-

This displays the internal port, which the router opened for local host.

¾

IP Address

-

The UPnP device that is currently accessing the router.

¾

Status -

This displays the status.

Enabled

means that the port is still active,

Disabled

means that the port is inactive.

4.6

Security

Choose menu “

Security

”, the next submenus are shown below.

Figure 4-24

Click any of them, and you will be able to configure the corresponding function. The detailed

explanations for each submenu are provided below.

4.6.1

Basic Security

Choose menu “

Security

→

Basic Security

”, you can configure the basic security of the router in

the next screen (shown in Figure 4-25).