TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 81 -



DoS Protection -

Denial of Service protection. Check the Enable or Disable button to

enable or disable the DoS protection function. Only when it is enabled, will the flood filters be

enabled.



Note:

Dos Protection will take effect only when the

Traffic Statistics

in “

System Tool

→

Traffic

Statistics

” is enabled.



Enable ICMP-FLOOD Attack Filtering

-

Enable or Disable the ICMP-FLOOD Attack

Filtering.



ICMP-FLOOD Packets Threshold (5~3600)

-

The default value is 50. Enter a value

between 5

~

3600. When the current ICMP-FLOOD Packets number is beyond the set value,

the Router will startup the blocking function immediately.



Enable UDP-FLOOD Filtering

-

Enable or Disable the UDP-FLOOD Filtering.



UDP-FLOOD Packets Threshold (5~3600)

-

The default value is 500. Enter a value

between 5

~

3600. When the current UPD-FLOOD Packets number is beyond the set value,

the Router will startup the blocking function immediately.



Enable TCP-SYN-FLOOD Attack Filtering

-

Enable or Disable the TCP-SYN-FLOOD

Attack Filtering.



TCP-SYN-FLOOD Packets Threshold (5~3600)

-

The default value is 50. Enter a value

between 5

~

3600. When the current TCP-SYN-FLOOD Packets numbers is beyond the set

value, the Router will startup the blocking function immediately.



Ignore Ping Packet From WAN Port

-

Enable or Disable Ignore Ping Packet From WAN

Port. The default setting is disabled. If enabled, the ping packet from the Internet cannot

access the Router.



Forbid Ping Packet From LAN Port

-

Enable or Disable Forbid Ping Packet From LAN Port.

The default setting is disabled. If enabled, the ping packet from LAN cannot access the

Router. This function can be used to defend against some viruses.

Click the

Save

button to save the settings.

Click the

Blocked DoS Host List

button to display the DoS host table by blocking.

4.13.3 Local Management

Choose menu “

Security

→

Local Management

”, and then you can configure the management

rule in the screen as shown in Figure 4-75. The management feature allows you to deny

computers in LAN from accessing the Router.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 82 -

Figure 4-75 Local Management

By default, the radio button “

All the PCs on the LAN are allowed to access the Router's

Web-Based Utility

” is checked. If you want to allow PCs with specific MAC Addresses to access

the Setup page of the Router's Web-Based Utility locally from inside the network, check the radio

button “

Only the PCs listed can browse the built-in web pages to perform Administrator

tasks

”, and then enter each MAC Address in a separate field. The format for the MAC Address is

XX-XX-XX-XX-XX-XX (X is any hexadecimal digit). Only the PCs with MAC address listed can

use the password to browse the built-in web pages to perform Administrator tasks while all the

others will be blocked.

After click the

Add

button, your PC's MAC Address will be placed in the list above.

Click the

Save

button to save your settings.



Note:

If your PC is blocked but you want to access the Router again, use a pin to press and hold the

Reset Button

(hole) on the back panel for about 5 seconds to reset the Router’s factory defaults

on the Router’s Web-Based Utility.

4.13.4 Remote Management

Choose menu “

Security

→

Remote Management

”, and then you can configure the Remote

Management function in the screen as shown in Figure 4-76. This feature allows you to manage

your Router from a remote location via the Internet.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 83 -

Figure 4-76 Remote Management



Web Management Port -

Web browser access normally uses the standard HTTP service

port 80. This Router's default remote management web port number is 80. For greater

security, you can change the remote management web port to a custom port by entering that

number in the box provided. Choose a number between 1 and 65534 but do not use the

number of any common service port.



Remote Management IP Address

-

This is the current address you will use when accessing

your Router from the Internet. This function is disabled when the IP address is set to the

default value of 0.0.0.0. To enable this function change 0.0.0.0 to a valid IP address. If set to

255.255.255.255, then all the hosts can access the Router from internet.



Note:

1)

To access the Router, you should type your Router's WAN IP address into your browser's

address (in IE) or Location (in Navigator) box, followed by a colon and the custom port

number. For example, if your Router's WAN address is 202.96.12.8, and the port number

used is 8080, please enter http://202.96.12.8:8080 in your browser. Later, you may be asked

for the Router's password. After successfully entering the username and password, you will

be able to access the Router's web-based utility.

2)

Be sure to change the Router's default password to a very secure password

.

4.14 Parental Control

Choose menu “

Parental Control

”, and then you can configure the parental control in the screen

as shown in Figure 4-77. The Parental Control function can be used to control the internet

activities of the child, limit the child to access certain websites and restrict the time of surfing.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 84 -

Figure 4-77 Parental Control Settings

To add a new entry, please follow the steps below.

1.

Click the

Add New…

button and the next screen will pop-up as shown in Figure 4-78.

Figure 4-78 Add or Modify Parental Control Entry



Parental Control -

Check

Enable

if you want this function to take effect; otherwise, check

Disable

.



MAC Address of Parental PC -

In this field, enter the MAC address of the controlling PC, or

you can make use of the

Copy To Above

button below.

TL-WDR3600

N600 Wireless Dual Band Gigabit Router

- 85 -



MAC Address of Your PC -

This field displays the MAC address of the PC that is managing

this Router. If the MAC Address of your adapter is registered, you can click the

Copy To

Above

button to fill this address to the MAC Address of Parental PC field above.



Website Description -

Description of the allowed website for the PC controlled.



Schedule

-

The time period allowed for the PC controlled to access the Internet. For detailed

information, please go to “

Access Control

→

Schedule

”.



Enable

- Check this option to enable a specific entry.



Modify

-

Here you can edit or delete an existing entry.

2.

Enter the MAC address of the PC (e.g. 00-11-22-33-44-AA) you’d like to control in the

MAC

Address of Child PC

field, or you can choose the MAC address from the

All Address in

Current LAN

drop-down list.

3.

Give a description (e.g. Allow Google) for the website allowed to be accessed in the

Website

Description

field.

4.

Enter the allowed domain name of the website, either the full name or the keywords (e.g.

google) in the

Allowed Domain Name

field. Any domain name with keywords in it

(

www.google.com

,

www.google.com.hk

) will be allowed.

5.

Select from the Effective Time drop-down list the schedule (e.g. Schedule_1) you want. If

there are not suitable schedules for you, click the

Schedule

in red below to go to the

Advance Schedule Settings page and create the schedule you need.

6.

In the Status field, you can select

Enabled

or

Disabled

to enable or disable your entry.

7.

Click the

Save

button.

Click the

Enable All

button to enable all the rules in the list.

Click the

Disable All

button to disable all the rules in the list.

Click the

Delete All

button to delete all the entries in the table.

Click the

Next

button to go to the next page, or click the

Previous

button to return to the previous

page.

For example

: If you desire that the child PC with MAC address 00-11-22-33-44-AA can access

www.google.com

on Saturday only while the parent PC with MAC address 00-11-22-33-44-BB is

without any restriction, you should follow the settings below.

1.

Click “

Parental Control

” menu on the left to enter the Parental Control Settings page. Check

Enable and enter the MAC address 00-11-22-33-44-BB in the MAC Address of Parental PC

field.