TL-WR641G

108M Wireless Router User Guide

- 43 -

4.7.3 DMZ

The DMZ host feature allows one local host to be exposed to the Internet for a special-purpose

service such as Internet gaming or videoconferencing. DMZ host forwards all the ports at the

same time. Any PC whose port is being forwarded must have its DHCP client function disabled

and should have a new static IP Address assigned to it because its IP Address may change

when using the DHCP function. You can set up DMZ host on this page shown in Figure 4-33:

Figure 4-33

To assign a computer or server to be a DMZ server:

1.

Click the

Enable

radio button

2.

Enter the local host IP Address in the

DMZ Host IP Address

field

3.

Click the

Save

button.

)

Note:

After you set the DMZ host, the firewall related to the host will not work.

4.7.4 UPnP

The Universal Plug and Play (UPnP) feature allows the devices, such as Internet computers,

to access the local host resources or devices as needed. UPnP devices can be automatically

discovered by the UPnP service application on the LAN. You can configure UPnP on this page

that shown in Figure 4-34:

Figure 4-34

¾

Current UPnP Status -

UPnP can be enabled or disabled by clicking the

Enable

or

Disable

button. As allowing this may present a risk to security, this feature is disabled by

default.

¾

Current UPnP Settings List -

This table displays the current UPnP information.

TL-WR641G

108M Wireless Router User Guide

- 44 -

•

App Description

– The description provided by the application in the UPnP request

•

External Port

-

External port, which the router opened for the application.

•

Protocol

–

Shows which type of protocol is opened.

•

Internal Port

-

Internal port, which the router opened for local host.

•

IP Address

-

The UPnP device that is currently accessing the router.

•

Status -

Either Enabled or Disabled, “Enabled” means that port is still active.

Otherwise, the port is inactive.

Click

Refresh

to update the Current UPnP Settings List.

4.8

Security

Figure 4-35

There are six submenus under the Security menu (shown in Figure 4-35):

Firewall

,

IP Address

Filtering, Domain Filtering, MAC Filtering, Remote Management

and

Advanced Security.

Click any of them, and you will be able to configure the corresponding function. The detailed

explanations for each submenu are provided below.

4.8.1 Firewall

Using the Firewall page (shown in Figure 4-36), you can turn the general firewall switch on or off.

The default setting for the switch is off. If the general firewall switch is off, even if IP Address

Filtering, DNS Filtering and MAC Filtering are enabled, their settings are ineffective.

TL-WR641G

108M Wireless Router User Guide

- 45 -

Figure 4-36

¾

Enable IP Address Filtering -

set IP Address Filtering is enabled or disabled. There are

two default filtering rules of IP Address Filtering, either Allow or Deny passing through the

router.

¾

Enable Domain Filtering -

set Domain Filtering is enabled or disabled.

¾

Enable MAC Filtering -

set MAC Address Filtering is enabled or disabled. You can select

the default filtering rules of MAC Address Filtering, either Allow or Deny accessing the

router.

4.8.2 IP Address Filtering

The IP address Filtering feature allows you to control Internet Access by specific users on your

LAN based on their IP addresses. The IP address filtering is set on this page, Figure 4-37:

TL-WR641G

108M Wireless Router User Guide

- 46 -

Figure 4-37

To disable the IP Address Filtering feature, keep the default setting,

Disabled

. To set up an IP

Address Filtering entry, click

Enable

Firewall and

Enable

IP Address Filtering on the Firewall

page, and click the

Add New…

button. The page "

Add or Modify an IP Address Filtering

entry

" will appear shown in Figure 4-38:

Figure 4-38

To create or modify an IP Address Filtering entry, please follow these instructions:

1.

Effective Time -

Enter a range of time in HHMM format, which point to the range time for

the entry to take effect. For example, 0803 - 1705, the entry will take effect from 08:03 to

17:05.

2.

LAN IP Address -

Enter a LAN IP Address or a range of LAN IP addresses in the field, in

dotted-decimal notation format. For example, 192.168.1.20 - 192.168.1.30. Keep the field

open, which means all LAN IP Addresses have been put into the field.

3.

LAN Port -

Enter a LAN Port or a range of LAN ports in the field. For example, 1030 - 2000.

Keep the field open, which means all LAN ports have been put into the field.

TL-WR641G

108M Wireless Router User Guide

- 47 -

4.

WAN IP Address -

Enter a WAN IP Address or a range of WAN IP Addresses in the field,

in dotted-decimal notation format. For example, 61.145.238.6 – 61.145.238.47. Keep the

field open, which means all WAN IP Addresses have been put into the field.

5.

WAN Port -

Enter a WAN Port or a range of WAN Ports in the field. For example, 25 – 110.

Keep the field open, which means all WAN Ports have been put into the field.

6.

Protocol -

Select which protocol is to be used, either

TCP, UDP

, or

All

(all protocols

supported by the router).

7.

Action -

Select either

Allow

or

Deny

through the router.

8.

Status -

Select

Enabled

or

Disabled

for this entry on the

Status

pull-down list.

9.

Click the

Save

button to save this entry.

To modify or delete an existing entry:

1.

Click the

Modify

in the entry you want to modify. If you want to delete the entry, click the

Delete

.

2.

Modify the information.

3.

Click the

Save

button.

Click the

Enable All

button to make all entries enabled

Click the

Disabled All

button to make all entries disabled.

Click the

Delete All

button to delete all entries

You can change the entry’s order as desired. Fore entries are before hind entries. Enter the ID

number in the first box you want to move and another ID number in second box you want to

move to, and then click the

Move

button to change the entry’s order.

Click the

Next

button to the next page and click the

Previous

button to return to the previous

page.

For example:

If you desire to block E-mail received and sent by the IP Address 192.168.1.7 on

your local network, and to make the PC with IP Address 192.168.1.8 unable to visit the website

of IP Address 202.96.134.12, while other PC(s) have no limit you should specify the following IP

address filtering list:

Figure 4-39

4.8.3 Domain Filtering

The Domain Filtering page (shown in Figure 4-40) allows you to control access to certain

websites on the Internet by specifying their domains or key words.