TL-WR740N/TL-WR741ND

150Mbps Wireless N Router

-54-

Figure 4-50

UPnP Setting

¾

Current UPnP Status -

UPnP can be enabled or disabled by clicking the

Enable

or

Disable

button. This feature is enabled by default.

¾

Current UPnP Settings List -

This table displays the current UPnP information.

•

App Description

- The description about the application which initiates the UPnP

request.

•

External Port

- The port which the Router opened for the application.

•

Protocol

- The type of protocol which is opened.

•

Internal Port

- The port which the Router opened for local host.

•

IP Address

- The IP address of the local host which initiates the UPnP request.

•

Status

- Either Enabled or Disabled. "Enabled" means that the port is still active;

otherwise, the port is inactive.

Click the

Enable

button to enable UPnP.

Click the

Disable

button to disable UPnP.

Click the

Refresh

button to update the Current UPnP Settings List.

4.9

Security

Figure 4-51

The Security menu

There are four submenus under the Security menu as shown in Figure 4-51:

Basic Security

,

TL-WR740N/TL-WR741ND

150Mbps Wireless N Router

-55-

Advanced Security

,

Local Management

and

Remote Management.

Click any of them, and you

will be able to configure the corresponding function.

4.9.1

Basic Security

Choose menu “

Security

→

Basic Security

”, and then you can configure the basic security in

the screen as shown in Figure 4-52.

Figure 4-52

Basic Security

¾

Firewall -

A firewall protects your network from the outside world. Here you can enable or

disable the Router’s firewall.

•

SPI Firewall

- SPI (Stateful Packet Inspection, also known as dynamic packet filtering)

helps to prevent cyber attacks by tracking more state per session. It validates that the

traffic passing through the session conforms to the protocol. SPI Firewall is enabled by

factory default. If you want all the computers on the LAN exposed to the outside world,

you can disable it.

¾

VPN -

VPN Passthrough must be enabled if you want to allow VPN tunnels using VPN

protocols to pass through the Router.

•

PPTP Passthrough

- Point-to-Point Tunneling Protocol (PPTP) allows the

Point-to-Point Protocol (PPP) to be tunneled through an IP network. To allow PPTP

tunnels to pass through the Router, click

Enable

.

•

L2TP Passthrough

- Layer Two Tunneling Protocol (L2TP) is the method used to

enable Point-to-Point sessions via the Internet on the Layer Two level. To allow L2TP

tunnels to pass through the Router, click

Enable

.

TL-WR740N/TL-WR741ND

150Mbps Wireless N Router

-56-

•

IPSec Passthrough

- Internet Protocol security (IPSec) is a suite of protocols for

ensuring private, secure communications over Internet Protocol (IP) networks, through

the use of cryptographic security services. To allow IPSec tunnels to pass through the

Router, click

Enable

.

¾

ALG -

It is recommended to enable Application Layer Gateway (ALG) because ALG allows

customized Network Address Translation (NAT) traversal filters to be plugged into the

gateway to support address and port translation for certain application layer "control/data"

protocols such as FTP, TFTP, H323 etc.

•

FTP ALG

- To allow FTP clients and servers to transfer data across NAT, click

Enable

.

•

TFTP ALG

- To allow TFTP clients and servers to transfer data across NAT, click

Enable

.

•

H323 ALG

- To allow Microsoft NetMeeting clients to communicate across NAT, click

Enable

.

•

RTSP ALG

- To allow some media player clients to communicate with some streaming

media servers across NAT, click

Enable

.

Click the

Save

button to save your settings.

4.9.2

Advanced Security

Choose menu “

Security

→

Advanced Security

”, and then you can protect the Router from

being attacked by TCP-SYN Flood, UDP Flood and ICMP-Flood in the screen as shown in

Figure

4-53

.

TL-WR740N/TL-WR741ND

150Mbps Wireless N Router

-57-

Figure 4-53

Advanced Security

¾

Packets Statistics Interval (5~60) -

The default value is 10. Select a value between 5 and

60 seconds from the drop-down list. The Packets Statistics Interval value indicates the time

section of the packets statistics. The result of the statistics is used for analysis by SYN Flood,

UDP Flood and ICMP-Flood.

¾

DoS Protection -

Denial of Service protection. Check the Enable or Disable button to

enable or disable the DoS protection function. Only when it is enabled, will the flood filters be

enabled.

)

Note:

Dos Protection will take effect only when the

Traffic Statistics

in “

System Tool

→

Traffic

Statistics

” is enabled.

¾

Enable ICMP-FLOOD Attack Filtering

-

Enable or Disable the ICMP-FLOOD Attack

Filtering.

¾

ICMP-FLOOD Packets Threshold (5~3600)

-

The default value is 50. Enter a value

between 5

~

3600. When the current ICMP-FLOOD Packets number is beyond the set value,

the Router will startup the blocking function immediately.

¾

Enable UDP-FLOOD Filtering

-

Enable or Disable the UDP-FLOOD Filtering.

TL-WR740N/TL-WR741ND

150Mbps Wireless N Router

-58-

¾

UDP-FLOOD Packets Threshold (5~3600)

-

The default value is 500. Enter a value

between 5

~

3600. When the current UPD-FLOOD Packets number is beyond the set value,

the Router will startup the blocking function immediately.

¾

Enable TCP-SYN-FLOOD Attack Filtering

-

Enable or Disable the TCP-SYN-FLOOD

Attack Filtering.

¾

TCP-SYN-FLOOD Packets Threshold (5~3600)

-

The default value is 50. Enter a value

between 5

~

3600. When the current TCP-SYN-FLOOD Packets numbers is beyond the set

value, the Router will startup the blocking function immediately.

¾

Ignore Ping Packet From WAN Port

-

Enable or Disable Ignore Ping Packet From WAN

Port. The default setting is disabled. If enabled, the ping packet from the Internet cannot

access the Router.

¾

Forbid Ping Packet From LAN Port

-

Enable or Disable Forbid Ping Packet From LAN Port.

The default setting is disabled. If enabled, the ping packet from LAN cannot access the

Router. This function can be used to defend against some viruses.

Click the

Save

button to save the settings.

Click the

Blocked DoS Host List

button to display the DoS host table by blocking.

4.9.3

Local Management

Choose menu “

Security

→

Local Management

”, and then you can configure the management

rule in the screen as shown in Figure 4-54. The management feature allows you to deny

computers in LAN from accessing the Router.

Figure 4-54 Local Management

By default, the radio button “

All the PCs on the LAN are allowed to access the Router's

Web-Based Utility

” is checked. If you want to allow PCs with specific MAC Addresses to access