TL-WR1043N - V5 - User Guide PDF

User Guide
450Mbps Wireless N Gigabit Router

TL-WR1043N
REV5.0.0 1910011956
Contents
About This Guide..........................................................................................................1
Chapter 1. Get to Know About Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

1. 1. Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. Appearance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. 1. The Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
1. 2. 2. The Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Chapter 2. Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

2. 1. Position Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2. 2. Connect Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Chapter 3. Log in to Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 4. Set Up Internet Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

4. 1. Use Quick Setup Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4. 2. Manually Set up Your Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4. 3. Set Up an IPv6 Internet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Chapter 5. Guest Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

5. 1. Create a Network for Guests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
5. 2. Customize Guest Network Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Chapter 6. Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Chapter 7. QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Chapter 8. Network Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

8. 1. Protect the Network from Cyber Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
8. 2. Access Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
8. 3. IP & MAC Binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Chapter 9. NAT Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

9. 1. Application Layer Gateway(ALG) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
9. 2. Share Local Resources on the Internet by Virtual Servers . . . . . . . . . . . . . . . . . . . 38
9. 3. Open Ports Dynamically by Port Triggering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
9. 4. Make Applications Free from Port Restriction by DMZ . . . . . . . . . . . . . . . . . . . . . . . 41
9. 5. Make Xbox Online Games Run Smoothly by UPnP. . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Chapter 10. Customize Your Network Settings . . . . . . . . . . . . . . . . . . . . . . . 44

10. 1. Change the LAN Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
10. 2. Configure to Support IPTV Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
10. 3. Specify DHCP Server Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
10. 4. Set Up a Dynamic DNS Service Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
10. 5. Create Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
10. 6. Specify Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
10. 7. Use WPS for Wireless Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
10. 7. 1. Set the Router’s PIN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
10. 7. 2. Use the WPS Wizard for Wi-Fi Connections . . . . . . . . . . . . . . . . . . . . . . . . . 53
Chapter 11. Manage the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

11. 1. Set Up System Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
11. 2. Test the Network Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
11. 3. Upgrade the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
11. 3. 1. Online Upgrade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
11. 3. 2. Manual Upgrade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
11. 3. 3. Restore Interrupted Upgrade after Power Failure . . . . . . . . . . . . . . . . . . . . 60
11. 4. Backup and Restore Configuration Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
11. 5. Change the Administrator Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
11. 6. Password Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
11. 7. Local Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
11. 8. Remote Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
11. 9. System Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
11. 10. Monitor the Internet Traffic Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
11. 11. Control LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
FAQ.................................................................................................................................70
About This Guide
This guide is a complement of Quick Installation Guide. The Quick Installation Guide
instructs you on quick Internet setup, and this guide provides details of each function
and shows you the way to configure these functions appropriate to your needs.
When using this guide, please notice that features of the router may vary slightly
depending on the model and software version you have, and on your location, language,
and Internet service provider. All screenshots, images, parameters and descriptions
documented in this guide are used for demonstration only.
Conventions
In this guide the following conventions are used:
Convention Description
Underlined words or phrases are hyperlinks. You can click to redirect to a
Underlined
website or a specific section.
Contents to be emphasized and texts on the web page are in teal, including the
Teal
menus, items, buttons, etc.
The menu structures to show the path to load the corresponding page.
> For example, Advanced > Wireless > MAC Filtering means the MAC Filtering
function page is under the Wireless menu that is located in the Advanced tab.
Note: Ignoring this type of note might result in a malfunction or damage to the device.
Tips: Indicates important information that helps you make better use of your device.
• Click to edit the corresponding entry.
Symbols on the web • Click to delete the corresponding entry.

page
• Click to enable or disable the corresponding entry.
• Click to view more information about items on the page.
More Info
• The latest software, management app and utility can be found at Download Center at
http://www.tp-link.com/support.
• The Quick Installation Guide can be found where you find this guide or inside the
package of the router.
• Specifications can be found on the product page at http://www.tp-link.com.
• A Technical Support Forum is provided for you to discuss our products at
http://forum.tp-link.com.
• Our Technical Support contact information can be found at the Contact Technical
Support page at http://www.tp-link.com/support.
1
Chapter 1
Get to Know About Your

Router
This chapter introduces what the router can do and shows its appearance.
It contains the following sections:
• Product Overview
• Appearance
1. 1. Product Overview
The TP-LINK router is designed to fully meet the need of Small Office/Home Office
(SOHO) networks and users demanding higher networking performance. The powerful
antennas ensure continuous Wi-Fi signal to all your devices while boosting widespread
coverage throughout your home, and the built-in Ethernet ports supply high-speed
connection to your wired devices.
Moreover, it is simple and convenient to set up and use the TP-LINK router due to its
intuitive web interface and the powerful Tether app.
1. 2. Appearance
1. 2. 1. The Front Panel
The router’s LEDs (view from left to right) are located on the front panel. You can check
the router’s working status by following the LED Explanation table.
LED Explanation
Name Status Indication
On System initialization is complete.
The system is initializing or the firmware is being upgraded. Do not

(Power) Flashing
disconnect or power off the router.
Off Power is off.
3
Name Status Indication
On The wireless is working normally.
(Wi-Fi)
Off The wireless is disabled.
Blue On The Internet is available.
The router’s Internet port is connected, but the Internet is not

(Internet) Orange On
available.
Off The router’s Internet port is not connected.
On The corresponding Ethernet port is connected.

(Ethernet)
Off The corresponding Ethernet port is not connected.
Turns on when WPS connection is established, and goes off about

On/Off
5 minutes later.
(WPS)
A wireless device is trying to connect to the network via WPS. This
Flashing
process may take up to 2 minutes.
1. 2. 2. The Back Panel
Wi-Fi/WPS
The router’s ports (view from left to right) are located on the rear panel.
Item Description
Press this button, and immediately press the WPS button on your device. The
WPS LED of the router should change from flashing to solid on, indicating
Wi-Fi/WPS successful WPS connection.
Press and hold this button for more than 2 seconds to turn on or off the
wireless function of your router.
4
Item Description
For connecting the router to the Ethernet network devices, such as PCs,
Ethernet Ports (1/2/3/4)
smart TVs and game consoles.
Internet Port For connecting to the DSL/Cable modem, or an Ethernet.
Power On/Off Button Press this button to power on or off the router.
Power Port For connecting the router to power socket via the provided power adapter.
Press and hold this button until the Power LED blinks to reset the router to its
Reset Button
factory default settings.
Used for wireless operation and data transmit. Upright them for the best Wi-
Antennas
Fi performance.
5
Chapter 2
Connect the Hardware
This chapter contains the following sections:

• Position Your Router
• Connect Your Router
2. 1. Position Your Router
• The product should not be located in a place where it will be exposed to moisture or
excessive heat.
• Place the router in a location where it can be connected to multiple devices as well as
to a power source.
• Make sure the cables and power cord are safely placed out of the way so they do not
create a tripping hazard.
• The router can be placed on a shelf or desktop.
• Keep the router away from devices with strong electromagnetic reference, such as
Bluetooth devices, cordless phones and microwaves.
2. 2. Connect Your Router

Follow the steps below to connect your router.
If your Internet connection is through an Ethernet cable directly from the wall instead
of through a DSL / Cable / Satellite modem, connect the Ethernet cable to the router’s
Internet port, and then follow Step 4 and 5 to complete the hardware connection.
Power adapter
Router
1
Internet
Power adapter Modem
1. Turn off the modem, and remove the backup battery if it has one.
2. Connect the modem to your router’s Internet port with an Ethernet cable.
7
3. Turn on the modem, and then wait about 2 minutes for it to restart.
4. Connect the power adapter to the router and turn on the router.
5. Verify that the following LEDs are on and solid to confirm the hardware is connected
correctly.
Power Wi-Fi Internet

On On On
Note:
If the Wi-Fi LED is off, press and hold the Wi-Fi/WPS button on the rear panel for more than 2 seconds to turn it on.
6. Connect your computer to the router.

• Method 1: Wired
Turn off the Wi-Fi on your computer and connect the devices as shown below.
Ethernet cable
Wi-Fi/WPS
• Method 2: Wirelessly
1 ) Find the SSID (Network Name) and Wireless Password printed on the label at
the bottom of the router.
2 ) Click the network icon of your computer or go to Wi-Fi Settings of your smart
device, and then select the SSID to join the network.
Computer Smart Device

< Settings Wi-Fi
Connections are available
Wireless Network Connection Wi-Fi

OR CHOOSE A NETWORK...
TP-LINK_XXXX
Connect automatically Connect TP-LINK_XXXX

Other...
• Method 3: Use the WPS button

Wireless devices that support WPS, including Android phones, tablets, most USB
network cards, can be connected to your router through this method.
Note:
• WPS is not supported by iOS devices.
8
• The WPS function cannot be configured if the wireless function of the router is disabled. Also, the WPS
function will be disabled if your wireless encryption is WEP. Please make sure the wireless function is
enabled and is configured with the appropriate encryption before configuring the WPS.
1 ) Tab the WPS icon on the device’s screen. Here we take the Android phone for
instance.
2 ) Within two minutes, press the WPS button on your router.
close to
Wi-Fi/WPS
9
Chapter 3
Log in to Your Router

With a web-based utility, it is easy to configure and manage the router. The web-based
utility can be used on any Windows, Macintosh or UNIX OS with a Web browser, such as
Microsoft Internet Explorer, Mozilla Firefox or Apple Safari.
Follow the steps below to log in to your router.
1. Set up the TCP/IP Protocol in Obtain an IP address automatically mode on your
computer.
2. Visit http://tplinkwifi.net, and log in with the username and password you set for the
router. The default one is admin for both username and password.
Note:
If the login window does not appear, please refer to the FAQ Section.
11
Chapter 4
Set Up Internet Connection
This chapter introduces how to connect your router to the Internet. The router is
equipped with a web-based Quick Setup wizard. It has necessary ISP information built
in, automates many of the steps and verifies that those steps have been successfully
completed. Furthermore, you can also set up an IPv6 connection if your ISP provides
IPv6 service.
• Use Quick Setup Wizard
• Manually Set up Your Internet Connection
• Set Up an IPv6 Internet Connection
4. 1. Use Quick Setup Wizard
The Quick Setup Wizard will guide you through the process to set up your router.
Tips:
If you need the IPv6 Internet connection, please refer to the section of Set Up an IPv6 Internet Connection.
Follow the steps below to set up your router.

router.
2. Click Quick Setup on the top of the page. Then follow the step-by-step instructions
to connect your router to the Internet.
Note:
During the quick setup process:
• If you are not sure of the Internet Connection Type, please click Auto Detect or contact your ISP for
Internet connection information.
• If you have changed the preset wireless network name (SSID) and wireless password, all your wireless
devices must use the new SSID and password to connect to the router.
4. 2. Manually Set up Your Internet Connection

In this part, you can check your current Internet connection settings. You can also
modify the settings according to the service information provided by your ISP.
Follow the steps below to check or modify your Internet connection settings.
router.
2. Go to Basic > Internet.
3. Select your Internet connection type from the drop-down list.
Note:
If you are unsure of what your connection type is, click Auto Detect. Since different connection types need different
cables and connection information, you can also refer to the demonstrations in Step 4 to determine your connection
type.
4. Follow the instructions on the page to continue the configuration. Parameters on the
figures are just used for demonstration.
1 ) If you choose Dynamic IP, you need to select whether to clone the MAC address.
Dynamic IP users are usually equipped with a cable TV or fiber cable.
13
2 ) If you choose Static IP, enter the information provided by your ISP in the
corresponding fields.
3 ) If you choose PPPoE, enter the username and password provided by your ISP.
PPPoE users usually have DSL cable modems.
14
4 ) If you choose L2TP, enter the username and password and choose the
Secondary Connection provided by your ISP. Different parameters are needed
according to the Secondary Connection you have chosen.
5 ) If you choose PPTP, enter the username and password, and choose the
Secondary Connection provided by your ISP. Different parameters are needed
according to the Secondary Connection you have chosen.
15
5. Click Save.
Note:
It may take 1-2 minutes to make the settings valid.
6. After the connection succeeds, the screen will display as follows. Here we take PPPoE
as an example.
16
Tips:
• If your Internet connection type is BigPond Cable, please go to Advanced > Network > Internet to set
your router.
• If you use Dynamic IP and PPPoE and you are provided with any other parameters that are not required
on the page, please go to Advanced > Network > Internet to complete the configuration.
• If you still cannot access the Internet, refer to the FAQ for further instructions.
4. 3. Set Up an IPv6 Internet Connection

Your ISP provides information about one of the following IPv6 Internet connection types:
PPPoE, Dynamic IP(SLAAC/DHCPv6), Static IP, 6to4 tunnel, Pass-Through (Bridge).
router.
2. Go to Advanced > IPv6.
3. Enable IPv6 and select the Internet connection type provided by your ISP.
Tips:
If you do not know what your Internet connection type is, contact your ISP or judge according to the already known
information provided by your ISP.
4. Fill in information as required by different connection types. Red blanks must be filled
in.
1 ) Static IP: Fill in blanks and click Save.
2 ) Dynamic IP(SLAAC/DHCPv6): Click Advanced to input further information if

your ISP requires. Click Save and then click Renew.
17
3 ) PPPoE: By default, the router uses the IPv4 account to connect to the IPv6
server. Click Advanced to input further information if your ISP requires. Click
Save and then click Connect.
Note:
If your ISP provides two separate accounts for the IPv4 and IPv6 connections, please uncheck the box for Use
the same session with IPv4 connection and manually enter the username and password for the IPv6 connection.
4 ) 6to4 Tunnel: An IPv4 Internet connection type is a prerequisite for this

connection type (Manually Set up Your Internet Connection). Click Advanced to
input further information if your ISP requires. Click Save and then click Connect.
18
5 ) Pass-Through (Bridge): Click Save and skip to step 6.
5. Configure LAN ports. Windows users are recommended to choose from the first two
types. Fill in Address Prefix provided by your ISP, and click Save.
Tips:
Find Help on the management interface to know more about items.
6. Click Status to check whether you have successfully set up an IPv6 connection. The
following figure is an example of a successful PPPoE configuration.
19
Tips:
Visit the FAQ if there is no Internet connection.
20
Chapter 5
Guest Network
This function allows you to provide Wi-Fi access for guests without disclosing your
main network. When you have guests in your house, apartment, or workplace, you can
create a guest network for them. In addition, you can customize guest network options
to ensure network security and privacy.
• Create a Network for Guests
• Customize Guest Network Options
5. 1. Create a Network for Guests
router.
2. Go to Advanced > Guest Network. Locate the Wireless section.
3. Create a guest network as needed.
1 ) Enable Guest network.
2 ) Customize the SSID. Do not select Hide SSID unless you want your guests to
manually input the SSID for guest network access.
3 ) Select the Security type.
• If No security is selected, no password is needed to access your guest
network.
• If WAP/WPA2-Personal is selected, keep the default Version and Encryption
values, and customize your own password.
4. Click Save. Now your guests can access your guest network using the SSID and
password you set!
Tips:
To view guest network information, go to Advanced > Status and locate the Guest Network section.
5. 2. Customize Guest Network Options

router.
2. Go to Advanced > Guest Network. Locate the Settings section.
3. Customize guest network options according to your needs.
22
• Allow guests to see each other
Check this box if you want to allow the wireless clients on your guest network to
communicate with each other via methods such as network neighbors and Ping.
• Allow guests to access my local network
Check this box if you want to allow the wireless clients on your guest network
to communicate with the devices connected to your router’s LAN ports or main
network via methods such as network neighbors and Ping.
4. Click Save. Now you can ensure network security and privacy!
Tips:
To view guest network information, go to Advanced > Status and locate the Guest Network section.
23
Chapter 6
Parental Controls
This function allows you to block inappropriate, explicit and malicious websites, and
control access to specified websites at specified time.
I want to: Control the times of day my children or other home network
users are allowed to access the Internet and even types of
websites they can visit.
For example, I want to allow my children’s devices (e.g. a computer
or a tablet) to access only www.tp-link.com and Wikipedia.org
from 18:00 (6PM) to 22:00 (10PM) at the weekend and not other
times.
How can I 1. Visit http://tplinkwifi.net, and log in with the username and
do that? password you set for the router.
2. Go to Advanced > Parental Controls and enable Parental
Controls.
3. Click Add. And then Click View Existing Devices, and select
the access device. Or, input the Device Name and MAC
Address manually.
4. Click the icon to set the Internet Access Time. Drag the
cursor over the appropriate cell(s) and click OK.
25
5. Enter a Description for the entry, check the box for Enable
This Entry, and then click OK.
6. Select Whitelist as the restriction policy.
Tips:
• With Blacklist selected, the controlled devices cannot access any websites
containing the specified keywords during the Internet Access Time period.
• With Whitelist selected, the controlled devices can only access websites
containing the specified keywords during the Internet Access Time period.
7. Click . Enter a website and click Save.

You can add up to 32 keywords for either Blacklist or Whitelist.
Below are some sample entries to allow access.
• For Whitelist: Enter a web address (e.g. wikipedia.org) to allow access
only to its related websites. If you wish to block all Internet browsing
access, do not add any keyword to the Whitelist.
• For Blacklist: Specify a web address (e.g. wikipedia.org), a web address
keyword (e.g. wikipedia) or a domain suffix (eg. .edu or .org) to block
access only to the websites containing that keyword or suffix.
26
Done! Now you can control your children’s Internet access as needed.
27
Chapter 7
QoS
This chapter introduces how to create a QoS (Quality of Service) rule to specify
prioritization of traffic and minimize the impact caused when the connection is under
heavy load.
QoS (Quality of Service) is designed to ensure the efficient operation of the network
when come across network overload or congestion.
I want to: Specify priority levels for some devices or applications.

For example, I have several devices that are connected to my
wireless network. I would like to set an intermediate speed on
the Internet for my phone.
How can I 1. Enable QoS and set bandwidth allocation.

do that? 1 ) Visit http://tplinkwifi.net, and log in with the username
and password you set for the router.
2 ) Go to Advanced > QoS.
3 ) Select Enable QoS.
4 ) Input the maximum upload and download bandwidth
provided by your Internet service provider. 1Mbps equal
s to 1000Kbps.
5 ) Click Advanced and drag the scroll bar to set the
bandwidth priority percentage.
6 ) Click Save.
2. Add a middle priority QoS rule for the phone.

1 ) Click Add in Qos Rule List section.
29
2 ) Click View Existing Devices.
3 ) Choose the respective device from the list.
4 ) Click OK.
3. Refer to the steps above to apply other QoS rules if any.

Note:
If you want to delete a QoS rule, click to remove the responding rule from
the list.
30
Done! Now QoS is implemented to prioritize Internet traffic.
31
Chapter 8
Network Security
This chapter guides you on how to protect your home network from cyber attacks
and unauthorized users by implementing these three network security functions. You
can protect your home network against DoS (Denial of Service) attacks from flooding
your network with server requests using DoS Protection, block or allow specific client
devices to access your network using Access Control, or you can prevent ARP spoofing
and ARP attacks using IP & MAC Binding.
• Protect the Network from Cyber Attacks
• Access Control
• IP & MAC Binding
8. 1. Protect the Network from Cyber Attacks
The SPI (Stateful Packet Inspection) Firewall and DoS (Denial of Service) Protection
protect the router from cyber attacks.
The SPI Firewall can prevent cyber attacks and validate the traffic that is passing
through the router based on the protocol. This function is enabled by default, and it’s
recommended to keep the default settings.
DoS Protection can protect your home network against DoS attacks from flooding your
network with server requests. Follow the steps below to configure DoS Protection.
router.
2. Go to Advanced > Security > Settings.
3. Enable DoS Protection.

4. Set the level (Off, Low, Middle or High) of protection for ICMP-FLOOD Attack
Filtering, UDP-FlOOD Attack Filtering and TCP-SYN-FLOOD Attack Filtering.
• ICMP-FLOOD Attack Filtering - Enable to prevent the ICMP (Internet Control
Message Protocol) flood attack.
• UDP-FlOOD Attack Filtering - Enable to prevent the UDP (User Datagram
Protocol) flood attack.
• TCP-SYN-FLOOD Attack Filtering - Enable to prevent the TCP-SYN (Transmission
Control Protocol-Synchronize) flood attack.
Tips:
The level of protection is based on the number of traffic packets. The protection will be triggered immediately
when the number of packets exceeds the preset threshold value (the value can be set on Advanced > System
Tools > System Parameters > DoS Protection Level Settings), and the vicious host will be displayed in the Blocked
DoS Host List.
33
5. If you want to ignore the ping packets from the WAN port, select Ignore Ping Packet
From WAN Port; if you want to ignore the ping packets form the LAN port, select
Ignore Ping Packet From LAN Port.
6. Click Save.
8. 2. Access Control
Access Control is used to block or allow specific client devices to access your network
(via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed
devices (Whitelist).
I want to: Block or allow specific client devices to access my network (via
wired or wireless).
2. Go to Advanced > Security > Access Control.
3. Enable Access Control.
4. Select the access mode to either block (recommended) or

allow the device(s) in the list.
To block specific device(s)
1 ) Select Blacklist and click Save.
2 ) Select the device(s) to be blocked in the Online Devices

table by ticking the box.
34
3 ) Click Block above the Online Devices table. The selected
devices will be added to Devices in Blacklist automatically.
To allow specific device(s)

1 ) Select Whitelist and click Save.
2 ) Click Add in the Devices in Whitelist section. Enter the

Device Name and MAC Address (You can copy and paste
the information from the Online Devices list if the device
is connected to your network).
3 ) Click OK.
Done! Now you can block or allow specific client devices to access your
network (via wired or wireless) using the Blacklist or Whitelist.
8. 3. IP & MAC Binding

IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind
network device’s IP address to its MAC address. This will prevent ARP Spoofing and
other ARP attacks by denying network access to an device with matching IP address in
the Binding list, but unrecognized MAC address.
35
I want to: Prevent ARP spoofing and ARP attacks.
2. Go to Advanced > Security > IP & MAC Binding.
3. Enable ARP Binding.
4. Bind your device(s) according to your need.

To bind the connected device(s):
Click to add the corresponding device to the Binding List.
To bind the unconnected device
1 ) Click Add in the Binding List section.
2 ) Enter the MAC address and IP address that you want to

bind. Enter a Description for this binding entry.
3 ) Check the box for Enable This Entry and click OK.
Done! Now you don’t need to worry about ARP spoofing and ARP
attacks!
36
Chapter 9
NAT Forwarding
The router’s NAT (Network Address Translation) feature makes devices on the LAN use
the same public IP address to communicate with devices on the Internet, which protects
the local network by hiding IP addresses of the devices. However, it also brings about
the problem that an external host cannot initiatively communicate with a specified
device on the local network.
With the forwarding feature the router can penetrate the isolation of NAT and allows
devices on the Internet to initiatively communicate with devices on the local network,
thus realizing some special functions.
The TP-LINK router supports four forwarding rules. If two or more rules are set, the
priority of implementation from high to low is Virtual Servers, Port Triggering, UPNP and
DMZ.
• Application Layer Gateway(ALG)
• Share Local Resources on the Internet by Virtual Servers
• Open Ports Dynamically by Port Triggering
• Make Applications Free from Port Restriction by DMZ
• Make Xbox Online Games Run Smoothly by UPnP
9. 1. Application Layer Gateway(ALG)
Application Layer Gateway (ALG) allows customized Network Address Translation(NAT)
traversal filters to be plugged into the gate way to support address and port translation
for certain application layer “control/data“ protocols: FTP, TFTP, H323 and more.
router.
2. Go to Advanced > NAT Forwarding > ALG. All types of ALG functions are enabled by
default. You can Enable or disable them as needed.
9. 2. Share Local Resources on the Internet by Virtual

Servers
When you build up a server on the local network and want to share it on the Internet,
Virtual Servers can realize the service and provide it to Internet users. At the same time
Virtual Servers can keep the local network safe as other services are still invisible from
the Internet.
Virtual Servers can be used for setting up public services on your local network, such as
HTTP, FTP, DNS, POP3/SMTP and Telnet. Different services use different service ports.
Port 80 is used in HTTP service, port 21 in FTP service, port 25 in SMTP service and port
110 in POP3 service. Please verify the service port number before the configuration.
I want to: Share my personal website I’ve built in local network with my
friends through the Internet.
For example, the personal website has been built on my home
PC (192.168.0.100). I hope that my friends on the Internet can
38
visit my website in some way. The PC is connected to the router
with the WAN IP address 218.18.232.154.
Personal Website Router
INTERNET
Home LAN WAN: 218.18.232.154
How can I 1. Assign a static IP address to your PC, for example

do that? 192.168.0.100.
2. Visit http://tplinkwifi.net, and log in with the username and
password you set for the router.
3. Go to Advanced > NAT Forwarding > Virtual Servers.
4. Click Add. Click View Existing Services and select HTTP. The
External Port, Internal Port and Protocol will be automatically
filled in. Enter the PC’s IP address 192.168.0.100 in the
Internal IP field.
5. Click OK.
Tips:
• It is recommended to keep the default settings of Internal Port and Protocol
if you are not clear about which port and protocol to use.
• If the service you want to use is not in the Service Type, you can enter the
corresponding parameters manually. You should verify the port number
that the service needs.
• You can add multiple virtual server rules if you want to provide several
services in a router. Please note that the External Port should not be
overlapped.
Done! Users on the Internet can enter http:// WAN IP (in this example:
39
http:// 218.18.232.154) to visit your personal website.
Tips:
• The WAN IP should be a public IP address. For the WAN IP is
assigned dynamically by the ISP, it is recommended to apply
and register a domain name for the WAN referring to Set Up a
Dynamic DNS Service Account. Then users on the Internet can use
http:// domain name to visit the website.
• If you have changed the default External Port, you should use
http:// WAN IP: External Port or http:// domain name: External Port to visit
the website.
9. 3. Open Ports Dynamically by Port Triggering

Port Triggering can specify a triggering port and its corresponding external ports.
When a host on the local network initiates a connection to the triggering port, all the
external ports will be opened for subsequent connections. The router can record the
IP address of the host. When the data from the Internet return to the external ports, the
router can forward them to the corresponding host. Port Triggering is mainly applied to
online games, VoIPs, video players and common applications including MSN Gaming
Zone, Dialpad and Quick Time 4 players, etc.
Follow the steps below to configure the Port Triggering rules:
router.
2. Go to Advanced > NAT Forwarding > Port Triggering and click Add.
3. Click View Existing Applications, and select the desired application. The External
Port, Internal Port and Protocol will be automatically filled in. The following picture
takes application MSN Gaming Zone as an example.
4. Click OK.
40
Tips:
• You can add multiple port triggering rules according to your network need.
• The triggering ports can not be overlapped.
• If the application you need is not listed in the Existing Applications list, please enter the parameters
manually. You should verify the external ports the application uses first and enter them into External Port
field according to the format the page displays.
9. 4. Make Applications Free from Port Restriction

by DMZ
When a PC is set to be a DMZ (Demilitarized Zone) host on the local network, it is totally
exposed to the Internet, which can realize the unlimited bidirectional communication
between internal hosts and external hosts. The DMZ host becomes a virtual server with
all ports opened. When you are not clear about which ports to open in some special
applications, such as IP camera and database software, you can set the PC to be a DMZ
host.
41
Note:
When DMZ is enabled, the DMZ host is totally exposed to the Internet, which may bring some potential safety hazards.
If DMZ is not in use, please disable it in time.
I want to: Make the home PC join the Internet online game without port
restriction.
For example, due to some port restriction, when playing the
online games, you can login normally but cannot join a team with
other players. To solve this problem, set your PC as a DMZ host
with all ports open.
How can I 1. Assign a static IP address to your PC, for example

do that? 192.168.0.100.
password you set for the router.
3. Go to Advanced > NAT Forwarding > DMZ and select Enable
DMZ.
4. Enter the IP address 192.168.0.100 in the DMZ Host IP
Address filed.
5. Click Save.
Done! The configuration is completed. You’ve set your PC to a DMZ
host and now you can make a team to game with other players.
9. 5. Make Xbox Online Games Run Smoothly by

UPnP
The UPnP (Universal Plug and Play) protocol allows applications or host devices
to automatically find the front-end NAT device and send request to it to open the
corresponding ports. With UPnP enabled, the applications or host devices on the
local network and the Internet can freely communicate with each other thus realizing
the seamless connection of the network. You may need to enable the UPnP if you
want to use applications for multiplayer gaming, peer-to-peer connections, real-time
communication (such as VoIP or telephone conference) or remote assistance and more.
42
Tips:
• UPnP is enabled by default in this router.
• Only the application supporting UPnP protocol can use this feature.
• UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc.
Some of operating system need to install the UPnP components).
For example, when you connect your Xbox to the router which has connected to
the Internet to play online games, UPnP will send request to the router to open the
corresponding ports allowing the following data penetrating the NAT to transmit.
Therefore, you can play Xbox online games without a hitch.
LAN WAN
INTERNET
XBOX Router
If necessary, you can follow the steps to change the status of UPnP.
router.
2. Go to Advanced > NAT Forwarding > UPnP and toggle on or off according to your
needs.
43
Chapter 10
Customize Your Network

Settings
This chapter guides you on how to configure advanced network features.
• Change the LAN Settings
• Configure to Support IPTV Service
• Specify DHCP Server Settings
• Set Up a Dynamic DNS Service Account
• Create Static Routes
• Specify Wireless Settings
• Use WPS for Wireless Connection
10. 1. Change the LAN Settings
The router is preset with a default LAN IP 192.168.0.1, which you can use to log in to
its web management page. The LAN IP address together with the Subnet Mask also
defines the subnet that the connected devices are on. If the IP address conflicts with
another device on your local network or your network requires a specific IP subnet, you
can change it.
router.
2. Go to Advanced > Network > LAN.
3. Type in a new IP Address appropriate to your needs. And leave the Subnet Mask as
the default settings.
4. Click Save.
Note:
If you have set the Virtual Server, DMZ or DHCP address reservation, and the new LAN IP address is not in the same
subnet with the old one, then you should reconfigure these features.
10. 2. Configure to Support IPTV Service
I want to: Configure IPTV setup to enable Internet/IPTV/Phone service

provided by my Internet Service Provider (ISP).
How can 1. Visit http://tplinkwifi.net, and log in with the username and
I do that? password you set for the router.
2. Go to Advanced > Network > IPTV.
3. If your ISP provides the networking service based on IGMP
technology, e.g., British Telecom(BT) and Talk Talk in UK:
1 ) Check the box for IGMP Proxy and select the IGMP
Version, either V2 or V3, as required by your ISP.
45
2 ) Click Save.
3 ) After configuring IGMP proxy, IPTV can work behind your
router now. You can connect your set-top box to any of
the router’s Ethernet port.
If IGMP is not the technology your ISP applies to provide
IPTV service:
1 ) Tick Enable IPTV.
2 ) Select the appropriate Mode according to your ISP.
• Select Bridge if your ISP is not listed and no other
parameters are required.
• Select Custom if your ISP is not listed but provides
necessary parameters.
3 ) After you have selected a mode, the necessary

parameters, including the LAN port for IPTV connection,
are predetermined. If not, select the LAN type to
determine which port is used to support IPTV service.
4 ) Click Save.
5 ) Connect the set-top box to the corresponding LAN port
which is predetermined or you have specified in Step 3.
Done! Your IPTV setup is done now! You may need to configure your
set-top box before enjoying your TV.
Tips:
Qos and IPTV cannot be enabled at the same time.
46
10. 3. Specify DHCP Server Settings
By default, the DHCP (Dynamic Host Configuration Protocol) Server is enabled and
the router acts as a DHCP server; it dynamically assigns TCP/IP parameters to client
devices from the IP Address Pool. You can change the settings of the DHCP Server if
necessary, and you can reserve LAN IP addresses for specified client devices.
router.
2. Go to Advanced > Network > DHCP Server.
¾¾ To specify the IP address that the router assigns:
1. Check the box for Enable DHCP Server.

2. Enter the starting and ending IP addresses in the IP Address Pool.
3. Enter other parameters if the ISP offers. The Default Gateway is automatically filled in
and is the same as the LAN IP address of the router.
4. Click Save.
¾¾ To reserve an IP address for a specified client device:

1. Click Add in the Address Reservation section.
47
2. Click View Exsiting Devices or enter the MAC address of the client device.
3. Enter the IP address to reserve for the client device.
4. Enter the Description for this entry.
5. Check the box for Enable This Entry and click OK.
10. 4. Set Up a Dynamic DNS Service Account

Most ISPs assign a dynamic IP address to the router and you can use this IP address to
access your router remotely. However, the IP address can change any time and you don’t
know when it changes. In this case, you might apply the DDNS (Dynamic Domain Name
Server) feature on the router to allow you and your friends to access your router and
local servers (FTP, HTTP, etc.) using domain name without checking and remembering
the IP address.
Note:
DDNS does not work if the ISP assigns a private WAN IP address (such as 192.168.1.x) to the router.
To set up DDNS, please follow the instructions below:

router.
2. Go to Advanced > Network > Dynamic DNS.
3. Select the DDNS Service Provider (NO-IP or DynDNS). If you don’t have a DDNS
account, select a service provider and click Go to register.
48
4. Enter the username, password and domain name of the account.
5. Click Login and Save.
Tips:
If you want to use a new DDNS account, please logout first, and then login with the new account.
10. 5. Create Static Routes

Static routing is a form of routing that is configured manually by a network administrator
or a user by adding entries into a routing table. The manually-configured routing
information guides the router in forwarding data packets to the specific destination.
I want to: Visit multiple networks and servers at the same time.
For example, in a small office, my PC can surf the Internet through
Router A, but I also want to visit my company’s network. Now I
have a switch and Router B. I connect the devices as shown in
the following figure so that the physical connection between my
PC and my company’s server is established. To surf the Internet
and visit my company’s network at the same time, I need to
configure the static routing.
49
Router A Router B Company’s server
WAN: 172.30.30.100
LAN: 192.168.0.1 LAN: 192.168.0.2

172.30.30.1
Switch
PC
192.168.0.100
How can 1. Change the routers’ LAN IP addresses to two different IP

I do that? addresses on the same subnet. Disable Router B’s DHCP
function.
password you set for Router A.
3. Go to Network > Advanced Routing.
4. Click Add and finish the settings according to the following
explanations:
Network Destination: The destination IP address that you want

to assign to a static route. This IP address cannot be on the same
subnet with the WAN IP or LAN IP of Router A. In the example,
the IP address of the company network is the destination IP
address, so here enter 172.30.30.1.
Subnet Mask: Determines the destination network with the
50
destination IP address. If the destination is a single IP address,
enter 255.255.255.255; otherwise, enter the subnet mask of
the corresponding network IP. In the example, the destination
network is a single IP, so here enter 255.255.255.255.
Default Gateway: The IP address of the gateway device to which
the data packets will be sent. This IP address must be on the
same subnet with the router’s IP which sends out data. In the
example, the data packets will be sent to the LAN port of Router
B and then to the Server, so the default gateway should be
192.168.0.2.
Interface: Determined by the port (WAN/LAN) that sends out
data packets. In the example, the data are sent to the gateway
through the LAN port of Router A, so LAN should be selected.
Description: Enter a description for this static routing entry.
5. Click OK.
6. Check the System Routing Table below. If you can find the
entry you’ve set, the static routing is set successfully.
Done! Open a web browser on your PC. Enter the company server’s IP
address to visit the company network.
10. 6. Specify Wireless Settings

The router’s wireless network name (SSID) and password, and security option are preset
in the factory. The preset SSID and password can be found on the label of the router.
You can customize the wireless settings according to your needs.
Visit http://tplinkwifi.net, and log in with the username and password you set for the
router.
¾¾ To enable or disable the wireless function:

1. Go to Basic > Wireless.
2. The wireless radio is enabled by default. If you want to disable the wireless function of
the router, just uncheck the box for Enable Wireless Radio. In this case, all the wireless
settings will be invalid.
51
¾¾ To change the wireless network name (SSID) and wireless password:
2. Create a new SSID in Network Name (SSID) and customize the password for the
network in Password. The value is case-sensitive.
Note:
If you change the wireless settings with a wireless device, you will be disconnected when the settings are effective.
Please write down the new SSID and password for future use.
¾¾ To hide SSID:
2. Select Hide SSID, and your SSID won’t display when you scan for local wireless
networks on your wireless device and you need to manually join the network.
¾¾ To change the security option:

1. Go to Advanced > Wireless > Wireless Settings.
2. Select an option from the Security drop-down list. We recommend you don’t change
the default settings unless necessary. If you select other options, configure the
related parameters according to the help page.
In addition
• Mode - Select a transmission mode according to your wireless client devices. It is
recommended to just leave it as default.
• Channel Width - Select a channel width (bandwidth) for the wireless network.
52
• Channel - Select an operating channel for the wireless network. It is recommended
to leave the channel to Auto, if you are not experiencing the intermittent wireless
connection issue.
• Transmit Power - Select either High, Middle or Low to specify the data transmit power.
The default and recommended setting is High.
10. 7. Use WPS for Wireless Connection

Wi-Fi Protected Setup (WPS) provides an easier approach to set up a security-protected
Wi-Fi connection.
router.
2. Go to Advanced > Wireless > WPS .
10. 7. 1. Set the Router’s PIN

Router’s PIN is enabled by default to allow wireless devices to connect to the router
using the PIN. You can use the default one or generate a new one.
Note:
• If you want to enable/disable the WPS feature, go to System Tools > System Parameters > WPS, check
or uncheck the box for Enable WPS.
• PIN (Personal Identification Number) is an eight-character identification number preset to each router.
WPS supported devices can connect to your router with the PIN. The default PIN is printed on the label
of the router.
10. 7. 2. Use the WPS Wizard for Wi-Fi Connections

1. Select a setup method:
• Push Button(Recommended): Click Connect on the screen. Within two minutes,
press the WPS button on the client device.
• PIN: Enter the client’s PIN, and click Connect.
53
2. Success will appear on the above screen and the WPS LED on the router will keep on
for five minutes if the client has been successfully added to the network.
54
Chapter 11
Manage the Router
This chapter shows you the configuration for managing and maintaining your router.
It includes the following sections:
• Set Up System Time
• Test the Network Connectivity
• Upgrade the Firmware
• Backup and Restore Configuration Settings
• Change the Administrator Account
• Password Recovery
• Local Management
• Remote Management
• System Log
• Monitor the Internet Traffic Statistics
• Control LEDs
11. 1. Set Up System Time
System time is the time displayed while the router is running. The system time you
configure here will be used for other time-based functions like Parental Controls. You
can choose the way to obtain the system time as needed.
router.
2. Go to Advanced > System Tools > Time Settings.
¾¾ To get time from the Internet:

1. In the Set Time field, select Get automatically from the Internet.
2. Select your local Time Zone from the drop-down list.

3. In the NTP Server I fileld, enter the IP address or domain name of your desired NTP
Server.
4. (Optional) In the NTP Server II fileld, enter the IP address or domain name of the
second NTP Server.
5. Click Obtain to get the current Internet time and click Save.
¾¾ To manually set the date and time:

1. In the Set Time field, select Manually.
56
2. Set the current Date (In MM/DD/YYYY format).
3. Set the current Time (In HH/MM/SS format).
4. Click Save.
¾¾ To set up Daylight Saving Time:

1. Select Enable Daylight Saving Time.
2. Select the correct Start date and time when daylight saving time starts at your local
time zone.
3. Select the correct End date and time when daylight saving time ends at your local
time zone.
4. Click Save.
11. 2. Test the Network Connectivity

Diagnostics is used to test the connectivity between the router and the host or other
network devices.
router.
2. Go to Advanced > System Tools > Diagnostics.
57
3. Enter the information with the help of page tips:
1 ) Choose Ping or Traceroute as the diagnostic tool to test the connectivity;
• Ping is used to test the connectivity between the router and the tested host,
and measure the round-trip time.
• Traceroute is used to display the route (path) your router has passed to reach
the tested host, and measure transit delays of packets across an Internet
Protocol network.
2 ) Enter the IP Address or Domain Name of the tested host.
4. Click Start to begin the diagnostics.
Tips:
Click Advanced, you can modify the ping count, ping packet size or the Traceroute Max TTL. It’s recommended to keep
the default value.
The figure below indicates the proper connection between the router and the Yahoo
server (www.Yahoo.com) tested through Ping.
The figure below indicates the proper connection between the router and the Yahoo
server (www.Yahoo.com) tested through Traceroute.
58
11. 3. Upgrade the Firmware
TP-LINK aims at providing better network experience for users.
We will inform you throught the web management page if there’s any update firmware
available for your router. Also, the latest firmware will be released at the TP-LINK official
website www.tp-link.com, and you can download it from the Support page for free.
Note:
• Make sure you remove all attached USB devices from the router before the firmware upgrade to prevent
data loss.
• Backup your router configuration before firmware upgrade.
• Do NOT turn off the router during the firmware upgrade.
11. 3. 1. Online Upgrade

1. Visit http://tplinkwifi.net, and log in with the username and password you’ve set for
the router.
2. When the latest firmware is available for your router, the update icon will display
in the top-right corner of the page. Click the icon to go to the Firmware Upgrade page.
Alternatively, you can go to Advanced > System Tools > Firmware Upgrade, and click
Check for upgrade to see whether the latest firmware is released.
3. Focus on the Online Upgrade section, and click Upgrade.
4. Wait a few minutes for the upgrade and reboot to complete.

Tips:
If there’s a new and important firmware update for your router, you will see the notification (similar as shown below) on
your computer as long as a web browser is opened. Click Upgrade now, and log into the web management page with the
username and password you set for the router. You will see the Firmware Upgrade page.
59
11. 3. 2. Manual Upgrade
1. Download the latest firmware file for the router from www.tp-link.com.
router.
3. Go to Advanced > System Tools > Firmware Upgrade.
4. Focus on the Device Information section. Make sure the downloaded firmware file is
matched with the Hardware Version.
5. Focus on the Manual Upgrade section. Click Browse to locate the downloaded new
firmware file, and click Upgrade.
6. Wait a few minutes for the upgrade and reboot to complete.
11. 3. 3. Restore Interrupted Upgrade after Power Failure

If your router cannot start up after an upgrade interruption due to power failure, follow
the steps below to restore the interrupted upgrade. Otherwise, your router cannot work
again.
1. Make sure you have the latest firmware file in your computer. If not, try another way
to connect your computer to the Internet and download the latest firmware file from
www.tp-link.com.
2. Connect your computer to the router with an Ethernet cable.
3. Visit 192.168.0.1 and you will see the following upgrade page.
60
4. Click Browse and select the downloaded firmware file.
5. Click Upgrade and wait for a few minutes until the router completes the upgrading
and restarts.
11. 4. Backup and Restore Configuration Settings

The configuration settings are stored as a configuration file in the router. You can
backup the configuration file to your computer for future use and restore the router to
a previous settings from the backup file when needed. Moreover, if necessary you can
erase the current settings and reset the router to the default factory settings.
router.
2. Go to Advanced > System Tools > Backup & Restore.
¾¾ To backup configuration settings:

Click Backup to save a copy of the current settings to your local computer. A ‘.bin’ file of
the current settings will be stored to your computer.
¾¾ To restore configuration settings:

1. Click Browse to locate the backup configuration file stored on your computer, and
click Restore.
2. Wait a few minutes for the restoring and rebooting.

Note: During the restoring process, do not turn off or reset the router.
¾¾ To reset the router to factory default settings:

1. Click Factory Restore to reset the router.
61
2. Wait a few minutes for the resetting and rebooting.
Note:
• During the resetting process, do not turn off or reset the router.
• We strongly recommend you backup the current configuration settings before resetting the router.
11. 5. Change the Administrator Account

The account management feature allows you to change your login username and
password of the web management page.
router.
2. Go to Advanced > System Tools > Administration and focus on the Account
Management section.
3. Enter the old username and old password, then a new username and a new password
twice (both case-sensitive). Click Save.
4. Use the new username and password for the following logins.
11. 6. Password Recovery

This feature allows you to recover your default login username and password in case
you forget them.
router.
62
2. Go to Advanced > System Tools > Administration and focus on the Password
Recovery section.
3. Check the box for Enable Password Recovery.
4. Specify a mailbox (From) for sending the recovery letter and enter its SMTP Server
address. Specify a mailbox (To) for receiving the recovery letter. If the mailbox (From)
to send the recovery letter requires encryption, select Enable Authentication and
enter its username and password.
Tips:
• SMTP server is available for users in most webmail systems. For example, the SMTP server address of Gmail is
smtp.gmail.com. You can refer to their Help page to learn the SMTP server address.
• Generally, Enable Authentication should be selected if the login of the mailbox requires username and
password.
5. Click Save.
You can click Test Email to test whether the configuration is successful. To recover the
default login username and password, please refer to FAQ.
11. 7. Local Management

This feature allows you to limit the number of client devices on your LAN from accessing
the router by using the MAC address-based authentication.
router.
2. Go to Advanced > System Tools > Administration and complete the settings In Local
Management section according to your needs.
• Allow all LAN connected devices to manage the router:
Toggle on Access for All LAN Connected Devices.
63
• Allow specific devices to manage the router:
1 ) Toggle off Access for All LAN Connected Devices.
2 ) Click Add.
3 ) Click View Existing Devices and select the device to manage the router from
the Existing Devices list, or enter the MAC address of the device manually.
4 ) Specify a Description for this entry.
5 ) Check the box for Enable This Entry.
6 ) Click OK.
11. 8. Remote Management

This feature allows you to control remote devices’ authority to manage the router.
router.
2. Go to Advanced > System Tools > Administration and complete the settings in
Remote Management section according to your needs.
64
• Forbid all devices to manage the router remotely: Select Disable Remote Management
and click Save.
• Allow all devices to manage the router remotely:
1 ) Select Enable Remote Management for All Devices.
2 ) Enter Web Management Port (1024-65535 or 80).
3 ) Click Save.
Devices on the Internet can log in to http://Router’s WAN IP address:port number (such
as http://113.116.60.229:1024) to manage the router.
Tips:
• You can find the WAN IP address of the router on Basic > Network Maps > Internet.
• The router’s WAN IP is usually a dynamic IP. Please refer to Set Up a Dynamic DNS Service Account if you
want to log in to the router through a domain name.
• Allow specific devices to manage the router remotely:

1 ) Select Enable Remote Management for Specified Devices.
2 ) Enter Web Management Port (1024-65535 or 80).
3 ) In Remote Management IP address, enter the IP address of the remote device
to manage the router.
4 ) Click Save.
Devices using this WAN IP can manage the router by logging in to http://Router’s WAN
IP:port number (such as http://113.116.60.229:1024).
Tips:
The router’s WAN IP is usually a dynamic IP. Please refer to Set Up a Dynamic DNS Service Account if you want to log in
to the router through a domain name.
11. 9. System Log

When the router does not work properly, you can save the system log and send it to the
technical support for troubleshooting.
¾¾ To Save the System Log in Local:
65
router.
2. Go to Advanced > System Tools > System Log.
3. Choose the type and level of the system logs according to your need.
4. Click Save Log to save the system logs to local.
¾¾ To Send the System Log to a Mailbox at a Fixed Time:

For example, I want to check my router’s working status at a fixed time every day,
however, it’s too troublesome to log in to the web interface every time I want to go
checking. It would be great if the system logs could be sent to my mailbox at 8 a.m.
every day.
router.
2. Go to Advanced > System Tools > System Log.
3. Click Mail Settings.
4. Enter the information with the help of page tips:
66
1 ) From: Enter the email address used for sending the system log.
2 ) To: Enter the recipient’s email address, which can be the same as or different
from the sender’s email address.
3 ) SMTP Server: Enter the SMTP server address.
Tips: SMTP server is available for users in most webmail systems. For example, the SMTP server address of
Hotmail is smtp-mail.outlook.com. You can refer to their Help page to learn the SMTP server address.
4 ) Select Enable Authentication.

Tips: Generally, Enable Authentication should be selected if the login of the mailbox requires username and
password.
5 ) Username: Enter the email address used for sending the system log.
6 ) Password: Enter the password to login the sender’s email address.
7 ) Select Enable Auto Mail.
Tips: The router will send the system log to the designated email address if this option is enabled.
8 ) Set a fixed time. The recipient will receive the system log sent at this time every
day.
5. Click Save.
11. 10. Monitor the Internet Traffic Statistics

The Traffic Statistics page displays the network traffic of the LAN, WAN and WLAN sent
and received packets, allowing you to monitor the volume of Internet traffic statistics.
router.
2. Go to Advanced > System Tools > Traffic Statistics.
67
3. Toggle on Traffic Statistics, and then you can monitor the traffic statistics in Traffic
Statistics List section.
Click Refresh to update the statistic information on the page.

Click Reset All to reset all statistic values in the list to zero.
Click Delete All to delete all statistic information in the list.
Click to reset the statistic information of the specific device.
Click to delete the specific device item in the list.
11. 11. Control LEDs

The router‘s LEDs indicate router’s activities and status. You can turn on or turn off the
LEDs either from the web management page or by pressing the LED button.
¾¾ To turn on or off the LEDs:

• Press the LED button on the router (if available) about 2 seconds to turn on or off the
LEDs.
• Visit http://tplinkwifi.net, and log in with the username and password you set for the
router. Click the LED icon in the top right corner of the page.
¾¾ To turn off LEDs during Night Mode Period:

1 ) Visit http://tplinkwifi.net, and log in with the username and password you set for
the router.
2 ) Go to Advanced > System Tools > System Parameters.
3 ) In the LED Control section, check the box for Enable Night Mode.
4 ) Specify a time period in the Night Mode Period as needed, and the LEDs will be
off during this period.
5 ) Click Save.
68
69
FAQ
Q1. What can I do if I forgot my wireless password?
The default wireless password is printed on the label of the router. If the password has
been altered, please connect your computer to the router using an Ethernet cable and
follow the steps below:
1. Visit http://tplinkwifi.net.
2. Go to Basic > Wireless to retrieve or reset your wireless password.
Q2. What can I do if I forgot my login password of the web management

page?
The default username and password of the web management page are admin (in
lowercase). If your router supports Password Recovery and you have enabled it,
please follow the steps below to reset the password without resetting the router:
Note: Make sure the Internet access is available before using this method.
2. Click Forgot password > Send Code, and the verification code will be sent to the
mailbox you set.
3. Log into your mailbox to copy the verification code.
4. Paste the verification code on the window which pops up in Step 2.
5. Click Confirm (after that, the login username and password will be reset to its default
value : admin).
6. Use admin (in lowercase) as both username and password to login.
Tips: Please refer to Password Recovery to learn how to configure Password Recovery.
If you have altered the username and password but Password Recovery is disabled:
1. Reset the router to factory default settings: press and hold the Reset button for about
7 seconds and then release;
2. Visit http://tplinkwifi.net, and enter admin (in lowercase) as both username and
password to login.
Note: You’ll need to reconfigure the router to surf the Internet once the router is reset, and please mark down your new
password for future use.
Q3. What can I do if I cannot log in to the router’s web management page?
This can happen for a variety of reasons. Please try the methods below to login again.
• Make sure your computer is connected to the router correctly and the corresponding
LED indicator(s) light up.
70
• Make sure the IP address of your computer is configured as Obtain an IP address
automatically and Obtain DNS server address automatically.
• Make sure you enter the correct IP address to login: http://tplinkwifi.net.
• Check your computer’s settings:
1 ) Go to Start > Control Panel > Network and Internet, and click View network
status and tasks.
2 ) Click Internet Options on the bottom left.
3 ) Click Connections and select Never dial a connection.
4 ) Click LAN settings and deselect the following three options and click OK.
71
5 ) Go to Advanced > Restore advanced settings, click OK to save the settings.
• Use another web browser or computer to login again.

• Reset the router to factory default settings and try again. If login still fails, please
contact the technical support.
Note: You’ll need to reconfigure the router to surf the Internet once the router is reset.
72
Q4. What can I do if I cannot access the Internet even though the
configuration is finished?
2. Go to Advanced > Status to check Internet status:
As the follow picture shows, if IP Address is a valid one, please try the methods below
and try again:
• Your computer might not recognize any DNS server addresses. Please manually
configure the DNS server.
1 ) Go to Advanced > Network > DHCP Server.
2 ) Enter 8.8.8.8 as Primary DNS, click Save.
Tips: 8.8.8.8 is a safe and public DNS server operated by Google.
73
• Restart the modem and the router.
1 ) Power off your modem and router, and leave them off for 1 minute.
2 ) Power on your modem first, and wait about 2 minutes until it gets a solid cable
or Internet light.
3 ) Power on the router.
4 ) Wait another 1 or 2 minutes and check the Internet access.
• Reset the router to factory default settings and reconfigure the router.
• Upgrade the firmware of the router.
• Check the TCP/IP settings on the particular device if all other devices can get Internet
from the router.
As the picture below shows, if the IP Address is 0.0.0.0, please try the methods below
and try again:
• Make sure the physical connection between the router and the modem is proper.
• Clone the MAC address of your computer.
the router.
2 ) Go to Advanced > Network > Internet and focus on the MAC Clone section.
3 ) Choose an option as needed (enter the MAC address if Use Custom MAC
Address is selected), and click Save.
74
Tips:
• Some ISP will register the MAC address of your computer when you access the Internet for the first time
through their Cable modem, if you add a router into your network to share your Internet connection, the ISP will
not accept it as the MAC address is changed, so we need to clone your computer’s MAC address to the router.
• The MAC addresses of a computer in wired connection and wireless connection are different.
• Modify the LAN IP address of the router.

Note:
Most TP-LINK routers use 192.168.0.1/192.168.1.1 as their default LAN IP address, which may conflict with the IP
range of your existing ADSL modem/router. If so, the router is not able to communicate with your modem and you
can’t access the Internet. To resolve this problem, we need to change the LAN IP address of the router to avoid
such conflict, for example, 192.168.2.1.
the router.
2 ) Go to Advanced > Network > LAN.
3 ) Modify the LAN IP address as the follow picture shows. Here we take 192.168.2.1
as an example.
4 ) Click Save.
• Restart the modem and the router.

1 ) Power off your modem and router, and leave them off for 1 minute.
2 ) Power on your modem first, and wait about 2 minutes until it get a solid cable
or Internet light.
3 ) Power on the router.
4 ) Wait another 1 or 2 minutes and check the Internet access.
• Double check the Internet Connection Type.
75
1 ) Confirm your Internet Connection Type, which can be learned from the ISP.
the router.
3 ) Go to Advanced > Network > Internet.
4 ) Select your Internet Connection Type and fill in other parameters.
5 ) Click Save.
6 ) Restart the modem and the router again.

• Please upgrade the firmware of the router.
If you’ve tried every method above but still cannot access the Internet, please contact
the technical support.
Q5. What can I do if I cannot find my wireless network or I cannot connect

the wireless network?
If you fail to find any wireless network, please follow the steps below:
• Make sure the wireless function of your device is enabled if you’re using a laptop with
built-in wireless adapter. You can refer to the relevant document or contact the laptop
manufacturer.
• Make sure the wireless adapter driver is installed successfully and the wireless
adapter is enabled.
• On Windows 7
1 ) If you see the message No connections are available, it is usually because the
wireless function is disabled or blocked somehow.
76
2 ) Click Troubleshoot and windows might be able to fix the problem by itself.
• On Windows XP
1 ) If you see the message Windows cannot configure this wireless connection,
this is usually because windows configuration utility is disabled or you are
running another wireless configuration tool to connect the wireless.
2 ) Exit the wireless configuration tool (the TP-LINK Utility, for example).
3 ) Select and right click on My Computer on desktop, select Manage to open
Computer Management window.
4 ) Expand Services and Applications > Services, find and locate Wireless Zero
Configuration in the Services list on the right side.
5 ) Right click Wireless Zero Configuration, and then select Properties.
6 ) Change Startup type to Automatic, click on Start button and make sure the
Service status is Started. And then click OK.
If you can find other wireless network except your own, please follow the steps below:
• Check the WLAN LED indicator on your wireless router/modem.
• Make sure your computer/device is still in the range of your router/modem. Move it
closer if it is currently too far away.
• Go to Advanced > Wireless > Wireless Settings, and check the wireless settings.
Double check your Wireless Network Name and SSID is not hided.
If you can find your wireless network but fail to connect, please follow the steps below:
• Authenticating problem/password mismatch:
77
1 ) Sometimes you will be asked to type in a PIN number when you connect to
the wireless network for the first time. This PIN number is different from the
Wireless Password/Network Security Key, usually you can only find it on the
label of your router.
2 ) If you cannot find the PIN or PIN failed, you may choose Connecting using a
security key instead, and then type in the Wireless Password/Network Security
Key.
3 ) If it continues to show note of Network Security Key Mismatch, it is suggested
to confirm the wireless password of your wireless router.
Note: Wireless Password/Network Security Key is case sensitive.
• Windows unable to connect to XXXX / Can not join this network / Taking longer than
usual to connect to this network:
• Check the wireless signal strength of your network. If it is weak (1~3 bars),
please move the router closer and try again.
• Change the wireless Channel of the router to 1,6,or 11 to reduce interference
from other networks.
• Re-install or update the driver for your wireless adapter of the computer.
78
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark
of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks
or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used
to make any derivative such as translation, transformation, or adaptation without
permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2016 TP-LINK
TECHNOLOGIES CO., LTD. All rights reserved.
79
FCC STATEMENT
This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the
user is encouraged to try to correct the interference by one or more of the following
measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
• Consult the dealer or an experienced radio/ TV technician for help.
This device complies with part 15 of the FCC Rules. Operation is subject to the following
two conditions:
1. This device may not cause harmful interference.
2. This device must accept any interference received, including interference that may
cause undesired operation.
Any changes or modifications not expressly approved by the party responsible for
compliance could void the user’s authority to operate the equipment.
Note: The manufacturer is not responsible for any radio or TV interference caused by
unauthorized modifications to this equipment. Such modifications could void the user’s
authority to operate the equipment.
FCC RF Radiation Exposure Statement

This equipment complies with FCC RF radiation exposure limits set forth for an
uncontrolled environment. This device and its antenna must not be co-located or
operating in conjunction with any other antenna or transmitter.
“To comply with FCC RF exposure compliance requirements, this grant is applicable to
only Mobile Configurations. The antennas used for this transmitter must be installed to
provide a separation distance of at least 31 cm from all persons and must not be co-
located or operating in conjunction with any other antenna or transmitter.”
The device is restricted in indoor environment only.
80
CE Mark Warning
This is a class B product. In a domestic environment, this product may cause radio
interference, in which case the user may be required to take adequate measures.
RF Exposure Information
This device meets the EU requirements (1999/5/EC Article 3.1a) on the limitation of
exposure of the general public to electromagnetic fields by way of health protection.
The device complies with RF specifications when the device used at 20 cm from your
body.
Restricted to indoor use.
Canadian Compliance Statement

This device complies with Industry Canada license-exempt RSS standard(s). Operation
is subject to the following two conditions:
1. This device may not cause interference, and
2. This device must accept any interference, including interference that may cause
undesired operation of the device.
Le présent appareil est conforme aux CNR d’Industrie Canada applicables aux appareils
radio exempts de licence. L’exploitation est autorisée aux deux conditions suivantes :
1. l’appareil ne doit pas produire de brouillage;
2. l’utilisateur de l’appareil doit accepter tout brouillage radioélectrique subi, meme si le
brouillage est susceptible d’en compromettre le fonctionnement
Radiation Exposure Statement:

This equipment complies with IC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance
30cm between the radiator & your body.
Déclaration d’exposition aux radiations:

Cet équipement est conforme aux limites d’exposition aux rayonnements IC établies
pour un environnement non contrôlé. Cet équipement doit être installé et utilisé avec
un minimum de 30 cm de distance entre la source de rayonnement et votre corps.
Industry Canada Statement

CAN ICES-3 (B)/NMB-3(B)
Korea Warning Statements:

당해 무선설비는 운용중 전파혼신 가능성이 있음.
81
NCC Notice & BSMI Notice:
注意！
依據低功率電波輻射性電機管理辦法
第十二條經型式認證合格之低功率射頻電機，非經許可，公司、商號或使用者均不得擅
自變更頻率、加大功率或變更原設計之特性或功能。
第十四條低功率射頻電機之使用不得影響飛航安全及干擾合法通行；經發現有干擾現象
時，應立即停用，並改善至無干擾時方得繼續使用。前項合法通信，指依電信規定作業
之無線電信。低功率射頻電機需忍受合法通信或工業、科學以及醫療用電波輻射性電機
設備之干擾。
電磁波曝露量MPE 標準值1mW/cm²，本產品使用時建議應距離人體：20 cm。
安全諮詢及注意事項
• 請使用原裝電源供應器或只能按照本產品注明的電源類型使用本產品。
• 清潔本產品之前請先拔掉電源線。請勿使用液體、噴霧清潔劑或濕布進行清潔。
• 注意防潮，請勿將水或其他液體潑灑到本產品上。
• 插槽與開口供通風使用，以確保本產品的操作可靠並防止過熱，請勿堵塞或覆蓋
開口。
• 請勿將本產品置放於靠近熱源的地方。除非有正常的通風，否則不可放在密閉位
置中。
• 請不要私自打開機殼，不要嘗試自行維修本產品，請由授權的專業人士進行此項
工作。
Продукт сертифіковано згідно с правилами системи УкрСЕПРО на відповідність

вимогам нормативних документів та вимогам, що передбачені чинними
законодавчими актами України.
Safety Information
• When product has power button, the power button is one of the way to shut off the
product; when there is no power button, the only way to completely shut off power is
to disconnect the product or the power adapter from the power source.
• Don’t disassemble the product, or make repairs yourself. You run the risk of electric
shock and voiding the limited warranty. If you need service, please contact us.
• Avoid water and wet locations.
• Adapter shall be installed near the equipment and shall be easily accessible.
82
• The plug considered as disconnect device of adapter.
• Use only power supplies which are provided by manufacturer and in the original
packing of this product. If you have any questions, please don’t hesitate to contact us.
Explanations of the symbols on the product label

Symbol Explanation
DC voltage
RECYCLING
This product bears the selective sorting symbol for Waste electrical and electronic equipment
(WEEE). This means that this product must be handled pursuant to European directive 2012/19/
EU in order to be recycled or dismantled to minimize its impact on the environment.
User has the choice to give his product to a competent recycling organization or to the retailer
when he buys a new electrical or electronic equipment.
83

TL-WR1043N - V5 - User Guide PDF

Uploaded by

Copyright:

Available Formats

TL-WR1043N - V5 - User Guide PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

TL-WR1043N - V5 - User Guide PDF

Uploaded by

Copyright:

Available Formats

User Guide

450Mbps Wireless N Gigabit Router

Chapter 1. Get to Know About Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Chapter 2. Connect the Hardware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Chapter 3. Log in to Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Chapter 4. Set Up Internet Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

Chapter 5. Guest Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

Chapter 6. Parental Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Chapter 8. Network Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Chapter 9. NAT Forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Chapter 10. Customize Your Network Settings . . . . . . . . . . . . . . . . . . . . . . . 44

Chapter 11. Manage the Router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

• Click to edit the corresponding entry.

Symbols on the web • Click to delete the corresponding entry.

• Click to view more information about items on the page.

Get to Know About Your

1. 2. 1. The Front Panel

The system is initializing or the firmware is being upgraded. Do not

Off Power is off.

Blue On The Internet is available.

The router’s Internet port is connected, but the Internet is not

Off The router’s Internet port is not connected.

On The corresponding Ethernet port is connected.

Turns on when WPS connection is established, and goes off about

1. 2. 2. The Back Panel

Internet Port For connecting to the DSL/Cable modem, or an Ethernet.

Connect the Hardware

This chapter contains the following sections:

2. 2. Connect Your Router

Power adapter Modem

Power Wi-Fi Internet

6. Connect your computer to the router.

Computer Smart Device

Wireless Network Connection Wi-Fi

Connect automatically Connect TP-LINK_XXXX

• Method 3: Use the WPS button

Log in to Your Router

Set Up Internet Connection

Follow the steps below to set up your router.

4. 2. Manually Set up Your Internet Connection

4. 3. Set Up an IPv6 Internet Connection

2 ) Dynamic IP(SLAAC/DHCPv6): Click Advanced to input further information if

4 ) 6to4 Tunnel: An IPv4 Internet connection type is a prerequisite for this

5. 2. Customize Guest Network Options

7. Click . Enter a website and click Save.

I want to: Specify priority levels for some devices or applications.

How can I 1. Enable QoS and set bandwidth allocation.

2. Add a middle priority QoS rule for the phone.

3 ) Choose the respective device from the list.

3. Refer to the steps above to apply other QoS rules if any.

3. Enable DoS Protection.

4. Select the access mode to either block (recommended) or

2 ) Select the device(s) to be blocked in the Online Devices

To allow specific device(s)

2 ) Click Add in the Devices in Whitelist section. Enter the

8. 3. IP & MAC Binding

4. Bind your device(s) according to your need.

2 ) Enter the MAC address and IP address that you want to

9. 2. Share Local Resources on the Internet by Virtual